topic Re: 3100 SECURITY GATEWAY - Boot Problem in Firewall and Security Management

3100 SECURITY GATEWAY - Boot Problem

Cyrus — Fri, 30 Dec 2022 14:20:37 GMT

Hello,

I do have a 3100 SECURITY GATEWAY as Test Device, and it has booting Problem, I can't even reach the bios.

Alert LED is on (not blinking, only ON).

I've tried to factory reset, but it didn't work.

Please let me know, how to resolve this issue.

Re: 3100 SECURITY GATEWAY - Boot Problem

the_rock — Fri, 30 Dec 2022 14:30:49 GMT

Can you try process from below link?

https://downloads.checkpoint.com/fileserver/SOURCE/direct/ID/45742/FILE/CP_3000_Appliances_GettingStartedGuide.pdf

Page 30...I know sometimes you need to hold reset button for at least 15 seconds, maybe even 30.

Andy

Re: 3100 SECURITY GATEWAY - Boot Problem

Cyrus — Fri, 30 Dec 2022 15:47:05 GMT

@the_rockThank you for response.

It didn't work, I think the bios is dead!, I thought it should be dual bios.

Is there any other idea to reprogram or change the bios ?

Re: 3100 SECURITY GATEWAY - Boot Problem

the_rock — Fri, 30 Dec 2022 16:06:10 GMT

Not sure thats possible, maybe @PhoneBoy can confirm.

Re: 3100 SECURITY GATEWAY - Boot Problem

PhoneBoy — Fri, 30 Dec 2022 16:15:14 GMT

Your only option in this case is an RMA with TAC.

Re: 3100 SECURITY GATEWAY - Boot Problem

the_rock — Fri, 30 Dec 2022 16:27:44 GMT

So you cant get to BIOS at all, no matter what you do?

Re: 3100 SECURITY GATEWAY - Boot Problem

Cyrus — Fri, 30 Dec 2022 16:31:11 GMT

I'm not sure if it's possible, because I opened the box 😂, and now it's probably out of warranty or support

please don't ask why I opened the door, I was just curious 8)🤣

Re: 3100 SECURITY GATEWAY - Boot Problem

the_rock — Fri, 30 Dec 2022 16:32:39 GMT

HAHAHA...well, even if we ask, it wont make slighest difference lol

Re: 3100 SECURITY GATEWAY - Boot Problem

Cyrus — Fri, 30 Dec 2022 16:32:57 GMT

Exactly.

Re: 3100 SECURITY GATEWAY - Boot Problem

the_rock — Fri, 30 Dec 2022 16:37:29 GMT

Ok, in all seriousness, joking aside now...if the box is put back together and turned on, does it even give a menu or prompt to interrupt the boot up sequence? Can you take a screenshot of what you get and post it here? Lets see if we can help you more. I do know BIOS password, but if you cant get to it, then it wont be useful, so thats what we need to try fix first.

Andy

Re: 3100 SECURITY GATEWAY - Boot Problem

PhoneBoy — Fri, 30 Dec 2022 16:41:02 GMT

BIOS upgrades can only be done from a system that is capable of booting.
You cannot access the BIOS without TAC assistance.

Re: 3100 SECURITY GATEWAY - Boot Problem

Cyrus — Fri, 30 Dec 2022 16:51:40 GMT

No, it doesn't give a menu or prompt.

I tried even with both console port

As I read, checkpoint is a Software company, that means for me, the checkpoint hardware is just a normal PCB with normal hardware, just like a normal pc.

I think maybe it's possible to change or reprogram the bios if I can find it.

Re: 3100 SECURITY GATEWAY - Boot Problem

PhoneBoy — Fri, 30 Dec 2022 18:48:29 GMT

While Check Point is, in fact, a software company, all Check Point-branded appliances are purpose-built with custom BIOS.
The only way you can upgrade the BIOS is through RMA.

Re: 3100 SECURITY GATEWAY - Boot Problem

Bob_Zimmerman — Fri, 30 Dec 2022 20:02:52 GMT

The 3100 and 3200 use Intel Atom C2000-series system-on-chip processors, which are subject to a hardware bug called AVR54. As data is transferred over the low-pin-count bus which connects the SoC to the boot ROM, the processor side of the bus link degrades. Eventually, the SoC can no longer get its boot firmware from the boot ROM, which renders the system unbootable. That may be what happened here.

Not sure which processor the 3100 has. Pretty sure the 3200 uses the C2558. 3600 is a C3558, and 3800 is a C3758. Interestingly, all the Atom C2000 and C3000 SoCs support ECC memory. Check Point's 1U boxes (4000, 5000, and 6000 series) mostly use consumer-grade processors from Intel (Core i family). Intel holds ECC-capable memory controllers back for their server-grade processors as a market segmentation strategy. With ECC memory, the 3600 and 3800 would be substantially more reliable than the bigger boxes with consumer-grade processors.

As for reprogramming the BIOS, if the TAC isn't able to help you out, it's definitely possible at a technical level. The boot ROMs are between the SATA connector and the drive power socket in a patch of the board with the silkscreen labels "BIOS 0" and "BIOS 1". They have small dots of paint on the pin indexes. With a set of SOIC jaws and an EEPROM programmer (such as a TL866II Plus), you should be able to dump their contents and write new contents to them. If the SoC has fallen victim to AVR54, though, that won't help.

If this is a box for business use, I would strongly recommend replacing it with a 3600 or 3800.

Re: 3100 SECURITY GATEWAY - Boot Problem

G_W_Albrecht — Sat, 31 Dec 2022 13:01:41 GMT

That should be not an issue for RMA (especially if you tell none ;-), so i would go for a replacement ! No console output on boot looks like DOA...

Re: 3100 SECURITY GATEWAY - Boot Problem

the_rock — Sat, 31 Dec 2022 13:05:19 GMT

Though, I would not tell the part about opening the box : - )

Re: 3100 SECURITY GATEWAY - Boot Problem

G_W_Albrecht — Sat, 31 Dec 2022 13:27:06 GMT

I wrote: That should be not an issue for RMA (especially if you tell none 😉

Re: 3100 SECURITY GATEWAY - Boot Problem

the_rock — Sat, 31 Dec 2022 14:22:54 GMT

Keep us posted @Cyrus how it goes.

Happy New Year!

Re: 3100 SECURITY GATEWAY - Boot Problem

_Val_ — Tue, 03 Jan 2023 07:47:01 GMT

Please open a ticket with TAC