topic Re: Any way to update routed version on CP firewall? in Firewall and Security Management

Any way to update routed version on CP firewall?

the_rock — Thu, 26 Oct 2023 19:11:04 GMT

Hey guys,

I know this may sound like a silly question, but I cant find a command to update routed version on the customer's firewall. Mine shows 8 at the end, but their's shows 4, so not sure if it can be updated manually?

Thanks for the help and remember...ALWAYS be nice to one another!

Andy

Their fw:

FW-1> show routed version

Routed version : 997000004
Started at : Mon Oct 23 04:26:59 EDT 2023
Current time : Thu Oct 26 15:01:30 EDT 2023
Up time : 3 days 10 hrs 34 mins 31 secs

My lab:

CP-FW-01> show routed version

Routed version : 997000008
Started at : Wed Oct 25 12:32:09 EDT 2023
Current time : Thu Oct 26 15:02:04 EDT 2023
Up time : 1 day 2 hrs 29 mins 54 secs

Re: Any way to update routed version on CP firewall?

Bob_Zimmerman — Thu, 26 Oct 2023 20:29:25 GMT

Install a jumbo? All my R81.20 jumbo 24 systems say 997000004, and jumbo 26 systems say 997000005. With your comments recently about jumbo 38 in your lab, I assume its routed version is 997000008.

Re: Any way to update routed version on CP firewall?

the_rock — Thu, 26 Oct 2023 20:38:59 GMT

I think thats definitely one way Bob, but I was hoping there was a command to manually update it? Not sure if it exists...

Andy

Re: Any way to update routed version on CP firewall?

Bob_Zimmerman — Thu, 26 Oct 2023 21:02:42 GMT

If it were supported to do piecemeal, we would probably use 'yum upgrade -y' instead of installing jumbos via CPUSE. 😉

Might be possible to get a one-off hotfix to update just routed. I suspect CFG would push back and recommend installing the whole jumbo instead.

Re: Any way to update routed version on CP firewall?

the_rock — Thu, 26 Oct 2023 21:06:39 GMT

Lets see what they say 😉

Re: Any way to update routed version on CP firewall?

PhoneBoy — Thu, 26 Oct 2023 21:12:38 GMT

routed can only be updated via a hotfix, my friend.

Re: Any way to update routed version on CP firewall?

the_rock — Thu, 26 Oct 2023 21:25:34 GMT

Alright, fair enough. If true LEGEND says so, I believe it 🙂

Andy

Re: Any way to update routed version on CP firewall?

G_W_Albrecht — Wed, 08 Nov 2023 11:11:03 GMT

At least you can extract it from a Jumbo like done here:

\Check_Point_R81_10_JUMBO_HF_MAIN_Bundle_T128_FULL.tar\CheckPoint#SecurePlatform#All#6.0#5#3#HOTFIX_R81_10_JUMBO_HF_MAIN\SecurePlatform_HOTFIX_R81_10_JUMBO_HF_MAIN_GA_FULL.tgz\SecurePlatform_HOTFIX_R81_10_JUMBO_HF_MAIN_GA_FULL.tar\upg_all\RPMS\routed-0.1-cp996000018.i386.rpm.full

Delete the .full extension and you have the .rpm - and check:

# rpm -qip routed-0.1-cp996000018.i386.rpm
Name : routed Relocations: (not relocatable)
Version : 0.1 Vendor: Check Point
Release : cp996000018 Build Date: Wed Oct 4 13:24:26 2023
Install Date: (not installed) Build Host: 9696908_0_Docker
Group : System Environment/Base Source RPM: routed-0.1-cp996000018.src.rpm
Size : 20757747 License: Check Point
Signature : (none)
Summary : Routing Daemon
Description :
Routing daemon

Re: Any way to update routed version on CP firewall?

Chris_Atkinson — Wed, 08 Nov 2023 12:13:08 GMT

Appreciate the effort / intent but why risk an unsupported configuration versus just installing the jumbo?

Re: Any way to update routed version on CP firewall?

the_rock — Wed, 08 Nov 2023 12:36:20 GMT

I agree 100%, no point taking a risk, easier install the jumbo.

Regards,

Andy

Re: Any way to update routed version on CP firewall?

G_W_Albrecht — Wed, 08 Nov 2023 13:02:14 GMT

I would not use that - but it is possible, and the question was how to update routed version on the customer's firewall. JT install is clearly the better solution, of course... 8)