topic Re: Quantum Smart-1 Appliances Refresh: 600-S/600-M/6000-L/6000-XL in Firewall and Security Management

Quantum Smart-1 Appliances Refresh: 600-S/600-M/6000-L/6000-XL

PhoneBoy — Tue, 13 Apr 2021 21:44:39 GMT

Today, we announced new additions to our Quantum Smart-1 appliances line.
Continuing the refresh started in February by launching the high-end models: 6000-L & 6000-XL
Today we are announcing the Enterprise models: 600-S and 600-M

The new Quantum appliances are introducing up to 70% in all major logs KPIs, and together with R81 capabilities it will provide our customers a fast management platform

That will allow them a better respond to cyber-attacks and it will reduce their operational costs.

Smart-1 600-S is the successor for Smart-1 405/410
Smart-1 600-M is renaming of the existing Smart-1 625
Smart-1 6000-L is the successor of Smart-1 5050
Smart-1 6000-XL is the successor of Smart-1 5150

Customers have the flexibility to grow based on their needs by upgrading from Base to Plus configuration which will double the amount of managed gateways.

Software version:
The appliances are installed with R81 out of the box
Soon we will release support for R80.40

Old Platforms (405/410/625/5050/5150) support
End of sales will be September 2021.
End of support (based on Check Point life cycle policy) will be September 2026

Detailed Specs

Model	600-S	600-M	6000-L	6000-XL
Peak Indexed logs	15,000	21,000	40,000 logs/sec	67,500 logs/sec
Managed Gateways (Base/Plus)	5/10	25/50	75/150	200/400
Memory (RAM)	16/32GB	32/64GB	96/192GB	192/384GB
Storage	2TB HDD	8TB HDD	Up to 48TB HDD	Up to 48TB SSD
Form Factor	1U	1U	2U	2U

More details: https://www.checkpoint.com/products/security-management-appliances/

Re: Quantum Smart-1 Appliances Refresh: 600-S/600-M/6000-L/6000-XL

Gary_Scott — Tue, 11 May 2021 00:28:50 GMT

I have a new smart-1 6000L that we need to have R80.40 installed on, I see there a .iso for 80.40 and this model but using the current isomorphic tool there is no option to install on this specific model, trying the Smart-1 options 4 or 5 it just sets and never installs. Thought of going the DVD USB install route but see this is not supported on these models. Any guidance on getting 80.40 on this model would be greatly appreciated. Thanks,

Re: Quantum Smart-1 Appliances Refresh: 600-S/600-M/6000-L/6000-XL

PhoneBoy — Tue, 11 May 2021 02:27:58 GMT

Try to use the R80.40 blink image, which can be installed from R81.
You can also install R80.40 from CPUSE via the Gaia WebUI.

Re: Quantum Smart-1 Appliances Refresh: 600-S/600-M/6000-L/6000-XL

Gary_Scott — Thu, 13 May 2021 04:23:32 GMT

Thanks for the input but we seem to have got stuck between a rock and a hard place. In the attempt to re-image with R80.40 using isomorphic build 181 the two options for smart-1 were attempted, now when booting we get "booting from hard drive C: no boot device available". Tried again with the R81 .iso and isomorphic but got the same results seen with R80.40 when attempting to install leaving us unable to re-image to 81 or 80.40. We have a TAC case open and will post the outcome.

Re: Quantum Smart-1 Appliances Refresh: 600-S/600-M/6000-L/6000-XL

Guy_Israeli — Sat, 15 May 2021 17:15:36 GMT

Hi Gary

Did you tried the latest Isomorphic build? It might be the issue.

If nothing is shown, you are probably connected through VGA, but option 4 & 5 are meant to install from console.

Hope this can help.

Thanks, Guy

Re: Quantum Smart-1 Appliances Refresh: 600-S/600-M/6000-L/6000-XL

Sayers_SE — Sun, 16 May 2021 00:02:51 GMT

This was done thru the console and the 12 isomorphic options are shown, none of them show the smart-1-600/6000 devices, selecting option 4 or 5 it would just sit there and do nothing, now the appliance will not boot at all and we have no way to re-image it to R80.40 or R81.

Re: Quantum Smart-1 Appliances Refresh: 600-S/600-M/6000-L/6000-XL

PhoneBoy — Sun, 16 May 2021 05:06:41 GMT

Recommend a TAC case here

Re: Quantum Smart-1 Appliances Refresh: 600-S/600-M/6000-L/6000-XL

genisis__ — Sun, 16 May 2021 15:44:05 GMT

Not sure there is iDRAC with these models, but you could try build via this, if Checkpoint allow this?

Re: Quantum Smart-1 Appliances Refresh: 600-S/600-M/6000-L/6000-XL

Gary_Scott — Tue, 18 May 2021 14:10:50 GMT

A new isomorphic tool build 187 was released today which includes the new smart-1 appliances.

Re: Quantum Smart-1 Appliances Refresh: 600-S/600-M/6000-L/6000-XL

genisis__ — Tue, 18 May 2021 20:39:45 GMT

Other then the adding supported for new devices are there any other improvements? I could not see any release notes.

Re: Quantum Smart-1 Appliances Refresh: 600-S/600-M/6000-L/6000-XL

PhoneBoy — Tue, 18 May 2021 20:57:40 GMT

I assume that's the main enhancement unless there is anything new listed in the SK.

Re: Quantum Smart-1 Appliances Refresh: 600-S/600-M/6000-L/6000-XL

Gary_Scott — Tue, 18 May 2021 21:07:11 GMT

My assumptions too, the new 600/6000's are shown now in isomorphic and we will be testing this tonight on a 6000L.

genisis__ To answer the iDRAC install possibility, one known limitation, "Gaia ISO install via IDRAC LOM is not supported".

Re: Quantum Smart-1 Appliances Refresh: 600-S/600-M/6000-L/6000-XL

genisis__ — Wed, 19 May 2021 01:46:25 GMT

Not supported and functionally possible are two different things 😉

I have done R81 builds via iDRAC using Dell "OpenServers" and it works fine. There is a way to get high lever access to the iDRAC on Checkpoint appliances, but this was tested on v4.40 of the firmware, not really looked at since it went up to v4.40.10 and I have never attempted doing a build via iDRAC on an appliance.

I think iDRAC function should be fully in-place, so that underlining firmware can be updated and useful things like rebuilding a gateway that 200miles away is possible.

Re: Quantum Smart-1 Appliances Refresh: 600-S/600-M/6000-L/6000-XL

Guy_Israeli — Wed, 19 May 2021 05:41:02 GMT

We are working on a solution that will enable remote installation of the management appliance using iDRAC. We still don't have ETA for that

Re: Quantum Smart-1 Appliances Refresh: 600-S/600-M/6000-L/6000-XL

genisis__ — Wed, 19 May 2021 08:27:33 GMT

Guy,

As these appliances are basically Dell Servers can we not update the underlining firmware using the iDRAC. Example NIC firmware updates, BIOS for the appliance, RAID card etc.

Re: Quantum Smart-1 Appliances Refresh: 600-S/600-M/6000-L/6000-XL

Guy_Israeli — Wed, 19 May 2021 12:43:55 GMT

We are supporting with iDRAC only the functionality which is mentioned in sk122914

Re: Quantum Smart-1 Appliances Refresh: 600-S/600-M/6000-L/6000-XL

Gary_Scott — Mon, 07 Jun 2021 14:22:07 GMT

Has anyone with a smart-1 6000L been successful re-imaging the device with isomorphic to R80.40 or R81? We have had a TAC case open for over a month, it was decided that the device would be RMA'd and they would send a new one with R80.40 pre-installed, after receiving the new device the Mgmt port cannot be accessed using the IP 192.168.1.1, this is the same symptom we experienced on the old device after getting it to install R80.40 only by choosing open server as the device type, choosing the smart-1 6000L device type it would just sit and never install.

Re: Quantum Smart-1 Appliances Refresh: 600-S/600-M/6000-L/6000-XL

Guy_Israeli — Mon, 07 Jun 2021 14:49:58 GMT

@Gary_Scott

Hi Gary

Please write me offline to gisraeli@checkpoint.com

i want to better understand your flow and how to assist you.

Thanks, Guy

Re: Quantum Smart-1 Appliances Refresh: 600-S/600-M/6000-L/6000-XL

Paul_Warnagiris — Tue, 20 Jul 2021 14:48:54 GMT

I have this same exact problem. I boot to the USB and it says Booting from Hard drive C:. Then the machine is frozen. I'm using isomorphic build 187.

Re: Quantum Smart-1 Appliances Refresh: 600-S/600-M/6000-L/6000-XL

Sayers_SE — Tue, 20 Jul 2021 14:51:47 GMT

Hello Paul, are you using the monitor and keyboard connections on the device or the console cable? It is required to only use the console cable.