topic Re: Locally upgrade checkpoint 1530 in Spark Firewall (SMB)

Locally upgrade checkpoint 1530

Oliver_222 — Fri, 15 Dec 2023 09:35:35 GMT

Good afternoon
Could you please tell me if it is possible to update checkpoint 1530 locally via USB? We want to upgrade from R80.20.50 (992002773) to R81_10_08_996001683.
I would be grateful for information.

Re: Locally upgrade checkpoint 1530

G_W_Albrecht — Fri, 15 Dec 2023 09:42:58 GMT

https://sc1.checkpoint.com/documents/SMB_R81.10.X/CLI/EN/Content/Topics/upgrade-from-usb-or-tftp-server.htm

Re: Locally upgrade checkpoint 1530

PhoneBoy — Fri, 15 Dec 2023 18:42:39 GMT

In addition, you can copy the relevant .img file to a FAT32/vFAT formatted USB drive and cold-boot the device.
This will reflash the device with the desired firmware and factory reset the unit.
This is necessary to upgrade the "recovery" firmware in case of a future factory reset.
The various lights on the unit will blink in a pattern until the firmware is successfully loaded, then power cycle the unit.

However, for an in-place upgrade, the documentation @G_W_Albrecht linked to should work.

Re: Locally upgrade checkpoint 1530

Oliver_222 — Mon, 18 Dec 2023 06:59:55 GMT

Thanks for the explanation.
In my case there is no need to re-flash the checkpoint.
I will connect a USB stick and run the upgrade command (to R81.10.08) according to the documentation.
In case of any problems I can revert back to the previous (R80.20.50) version, right?

Re: Locally upgrade checkpoint 1530

G_W_Albrecht — Mon, 18 Dec 2023 08:13:26 GMT

Yes you can using revert to previous-image. But upgrading over CLI using USB has no merits in this case - you could just install it locally using webGUI and achieve the identical result in less time...

Re: Locally upgrade checkpoint 1530

Oliver_222 — Mon, 18 Dec 2023 08:21:08 GMT

We tried upgrading via WebUI, but unfortunately the upgrade failed. After rebooting the WebUI, the old version was displayed, and traffic stopped passing through the firewall (we did not see any user traffic logs).

Re: Locally upgrade checkpoint 1530

G_W_Albrecht — Mon, 18 Dec 2023 08:46:52 GMT

In that case, it makes sense to try the CLI while keeping the configuration.

Re: Locally upgrade checkpoint 1530

Oliver_222 — Wed, 21 Feb 2024 12:17:23 GMT

We upgraded to 81.10.08 from version 80.20.50 with command via USB:

upgrade from usb file fw1_vx_dep_R81_10_00_996000583.img

The upgrade file was taken here: https://support.checkpoint.com/results/download/130295
The update was successful (show software-version and the version in WebUi was 81.10.08), but after about 20-25 minutes CheckPoint rebooted itself and the version was 80.20.50 again.

Also tried to update to 81.10.00
The update file was taken here: https://support.checkpoint.com/results/download/126175
But the situation repeated exactly the same way (screenshot 1).

It remains a mystery to us why it happened like that
Could you please tell us if we have done something wrong?

Re: Locally upgrade checkpoint 1530

G_W_Albrecht — Wed, 21 Feb 2024 12:22:46 GMT

Usually you need a reboot after firmware upgrade - after that, either the new firmware version is shown or the unit boots with the old partition / firmware. To reboot, start with the new firmware version, but after 20min reboot again and return to old firmware is a behaviour i have never heard of or could explain anyway...

I would consult CP TAC, maybe there is a hardware error and RMA is needed!