topic Re: Firewall Checkpoint L50 won't start in Spark Firewall (SMB)

Firewall Checkpoint L50 won't start

danieledebernar — Mon, 12 Aug 2024 14:39:59 GMT

I reset the firewall to factory settings but it won't boot up properly and it doesn't show up in network resources or even its IP address. How can I solve this?

Re: Firewall Checkpoint L50 won't start

Chris_Atkinson — Mon, 12 Aug 2024 23:23:54 GMT

Why was the device reset, was it not functioning correctly prior?

Have you attempted to access the device serial console?

Alternatively imaging the appliance via USB could be an option if you have the necessary files / entitlements.

Note 600 / 1100 series devices are no longer supported.

Re: Firewall Checkpoint L50 won't start

the_rock — Mon, 12 Aug 2024 15:21:29 GMT

Do you have console to it? If so, you can try hard reset it.

Andy

Re: Firewall Checkpoint L50 won't start

danieledebernar — Mon, 12 Aug 2024 15:29:41 GMT

I don't have the usb console cable and adapter to see it how can I get around it?

Re: Firewall Checkpoint L50 won't start

the_rock — Mon, 12 Aug 2024 15:36:28 GMT

Do you have usb to RJ45 cable? Thats console cable...I always use one they gave me at Fortinet conference ages ago and works 100% of the time.

Andy

Like one below:

https://www.amazon.ca/Compatible-Console-FTDI-RJ45-Windows/dp/B07BK6P67K/ref=sr_1_5?crid=1BNLKXEOBVWU7&dib=eyJ2IjoiMSJ9.Yig7naANq3zL_oZe8F6aMthrmB8f5RgjUPdRr_vk8DQGo5Y4X5Ig2puvZhH51rwaBObHiP8xo2c9Avp33vYXF8TPpXbTzGZZcj6jps-37ZqzB20gpI1iTBrNm5t2uIQKmLvxFScNL_EFHYH96T0VLotQfyPOah3Eaz07omztk3_R1xAdSYWq2tbu_yHrsuTbtYxE0bjH57l70NtNlpj9Jw5FD_4Q42ATdkDeCzGMIMy5YBJaNigrkS9VygMpfrC3FSQo1IJB5LHeoQzPs4XW_jNO3RKiBbnKqudCR9mhuPw.AOlSqbcQhlUu952FegXdvkJf43r0fKv9ZNiHouZKKKs&dib_tag=se&keywords=usb%2Bto%2Bethernet%2Bconsole%2Bcable&qid=1723476951&sprefix=usb%2Bto%2Bethernet%2Bconsole%2Bcabl%2Caps%2C176&sr=8-5&th=1

Re: Firewall Checkpoint L50 won't start

Lesley — Mon, 12 Aug 2024 15:43:43 GMT

Able to connect with default IP?

Identity the network interface marked as LAN1. This
interface is preconfigured with the IP address 192.168.1.1.

Re: Firewall Checkpoint L50 won't start

danieledebernar — Mon, 12 Aug 2024 16:12:27 GMT

what software should I use? or do I go SSH with Putty?

Re: Firewall Checkpoint L50 won't start

danieledebernar — Mon, 12 Aug 2024 16:14:40 GMT

This is situation with led Firewall.

Re: Firewall Checkpoint L50 won't start

Alex- — Mon, 12 Aug 2024 16:14:52 GMT

@Lesley is correct, if you factory reset, you can connect to LAN1 and get a DHCP IP.

From there, connect to https://192.168.1.1:4434

Re: Firewall Checkpoint L50 won't start

the_rock — Mon, 12 Aug 2024 16:32:42 GMT

You open putty, select serial and then go to control panel, check device manager and verify what COM its using.

Andy

Or, as @Alex- suggested, configure your laptop to use any IP from 192.168.1.0/24 subnet, leave D as blank and it should connect to https://192.168.1.1:4434

But again, if NOT, then console is your only option, sorry mate.

Re: Firewall Checkpoint L50 won't start

PhoneBoy — Mon, 12 Aug 2024 22:18:01 GMT

There is a bug in older firmware that prevents the device from starting after a factory reset.
The only way to recover from this is upgrading to the latest firmware vua USB.

Please download the latest firmware from here (I believe the L50 is a 700 series): https://support.checkpoint.com/results/sk/sk137212#Downloads
Install via a FAT32 USB drive per: https://support.checkpoint.com/results/sk/sk107592

Re: Firewall Checkpoint L50 won't start

G_W_Albrecht — Tue, 13 Aug 2024 09:32:38 GMT

And this box still has support and services ? Looks like an old 600, long gone 8)

Re: Firewall Checkpoint L50 won't start

danieledebernar — Tue, 13 Aug 2024 08:59:06 GMT

This is situation I cannot check via console yet whether the firmware update was successful.

Re: Firewall Checkpoint L50 won't start

emmap — Tue, 13 Aug 2024 09:28:48 GMT

It's a 600, so this is the latest.

https://support.checkpoint.com/results/sk/sk123294

Re: Firewall Checkpoint L50 won't start

danieledebernar — Tue, 13 Aug 2024 09:55:56 GMT

I'm waiting for the console cable to arrive and then I want to figure out with what software can I check it for errors?

Re: Firewall Checkpoint L50 won't start

G_W_Albrecht — Tue, 13 Aug 2024 10:17:45 GMT

First check the license - you only have Firewall, IPSec VPN, QoS and Identity Awareness as unlimited blades, you will need a contract for TP, IPS & co.

Re: Firewall Checkpoint L50 won't start

danieledebernar — Tue, 13 Aug 2024 10:35:18 GMT

I have no license as the firewall was used by another colleague so it is free I think it is limited

Re: Firewall Checkpoint L50 won't start

G_W_Albrecht — Tue, 13 Aug 2024 11:43:17 GMT

So how do you plan to use it ? IPS / TP mostly is the important part, without you have only features from e.g. iptables.

Re: Firewall Checkpoint L50 won't start

danieledebernar — Tue, 13 Aug 2024 11:57:41 GMT

I just want to administer it and manage it as iptables and filtering mode nothing more but if I can't get into it, I'm asking what software do I get into management with?

Re: Firewall Checkpoint L50 won't start

G_W_Albrecht — Tue, 13 Aug 2024 11:59:01 GMT

WinSCP + Putty