topic 1500 device firmware upgrade in Spark Firewall (SMB)

1500 device firmware upgrade

Madmaks — Tue, 10 Dec 2024 14:38:31 GMT

Hi,

According to the document https://support.checkpoint.com/results/sk/sk182438 (SK179615), if you're managing a 1500 series device locally, you should use a special firmware, and if you're managing it centrally, you should use a different firmware. However, I don't quite understand how to upgrade with a .tar file if I’m using Central. Also, if one day I decide to switch from Central to local management, will I need to update the firmware again? Another question is, what firmware does the device come with when purchased initially?

How useful do you think it is to use different firmware? What has been your experience with this?

Regards,

Re: 1500 device firmware upgrade

Chris_Atkinson — Tue, 10 Dec 2024 15:11:46 GMT

The same firmware is used.

Actually the above table is talking to the files needed per upgrade method, not how the device is managed.

Re: 1500 device firmware upgrade

the_rock — Tue, 10 Dec 2024 15:20:37 GMT

Chris is absolutely correct. The table you showed shows type of files you need for the upgrade itself, not the type of smb management, if you will.

Andy

Re: 1500 device firmware upgrade

Madmaks — Tue, 10 Dec 2024 15:32:29 GMT

Yeah you are right, thanks for your help.

Re: 1500 device firmware upgrade

G_W_Albrecht — Tue, 10 Dec 2024 15:34:32 GMT

Chris has answered the error in question 1, so let me continue:

- if you have a handfull of SMBs centrally managed, you can just download the Local Installation Upgrrade file and install it in GAiA Embedded WebGUI. (So you test it on the first GW and then upgrade all)

- switching from centrally managed to locally managed is performed in GAiA Embedded WebGUI (then you delete all remains from Dashboard) and has nothing to do with firmware at all.

- initial firmware version differs according to production date, you will not open sealed packages again 😉

- best is to use the

Recommended Firmware

R81.10.10 Build 996002993

- then, configure the SMB, see if it is running correctly, and finally use CLI command to

update default-image from current-image preserve-settings yes force yes

Now you have a good backup firmware, too...