topic Re: Upgrade from R81.10.10 (996002993) to R81.10.17 (996004653) fails on SMB in Spark Firewall (SMB)

Upgrade from R81.10.10 (996002993) to R81.10.17 (996004653) fails on SMB

marcinw — Fri, 05 Sep 2025 08:52:03 GMT

I am trying to upgrade firewalls 1550 from r81.10.10 to r81.10.17 but it's only successful on 50% of them.

The entire upgrading process goes well, no errors, however after rebooting firewall gets hang.

Power off/on resolves the problem but device is back on old firmware r81.10.10

I know that there was issue with r81.10.15 when IOC feed had to be stopped before upgrading, I tried that , no luck.

Does anyone come across similar issue ?

thanks

Re: Upgrade from R81.10.10 (996002993) to R81.10.17 (996004653) fails on SMB

the_rock — Fri, 05 Sep 2025 15:40:29 GMT

I would definitely open TAC case for this.

Andy

Re: Upgrade from R81.10.10 (996002993) to R81.10.17 (996004653) fails on SMB

garrod — Fri, 05 Sep 2025 17:46:51 GMT

mind to share how long does the firewall uptime? have you retry multiple time after that?, high utilise appliance might come to this issue as well

Re: Upgrade from R81.10.10 (996002993) to R81.10.17 (996004653) fails on SMB

Alex- — Fri, 05 Sep 2025 17:58:25 GMT

A while ago, there was an issue where this could happen with the R80.20.X releases on the x0 series, if the DMZ interface din't have an IP. I remembered having to put a dummy IP on the DMZ interface, which was unused, and upgrades were then successful.

Re: Upgrade from R81.10.10 (996002993) to R81.10.17 (996004653) fails on SMB

Amir_Ayalon — Sun, 07 Sep 2025 06:47:18 GMT

could be partition problem, or eMMC full

I suggest you run Dr.Spark, and if you don't see any obvious reason, send us the details.

ohadp@checkpoint.com amiray@checkpoint.com

Thanks

Re: Upgrade from R81.10.10 (996002993) to R81.10.17 (996004653) fails on SMB

the_rock — Sun, 07 Sep 2025 19:13:31 GMT

Hey @marcinw

Any luck with this?

Andy

Re: Upgrade from R81.10.10 (996002993) to R81.10.17 (996004653) fails on SMB

marcinw — Mon, 08 Sep 2025 08:44:55 GMT

hi Amir

I have tried on Friday this is what I see :

After installation r81.10.17 2993 VPN doesn't come up however I can ssh/https to the firewall on external interface, for the next 20 minutes I see firewall in Smart-1 as connected and next it goes status red.

I can't run Spark I get below message I also "show diag" result

Re: Upgrade from R81.10.10 (996002993) to R81.10.17 (996004653) fails on SMB

G_W_Albrecht — Mon, 08 Sep 2025 09:05:21 GMT

I would try to use console port for recording the putty output from updating firmware using CLI. Usually, new firmware is discarded at the end of the installation process with an error, and after reboot you find the former version booting.

Re: Upgrade from R81.10.10 (996002993) to R81.10.17 (996004653) fails on SMB

marcinw — Mon, 08 Sep 2025 09:56:19 GMT

I have no DMZ interfaces , External and one VLAN Internal, that's it

Re: Upgrade from R81.10.10 (996002993) to R81.10.17 (996004653) fails on SMB

marcinw — Mon, 08 Sep 2025 15:06:04 GMT

I gave up with R81.10.17 (996004653) and went with R81.10.17 (996004508) , no issues with upgrading from r81.10.10