topic 1470 upgrades in Spark Firewall (SMB)

1470 upgrades

CP-Newb — Thu, 05 Mar 2020 02:03:28 GMT

Firstly, I'm no CP expert, far from it. I've inherited a site with 13 CP appliances from 1470's to 3K and 5K devices. They are all managed via an R80.20 ESXi SMS. The 1470's are running a very old software version, and I'm pretty keen to get these to the lastest R77.20.87.

For an unknown reason, every blade is enabled and running. 2 devices are heavily utilised with large amounts of traffic, IPS/IDS, AB, AS etc....including several VPN's to remote sites and routing enabled!

Just putting this out there to see if there are any "gotchas" in performing the upgrades. I plan on using the WEB GUi to undertake these opposed the SMS / Smart Update.

Thanks in advance.

Re: 1470 upgrades

_Val_ — Thu, 05 Mar 2020 08:25:21 GMT

According to https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk97766, R77.20.87 is the latest release for 1400 series. To run more recent versions, you would have to move to 1500 series.

Re: 1470 upgrades

HristoGrigorov — Thu, 05 Mar 2020 08:27:57 GMT

Firmware upgrades are relatively safe on 1470. You can always revert back to previous firmware if something goes wrong.

If you are upgrading to R77.20.87 make sure you install the latest JHF. Download it from sk153433.

Do you have any of these devices that are in cluster ?

Re: 1470 upgrades

HristoGrigorov — Thu, 05 Mar 2020 08:31:02 GMT

To optimize the performance and reduce load you may want to check what I recently wrote about this:

https://community.checkpoint.com/t5/SMB-Appliances-and-SMP/Brief-introduction-to-SMB-performance-tuning/m-p/76780#M3131

Re: 1470 upgrades

CP-Newb — Thu, 05 Mar 2020 08:31:55 GMT

Thanks for the reply. I did find that and believe it's version ( R77.20.87 (990173004) )?

Regards

Re: 1470 upgrades

HristoGrigorov — Thu, 05 Mar 2020 12:09:54 GMT

Yup, this is it. Verify checksum after download.