topic Re: Upgrade Paths for SMB appliances in Spark Firewall (SMB)

Upgrade Paths for SMB appliances

Nick_Doropoulos — Sat, 22 Jun 2019 08:34:00 GMT

I've been trying to understand the upgrade paths for SMB appliances by studying sk120512 and I was wondering if somebody could confirm the following example of mine:

Let us say that I want to upgrade a 700 appliance from R75.20.65 to R77.20.81. Would I be right to assume that the following process would need to take place:

1) Upgrade to 77.20.11.

2) Then, upgrade from 77.20.11 to 77.20.31.

3) Finally, upgrade from 77.20.31 to 77.20.81.

Thanks in advance.

Re: Upgrade Paths for SMB appliances

PhoneBoy — Sun, 23 Jun 2019 19:43:14 GMT

I came to the same conclusion reading that SK.

Re: Upgrade Paths for SMB appliances

Nick_Doropoulos — Sun, 23 Jun 2019 19:45:49 GMT

Thanks PhoneBoy!

Re: Upgrade Paths for SMB appliances

G_W_Albrecht — Mon, 24 Jun 2019 09:43:15 GMT

Using this upgrade procedure, backup firmware will still be version 75.20.65 ! I would rather suggest to use USB reimage sk98549: How to re-image Check Point 600 /700/ 1100 /1400/1200R Appliances version with Disk-On-Key:

- if the defined objects and rules are easily replicable from the default settings, reimage to 77.20.81 and configure manually

- if you have a very complicated setup, do the upgrade steps, export the 77.20.81 configuration backup, reimage to 77.20.81 and restore the backup.

Then, both firmware versions will be 77.20.81...

Re: Upgrade Paths for SMB appliances

G_W_Albrecht — Mon, 24 Jun 2019 10:26:36 GMT

BTW: I would rather use Build 990172929 for R77.20.87 if this is a 700/900/1400 appliance.

Re: Upgrade Paths for SMB appliances

nmelay — Thu, 25 Feb 2021 11:19:58 GMT

I guess you meant the factory/default firmware, not the backup firmware.

Re: Upgrade Paths for SMB appliances

G_W_Albrecht — Thu, 25 Feb 2021 15:18:55 GMT

In older days, only factory/default firmware image and active image existed. You are correct, contemporary SMB models also keep a copy of the last active image before an upgrade:

# show diag
Current system info -----------------------------------
Current image name: R77_990172929_20_87 Current image version: 929
Previous image name: R77_990172922_20_87 Previous image version: 922
Default image name: R77_990172392_20_80 Default image version: 392
Bootloader version: 64

There is also a script to control them:

# pfrm2.0/opt/fw1/bin/firmware_ver.sh
Usage: firmware_ver.sh [-d <url> <image> <chksum>|-r|-v]

-d : Download from given URL to given path and verify checksum

-r : Revert to saved image

-v : Display firmware versions

Attention: -r restores the previous image R77_990172922_20_87, not the default image !