topic Re: How to upgrade SMB firmware in Spark Firewall (SMB)

How to upgrade SMB firmware

girisht — Mon, 27 Mar 2023 07:05:48 GMT

Check Point offers a wide range of SMB appliances like 700, 900, 1400, 1500, 1600 & 1800.
All of these appliances work on specific firmware which is designed on Embedded Gaia.
Appliances like 700, 900 & 1400 work on the R77.20.x series of OS which offer many services but fewer features compared to higher-range devices. Appliances like 1500, 1600, & 1800 work on R80.20.x & R81.10.xx series of OS offers many features compared to Gaia appliances.
The process of firmware upgradation is simple in SMB appliances. You need to have WEBUI access to the device.
Upgradation can be done in 2 ways. Online and Offline.
Before upgradation, it is always advised to create a system backup first.

WEBUI --> Device --> System Operation --> Create a Backup file --> Wait --> Download it on your system

In the Online process, the device should connect to check point user centre. The device will download the image automatically and the admin needs to trigger the process.
In the Offline process, you have to download the firmware images from the support centre.

For R77.20.x --> sk153433 Recommended version R77.20.87.

For R80.20.x --> sk174683 Recommended version R80.20.50.

For R81.10.x --> sk174683 Recommended version sk179004 & sk179797.

WEBUI --> Device --> System Operation --> Manual Upgrade --> Upload the Image --> Let it validate --> Next --> Next --> Complete the process.

Post completing the upgrade you can import your system configuration on the new Image so you can have the same configuration.
This process needs to be performed in the maintenance window only.

Re: How to upgrade SMB firmware

naveda — Fri, 24 Mar 2023 11:23:07 GMT

Thank you @girisht it is really helpful.

Re: How to upgrade SMB firmware

G_W_Albrecht — Mon, 27 Mar 2023 06:55:35 GMT

> You need to have WEBUI access to the device.

Not true - you can also use USB medium or boot screen TFPT install for all and SMP and SMS install for not locally managed units

> The device will download the image automatically and the admin needs to trigger the process.

Usually, it will not show a newer firmware - only if the installed version is very old 😉 Mostly you have to download it manually...

> Post completing the upgradation you can import your system configuration on the new Image so you can have the same configuration.

Configuration will not change in the process above, as it is not reset to defaults here.

Re: How to upgrade SMB firmware

the_rock — Sun, 26 Mar 2023 21:41:01 GMT

Thanks for sharing @girisht

Re: How to upgrade SMB firmware

the_rock — Mon, 27 Mar 2023 01:37:47 GMT

@girisht I could be mistaken when I say this (sorry dont have environment read to check in "demo point" section, will verify tomorrow), but isnt there an option to also schedule periodic firmware update check say daily or weekly and reboot the device upon completion?

Never mind, I saw it afterwards in your screenshot, it was covered with read line : - )

Cheers

Andy

Re: How to upgrade SMB firmware

G_W_Albrecht — Mon, 27 Mar 2023 06:58:05 GMT

Coined a new term: Upgradation 🤣

Re: How to upgrade SMB firmware

_Val_ — Mon, 27 Mar 2023 07:08:14 GMT

This is really unnecessary. Not everyone in the community is a native English speaker. Not event you, Guenter.

Also, according to the dictionary, it is a valid noun in asian variants of English. https://dictionary.cambridge.org/dictionary/english/upgradation

Re: How to upgrade SMB firmware

G_W_Albrecht — Mon, 27 Mar 2023 07:26:51 GMT

It is called Upgrade in all CP documentation, so i did not understand why a CP employee uses it as in degradation giving it a negative taste. That made me believe this was a kind of hidden joke, as upgrades can be a disaster sometimes - so my post. Do you think i try to make fun of the writer ? Why should i ?

Re: How to upgrade SMB firmware

_Val_ — Mon, 27 Mar 2023 07:39:07 GMT

First, your comment did look like you were making fun of someone else's phrase. Second, as I mentioned already, "upgradation" is a legitimate word in the English language variant used in the topic-starter's country. The word made it to dictionaries. If it is not used in Austria, and seems funny to you personally, it does not mean it is a non-word. Forth, 70% of the community users have English as a second or event third language, so some tolerance to language skills are expected here.

Most importantly, this is not a place to discuss anything related to grammar, vocabulary, or punctuation in the English language. Let's put the matter to rest. Thank you.

Re: How to upgrade SMB firmware

the_rock — Mon, 27 Mar 2023 11:54:48 GMT

Very well said @_Val_ 👍

Re: How to upgrade SMB firmware

the_rock — Mon, 27 Mar 2023 11:56:28 GMT

FYI @G_W_Albrecht 🙂

Re: How to upgrade SMB firmware

starmen2000 — Fri, 20 Oct 2023 13:12:27 GMT

Is it possible to upgrade 15xx SMB Appliances from CLI ?

Re: How to upgrade SMB firmware

Chris_Atkinson — Fri, 20 Oct 2023 13:31:31 GMT

There are some CLI options, see:

https://sc1.checkpoint.com/documents/SMB_R81.10.X/CLI/EN/Content/Topics/upgrade-from-usb-or-tftp-server.htm?tocpath=Working%20with%20Firmware%20Images%7C_____5