upgrade LOM firmware

[dehaasm]

We are investigating on how to perform the LOM firmware on 5000 series with current firmware version 3.35 the newest release is 3.43 which can be downloaded here:

https://supportcenter.checkpoint.com/supportcenter/portal?action=portlets.DCFileAction&eventSubmit_d...

The procedure on how to do that is decribed here

https://dl3.checkpoint.com/paid/73/733690c295a61c638b41ebd8ce744428/CP_Smart-1_5_6_7_13_15_16_21_23_...

Now the question in this guide it is clearly mentioned that network link settings, time and SSL cannot be preserved, does this indicate that this has to be performed while having physical access to the device to be able to reconfigure these settings including the IP address of the LOM interface?

Furthermore are there any clear benefits on upgrading the firmware from 3.35 to 3.43 out of your experience?

Lastly someone was trying to perform this via CLI would that be beneficial to prevent loosing access to the LOM interface remotely after upgrade of the firmware?

https://community.checkpoint.com/t5/Security-Gateways/LOM-Firmware-Update-via-CLI/td-p/148482

Please leave your helpfull thoughts in the comments.

[G_W_Albrecht · Accepted solution]

Yes, physical access is needed for the procedure. Please check sk111776 - as firmware version 3.35 is from January 2019 i would rather install firmware version 3.43 from September 2022, see the list of fixed bugs ! Also Note: To make sure all changes are applied when upgrading from previous versions to 3.43, do not use the "Preserve configuration" feature.

[D_TK]

I've had good luck following this sk92986 regarding setting the IP/mask/gw on a LOM remotely from expert mode.