cancel
Showing results for 
Search instead for 
Did you mean: 
Post a Question

Upgrading firmware on 1200R appliance

Hello CheckMates.

I'd like to share with you an issue and its solution.

So if you want to upgrade firmware on SMB appliances like 1100, 1200R etc.,which have embedded Gaia OS, you will probably face with a lot of problems.

There is a small guide (sk107592) or you can find official Check Point 1200R Appliance Administration Guide:

To perform a fresh/clean install of firmware on 600/700/1100/1400/1200R appliances via USB, the USB must use a FAT32 file system.

  1. Copy the desired firmware image onto the USB (not in subfolders and not with other firmware images present).

  2. Insert the USB into "USB1" on the front of the appliance.

  3. Wait for the "USB1" LED light to activate, indicating that the USB was detected.

  4. Reboot the appliance either via the WebUI, SSH command #reboot, or by power cycling the appliance.

    During the boot process, the appliance will detect the USB and firmware image. 
    The appliance will perform a reset to factory defaults, followed by a fresh install of the selected firmware version. 
    Note: You may need to use Ctrl-C to interrupt the bootloader and select the relevant option.

Note: This procedure erases the existing image and settings.

First of all you can not do manual upgrade via Web interface, because of operation failed error. 

Moreover USB is only one way to upgrade your device.

What is the desired firmware image? It is an appliance package, not the actual firmware!!!

Here is an example of what you have to download (img extension).

Then you copy this file on the USB (may be you'll need to extract and archive) and follow the instruction.

P.S.: If the USB is not read, try to rename your image file to fw1_ind_vR77_990172541_20_81.img view (this is what appliance wants to see).

12 Replies

Re: Upgrading firmware on 1200R appliance

Per an update on sk122276 - SMB appliances fail to upgrade firmware it looks like we need one more flavor to it.

To prevent the issue from occuring again in such scenario (due to bad blocks), we will need to burn the image with the following hotfix Smiley Happy

R77.20.81 jumbo hf: fw1_sx_dep_R77_990172557_20.img
R77.20.85 jumbo hf: fw1_sx_dep_R77_990172740_20.img

Re: Upgrading firmware on 1200R appliance

This discussion is very, very confusing and looks like a copy/paste action using CP documents - nice to cite the well-known sk107592 and provide screenshots from CP website, but i see no description of any issue at all !

What i see is the assertion: So if you want to upgrade firmware on SMB appliances like 1100, 1200R etc.,which have embedded Gaia OS, you will probably face with a lot of problems.

But after nearly 8 years, out of my experiences i could not say that - in most use cases, firmware update using WebGUI is working very fine, and local access and USB install is not so easy (mostly small remote sites). So i would be rather interested in statistics about the reported installation failures and its causes.

Re: Upgrading firmware on 1200R appliance

The reason why I have created a discussion is to inform people, that they have to download  Appliance Package (green arrow) , not the firmware (red arrow). There is no information about it nuance on the Internet. And it's confusing, because logically if you want to upgrade firmware, you should install firmware, but here we can see that's not true.

0 Kudos

Re: Upgrading firmware on 1200R appliance

I never had such an issue - i use the firmware version page, e.g. sk137212: R77.20.81 for Small and Medium Business Appliances to download firmeware install files for WebGUI or Smart Update. When using the Search page like you do, i find installable .img files here 

or here 

R77.20.80 Build 990172437 for 1200R Appliances

But the Check Point 1200R Appliance package R77.20.70 build 990171948 you give is the .tgz for SmartUpdate...

But please finally explain what the issue is that you like to discuss here !

0 Kudos

Re: Upgrading firmware on 1200R appliance

I don't actually want to discuss the issue, I just want to share with that little problem with community. Maybe someone will face with the same problem.

Sorry if I jumbled the categories,where I can write this.

0 Kudos

Re: Upgrading firmware on 1200R appliance

So please explain in detail what the problem is that you want to share with community, because i did not understand it yet - downloading and trying to install a wrong file for firmware update will not really be an issue, i suppose...

Re: Upgrading firmware on 1200R appliance

Okay

I was upgrading 1200R and certainly I was following the administration guide.

But there was a problem: appliance had not read the USB, when it rebooted.

I had tried a lot of firmware images, a lot of USBs and the decision was to download appliance package.

I mean, in the guide there is an information that you have to download Firmware to upgrade firmware, however it didn't worked. You should download appliance package to upgrade firmware.

That thing is confusing for me.

0 Kudos

Re: Upgrading firmware on 1200R appliance

If you have the 1200R locally managed, you can use the .img file for firmware update by using WebGUI or USB medium. If it is centrally managed, you either install the .tgz file using SmartUpdate or the .img file for firmware update by using WebGUI or USB medium.  Further possibilities are: Upgrade using boot menu will load a firmware fw1*.img or u-boot.bin boot-loader file from a BOOTP or tftp server. On R77.30 you can also use SmartProvisionig/LSM. If you have a SMB unit managed by SMP Portal you can control firmware updates from the portal.

--> But there was a problem: appliance had not read the USB, when it rebooted.

Yes, led (red) should light up before you can reboot unit from CLI. Otherwise, .img will not be found.

0 Kudos

Re: Upgrading firmware on 1200R appliance

Hi all, I have to second Günther W. Albrecht‌'s opinion here.

From where I stand, the issue is cause by an attempt to download and apply a wrong file. The best practice is always to use R77.20.81 for Small and Medium Business Appliances  for firmware downloads.

Also, Egor Cherkasov, if you have not seen Günther W. Albrecht's great collection of SMB related SKs, here is the link:  

0 Kudos

Re: Upgrading firmware on 1200R appliance

I haven't seen this article, it's an amazing job, thank you for sharing.

0 Kudos

Re: Upgrading firmware on 1200R appliance

Always happy to help and share. Follow Gunter, he is our SMB champion here

0 Kudos

Re: Upgrading firmware on 1200R appliance

Based on my about 5y experiences I can agree with Günther W. Albrecht - Not remember any serious issues with WebGUI based firmware upgrade - by my opinion easiest way especially for central managed smb appliances spread all around the world with no local support...

USB deploy will restore to factory defaults, which require additional console config of interfaces... Manual upgrade preserve all settings

Worth to mention two important things by me

  •  do not rename original iso file placed in USB root dir!
  •  there are several different GaiaEmbeded firmware versions - of course update will fail if you apply 1400 iso to 1100