1470 upgrades

[CP-Newb]

Firstly, I'm no CP expert, far from it. I've inherited a site with 13 CP appliances from 1470's to 3K and 5K devices. They are all managed via an R80.20 ESXi SMS. The 1470's are running a very old software version, and I'm pretty keen to get these to the lastest R77.20.87.

For an unknown reason, every blade is enabled and running. 2 devices are heavily utilised with large amounts of traffic, IPS/IDS, AB, AS etc....including several VPN's to remote sites and routing enabled!

Just putting this out there to see if there are any "gotchas" in performing the upgrades. I plan on using the WEB GUi to undertake these opposed the SMS / Smart Update.

Thanks in advance.

[_Val_]

According to https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solut..., R77.20.87 is the latest release for 1400 series. To run more recent versions, you would have to move to 1500 series.

[HristoGrigorov]

Firmware upgrades are relatively safe on 1470. You can always revert back to previous firmware if something goes wrong.

If you are upgrading to R77.20.87 make sure you install the latest JHF. Download it from sk153433.

Do you have any of these devices that are in cluster ?

[HristoGrigorov]

To optimize the performance and reduce load you may want to check what I recently wrote about this:

https://community.checkpoint.com/t5/SMB-Appliances-and-SMP/Brief-introduction-to-SMB-performance-tun...

[CP-Newb]

Thanks for the reply. I did find that and believe it's version ( R77.20.87 (990173004) )?

Regards

[HristoGrigorov]

Yup, this is it. Verify checksum after download.