How to upgrade SMB firmware

[girisht]

• Check Point offers a wide range of SMB appliances like 700, 900, 1400, 1500, 1600 & 1800.
• All of these appliances work on specific firmware which is designed on Embedded Gaia.
• Appliances like 700, 900 & 1400 work on the R77.20.x series of OS which offer many services but fewer features compared to higher-range devices. Appliances like 1500, 1600, & 1800 work on R80.20.x & R81.10.xx series of OS offers many features compared to Gaia appliances.
• The process of firmware upgradation is simple in SMB appliances. You need to have WEBUI access to the device.
• Upgradation can be done in 2 ways. Online and Offline.
• Before upgradation, it is always advised to create a system backup first.

WEBUI --> Device --> System Operation --> Create a Backup file --> Wait --> Download it on your system

• In the Online process, the device should connect to check point user centre. The device will download the image automatically and the admin needs to trigger the process.
• In the Offline process, you have to download the firmware images from the support centre.

For R77.20.x --> sk153433 Recommended version R77.20.87.

For R80.20.x --> sk174683 Recommended version R80.20.50.

For R81.10.x --> sk174683 Recommended version sk179004 & sk179797.

WEBUI --> Device --> System Operation --> Manual Upgrade --> Upload the Image --> Let it validate --> Next --> Next --> Complete the process.

• Post completing the upgrade you can import your system configuration on the new Image so you can have the same configuration.
• This process needs to be performed in the maintenance window only.

[naveda]

Thank you @girisht  it is really helpful. 

[G_W_Albrecht]

Coined a new term: Upgradation 🤣

[_Val_]

This is really unnecessary. Not everyone in the community is a native English speaker. Not event you, Guenter.

Also, according to the dictionary, it is a valid noun in asian variants of English. https://dictionary.cambridge.org/dictionary/english/upgradation

[G_W_Albrecht]

It is called Upgrade in all CP documentation, so i did not understand why a CP employee uses it as in degradation giving it a negative taste. That made me believe this was a kind of hidden joke, as upgrades can be a disaster sometimes - so my post. Do you think i try to make fun of the writer ? Why should i ?

[_Val_]

First, your comment did look like you were making fun of someone else's phrase. Second, as I mentioned already, "upgradation" is a legitimate word in the English language variant used in the topic-starter's country. The word made it to dictionaries. If it is not used in Austria, and seems funny to you personally, it does not mean it is a non-word. Forth, 70% of the community users have English as a second or event third language, so some tolerance to language skills are expected here.

Most importantly, this is not a place to discuss anything related to grammar, vocabulary, or punctuation in the English language. Let's put the matter to rest. Thank you.

[the_rock]

Very well said @_Val_  👍

[the_rock]

FYI @G_W_Albrecht  🙂

 

[G_W_Albrecht]

> You need to have WEBUI access to the device.

Not true - you can also use USB medium or boot screen TFPT install for all and SMP and SMS install for not locally managed units

> The device will download the image automatically and the admin needs to trigger the process.

Usually, it will not show a newer firmware - only if the installed version is very old 😉 Mostly you have to download it manually...

> Post completing the upgradation you can import your system configuration on the new Image so you can have the same configuration.

Configuration will not change in the process above, as it is not reset to defaults here.

[the_rock]

Thanks for sharing @girisht 

[the_rock]

@girisht I could be mistaken when I say this (sorry dont have environment read to check in "demo point" section, will verify tomorrow), but isnt there an option to also schedule periodic firmware update check say daily or weekly and reboot the device upon completion?

Never mind, I saw it afterwards in your screenshot, it was covered with read line : - )

Cheers

Andy

[starmen2000]

Is it possible to upgrade 15xx SMB Appliances from CLI ?

[Chris_Atkinson]

There are some CLI options, see:

https://sc1.checkpoint.com/documents/SMB_R81.10.X/CLI/EN/Content/Topics/upgrade-from-usb-or-tftp-ser...