Upgrade from R81.10.10 (996002993) to R81.10.17 (996004653) fails on SMB

[marcinw]

Hi 

I am trying to upgrade firewalls 1550 from r81.10.10 to r81.10.17 but it's only successful on 50% of them. 

The entire upgrading process goes well, no errors, however after rebooting firewall  gets hang.

Power off/on resolves the problem but device is back on old firmware r81.10.10

I know that there was issue with r81.10.15 when IOC feed had to be stopped before upgrading, I tried that , no luck.

Does anyone come across similar issue ?

thanks

[the_rock]

I would definitely open TAC case for this.

Andy

[garrod]

mind to share how long does the firewall uptime? have you retry multiple time after that?, high utilise appliance might come to this issue as well

[Alex-]

A while ago, there was an issue where this could happen with the R80.20.X releases on the x0 series, if the DMZ interface din't have an IP. I remembered having to put a dummy IP on the DMZ interface, which was unused, and upgrades were then successful.

[marcinw]

I have no DMZ interfaces , External and one VLAN Internal, that's it

[Amir_Ayalon]

Hi

could be partition problem, or eMMC full

I suggest you run Dr.Spark, and if you don't see any obvious reason, send us the details.

ohadp@checkpoint.com amiray@checkpoint.com

Thanks

[marcinw]

hi Amir

I have tried on Friday this is what I see :

After installation r81.10.17 2993 VPN doesn't come up however I can ssh/https to the firewall on external interface, for the next 20 minutes I see firewall in Smart-1 as connected and next it goes status red. 

I can't run Spark I get below  message I also "show diag" result

[G_W_Albrecht]

I would try to use console port for recording the putty output from updating firmware using CLI. Usually, new firmware is discarded at the end of the installation process with an error, and after reboot you find the former version booting.

[the_rock]

Hey @marcinw 

Any luck with this?

Andy

[marcinw · Accepted solution]

Hi 

I gave up with R81.10.17 (996004653) and went with R81.10.17 (996004508) , no issues with upgrading from r81.10.10