3100 SECURITY GATEWAY - Boot Problem

[Cyrus]

Hello,

I do have a 3100 SECURITY GATEWAY as Test Device, and it has booting Problem, I can't even reach the bios.

Alert LED is on (not blinking, only ON).

I've tried to factory reset, but it didn't work.

Please let me know, how to resolve this issue.

[the_rock]

Can you try process from below link?

https://downloads.checkpoint.com/fileserver/SOURCE/direct/ID/45742/FILE/CP_3000_Appliances_GettingSt...

Page 30...I know sometimes you need to hold reset button for at least 15 seconds, maybe even 30.

Andy

[Cyrus]

@the_rockThank you for response.

It didn't work, I think the bios is dead!, I thought it should be dual bios.

Is there any other idea to reprogram or change the bios ?

[the_rock]

Not sure thats possible, maybe @PhoneBoy can confirm.

[the_rock]

So you cant get to BIOS at all, no matter what you do?

[Cyrus]

Exactly.

[the_rock]

Ok, in all seriousness, joking aside now...if the box is put back together and turned on, does it even give a menu or prompt to interrupt the boot up sequence? Can you take a screenshot of what you get and post it here? Lets see if we can help you more. I do know BIOS password, but if you cant get to it, then it wont be useful, so thats what we need to try fix first.

Andy

[Cyrus]

No, it doesn't give a menu or prompt.

I tried even with both console port

As I read, checkpoint is a Software company, that means for me, the checkpoint hardware is just a normal PCB with normal hardware, just like a normal pc.

I think maybe it's possible to change or reprogram the bios if I can find it.

[PhoneBoy]

While Check Point is, in fact, a software company, all Check Point-branded appliances are purpose-built with custom BIOS.
The only way you can upgrade the BIOS is through RMA.

[Bob_Zimmerman]

The 3100 and 3200 use Intel Atom C2000-series system-on-chip processors, which are subject to a hardware bug called AVR54. As data is transferred over the low-pin-count bus which connects the SoC to the boot ROM, the processor side of the bus link degrades. Eventually, the SoC can no longer get its boot firmware from the boot ROM, which renders the system unbootable. That may be what happened here.

Not sure which processor the 3100 has. Pretty sure the 3200 uses the C2558. 3600 is a C3558, and 3800 is a C3758. Interestingly, all the Atom C2000 and C3000 SoCs support ECC memory. Check Point's 1U boxes (4000, 5000, and 6000 series) mostly use consumer-grade processors from Intel (Core i family). Intel holds ECC-capable memory controllers back for their server-grade processors as a market segmentation strategy. With ECC memory, the 3600 and 3800 would be substantially more reliable than the bigger boxes with consumer-grade processors.

As for reprogramming the BIOS, if the TAC isn't able to help you out, it's definitely possible at a technical level. The boot ROMs are between the SATA connector and the drive power socket in a patch of the board with the silkscreen labels "BIOS 0" and "BIOS 1". They have small dots of paint on the pin indexes. With a set of SOIC jaws and an EEPROM programmer (such as a TL866II Plus), you should be able to dump their contents and write new contents to them. If the SoC has fallen victim to AVR54, though, that won't help.

If this is a box for business use, I would strongly recommend replacing it with a 3600 or 3800.

[PhoneBoy]

BIOS upgrades can only be done from a system that is capable of booting.
You cannot access the BIOS without TAC assistance.

[PhoneBoy]

Your only option in this case is an RMA with TAC.

[Cyrus]

I'm not sure if it's possible, because I opened the box 😂, and now it's probably out of warranty or support

please don't ask why I opened the door, I was just curious 😎🤣

[the_rock]

HAHAHA...well, even if we ask, it wont make slighest difference lol

[G_W_Albrecht]

That should be not an issue for RMA (especially if you tell none ;-), so i would go for a replacement ! No console output on boot looks like DOA...

[the_rock]

Though, I would not tell the part about opening the box : - )

[G_W_Albrecht]

I wrote: That should be not an issue for RMA (especially if you tell none 😉

[the_rock]

Keep us posted @Cyrus how it goes.

Happy New Year!

[_Val_ · Accepted solution]

Please open a ticket with TAC