Important Notice: Incorrect Default Firmware Version on Gateways Running R82.00.xx

[Noa_Alon]

Hi,
We would like to inform about an issue affecting some gateways running R82.00.xx, where the configured default firmware image may be invalid. 

This configuration may cause the gateway to enter Maintenance Mode if it is reverted to factory default settings.

If this occurs, the gateway can only be recovered by performing a Clean Install.

Important - If your gateway is affected, do not revert it to factory defaults until the default firmware image has been updated according to the instructions below.

Please follow the steps below, to avoid any potential service outage:

1) Identify the affected GWs:

• Using Spark Management
• Go to Dashboards → DR Spark, click Gateways with critical failed tests

• In the search bar, filter by: (name:"Default Image Build")
• The results will display the gateways that are affected and potentially at risk.
• Using  WebUI,
• Go to Device → System Operation → Revert to Factory Defaults section:

• If the default image is lower than R82.00.10 B998001654, the gateway is affected and should be updated. 
• Using CLI,
• Run “show diag” command and search for the default image:

• If the default image is lower than R82.00.10 B998001654, the gateway is affected and should be updated. 

2) Verify the current firmware version:

• For each affected GW, make sure the currently running image is R82.00.10 B998001654 or higher.

• If the GW is running an older version, please upgrade it to R82.00.10 B998001654 or higher.

• R82.00.10 official SK: SK184357

3) Update the default image:

• Run the following command via Shell or SMP: “update default-image from current-image”

4) Verify the default image:

• Make sure the default image version matches the current running image.
• In WebUI, go to Device → System Operation → Revert to Factory Defaults section:

• In CLI, run “show diag” command

• Alternatively, check the DR Spark Dashboard after 24 hours, as the information should be updated within 24 hours.

Please make sure this is addressed for all affected GWs to eliminate the risk of the device entering Maintenance Mode following a factory reset.

See below the relevant SK for cases where the GW has already entered Maintenance Mode:

https://support.checkpoint.com/results/sk/sk184995

LMK if you have any questions,

Noa Alon,

Spark Firewall (SMB) , Project Manager