Upgrade Using an SD Card

In the 1590 appliances, you can use an SD card to upgrade to a new firmware image or auto-configuration file. When you install a new image with an SD card, the appliance deletes your previous settings and creates a new factory default image. Back up your settings so you can restore them after the installation is complete.

Note - The 1550 appliance does not support SD cards.

Note - SD cards are formatted with ext4. In earlier versions, SD cards are formatted as FAT32. If you upgrade from an earlier version to R77.20.85 or higher, the SD remains with FAT32 for backward compatibility.

To upgrade to a new firmware image from an SD card:

  1. Disconnect the Check Point Appliance from the power source.

  2. Place the firmware image on the SD card in the top folder. Do not rename the file.

    Make sure the top folder of the SD card does not contain any previous Boot loader or firmware images (u-boot*.bin files or fwl*.gz files).

  3. Insert the SD card into the SD card slot on the Check Point Appliance. If the operation does not succeed, this may be because the SD card slot does not recognize all devices.

  4. Connect the appliance to the power source.

The installation begins with the image file. This takes several minutes.

If the file is valid, all LAN LEDs start to blink to show progress. The LEDs are different colors and blink at different speeds.

When the installation is complete, all LAN LEDs turn a constant green. The appliance is ready for your input.

Restore your settings. For more information, see Backup, Restore, Upgrade, and Other System Operations.

To upgrade using Gaia Clish commands:

These are the file names that you can use:

  • autoconf.clish

  • autoconf.<MAC address>.clish

<MAC address> is the specified MAC address in this format: XX-XX-XX-XX-XX

You can create multiple configuration files for Check Point Appliance gateways. The gateways run both files or only one of them. First the autoconf.clish configuration file is loaded. If there is a configuration file with the same MAC address as the gateway, that file is loaded second.

Use the # symbol to add comments to the configuration file.