Firmware for Gateways and Plans

If a plan specifies firmware upgrades, you can configure these firmware settings in the plan:

  • Firmware to use for the gateways

  • Firmware upgrade schedule

By default, all gateways subscribed to a plan get their firmware settings from the plan.

You can override the inherited firmware settings for a specified gateway. You must first unlock the firmware service from the plan.

The appliance reboots after the upgrade to new firmware. You can limit the firmware upgrade to specified days and hours.

Note - The upgrade schedule uses the gateway's local time zone. For example, if you configure firmware upgrades to occur between 1:00 to 6:00 AM, gateways in New York receive firmware upgrades between 1:00 and 6:00 AM Eastern Time (ET). Gateways in California receive firmware updates between 1:00 and 6:00 AM Pacific Time (PT).

To configure the plan firmware settings:

  1. Go to Home > Plans.

    The Edit page opens.

  2. Click Services > Firmware.

  3. Select a firmware for all gateways:

    • Specific firmware version - Click the downward arrow next to each appliance type to select a specific firmware or to set it to Do_Not_Upgrade.

    • Check Point latest - The gateway downloads the latest firmware version available.

    • The firmware is managed locally on the device - The gateway does not download firmware.

  4. Schedule automatic firmware upgrades.

    • Upgrade immediately

    • Daily - Select the time of day range.

    • Weekly - Select the day of week and time of day range.

    • Monthly - Select the day of month and time of day range.

  5. Click Save.

To override firmware settings for a gateway:

  1. Go to Home > Gateways.

  2. Click the gateway name.

    The Edit page opens.

  3. Click Services > Firmware.

    The Firmware window opens.

  4. Click Unlock from plan.

    The fields are enabled.

  5. Select the firmware and schedule options (see above).

  6. Click Save.

Private firmware is available only to specified service domains and not globally to all service domains on the SMP.

To set private firmware:

  1. Go to Service Domain > Settings

    The General tab opens.

  2. Click Firmware.

  3. Click New Private Firmware.

    The Add Private Firmware window opens.

  4. Enter your Firmware unique ID.

  5. Click Finish.

  6. Click Save.