CPUG: The Check Point User Group

Resources for the Check Point Community, by the Check Point Community.


Tim Hall has done it again! He has just released the 2nd edition of "Max Power".
Rather than get into details here, I urge you to check out this announcement post.
It's a massive upgrade, and well worth checking out. -E

 

Results 1 to 12 of 12

Thread: ISOmorphic Update & 3200 Appliances

  1. #1
    Join Date
    2009-04-30
    Location
    Colorado, USA
    Posts
    2,249
    Rep Power
    14

    Default ISOmorphic Update & 3200 Appliances

    TL;DR for those with short attention spans:

    1) There is a special ISO of the R77.30 code for the 3000/5000/15000/23000 appliances that includes the proper drivers for these platforms; it has been updated several times since its initial release so make sure you have the latest version if reloading your appliance

    2) The ISOmorphic tool was updated mid-December and must be used for successful re-installations of a 3200 series appliance

    Background:

    Earlier this week I worked with a 3200 series appliance for the first time; this one was equipped with a standard hard drive and not optioned with a SSD. As is standard practice, I checked my version of Check_Point_R77.30_3000_5000_15000_23000_Sandblast _Appliances.iso against what was current in sk110052 and it had been updated, so I downloaded the latest copy and burned it to a USB stick with ISOmorphic. The installation via USB key aborted very early on, complaining that there was no driver for the Mass Storage Device and asking me to select one from a list or provide a driver disk. I have seen this message before and normally it indicates you are attempting to load an unsupported edition of code onto the appliance. I double-checked that I indeed had the correct ISO for the 3200 series and verified the MD5 hash again (all of you always do that every time - DON'T YOU?).

    Started hunting around in SecureKnowledge and found sk92423 referencing the error I was seeing, and it indicated that the USB drive was not compatible. That didn't seem right as I had used this 4GB USB drive many many times in the past (including with a 2016 edition 5200 appliance a few months back) but figured perhaps this old key was somehow incompatible with the USB controller in the 3200. Rewrote the ISO image to a newer 32GB USB flash drive, same problem. While scratching my head trying to figure out what I was doing wrong, on a whim I pulled up sk65205 for the ISOMorphic tool to see if there was some kind of known limitation (and also noticed that the 3200 appliance was explicitly shown as supported in the SK description) and there it was:

    Important: Effective December 18th, 2016, ISOmorphic package has been updated.
    Sigh. Downloaded the new version of ISOMorphic and used it to burn the same ISO to my old 4GB USB key...and it worked great reloading the 3200. There are lots of nifty additional features in this new version of ISOmorphic, definitely worth checking out!
    Last edited by ShadowPeak.com; 2017-01-20 at 11:14.
    --
    Second Edition of my "Max Power" Firewall Book
    Now Available at http://www.maxpowerfirewalls.com

  2. #2
    Join Date
    2011-08-02
    Location
    http://spikefishsolutions.com
    Posts
    1,651
    Rep Power
    10

    Default Re: ISOmorphic Update & 3200 Appliances

    nice, thanks for the heads up.

  3. #3
    Join Date
    2006-03-21
    Posts
    87
    Rep Power
    14

    Default Re: ISOmorphic Update & 3200 Appliances

    I had the same issue with a couple of 5600 appliances. You're right using the updated version ISOmorphic fixes the issue.

    Thanks for sharing ShadowPeak!

    Regards

    Ed

  4. #4
    Join Date
    2006-03-08
    Location
    Lausanne
    Posts
    1,030
    Rep Power
    15

    Default Re: ISOmorphic Update & 3200 Appliances

    Using an HDD enclosure with DVD emulation eliminates need to chase isomorphic versions :-)

    Just a side note, of course.

    VL
    -------------

    Valeri Loukine
    CCMA, CCSM, CCSI
    http://checkpoint-master-architect.blogspot.com/

  5. #5
    Join Date
    2006-03-21
    Posts
    87
    Rep Power
    14

    Default Re: ISOmorphic Update & 3200 Appliances

    Quote Originally Posted by varera View Post
    Using an HDD enclosure with DVD emulation
    Interesting option... I haven't used before... any particular tool that you would like to recommend to perform the DVD emulation? I guess a partition needs to be allocated just for the DVD emulation?

  6. #6
    Join Date
    2006-03-08
    Location
    Lausanne
    Posts
    1,030
    Rep Power
    15

    Default Re: ISOmorphic Update & 3200 Appliances

    Quote Originally Posted by eduardoxmunoz View Post
    Interesting option... I haven't used before... any particular tool that you would like to recommend to perform the DVD emulation? I guess a partition needs to be allocated just for the DVD emulation?
    This one, for instance http://www.zalman.co.kr/contents/pro...iew.html?no=20
    -------------

    Valeri Loukine
    CCMA, CCSM, CCSI
    http://checkpoint-master-architect.blogspot.com/

  7. #7
    Join Date
    2006-03-21
    Posts
    87
    Rep Power
    14

    Default Re: ISOmorphic Update & 3200 Appliances

    Quote Originally Posted by varera View Post
    so it's a piece of hardware. I though it can be emulated using an external hard disk.

    Great option anyways!

    Thanks Valeri...

  8. #8
    Join Date
    2007-06-04
    Posts
    3,303
    Rep Power
    17

    Default Re: ISOmorphic Update & 3200 Appliances

    I have been using the VE-300 ( earlier version ) with success for a few years.

    Simply create a folder called _ISO on the HDD/SSD that place in the Enclosure. Then select the ISO you want from the folder with the wheel.

    Those Zalman enclosures are great.

  9. #9
    Join Date
    2006-03-08
    Location
    Lausanne
    Posts
    1,030
    Rep Power
    15

    Default Re: ISOmorphic Update & 3200 Appliances

    Quote Originally Posted by eduardoxmunoz View Post
    so it's a piece of hardware. I though it can be emulated using an external hard disk.

    Great option anyways!

    Thanks Valeri...
    Oh man... You put an external HDD into this "piece of HW" and keep a collection of ISO there with an ability to emulate any of them at will. This is a HDD enclosure :-)
    -------------

    Valeri Loukine
    CCMA, CCSM, CCSI
    http://checkpoint-master-architect.blogspot.com/

  10. #10
    Join Date
    2006-03-08
    Location
    Lausanne
    Posts
    1,030
    Rep Power
    15

    Default Re: ISOmorphic Update & 3200 Appliances

    Quote Originally Posted by mcnallym View Post
    I have been using the VE-300 ( earlier version ) with success for a few years.

    Simply create a folder called _ISO on the HDD/SSD that place in the Enclosure. Then select the ISO you want from the folder with the wheel.

    Those Zalman enclosures are great.
    Give him a moment to grasp it :-)
    -------------

    Valeri Loukine
    CCMA, CCSM, CCSI
    http://checkpoint-master-architect.blogspot.com/

  11. #11
    Join Date
    2006-03-08
    Location
    Lausanne
    Posts
    1,030
    Rep Power
    15

    Default Re: ISOmorphic Update & 3200 Appliances

    Quote Originally Posted by mcnallym View Post
    I have been using the VE-300 ( earlier version ) with success for a few years.

    Those Zalman enclosures are great.
    BTW, VE-300 here as well. Very happy owner, saved my ass in a DC lots of times
    -------------

    Valeri Loukine
    CCMA, CCSM, CCSI
    http://checkpoint-master-architect.blogspot.com/

  12. #12
    Join Date
    2014-09-02
    Posts
    353
    Rep Power
    10

    Default Re: ISOmorphic Update & 3200 Appliances

    Yes, the Zalman/iodd devices are almost a "must have" for any self-respecting engineer. I've been promoting them for a couple of years. It came up last year and I gave a fairly decent explnation here.

    Looks like Alienbaby even brought them up back in 2012.

    It's paid for itself many times over - just in time saved, never mind asses.

    -E

Similar Threads

  1. 3200 Appliance FYI: System Fault LED blinking is normal out of the Box
    By JFerreira23 in forum Check Point "2016" Appliances
    Replies: 5
    Last Post: 2016-12-15, 15:47
  2. ISOmorphic in R77.20
    By PhoneBoy in forum Check Point Release Notifications
    Replies: 11
    Last Post: 2015-11-06, 21:58
  3. Policy update when connecting different then manual policy update?
    By cglebbeek in forum SecureClient/SecuRemote
    Replies: 3
    Last Post: 2009-12-21, 15:26
  4. Windows Update/Microsoft Update IP ranges
    By jlobl in forum Content Security/Security Servers/CVP/UFP
    Replies: 7
    Last Post: 2009-04-28, 06:14
  5. UTM Appliances Category?
    By Thorpuse in forum Check Point UTM-1 Appliances
    Replies: 4
    Last Post: 2008-04-18, 22:05

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •