FireWall-1 FAQ: Which FireWall-1 Build goes with which service pack?
Please note: This content was from when I was operating my FireWall-1 FAQ site, which I stopped operating in August 2005. For some reason people still have links to this stuff on the Internet that people are still clicking on.
I am making this information available again AS IS. Given how old this information is, it is likely wildly inaccurate. I have no plans to update this information.
If you're still running versions of Check Point VPN-1/FireWall-1 where this information is still relevant to you, do yourself a favor and upgrade to a more recent release. If you happen to be running a current release and the information is useful, it's by happenstance :)
If you have a IPSO-based platform, the variable "FWDIR" is set to a directory that reflects the appropriate "service pack" which makes this very easy. For other platforms, it is not so easy. The concept of a build number showing up in 'fw ver' output did not happen until later builds of 3.0b (3045 was the first public one). The "service pack" concept did not hit Check Point until 3.0b build 3083 (i.e. SP8). In the NG release of FireWall-1, service packs are now called "feature packs."
Look at the following table (The build number refers to "fw ver", not "fw ver -k" or the GUI build number)
Build Number Service Pack 3078 3.0b SP8 (Nokia) 3083 3.0b SP8 3096 3.0b SP9 4031 4.0 SP1 4034 4.0 SP2 4056 4.0 SP3 4064 4.0 SP3 + hotfix 4066 4.0 SP4 4094 4.0 SP5 41?? 4.0 SP6 4201 4.0 SP7 4304 4.0 SP8 41439 4.1 SP0 41489 4.1 SP1 41492 4.1 SP1 on IPSO 41716 4.1 SP2 41814 4.1 SP3 41821 4.1 SP3 on IPSO 41862 4.1 SP4 41864 4.1 SP4 on IPSO 41510 4.1 SP5 41515 4.1 SP5 hotfix on IPSO 41617 4.1 SP6 50xxx NG Feature Pack 0 51131 NG Feature Pack 1 (except IPSO) 51012 NG Feature Pack 1 on IPSO 52163 NG Feature Pack 2 (except IPSO) 52207 NG Feature Pack 2 on IPSO 53225 NG Feature Pack 3
Recent 4.1 hotfixes from Check Point Support will have build numbers of the form 3xxyzz where:
- x is the major version (e.g. 41 = 4.1, NG = 50)
- y is the service pack number
- zz is a unique identifier
So, for example, 341526 is a hotfix for FireWall-1 4.1 SP5.