The PhoneBoy Blog

FireWall-1 FAQ: Which FireWall-1 Build goes with which service pack?

Last Modified: 23 Feb 2004

Please note: This content was from when I was operating my FireWall-1 FAQ site, which I stopped operating in August 2005. For some reason people still have links to this stuff on the Internet that people are still clicking on.

I am making this information available again AS IS. Given how old this information is, it is likely wildly inaccurate. I have no plans to update this information.

If you're still running versions of Check Point VPN-1/FireWall-1 where this information is still relevant to you, do yourself a favor and upgrade to a more recent release. If you happen to be running a current release and the information is useful, it's by happenstance :)

If you have a IPSO-based platform, the variable “FWDIR” is set to a directory that reflects the appropriate “service pack” which makes this very easy. For other platforms, it is not so easy. The concept of a build number showing up in ‘fw ver’ output did not happen until later builds of 3.0b (3045 was the first public one). The “service pack” concept did not hit Check Point until 3.0b build 3083 (i.e. SP8). In the NG release of FireWall-1, service packs are now called “feature packs.”

Look at the following table (The build number refers to “fw ver”, not “fw ver -k” or the GUI build number)

    Build Number    Service Pack
    3078            3.0b SP8 (Nokia)
    3083            3.0b SP8
    3096            3.0b SP9
    4031            4.0 SP1
    4034            4.0 SP2
    4056            4.0 SP3
    4064            4.0 SP3 + hotfix
    4066            4.0 SP4
    4094            4.0 SP5
    41??            4.0 SP6
    4201            4.0 SP7
    4304            4.0 SP8
    41439           4.1 SP0
    41489           4.1 SP1
    41492           4.1 SP1 on IPSO
    41716           4.1 SP2
    41814           4.1 SP3
    41821           4.1 SP3 on IPSO
    41862           4.1 SP4
    41864           4.1 SP4 on IPSO
    41510           4.1 SP5
    41515           4.1 SP5 hotfix on IPSO
    41617           4.1 SP6
    50xxx           NG Feature Pack 0
    51131           NG Feature Pack 1 (except IPSO)
    51012           NG Feature Pack 1 on IPSO
    52163           NG Feature Pack 2 (except IPSO)
    52207           NG Feature Pack 2 on IPSO
    53225           NG Feature Pack 3

Recent 4.1 hotfixes from Check Point Support will have build numbers of the form 3xxyzz where:

• x is the major version (e.g. 41 = 4.1, NG = 50)
• y is the service pack number
• zz is a unique identifier

So, for example, 341526 is a hotfix for FireWall-1 4.1 SP5.