Support Center > Search Results > SecureKnowledge Details
What are LIBSW files on Management Server Technical Level
Solution

Table of Contents:

  • Description
  • Downloading and updating LIBSW files
  • Verifying that updated LIBSW files can be processed correctly
  • Related Solutions

 


 

Description

The LIBSW files are the files that are used by Check Point Security Management Server to compile the settings and policy for UTM-1 Edge device, which is managed by Check Point Management Server.

The LIBSW files hold the definitions for the Implied rules and general functions needed for the UTM-1 Edge Firewall to accept, drop, log and encrypt connections.

These files are constantly updated with new protections, support for new protocols, optimized for better performance, etc.

It is highly recommended, and sometimes necessary to upgrade these LIBSW to the latest available version.

The LIBSW files are always backward compatible, meaning the files of higher version can be safely used to compile settings and policy for Edge devices with firmware of lower version, e.g., LIBSW v8.2.30 files will work properly with firmware v7.0.5.

The opposite, forward compatibility, is not supported, e.g., LIBSW v6.5.0 files will not work at all with firmware v8.1.46.

 

Downloading and updating LIBSW files

Click here to go to Download page - download the latest available version, or a specific firmware, which is not the latest one available (or simply perform a search in SecureKnowledge).

Procedure:

  1. 'LIBSW' folder is located inside the 'Edge Compatibility' folder.
    The location of the LIBSW folder depends on the operating system, version and installation folder of the Check Point Security Management Server.

    Get the exact location of 'Edge Compatibility' folder by running the following command:

    • on SecurePlatform OS / Gaia OS / Linux OS / Solaris OS
    [Expert@HostName]# $CPDIR/bin/cpprod_util   CPPROD_GetProdDir   EdgeCmp

    • on Windows OS
    C:\> "%CPDIR%\bin\cpprod_util.exe"   CPPROD_GetProdDir   EdgeCmp


    Default locations of 'Edge Compatibility' folder:
    OS Version Location
    SecurePlatform / Gaia / Linux NGX R61 and higher /opt/CPEdgecmp-<version>/
    Windows NGX R65 and higher %ProgramFiles%\CheckPoint\EDGECMP\<version>\
    Solaris NGX R61 and higher /opt/CPEdgecmp-<version>/


  2. Go to the exact location of 'Edge Compatibility' folder.

    • Example on SecurePlatform OS / Gaia OS / Linux OS / Solaris OS
    [Expert@MGMT]# cd   /opt/CPEdgecmp-RXX/
    
    where RXX is the version of the Management Server (R65, R70, R75, etc)

    • Example on Windows OS
    C:\> cd /d    C:\Program Files\CheckPoint\EDGECMP\RXX\
    
    or use Windows Explorer to browse to that location

    where RXX is the version of the Management Server (R65, R70, R75, etc)


    Note:
    in Provider-1 / Multi-Domain environment, the steps that follow must
    be performed on Customer / Domain that manages the given Edge device:
    /opt/CPmds-RXX/customers/<CMA_Name>/CPEdgecmp-RXX/

  3. Check the current version of LIBSW files.

    • Example on SecurePlatform OS / Gaia OS / Linux OS / Solaris OS
    [Expert@MGMT]# cat   /opt/CPEdgecmp-RXX/libsw/version.txt
    
    where RXX is the version of the Management Server (R65, R70, R75, etc)

    • Example on Windows OS
    C:\> more    C:\Program Files\CheckPoint\EDGECMP\RXX\libsw\version.txt
    
    or use Windows Explorer - simply double-click on the file

    where RXX is the version of the Management Server (R65, R70, R75, etc)


  4. Back up the current LIBSW folder.

    • Example on SecurePlatform OS / Gaia OS / Linux OS / Solaris OS
    [Expert@MGMT]# mv   /opt/CPEdgecmp-RXX/libsw   /opt/CPEdgecmp-RXX/libsw_BKP
    
    where RXX is the version of the Management Server (R65, R70, R75, etc)

    • Example on Windows OS
    C:\> rename    "C:\Program Files\CheckPoint\EDGECMP\RXX\libsw"   "C:\Program Files\CheckPoint\EDGECMP\RXX\libsw_BKP"
    
    or use Windows Explorer - simply right-click on the folder - choose 'Rename'

    where RXX is the version of the Management Server (R65, R70, R75, etc)


  5. Put the archive with new LIBSW files into 'Edge Compatibility' folder.

    • Example on SecurePlatform OS / Gaia OS / Linux OS / Solaris OS
    [Expert@MGMT]# mv   /PATH/libsw8250.tar   /opt/CPEdgecmp-RXX/
    
    where RXX is the version of the Management Server (R65, R70, R75, etc)

    • Example on Windows OS
    C:\> move    "DISK:\LOCATION\libsw8250.zip"   "C:\Program Files\CheckPoint\EDGECMP\RXX\libsw8250.zip"
    
    or use Windows Explorer to move the file to that location

    where RXX is the version of the Management Server (R65, R70, R75, etc)


  6. Unpack the archive with new LIBSW files.

    • Example on SecurePlatform OS / Gaia OS / Linux OS / Solaris OS
    [Expert@MGMT]# tar xvf   /opt/CPEdgecmp-RXX/libsw8250.tar
    
    where RXX is the version of the Management Server (R65, R70, R75, etc)

    • Example on Windows OS

    use Windows Explorer - double-click on the ZIP file - copy the 'libsw8250' folder inside - drap-and-drop it onto current location,

    where RXX is the version of the Management Server (R65, R70, R75, etc)


  7. Rename the folder with new LIBSW files to the correct name.

    • Example on SecurePlatform OS / Gaia OS / Linux OS / Solaris OS
    [Expert@MGMT]# mv   /opt/CPEdgecmp-RXX/libsw8250   /opt/CPEdgecmp-RXX/libsw
    
    where RXX is the version of the Management Server (R65, R70, R75, etc)

    • Example on Windows OS
    C:\> rename    "C:\Program Files\CheckPoint\EDGECMP\RXX\libsw8250"   "C:\Program Files\CheckPoint\EDGECMP\RXX\libsw"
    
    or use Windows Explorer - simply right-click on the folder - choose 'Rename'

    where RXX is the version of the Management Server (R65, R70, R75, etc)


  8. If Management Server is installed on SecurePlatform OS / Linux OS / Solaris OS, it is recommended to execute a 'dos2unix' command on each of the LIBSW files.

    • Example on SecurePlatform OS / Gaia OS / Linux OS / Solaris OS
    [Expert@MGMT]# dos2unix   /opt/CPEdgecmp-RXX/libsw/*
    
    where RXX is the version of the Management Server (R65, R70, R75, etc)

 

Verifying that updated LIBSW files can be processed correctly

  1. In SmartDashboard, install the Security Policy on each relevant Edge Gateway object / Edge SmartLSM profile.

    Note: policy installation will fail if there was any problem with the LIBSW files.

  2. Disconnect the Edge device from Service Center:

    Edge - GUI - Services - Account - Connect to a Service Center - press Connect
    Uncheck the box 'Connect to a Service Center' - Next...Finish

  3. Re-connect the Edge device to Service Center:

    Edge - GUI - Services - Account - Connect to a Service Center - press Connect
    Check the box 'Connect to a Service Center' - Next...Finish

  4. Verify that Edge device has downloaded the policy from Service Center:

    Edge - GUI - Logs - Event Log
    should show that the policy was downloaded just a couple of seconds ago

  5. Verify that the policy name on Edge device is the same as created in SmartDashboard:

    Edge - GUI - Setup - Tools - Diagnostics
    In addition, make sure the policy's date is correct.

 

This solution is about products that are no longer supported and it will not be updated

Give us Feedback
Please rate this document
[1=Worst,5=Best]
Comment