Table of Contents:

• Description
• Downloading and updating LIBSW files
• Verifying that updated LIBSW files can be processed correctly
• Related Solutions

 

---

 

Description

The LIBSW files are the files that are used by Check Point Security Management Server to compile the settings and policy for UTM-1 Edge device, which is managed by Check Point Management Server.

The LIBSW files hold the definitions for the Implied rules and general functions needed for the UTM-1 Edge Firewall to accept, drop, log and encrypt connections.

These files are constantly updated with new protections, support for new protocols, optimized for better performance, etc.

It is highly recommended, and sometimes necessary to upgrade these LIBSW to the latest available version.

The LIBSW files are always backward compatible, meaning the files of higher version can be safely used to compile settings and policy for Edge devices with firmware of lower version, e.g., LIBSW v8.2.30 files will work properly with firmware v7.0.5.

The opposite, forward compatibility, is not supported, e.g., LIBSW v6.5.0 files will not work at all with firmware v8.1.46.

 

Downloading and updating LIBSW files

Click here to go to Download page - download the latest available version, or a specific firmware, which is not the latest one available (or simply perform a search in SecureKnowledge).

Procedure:

1. 'LIBSW' folder is located inside the 'Edge Compatibility' folder.
   The location of the LIBSW folder depends on the operating system, version and installation folder of the Check Point Security Management Server.
   
   Get the exact location of 'Edge Compatibility' folder by running the following command:
   
   

   • on SecurePlatform OS / Gaia OS / Linux OS / Solaris OS

   [Expert@HostName]# $CPDIR/bin/cpprod_util   CPPROD_GetProdDir   EdgeCmp

   
   

   • on Windows OS

   C:\> "%CPDIR%\bin\cpprod_util.exe"   CPPROD_GetProdDir   EdgeCmp

   
   
   Default locations of 'Edge Compatibility' folder:

   OS	Version	Location
   SecurePlatform / Gaia / Linux	NGX R61 and higher	/opt/CPEdgecmp-<version>/
   Windows	NGX R65 and higher	%ProgramFiles%\CheckPoint\EDGECMP\<version>\
   Solaris	NGX R61 and higher	/opt/CPEdgecmp-<version>/

   
   
   
2. Go to the exact location of 'Edge Compatibility' folder.
   
   

   • Example on SecurePlatform OS / Gaia OS / Linux OS / Solaris OS

   [Expert@MGMT]# cd   /opt/CPEdgecmp-RXX/
   

   where RXX is the version of the Management Server (R65, R70, R75, etc)
   
   

   • Example on Windows OS

   C:\> cd /d    C:\Program Files\CheckPoint\EDGECMP\RXX\
   

   or use Windows Explorer to browse to that location
   
   where RXX is the version of the Management Server (R65, R70, R75, etc)

   
   
   Note:
   in Provider-1 / Multi-Domain environment, the steps that follow must
   be performed on Customer / Domain that manages the given Edge device:
   /opt/CPmds-RXX/customers/<CMA_Name>/CPEdgecmp-RXX/
   
   
3. Check the current version of LIBSW files.
   
   

   • Example on SecurePlatform OS / Gaia OS / Linux OS / Solaris OS

   [Expert@MGMT]# cat   /opt/CPEdgecmp-RXX/libsw/version.txt
   

   where RXX is the version of the Management Server (R65, R70, R75, etc)
   
   

   • Example on Windows OS

   C:\> more    C:\Program Files\CheckPoint\EDGECMP\RXX\libsw\version.txt
   

   or use Windows Explorer - simply double-click on the file
   
   where RXX is the version of the Management Server (R65, R70, R75, etc)

   
   
   
4. Back up the current LIBSW folder.
   
   

   • Example on SecurePlatform OS / Gaia OS / Linux OS / Solaris OS

   [Expert@MGMT]# mv   /opt/CPEdgecmp-RXX/libsw   /opt/CPEdgecmp-RXX/libsw_BKP
   

   where RXX is the version of the Management Server (R65, R70, R75, etc)
   
   

   • Example on Windows OS

   C:\> rename    "C:\Program Files\CheckPoint\EDGECMP\RXX\libsw"   "C:\Program Files\CheckPoint\EDGECMP\RXX\libsw_BKP"
   

   or use Windows Explorer - simply right-click on the folder - choose 'Rename'
   
   where RXX is the version of the Management Server (R65, R70, R75, etc)

   
   
   
5. Put the archive with new LIBSW files into 'Edge Compatibility' folder.
   
   

   • Example on SecurePlatform OS / Gaia OS / Linux OS / Solaris OS

   [Expert@MGMT]# mv   /PATH/libsw8250.tar   /opt/CPEdgecmp-RXX/
   

   where RXX is the version of the Management Server (R65, R70, R75, etc)
   
   

   • Example on Windows OS

   C:\> move    "DISK:\LOCATION\libsw8250.zip"   "C:\Program Files\CheckPoint\EDGECMP\RXX\libsw8250.zip"
   

   or use Windows Explorer to move the file to that location
   
   where RXX is the version of the Management Server (R65, R70, R75, etc)

   
   
   
6. Unpack the archive with new LIBSW files.
   
   

   • Example on SecurePlatform OS / Gaia OS / Linux OS / Solaris OS

   [Expert@MGMT]# tar xvf   /opt/CPEdgecmp-RXX/libsw8250.tar
   

   where RXX is the version of the Management Server (R65, R70, R75, etc)
   
   

   • Example on Windows OS

   
   use Windows Explorer - double-click on the ZIP file - copy the 'libsw8250' folder inside - drap-and-drop it onto current location,
   
   where RXX is the version of the Management Server (R65, R70, R75, etc)

   
   
   
7. Rename the folder with new LIBSW files to the correct name.
   
   

   • Example on SecurePlatform OS / Gaia OS / Linux OS / Solaris OS

   [Expert@MGMT]# mv   /opt/CPEdgecmp-RXX/libsw8250   /opt/CPEdgecmp-RXX/libsw
   

   where RXX is the version of the Management Server (R65, R70, R75, etc)
   
   

   • Example on Windows OS

   C:\> rename    "C:\Program Files\CheckPoint\EDGECMP\RXX\libsw8250"   "C:\Program Files\CheckPoint\EDGECMP\RXX\libsw"
   

   or use Windows Explorer - simply right-click on the folder - choose 'Rename'
   
   where RXX is the version of the Management Server (R65, R70, R75, etc)

   
   
   
8. If Management Server is installed on SecurePlatform OS / Linux OS / Solaris OS, it is recommended to execute a 'dos2unix' command on each of the LIBSW files.
   
   

   • Example on SecurePlatform OS / Gaia OS / Linux OS / Solaris OS

   [Expert@MGMT]# dos2unix   /opt/CPEdgecmp-RXX/libsw/*
   

   where RXX is the version of the Management Server (R65, R70, R75, etc)

 

Verifying that updated LIBSW files can be processed correctly

1. In SmartDashboard, install the Security Policy on each relevant Edge Gateway object / Edge SmartLSM profile.
   
   Note: policy installation will fail if there was any problem with the LIBSW files.
   
   
2. Disconnect the Edge device from Service Center:
   
   Edge - GUI - Services - Account - Connect to a Service Center - press Connect
   Uncheck the box 'Connect to a Service Center' - Next...Finish
   
   
3. Re-connect the Edge device to Service Center:
   
   Edge - GUI - Services - Account - Connect to a Service Center - press Connect
   Check the box 'Connect to a Service Center' - Next...Finish
   
   
4. Verify that Edge device has downloaded the policy from Service Center:
   
   Edge - GUI - Logs - Event Log
   should show that the policy was downloaded just a couple of seconds ago
   
   
5. Verify that the policy name on Edge device is the same as created in SmartDashboard:
   
   Edge - GUI - Setup - Tools - Diagnostics
   In addition, make sure the policy's date is correct.

 

Related Solutions

• sk43158 (Security Policy installation on UTM-1 Edge might fail after installing NGX R65 HFA or minor versions of R70 on Management Server)
  
  
• sk58360 (Policy installation process for UTM-1 Edge object fails because compilation scripts do not match firmware version)
  
  
• sk60745 (How to debug policy installation for UTM-1 Edge device on Security Management Server)

This solution is about products that are no longer supported and it will not be updated