Support Center > Search Results > SecureKnowledge Details
60000 / 40000 Appliances - Software and Hardware Compatibility
Solution

Table of Contents:

  • Software and Firmware versions
  • Software Blades support
  • Chassis and Modules Compatibility
  • Security Switch Module (SSM) Compatibility
  • Security Gateway Module (SGM) Compatibility
  • Supported upgrade paths
  • Related solutions
  • Revision history

 

Software and Firmware versions

To check the current firmware version on all SGMs, run:
[Expert@HostName:0]# asg_version -v

Enter the string to filter this table:

Component /
Version		 R75.035 R75.050 R75.051 R75.052 R75.40VS
for 61000		 R76SP /
R76SP.10 /
R76SP.20 /
R76SP.30 /
R76SP.40		 R76SP.50
Check
Point
software		 Take 55 Take 65 Take 77 Take 94 Take 141 Take 84
SSM60 Base
switch configuration		 7.5.20 7.5.20 7.5.20 7.5.20 7.5.20 7.5.20 N / A
SSM60 Base
switch firmware		 7.5.20 7.5.20 7.5.20 7.5.20 7.5.20 7.5.20 N / A
SSM60 Fabric
switch configuration		 7.5.20 7.5.20 7.5.20 7.5.20 7.5.20 7.5.20 N / A
SSM60 Fabric
switch firmware		 7.5.20 7.5.20 7.5.20 7.5.20 7.5.20 7.5.20 N / A
SSM160
firmware		 2.4.B6 2.4.B11 2.4.B11 2.4.B11 2.4.B27.2 5.5.x 5.5.R1.4.CP404.T
-ATCA404.binoxpkg
SSM440
firmware		 N / A N / A N / A N / A N / A N / A 5.5.R5.2.CP.T
-ATCA510.binoxpkg
CMM
firmware		 2.74 2.74 2.74 2.74 2.83 rev3

2.83
rev2 / rev3

3.40-rev4
(61000 N+N
Chassis)

2.83 rev3
(41000 / 61000)

3.40 rev6.1
(61000 N+N /
44000 /
64000)
SGMs
BIOS
image		 1.3 1.3 1.3 1.3 1.3

SGM220=1.3

SGM260=2.1

SGM220=1.3

SGM260=2.1

SGM400=2.28
IPMC
bootloader
image		 1.42 1.42 1.42 1.42 1.42

SGM220=1.54

SGM260=1.36 (1)

SGM220=1.54

SGM260=1.40
(upgrade
only if
necessary)

SGM400=1.00
IPMC
firmware
image		 1.52
1.42		 1.52 1.52 1.52 1.52

SGM220=1.52

SGM260=1.40

 SGM220=1.54

 

SGM260=1.4

SGM400=1.02
FPGA
image		 2.4 2.4 2.4 2.4 2.4

SGM220=2.4

SGM260=2.66

SGM220=1.54

SGM260=2.4

SGM400=2.34
FPGA
recovery
image		 2.4 2.4 2.4 2.4 2.4

SGM220=2.4

SGM260=2.66

SGM220=2.4

SGM260=2.66

SGM400=2.34
SSD
firmware		 4PC10302 4PC10302 4PC10302 4PC10302 4PC10302 4PC10362
or
2CV102M3

SGM220=
4PC10362 or
2CV102M3

SGM260=
N2010110 or
N2010112

SGM400=
N2010110 or
N2010112

Notes:

  1. Upgrade only if necessary. All versions between 1.36 and 1.40 are supported.

 

Software Blades support

Enter the string to filter this table:

Software Blade / Feature R75.035 R75.050 R75.051 R75.052 R75.40VS
for 61000		 R76SP /
R76SP.10 /
R76SP.20 /
R76SP.30 /
R76SP.40 /
R76SP.50 
  GW
mode		 GW
mode		 GW
mode		 GW
mode		 GW
mode		 VSX
mode		 GW
mode		 VSX
mode
Firewall Yes Yes Yes Yes Yes Yes Yes Yes
IPSec VPN Yes Yes Yes Yes Yes Yes Yes (1) Yes
IPS Yes Yes Yes Yes Yes Yes Yes Yes
Anti-Virus Yes Yes Yes Yes Yes Yes Yes Yes
Anti-Bot No No No No Yes Yes Yes Yes
URL Filtering Yes Yes Yes Yes Yes Yes Yes Yes
Identity Awareness Yes Yes Yes Yes Yes Yes Yes Yes
Application Control Yes Yes Yes Yes Yes Yes Yes Yes
Mobile Access No No No No Yes No Yes No
Data Loss Prevention No No No No Yes (1) No Yes (1) No
Monitoring No No No No No No No No
HTTPS Inspection No No No No Yes Yes Yes (1) Yes (1)
Hit Count No No No No Yes Yes Yes Yes

Notes:

  1. For IPv4 addresses only.

 

Chassis and Modules Compatibility

The following table shows which Modules and Software are supported by which Chassis model:

Enter the string to filter this table:

  61000
AC chassis
(Lambda)		 61000
DC chassis		 61000
AC chassis		 41000
AC chassis		 61000 N+N
AC chassis		 64000
AC chassis		 44000
AC chassis
 
PSU sockets (2) C15 N/A C13 C13 C19 C19 C15
SSM60 (5) Yes Yes Yes No Yes
(GW mode,
2 SSMs)		 No No
SSM160
 Yes Yes Yes Yes Yes Yes No
SSM440 (8)
 Yes Yes Yes No Yes Yes Yes
SGM220 (6)
 Yes (3) Yes (4) Yes (3) No Yes (4) No No
SGM220T
(for NEBS) (6)		 Yes (4) Yes Yes (4) No Yes (4) No No
SGM260 (7) Yes Yes Yes Yes Yes Yes Yes
SGM400 (9)
 No No No No Yes (8) Yes Yes
CMM Type A
 Yes Yes Yes Yes No No No
CMM Type B No No No No Yes (10) Yes Yes
Software R75.05X
and above		 R75.05X
and above		 R75.05X
and above		 R76SP.50
and above		 R76SP.50
and above

Notes:

  1. Old chassis: 3 power supply units in a 1U Tray; 2 such 1U Trays per chassis.
  2. Power cord depends on the country and whether customer connects the chassis to a rack, or to a power outlet.
  3. Common order.
  4. Less common order. When ordered - need to double check.
  5. SSM60 is not supported in VSX mode or in a 4-SSM deployment.
  6. SGM220 / SGM220T is not supported in a 4-SSM deployment.
  7. SGM260 supports a 4-SSM deployment.
  8. Additional PSUs are required in order to maintain N+N Redundancy Capabilities for more than 9 SGMs.
  9. Requires R76SP.50 and above.
  10. On 61000 N+N chassis, the CMM firmware is unique and is not interoperable with other chassis.

 

Security Switch Module (SSM) Compatibility

Notes, referenced in the tables, appear at the end of this section.

  • Management ports - Speed, Transceivers, and SKU (3)

    The following table shows the information about Management ports on various SSMs:

    Enter the string to filter this table:

    SSM Port speed Transceiver type SKU
    SSM60 (1) 2 x 1 GbE / 100 Mb SFP RJ-45 copper CPAC-TR-1T-SSM60/160-SFP
    SFP fiber SX CPAC-TR-1SX-SSM60-SFP
    SFP fiber LX CPAC-TR-1LX-SSM60-SFP
    2 x 10 GbE XFP fiber SR  
    XFP fiber LR  
    SSM160 2 x 1 GbE / 100 Mb SFP RJ-45 copper CPAC-TR-1T-SSM60/160-SFP
    SFP fiber SX CPAC-TR-1SX-SSM160-SFP
    SFP fiber LX CPAC-TR-1LX-SSM160-SFP
    SFP fiber SR CPAC-TR-1SR-SSM160-SFP
    2 x 10 GbE SFP+ fiber SR CPAC-TR-10SR-SSM160-SFP+
    SFP+ fiber LR CPAC-TR-10LR-SSM160-SFP+
    SSM440 2 x 10/100/1000BASETX SFP RJ-45 copper CPAC-TR-1T-SSM440
    2 x 10 GbE SFP+ fiber SR CPAC-TR-10SR-SSM440
    2 x 10 GbE SFP+ fiber LR CCPAC-TR-10LR-SSM440

  • Traffic ports - Speed, Transceivers, and SKU (3)

    The following table shows the information about Traffic ports on various SSMs:

    Enter the string to filter this table:

    SSM Port speed Transceiver type SKU
    SSM60 (1) 5 x 10 GbE XFP fiber SR  
    XFP fiber LR  
    SSM160 7 x 1 GbE / 10 GbE SFP+ fiber SR CPAC-TR-10SR-SSM160-SFP+
    SFP+ fiber LR CPAC-TR-10LR-SSM160-SFP+
    SFP fiber SR CPAC-TR-1SR-SSM160-SFP
    SFP fiber SX CPAC-TR-1SX-SSM160-SFP
    SFP fiber LX CPAC-TR-1LX-SSM160-SFP
    SFP RJ-45 copper CPAC-TR-1T-SSM60/160-SFP

    2 x 40G

    Use SR splitter to
    convert each port
    to 4 x 10 GbE
    (total of 2x4x10G)

    		 QSFP fiber SR CPAC-TR-40SR-SSM160-QSFP
    QSFP fiber LR CPAC-TR-40LR-SSM160-QSFP
    SSM440 7 x 1 GbE / 10 GbE SFP+ fiber SR (10G, MM, LC) CPAC-TR-10SR-SSM440
    SFP+ fiber LR (10G, SM, LC) CPAC-TR-10LR-SSM440
    SFP fiber SX (1G, MM, LC) CPAC-TR-1SX-SSM440
    SFP fiber LX (1G, SM, LC) CCPAC-TR-1LX-SSM440
    SFP RJ-45 copper (1G) CPAC-TR-1T-SSM440

    2 x 40 GbE / 100 GbE

    Use SR splitter to
    convert each port
    to 4 x 10 GbE
    (total of 2x4x10G)

    		 QSFP fiber SR (40G, MPO) CPAC-TR-40SR-SSM440
    QSFP fiber LR (40G, SM, LC) CPAC-TR-40LR-SSM440
    QSFP28 fiber SR (100G, MM, MPO) CPAC-TR-100SR-SSM440
    QSFP28 fiber MR CWDM (100G, SM, LC) CPAC-TR-100MR-SSM440
    QSFP28 fiber MR LAN WDM (100G, SM, LC) CPAC-TR-100MR-WDM-SSM440
    QSFP28 fiber LR CWDM (100G, SM, LC) CPAC-TR-100LR-SSM440 

    2 x 40 GbE

    Use SR splitter to
    convert each port
    to 4 x 10 GbE
    (total of 2x4x10G)

    		 QSFP fiber SR (40G, MPO) CPAC-TR-40SR-SSM440
    QSFP fiber LR (40G, SM, LC) CPAC-TR-40LR-SSM440

  • Sync ports (2) - Speed, Transceivers, and SKU (3)

    The following table shows the information about Sync ports on various SSMs:

    Enter the string to filter this table:

    SSM Port speed Transceiver type SKU
    SSM60 (1) 1 x 10 GbE XFP fiber SR  
    XFP fiber LR  
    SSM160 (*) 1 x 10 GbE SFP+ fiber SR CPAC-TR-10SR-SSM160-SFP+
    SFP+ fiber LR CPAC-TR-10LR-SSM160-SFP+
    SSM440 1 x 10 GbE SFP+ fiber SR (10G, MM, LC) CPAC-TR-10SR-SSM440
    SFP+ fiber LR (10G, SM, LC) CPAC-TR-10LR-SSM440

    (*) On SSM160, it is not supported to change the speed from 10 GbE to 1 GbE using the 'asg_port_speed' command.

  • Security Gateway Modules (SGMs) support

    The following table shows the supported combinations of various SSMs and SGMs on the chassis:

    Important Note: Unless specifically stated otherwise, this table applies to all chassis models (41000 / 44000 / 61000 / 61000 N+N / 64000).

    Enter the string to filter this table:

    SGM SSM60 (1) SSM160 SSM440
    SGM220 Yes Yes Yes
    SGM220T
    (for NEBS) (*)    		 Yes Yes Yes
    SGM240 No Yes Yes
    SGM260 Yes (**) Yes Yes
    SGM400 No Yes Yes

    (*) SGM220T is supported only by the 61000 / 61000 N+N Security Systems.

    (**) Only 2 x SSM60 (Dual Star).

  • Software versions support

    The following table shows which SSMs are supported by which software versions:

    Enter the string to filter this table:

    Version SSM60 (1) SSM160 SSM440
    R75.05X GW mode only GW mode only No
    R75.40VS GW mode only GW and VSX modes No
    R76SP GW mode only GW and VSX modes No
    R76SP.10 GW mode only GW and VSX modes No
    R76SP.20 GW mode only GW and VSX modes No
    R76SP.30 GW mode only GW and VSX modes No
    R76SP.40 GW mode only GW and VSX modes No
    R76SP.50 No GW and VSX modes GW and VSX modes

  • Backplane topology support

    The following table shows which SSMs support various Dual Star topologies:

    Topology SSM60 (1) SSM160 SSM440
    Dual Star
    (2-SSM deployment)    		 Yes Yes No
    Dual Dual Star
    (4-SSM deployment)    		 No Yes (4) No

Notes:

  1. SSM60 is not supported in VSX mode, or in a 4-SSM deployment.
    SSM60 is only for customers that wish to upgrade their 61000 SW.
  2. In HA chassis, customer must purchase four transceivers for sync purposes.
  3. Refer to Product Catalog:
    1. Go to the section "More Appliances & Solutions"
    2. Click on the "Customized Solutions"
    3. In the "Model" column, select the appliance
    4. In the "Model Information" column, click on the "Select" button
    5. In the section "Accessories & Add Ons", click on the "More Accessories & Add ons" link
    Refer to 44000 and 64000 Security Systems datasheet and 41000 and 61000 Security Systems datasheet.
  4. Supported starting in R76SP, only on 61000 chassis with SGM260.

 

Security Gateway Module (SGM) Compatibility

  • Hardware information

    The following table shows various hardware information about SGMs:

    Criteria SGM220 SGM220T
    (for NEBS) (1)    		 SGM240 SGM260 SGM400
    CPU Cores 8 / 12 8 / 12 20 physical /
    40 with enabled
    Hyper Threading    		 20 physical /
    40 with enabled
    Hyper Threading    		 28 physical /
    56 with enabled
    Hyper Threading
    RAM 12 GB / 24 GB 12 GB / 24 GB 64 GB 64 GB 64 GB,
    but faster than
    SGM240 / SGM260
    Back-plane interfaces 10 GbE 10 GbE 10 GbE 10 GbE 40 GbE (2)
    Serial Over LAN No No No No Yes

    Notes:

    1. SGM220T is supported only by the 61000 / 61000 N+N Security Systems.
    2. Refer to sk118435: 60000 / 40000 Appliances - Working with 40G Back Plane connectivity for SGM400.

  • Software versions support

    The following table shows which SGMs are supported by which software versions:

    Enter the string to filter this table:

    Version SGM220 SGM220T
    (for NEBS) (*)    		 SGM240 SGM260 SGM400
    R75.05X Yes Yes No No No
    R75.40VS Yes Yes Yes No No
    R76SP Yes Yes Yes Yes No
    R76SP.10 Yes Yes Yes Yes No
    R76SP.20 Yes Yes Yes Yes No
    R76SP.30 Yes Yes Yes Yes No
    R76SP.40 Yes Yes Yes Yes No
    R76SP.50 Yes Yes Yes Yes Yes

    (*) SGM220T is supported only by the 61000 / 61000 N+N Security Systems.

  • Supported combinations of different SGMs on the same chassis

    By default, you should always install pairs of the same SGMs (e.g., either 2 x SGM260, or 2 x SGM400).
    Only in specific cases, it is supported to install a combination of different SGMs.

    Enter the string to filter this table:

      SGM220 SGM220T
    (for NEBS) (*)    		 SGM240 SGM260 SGM400
    SGM220 Yes Yes (**) No No No
    SGM220T Yes (**) Yes No No No
    SGM240 No No Yes No No
    SGM260 No No No Yes No
    SGM400 No No No No Yes

    (*) SGM220T is supported only by the 61000 / 61000 N+N Security Systems.

    (**) Not the recommended, as the SGM220T may become a system bottle due to different CPU frequencies.

 

Supported upgrade paths

The following table shows the supported upgrade paths:

Enter the string to filter this table:

Source version Target version
  R75.05x R75.40VS R76SP R76SP.10 R76SP.10_VSLS R76SP.20 R76SP.30 R76SP.40 R76SP.50
R75.05x x Yes No No No No No No No
R75.40VS x x Yes Yes No Yes Yes Yes No
R76SP x x Yes Yes Yes Yes Yes Yes No
R76SP.10 x x x x Yes Yes Yes Yes Yes
R76SP.10_VSLS x x x x x Yes Yes Yes Yes
R76SP.20 x x x x x x Yes Yes Yes
R76SP.30 x x x x x x x Yes Yes
R76SP.40 x x x x x x x x Yes
R76SP.50 x x x x x x x x x

Versions R76SP and above require Security Management Server / Multi-Domain Security Management Server R76 and above.

Refer to 60000 / 40000 Security System Release Notes (R76SP, R76SP.10, R76SP.10_VSLS, R76SP.20, R76SP.30, R76SP.40, R76SP.50)

 

 

Revision history

Show / Hide revision history

Date Description
14 Sep 2017
  • "Chassis and Modules Compatibility" section - updated the table to show that SGM400 is not supported on "61000 AC chassis (Lambda)" and on "61000 DC chassis"
12 Sep 2017
  • "Chassis and Modules Compatibility" section - updated the table to show that SGM400 is not supported on "61000 AC chassis"
16 Aug 2017
  • Added dynamic search filter to some tables in the article
06 July 2017
05 July 2017
  • "Security Switch Module (SSM) Compatibility" section - updated the SKU for SSM440 transceivers
04 May 2017
  • "Software and Firmware versions" section - removed irrelevant information
03 May 2017
  • "Revision history" section - added this section
  • "Supported upgrade paths" section - corrected the information for "R76SP.50"
  • Minor text improvements
02 May 2017
  • Redesigned the article
  • Added 44000 and 64000 chassis
  • Added SSM440 and SGM400
  • Added R76SP.50 version
06 Aug 2013
  • First release of this article
Applies To:
  • This SK replaces sk100556

Give us Feedback
Please rate this document
[1=Worst,5=Best]
Comment