From The sin within

This is not a HowTo written by me line by line. It's a compilation of two HowTos provided by Check Point to me when I had trouble upgrading an UTM-1 450 appliance from R62 to R65 using the WebUI upgrade packages. That upgrade path seems to be broken so another way of getting an updated version of NGX on the appliance was needed.

Here goes:

[edit] Create a bootable USB key

1. Download and extract the contents of the Creating a Bootable USB Key for UTM-1 file. The contents are: iso-kr, iso-rd, syslinux.cfg
2. Insert your USB Storage Device into an empty USB slot on your PC.
3. Format the USB drive. (Use any available tool to format the USB key as bootable.)

• Format as FAT.
• Select an appropriate letter for your disk-on-key, for example "F:".
• Use "FCD" as the Volume Label.

4. Extract all the files from syslinux-3.31.zip to a folder named syslinux on your primary hard drive, for example "C:".
5. At a Command Prompt, type: cd C:\syslinux\win32 (substitute "C:" for the drive letter of your hard drive) and press 'Enter'.
6. Type: syslinux.exe -f F: ("F:" represents the drive letter of the USB Device). Press 'Enter'.
7. Type: syslinux.exe -ma F:. Press 'Enter'.
8. Add/copy the following files to the top level directory of the USB disk: iso-kr, iso-rd, syslinux.cfg
9. Download the NGX R65 with Messaging Security ISO package (UTM-1 NGX R65 with Messaging Security CD ISO Image for the UTM-1 Appliance) from the Downloads tab of the Check Point Support Center site, and place it in the top level directory of the USB key.

[edit] Installing the Messaging Security package on the UTM-1 appliance using a DVD or USB Key

1. Connect the console cable to the appliance serial port. (Using the supplied serial console cable to the RJ45 port, open a hyperterminal and connect to the UTM-1 appliance. In the Port Settings window, the setting for the Serial console is 9600 8N1 (9600 BPS, 8 bits, no parity, 1 stop bit). From the flow control drop down menu, select Hardware. Configure the hyperterminal parameters.)
2. Connect a DVD drive or USB disk-on-key to a 450, 1050 or 2050 UTM-1 appliance.
3. Boot the UTM-1 appliance.
4. When prompted, press "B" to bring up the boot menu.
5. On the boot menu:

• If you are booting from a DVD, select "USB-CDROM" as the first boot device. The system boots up.
• If you are booting from a USB disk:
  • Select "USB-HDD" as the first boot device. The system boots up.
  • On the Select Partition Screen window, select the /dev/sda1 partition.

6.The standard SecurePlatform installation begins.
7.When prompted:

• Select the default IP address 192.168.1.1 with subnet 255.255.255.0 and default route 192.168.1.254. Note: You can enter an alternative IP addresses if necessary.
• Select "SecurePlatform", not "SecurePlatform PRO".
• Select port 4434 for the UTM-1 WebUI.

8. When installation completes, remove the DVD from the drive or disconnect the USB key, and reboot.

Credits go to Check Point for creating the procedure.