Known Limitations

• You cannot run the CDT on:
  • Security Management Server in the Backup state (in Management High Availability deployment)
  • Dedicated SmartEvent Server
  • Dedicated Log Server
  • Multi-Domain Log Server
  • Domain Log Server
  • Members of a Full High Availability cluster
• You cannot run multiple instances of the CDT at the same time (except when you use the Retry Mode).

  On Multi-Domain Server, this limitation applies to the same Domain Management Server.

• CDT does not support exported CPUSE packages (with *.tar extension).

  Note - CDT supports only CPUSE Offline packages (with*.tgz extension).

• CDT does not support Clean Install of a Major version.

  Note - This does not apply to the RMA mode.

• CDT does not support clusters with more than two members.

  Note - This does not apply to the VSX Virtual System Load Sharing cluster.

• CDT does not support ClusterXL in Load Sharing modes.
• CDT does not support an upgrade of Security Gateways in VSX mode, if you run the CDT on an R80.20.M1 Management Server (sk123473).
• CDT does not support a Major version upgrade of Security Gateways that run QoS Policy or Desktop Policy.
• CDT does not support Scalable Platforms 40000 and 60000.
• CDT does not support ROBO Gateways managed by SmartProvisioning.
• CDT does not support installation of packages that contain RPM files (for example, CPinfo package).
• CDT does not support Security Gateways that run only IPv6 (without IPv4 address configured on the applicable management interface).
• When the CDT deploys a package to a Security Gateway, it installs only the Access Control Policy.

  If the Security Gateway also has a Threat Prevention Policy, you must install it from the SmartConsole.

• You cannot run the CDT as a scheduled job in Gaia OS on your Management Server.
• Before you upgrade VSX Gateways or VSX Clusters, you must back up your Management Server (see sk100395).
• If you use the Connectivity Upgrade (CU) in ClusterXL, see the Connectivity Upgrade R77.x and R80.x Versions Best Practices - Chapter Connectivity Upgrade Limitations.
• CloudGuard:
  • CDT does not support CloudGuard Clusters.
  • CDT only supports CloudGuard Gateway R80.10 and above.
  • CDT only supports <CloudGuard Controllers R80.10 and above.
  • CDT supports only Hotfix and Jumbo Hotfix Accumulator packages.

    CDT does not support Minor and Major upgrade packages.

  • When deploying a Hotfix package on Azure Scale Set or AWS Scaling Group:

    a. Disable the Auto-Scaling in the Cloud Portal (to prevent scale-in and scale-out events during the package deployment).

    b. Deploy the Hotfix package with CDT.

    c. Enable the Auto-Scaling in the Cloud Portal.

• CDT might fail to deploy a package on a remote Security Gateway, if there is high traffic load on that Security Gateway.
• CDT does not support RMA Backup and RMA Restore on computers with a CPInfo hotfix installed (a hotfix package that replaced the $INFODIR/bin/cpinfo).
• Hotfix for disabling and removing Kaspersky Lab components (see sk118539):
  • CDT does not support installation of this hotfix.
  • CDT does not support RMA Backup on computers, on which this hotfix is installed.
  • CDT does not support RMA Restore on computers, on which this hotfix was installed.