Take 134 - Ongoing

In some scenarios, migration with R80.20 Migration Tool fails with "Database export was done with migration tools for different version" error.

In a rare scenario, the $CPDIR/tmp/ directory is filled with "CKP_mutex::_opt_CPsuite-RXX_fw1_log__..." files. Refer to sk36754.

In some scenarios, disconnected sessions with no changes or locks appear in SmartConsloe session view.

In some scenarios, policy installation fails when installation target is Check Point Host.

In a rare scenario, all users connected to the Management Server get disconnected and new logins fail until the Management Server is restarted.

The 'fwm sic_reset' command does not print which object still has an IKE certificate.

In some scenarios, upgrade of R7x secondary Multi-Domain Management Server or Multi-Domain Log Server fails.

When performing login using mgmt_cli as root admin (with '-r' set to "true"), session timeout is not set.

In some scenarios, when running the "show-mdss" command with "details-level full" option, not all Domains are retrieved.

In some scenarios, administrator cannot open the 'RemoteAccess' - VPN community object for editing.

In Multi-Domain environment, IPS protections become staging on each domain after global policy assignment while the protection does have override/staging status in the global domain.

Improved misleading log for connections that terminate before detection.

Connectivity issues on some HTTPS sites (as login pages) when Security gateway is configured as proxy. Refer to sk147878.

Improved DNS caching and negative DNS response handling.

In a rare scenario, Security gateway may crash.

In some scenarios, no SIC after applying the ICA certificate replacement procedure.

In a rare scenario involving multiple disconnections and reconnections between Security gateway and Log Server, connection is not automatically restored and logs may not be written locally. Refer to sk164852.

In some scenarios, the user cannot see his Check Point logs in the LogRhythm platform using Log Exporter.

DLP activation was optimized to reduce the CPU consumption.

In some scenarios, HTTP traffic is blocked with "HTTP parsing error occurred (2)" and "parameters are undecodable in request" errors. Refer to sk160092.

In a rare scenario in a ClusterXL environment, SYN Defender may incorrectly drop a valid traffic.

Some traffic may not pass when Policy Based Routing (PBR) and SecureXL are enabled. Refer to sk163252.

In some scenarios, SecureXL drops the TCP traffic for the particular connection for invalid state reasons. Refer to sk147093.

Drop templates are not disabled for USFW (User space Firewall mode).

"Gaia Web-UI recognized a non-valid input data" error when creating a scheduled backup in WebUI via SCP or FTP with special characters used.

When MaaS tunnels are added, the ROUTED process may unexpectedly exit.

The "vsx_util vsls" command does not display in full the long names of the VSX server name. Refer to sk163073.

SmartView Monitor VPN tunnel status may show incorrect or missing tunnels status for a cluster object.

In some scenarios, connectivity issue may appear in VPN and HTTPS portals. Refer to sk109140.

If the VPN tunnel is configured with GCM ciphers for Phase 2, encrypted traffic may be dropped. Refer to sk152832.

In some scenarios, subnet objects may not contain all the relevant IP addresses for VMSS VMs.

NEW: Added the feature to use epmCommands with object nids.

Some messages in self-help portal are not properly localized in Japanese.