Take 149 - Ongoing

The cpm_solr process may unexpectedly exit and cause one of the following:

• The upgrade of a Management machine may stuck on 58%
• The Management HA synchronization may fail with "NGM failed to import data" error
• Users may not be able to log in.

In some scenarios, the exported database may be very large and include redundant data.

If the database contains an internal user object with the same account name as an administrator object, then after the user publishes any change to the internal user object, the login in SmartConsole with the administrator account may fail.

Policy verification may fail after the user does the following steps: Configures specific install targets for a policy, publishes them, changes the install targets back to "All Gateways", and tries to install them on a Gateway which is not in the original list of targets.

In rare scenarios, publishing a session fails with the following "Action Failed due to an Internal Error" error.

Discarding the session in SmartConsole completes as "discarded", but the changes are still there.

The same behavior occurs in the Management API:

mgmt_cli -r true discard uid <UID>

number-of-discarded-changes: 4

message: "OK"

In a rare scenario, following a failure to delete a Domain, the Management Server may fail to start.

In some scenarios, IPS update fails in the Global Domain after an upgrade from R80.10.

In some scenarios, policy installation from the Domain Management Server fails after mds_backup procedure that was interrupted. Refer to sk165559.

The Administrator and Trusted Clients pop-up editors at the Multi-Domain Server level show all domain names linked to these objects. Domain Managers with partial permissions, may see the names of domains that they are not permitted to see.

In some scenarios, on a Global domain, when the user sets a logging option of an IPS protection whose activation is Detect or Prevent, the activation of the protection is set to "Inactive" on the local domain after an Assign Global Policy operation.

Deletion of LSM ROBO cluster may cause the FWM process so unexpectedly exit.

Improved multicast routing under high load and/or during system initialization.

In some scenarios, exporting a large number of logs to Excel may fail and cause SmartView to restart.

In some scenarios, Threat Emulation Logs cannot be viewed in the logging or reporting views because of a certain format of the "file size" field sent from the Security Gateway.

In some scenarios, multiple "idapi_load_data_impl: session id <Session ID> not found in client_db, although ip <Session IP> was assigned to it" errors appear in /var/log/messages file. Refer to sk167174.

In a rare scenario, a memory leak may appear when SSL inspection is enabled.

HTTPS Inspection's default CA certificate was upgraded to use a signing algorithm based on SHA256 instead of SHA1. Refer to sk163932.

PIM may be unable to resolve outbound interface of multicast route when unicast route lookup fails.

In some scenarios, a corrupted BGP AS4_PATH attribute value may result in an invalid, long BGP update that is rejected by the BGP peer.

NEW: Added acceleration support for Ethernet Over IP Tunneling (EOIP). EOIP is RFC 3378 protocol # 97 used between Wireless AP and Wireless Cisco controller.

CVE-2020-8597: pppd is vulnerable to buffer overflow. Refer to sk165875.