Take 43 - Ongoing

Running the fwm sic_reset command from Domain Management Server fails with "reset_objects: updateMultiple failed". Refer to sk142512.

• Log servers are not seen in SmartConsole Log Server tab after Advanced Upgrade to Jumbo Hotfix Accumulator Take 33.
• After new Domain creation, logs from this Domain are not seen in SmartConsole.

CPView is not supported on Multi-Domain Security Management environments.

If administrator updates his details (e.g. name, phone, email) and tries to publish the session, it fails with "Internal error" message.

• After Jumbo HFA installation, the session cannot be published or discarded and any further update will fail. Refer to sk144214.

"Error: SIC initialization failed because of failure in parsing the certificate file" error when user attempts to log in with certificate to API (mgmt_cli) with password including "!".

Attempt to update Threat Emulation images fails with "Could not send Threat Emulation images update command, validate SIC connectivity and install policy with Threat Emulation enabled for [name]" message.

Traffic is dropped when using non-FQDN Domain object in Security policy.

No service enforcement when creating "Other services" without match expression for TCP, UDP or SCTP.

When HTTPS Inspection is enabled and "Hide X-Forwarded-For in outgoing traffic" option is selected, the XFF header is not obfuscated on HTTPS traffic.

In some scenarios, connectivity issues between Capsule Workspace and Security gateway.

During upgrade, if Anti-Virus is enabled, all emails are stuck in MTA queue due to missing certificate.

Added support for custom extension used by Apple.

In rare scenarios, when the Log server miscalculates the available disk space, it may stop receiving logs from the connected gateways and cause the logs to accumulate locally on the Security gateway.
Refer to sk146152.

After Daylight saving time change, the logs from the time of change until the end of the day are not indexed and the "Illegal instant due to time zone offset transition (daylight savings time 'gap')" error is displayed in solr.elg file.

In rare scenarios, due to a connection attempt failure to the Security Management, the Security gateway starts logging locally.

Added Threat Emulation forensic report in SmartView Log card.

Concurrent connections monitoring can become inaccurate when "fw samp quota" rules are changed.

In some scenarios, large number of incorrectly classified "simlinux_br_port: dev == NULL !!!" debug messages appear in kernel message logs.

In some scenarios, standby cluster member sends PIM Hello packets.

Traffic from a Virtual System in VSX Cluster to Security Management Server is dropped with "Local interface address spoofing" log.
Refer to sk110473.

When using conv2db to recreate Gaia database from /config/active, comments are not skipped and the new database file may contain irrelevant information. Refer to sk139832.
Note: the issue is cosmetic only.

Connectivity problem for 10 Gigabit fiber network interfaces (be2net driver) after upgrade from R77.30.

syslog messages forwarded to external Syslog server, do not contain the host name.
Refer to sk100727.

In some scenarios, sporadic timeouts occur during snmpwalk run.

After Cluster failover, VPN tunnel is down and "Unknown SPI for IPsec packet" log is shown. Refer to sk112339.