Take 135 - Ongoing

In some scenarios, the FWM process fails to start after a successful upgrade with the "Found an indication that the current domain was migrated, and the migration had failed. Cannot start after a migration failure" message in the fwm.elg file.

In a rare scenario, the $CPDIR/tmp/ directory is filled with "CKP_mutex::_opt_CPsuite-RXX_fw1_log__..." files. Refer to sk36754.

• Fix is relevant for Gaia 3.10 only.

In some scenarios, upgrade from R7x is not aborted when there is not enough disk space to complete the import operation.

High Availability synchronization between Management Servers may fail when there is no enough disk space in the root partition.

In some scenarios, disconnected sessions with no changes or locks appear in SmartConsole session view.

In some scenarios, cpm_status.sh reports incorrect CPM status. Refer to sk162633.

The 'FWM sic_reset' command does not print which object still has an IKE certificate.

"dleserver.utils.UidManager" errors on cma_migrate failure on Multi-Domain Server upgraded from R80.

The cma_migrate may fail if the IPS version does not exist on the R80.x Multi-Domain Management Server.

NEW: Added integration of Management API with Ansible 2.9. For more info, see: https://galaxy.ansible.com/check_point/mgmt

In a rare scenario, when editing a Star VPN community, SmartConsole terminates.

In some scenarios, applying "Where used" from the local Domain on an object that is used in global policies, may return results from the global policies that are not assigned to the local Domain. Refer to sk162753.

In Multi-Domain environment, IPS protections become staging on each domain after global policy assignment while the protection does have override/staging status in the global domain.

In some scenarios, Hit Count on specific rules does not increment after they were recently created or re-ordered. Refer to sk138033.

Improved misleading log for connections that terminate before detection.

Since R80.20, in some scenarios, predictable TCP sequences are generated by the Security Gateway. Refer to sk164775.

Improved a Proxy connectivity while Anti-Virus Blade works in Hold mode.

In some scenarios, enabling the Multi-Queue on a line card enables the Multi-Queue also on the on-board interfaces. Refer to sk162622.

In some scenarios, when retrieving the UserCheck logs, FWD process on the Security gateway may unexpectedly exit.

In a rare scenario involving multiple disconnections and reconnections between Security gateway and Log Server, connection is not automatically restored and logs may not be written locally. Refer to sk164852.

DLP activation was optimized to reduce the CPU consumption.

In some scenarios, HTTPS traffic is not categorized as expected.

Cannot update the Geo Policy IPToCountry database on Security Gateways. Refer to sk163672.

NEW: Added support of RDP over SSL inspection as part of Inbound HTTPS Inspection Blade. (Relevant for Remote Desktop Protocol Vulnerability CVE-2019-0708.)

In a rare scenario, FTP Data connections do not pass while SYN Defender is active and enforcing.

"sume_from_fw_forward: dropping packet of for vsid=0 due to loop prevention" dmesg errors during policy installation failure.

"Gaia Web-UI recognized a non-valid input data" error when creating a scheduled backup in WebUI via SCP or FTP with special characters used.

In some scenarios, the Smart-1 3150 appliance becomes unresponsive after enabling the optical interface.

• To upgrade to R80.30 using the Jumbo Hotfix, make sure all the interfaces are in state OFF. Refer to sk146512.

16000 and 26000 Appliances with CPAC-4-1/10F-C NICs (using i40e driver) connected to some specific Cisco switches are flopping. Refer to sk163267.

• Fix is relevant for Gaia 3.10 only.

CPD process may unexpectedly exit when attempting to query sensor values on Smart-1 525, Smart-1 5050 and Smart-1 5150 appliances.

In a rare scenario, the routed process may unexpectedly exit during ClusterXL failover when BGP is configured. Refer to sk165682.

The "vsx_util vsls" command does not display in full the long names of the VSX server name. Refer to sk163073.

Endpoint Management may fail on FileVault recovery for MacOS clients, when a computer re-joins domain.

Packets from SSL Network Extender are dropped: "Reason: decrypted and user methods are not identical (VPN Error code 01)". Refer to sk163636.