R80.40 Jumbo Hotfix Take 180

Migration from the Management Server to the Domain Server may get stuck for 6-7 hours and then fail.

High Availability synchronization may fail with the "Failed to update shared licenses" error.

Deleting a Domain operation may fail with an "internal error" when more than one of the Security Gateways in the Domain points to the same cluster object in the NAT configuration.

The output of the "show opsec-application" API command may not show the host object name or UID.

The "CPLogGetMyIp: fwobj_get_myown failed" error may be printed in CLI when starting cpboot.

In some scenarios, in a Multi-Domain Management Server environment, SmartConsole may unexpectedly disconnect.

In the Compliance Blade view, regulations with disabled best practices may display a result that does not correspond with the best practices listed below it.

In SmartView, the "Top Users that Downloaded Malicious Files" widget in the "Hosts that Encountered Malicious files" view may show no results, although there are matches.

In some scenarios, the Forensics report fails to open from Harmony Endpoint logs.

In some scenarios, the FWD process may unexpectedly exit in a Log Server environment. Refer to sk179596.

UPDATE: Added a defense mechanism against partial header attacks known as "Slowloris DoS" (CVE-2007-6750).

Deleting IP addresses in the SAM Database may fail.

After an upgrade, in a setup with a single Virtual System (VS), the Security Gateway may crash.

Improved the recovery mechanism for Dynamic Balancing.

Enhanced connectivity during HTTP2 Inspection.

In a cluster environment, an ICAP implied rule may not be enforced after policy installation.

UPDATE: In the Custom Intelligence Feeds feature, decreased the hash indicators loading time.

SCP connections may get terminated with a protocol error.

Removed unnecessary debug messages in the Identity revocation flow.

• The /var/log/messages directory may be flooded with "appi_app_db_get_kattrib_info: attribs hash does not exist" messages.

• A Security Gateway may be slow or unresponsive.

Refer to sk178406.

Logs generated by IPS Bypass may not show the correct CPU/Memory Utilization.

• Downloading or opening the packet capture file from the Anti-Bot log entries may fail with a "File fetching is still in progress" message.

• When opening the capture file link in the log entry in SmartConsole, the "Failed getting the incident file from the gateway. It may be expired" error is shown.

Manual Web Form Single Sign-On (SSO) may fail when passwords contain special characters.

During a Multi-Version Cluster (MVC) upgrade, there may be state flapping when using the sync interface MAC address bit "02".

In a cluster configured in the Active-Active mode, there may be connectivity issues when one of the cluster interfaces is down on one of the cluster members.

UPDATE: The MSS value in the SYN Cookie response can now be configured.

Policy installation may cause cluster failover and impact the traffic flowing through the cluster.

A kernel memory leak may occur in an environment with a cluster in Active/Standby bridge mode.

When running CPView and working in Source-Specific Multicast Mode (PIM-SSM) simultaneously, the ROUTED process may unexpectedly exit and create a core dump file.

Resolved the “HTTP Response splitting” vulnerability in Security Gateway portals. Refer to sk179705.

Connection to Endpoint Security Client from the Remote Access VPN may be lost when the VPN tunnel timeout is reached. Refer to sk178891.

Connection over NAT-T tunnels may not be distributed well between instances of the Security Gateway with CoreXL enabled.

The vsx_util upgrade or downgrade operation may silently fail to update the database for one or more Virtual Systems (VSs). Refer to sk179591.

In VSX, when deleting a warp interface (either by deleting the warp itself or by performing the "reset_gw" command, which deletes all Virtual Devices), the VSX Gateway may crash.

A member in a VSX cluster may get stuck in DOWN state with "Event Code CLUS-113200" and a FULLSYNC PNOTE "Could not start a connection to remote member".

Improved packet rate performance on warp interfaces.

IPv6 connections with Manual NAT rules may not be stable after enabling Neighbor Discovery Protocol (NDP) on a VLAN in the $FWDIR/conf/local.ndp file.

Gaia Snapshot fails in Gaia Portal ("Maintenance" section > "Snapshot Management" page) - after clicking the "New" button, the progress gets to 100%, but the snapshot file is never created. Refer to sk180579.