R80.40 Jumbo Hotfix Take 38

Firmware upgrade for Small Office appliance using SmartProvisioning in Multi-Domain Management environment may fail.

NEW: Added ICA Management security enhancements.

Scheduled IPS update operation on the Security Management server may not be triggered after server reboot/restart. Refer to sk166216.

The cpm_solr process may unexpectedly exit and cause one of the following:

• The upgrade of a Management machine may stuck on 58%
• The Management HA synchronization may fail with "NGM failed to import data" error
• Users may not be able to log in.

In some scenarios, a disconnected SmartView Monitor session appears in SmartConsole with a grayed out 'Disconnect' option, which cannot be discarded. Refer to sk165037.

In a rare scenario, synchronization between Multi-Domain Management Servers breaks after revisions purge operation.

Upgrade of Multi-Domain Server may fail if Sync With User Center is running.

In some scenarios, Full synchronization fails in the Global Domain with "Full sync with peer '[Peer Name]' NGM failed to import data" error. Refer to sk145972.

After performing Full synchronization or failover of the Global Domain, the following operations may fail (refer to sk145972):

• Global Domain reassignment
• IPS or Application Control updates in the Global Domain.

The mds_import.sh script may fail if the IPS version for a Domain/CMA does not exist on the R80.x Multi-Domain Management Server.

In some scenarios, policy installation from the Domain Management Server fails after an mds_backup procedure that was interrupted. Refer to sk165559.

The import-smart-task Management API may fail in the second Domain on the Multi-Domain machine when it is executed with same exported file.

In some scenarios, after user imports view/report in SmartView, the imported view/report is not shown in the Catalog.

NEW: Added support for the bridge configuration when packet is passing via the Security gateway twice.

After installing R80.40 Jumbo Hotfix, Dynamic Split is disabled.

In a rare scenario, Security gateway may crash with vmcore.

In a rare scenario, a memory leak may appear in Anti-Virus inspection on SMB protocol.

In a rare scenario, creating a Virtual Switch can lead to crash.

NEW: Added support to allow Threat Extraction to scan a file download in additional scenarios.

In a rare scenario, identity session groups and access roles may disappear following a policy installation.

NEW: Gateway status will reflect Application Control and URL Filtering updates.

In a rare scenario, a memory leak may appear when SSL inspection is enabled.

NEW: Reading and sending files from the registry by DLP was optimized.

Improved the scanning time of files for some scenarios in SMTP and HTTP/S.

In some scenarios for SMTP, when an internal user sends an email, the DLP logs may show the topology as "external to external" instead of "internal to internal".

Policy installation may fail with "Error code 0-2000240" when Drop templates option is enabled. Refer to sk165716.

In some scenarios, SYN Defender cookie validation may fail.

In some scenarios, held packets are incorrectly reported to the penalty box.

In a Multi-Domain environment, one or more CMA's SMARTLOG_SERVER processes may fail to start after upgrade. Refer to sk165262.

Log exporter process may unexpectedly exit after enabling export of log attachment IDs.

In some scenarios, VPN traffic distribution change may cause high CPU consumption on one CPU core. Refer to sk165853.

Improved the VPN Site-to-Site tunnel establishment scenario with IKEv2.

In a rare scenario, vpnd process unexpectedly exits due to issue in IKEv2 flow.

Improved stability of VPN traffic on VSX Gateway.

The "show asset all" command displays the total number of cores instead of the online number of cores, even if the Hyper-Threading is disabled.

Endpoint Standalone Remote Help Server may not start syncing automatically on the first connect.

In a rare scenario, the OpenStack Data Center becomes unresponsive, resulting in a loss of updates to the Security Gateway.

When an Azure Virtual Network Interface is missing its properties' primary attribute, the Microsoft Azure Data Center may fail to poll data, resulting in a loss of updates to the Security gateway.