Important Notes

Issue Affected Takes Resolved in

SK

Reference

Starting from Take 61, Quantum LightSpeed Appliances Initial Release (Threat Prevention Stream) are supported.

Starting from Take 61

-

sk179432

-

Uninstalling Take 38 on Maestro Security Gateway may cause a reboot loop.

Starting from Take 38

N/A

sk178247

-

Upon uninstalling Jumbo Hotfix Accumulator, allow re-install of policy on reverted R81.10/R80.20.X Quantum Spark Appliances.

Starting from Take 30

N/A

sk178509

-

  • Installation of Take 30 or higher on Management / Standalone servers differs from the regular upgrade process:

    • If you installed both Take 9 and Take 14, we recommend skipping Take 22. Install Take 30 or higher on top of Take 14.

    • If you installed Take 9, Take 14 and Take 22, installing Take 30 or higher on this machine is not supported. Contact Check Point Support to get assistance with the upgrade process.

    • Note that uninstalling Take 22 does not resolve the issue.

Starting from Take 14

N/A

-

-

When uninstalling a Jumbo Hotfix, some of the REST APIs may not work. The "gaia_api status" command returns an error and requests may fail.

Take 79,

Take 81,

Take 82,

Take 85,

Take 87

Take 93

-

PRJ-43959

Uninstalling Jumbo Hotfix from Maestro Orchestrator may cause connectivity issues.

Take 79,

Take 81,

Take 82,

Take 85,

Take 87

Take 93

-

PRJ-44600

When installing Take 79 and higher, some of the Maestro Orchestrator's (MHO) processes may go down after the first boot.

• This issue can cause connectivity issues.

• If a new Security Group Member (SGM) is added to the Security Group, the SGM may not start the joining process.

Refer to sk180509.

Take 79,

Take 81,

Take 82,

Take 85,

Take 87

Take 93

sk180509

PRJ-44142,

PMTR-89728

In VSX, after adding instances to a Virtual System (VS), their state may be inactive.

Take 79,

Take 81,

Take 82,

Take 85

Take 87

 

PRJ-44014,

PMTR-89893

The SNMPD process may consume a high CPU level in a VSX environment and there may be slowness when using the "fw vsx stat" command.

Take 79,

Take 81

Take 82

sk180324

PRJ-43356

After an upgrade, the RADIUS Server is unavailable and authentication fails. To restore the configuration, update one of the RADIUS Server attributes or add a new Server.

Take 79,

Take 81

Take 82

-

PRJ-43140

After an upgrade of the on-premises Endpoint Management Server to Jumbo Hotfix Accumulator R81.10 Take 75 login to the Web Management Server fails and the "API error 9999" message is shown.

Take 75,

Take 78,

Take 79

Take 81

sk180230

PRJ-42687

Pushing configuration to a virtual device in a Maestro VSX environment fails.

Take 75,

Take 78

Take 79

sk180107

PRJ-42180,
PMTR-81701

Take 61 introduces a temporary solution for sk177605 - R80.x Security Gateways do not block traffic when an R81.x Management Server installs a Threat Prevention policy with Security Zone objects. The solution is to fail the Threat Prevention policy installation.

Take 61,

Take 66,

Take 75

Take 78

sk177605

PRJ-35185,
PRJ-35154

In a specific HTTP connection scenario, the Security Gateway may become unresponsive. And the /var/log/messages file contains these messages during the time of the issue: " FW-1: fw_kfree: wrong magic number at tail end of XXX (XXX) caller is 'cmik_loader_fw_pm_match_cb' sz=80. FW-1 panic: cmik_loader_fw_pm_match_cb: fw_kfree: wrong magic number at tail (kiss_memory.c:XXX)".

Take 61,

Take 66

Take 75

-

PRJ-41446,
PRHF-25374

VSX Gateway with a Virtual Router (VR) or Virtual Switch (VSW) may drop traffic, when IPS blade enabled.

Take 55,

Take 61,

Take 66,

Take 75,

Take 78

Take 79

-

PRJ-41957

On 16600 / 28600HS Quantum Maestro appliances, interfaces may disappear after uninstalling the Jumbo Hotfix.

Take 55,

Take 61,

Take 66,

Take 75

Take 78

-

PRJ-42199

VPN does not operate correctly on ClusterXL in Load Sharing mode and Scalable Platforms (Quantum Maestro and Chassis). This causes sporadic but frequent traffic drops.

Take 55,

Take 61,

Take 66

Take 75

sk179808

PRJ-39084,
PMTR-79827

When pushing a policy after deleting virtual interfaces, VSX Gateway may crash.

Take 55,

Take 61,

Take 66

Take 75

sk179820

PRJ-40950,
PMTR-85821

If you used Blink image including Take 55 to install Jumbo R81.10, we do not recommend installing Take 66 on top of it, as this may corrupt configuration files. If you did not use this blink, install Take 66 as usual.

Take 55,

Take 61,

Take 66

Take 75

sk179799

PRJ-41205

On Maestro Security Gateway, in some scenarios, the asg_perf_hogs test shows that SecureXL is disabled while it is enabled. We recommend installing the latest HCP Take, which includes these tests.

Take 55,

Take 61

Take 66

sk179424

PRJ-39899

On Maestro Security Gateway, the asg_hw_utilization and asg_resource tests have a broken output. We recommend installing the latest HCP Take, which includes these tests.

Take 55

Take 61

sk179426

PRJ-39951,
PMTR-74569

A ClusterXL upgrade from Jumbo Hotfix Accumulator R80.30 (or lower) to R81.10 Take 55 is not supported. Use a lower or a higher Take.

Take 55

Take 61

sk174510

PRJ-36616,
PMTR-71442

Login or publish operation constantly fails after restarting the Security Management or Multi-Domain Management Server.

Take 45

Take 55

sk178807

PRJ-38877,
PRHF-23554

Remote Access Office Mode IP allocation may fail when using DHCP.

Take 38,

Take 44,

Take 45,

Take 55,

Take 61,

Take 75

Take 61

sk178767

PRJ-38729

SIP flow may fail under high load when SIP Multi-core feature is enabled.

Take 38

Take 44

-

PRJ-37850,
PRHF-22617

Hardened the ability to use narrowed IKEv2 tunnels.

Take 9,

Take 14,

Take 22,

Take 30

Take 38

 sk166417

PRJ-31291,
PRHF-19707