List of Upcoming Resolved Issues in R81.20 Jumbo Hotfix Accumulator

In rare scenarios, accelerated policy installation fails to initialize, the full Access Policy installation is executed instead and it may take up to 20 minutes.

In rare scenarios, in multi-site Multi-Domain Security Management environments, operations across two or more Servers, such as Global Domain Assignment, IPS and Application Control update may fail.

The Management API command "set simple-gateway name 'XXX' usercheck-portal-settings.enabled {false|true}" fails to properly enable or disable User Check for Security Gateway objects. When running this command, the change is not applied to the Security Gateway configuration, and the "Enable UserCheck for active blades" setting in SmartConsole remains unchanged.

Deleting a user that is used in a user group with more than 1000 users may cause SmartConsole to time out.

In rare scenarios, after deleting Data Center objects:

• Login to the Security Management Server may fail with timeout.

• Publish operations may take a long time.

In some scenarios, when exporting the Gateways and Servers View to CSV, the resulting file may contain an extra empty column. Refer to sk182233.

In rare scenarios, Domain creation fails with "Failed to create Domain server '<Domain Server Name>'. The connected administrator has no permission to create a Domain-Server on the specified Domain".

The "cp_log_export" command produces the correct output but displays a false error alert beforehand. This is a cosmetic issue.

In some scenarios, in a cluster environment, when URL Filtering is enabled, there may be traffic disruption.

The FWK process may unexpectedly restart when running the memory detection leak procedure.

In rare scenarios, the Packet Capture field is missing from Threat Prevention logs in SmartConsole. Refer to sk182597.

Identity Broker Subscriber configured with local Access Role recalculation incorrectly deletes external groups during new Identity publishing, causing missing access roles and improper enforcement for CISCO ISE identity sessions.

In some failure scenarios, the Anti-Virus blade does not report the failure in a SmartConsole log.

In a rare scenario, a script related to CPView may take a long time to execute and the SCRUBD process becomes unresponsive.

In High Availability Bridge Mode ClusterXL environments, the management interface of a Standby member becomes inaccessible. Refer to sk183124.

SecureXL in User Mode (UPPAK) may be incorrectly enabled or disabled during runtime or Jumbo Hotfix Accumulator installation.

SecureXL in User Mode (UPPAK) can be enabled with PPPoE enabled although this configuration combination is not supported.

Multicast traffic is dropped when the Packet-Broker operates in Monitor Mode with Promiscuous Mode disabled.

The Redis Server does not start after installing the Gaia API Build 299. Refer to sk143612.

The ROUTED daemon may exit when processing OSPF network updates in a cluster environment.

When obtaining a new IP address using the "dhclient -r" command turning off and on the interface configured as Dynamic Address IP (DAIP), the interface loses its IP address and fails to acquire a new one from the DHCP Server.

In some scenarios, BGP routing updates may not be processed properly.

A static route to 0.0.0.0, regardless of the subnet mask, is incorrectly treated as the default route (0.0.0.0/0) and does not appear in the VSX Gateway's routing table. Refer to sk182742.

In a VSX High Availability Cluster, ns_relay core dumps may be generated and multiple TCP errors are printed in ns_relay.elg logs, such as: "<TCP ERROR> receive_buffer: recv returned -1", "<TCP ERROR> tcp_srv_connect_aux: connect failed".

The "fw stat" command output may not display the correct policy name for a Virtual System.

After a reboot, IPv6 addresses configured on data interfaces disappear from the "ifconfig" output when the Same VMAC feature is enabled in SmartConsole.

In a Maestro environment, migrating a Virtual System between Security Groups may cause a member to crash.