R81.20 Jumbo Hotfix Take 173

Note:

Download Jumbo Hotfix Accumulator Takes.
This Take contains all fixes from all earlier Takes.

Take 173

Released on 12 October 2026


ID	Product	Description
Take 173 - Improvements and Resolved Issues
PRJ-69919 PMTR-129145	Security Management	UPDATE: JRE is updated from version 8.0_8.60 to version 8.0_8.65.
PRJ-64484 FMW-6423	Security Gateway	UPDATE: Added the ability to include the X-Request-ID header in RAD requests, enhancing troubleshooting and traceability.
PRJ-67324 PMTR-125405	VPN	UPDATE: Hardened brute-force protection for Capsule VPN Remote Access authentication.
PRJ-70220 PMTR-129591	VPN	UPDATE: Hardened brute-force protection for IKEv2 Remote Access authentication.
PRJ-72302 ODU-4721	Automatic Updates	UPDATE: Added Take 179 of Web SmartConsole. Refer to sk170314.
PRJ-72393 ODU-4714 PRJ-71882 ODU-4664	Automatic Updates	UPDATE: Added Take 100 and Take 101 of Policy Insights Release Updates. Refer to sk183421.
PRJ-72502 ODU-4636	Automatic Updates	UPDATE: Added Take 235 of Connecting Management Server to Check Point Portal Release Updates. Refer to sk177205.
PRJ-72596 ODU-4882	Automatic Updates	UPDATE: Added Take 42 of CPM Doctor Release Updates. Refer to sk171505.
PRJ-72406 ODU-4612	Automatic Updates	UPDATE: Added Take 232 of OpenTelemetry Collector (CPotelcol) Release Updates. Refer to sk180522.
PRJ-72403 ODU-4619	Automatic Updates	UPDATE: Added Take 99 of OpenTelemetry CPviewExporter Release Updates. Refer to sk180521.
PRJ-71874 ODU-4643	Automatic Updates	UPDATE: Added Take 96 of HealthCheck Point (HCP) Release. Refer to sk171436.
PRJ-72412 ODU-4626	Automatic Updates	UPDATE: Added Take 156 of OpenTelemetry Agent (OtlpAgent) Release Updates. Refer to sk181615.
PRJ-72271 ODU-4728	Automatic Updates	UPDATE: Added Take 326 of CME (Cloud Management Extension) for Cloud Firewall Release Updates. Refer to sk157492.
PRJ-67334 PMTR-125404	Security Management	In a Multi-Domain Security Management Server environment, the FWM daemon at the MDS level may fail to start when TCP port 18190 is bound to more than one IP address.
PRJ-69411 PRHF-45782	Security Management	In some scenarios, upgrading a Security Management Server may fail during the database import with a "Failed to parse the upgrade data" error if the environment contains more than 32K IPS protections.
PRJ-71465 PRHF-47401	Security Management	Users may be unable to log in to a domain using the `login-to-domain` API command on the Multi-Domain Security Management Server. Refer to sk185248.
PRJ-65464 PRHF-42980	Logging	The CPSEMD process may unexpectedly exit when the Security Management Server is restarted.
PRJ-67934 PRHF-45055	Logging	In some scenarios, the system may not correctly report SOLR index deletion results in the `run_maintenance.elg` debug file.
PRJ-62331 PRHF-40738	Logging	In some scenarios, the SMARTLOG_SERVER process may unexpectedly exit and generate a core dump.
PRJ-69285 PRHF-45700	Logging	In some scenarios, the LOG_INDEXER process may crash unexpectedly when multiple log server connections are active, and one of the connections is disconnected.
PRJ-61855 PRHF-40192	Logging	In some scenarios, a redundant "CPSEMD low disk space notification" message may appear despite ample free disk space.
PRJ-68159 PRHF-44996	Security Gateway	In some scenarios, softlockups may occur during the dynamic objects update process. Refer to sk184887.
PRJ-67894 FMW-8845	Security Gateway	Optimized the shared memory management, which in some scenarios may impact CPU utilization.
PRJ-66696, PRA-5192	Security Gateway	In rare scenarios, when an HTTPS connection is in bypass mode, it may match a Captive Portal rule without being redirected to the portal.
PRJ-72171 PRHF-47698	Security Gateway	Websites returning large HTTP/2 response headers may fail to load when HTTPS Inspection is enabled.
PRJ-70304 PRHF-46417	Security Gateway	In some scenarios, servers sent compressed data with `Content-Encoding: deflate` but included an additional zlib header (starting with `78 01`), while the Security Gateway expected raw deflate data without any header.
PRJ-70741 PRHF-46695	Security Gateway	Improved HTTP/2 flow-control handling to prevent the dropping of legitimate long-lived connections to AI assistant tools.
PRJ-71665 PMTR-127891	Security Gateway	VPN traffic may generate excessive debug messages containing `fwhold_send_enqueue` in the fwk.elg log file when traffic is held and later resumed. This is a cosmetic issue and does not affect traffic handling.
PRJ-71369 PRHF-47526	Security Gateway	Google reCAPTCHA failed to load in Firefox with HTTPS Inspection enabled. Refer to sk185265.
PRJ-58913 PRHF-36812	Security Gateway	In some scenarios, the Identity Awareness Gateway may fail to communicate with the LDAP Server. The "Couldn't create connection (err=5): Cannot assign requested address" LDAP leak disrupts authentication and ldapsearch" error is displayed. Refer to sk182952.
PRJ-58158 PRHF-37101	Identity Awareness	The identity deletion process returned an incorrect error message "HTTP 500: GENERIC_INTERNAL_ERROR ... Failed to send disassociation to PDP" even though the identity was successfully removed from the database.
PRJ-69619 PRHF-45953	IPS	Improved handling of rejected HTTP/2 cleartext (h2c) upgrade attempts to ensure connections recover gracefully and prevent inconsistent failure states.
PRJ-64263 PRHF-41806	ClusterXL	In scenarios involving asymmetric traffic, where the same connection tuple is reused frequently, connections may be dropped and flagged as "out of state". Refer to sk184181.
PRJ-62833 PRHF-41024	SecureXL	Adding SecureXL Rate Limiting rule with country codes fails on VSX. Refer to sk183992 and sk112454.
PRJ-71386 PRHF-47560	Gaia OS	Check Point Process Manager (PM daemon) fails to correctly monitor the DNSMASQ process.
PRJ-69180 PMTR-123379	Gaia OS	During a clean installation or when running `cpstop/cpstart`, the ROUTED daemon may crash with an assertion failure during Gaia system initialization. This occurs because the daemon incorrectly detects a configuration mismatch between the kernel and the database.
PRJ-72721 PMTR-132662	Gaia OS	In some scenarios, RADIUS authentication fails when processing overly long credentials during login.
PRJ-70083 PMTR-122832	Gaia OS	Upgrading a Scalable Group in Traditional VSX or VSNext mode may fail if the Jumbo Hotfix Accumulator package is not installed on both the Security Management Server and the Scalable Group.
PRJ-70520 PRHF-46560	VPN	In some scenarios, Site-to-Site VPN tunnel against 3rd-party flaps every 2 minutes.
PRJ-71728 ODU-4584 CGNSIS-2611	Cloud Firewall	In some scenarios, Cloud Firewall Controller fails to fetch NSGroup content and may delete the group IP addresses.
PRJ-70243 PRHF-46338	Scalable Platforms	In rare scenarios, invalid site count values in Maestro dual-site Security Groups may cause cluster flapping and traffic impact.
PRJ-71213 PMTR-129898	Scalable Platforms	Contracts downloaded from the User Center by a Security Group Member may get deleted after Policy Installation because the SMO member's contract file overwrites the member's local file.
PRJ-71482 PRHF-46898	Scalable Platforms	When enabling the Maestro Fastforward feature, ARP checks may fail on non-SMO members during activation.