List of All Resolved Issues and New Features in R81 SmartConsole

UPDATE: Added the "Check for updates" option in the main menu, allowing users to update SmartConsole manually.

UPDATE: SmartConsole truncates the output of One Time Scripts in the "Run One Time Script Details" window to 10,000 characters. Manual configuration is now available for displaying the entire output. Refer to sk181529.

In the Threat Emulation tab within the Threat Prevention profile, customizing the file types for the emulation location or action, may result in a failure. This issue persists regardless of whether you make any new changes or not.

When attempting to uninstall the Threat Policy on a Quantum Spark appliance that is inaccessible, the uninstallation process fails instead of entering a pending state.

After importing or deleting the SNORT protections in SmartConsole > IPS Protections view, the view does not show the change.

• Requires installing R81 Jumbo Hotfix Accumulator Take 89 (or higher).

Desktop policy is not displayed in the results of the "where used" operation.

When changing override default settings in IPS Protections, the Security Gateway prioritizes the Action, Track, and Packet Capture values in the protection over those in the policy, without clear indication of the override in IPS Threat Cloud Protections details menu or in the user-modified filters view.

A disconnected Endpoint client may get rules for its state even without an initial connection when it should just get the default rules for the whole organization.

After deleting or pasting objects in a field of a rule, pressing an arrow key may not change the selected object.

In the User view, the creation/expiration date format is inconsistent.

In rare scenarios, SmartConsole may unexpectedly close when creating or editing an OSE Device object.

When the screen is minimized, the "Monitor" button is not shown. In the Gateways & Servers, when highlighting an object and clicking "Monitor" from the drop-down menu, the "Failed to open Device & License Information for xxx" error message is shown.

In some scenarios, clicking the Logs tab or a rule may cause SmartConsole to close. Refer to sk181222.

An incorrect timestamp may be shown for logs in a predefined time filter.

An "Unknown Error" message is displayed when viewing Activity Reports in SmartEndpoint, and the time zone is Europe/London (GMT +00:00). Refer to sk181063.

In rare scenarios, when adding an HTTPS inspection certificate in SmartConsole, a red X appears in the picker, and a "System.ArgumentOutOfRangeException" message is displayed.

In Global Domain > Object Explorer, when double-clicking an object in the results of the "where used" operation, the window with details for editing may not prompt.

Editing settings in the Inspection Settings view is greyed out.

When updating the name or comment of an Access Policy rule and scrolling down or up in the policy view, another rule may be shown as edited.

In the Logs & Monitor view, querying logs by the "File" type may return no results, although there are matches.

In the Logs view, when clicking "Go To Rule" and it leads to a deleted rule, SmartConsole may unexpectedly close.

SmartEndpoint cannot connect to the Server. During data loading after login, an "Error during communication with the server" message is displayed.

UPDATE: The "Approve Changes" window in Extension modifications is now adjustable and can be resized.

Added support for the "Search by name" filter in Threat Prevention > IPS Protections > Core Protections > See Details.

When deleting a network object in a large database (>10K objects), SmartConsole may stop responding for an extended period.

In Security Policies, in the Access Control Rule Base, when entering a rule number and clicking "Go to Rule", the view may not change to display the selected rule.

UPDATE: Updated VSX creation wizard in SmartConsole.

UPDATE:

• In the VSX Cluster Wizard, "Check Point SecurePlatform (ClusterXL)" is renamed to "Check Point Gaia (ClusterXL)".

• Removed the platforms which are not supported in this version: "Crossbeam Systems" and "Check Point IPSO VRRP".

When trying to navigate from the "Where Used" window to an object which is used in a nested inline layer, the "Failed to go to the requested rule" error is shown.

When performing the "Where used" action on an object that is linked to a Layer and the Layer is not connected to any Policy, the Layer's details may be missing from the "Where used" window and it is not possible to navigate to it.

UPDATE: Added a warning that the domain name cannot be changed after creating a new domain.

When configuring Security Zone on SMB Cluster interfaces, the security zone may not be updated and enforced on SMB cluster members.

The "where used" operation on UserCheck object may return a false result, stating "No usages found".

The expiration date may not be shown in User objects.

SmartConsole may unexpectedly close when adding an IPS protection exception. Refer to sk175343.

After disabling Best Practices, the user receives security alerts."

• Requires R81 Jumbo Hotfix Accumulator Take 60 (or higher).

In rare scenarios, when searching in Global Object Explorer, SmartConsole may unexpectedly close.

Deleting the RADIUS group object named "Radius-Group" may fail with "Failed to delete object - Object 'Radius-Group' is used by a policy or by other objects". Refer to sk176824.

When connecting with SmartConsole to a Domain Management Server, switching views (Gateways and Servers, Security Policies, Logs, Manage & Settings) may not work and the currently open tab is reloaded instead. Refer to sk175884.

NEW: Added a banner in the Threat Indicators view to explain that Autonomous Threat Prevention or Anti-Bot and Anti-Virus blades are needed to enforce Threat Indicators.

UPDATE: In Threat Prevention related tabs and messages, the phrase "Infinity" was replaced by "Autonomous".

UPDATE: The default timeframe for logs queries using the Logs tab is set to "Last 24 Hours".

UPDATE: Removed the "Upgrade management" and "Launch IP appliance" buttons from SmartUpdate.

When the Identity Awareness blade is enabled, Policy verification on LSM Profile may fail.

Login to SmartConsole fails if Brute force password guessing protection is set to more than 25 seconds.

• Requires R81 Jumbo Hotfix Accumulator Take 51 (or higher).

In large environments, searching for specific devices in SmartProvisioning takes a long time.

Some special characters may not be blocked when defining a password for client uninstall in SmartEndpoint.

In rare scenarios, SmartConsole unexpectedly closes when running a query in the Logs tab.

Compliance report in SmartConsole shows incorrect policy name.

In rare scenarios, when running a query with a filter in the Logs tab and scrolling down, there is a gap in the shown logs.

In some scenarios, SmartConsole may unexpectedly close when opening the UserCheck object image under Security Policies.

NEW: Added ability for R81 Security Management or Multi-Domain Server to manage R81.10 Security gateway.

• Requires R81 Jumbo Hotfix Accumulator Take 42 (or higher).

UPDATE: After a successful update, SmartConsole will show a message, allowing the user to restart SmartConsole and resume the current session.

When using SmartConsole in Demo Mode, in some cases while opening a new Logs and Monitor tab, the "SmartView is not available, SmartView server certificate is invalid" error message is shown.

In some scenarios, navigation between views may cause SmartConsole to close unexpectedly.

A read-only user can lock the Domain object when attempting to edit the GUI Clients.

In some scenarios, pasting a command in the SmartConsole CLI window pastes the text multiple times.

When opening the "Users by Gateways" view in SmartView Monitor and the list contains thousands of entities, it may take a long time to show all results, and in rare cases, no results are displayed.

In some scenarios, changing the hardware type of a Gateway with Identity sharing fails.

In some scenarios, the "Push CA Certificate" push operation in SmartEndpoint cannot be initiated and fails with exception.

In some scenarios, when searching objects in SmartConsole, the summary counter shows "0", although the objects are found and displayed.

When attempting to log in to a SmartEndpoint server running a different version from SmartConsole, the client may unexpectedly close instead of showing a message to launch the correct version.

When searching in the rulebase, the entire word is highlighted instead of the partial string that matches.

In a rare scenario, using the rule search in SmartConsole may cause the application to hang.

In some scenarios, the "SmartConsole.exe -p <information file>" command fails to open SmartConsole sessions.

When viewing the Changes Report, different objects of the same type may not be grouped together.

NEW: Added more information to the SmartConsole "About" dialog.

UPDATE:

1. When using Updatable Objects, Source and Destination fields in logs will display the icon from the matched Updatable Object.
2. Improved the accuracy of flag icons when using Updatable Objects for Geo-IP restrictions.

Note:

• Requires R81 Jumbo Hotfix Accumulator Take 34 (or higher).

UPDATE: SmartConsole can now be used to set a Zone for a VTI interface.

SmartConsole configures a default value for the IPv4 mask length of VIP interface each time a user opens the interface editor for cluster object configured in the Active-Active mode.

As a result, the value configured by a user is overwritten with the default value each time the user opens the cluster object and clicks OK.

• Requires R81 Jumbo Hotfix Accumulator Take 34 (or higher).

If many thousands of changes were performed since the last policy installation, the SmartConsole may freeze and even disconnect when loading the Policy Installation dialog.

In some scenarios, adding '#' symbol inside the "End-User Agreement Settings" form under Identity Awareness can cause the Threat-Prevention Policy installation to fail.

In SmartView Monitor, when the user sorts tables by the field "Connect Time", the sorting was not done according to date and time, but as a textual sorting.

In some scenarios, when searching for logs per rule, the "Not Type session" filter is added automatically to the end of the query.

After a SmartConsole version has been auto-updated, the application settings in SmartConsole.exe.config file are not copied from the previous version.

When changing password with "Change my Password" option, next login via SmartConsole fails with "Authentication failed" error. Refer to sk170637.

NEW: Added ability to move the session top-bar to the right, left, or center (default).

NEW: When connecting to incompatible server version and the compatible SmartConsole is not installed, user can download the installation package from the login screen.

NEW: When the user connects with an incompatible client version to the server, he will automatically launch the correct SmartConsole version installed on his computer. Refer to sk171422.

NEW: Added Automatic update mechanism for SmartConsole. SmartConsole will detect and install client updates within the same major version. For additional details, refer to sk171315.

NEW:

• Added support for 1570R, 1600, and 1800 SMB Appliances.
• Added support for Threat Emulation blade on LSM profile of R80.20 SMB gateways and clusters.
• Requires R81 Jumbo Hotfix Accumulator Take 13 (or higher).

UPDATE:

• Allow read-only users to generate a Compliance Regulation report.
• Display Best Practices' information on the Regulation report.
• For a selected Best Practice, allow activating/deactivating multiple relevant objects at the same time.

"N/A" is displayed instead of "Any" in the Protection drop-down menu in Inspection Settings > Core Protections > Exception editor window.

In some scenarios, user cannot select/clear the "Terminate on execution" checkbox in cloned rules.

In some scenarios, it is possible to click the menu item "Clear Staging" on an IPS protection even when the action has no effect.

In some scenarios, the "Content" column does not appear in the Access policy view even if the Content Awareness blade is on one of its inline-layers.

When the user searches the NAT policy and the results contain automatic NAT rules, an error message may appear.