R82 Jumbo Hotfix Take 132

Note:

Download Jumbo Hotfix Accumulator Takes.
This Take contains all fixes from all earlier Takes.

Take 132

Released on 12 November 2026


ID	Product	Description
Take 132 - New Functionality
PRJ-72331 PRJ-72370	SmartConsole	NEW: Added support for External and others segment in the Policy Auditor.
PRJ-62518 PMTR-116935	Identity Awareness	NEW: The Security Gateway now rotates these log files for the SAML VPN Portal: `$SAML_VPN_PORTAL_HOME/logs/access_log` `SAML_VPN_PORTAL_HOME/logs/error_log`
PRJ-72717 PMTR-123177	VSNext	NEW: The `cphaprob stat` command now marks each cluster member whose traffic is blocked during migration to ElasticXL with the [SHADOW] indication.
Take 132 - Improvements and Resolved Issues
PRJ-73738 PMTR-134138	Security Gateway	UPDATE: Resolved CVE-2026-109618 and CVE-2026-109619: PHP vulnerabilities may allow Remote Code Execution through Firewall web interfaces.. Refer to sk1000302.
PRJ-71157 PMTR-130045	Gaia OS	UPDATE: Resolved CVE-2026-107484 - Input Validation Vulnerability in Gaia Portal backend handlers allows privilege escalation by an authenticated user. Refer to sk1000291.
PRJ-72792 FMW-11504 PMTR-132772	Gaia OS	UPDATE: Resolved CVE-2026-123039 - Local privilege escalation to root in the DynamicCLI daemon via local world-writable control socket. Refer to sk1000362.
PRJ-74074 PMTR-134407	Gaia OS	UPDATE: Resolved CVE-2026-98432 - Linux kernel vulnerability. Refer to sk1000339.
PRJ-58763 PMTR-110791	Scalable Platforms	UPDATE: Resolved CVE-2026-120490 - Administrator with policy and NAT permissions can bypass Sync network protection on Scalable Platforms. Refer to sk1000364.
PRJ-74201 PRJ-74205 ODU-5120 ODU-5113	Automatic Updates	UPDATE: UPDATE: Node.js library version was updated to v22.23.4. Refer to sk1000318.
PRJ-72106 PRHF-48120	Security Management	UPDATE: JRE is now updated from version 8.0_8.60 to version 8.0_8.70.
PRJ-71864 PRHF-47086	Security Management	UPDATE: Add increased instrumentation to show LDAP errors.
PRJ-71488 PMTR-129524	Security Management	UPDATE: The zero-phishing-settings API now includes an accessibility setting that controls which interfaces or sources can reach the Zero Phishing portal.
PRJ-72160 PMTR-115991	Security Management	UPDATE: Sessions with locks or changes can be automatically discarded and logged out. Refer to the CLI Reference Guide.
PRJ-65195 PRHF-42138	Security Management	UPDATE: It is now possible to run the `show-access-rulebase` Management API command asynchronously using the `async-response` parameter.
PRJ-71827 MLS-4020	Security Gateway	UPDATE: the Cloud Firewall Account Object can now be seen in Object Explorer.
PRJ-71743 PMTR-131699	Security Gateway	UPDATE: A validation was added to prevent users from adding Domain objects that are not supported by the Cloud Access Control policy.
PRJ-69167 PMTR-126370	SecureXL	UPDATE: Added support for RARP protocol in UPPAK mode.
PRJ-71803 PRHF-47934	Gaia OS	UPDATE: Updated time zone data for America/Vancouver to align with British Columbia's permanent daylight saving time policy, preventing incorrect local times after November 1, 2026.
PRJ-71805 PMTR-114980	Gaia OS	UPDATE: Improved remote system logging configuration: When TCP is selected for a remote Syslog server, the Queueing Mechanism is enabled by default in Gaia Portal and Clish, and a warning is displayed if it is disabled.
PRJ-68847 PRHF-45471	VPN	UPDATE: An improved VPN management process reduces policy installation time and output size for R82 Security Gateways, when managed by newer Management versions, through the R82 Backward Compatibility package.
PRJ-72965 ODU-4791 PRJ-73655 ODU-4924 PRJ-74229	Automatic Updates	UPDATE: Added Take 180, Take 181, and Take 182 of Web SmartConsole. Refer to sk170314.
PRJ-73034 ODU-4889 PRJ-73803 ODU-4980 PRJ-74209	Automatic Updates	UPDATE: Added Take 103, Take 105, and Take 106 of AI Insights. Refer to sk183421.
PRJ-74213 ODU-5099 PRJ-74217 ODU-5092	Automatic Updates	UPDATE: Added Take 143 of Remote API Access Updates and Take 240 of Configuration Sharing Updates. Refer to sk177205.
PRJ-74226 ODU-5065	Automatic Updates	UPDATE: Added Take 45 of Check Point Portal REST API Adapter. Refer to sk183186.
PRJ-74221 ODU-5078	Automatic Updates	UPDATE: Added Update 29 of Autonomous Threat Prevention Management Integration Release. Refer to sk167109.
PRJ-73042 ODU-4735	Automatic Updates	UPDATE: Added Take 65 of CPquid (QUID) Release Updates. Refer to sk181458.
PRJ-73030 ODU-4742	Automatic Updates	UPDATE: Added Take 23 of Public Cloud CA for Cloud Firewall. Refer to sk172188.
PRJ-73039 ODU-4896 PRJ-73786 ODU-4973	Automatic Updates	UPDATE: Added Take 331 and Take 332 of CME (Cloud Management Extension) for Cloud Firewall Release Updates. Refer to sk157492.
PRJ-73287 ODU-4819	Automatic Updates	UPDATE: Added Take 37 of CloudGuard Controller Release Updates. Refer to sk181842.
PRJ-73790 ODU-4931 PRJ-74233 ODU-5050	Automatic Updates	UPDATE: Added Take 43 and Take 45 of CPM Doctor Release Updates. Refer to sk171505.
PRJ-73794 ODU-4903	Automatic Updates	UPDATE: Added Take 97 of HealthCheck Point (HCP) Release Updates. Refer to sk171436.
PRJ-73798 ODU-4784	Automatic Updates	UPDATE: Added Update 5 of Server-Side Change Report Generator Release Updates. Refer to sk179508.
PRJ-70860 PRHF-46892	Security Management	The SIDUpdater may stop updating Security IDs (SIDs) for Active Directory objects after encountering an Active Directory entry that no longer exists, causing the remaining objects to retain missing SIDs.
PRJ-71643 PRHF-47329	Security Management	SmartConsole may unexpectedly crash when importing a malformed PKCS#12 certificate in the HTTPS Inspection configuration.
PRJ-72456 PRHF-48429	Security Management	In a Multi-Domain Security Management environment, the "Match application on 'Any' port when used in 'Block' rule" setting configured in the Global Domain is not applied to local domains after a Global Policy assignment.
PRJ-70212 PRHF-45429	Security Management	In a Multi-Domain Security Management environment that manages a large number of Gateways, memory leaks in the FWM process can accumulate over time, resulting in high FWM CPU utilization, out-of-memory conditions, and Management instability.
PRJ-67480 PRHF-44561	Security Management	In some scenarios, the FWM process may unexpectedly exit and generate a core dump file on both Security Management High Availability members.
PRJ-72521 PRHF-48562	Security Management	Threat Prevention policy installation may fail with the misleading "Internal error occurred during the verification process" error message when the policy does not contain any enabled rules.
PRJ-71761 PRHF-47720	Security Management	In some scenarios, administrators authenticated through a SAML Identity Provider cannot open a Security Gateway object in SmartConsole, receiving the error “SmartDashboard component failed to connect to the server". Refer to sk1000067.
PRJ-72338 PMTR-132285	Security Management	When using the `show changes` Management API command with the `user-changes-only` flag, changes made by internal system sessions may be incorrectly included in the report.
PRJ-68662 PRHF-45291	Security Management	The CPM process may fail to start on a Multi-Domain Security Management Server, and the "Failed to load Links Schema from DB to cache" database exception may be logged in the cpm.elg file.
PRJ-72633 PRHF-47989	Security Management	In some scenarios, the CPM process may crash with an "Out of Memory" error during Accelerated Install Policy validation after a large number of policy changes are published.
PRJ-71558 PMTR-131590	Security Management	Policy installation is not accelerated for Security Clusters.
PRJ-70596 PRHF-46492	Security Management	During policy installation, a warning may incorrectly indicate that the `libcpatlas.so` library cannot be found, even though the installation completes successfully.
PRJ-73111 PRHF-49329	Security Management	In some scenarios, Management or Log Servers may not appear in the "Connected Managements" view under Management & Smart-1 Cloud in the Check Point Portal. This issue can affect cloud services such as SD-WAN and Configuration Sharing.
PRJ-71727 PRHF-47693	Security Management	In Web SmartConsole, editing a Security Gateway object may fail to open the object window, and the navigation pane may become unresponsive until the page is reloaded.
PRJ-71904 PRHF-47761	Security Management	The Compliance report does not accurately report the FW145 check.
PRJ-71437 PRHF-41809	Security Management	Threat Prevention policy installation may fail with the "Internal error occurred during the verification process" error when the policy package does not include the Access Control policy.
PRJ-59122 PRHF-33305	Security Management	In some scenarios, administrators without IPS permissions may not be able to delete Security Gateway objects.
PRJ-72511 PRHF-47661	Security Management	The Policy Installation window may become slow or unresponsive when a policy change affects a large number of rules in a large rule base.
PRJ-71595 PRHF-47477	Security Management	Replacing a UserCheck certificate with a certificate larger than 1024 bytes may cause SmartConsole to crash unexpectedly.
PRJ-72528 PRHF-48228	Security Management	In environments with multiple interoperable devices, the "Install Database" operation on a remote server may take a long time to complete.
PRJ-72591 PRHF-48330	Security Management	The Management API may allow users to create host, network, and address-range objects with automatic NAT rules in the Global Domain, even though this configuration is invalid and unsupported.
PRJ-72588 PRHF-47631	Security Management	Editing an administrator account may invalidate its API key if the administrator is configured to log in with an API key.
PRJ-71640 PRHF-47823	Security Management	Fetching Security Gateway interfaces in SmartConsole may fail with the "RunCommandInNgm('CreateNgmInterfacesCommand') failed" error when modifying interface configurations.
PRJ-70897 PRHF-46696	Security Management	In Smart-1 Cloud, opening a Shell to a Security Gateway using Actions > Open Shell may fail if the Security Gateway has legacy SSH key-exchange algorithms disabled. SmartConsole may display the error "Connection failed. Make sure there is SSH connectivity between the Management Server and the device..."
PRJ-71617 PRHF-47343	Security Management	In some scenarios, the Skyline `mgmt_proc_ready` metric may stop reporting data.
PRJ-71116 PRHF-46095	Security Management	When creating a host object through the Management API using an IPv4 address that contains leading zeros (for example, 010.012.023.024), the address may be incorrectly interpreted as an octal value, causing the host object to be created with a different IP address than intended.
PRJ-72009 PRHF-48002	Security Management	In some scenarios, the Management API may return a "NullPointerException: null" error when retrieving the full details of a policy package. Refer to sk1000079.
PRJ-63876 PRHF-41749	Security Management	In a rare scenario, the Security Management Server may freeze and eventually crash.
PRJ-72160 PMTR-115991	Security Management	Sessions with locks or changes can be automatically discarded and logged out.
PRJ-70527 PRHF-46655	Multi-Domain Management	On a Smart-1 7000 appliance, the `systemctl status` command may report "State: degraded".
PRJ-66206 PRHF-43792	Multi-Domain Management	In rare scenarios, the CPD process crashes during policy installation.
PRJ-71312 PRHF-45556	CPView	In some scenarios, Security Gateways may experience high CPU utilization due to the cpview_services task.
PRJ-66737 PRHF-44138	CPView	In some scenarios, improper memory handling causes the CPViewd process to restart unexpectedly.
PRJ-71752 PRHF-44761	CPView	On Cloud Gateways, the CPU view in CPView incorrectly displays CoreXL SND CPUs as "OTHER" instead of "CoreXL_SND". This issue is cosmetic.
PRJ-71294 PRHF-47213	CPView	In rare scenarios on Maestro VSX Security Groups, the CPVIEWD process may consume high CPU. Refer to sk185220.
PRJ-66404 PRHF-43750	Compliance	In some scenarios, Best Practice MOB144 returns incorrect compliance results.
PRJ-64427 PRHF-38966	Logging	Users may be unable to filter logs by Syslog severity or facility in SmartConsole and Smart View.
PRJ-71423 PRHF-47173	Logging	Syslog configuration in Clish is missing after the upgrade.
PRJ-67362 PRHF-44417	Logging	In some scenarios, the CPLMD process may unexpectedly exit when retrieving log records.
PRJ-71575 PRHF-47551	Logging	In some scenarios, the process that handles OPSEC LEA log export may unexpectedly crash and generate a core dump file while sending logs to an external application.
PRJ-64134 PRHF-42185	Logging	In some scenarios, the FWD process may unexpectedly exit and generate a core dump while processing a log that contains a fragment with an invalid length. Refer to sk184948.
PRJ-62329 PRHF-40570	Logging	In some scenarios, the FW_FULL process may unexpectedly crash on a Maestro Security Group Member during connection log processing.
PRJ-71481 PRHF-41562	Logging	In some scenarios, the SmartEvent correlation process CPSEAD may unexpectedly crash on the SmartEvent server.
PRJ-71325 PRHF-47320	Logging	In some scenarios, the FWD process may crash, and policy installation may fail with the error "Operation failed, install/uninstall has been improperly terminated" when a Log Exporter object is missing its target server, target port, or protocol configuration.
PRJ-69809 PMTR-128790	Logging	Sanitized CPView values for CPView history from incorrect updates, including special characters (allow only letters and numbers).
PRJ-72005 PRHF-47662	Logging	In rare scenarios, the FWD process may leak file descriptors in the log-forwarding flow and eventually crash after the descriptors are exhausted, which can also cause the Dynamic Objects process to crash.
PRJ-72012 PMTR-131952	Logging	In some scenarios, Log Sharing does not function on a Multi-Domain Log Server (MLM).
PRJ-71783 PRHF-47781	Security Gateway	Improved CPU utilization of the CPVIEWD process on Security Gateways with a large number of interfaces (for example, Maestro and VSX deployments).
PRJ-66825 PRHF-44124	Security Gateway	When running the `show lldp neighbors` command in Clish, no output is displayed.
PRJ-68368 PRHF-42979	Security Gateway	Optimized memory/MBuf management on the Security Gateway.
PRJ-67892 PRHF-44715	Security Gateway	Plane separation in Management Data Plane Separation (MDPS) may be unavailable for non-local users.
PRJ-67895 FMW-8845	Security Gateway	Optimized the shared memory management, which in some scenarios may impact CPU utilization.
PRJ-60689 PRHF-36927	Security Gateway	In some scenarios, messages related to send_keepalive and LDAP that do not provide relevant information may appear in the logs.
PRJ-71065 PRHF-47134	Security Gateway	In rare scenarios, the log partition on a Security Gateway fills up when Packet Capture is enabled in a Threat Prevention policy rule.
PRJ-66201 PRHF-43724	Security Gateway	In some scenarios, the CPD daemon may exit with a core dump file.
PRJ-57939 PRHF-48255	Security Gateway	Improved Anti-Spoofing enforcement for point-to-point interfaces that use IPv4 or IPv6 two-address subnets.
PRJ-64776 PRHF-41802	Security Gateway	Added the kernel parameter `fw_fast_accel_log_mode` to unify Fast Accel logs with delayed logs, ensuring that the session log includes these entries. `fw_fast_accel_log_mode = 0` - default logging `fw_fast_accel_log_mode = 1` - delayed logging `fw_fast_accel_log_mode = 2` - no logging
PRJ-70204 PRHF-46187	Security Gateway	In some scenarios, when the physical interface of a Virtual Switch (VSW) goes down, ISP failover occurs.
PRJ-70215 PRHF-46352	Security Gateway	Improved Anti-Spoofing enforcement for point-to-point interfaces that use IPv4 or IPv6 two-address subnets.
PRJ-67600 PRHF-44826	Security Gateway	In some scenarios, the Security Gateway fails to retrieve updates from Check Point services because of proxy configuration issues.
PRJ-70718 PRHF-45845	Security Gateway	In rare scenarios, access to certain websites may fail with the error: "HTTP parsing error occurred: Connection queue exceeded max size". Refer to sk1000292.
PRJ-70711 PMTR-130283	Security Gateway	Some implied rules may incorrectly match traffic based on the Security Gateway's destination IP address, even when the actual destination is a different server that uses the Gateway's IP address as a front-end address.
PRJ-61529 PRHF-39982	Security Gateway	When a service is configured with a source port, the service match may be incorrect.
PRJ-64065 PRHF-42023	Security Gateway	With the "Same VMAC" feature enabled, the CPView statistics for concurrent connections may become corrupted.
PRJ-71800 PRHF-47804	Security Gateway	In a rare scenario, the FWK process may crash while handling Active Streaming traffic.
PRJ-71674 PRHF-47473	Security Gateway	In some scenarios, under sustained file-scanning load, C-ICAP processes consume high CPU and stop responding to new scan requests.
PRJ-67444 PMTR-125132	Security Gateway	Following a Security Gateway upgrade, Network Feed objects may require a manual reset of the update interval and policy reinstallation.
PRJ-62948 PRHF-40877	Security Gateway	For traffic processed by Security Servers, destination port NAT is not applied when NAT is configured on the destination port. Refer to sk184158.
PRJ-71297 PRHF-47222	Security Gateway	In some scenarios, the C-ICAP process on the Security Gateway may frequently generate core dump files when UserCheck is enabled on the ICAP server.
PRJ-66768 PMTR-124435	Security Gateway	On Security Gateways with a dual-stack IPv4/IPv6 configuration, in rare cases, the IP lists used by the implied rules are not generated correctly. As a result, the implied rules may not match traffic as expected, potentially causing connectivity issues between the Management Server and the Security Gateway.
PRJ-65317 PRHF-42747	Security Gateway	In some scenarios, UP_LIMIT drops occur after a failover to a cluster member that has recently rebooted.
PRJ-71126 PMTR-130358	Security Gateway	When using appliances with four cores (two physical cores), adding the first member to the second site results in a non-default core split of 2/2 instead of 3/1.
PRJ-69240 PMTR-127640	Security Gateway	When a Security Gateway uses the out-of-the-box Updatable Objects package as the latest revision, updates may not occur if connectivity is unavailable during policy installation. To ensure Updatable Objects remain current, the system now detects this condition and immediately forces an update instead of waiting for the next policy installation.
PRJ-72210 PMTR-132235	Security Gateway	Network Feed (External Feed Object) update logs do not include the "Severity" and "Product" fields that are present in other Check Point security logs.
PRJ-69099 PRHF-45284	Security Gateway	In some scenarios, users are unable to authenticate via the Captive Portal when TACACS+ authentication is used.
PRJ-72068 PRHF-47647	Security Gateway	In a rare scenario, cluster members may crash while handling TLS traffic.
PRJ-72725 PRHF-48959	Security Gateway	After an upgrade, a Security Gateway with 20 or more CPU cores may experience these issues for tens of minutes or even hours after a reboot, cluster failover, `cpstart`, or policy installation: Very high load average, with a single CPU core at 100%. VPN tunnels, HTTPS Inspection, or Identity Awareness repeatedly disconnecting and recovering. Slow or failed policy installation and, in clusters, unexpected failovers. In CPView, one CPU core is saturated while the other cores are mostly idle. The Security Gateway usually recovers on its own after the traffic load decreases.
PRJ-69190 PRHF-45654	Security Gateway	In some scenarios, the FWK process crashes during inline layer connection rematch due to improper handling of parent rule references.
PRJ-70965 PRHF-44724	Security Gateway	In rare scenarios, the FWK process crashes, resulting in a VS failover.
PRJ-70426 PRHF-46445	Security Gateway	In some scenarios, the FWK process crashes repeatedly, causing process restarts and potential instability on one or more cluster members.
PRJ-60833 PRHF-34612	Security Gateway	Added performance improvement in HTTPS inspection rulebase.
PRJ-61704 PRHF-39725	Security Gateway	n some scenarios, SNMP monitoring of IPS (OID 1.3.6.1.4.1.2620.1.53) may report an incorrect status or return the message "Not found".
PRJ-73644 PMTR-134044	Security Gateway	In some scenarios, very large Network Feeds cause Security Gateway instability or crashes when the feed exceeds the supported limit of 25,000 domains, including Domain objects and their "www." variants.
PRJ-69153 PRHF-45608	Security Gateway	In some scenarios, the FWK process may restart unexpectedly.
PRJ-69224 PMTR-127387	Security Gateway	The FWK process may unexpectedly crash during a `cpstop` operation.
PRJ-71138 PRHF-46946	Security Gateway	Re-applying an active Suspicious Activity (SAM) rule may reset its expiration earlier than expected.
PRJ-58771 PRHF-37683	Threat Prevention	In some scenarios, certain websites fail to load because of incorrect handling of the "deflate" response header.
PRJ-71355 PMTR-131334	Threat Prevention	In a rare scenario, the Security Gateway may crash while reporting Anti-Bot events.
PRJ-71348 PRHF-47455	Threat Prevention	In some scenarios, IoC feed parsing fails when IP entries are specified as /32 networks.
PRJ-70453 PRHF-46251	Identity Awareness	The PDPD process consumes high CPU in legacy (SIC-based) Identity Sharing flows.
PRJ-61587 PRHF-33065	Identity Awareness	The Portal Title configuration in Captive Portal Customization may not take effect.
PRJ-70537 PRHF-45920	Identity Awareness	Cisco Identity Services Engine (ISE) identity sessions may not match the configured Access Roles when the Group Consolidation feature is enabled.
PRJ-67096 PRHF-43970	Content Awareness	APPX packages delivered without the `.appx` file extension may not be handled correctly by Content Awareness, causing Windows 11 updates to fail.
PRJ-72841 PRHF-48815	Application Control	In some scenarios, SSH and SFTP connections through the Explicit Proxy may be reset immediately after the CONNECT tunnel is established, generating the following log message: "Application Control - Internal system error (4)."
PRJ-69184 PRHF-45463	Application Control	In the Application Control status file (`appi_status.C`), the `status_short_desc` and `status_long_desc` fields are now populated with descriptions that reflect the status of the Application Control update flow. Refer to sk185064.
PRJ-65557 PRHF-42282	Application Control	Policy installation may fail with the “Policy installation failed. error is: Failed to gen PM for context 142, error message: (reference to non-existent subpattern) ...” error when an invalid backreference is configured in the regular expression of an Application/Site object.
PRJ-73400 PRHF-49769	Application Control	In a rare scenario, the Security Gateway may crash with an FWK process core dump.
PRJ-65489 PMTR-119219	IPS	In rare scenarios, Anti-Virus may fail to load an IoC file that contains IPv6 observables.
PRJ-58018 PRHF-28538	IPS	In certain scenarios, URL Filtering may fail to enforce specific categories when the global IPS mode is enabled.
PRJ-65291 PRHF-42748	IPS	In some scenarios, IPS may drop legitimate DNS traffic due to Core Protection with an "Unknown Resource Record" message. Refer to sk184403.
PRJ-63733 PRHF-41876	IPS	In some scenarios, IPS may display an incomplete CVE reference number. Refer to sk183974.
PRJ-69150 PRHF-45385	IPS	When specific Threat Prevention blades are enabled on a Check Point Security Gateway, some HTTPS web applications may not render page content correctly. Refer to sk184974.
PRJ-70957 PRHF-47154	IPS	Management server IPS database updates may fail during deployment if the database index contains a corrupted entry with an invalid serialized structure. Refer to sk185174.
PRJ-70804 PRHF-46658	DLP	In rare scenarios, a file descriptor (FD) leak can occur in the DLPU process when the flexible hold mechanism is configured for Threat Prevention.
PRJ-72262 PRHF-46265	Anti-Virus	Anti-Virus may allow common file types whose hashes are not in the local database without querying ThreatCloud, even when Deep Scan is enabled.
PRJ-64799 PRHF-42590	Anti-Virus	In rare scenarios, the Security Gateway may generate a core dump while inspecting an email message.
PRJ-68801 PRHF-45469	Anti-Virus	In some scenarios, Anti-Bot fails to enforce protections against malicious IP addresses when the Security Gateway is configured as an explicit proxy.
PRJ-59680 PRHF-38457	Anti-Virus	In some scenarios, Anti-Virus logs related to ICAP traffic may not be displayed correctly in SmartConsole.
PRJ-72297 PRHF-47640	SSL Inspection	In some scenarios, the FWK process crashes while parsing wildcard certificates (for example, *.domain.com) in HTTPS connections under heavy load.
PRJ-72702 PRJ-72707	SSL Inspection	Improved Security Gateway resilience against HollowByte attacks.
PRJ-71746 PRHF-47689	UserCheck	"Report wrong category" option in UserCheck may fail with an unexpected error (HTTP error 400).
PRJ-67008 PRHF-44071	UserCheck	In some scenarios, when configuring a UserCheck message with the send original email option, clicking this option returns "An unexpected error has occurred" or "HTTP 500 response when accessing the relevant UserCheck action" errors. Refer to sk184649.
PRJ-60231 PRHF-38400	ClusterXL	In rare scenarios, a cluster environment may experience a kernel crash or system freeze.
PRJ-71054 PMTR-130311	ClusterXL	In some scenarios, MVC data synchronization fails, resulting in unexpected errors. Under high load, retransmission packets may further impact synchronization and, in extreme cases, cause the old cluster member to crash.
PRJ-69896 PRHF-46025	ClusterXL	Adding or removing a slave interface from an existing bond after a reboot in VSX ClusterXL can cause a state flap.
PRJ-65981 PMTR-123125	ClusterXL	In some scenarios, the Bridge interface traffic that requires correction may fail.
PRJ-69087 PRHF-45320	ClusterXL	In some VSX deployment scenarios, a Full Sync pnote appears on one of the Virtual Systems because automatic SIC renewal by the ClusterXL daemon does not automatically renew SIC on all cluster members.
PRJ-72367 PRHF-44391	ClusterXL	In some scenarios, when QoS is enabled in a cluster environment, the USIM process may crash.
PRJ-70294 PRHF-46051	ClusterXL	In some scenarios, NAT64 connections fail on Scalable Platforms.
PRJ-72020 PRHF-48060	SecureXL	Improved stability of Security Gateway with the Firewall Drop Templates feature enabled.
PRJ-70616 PRHF-46611	SecureXL	MaaS tunnel communication may fail when traffic is directed to the cluster VIP.
PRJ-72361 PMTR-120217	SecureXL	In some scenarios, the Security Gateway crashes during policy installation on VSX when validating Anti-Spoofing ranges.
PRJ-70630 PRHF-46828	SecureXL	In some scenarios, UDP traffic is displayed in CPView with statistics that use TCP-related terminology.
PRJ-72166 PRHF-46308	SecureXL	In an SD-WAN environment, HTTPS traffic undergoing HTTPS Inspection intermittently fails and does not always follow the SD-WAN link selected by the steering policy. Instead, the traffic follows the kernel default route while being NATed behind the IP address of the SD-WAN link chosen by the steering policy.
PRJ-71435 PRHF-47600	SecureXL	In some scenarios, the `show interfaces xcvr` command reports "transceiver information not available" for ports with a functioning transceiver when UPPAK is used.
PRJ-71516 PRHF-47323	SecureXL	The Security Gateway may unexpectedly restart when Jumbo MTU is enabled with the User-Space Performance Pack (USFW).
PRJ-68769 PMTR-121802	SecureXL	Implemented memory optimization for jumbo MTU virtual interfaces.
PRJ-72027 PRHF-46353	SecureXL	Improved SD-WAN stability when Forward Error Correction (FEC) is enabled.
PRJ-72409 SMBGWY-13520	SecureXL	A Site-to-Site VPN tunnel may fail to establish, with the message "reason: Virt Defrag Timeout" in the drop log.
PRJ-70471 PRHF-46594	SecureXL	The SNMP OID `fwSXLAggrConnectionsPerSecond` returns 0 instead of the actual ecureXL connection rate. Use `fwSXLHostConnectionsPerSecond` instead. After installing this Jumbo Hotfix Take, this OID returns the correct value. The aggregate OID is not supported by design because it was intended for legacy multi-device aggregation.
PRJ-69485 PRHF-45813	SecureXL	In some rare scenarios, a policy installation may cause new traffic to be dropped.
PRJ-73348 PRJ-73323	SecureXL	In an ElasticXL cluster with IPv6 enabled, a cluster member that is still booting may reboot unexpectedly if it receives IPv6 multicast traffic, such as a Router Solicitation.
PRJ-62620 PRHF-38737	Gaia OS	Check Point Firewall 3600 and 3800 appliances continue to send the SNMP Trap "powerSupplyFailure" even after disabling the alarm LED activation as described in sk166000.
PRJ-71693 PRHF-47770	Gaia OS	In some scenarios, after an upgrade from R81.10, the `show configuration syslog` and `show syslog` all Clish commands do not display the configured Remote Syslog Servers.
PRJ-71365 PRHF-47460	Gaia OS	In some scenarios, the bond interface loses all slaves when assigned to a Virtual System.
PRJ-65720 PRHF-43293	Gaia OS	Scheduled backup email notifications are sent for successful Gaia OS backups even when the notification setting is configured to "Send notification if a scheduled-backup is failing." Refer to sk184627.
PRJ-71583 PRHF-47601	Gaia OS	Improved the Gaia Clish `show configuration` command output to eliminate duplicate interface comment entries for bond member interfaces.
PRJ-71622 PMTR-132847	Gaia OS	Installation history entries may appear in the wrong order because the system sorts records by the date text format instead of the actual installation date and time. As a result, an older installation may incorrectly appear newer in the displayed list. The issue is cosmetic.
PRJ-70751 PRHF-45870	Gaia OS	Improved Gaia Job Scheduler handling of jobs migrated from R81.10, allowing their settings to be edited after an upgrade. Refer to sk185019.
PRJ-72625 PRHF-48807	Gaia OS	Following a previous incorrect VMAC calculation in ElasticXL VSNext mode, the system now verifies that all Virtual System (VS) MAC addresses assigned to port numbers 8 and higher are correctly configured and consistent across all members.
PRJ-72442 PRHF-47439	Gaia OS	Improved the Gaia REST API on Multi-Domain Servers. API requests are no longer rejected with the error "Invalid X-Forwarded-Host header value" when the request includes the server hostname and port.
PRJ-70567 PRHF-46625	Gaia OS	Improved Clish logging. The daily "Warning! LOGNAME is missing" message is no longer generated during Health Check Point (HCP) runs.
PRJ-70512 PRHF-46582	Gaia OS	Improved the SNMP interface description (ifDescr) for newer network interface cards, which no longer display "Unknown device".
PRJ-70916 PMTR-130072	Gaia OS	Gaia OS snapshot reverts can fail and cause a boot loop, leaving the system inaccessible. This affects reverts between R82, R82.10, and R82.20. Refer to sk1000129.
PRJ-73370 PRHF-49586	Gaia OS	After the upgrade, the Gaia Portal can be accessed even though it is disabled and the settings show it as disabled.
PRJ-68492 PRHF-45048	Gaia OS	On Check Point Force Firewall 9100 and 9200 appliances, the fan frequently receives alerts indicating that its speed is approaching or exceeding the maximum value.
PRJ-69903 PRHF-45848	Gaia OS	Enabling the `fw_link_state_propagation_enabled` kernel parameter using the `fw ctl set -f int` command does not persist. The parameter becomes active temporarily but reverts to its previous value after a reboot. Refer to sk185050.
PRJ-70745 PRHF-46746	Gaia OS	Improved traffic stability after DHCP lease renewal on Security Gateways with Dynamically Assigned IP addresses (DAIP).
PRJ-70277 PRHF-46153	Gaia OS	Roles configured with `virtual-system access: all` cannot add global features, such as Backup and Expert, and users assigned to these roles cannot log in. Refer to sk185085.
PRJ-70884 PRHF-47012	Gaia OS	In some scenarios, the Gaia API proxy fails with "The Gateway does not allow SSH execution" error when its target is specified as an IP address, and another host object is configured with the same IP address.
PRJ-71176 PRHF-45737	Routing	In some scenarios, the VRRP6 kernel module fails to load, resulting in a system failure that causes a boot loop.
PRJ-71443 PRHF-47013	VSNext	Adding or removing interfaces on a Virtual Gateway through the WebUI may fail if the final number of interfaces exceeds 127.
PRJ-71592 PRHF-47485	VSNext	After installing this Jumbo Hotfix Take, if a step in the VSNext Virtual Switch deletion process fails, the system continues with the remaining steps to complete the deletion.
PRJ-70961 PMTR-130588	VSNext	In some scenarios, CPU and memory statistics displayed in CPView and Insights per Virtual System are inaccurate.
PRJ-72343 PMTR-132314	VSNext	In some scenarios, a memory leak occurs in the CPVIEWD daemon, causing gradual memory growth in the VS0 context on VSNext Gateways.
PRJ-70640 PRHF-46406	Traditional VSX	Improved SNMP daemon (SNMPD) stability during SNMP walk operations performed by third-party monitoring tools.
PRJ-72378 PRHF-47875	Mobile Access	Improved connectivity and reduced CPU utilization when handling Mobile Access WebSocket-based web applications through the Pinger process.
PRJ-74041 PMTR-134217	Mobile Access	Disabled a deprecated option for Exchange Push notifications in Capsule Workspace, which is no longer supported.
PRJ-72912 PRHF-49166	Mobile Access	In some scenarios, Mobile Access Citrix applications fail to connect to their servers after an upgrade, and the HTTPD process crashes. Refer to sk1000300.
PRJ-72164 PMTR-131419	VPN	In some scenarios, SD-WAN overlay probe packets fail intermittently, and CPView reports SD-WAN status as DOWN.
PRJ-71662 PRHF-47754	VPN	In rare scenarios, a cluster member may enter a boot loop during an upgrade.
PRJ-68244 PRHF-44959	VPN	In a Scalable Platform environment, the SCV policy may not be enforced on any SMO member (the first active member) because the `local.scv` file was updated only on the SMO and not on all SGMs during policy installation.
PRJ-72130 PRHF-45971	VPN	Enabling the "Exclude external IP from the VPN domain" option may incorrectly exclude the Security Gateway's main IP address, even when it is not configured as an external IP address.
PRJ-71795 PRHF-47786	VPN	In some scenarios, the IKE process crashes during RIM startup.
PRJ-72240 PRHF-48242	VPN	In some scenarios, simultaneous VPN tunnel monitoring changes prevent RIM routes from being added or removed for some peers in environments with multiple peers and multiple IKED instances.
PRJ-72797 PMTR-132256	SD-WAN	In a Multi-Domain Security Management Server with a Global VPN Community, changes to a Security Gateway configuration in one Domain are not reflected when a policy is installed on a Security Gateway in another Domain.
PRJ-73066 PMTR-132950	Cloud Firewall	In some scenarios, accessing Gemini in a web browser results in a blank page when HTTPS Inspection is enabled.
PRJ-70865 PMTR-130552	Cloud Firewall	In some scenarios, a Cloud Firewall Gateway intermittently fails to receive its vSEC central license quota during license distribution.
PRJ-70725 PMTR-130246	Cloud Firewall	Improved ARP packet processing performance in AWS environments.
PRJ-70872 PMTR-108738	Scalable Platforms	In some scenarios, during an upgrade of a Scalable Platforms Security Group, SSH host keys are regenerated, causing a configuration mismatch in the `/etc/ssh/*` files between Security Group Members and potentially triggering a reboot to synchronize the configuration.
PRJ-69460 PMTR-128480	Scalable Platforms	In a Traditional VSX environment, the active slave in an HA bond may become misaligned between cluster members if a primary interface is not explicitly set, potentially causing traffic disruptions.
PRJ-67565 PMTR-125024	Scalable Platforms	Configuring more than 31 bridge interfaces might cause the Security Gateway to crash.
PRJ-71452 PRHF-47349	Scalable Platforms	In some scenarios, in ElasticXL Load Sharing deployments with multiple members on the same site, the pivot member fails to forward or distribute packets to other members, causing traffic disruption.
PRJ-58229 PRHF-34679	Scalable Platforms	In Virtual System Load Sharing (VSLS) mode, ARP packets may be sent from the standby site, which can cause traffic interruptions.
PRJ-71830 HEC-3404	Scalable Platforms	On Maestro, the "SNMP Per Member" feature may fail to be enabled in Traditional VSX mode.
PRJ-69975 PMTR-129142	Scalable Platforms	SGMs may go down with a "Configuration" pnote because the `robo-IKE.NDB` file is not distributed correctly to all ElasticXL members.
PRJ-69399 PMTR-128427	Scalable Platforms	In some scenarios, an upgraded Security Group Member may fail to fetch the policy during the first boot because the policy fetch process starts before the management interface is up.
PRJ-71652 PMTR-120914	Scalable Platforms	In some scenarios, Virtual Systems with IDs greater than 255 do not start correctly and are assigned the Default Filter Access Policy.
PRJ-72433 PMTR-132104	Scalable Platforms	The mass_tunnel interface may not come up during an upgrade when management traffic is routed through a data interface, causing policy installation to fail. Refer to sk184660.
PRJ-70820 PRHF-46381	Scalable Platforms	The `asg vsx_verify` command may falsely report a "Mismatch" for correctly configured VTI interfaces (vpnt*) on VSX Scalable Platforms.
PRJ-71030 PMTR-123014	Scalable Platforms	On Scalable Platforms, during a Multi-Version Cluster upgrade, the `set cluster members-admin-state` Gaia gClish command and the equivalent WebUI action could not activate an upgraded member. Only the `clusterXL_admin up` Expert mode command was supported.
PRJ-70576 PMTR-127474	Scalable Platforms	When cluster standby hide mode (`fw ctl set int fwha_standby_hide_new_mode 1`) is enabled, local connections originating from the data plane (dplane) may fail.
PRJ-69513 PMTR-122192	Scalable Platforms	Adding a scheduled backup to an external SCP server may fail with the error: "Remote server identity is not known by Gaia."
PRJ-72063 PRHF-48127	Scalable Platforms	A TACACS+ super-user may not switch the Virtual System context in the Gaia Portal of the Security Group.
PRJ-67582 PMTR-125793	Scalable Platforms	In some scenarios on ElasticXL deployments, MAC-learning CCP packets are incorrectly transmitted over the slave interfaces of a MAGG interface.