> Source: [sk111100](https://support.checkpoint.com/results/sk/sk111100)

# sk111100 - R77.20.20 for Small and Medium Business Appliances Known Limitations

| Property | Value |
|----------|-------|
| Solution ID | sk111100 |
| Date Created | 2016-04-20 |
| Last Modified | 2019-03-13 |
| Technical Level | General |
| Products | Spark Firewall (Locally Managed) |
| Versions | R82.00.X, R81.10.X |

## Solution

This article lists all of the Check Point R77.20.20 for 600 / 700 / 1100 / 1200R / 1400 Small and Medium Business Appliances specific known limitations.

[Click here](https://supportcenter.checkpoint.com//supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk111100) to see the list of Known Limitations.

This article lists all of the Check Point R77.20.20 for 600 / 700 / 1100 / 1200R / 1400 Small and Medium Business (SMB) Appliances specific known limitations  
![](https://sc1.checkpoint.com/uc/images/Information_icon1.gif)This is a live document that may be updated without special notice. We recommend registering to our weekly updates in order to stay up to date. To register go to [UserCenter](https://usercenter.checkpoint.com/) \> ASSETS / INFO \> My Subscriptions.

<br />

For more information, see the [Check Point R77.20.20 for Small and Medium Business Appliances Home Page](http://supportcontent.checkpoint.com/solutions?id=sk110875), [Check Point R77.20.20 for Small and Medium Business Appliances Resolved Issues](http://supportcontent.checkpoint.com/solutions?id=sk110998), [Check Point 700 Appliances Product Page](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doShowproductpage&productTab=overview&product=460) and [Check Point 1400 Appliance Product Page](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doShowproductpage&productTab=overview&product=490).   
You can also visit our [2012 Models Security Appliances forum](https://forums.checkpoint.com/forums/forum.jspa?forumID=61) or any other [Check Point discussion forum](https://forums.checkpoint.com/forums/index.jspa) to ask questions and get answers from technical peers and Support experts.

**Table of Contents**

* Hardware and Configuration
* Networking
* Wireless
* Logging
* Multi-Domain Management Server
* SmartProvisioning
* WebUI
* VPN

{#Hardware and Configuration}{#Networking}{#Wireless}{#Logging}{#MDS}{#SmartProvisioning }{#WebUI}{#VPN}

|----------|--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|
| ID       | Symptoms                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                           |
| Hardware and Configuration                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                   ||
| -        | In 600 / 1100 / 1200R / 700 appliances, any change to the MTU setting on any LAN port will be implemented on all other LAN ports.                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  |
| -        | In 600 / 1100 appliances, the DMZ port shares the global MTU with the LAN ports.                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                   |
| 01999780 | If a cable is connected to the serial console in the 770 / 790 / 1470 / 1490 appliances, a wide USB stick might not connect well. Use the front USB or a USB extension cord in this case.                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          |
| 02008258 | Reimaging of the 770 / 790 / 1470 / 1490 appliance by TFTP method can only be done through the DMZ port.                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                           |
| 02015436 | Rack mount installation requires the removal of the rubber feet on the appliance.                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  |
| 02001273 | If cables are connected to both the SFP and copper ports of DMZ, after reboot, the LED may incorrectly indicate traffic passes through the copper port instead of the SFP port.                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    |
| 02024712 | The Factory Default reset button does not work on the 1100 and 600 appliances. To reset the appliance to factory default use the WEB local management, the Clish or the Uboot menu when connected with a console.                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  |
| 02029186 | On 770 / 790 / 1470 / 1490 appliances, burning a new firmware via USB2 when SD or USB1 ports are also in use, results in the following error after reboot: *Error: cannot open image file /mnt/usb3/\<image name\>.* *Image verification failed* *....* *Appliance was not configured yet - Checking Zero Touch service...* Workaround: when burning a new firmware, use the USB1 port                                                                                                                                                                                                                                                                                                                                                                                                                             |
| Networking                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                   ||
| 01999202 | After frequent reboots, some ISP connections can take up to several minutes to be established.                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                     |
| 1973308  | "*An internal error has occurred while accessing the database* " message is shown when the accumulative number of local networks (virtual switch, tag based VLANs and virtual wireless access points) exceeds 32.                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  |
| 01973498 | Limit of the total number of VAPs + Switches (Ports-based VLANs) + Tag-based VLANs + VTIs + Loopback interfaces in R77.20.20 appliances: * 730 / 750 / 1430/ 1450 appliances: 26 * 770 / 790 / 1470/ 1490 appliances: 16                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                           |
| -        | The *ethtool* command is not supported on the 770 / 790 / 1490 / 1470 appliances on WAN and all LAN ports.                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         |
| -        | Alias IP configuration is not supported on any of the SMB appliances.                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              |
| Wireless                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                     ||
| 01997749 | In the 770/790 and 1470/1490 appliances: When creating a single network between 2 wireless networks on different WiFi bands, a bridge configuration is required.                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                   |
| 01953356 | The CLI command "*set wlan radio operation-mode*" to set up wireless radio in the 600/1100 appliances shows the option to select 5GHz operation modes. These operation modes are not supported in these appliances and should not be selected. In addiiton, any channel over 14 is not relevant for the supported 2.4GHz operation modes.                                                                                                                                                                                                                                                                                                                                                                                                                                                                          |
| Logging                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      ||
| 01965802 | Syslog over TLS is not supported when redirecting security logs to the syslog server.                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              |
| 01964316 | Maximum of 8 external syslog servers is supported.                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                 |
| SMB-1935 | Security logs can be exported to an external syslog server only in locally/SMP managed appliances.                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                 |
| Multi-Domain Management Server                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                               ||
| 01630970 | Multiple Global assignments are inserted into a queue. Only 5 tasks run at the same time.                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          |
| SmartProvisioning                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            ||
| 01885305 | Relevant only for R77.30: When 1400 appliances are centrally managed by SmartProvisioning and SmartUpdate, the gateways must be configured as 1100 appliances. The 1430/1450 appliances ignore settings for LAN7 and LAN8. In 1470/1490 appliances, you can not configure settings for LAN9 and higher through R77.30 SmartProvisioning. You can not configure 5GHz wireless networks through R77.30 SmartProvisioning. To use SmartProvisioning and SmartUpdate with 1400 appliances, you must use the firmware upgrade package *CP1400AS1100* \* if the Management version is R77.30. If you do not use the *CP1400AS1100*, you can not select the package in the view. Refer to [sk111292](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk111292). |
| WebUI                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        ||
| 02005233 | "404 Not Found" error may appear when the user clicks on the Online Help page for "Security Management" in a locally managed 1470/1490 appliance.                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  |
| VPN                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          ||
| 02106220 | Changing the value of "`VPN Remote Access - Endpoint Connect re-authentication timeout`" parameter on Locally Managed SMB appliance does not have any affect on Check Point Mobile VPN / Capsule Connect / Capsule VPN client once Client-to-Site VPN connection is established. Refer to [sk112574](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk112574).                                                                                                                                                                                                                                                                                                                                                                                          |
| SMB-7421 | If an authenticated user connected through VPN capsule (mobile application client for Android/iOS) disconnects, that user is still shown on the "Remote Access active connected users" page until the authentication times out.                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    |

---

# Agent Instructions

This content is from the Check Point Support Center (https://support.checkpoint.com), the official knowledge base for Check Point cybersecurity products.

## Navigating This Knowledge Base

- **Complete index**: [llms.txt](https://support.checkpoint.com/llms.txt)
- **All SK articles**: [SecureKnowledge Sitemap](https://support.checkpoint.com/sitemaps/secureknowledge-sitemap-index.xml)
- **SK article URL pattern**: `https://support.checkpoint.com/results/sk/{skId}`
- **Markdown responses**: AI bot User-Agents automatically receive `text/markdown` content
