> Source: [sk116380](https://support.checkpoint.com/results/sk/sk116380)
# sk116380 - Jumbo Hotfix Accumulator for R80.10 (R80_10_jumbo_hf)
| Property | Value |
|----------|-------|
| Solution ID | sk116380 |
| Date Created | 2017-03-16 |
| Last Modified | 2026-07-05 |
| Technical Level | General |
| OS | Gaia |
## Solution
Click Here to Show the Entire Article
**Availability \| Important Notes\| List of resolved issues \| Installation instructions \| Uninstall instructions \| Revision History**
### R80 and R80.10 reached their End of Support
**For more info on all Check Point releases, refer to [Release map](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk152052) and [Release Terminology](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk95746) articles.**
Introduction {#Introduction}
----------------------------
**R80.10 Jumbo Hotfix Accumulator** is an accumulation of stability and quality fixes resolving multiple issues in different products.
**Supported products and configurations**
> The Jumbo Hotfix Accumulator supports these products and configurations: Security Gateway, StandAlone, Security Management Server, Multi-Domain Management Server, Log Server, Multi-Domain Log Server, SmartEvent Server, Endpoint Security Server, VSX, Cluster and CloudGuard / vSEC for AWS, Microsoft Azure and Google Cloud (see [sk109141](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk109141)).
>
> * Install this Jumbo Hotfix Accumulator only after you successfully complete the Gaia First Time Configuration Wizard and reboot.
> * Check Point recommends installing Jumbo Hotfix Accumulator on all R80.10 devices.
> * For CPUSE installation, use the latest Deployment Agent build (refer to [sk92449](http://supportcontent.checkpoint.com/solutions?id=sk92449#Latest%20build%20of%20CPUSE%20and%20What%27s%20New)).
*** ** * ** ***
**For Check Point Appliances**
> * For information about Jumbo Hotfix support on Quantum Appliances, refer to [sk166536](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk166536).
> * Smart-1 525 / 5050 / 5150 R80.10 Jumbo Hotfix Accumulator bundle is suitable only for Smart-1 525 / 5050 / 5150 appliances and cannot be installed on other Check Point appliances.
*** ** * ** ***
[**Jumbo Hotfix Accumulator FAQ**](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk98028)**\| [Releases Terminology](http://supportcontent.checkpoint.com/solutions?id=sk95746) \| [Jumbo Hotfix Takes Compatibility](http://supportcontent.checkpoint.com/solutions?id=sk164258)**
Availability {#Availability}
----------------------------
R80.10 image *Take 479* can be installed with R80.10 Jumbo Hotfix Accumulator *Take 154* and higher.
R80.10 image *Take 462* can be installed with R80.10 Jumbo Hotfix Accumulator *Take 70* and higher.
R80.10 image *Take 421* can be installed with *any* released R80.10 Jumbo Hotfix Accumulator Take.
*
### General Availability Take
**Take_298** is the latest R80.10 Jumbo Hotfix Accumulator General Availability release that can be directly downloaded from Check Point Cloud using CPUSE and from this article:
|-------------------------------------------------------------------------------------------------------|----------------------------------------|--------------|-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|
| Product | Take | Release Date | CPUSE offline package | SmartConsole package |
| **All suitable**(except Smart-1 525/5050/5150 appliances) | **Take_298** | 22 Dec 2021 | [](https://supportcenter.checkpoint.com/supportcenter/portal/role/supportcenterUser/page/default.psml/media-type/html?action=portlets.DCFileAction&eventSubmit_doGetdcdetails=&fileid=120130) (TGZ) | [](https://supportcenter.checkpoint.com/supportcenter/portal/role/supportcenterUser/page/default.psml/media-type/html?action=portlets.DCFileAction&eventSubmit_doGetdcdetails=&fileid=120127) (EXE) *Build 188* |
| **Smart-1 525/5050/5150 appliances** | **Take_298** | 22 Dec 2021 | [](https://supportcenter.checkpoint.com/supportcenter/portal/role/supportcenterUser/page/default.psml/media-type/html?action=portlets.DCFileAction&eventSubmit_doGetdcdetails=&fileid=120131) (TGZ) | [](https://supportcenter.checkpoint.com/supportcenter/portal/role/supportcenterUser/page/default.psml/media-type/html?action=portlets.DCFileAction&eventSubmit_doGetdcdetails=&fileid=120127) (EXE) *Build 188* |
| **Blink Image for Security Gateway (All suitable)** Clean Install / Upgrade | **R80.10 GA Take + Jumbo HF Take_298** | 26 Jan 2022 | [](https://supportcenter.checkpoint.com/supportcenter/portal/role/supportcenterUser/page/default.psml/media-type/html?action=portlets.DCFileAction&eventSubmit_doGetdcdetails=&fileid=120138) (TGZ) | [](https://supportcenter.checkpoint.com/supportcenter/portal/role/supportcenterUser/page/default.psml/media-type/html?action=portlets.DCFileAction&eventSubmit_doGetdcdetails=&fileid=120127) (EXE) *Build 188* |
| **Blink Image for Security Management - Clean Install** (All except Smart-1 525/5050/5150 appliances) | **R80.10 GA Take + Jumbo HF Take_298** | 26 Jan 2022 | [](https://supportcenter.checkpoint.com/supportcenter/portal/role/supportcenterUser/page/default.psml/media-type/html?action=portlets.DCFileAction&eventSubmit_doGetdcdetails=&fileid=120139) (TGZ) | [](https://supportcenter.checkpoint.com/supportcenter/portal/role/supportcenterUser/page/default.psml/media-type/html?action=portlets.DCFileAction&eventSubmit_doGetdcdetails=&fileid=120127) (EXE) *Build 188* |
* For Gaia Fast Deployment mechanism "Blink", refer to [sk120193](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk120193).
* On 22 December 2021, [SmartConsole package](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk119612) has been updated (*Build 188*)
**Take 298 \| Take 290 \| Take 288 \| Take 287 \| Take 283**
Important Notes {#Important Notes}
----------------------------------
* Starting from Take 275, clients that do not support MFA (such as Mac OS and iOS) cannot connect as Remote Access clients if MFA is enabled.
* If you use a cluster with enabled Identity Awareness, refer to [sk170516](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk170516) after the first installation of Jumbo Hotfix to avoid unexpected behavior with Identity Awareness.
List of Resolved issues and New Features per HotFix Take {#List of resolved issues per HotFix}
----------------------------------------------------------------------------------------------
{#Take 298}{#Take 290}{#Take 288}{#Take 287}{#Take 283}{#Take 279}{#Take 278}{#Take 275}{#Take 272}{#Take 270}{#Take 259}{#Take 249}{#Take 245}{#Take 225}{#Take 214}{#Take 203}{#Take 189}{#Take 185}
|------------------------------------------------------------------------|---------------------------------------|-----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|
| ID | Product | Description |
| **R80.10 Jumbo HotFix - General Availability Take 298 (22 December 2021, GA from 26 January 2022)** |||
| PRJ-26244, PRJ-26233 | Diagnostics | **NEW:** Added the [Check Point Performance Sizing Utility (CPSizeMe)](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk88160)v5.2. |
| PRJ-29621, PRHF-13728 | Security Management | **NEW** : Improved the *FWM* process performance during policy or database installation. |
| PRJ-26907, PRHF-16657 | Security Management | Policy installation to multiple Gateways from Install Policy Presets may fail if each policy has its own HTTPS Inspection policy. |
| PRJ-24483, PRHF-16631 | Security Management | In very large Management environments, Policy verification and installation may fail with *FWM* process core dump. Refer to [sk173722](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk173722). |
| PRJ-23694, PRHF-16119 | Security Management | Global Policy Reassignment may take a long time to complete after an IPS Update in the Global Domain. |
| PRJ-23450, PRHF-16065 | Security Management | After an upgrade from R77.x, the "*Cannot assign a Domain more than once*" errors may appear in the validations pane. |
| PRJ-26180, PRHF-17487 | Security Management | When running the "*fwm logexport* " command multiple times, the *FWM* process may unexpectedly exit, producing a core file. |
| PRJ-25683, PRHF-17286 | Security Management | In some scenarios, a policy installation failure message may show "*ReferenceObjec*t" instead of the actual object's name. |
| PRJ-21396, PRHF-15001 | Security Management | In rare scenarios, deleting an object fails with the "*Can't reach source object, maybe it already deleted* " error. Refer to [sk172828](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk172828). |
| PRJ-22381, PRHF-15325 | Security Management | User may fail to connect to SmartConsole after the administrator changed the RADIUS Server host IP address. Refer to [sk172065](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk172065). |
| PRJ-21784, PRHF-15257 | Security Management | In some scenarios, the output of the "*cpmistat*" command may contain partial information. |
| PRJ-26626, PRHF-17230 | Security Management | In rare scenarios during system startup, a cleanup operation may cause a high CPU on multiple Postgres processes and prevent login to SmartConsole. Refer to [sk175189](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk175189). |
| PRJ-7305, PMTR-45443 | Security Management | When creating a SecuRemote DNS object with more than 6 characters as a Domain suffix, it fails with the "*Domain suffix contains illegal characters*" error. |
| PRJ-27997, PRHF-18245 | Security Management | If Brute Force Password Guessing Protection is set to the value of more than 25 seconds, login to SmartConsole fails. * Requires R80.10 SmartConsole Build 188. |
| PRJ-25562, PRHF-17182 | Security Management | In rare scenarios, upgrade may fail when there is an OPSEC Server object configured. |
| PRJ-28532, PRHF-18063 | Security Management | In rare scenarios, Global Policy Assignment may fail with the "*class name not found for object*" error. |
| PRJ-28153, PRHF-17926 | Security Management | In rare scenarios, if Domain migration fails, the operation may not revert fully and leave some remnants in the database of the Management Server. |
| PRJ-29102, PMTR-70942 | Security Management | In some scenarios, the Administrators view may not filter Domain names according to the permission profile of the connected administrator. |
| PRJ-29195, PRHF-18782 | Security Management | After an upgrade from R77.x. in a multi-site environment, High Availability full synchronization may fail with an "*NGM failed to load data*" message. |
| PRJ-30879, PMTR-62059 | Security Management | In rare scenarios, during an upgrade, the *FWM* process may unexpectedly exit with a core dump file. |
| PRJ-31077, PRHF-19251 | Security Management | In rare scenarios, the *FWM* process on the Security Management Server unexpectedly exits. |
| PRJ-28165, PRHF-18380 | Security Management | In rare scenarios, the Management Server may fail to start due to incorrect sessions handling. |
| PRJ-21773, PMTR-63316 | Licensing | In some scenarios, the total number of "sr" licenses may be counted incorrectly. |
| PRJ-27341, PMTR-64049 | Licensing | In a rare scenario, the licensing status in SmartConsole is displayed incorrectly. |
| PRJ-30379, PRJ-30370 | CPInfo | **UPDATE** : Added CPInfo build 914000219. Refer to [sk92739](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk92739). |
| PRJ-23864, PRHF-16183 | Logging | In SmartView reports, the "Show only icon" option for table widgets does not work as expected. |
| PRJ-26722, PRHF-17205 | Logging | In some scenarios, the *FWD* process on Security Gateway may cause high memory consumption when Log Forwarding is configured or when running the "*fw fetchlogs*" command. |
| PRJ-22341, PRHF-15696 | Logging | In SmartView, the "Duration" field is missing from Reports and Views. |
| PRJ-23817, PRHF-12659 | Logging | In rare scenarios, when querying logs with a timeframe larger than 1 day, only 50 logs from each day are shown. |
| PRJ-23760, PRHF-16328 | Logging | In rare scenarios, SmartConsole may unexpectedly close if the pre-defined VPN columns profile in the Logs view was modified and saved. |
| PRJ-23576, PMTR-65203 | Logging | In some scenarios following a Multi-Domain Management Server upgrade, logs queries may not retrieve results from some CMAs\\CLMs. |
| PRJ-20616, PRHF-14608 | Logging | In SmartView, when filtering with specific time filters, the result may include more logs than was requested. |
| PRJ-25642, PMTR-68886 | Logging | In SmartView (Reports and Web Logs view), the value of the file size is displayed differently from the Logs view in SmartConsole (GB instead of GiB). |
| PRJ-16644, PMTR-58979 | Logging | In the SmartConsole Logs tab, the "IKE IDs" field cannot be added to column profiles. |
| PRJ-12423, PRHF-10612 | Logging | In some scenarios, exported FireWall logs from a Security Gateway to an external Syslog Server ([sk87560](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk87560)) contain a redundant new line character. |
| PRJ-21321, PRHF-15198 | Logging | In the Method field, logs with the following values are not shown in the SmartConsole's Logs tab. They are only shown when opening a single log record. The values are: MOVE, TEXT, XGET, UNDEFINED, VTTEST, ABCD, SEARCH, RPC_CONNECT, PRONECT, TRACK, CFYZ, BADMETHOD, DEBUG, MGET, GET, MKCOL, QUALYS, RNDMMTD, PRI, NESSUS, BDMT, BADMTHD. |
| PRJ-2290, PRHF-4121 | Logging | A super user connected to SmartConsole in the context of the Domain Management Server cannot see search suggestions for global objects. |
| PRJ-16981, PRHF-12847 | Logging | In a rare scenario, Application Control events may not be displayed in SmartEvent. |
| PRJ-16278, PRHF-11939 | Logging | In some scenarios, emails of DLP blade may be sent with obfuscated information, with no option to present the full data. Refer to [sk106430](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk106430). |
| PRJ-16274, PMTR-57960 | Logging | In some scenarios, scheduling Log Forwarding on a weekly or monthly basis does not take effect, and Log Forwarding keeps working daily (the default). |
| PRJ-28320, PRHF-17811 | Logging | In some scenarios, in SmartLog, free-text search does not work for some inspection settings logs and their description is missing. |
| PRJ-27046, PRHF-17285 | Logging | In rare scenarios, Management object changes may not be reflected in the Logs view. When the issue occurs, the*CPM* process may also consume a high CPU. |
| PRJ-32152, PMTR-74372 | Security Gateway | **UPDATE**: Apache HTTPD version was updated from 2.4.41 to 2.4.51. |
| PRJ-703, MCFG-159 | Security Gateway | In rare scenarios, the *FWD* process on the Security Gateway may unexpectedly exit when the user configures a non-existing Log Server. |
| PRJ-26546, MBS-12769 | Security Gateway | In some scenarios, a "*fwauthd_init: got known service port XXX ... choosing another one* " message appears repeatedly in the *$FWDIR/log/fwd.elg* file. |
| PRJ-25303, PMTR-68439 | Security Gateway | When the Security Gateway is configured as a proxy, some network objects may not be matched correctly. |
| PRJ-24620, PRHF-16667 | Security Gateway | In a rare scenario, the *FWK* process unexpectedly exits on the Security Gateway. |
| PRJ-18863, PRHF-13722 | Security Gateway | In rare scenarios, DynamicID authentication fails with a "*Server_code 403 log_msg General HTTP error* " message in *vpnd.elg* . Refer to [sk170303](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk170303&partition=Advanced&product=Mobile). |
| PRJ-24373, SMB-10515 | Security Gateway | A memory leak may occur in DNS resolving infrastructure. |
| PRJ-26819, PRHF-17872 | Security Gateway | In rare scenarios, a duplicate entry may appear in the */etc/cpshell/log_rotation.conf* file. This issue is only cosmetic. |
| PRJ-29222, PRHF-17436 | Security Gateway | The *WSDNSD* process unexpectedly exits and creates a core dump file. Refer to [sk173627](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk173627). |
| PRJ-27919, PRHF-13493 | Security Gateway | In some scenarios, the *CPD* process may consume high CPU because of the memory leak in FDT (File Download Tool). |
| PRJ-19766, PRHF-14017 | Security Gateway | Security Gateway may crash after policy installation. |
| PRJ-29134, PRHF-18403 | Security Gateway | The *cpsicdemux* process may unexpectedly exit, causing the Secure Internal Communication (SIC) connection to fail. |
| PRJ-20978, PRHF-14104 | Security Gateway | In rare scenarios, the *CPD* process unexpectedly exits when the VPN is enabled, and statuses are not sent to the Management Server. |
| PRJ-30246, PMTR-70219 | Security Gateway | Added a translation of the error exit code of *cprid_util* in *$CPDIR/log/cprid_util.elg* debug log. |
| PRJ-26666, PRHF-17760 | Security Gateway | In a rare scenario, traffic outage may occur. It is caused by a memory leak related to delayed logs. |
| PRJ-30653, PRHF-14374 | Security Gateway | Running the *threshold_config* command may cause the *CPD* process to consume a high CPU. |
| PRJ-25909, PMTR-69241 | Security Gateway | In a rare scenario, machine hangs and the user is unable to run any command. Refer to [sk173405](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk173405). |
| PRJ-25268, PMTR-68358 | Internal CA, VPN, Multi-Portal | **UPDATE:** The IKE certificates validity period is set to 1 year by default. Refer to [sk176527](https://supportcenter.us.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk176527). |
| PRJ-26135, PMTR-69466 | Internal CA | **UPDATE**: Added automatic extension for Internal CA database to support more than 100,000 certificates. |
| PRJ-26645, PMTR-70065 | Internal CA | **UPDATE** : Expired certificates are now cleaned from the Internal CA database every three weeks and after reboot. Refer to [sk42424](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk42424). |
| PRJ-26707 | Internal CA | It may not be possible to remove expired certificates using the ICA Management Tool. |
| PRJ-31012, PRHF-19772 | Internal CA | In a rare scenario, when CRL files are created, some of them may be generated with a large number in the filename. When deleting CRL files, CPCA repeatedly fails to start. |
| PRJ-26799, MBS-13669 | Identity Awareness | In a rare scenario, the Security Gateway may crash. |
| PRJ-22279, PMTR-35594 | Identity Awareness | In rare scenarios, the*PDPD* process unexpectedly exits. |
| PRJ-27188, PRHF-17768 | Application Control | **UPDATE:** Improved matching of URLs for custom applications. |
| PRJ-26745, PRHF-4657 | SSL Inspection | Added an option to bypass the Name Constraints extension on certificates using a registry flag. Refer to [sk159692](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk159692). |
| PRJ-29471, PMTR-72234 | SSL Inspection | In some scenarios, a memory leak may occur when creating ECDHE keys. |
| PRJ-30696, PMTR-72756 | SSL Inspection,VPN | A memory leak in HTTPS Inspection and HTTPS portals may occur when using ECDHE ciphers. |
| PRJ-24712, PRHF-16801 | Routing | In OSPF environment, the *routed* process may unexpectedly exit when a VPN tunnel is flapped leading to a temporary connectivity loss. |
| PRJ-28390 | Routing | The checksum of PIM "register" packets may be calculated incorrectly, causing the RP router to discard a "register" packet. |
| PRJ-30175, PRHF-6139 | Routing | In a rare scenario, the *routed* process may unexpectedly exit during ClusterXL failover when BGP is configured. Refer to [sk165682](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk165682). |
| PRJ-31469, PMTR-68362 | VPN | **UPDATE**: In policy installation, the type of messages, related to VPN certificate expiration, is changed from "info" to "warning". This issue is only cosmetic. |
| PRJ-22114, PMTR-31204 | VPN | In rare scenarios, after policy installation, the *VPND* process may unexpectedly exit with core dump. |
| PRJ-28501, PRHF-18400 | VPN | A memory leak may occur in the *VPND* process. |
| PRJ-29278, PRHF-18818 | VPN | In rare scenarios, re-configuring a trusted CA bundle may cause a memory leak in the *VPND* process. |
| PRJ-29478, PMTR-72463 | VPN | A memory leak may occur in the *VPND* process in IKEv2 Site to Site VPN. |
| PRJ-28508, PRHF-18408 | VPN | In some scenarios, a memory leak may occur on the Security Gateway. |
| PRJ-28260, PRHF-18295 | VPN | A memory leak may occur when clearing the CRL cache file. |
| PRJ-28991, PRHF-15744 | VSX | In some scenarios, running the *snmpwalk* command may fail with incorrect OSPF-MIB information for VSX. Refer to [sk172064](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk172064). |
| PRJ-23963, PRHF-16338 | VSX | **UPDATE** : Added ability to change the Management and Sync interfaces via *vsx_util change_interfaces*. |
| PRJ-22687, PMTR-65535 | VSX | This fix allows create/change a VSX cluster/Gateway to have up to 32 CoreXL instances with VSX Provisioning Tool. Currently, it is possible to do this only in SmartConsole. |
| PRJ-26130, PMTR-53985 | VSX | After an upgrad?, the VS names may be displayed incorrectly in the output of the "*vsx stat -v*" command. |
| PRJ-27843, PMTR-67834 | VSX | VSX provisioning may fail to commit changes to the VSX database. Refer to [sk173683](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk173683). |
| PRJ-29548, PRHF-18753 | VSX | After reboot, the VS's clish static arps configurations exist, but the static arps may be missing. |
| PRJ-27963, PMTR-35890 | VSX | When querying a VS for "*sysObjectID* " via SNMP, a generic net SNMP value is returned ("*NET-SNMP-MIB::netSnmpAgentOIDs.10* ") instead of Check Point value ("*SNMPv2-SMI::enterprises.2620.1.6.123.1.62*"). |
| PRJ-30290, PMTR-72997 | Gaia OS | **UPDATE:** Upgraded OpenSSL to 1.1.1L. Merged the [CVE-2021-3711](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3711) and [CVE-2021-3712](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3712) fixes. |
| PRJ-27973, PMTR-69876 | Gaia OS | A memory leak may occur on a Security Gateway while configuring Secure Internal Communication (SIC). |
| PRJ-24592, PRHF-16780 | Gaia OS | When the RADIUS Server uses a multi-pool "Access Challenge", the system sends many authentication requests without waiting. |
| PRJ-26085, PRHF-15900 | Gaia OS | In rare scenarios, the "*show asset network* " command may lead to a memory leak. Refer to [sk174823](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk174823). |
| PRJ-28971, PRJ-28792, PRHF-18683 | Gaia OS | In a rare scenario, a memory leak may occur in the *monitord* process. |
| PRJ-33503, PMTR-75443 | Gaia OS | Fixed CVE-2021-30361 - Gaia Portal Authenticated Command Injection. Refer to [sk179128](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk179128). |
| PRJ-24384, MBS-12759 | Scalable Platforms | In rare scenarios, a Load Sharing cluster can experience DHCP Relay drops with a "*dropped by fw_post_vm_chain_handler Reason: Handler 'dhcp_reply_code' drop*" message. |
| PRJ-30150, ODU-181 | HCP | Added Update 5 of HealthCheck Point (HCP) Release. Refer to [sk171436](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk171436). |
| PRJ-27247, ODU-123 | HCP | Added Update 3 of HealthCheck Point (HCP) Release. Refer to [sk171436](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk171436). |
| PRJ-24084, ODU-91 | HCP | Added Update 2 of HealthCheck Point (HCP) Release. Refer to [sk171436](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk171436). |
| PRJ-22795, ODU-81 | HCP | Added Update 1 of HealthCheck Point (HCP) Release. Refer to [sk171436](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk171436). |
| PRJ-23423, PMTR-65909 | Infrastructure | The *VPND* process may consume a high CPU because of ECDHE use, which affects multi-portal functionality. Refer to [sk173145](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk173145). |
| PRJ-22318, PRHF-15689 | Infrastructure | In some scenarios, the *cpmiquerybin* and *dbedit* processes may unexpectedly exit causing a buffer overflow. |
| PRJ-31764, PRHF-19016 | Infrastructure | Policy installation fails with "*Operation failed, install/uninstall has been improperly terminated* " when a CMA name is more than 36 characters long. Refer to [sk175452](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk175452). |
| **R80.10 Jumbo HotFix - General Availability Take 290 (28 April 2021, GA from 27 June 2021)** |||
| PRJ-21002, PRHF-14969 | Security Management | **NEW**: Improved FWM process performance during Security policy or database installation. |
| PRJ-19997, PRHF-14293 | Security Management | **UPDATE:** Added improvements in policy load process, to reduce the policy installation time when having large amount of objects. |
| PRJ-21588, PRHF-15244 | Security Management | Although the Access Settings of the Management API is set to "All IP addresses", the API Server does not accept requests from any IP address unless the IP is defined explicitly as a Trusted Client. |
| PRJ-20884, PRHF-14946 | Security Management | In some scenarios, when connecting to an existing session in SmartConsole from a different IP address, a wrong "Client IP" is shown in the Audit Logs view. |
| PRJ-20301, PRHF-14634 | Security Management | In some scenarios, deleting a Domain Server may fail with "*Got at least one duplicate UID in requested list*" error. |
| PRJ-9513, PRHF-8550 | Security Management | The Rule UID is hidden in Audit logs. Refer to [sk165016](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk165016). |
| PRJ-22275, PMTR-65110 | Multi-Domain Management | In some scenarios, updating a Domain Server may fail with a "*\ already in use* " message. Refer to [sk171916](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk171916). |
| PRJ-21522 | SmartConsole | In a rare scenario, automatic NAT rules are not visible in SmartConsole. This may cause policy installation failure. Refer to [sk171395](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk171395). |
| PRJ-20783, PRHF-13556 | SmartConsole | When the user creates an Access Role, the AD organization tree may show duplicate branches, and some branches may be missing. |
| PRJ-15781, PRHF-11889 | SmartView | In SmartView, when the user exports a container widget with charts to PDF, some data may be missing, and the charts may be shown in a distorted manner. |
| PRJ-13481, PRHF-11216 | SmartView | In SmartView, the first bar in a timeline widget may display a date that exceeds the current time range. |
| PRJ-23005, PRHF-15886 | Logging | In rare scenarios, when the user exports logs to Excel using SmartView web, the action fails when the exported logs contain special characters, like emojis. |
| PRJ-1650, SL-1901 | Logging | **UPDATE:** Added ability to SOLR process running on the Log Server to prevent TLS1.1 and below in port 8211. Refer to [sk168472](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk168472). |
| PRJ-11309, PMTR-51802 | Logging | In Multi-Domain Management environments, some of the log_indexer processes may fail to start due to an occupied port. |
| PRJ-19755, PMTR-53967 | Logging | When installing a newer Jumbo Hotfix, the Log Exporter filtering configuration may not persist and set to default. |
| PRJ-18556, PRHF-13614 | Logging | In the "Logs" view in SmartConsole, when the query filter contains "*time:yesterday* " as a literal, the query fails with a "*Query resolution failed* " error. The pre-defined time filter "Yesterday" shows results from today. Refer to [sk170999](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk170999). |
| PRJ-20817, PMTR-59484 | Logging | In SmartView, chart and timeline widgets may show a "Query Failed" error. |
| PRJ-19007, PRHF-13936 | Logging | In a rare scenario, CPD process may use a random port for AMON communication instead of port 18196. |
| PRJ-23113, PMTR-52927 | Logging | In some scenarios in SmartView, exporting a report or view to PDF duplicates the item and displays it twice in the Catalog until the export is done. |
| PRJ-7951, PRHF-7415 | Logging | In rare scenarios, a log may display incorrect values in the Action and Rule field. Refer to [sk170676](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk170676). |
| PRJ-21898, PMTR-64675 | Security Gateway | **NEW** : Added new troubleshooting tool to the *cplic* command for Entitlement manager. |
| PRJ-19796, PMTR-60336 | Security Gateway | Improved the policy enforcement of the ZIP archive inner files. |
| PRJ-21468, PRHF-14963 | Security Gateway | When the Security Gateway is configured as a proxy, some network objects may not be matched correctly. |
| PRJ-18626, PRHF-11912 | Security Gateway | Wrong memory (hmem) values may be reported by specific SNMP OID. Refer to [sk168992](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk168992). |
| PRJ-20734, PRJ-20058 | Security Gateway | In rare scenarios, a Security Gateway memory consumption may increase. |
| PRJ-21107, PRHF-14953 | Security Gateway | Authentication may fail when LDAP branch name contains "\\". |
| PRJ-20894, PRHF-14378 | Security Gateway | In rare scenarios, high memory consumption in CPD may occur due to a memory leak in authentication flow with an LDAP Server. |
| PRJ-16309, PMTR-24679 | Security Gateway | In some scenarios, dmesg shows "*up_manager_resume_chain: fwhold_send failed. chain will be dropped by the fwhold API* " error messages when the connection was already dropped and cannot be resumed. Refer to [sk133253](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk133253). |
| PRJ-21668, PRJ-8275 | Security Gateway | In some scenarios, a Security policy installation fails during high CPU utilization. |
| PRJ-20651, PMTR-63092 | Security Gateway | Accept logs with reason "*Connection terminated before detection: Insufficient data passed. To learn more see sk113479*." may be wrongly generated when the matched action is user authentication and wrong username/password provided by user. |
| PRJ-19581, PMTR-61102 | Security Gateway | In some scenarios, "*email_unified_cmi_get_attribs: not valid caller: up_log_get_user_hash*" error appears in dmesg for SMTP traffic. |
| PRJ-11202, PRHF-9029 | Security Gateway | In some scenarios, traffic that is matched on implied rule is dropped while it should not be. |
| PRJ-22451, PMTR-64448 | Security Gateway | In a rare scenario, the Security gateway may crash with fwk and fwk_wd core dump files. |
| PRJ-20896, PRHF-14824 | Security Gateway | In some scenarios, the DNS requests from the Security gateway may fail. |
| PRJ-22077, PMTR-64650 | Internal CA | In a rare scenario, "*This operation is not supported on STANDBY member*s" message is displayed and the cpca_client process unexpectedly exits when trying to renew a certificate on a standby Domain. |
| PRJ-23142, PMTR-65727 | Internal CA | The output of the "*lscert*" command has duplicate lines for all certificates that are not in "pending" status. |
| PRJ-22022, PMTR-63963 | Threat Prevention | In rare scenarios, the Threat Prevention Blade Exception used for performance optimization does not work as expected. |
| PRJ-15812, PRJ-15807 | Identity Awareness | Added the PDP process stability improvement in Captive Portal flow. |
| PRJ-20843, PRHF-14347 | Identity Awareness | In some scenarios, running *pdpd* commands results in "*daemon did not respond or not running!* " error. Refer to [sk171136.](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk171136) |
| PRJ-21453, PRHF-14980 | Identity Awareness | In some scenarios, VPN Remote Access client fails to connect if a certificate contains a DN with an asterisk (\*). |
| PRJ-22187, PMTR-52079 | IPS | **UPDATE** : Exceptions are now enforced for these IPS protections: * ASCII Request Response * ASCII Response Response * HTTP Header Patterns * HTTP URL Patterns * CIFS File Patterns Refer to [sk166222](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk166222). |
| PRJ-20397 | IPS | In rare scenarios, IP addresses are not blocked as they should by the "all other" mechanism in Geo-Location policy. |
| PRJ-13496, PRHF-10943 | IPS | In some scenarios, a non-compliant IMAP traffic is dropped. |
| PRJ-10920, HP-97 | IPS | In some scenarios, "*cmik_loader_fw_context_match_cb: match_cb for CMI APP 10 failed*" error appears in dmesg for HTTP traffic. |
| PRJ-18838, PRHF-13322 | SSL Inspection | In rare scenarios, a memory leak may occur during policy installation. |
| PRJ-21706, PMTR-64263 | SSL Inspection | In rare scenarios, a memory leak may occur in a crypto module. |
| PRJ-3538, AVIR-527 | Anti-Malware | In some scenarios, policy installation fails with "*Error code: 0-2000049* " on cluster environment. Refer to [sk163257](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk163257). |
| PRJ-20270, RHF-14501 | Anti-Malware | Packet capture may not be generated for certain IPS protections. |
| PRJ-19037, PRHF-13886 | UserCheck | In some scenarios, users cannot restore original attachment via UserCheck portal and receive the "*An unexpected error has occurred*" error message. |
| PRJ-19578, PRHF-14132 | SecureXL | **NEW:** Added the *sim_fastaccel_log_connection* kernel module parameter to disable logging of FastAccel connections. |
| PRJ-21695, PMTR-64360 | SecureXL | **NEW:** Added the *fwha_disable_ccp_on_monitor* global kernel parameter. The parameter turns on/off the sending of CCP packets on link monitor interfaces. |
| PRJ-18319, PRHF-13474 | SecureXL | **UPDATE** : Drop templates can be generated for connections with matched action Reject. For additional information and configuration, refer to [sk171146](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk171146). |
| PRJ-130, PRHF-2914 | SecureXL | In some scenarios, output of "*fwaccel stat* " command does not display the layer name that disables the templates (only "*Layer ---* " is displayed). Refer to [sk145533](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk145533). |
| PRJ-17400, PRHF-13153 | SecureXL | In some scenarios, PPTP or GRE traffic may be dropped. Refer to [sk170293](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk170293). |
| PRJ-19632 | SecureXL | In rare scenarios, Security gateway crashes due to SecureXL expiration. |
| PRJ-19625, PRHF-14280 | Routing | *ip-reachability-detection ping* marks a target IP address as "unreachable" if the path goes via a VPN tunnel, although pinging this IP address directly works. |
| PRJ-20602, PMTR-24962 | Routing | In rare scenarios, routed process unexpectedly exits due to incorrect memory management. |
| PRJ-18749, PRHF-2209 | VPN | In some scenarios, the Dynamic ID configuration in SmartConsole (SMS/Email) is ignored. Refer to [sk144933](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk144933). With this fix, an administrator will be able to choose for each login option separately which protocol (HTTP/SMTP) will be used to send the one-time code. |
| PRJ-20518, PRHF-14766 | VPN | In a rare scenario, the FWM process unexpectedly exits when enrolling a certificate using the SCEP protocol. |
| PRJ-19212, PRHF-13685 | VPM | Site to Site VPN fails to establish with IKEv2 on GCP when NAT-t is enabled. |
| PRJ-20864, PMTR-56565 | VPN | In some scenarios, the VPND process keeps re-downloading the same CRL, which can cause performance issues. |
| PRJ-20271, PRHF-14308 | VPN | In a rare scenario, a memory leak may appear when RASession_util is active. |
| PRJ-21211, PMTR-2486 | VPN | In rare scenario, Security gateway may crash when working with AES-XCBC algorithm in Site-to-Site VPN. |
| PRJ-21193, PMTR-62883 | Gaia OS | **UPDATE:** OpenSSL was updated to version 1.1.1i to include the latest code fixes and security improvements. |
| PRJ-17584 | Gaia OS | **UPDATE:**SNMP USM user names limitation was increased from 8 characters to 31. |
| PRJ-18087, PRJ-18077, PRHF-13504 | Gaia OS | On environments with large IP routing tables, the SNMPD process may consume 100% CPU when running a scan from an external tool. Refer to [sk170150](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk170150). |
| PRJ-20939, PMTR-63343 | Gaia OS | Upgrade process may fail due to corrupted *sic_local_cert.p12* certificate. Refer to [sk171253](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk171253). |
| PRJ-20748, PMTR-63201 | Gaia OS | CVE-2020_25705: ICMP reply rate |
| PRJ-22063, PRJ-22064, PMTR-56379 | Gaia OS | In rare scenarios, SNMP user details may be visible in */var/log/messages* file. |
| PRJ-18936, PRHF-13812 | Gaia OS | In some scenarios, the "... *fwldbcast_handle_retrans_request: Updated bchosts_mask to 1* " message may be printed in */var/log/messages* file. |
| PRJ-24287, ODU-83 | Smart-1 Cloud | Added Update #1 of Quantum Smart-1 Cloud. Refer to [sk166056](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk166056). |
| **R80.10 Jumbo HotFix - General Availability Take 288 (24 December 2020, GA from 03 February 2021)** |||
| PRJ-12145, CPM-2624 | Security Management | Management HA synchronization between the active Domain Server to a standby Domain Server may fail with "*Failed to import data*" error. |
| PRJ-14546 | Security Management | If SmartConsole logs out after reaching the idle timeout as configured by the user, the session may still appear in the Sessions view even if there were no changes. |
| PRJ-17689, PRHF-13332 | Security Management | In some scenarios, HA temporary sub-directories under *$FWDIR/tmp* are not deleted if sync fails. Refer to [sk170972](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk170972). |
| PRJ-20116, PMTR-60541 | Security Management | In a rare scenario, the *fwm* process unexpectedly exits. |
| PRJ-18472, PRHF-13644 | Security Management | In some scenarios, the first environment variable configured using [sk165938](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk165938) is not loaded and not used by the CPM process. |
| PRJ-18819, PRHF-13819 | Security Management | Management HA synchronization between Multi-Domain Management Servers may fail with "*Failed to import data*" error due to manual or automatic updates of contracts. |
| PRJ-19024, PMTR-61616 | Security Management | In rare scenarios, FWM process may unexpectedly exit after a login attempt to the Management Server. |
| PRJ-16366, PRHF-12594 | Security Management | When logging into SmartConsole directly to a Domain using Radius or TACACS, the Authentication method in the audit log may show as "*Internal Password* ". Refer to [sk168716](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk168716). |
| PRJ-7430, PRHF-7241 | Multi-Domain Management | In rare scenarios, reassigning the Global Policy on a specific domain fails with "*An internal error has occurred* ". Refer to [sk163938.](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk163938) |
| PRJ-17067, PMTR-59232 | Multi-Domain Management | In some scenarios, Domain appears in the System Domain without any Domain Servers. |
| PRJ-13793, PMTR-43231 | Multi-Domain Management | In a Multi-Domain Server, domain-related processes may not start when the user runs "*evstop* " and then "*evstart*". |
| PRJ-16640, PMTR-58309 | Multi-Domain Management | In some scenarios, the Domain Management Server is shown in System Domain under Domains View even though it was deleted. |
| PRJ-19644, PMTR-62201 | Multi-Domain Management | In rare scenarios, a Domain is shown in the Domains view without any Domain Server or a Domain is shown with Domain Server that was deleted and does not exist anymore. Refer to [sk170556](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk170556). |
| PRJ-17559, PRHF-12885 | Multi-Domain Management | In some scenarios, reassigning a Global Policy may fail if the Global and local domains are not active on the same Multi-Domain Server. |
| PRJ-19316, PMTR-61346 | SmartConsole | **NEW**: Added support for Python 3 in Management API scripts. |
| PRJ-14501, PRHF-11986 | SmartConsole | The Purge Revisions task remains as unfinished on the Secondary Management Server although it has finished running. |
| PRJ-13947, PRJ-13808 | SmartConsole | In some scenarios, the Administrators view shows all administrators in all domains regardless to specific permission profile of the connected administrator. |
| PRJ-18881, PRHF-13818 | SmartConsole | Setting values for the environment variables of the Management API as per [sk165938](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk165938) does not work: the values are neither loaded nor used by the API process. |
| PRJ-18326, PMTR-58703 | SmartConsole | Exception group may be incorrectly deleted in the following scenarios: 1. "Apply On" in exception group is changed from "*Automatically attached to each rule with profile* " to "*Automatically attached to all rules*". 2. A profile that was attached to the exception group, is deleted. 3. The group is removed from the exception groups list, however it remains in the Threat Prevention rulebase. |
| PRJ-18777, PMTR-56281 | SmartView | In rare scenarios, "Critical attacks allowed by policy widgets" in "General Overview" view may show no results while actual data exists. Refer to [sk171001](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk171001). |
| PRJ-13843, PMTR-42541 | Mobile Access | Browser based applications cannot be opened in MAB portal. |
| PRJ-17014, PMTR-59317 | Logging | **UPDATE**: Added the ability to filter Threat Prevention and Endpoint logs by file size on a Log Server machine via the Logs \& Monitor view in SmartConsole. |
| PRJ-3652, PRHF-4654 | Logging | SmartEvent may not correlate certain Anti-Virus logs. |
| PRJ-2520, SL-1755 | Logging | In rare scenarios, the *log_indexer* process may unexpectedly exit. |
| PRJ-16173, PMTR-55550 | Logging | In some scenarios, the *cpsemd* process on the Log Server may close unexpectedly during a restart, shutdown or upgrade. |
| PRJ-19821, SL-4358 | Logging | In rare scenarios, the *log_indexer* process may unexpectedly exit when reading a specific log format. Refer to [sk1161](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk116117)[17](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk116117). |
| PRJ-2510, PMTR-3672 | Logging | In some scenarios, in servers with an uneven amount of CPUs, processes may not start. Refer to [sk155113](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk155113). |
| PRJ-5871, PRHF-3460 | Logging | In rare scenarios, when the user configures a custom event with a script based automatic reaction in SmartEvent, the SmartEvent client may show the following error: "*Server is not responding. Please try to reconnect later* ". Refer to [sk155192](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk155192). |
| PRJ-7522, SL-2989 | Logging | Connection between the Gateway and the Log Server may go down, with the following error message in the*fwd.elg* file on the Gateway: "*Log server xxx.xxx.xxx.xxx went down*". |
| PRJ-489, SL-1896 | Logging | In SmartConsole logs tab, filtering logs by the field "Method" may return empty results when using the values PROPFIND, CCM_POST or PATCH. |
| PRJ-13347, PMTR-54708 | Logging | In some scenarios, when the user configures the log exporter filter with the "*cp_log_export*" command (action, origin, product), the filter is not configured properly according to the used format. |
| PRJ-17012, PMTR-55179 | Logging | In some scenarios, the "*CGsoapSessions::AuthenticateSession failed, session is not authenticated* " message may appear in *mds.elg* or *fwm.elg* file. |
| PRJ-11340, PRHF-9582 | Security Gateway | **NEW**: Added support for authentication with a RADIUS server that expects to receive an empty password on the first message. VPN client will receive 2 dialogs instead of 3. |
| PRJ-16404 | Security Gateway | The user may fail to upload a file when the Gateway is a proxy because the host header is too long. This fix adds support for long host headers. |
| PRJ-19065, PRJ-18831 | Security Gateway | In a rare scenario, Security Gateway memory consumption may increase and lead to a memory leak. |
| PRJ-13343, PRHF-8408 | Security Gateway | In a rare scenario, the FWD process opens connections to port 111. |
| PRJ-12311, PMTR-10041 | Security Gateway | In some scenarios, large number of interfaces defined on Security gateway may cause high CPU utilization by CPD process. Refer to [sk168674](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk168674). |
| PRJ-17365, PRHF-858 | Security Gateway | DynamicID via SMTP does no work when an HTTP proxy server is defined. |
| PRJ-13258, PRHF-9930 | Security Gateway | In a rare scenario, traffic is dropped with the "*\[ERROR\]: up_handle_get_matched_service_clob: no clob list on handle for type SERVICE;*" error in dmesg. |
| PRJ-11290, PRHF-8491 | Security Gateway | Unused OIDs may appear in SNMP MIB file. |
| PRJ-18424, MPTT-2224 | Internal CA | In a rare scenario, some emails with links are cached due to timeout failure. |
| PRJ-18243, RJ-18124 | Identity Awareness | **NEW:** Added Identity Sharing SmartPull mechanism performance and functionality improvements. Refer to [sk170516](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk170516). |
| PRJ-13172, PMTR-53443 | Identity Awareness | **UPDATE** : Optimized memory usage in the *PDP* process's LDAP operations. |
| PRJ-19635, PMTR-61982 | Identity Awareness | In some scenarios, when a standby cluster member receives RADIUS accounting updates, there may be high CPU on the*PDP*process. |
| PRJ-12500, PRHF-10481 | Identity Awareness | In some scenarios, Identity Awareness counters in cluster environments show zero. |
| PRJ-15831, IDA-754 | Identity Awareness | When working with AD server without global catalog enabled and nesting query is set to '*pdp nested_groups __set_state 2* ', direct groups are fetched correctly, but nested groups are not fetched. Refer to [sk166199](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk166199). |
| PRJ-19157, TEX-1482 | Threat Extraction | **UPDATE** : Threat Extraction will no longer attempt to perform "Convert to PDF" if the file is corrupted, because the resulting files in these cases are usually unreadable. To reactivate this behavior, set "*enable_alternative_scrub_method* " in *$FWDIR/conf/scrub_debug.conf* to 1 and install policy. |
| PRJ-13967, PRHF-11634 | IPS | **UPDATE** : The "*ips stat*" command now shows all active Threat Prevention profiles with IPS enabled on the Security gateway. |
| PRJ-14058, PRHF-5061 | IPS | In some scenarios, SmartEvent does not create IPS events based on the "Critical severity" field. |
| PRJ-19296, PRHF-13560 | IPS | In some scenarios, log output shows the Origin/Source as "0.0.0.0" in VSX 3rd party IPS logs. |
| PRJ-80, PRHF-1162 | Internal CA | In some scenarios, manual edit of user's certificate expiration period does not take effect. Refer to[sk143292](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk143292). |
| PRJ-17196, PMTR-59565 | HTTPS Inspection | In a rare scenario, a connection remains open after it is closed by the server, and the web browser may load a page for a long time. |
| PRJ-19469, PMTR-58086 | HTTPS Inspection | In some scenarios, the HTTPS inspection CA bundle is not created on the Security Gateway. |
| PRJ-18821, PRHF-13605 | HTTPS Inspection | Cannot browse with Chrome when using mixed chain with ECDSA subordinate CA in HTTPS Inspection. |
| PRJ-10156, PRHF-5059 | HTTPS Inspection | In rare scenarios, there may be a memory leak in the *wstlsd* process on policy installation. |
| PRJ-2662, PRHF-14094, PMTR-23406 | SSL Inspection | **NEW** : Added support for proxy configuration when downloading CRL from a VSX device. Refer to [sk151115](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk151115). |
| PRJ-9942, PRHF-8315 | Anti-Malware | In some scenarios, multiple files called "*ckp_mutex*" are created on the Security Gateway. |
| PRJ-17840, PMTR-58416 | Anti-Malware | In some scenarios, Threat Prevention logs appear half full (not unified). |
| PRJ-15973, PMTR-57915 | UserCheck | In some scenarios, the UserCheck daemon *usrchkd* may unexpectedly exit. |
| PRJ-19459, PMTR-60878 | Routing | Routed logs may incorrectly state that routemaps that export to OSPF cannot set the OSPF manual tag, even though the functionality works. |
| PRJ-15389, PRHF-11950 | Routing | A TCP connection between cluster master and slave may flap on an OSPF attempt to delete a non-Max-Aage LSA. |
| PRJ-18022, PRHF-13480 | Routing | SNMP queries for *bgpPeerFsmEstablishedTime* return an incorrect constant value. Refer to [sk170074](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk170074). |
| PRJ-17710, ROUT-954 | Routing | Security Gateway may stop forwarding the Multicast stream when PIM is configured on it. Refer to [sk169774](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk169774). |
| PRJ-17852, PRHF-13388 | Routing | In rare scenarios involving large AS paths, there may be a loss of BGP adjacency. Refer to [sk170876](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk170876). |
| PRJ-16428 | VPN | **UPDATE**: Added support for fetching CRL with proxy in Site-to-Site VPN. |
| PRJ-795 | VPN | **UPDATE:**Improved user experience when IKEv2 tunnel is defined by the peer. |
| PRJ-16718, PMTR-57565 | VPN | Remote Access potential connectivity issue when there are more than 1 external interfaces. |
| PRJ-15738, PRHF-12010 | VPN | In some scenarios, *findSAByPeer* does not validate the peer IP address for DAIP peer behind NAT. |
| PRJ-10033, CRYPTOIS-661 | VPN | In some scenarios, Security Gateway Portals and Remote Access VPN clients show wrong certificate after certificate renewal. Refer to [sk131212](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk131212). |
| PRJ-17673, PMTR-42363 | VPN | The *vpnd* process may unexpectedly exit when the user runs the "*vpn tu*" command. |
| PRJ-609, PRHF-2155 | VPN | Connectivity problem in Remote Access VPN when aggressive SLP is enabled. Refer to [sk148273](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk148273). |
| PRJ-17885, PRHF-13004 | VPN | VPN policy installation may take a long time. |
| PRJ-17775, PRJ-17706 | VPN | The *vpnd* process may unexpectedly exit during IKEv2 negotiation. |
| PRJ-11858, PRHF-9702 | Gaia OS | It is not allowed to create usernames with reserved words, such as 'eval', 'apply' etc., in the middle of the username in WebUI. Refer to [sk170681](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk170681). |
| PRJ-16262, PRJ-4867, PRHF-5016 | Gaia OS | A Timestamp in Unix/Epoch time may not be updated when the user changes a password using hash. |
| PRJ-14311, PRHF-11752 | Gaia OS | In rare scenarios, gateway uptime in SmartConsole may show an abnormally high number. Refer to [sk167937](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk167937). |
| PRJ-18499, PMTR-53549 | VSX | VSX VSLS Cluster with 3 Members may fail to connect to Identity Collector. Refer to [sk170836](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk170836). |
| PRJ-16284, PMTR-58322 | VoIP | **NEW** : Added support for HopCount field in H323 protocol. Refer to [sk169513](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk169513). |
| PRJ-16453, PRHF-12691 | VoIP | SIP parser may cause the wrong RTP dynamic connection to be opened. Refer to [sk169373](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk169373). |
| PRJ-16597, PRHF-12083 | Endpoint Security | In some scenarios, the Policy server stops syncing with the Endpoint Security Server. Refer to [sk168912](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk168912). |
| **R80.10 Jumbo HotFix - General Availability Take 287 (10 December 2020, GA from 17 Dec 2020)** |||
| PRJ-18202, PMTR-60885 | CloudGuard IaaS | **UPDATE** : Added new certificates for Microsoft Azure. For details, refer to [this Microsoft article](https://docs.microsoft.com/en-us/azure/security/fundamentals/tls-certificate-changes). |
| **R80.10 Jumbo HotFix - General Availability Take 283 (07 October 2020, GA from 26 November 2020)** |||
| PRJ-15562, PRHF-12170 | Security Management | **NEW:** In some scenarios, modifying or deleting objects in bulk may cause slowness in SmartConsole responses and long duration of operations. Ability to improve performance in such cases was added. Refer to [sk135972](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk135972). |
| PRJ-12062, PMTR-51885 | Security Management | **NEW** : Tasks that fail to complete within 18 hours will be stopped automatically and appear as failed. Refer to [sk166455](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk166455). |
| PRJ-15498, PMTR-56638 | Security Management | **NEW:** The *$MDS_FWDIR/scripts/cpm_status.sh* script will show if the CPM process fails to start. |
| PRJ-15494, PMTR-57275 | Security Management | *$MDS_FWDIR/scripts/solr_start.sh* script may fail to start Solr Cure if [sk123417](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk123417) is applied. |
| PRJ-10056, PRHF-8924 | Security Management | In some scenarios, Security policy deletion or installation may fail when there are many Application Control objects used in this policy. Refer to [sk175588](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk175588). |
| PRJ-7003, PMTR-39797 | Security Management | In a rare scenario, the *$CPDIR/tmp/* directory is filled with "*CKP_mutex::_opt_CPsuite-RXX_fw1_log__...* " files. Refer to [sk36754](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk36754). |
| PRJ-13046, PRHF-11033 | Security Management | After the user adds new Threat Indicators, Management HA may fail with "*NGM failed to import data* " error. Refer to [sk167156](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk167156). |
| PRJ-13610, PRHF-11300 | Security Management | In rare scenarios, the "*where-used* " API command fails with "*Management server failed to execute command*" error. |
| PRJ-13460, PMTR-54975 | Security Management | In rare scenarios, Install Policy Presets are not triggered. |
| PRJ-14294, PRHF-11704 | Security Management | In rare scenarios, High Availability sync fails with "*Ngm failed to import data*" error after the user deletes a Permission Role. |
| PRJ-15456, PRHF-6093 | Multi-Domain Management | Policy Installation may fail due to an internal error in an MDS environment where there is a Global Dynamic object usage inside Networks Groups with a depth that is higher than 2-level (group inside a group). |
| PRJ-14452, PRHF-11940 | Multi-Domain Management | Policies may disappear from the Global Domain Assignments view after the user runs the Solr Cure utility. Refer to [sk168060](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk168060). |
| PRJ-16424, PMTR-58559 | Multi-Domain Management | Management HA incremental synchronization may break in the MDS level with "*failed to import data*" error message due to an operation related to the Compliance Blade. |
| PRJ-12243, PRHF-10477 | Multi-Domain Management | In some scenarios, a Global Administrator connected to the Logging and Monitoring view in MDS cannot see auto-complete suggestions when typing in the logs search box. Refer to [sk166752](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk166752). |
| PRJ-16435, PRHF-12236 | Multi-Domain Management | After upgrading a Multi-Domain Management Server, the object version of the Domain Management Servers or Domain Log Servers in the MDS SmartConsole may not have changed. |
| PRJ-13453, PRHF-10952 | SmartConsole | In some scenarios, Management API commands with *"details-level":"full"* Payload return a truncated output and fail to complete. Refer to [sk170414](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk170414). |
| PRJ-16212 | SmartConsole | In some scenarios, the user cannot establish SIC between R80.10 Security Management and R77.30 Security Gateway. |
| PRJ-15970, PRHF-10916 | SmartConsole | A Global Policy reassignment in the MDS may fail with an "*internal error*" message after the user deletes Snort protections and chooses to manage protection actions. |
| PRJ-13026, PMTR-51691 | SmartConsole | When a VSX Cluster object is edited, no changes are made and the "*Topology has changed. Please reinstall Security Policy*" message is always displayed after clicking OK, even if no changes are made. |
| PRJ-13005, PRHF-10998 | SmartConsole | In the Management API, the "*show objects*" command with details-level full may return the "ip-address" field even if it is empty. |
| PRJ-15369, PMTR-57065 | SmartConsole | The user may not be able to delete objects that are referenced by a previously deleted policy. Refer to [sk122954](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk122954). |
| PRJ-12852, PRHF-10453 | SmartConsole | Hit count data may not be deleted automatically. |
| PRJ-12702, PRHF-10295 | SmartView | The SmartView Timeline may be distorted when logs contain an empty value for the field specified in the "Series" settings and when the Legend is enabled. Refer to [sk167095](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk167095). |
| PRJ-13390, CRYPT-19 | SmartEvent | SmartEvent may not read logs from the external Security Management Server after the user applies [sk35288](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk35288). Refer to [sk123493](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk123493). |
| PRJ-4108, SL-1767 | SmartEvent | In a SmartEvent policy, adding an exclusion for a sensor alert event by event id (e.g., id=20300) causes policy install failure. Refer to [sk139854](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk139854). |
| PRJ-13168, PRHF-9994 | Compliance | Compliance Partial Scans in Multi-Domain environments using Global Policies may lead to a SmartConsole freeze or long publish times. Refer to [sk170562](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk170562). |
| PRJ-16997, PRJ-16965 | Mobile Access | Mobile Access portal may become unresponsive after Jumbo Hotfix uninstallation. Refer to [sk169152](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk169152). |
| PRJ-11886, PRHF-10057 | Logging | In some scenarios, searching for logs using "client_name" in the logging tab returns no values. |
| PRJ-5572, PRHF-6592 | Logging | When a Log Server is configured to parse Syslog messages, the field "User" may be truncated in the parsed log in the Log Details view if the field contains an underscore. |
| PRJ-13559, PMTR-53242 | Logging | In rare scenarios, the *evstop* script does not stop all logging processes. As a result, upgrade procedures may hang and show no progress. |
| PRJ-5898, PRHF-6120 | Logging | It is not possible to query the "file_name" field on a Log server that does not have SmartEvent activated. |
| PRJ-8211, PRHF-7592 | Logging | "*Problem has occurred during search \< External Log server \> Disconnected*" error may appear in the "Logs \& Monitor" tab after creating a dummy object for NAT. |
| PRJ-4127, PRHF-2711 | Logging | In some scenarios, it may not be possible to filter logs by the field "IKE IDs:" when searching the log files directly. |
| PRJ-14046, PRHF-11502 | Logging | In some scenarios, the command "*cp_log_export status* " prints "*last log read at: N/A*" rather then a timestamp. |
| PRJ-432, PRHF-2797 | Logging | In SmartEvent, when the user customizes an event to accumulate logs by the field UUID, logs with UUID equal to 0 may not be correlated. |
| PRJ-10361, PMTR-46596 | Logging | Log_indexer may unexpectedly exit on a SmartEvent server with a large number of CPUs (32 and up), and\\or when the total number of log servers declared in correlation units is above 30. |
| PRJ-5648, PRHF-6080 | Logging | In some scenarios, when the user creates a table widget in SmartView, there is no option to add the "hostname" field. Refer to [sk162752](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk162752). |
| PRJ-4608, PRHF-5209 | Logging | When the user tries to open a Forensic report in SmartLog, the "*Error getting report.*" message may appear if there is a network object configured with the same IP address as that of the Endpoint Security Management Server. |
| PRJ-8920, PRHF-8148 | Logging | When the user searches logs in the "Logs and Monitor" tab in SmartConsole and applies a filter using the "?" wildcard, incorrect logs may be returned. |
| PRJ-13431, PRHF-1197 | Security Gateway | In some scenarios, "*cmik_loader_fw_get_connkey: Invalid streaming opaque type: (3)* " message appears in dmseg. Refer to [sk137494](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk137494). |
| PRJ-13692, PMTR-55510 | Security Gateway | Proxy arp change is applied only after the second policy installation. |
| PRJ-15606, PRJ-13567 | Security Gateway | In some scenarios, policy installation fails with "*Error code 0-2000121*". |
| PRJ-13885, PRHF-9759 | Security Gateway | An interface name with more than 15 characters may cause the policy installation to fail. Refer to [sk167955](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk167955). |
| PRJ-15821, PMTR-59347 | Security Gateway | In a rare scenario, policy installation may fail with error code 0-2000107 after the user changes the order of cluster members in SmartConsole. |
| PRJ-877, PRHF-1727 | Security Gateway | In some scenarios, after the user makes a change to the ciphers suites configuration on the Gateway, some portals may not be accessible. |
| PRJ-12944, PRHF-10972 | Security Gateway | After policy installation, the output of the "*cphaprob stat* " command may show "*HA module not started* " when a large number of non-monitored Cluster interfaces are configured in SmartConsole. This fix adds support for multiple non-monitored interfaces in SmartConsole. |
| PRJ-9846, PRHF-7150 | Security Gateway | In some scenarios, SCCP traffic may be dropped by the Security Gateway. Refer to [sk108124](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk108124). |
| PRJ-16308, PRHF-12058 | Security Gateway | In rare scenarios, Security Gateway memory consumption may increase. |
| PRJ-10770, PRHF-8926 | Internal CA | In some scenarios, there is no SIC between R80.x Security Management and R77 Security Gateway after the user performs the ICA certificate replacement procedure described in [sk158096](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk158096). |
| PRJ-12617, PMTR-45782 | Identity Awareness | After the user disables and re-enables the Identity Collector in SmartConsole, the Identity Collector may fail to connect to the PDP Gateway again. |
| PRJ-17648, PMTR-44711 | Identity Awareness | In some scenarios, user cannot authenticate to Captive Portal as a Guest User. |
| PRJ-13512, PMTR-55246 | Identity Awareness | In some scenarios, a XFF allowed proxy list is enforced only for instance 0 in VSLS environment after VS has transitioned from Backup to Active. |
| PRJ-16260, PRHF-2081 | Identity Awareness | In some scenarios, the user cannot connect to the AD server when the account is set to "never expires" on Microsoft Active Directory. Refer to [sk143672](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk143672). |
| PRJ-5229, PRHF-4808 | Identity Awareness | Failure in LDAP groups membership query for specific user that was reported by MUH agent, may cause all users under the same MUH agent to be removed from the PDP database. |
| PRJ-12562, IDA-2983 | Identity Awareness | PDP process may consume high CPU during policy installation because of a large amount of Access Roles. |
| PRJ-13563, PRHF-561 | Identity Awareness | In some scenarios, when the user changes the TACACS+ server to a different one, the configuration is applied only after an MDS reboot. |
| PRJ-8710, PRHF-7978 | Identity Awareness | In some scenarios, Dynamic ID authentication fails when the SMS server returns HTTP status code 2xx but not 200 or 202. |
| PRJ-8901, PRJ-8880 | IPS | In a rare scenario, Security Gateway may crash due to NULL pointer reference. |
| PRJ-16488, PMTR-57645 | IPS | In some scenarios, invalid characters are sent to gw-stat report. |
| PRJ-7757, PMTR-40495 | SSL Inspection | DynamicID authentication may fail due to server certificate validation failure. Refer to [sk167177](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk167177). |
| PRJ-13114, PMTR-52580 | DLP | Improved DLP functionality when working with IDA MUH1 and MUH2 agents. |
| PRJ-13107, PRHF-11112 | HTTPS Inspection | In some scenarios, HTTPS websites may show garbled text when HTTPS Inspection and Anti-Virus are enabled. |
| PRJ-9403, PMTR-51402 | HTTPS Inspection | In some scenarios, HTTPS Inspection shows an incorrect certificate for some websites, including certificates issued by "CloudFlare Inc ECC CA-2". Refer to [sk118392](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk118392). |
| PRJ-8610, NSS-2348 | Anti-Malware | In some scenarios, dmesg may show many "*rad_client id 6 is not register*" errors. |
| PRJ-8418, PMTR-32574 | Anti-Malware | In a rare scenario, the acapd process unexpectedly exits during debug. Refer to [sk166324](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk166324). |
| PRJ-16952, PRJ-16953 | Anti-Malware | In some scenarios, a file with HTTP chunked encoding is drooped if there is a Fail-Close configuration on the Anti-Virus blade. Refer to [sk169312](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk169312). |
| PRJ-1453, PRHF-3790 | Anti-Malware | In rare scenarios, Security Gateway crashes during CIFS traffic when CIFS feature is enabled for Anti-Virus or Threat Extraction (see [sk101606](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk101606)). |
| PRJ-11193, PRHF-9801 | ClusterXL | In some scenarios, "*fw ctl affinity* " and "*sim affinity* " commands show wrong IRQ numbers. Refer to [sk166356](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk166356). |
| PRJ-14226 | ClusterXL | In some scenarios, SmartConsole shows ClusetXL status as "*is not responding* ". Refer to [sk168187](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk168187). |
| PRJ-15898, PRHF-12374 | SecureXL | An asymmetric routing issue may occur between a Virtual System and a Virtual Switch/Router. |
| PRJ-2921, PRHF-4457 | SecureXL | In a rare scenario, the Security Gateway may crash when deleting certain non-TCP connections. |
| PRJ-16393 | SecureXL | In a rare scenario, TCP data connections may not get established with protocols that create reverse connections (e.g., Remote shell). |
| PRJ-7367, PRHF-7025 | CoreXL | In some scenarios, FWK Manual CPU Affinity is not preserved after system reboot. |
| PRJ-1363, PMTR-12883 | VSX | In a rare scenario, portals are not reachable after the fwk process unexpectedly exits. |
| PRJ-16398, PRHF-12508 | VSX | Latency and/or packet loss may occur for traffic which passes through a Virtual Switch in a VSX Gateway. Refer to [sk168592](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk168592). |
| PRJ-6172, PMTR-19924 | Routing | In some scenarios, the *routed* process may unexpectedly exit. |
| PRJ-16576, SPC-3089 | Routing | In some scenarios, the*routed*daemon may unexpectedly exit with BGP. |
| PRJ-5700, PMTR-42483 | VPN | **NEW** : Improved policy installation performance when the MAB blade is enabled with Legacy Policy and Native Application rules. Refer to [sk175105](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk175105). |
| PRJ-7057, PMTR-41386 | VPN | **NEW**: Added functionality enhancements for the authentication realms used with Remote Access VPN |
| PRJ-15616, PMTR-57459 | VPN | Access Roles with MAB SNX as the client type may not work. |
| PRJ-14208, PRHF-1490 | VPN | The vpnd process may unexpectedly exit and a "*CvpnUMD process crashed* " error is printed into */var/log/messages* . Refer to [sk160735](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk160735). |
| PRJ-15834, PMTR-40895 | VPN | When a Gateway does not recognize the SPI, it sometimes sends the "*Invalid SPI*" notification in clear. As a result, the peer may ignore it, resulting in an outage. |
| PRJ-13339, PRHF-1164 | VPN | In some scenarios, L2TP client fails to connect with "*failed to write L2TP session params to kernel* " error in *vpnd.elg* file. Refer to [sk167636](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk167636). |
| PRJ-10950, PRHF-8923 | VPN | In some scenarios, VPN tunnel connection is dropped with "*no MSA for MSPI* " error. Refer to [sk167393](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk167393). |
| PRJ-12462, PRHF-388 | VPN | In a rare scenario, Security Gateway may crash when using Remote Access VPN with L2TP clients. |
| PRJ-15990, PRJ-15983 | VPN | Starting from R80.10 Jumbo Hotfix Take 275, clients that do not support MFA (such as Mac OS and iOS) cannot connect as Remote Access clients if MFA is enabled. Refer to [sk168493](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk168493). |
| PRJ-14572, PMTR-54771 | VPN | IP compression may not work in some scenarios when IKEv2 is configured. |
| PRJ-15327, VPNRA-379 | VPN | In some scenarios, Remote Access VPN traffic may be dropped when XFF is enabled. |
| PRJ-14403, PMTR-54728 | VPN | Connectivity improvements for Remote Access VPN with L2TP. |
| PRJ-12888, PRHF-10685 | VPN | IKEv2 rekey may fail when the resolved peer IP address is not the main IP address. Refer to [sk166897](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk166897). |
| PRJ-12893, PRJ-8726 | VPN | In some scenarios, vpnd cores may be generated sporadically during boot time/cluster failovers on the Cluster Standby Member. |
| PRJ-32 | VPN | In rare scenarios, *vpnd* unexpectedly exits when using the SNX client. |
| PRJ-16207, VPNRA-469 | VPN | In rare scenarios, the Security Gateway may crash after VPN users connect to the network. |
| PRJ-11486 | VPN | In a rare scenario, a memory leak may appear in VPN. |
| PRJ-14240, PRHF-7995 | VPN | VPN traffic may be dropped when working with peer behind NAT - Hide NAT with Port Translation. |
| PRJ-234 | VPN | Connectivity improvements for Remote Access Endpoint clients that connect without Office Mode IPs. |
| PRJ-13527, VPNRA-398 | VPN | In some scenarios, Remote Access VPN users are not matched against the Access Control policy and traffic is dropped. Refer to [sk167432](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk167432). |
| PRJ-8113, PMTR-49502 | VPN | "*vpn_trap_multik: - wrong header length 36 != 72* " message may appear in the *vpnd.elg* when working with multiple users with the same credentials. |
| PRJ-11802, VPNRA-357 | VPN | In some scenarios, SmartView Monitor displays an incorrect number of connected Remote Access users. Refer to [sk167297](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk167297). |
| PRJ-11049, PRHF-7972 | VPN | Improved NAT Detection with 3rd party peers in IKEv1 and IKEv2. Refer to [sk165003](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk165003). |
| PRJ-14431, PMTR-53221 | Gaia OS | **NEW**: Added support for CPAC-4-10-AB cards. |
| PRJ-12251, PMTR-52663 | Gaia OS | **UPDATE** : on Smart-1 5050: * Line card 1 model PE2G2SFPi35\*-CP\* is changed to CPAC-2-1F-SM\*-C\* * Line card 2 model PE210G2SPI9A-XR\*-CP\* is changed to CPAC-2-10F-SM\*-C\* |
| PRJ-6169, PRJ-16502, PRHF-6118 | Gaia OS | In some scenarios, the *monitord* process may consume high CPU. Refer to [sk163614](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk163614). |
| PRJ-11634 | Gaia OS | In some scenarios, an MDS environment that runs on a Smart-1 525, Smart-1 5050, or Smart-1 5150 may not create a Gaia backup file properly. In these scenarios, the command returns the following output: "*Creating backup package...* *Done* *mv: cannot stat '/var/log/CPbackup/backups/backup_xx.tgz': No such file or directory*". |
| PRJ-9116, PRHF-4435 | Gaia OS | In some scenarios, SNMP fails to report disk utilization. |
| PRJ-14460, PRHF-9702 | Gaia OS | It is not allowed to create usernames with reserved words, e.g., 'eval', 'apply' etc., in the middle of the username in the WebUI. |
| PRJ-13939, PRHF-11368 | Gaia OS | In some scenarios, when the RADIUS user enables bash logging (as per [sk99134](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk99134)) and moves to expert mode, the username in the log files appears as admin instead of RADIUS. |
| PRJ-11967, PRJ-15611, PRHF-9336 | Gaia OS | The *confd* process may unexpectedly exit when the user runs the "*show/set/add interface* " long command. Refer to [sk167635](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk167635). |
| PRJ-16076, PMTR-57581 | Gaia OS | In some scenarios, when the user tries to return to the factory default, the machine reverts to a different snapshot. |
| PRJ-6610, PMTR-17149 | Gaia OS | In some scenarios, snapshot creation on Gaia OS may get stuck at 1-2% because of a large number of tmp files. Refer to [sk116679](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk116679). |
| PRJ-12759, PMTR-52834 | Gaia OS | In some scenarios, the WebUI shows unknown HDDs that are not part of RAID. |
| PRJ-5957, PRHF-6250 | Gaia OS | In some scenarios, commands that were entered into Clish can be executed later on if the SSH session was uninterruptedly terminated. |
| PRJ-12419, GAIA-7499 | Gaia OS | In some scenarios, concurrent CIFS mount/umount processes to the same Windows machine may crash the kernel. |
| PRJ-15593, PRJ-13624, PRHF-11367 | Gaia OS | The "*show configuration* " clish command may show '*Exported by admin*' instead of the correct user name. |
| PRJ-11464 | Gaia OS | In some scenarios, the CPU usage monitor parameter is incorrect: The "Average CPU" value on SmartMonitor shows an incorrect value. |
| PRJ-13614, PRJ-13619, PMTR-54707 | Gaia OS | The user may not be able to log in to the WebUI after performing "*gaia_api access -u admin -e true*". |
| PRJ-13239, PRJ-13264, GAIA-7496 | Gaia OS | In some scenarios, the value for the Voltage/Fan/Temperature sensor may appear as "NotValid". |
| PRJ-11371, PRHF-7532 | Gaia OS | In some scenarios, latency issues may occur in Clish and in the WebUI when using web scanning tools (Qualys). Refer to [sk164153.](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk164153) |
| PRJ-10800, PMTR-56454 | Gaia OS | In some scenarios, due to backup compression errors, restoring a backup does not restore all files. |
| PRJ-14412, PRHF-11683 | Gaia OS | In some scenarios, snapshot creation fails because of compression errors. |
| PRJ-13649, PRHF-8760 | Gaia OS | In rare scenarios, clish consumes 100% CPU when the user runs a Tenable scan. Refer to [sk166195](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk166195). |
| PRJ-11495, PMTR-51462 | Gaia OS | In some scenarios, the PSU status is reflected even if there is no PSU on the appliance. |
| PRJ-13721, PRJ-13722 | Gaia OS | In some scenarios, a snapshot creation may fail. |
| PRJ-13751, PRJ-13752 | Gaia OS | In some scenarios, SNMPD daemon unexpectedly exits with core dump, causing the SNMP service to become unavailable. |
| PRJ-8947, GAIA-7018 | Gaia OS | In some scenarios, interface names may not correspond to the correct ports on 4-ports 10GbE SFP+ Rev 1.1 on 12200/4200/4400/4600/4800/TE250 appliances. |
| PRJ-11808, PRJ-11807, PRHF-9221 | Gaia OS | Only 1024 characters of a cron jobs output are displayed when using *show cron jobs* from clish. Refer to [sk167632](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk167632). |
| PRJ-12516, PRHF-10672 | Gaia OS | In some scenarios, a backup on a Gaia device with Threat Emulation Blade enabled may fail with "*Cannot complete the backup process: not enough space* ". Refer to [sk166833](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk166833). |
| PRJ-3024, PRHF-4557 | Gaia OS | Backup on Gaia machine may fail with "*Cannot complete the backup process: not enough space* ". Refer to [sk98609](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk98609). |
| PRJ-5270, PMTR-40400 | Gaia OS | Any of the following may occur in vSphere on a Management appliance: * vSphere client/WebUI does not show the instance IP in the instance summary window. * vSphere client/WebUI reports that VMware tools are "*not running*" in the instance summary window. * Machine time/date is not synchronized with the ESX host. |
| PRJ-13477, PMTR-55154 | Gaia OS | Intake and outlet temperature sensors display incorrect values on 15400 appliance. |
| PRJ-12182, VSECC-1293 | CloudGuard IaaS | CloudGuard Controller may sometimes update the Standby cluster member in VSLS mode. |
| PRJ-9400, STRM-152 | QoS | In some scenarios, QoS Policy installation fails with the following message: *"Error - QoS Policy does not apply to any network interface. Please edit your Network Object and check the interfaces you wish to install on*" when policy is defined properly on the interface. |
| PRJ-5184, PRHF-5617 | Endpoint Security | The log description of the "Media Encryption \& Port Protection" blade may state that the "Media Storage" is encrypted even though it is not. The details in the log show the correct value. Refer to [sk162812](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk162812). |
| **R80.10 Jumbo HotFix - General Availability Take 279 (22 July 2020, GA from 13 Aug 2020)** |||
| PRJ-14608 | SecureXL | On gateways with SAM-108 enabled card, the "*fwaccel stat* " command may show "*Waiting for policy load*" state for gateways that are up for more that 249 days. |
| **R80.10 Jumbo HotFix - Ongoing Take 278 (05 July 2020)** |||
| PRJ-9500, PMTR-11284 | CPView | IPS update time may not be displayed in CPView. |
| PRJ-12008, PMTR-52087 | Security Management | **NEW:**Significant performance improvement for policy installation time when many groups are defined on the Management Server. |
| PRJ-10898, PMTR-49801 | Security Management | **NEW:** Set values for environment variables on the Management Server that will remain there after a Management Server upgrade, as well as Backup/Restore and Export/Import of the Management Server. Refer to [sk165938](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk165938). |
| PRJ-11708, PMTR-27164 | Security Management | **NEW:**Performance and stability improvements for large setups. |
| PRJ-11115, PMTR-51778, PRJ-10992, PMTR-51743 | Security Management | **NEW:**Added ICA Management security enhancements. |
| PRJ-9263, PMTR-49516 | Security Management | Policy verification may fail after the user does the following steps: Configures specific install targets for a policy, publishes them, changes the install targets back to "All Gateways", and tries to install them on a Gateway which is not in the original list of targets. |
| PRJ-7411, CPM-2541 | Security Management | In a rare scenario, all users connected to the Management Server get disconnected and new logins fail until the Management Server is restarted. |
| PRJ-5445, PMTR-40663 | Security Management | In some scenarios, an unclear error appears when the user imports a global policy on a Multi-Domain Management Server. The error is caused by a mismatch between the leading interface defined on the machine and the one defined in the database. |
| PRJ-8791, VPNRA-316 | Security Management | Improved the Access Control Policy installation time for environments with high amount of objects and enabled IPSEC VPN blade. Refer to [sk166321](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk166321). |
| PRJ-9297, PRHF-8336 | Security Management | In a rare scenario, the "*SmartDashboard component failed to connect to server \. Please contact technical support*" error is displayed in SmartConsole when opening the Management object for editing. |
| PRJ-9320, PRHF-8494 | Security Management | In some scenarios, a disconnected SmartView Monitor session appears in SmartConsole with a grayed out 'Disconnect' option, which cannot be discarded. Refer to [sk165037](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk165037). |
| PRJ-10518, PMTR-36302 | Security Management | In some scenarios, Check Point services fail to start and the CPM log shows that there are duplicate session aggregators. Refer to [sk162773](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk162773). |
| PRJ-7588, PMTR-38305 | Security Management | In a rare scenario, following a failure to delete a Domain, the Management Server may fail to start. |
| PRJ-8863, PMTR-48673 | Security Management | When an administrator fails to publish another administrator's session, the session of the other administrator disappears from the Sessions view in SmartConsole. |
| PRJ-5792, PMTR-40790 | Security Management | In some scenarios, after the user manually performs "Full Sync", a newly created secondary Domain Server or Domain Log Server is not shown in SmartConsole's Domains view. |
| PRJ-9164, PMTR-48267 | Security Management | When reverting a security layer to a previous revision, if there are rules which are currently disabled, but were enabled in the selected previous revision (or vice versa), their status may not be reverted. |
| PRJ-7885, PMTR-46703 | Security Management | In some scenarios, when the user modifies a policy rule and creates a section above it in the same session, the log tracker shows that the rule was created instead of modified. |
| PRJ-9212, PRHF-8370 | Security Management | Logging into SmartConsole to the Standby Management Server with a Radius or TACACS user may fail after changing the shared secret on the Radius or TACACS object. |
| PRJ-9595, PMTR-38555 | Security Management | Security hardening: The Management Server will block connection requests with a TLS version below 1.2 on port 19009. Refer to [sk164973](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk164973). |
| PRJ-8228, PRHF-7728 | Security Management | The "Unused Objects" filter in Object Explorer may display a failure message if there are more than 20000 unused objects. * A limit was added so that only the first 5000 objects will be displayed. |
| PRJ-9087, PRHF-8266 | Security Management | In a rare scenario, when an environment has many Gateways (dozens), the FWM daemon may unexpectedly exit when 4 GB of memory is reached. Refer to [sk165015](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk165015). |
| PRJ-10086, PMTR-50276 | Security Management | The *cpm_solr* process may unexpectedly exit and cause one of the following: * The upgrade of a Management machine may stuck on 58% * The Management HA synchronization may fail with "*NGM failed to import data*" error * Users may not be able to log in. |
| PRJ-10470, PMTR-49832 | Security Management | In a rare scenario, export does not complete because the *Postgres dump_all* process gets stuck. |
| PRJ-4732, PRHF-5341 | Security Management | In a rare scenario, the FWD process on the Security Management may unexpectedly exit during peak hours. |
| PRJ-8414, PRHF-7865 | Security Management | When the user runs the '*add-domain*' Web API command on an existing Domain, the original Domain is deleted. |
| PRJ-7766, PRHF-7425 | Security Management | In rare scenarios, publishing a session fails with the following error: "*Action Failed due to an Internal Error* ". Discarding the session in SmartConsole completes as "discarded", but the changes are still there. The same behavior occurs in the Management API: *mgmt_cli -r true discard uid \* *number-of-discarded-changes: 4* *message: "OK"* |
| PRJ-9279, PMTR-48463 | Multi-Domain Management | **NEW**: Performance improvement for Multi-Domain environments in which many administrators are connected. |
| PRJ-1390, PMTR-33408 | Multi-Domain Management | **NEW:**Added ability to log in to the Management Server with SmartConsole while MDS Backup is running. |
| PRJ-13031, PRHF-10917 | Multi-Domain Management | Global Policy reassignment may fail after performing the IPS update in the Global domain. |
| PRJ-9238, PRHF-8077 | Multi-Domain Management | In some scenarios, secondary MDS or MLM fail to renew a management certificate. Refer to [sk164732](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk164732). |
| PRJ-5448, PMTR-42420 | Multi-Domain Management | In some scenarios, an upgrade from R7x secondary Multi-Domain Server with active Domains may fail. |
| PRJ-12063, PRHF-10327 | Multi-Domain Management | The FWM process of domains may not stop after the user runs *mdsstop* or *mdsstop_customer*. |
| PRJ-12553, PRHF-10523 | Multi-Domain Management | In some scenarios, updating firewall_properties in GuiDBedit in the MDS context fails. Refer to [sk42184](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk42184). |
| PRJ-12963, PRHF-10944 | Multi-Domain Management | In some scenarios, certain deleted domain level objects are visible in the SmartConsole at the MDS level. |
| PRJ-12487, PRHF-10330 | Multi-Domain Management | Multi-Domain Administrator configuration for RADIUS authentication may show local Domain Radius servers and groups. |
| PRJ-12203, PRHF-10405 | Multi-Domain Management | In some scenarios, changes to a .def file in *$FWDIR/lib* may be reverted when creating a secondary CMA. |
| PRJ-6983, PMTR-44593 | Multi-Domain Management | In some scenarios, there may be high Solr CPU on Multi-Domain Management Servers with dozens of Domains. |
| PRJ-10524, PRHF-8686 | Multi-Domain Management | Upgrade of Multi-Domain Server may fail if Sync With User Center is running. |
| PRJ-9598, PRHF-8502 | Multi-Domain Management | In environments with more than five Multi-Domain servers, changes to objects may not be reflected in the logs. |
| PRJ-11164, PMTR-51180 | Multi-Domain Management | In a rare scenario, synchronization between Multi-Domain Management Servers breaks after revisions purge operation. |
| PRJ-8449, PMTR-47772 | Multi-Domain Management | The Administrator and Trusted Clients pop-up editors at the Multi-Domain Server level show all domain names linked to these objects. Domain Managers with partial permissions, may see the names of domains that they are not permitted to see. |
| PRJ-9696, PRHF-8593 | Multi-Domain Management | MLM may open a connection to the reversed IP address of the Multi-Domain Server. |
| PRJ-10744, PMTR-50936 | Multi-Domain Management | In some scenarios, policy installation from the Domain Management Server fails after mds_backup procedure that was interrupted. Refer to [sk165559](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk165559). |
| PRJ-11174, PMTR-51890 | Multi-Domain Management | In some scenarios, Full synchronization fails in the Global Domain with "*Full sync with peer '\[Peer Name\]' NGM failed to import data* " error. Refer to [sk145972](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk145972). |
| PRJ-10365, PMTR-51017 | Multi-Domain Management | After performing Full synchronization or failover of the Global Domain, the following operations may fail (refer to [sk145972](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk145972)): * Global Domain reassignment * IPS or Application Control updates in the Global Domain |
| PRJ-10528, PRHF-8581 | Multi-Domain Management | The *mds_import.sh* script may fail if the IPS version for a Domain/CMA does not exist on the R80.x Multi-Domain Management Server. |
| PRJ-6702, PMTR-44004 | Multi-Domain Management | In a rare scenario, when viewing the Layer History, some revisions not relevant to the selected Layer may be shown. |
| PRJ-10037, PMTR-27672 | Multi-Domain Management | In some scenarios, CPUSE and advanced Multi-Domain Management upgrade are stuck at "*Upgrading products: 58%* ". Refer to [sk146933](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk146933). |
| PRJ-71 | SmartConsole | **NEW** : Added support for proxy configuration when downloading CRL from a VSX device. Refer to [sk151115](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk151115). |
| PRJ-10570, PMTR-51246 | SmartConsole | **NEW:**SmartConsole default login timeout was increased. |
| PRJ-8699, PRHF-7991 | SmartConsole | The shared secret's edit button may be grayed out. |
| PRJ-13690, PRJ-13686 | SmartConsole | In some scenarios, when using many parallel management API calls, the output is not consistent. |
| PRJ-5098, PMTR-41234 | SmartConsole | When editing the description of a revision, the "Changes" field is reset to 0. |
| PRJ-11256, PRHF-9106 | SmartConsole | In some scenarios, Inspection Settings view under the General tab is blank. |
| PRJ-12962, PRHF-10916 | SmartConsole | Global Policy reassign in MDS may fail with '*An internal error has occurred*' message after adding overrides to Snort protections. |
| PRJ-12081, PRHF-10297 | SmartConsole | When configuring "Visitor Mode" in SmartConsole and choosing the IP address, the wrong IP address may be displayed after clicking "OK". |
| PRJ-11903, PRHF-10275 | SmartConsole | In rare scenarios, certain domain level objects may not be visible in SmartConsole at the MDS level. |
| PRJ-12536, PRHF-9941 | SmartConsole | Unable to delete Snort protections in Multi-Domain environment - they still exist after deletion. |
| PRJ-9077, API-864 | SmartConsole | In some scenarios, the Management Server may unexpectedly exit following authenticated API commands to create or update objects with extremely long comments. |
| PRJ-4103, PRHF-2388 | SmartConsole | In "Top services" view of SmartView Monitor, "*cp_tcp_A936BBAC_EBC3_4F18_B3CC_A63365F07477\** " service is displayed instead of "https" service. Refer to [sk146052](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk146052). |
| PRJ-1447, PRHF-3822 | SmartConsole | In some scenarios, the *api.elg* log is flooded with the the "*Returning default standard reply class*" message. |
| PRJ-8015, PMTR-46682 | SmartView | SmartView may show wrong time in tables and graphs for clients located in Brazil. |
| PRJ-10198, PRHF-9019 | SmartView | SmartView may show "*query failed* " error message when creating table widget with filter by source/destination host name. Refer to [sk119056](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk119056). |
| PRJ-8132, PMTR-45751 | SmartView | "*The process \ which is monitored by watchdog restarted more than once in the last half an hou*r" error may appear in the SmartEvent GUI status window even though the process has been up for more than 30 minutes. |
| PRJ-4327, SE-331 | SmartView | In some scenarios, automatic reactions in SmartEvent are sent with the "Destination address" field containing the resolved country name instead of the raw IP value. Refer to [sk146992](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk146992). |
| PRJ-7495, PRHF-7101 | SmartView | When using SmartEvent automatic reactions, *\*.MHT* files in *$RTDIR/tmp* directory are not cleaned up in case of email sending failure. |
| PRJ-10371, PRHF-8973 | SmartView | In some scenarios, after user imports view/report in SmartView, the imported view/report is not shown in the Catalog. |
| PRJ-11959, PRJ-11897 | QoS | In some scenarios, SmartView Monitor shows "No Match" rule on QoS traffic. |
| PRJ-9417, PRJ-9416 | Security Gateway | Added logs for packets that include invalid TCP options. This feature is off by default. |
| PRJ-8150, PRHF-7736 | Security Gateway | Policy installation on Cluster may fail if the Cluster member name is longer than 64 characters. |
| PRJ-11952, PMTR-52583 | Security Gateway | In a rare scenario, Security Gateway may crash due to NULL pointer reference. |
| PRJ-11693, PRHF-9799 | Security Gateway | In a rare scenario, access rules with service type of "other" may not be matched correctly. Refer to [sk166365](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk166365). |
| PRJ-13018, PMTR-14138 | Security Gateway | In some scenarios, "*Too many update logs, log has been truncated*" alert logs appear in SmartConsole. |
| PRJ 10030, PMTR-50431 | Security Gateway | In a rare scenario, when the web server is defined, policy installation fails with "*Error code 0-20000111*". |
| PRJ-9049, PRHF-8288 | Security Gateway | Global connections may not be freed correctly when the Gateway acts as a Proxy. |
| PRJ-9686, PMTR-46451 | Security Gateway | Traffic may be dropped on DAIP gateway after the gateway IP address is changed or the gateway is rebooted. Refer to [sk165176](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk165176). |
| PRJ-10848, PRHF-1920 | Security Gateway | Improved the *in.aftpd* process memory management. |
| PRJ-3537, PRHF-5333 | Security Gateway | In some scenarios, there may be connectivity problems with DHCP traffic. |
| PRJ-5728, PRHF-6035 | Security Gateway | In some scenarios, SIP traffic may be dropped by Anti-Spoofing with "*fw_early_sip_nat Reason: spoofed packet on SIP traffic* " error in *dmseg* although it is set to*"detect",*. |
| PRJ-4678, PRHF-5055 | Security Gateway | In some scenarios, policy installation fails with "*configload_mgmt_compile: Failed to run compiler command*". |
| PRJ-10966, PMTR-35842 | Security Gateway | In some scenarios, the bridge rerouting feature's packet handling may lead to a memory leak. |
| PRJ-1212, PRHF-3652 | Security Gateway | In a rare scenario, the Security Gateway may crash due to a NULL pointer reference. |
| PRJ-10622, PMTR-17309 | Security Gateway | In a rare scenario, the Security Gateway may crash. |
| PRJ-2409, PRHF-4282 | Security Gateway | DCE-RPC traffic may be dropped because of a drop template that is incorrectly created for the ALL_DCE_RPC service. |
| PRJ-10413, PMTR-49504 | Security Gateway | In a rare scenario, after upgrading a Security Gateway to R80.10, the *log_indexer* process running on the Log server may consume 100% CPU and cause the indexing backlog. |
| PRJ-8001, PMTR-45649 | Threat Prevention | Improvements in HTTP chunked encoding inspection. |
| PRJ-9045, PRHF-8153 | Threat Prevention | The number of overrides in Threat Prevention policy -\> Profile -\> Overrides may also show inactivated overrides, with mismatched information between "override" and "User Modified". |
| PRJ-12396, PMTR-45311 | Threat Prevention | In some scenarios, policy installation fails with "*Error code 0-2000111*". |
| PRJ-2333, IPS-682 | IPS | In some scenarios, the interface name is not displayed correctly in the IPS log. |
| PRJ-9275, PMTR-39944 | Application Control | In some scenarios, HTTP traffic is blocked with "*HTTP parsing error occurred (2)* " and "*parameters are undecodable in request* " errors. Refer to [sk160092](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk160092). |
| PRJ-12163, PMTR-52106 | Application Control | In some scenarios, Application Control updates in Multi-Domain High Availability environments may get stuck when multiple updates from different Domains/Multi-Domains take place simultaneously. |
| PRJ-9391, PMTR-49565 | Identity Awareness | **NEW**: Performance improvement in the automatic LDAP group update feature. |
| PRJ-8422, IDA-2022 | Identity Awareness | **NEW:** Identity Awareness performance improvements on large scale environments. |
| PRJ-9538, PRHF-4033 | Identity Awareness | **NEW:** Policy installation process has been improved. |
| PRJ-7505, PRHF-5184 | Identity Awareness | When the Identity Awareness blade is enabled, a memory leak may appear in LDAP sessions. |
| PRJ-10555, IDA-1828 | Identity Awareness | In a rare scenario, a memory leak, related to the Identity Awareness flow, may occur in the kernel. |
| PRJ-10384, IDA-2719 | Identity Awareness | In a rare scenario, identity session groups and access roles may disappear following a policy installation. |
| PRJ-10222, PMTR-39175 | Identity Awareness | In a rare scenario, there is a memory leak in the IDA daemon pepd. |
| PRJ-10756, IDA-2866 | Identity Awareness | In some scenarios, multiple "*idapi_load_data_impl: session id \ not found in client_db, although ip \ was assigned to it* " errors appear in */var/log/messages* file. Refer to [sk167174](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk167174). |
| PRJ-10967, SWG-2484 | DLP | **NEW**: Reading and sending files from the registry by DLP was optimized. |
| PRJ-9325, PRHF-8152 | DLP | Improved the scanning time of files for some scenarios in SMTP and HTTP/S. |
| PRJ-9691, PRHF-8503 | DLP | In some scenarios, DLP prints wrong error message in the log. |
| PRJ-10905, PRJ-10854 | DLP | DLP stability for some scenarios was improved. |
| PRJ-5020, PRHF-5528 | DLP | The DLP engine may incorrectly process the file if the file name is missing in the connection header. |
| PRJ-9772, PRHF-8847 | DLP | In some scenarios for SMTP, when an internal user sends an email, the DLP logs may show the topology as "external to external" instead of as "internal to internal". |
| PRJ-10421, PMTR-39431 | DLP | In a rare scenario, when Security Gateway is configured as proxy, the HTTP traffic may be not scanned by DLP. |
| PRJ-7994, PMTR-46960 | HTTPS Inspection | WSDNSD memory leak may appear when updatable objects are configured in the policy. Refer to [sk165616](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk165616). |
| PRJ-9932, PMTR-49938 | HTTPS Inspection | In some scenarios, when the minimum version of HTTPS Inspection is set to TLS 1.1, some websites may unexpectedly exit. Refer to [sk165555](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk165555). |
| PRJ-8473, PMTR-44388 | Logging | In some scenarios, exporting a large number of logs to Excel may fail and cause SmartView to restart. |
| PRJ-4446, PMTR-39444 | Logging | In SmartView, drilling down from the timeline widget to logs, may show less logs than expected. |
| PRJ-9314, PRHF-8166 | Logging | Logging view may show results from the wrong day if the server Time Zone is configured to use half/quarter hour deviations from standard time. |
| PRJ-11004, PRHF-9292 | Logging | In some scenarios, changes made to Network Objects on the Security Management Server are not reflected in the logs view. Refer to [sk166493](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk166493). |
| PRJ-1523, SL-2379 | Logging | In some scenarios, Autosuggestion does not complete in SmartConsole's "Logs \& Monitor" tab for users who do not have super user privileges. Refer to [sk155252](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk155252). |
| PRJ-9704, PRHF-7716 | Logging | The FWD process may unexpectedly exit if one of the following changes were made using GuiDBEdit: 1. Change to log forwarding timing 2. Change to log switch timing |
| PRJ-10154, PRHF-8586 | Logging | "UserCheck Reference ID" field is missing from logs when the message of the UserCheck customized page is modified and does not contain the text "*reference* :". Refer to [sk165355](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk165355). |
| PRJ-9969, SL-3551 | Logging | In a Multi-Domain environment, one or more CMA's SMARTLOG_SERVER processes may fail to start after upgrade. Refer to [sk165262](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk165262). |
| PRJ-11095, PMTR-51655 | Logging | In a rare scenario, the CPD process on a Security Management Server that manages R77.30 Security Gateway may unexpectedly exit. |
| PRJ-8494, PRHF-7875 | Logging | In SmartView, when the user exports logs to CSV using the "visible columns" option, the following fields may be missing from the CSV file: Resource, Application Risk, Application Name, and Application Category. |
| PRJ-8680, PRHF-7856 | Logging | In some scenarios, Threat Emulation Logs cannot be viewed in the logging or reporting views because of a certain format of the "file size" field sent from the Security Gateway. Refer to [sk166997](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk166997). |
| PRJ-9191, PMTR-42449, SL-3104 | Logging | After synchronization, MLM / Secondary MDM may have different log policy configuration. Refer to [sk165692](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk165692). |
| PRJ-6022, PRHF-4951 | Logging | When restarting the FWD process on the Log server, the *syslogd* process (syslog daemon), may unexpectedly exit. |
| PRJ-7923, PMTR-42913 | Logging | Following changes in correlation unit settings, new logs may not be read by SmartEvent until the *log_indexer* process is restarted. |
| PRJ-1500, PRHF-3839 | ClusterXL | The output of the '*cphaprob routedifcs*' command may be missing interfaces. |
| PRJ-9346, PMTR-43718 | ClusterXL | SNMP Response for OID .1.3.6.1.4.1.2620.1.5.6 ("haState") is "Active" on all members of ClusterXL High Availability mode. Refer to [sk106291](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk106291). |
| PRJ-5903, PMTR-43772 | SecureXL | In some scenarios, the penalty box violation rate is configured incorrectly. |
| PRJ-10936, PMTR-25593 | SecureXL | Rule that contains *dhcpv6* services, does not disable SecureXL Accept Templates. Refer to [sk32578](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk32578). |
| PRJ-9535, JPMC-339 | SecureXL | On a Security gateway with SAM Hardware card and enabled SecureXL, a memory leak may appear when trying to delete particular multicast connection after it is expired. |
| PRJ-7984, PRHF-7667 | SecureXL | In some scenarios, multicast connections may not have the outbound routes. |
| PRJ-9062, PRHF-5093 | SecureXL | ICMP processing may infrequently result in drops with "...*dropped by handle_outbound_pac, Reason: connection not found;*". |
| PRJ-4174, PRHF-5051 | SecureXL | In some scenarios, there may be a length verification error with SCTP traffic. |
| PRJ-7980, PMTR-28466 | SecureXL | In a rare scenario, a memory leak may occur when FireWall updates data for connections that are offloaded to SecureXL. |
| PRJ-1250, PRHF-3608 | SecureXL | On cluster, Drop templates are disabled on reboot. Refer to [sk153412](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk153412). |
| PRJ-4877, PRHF-5471 | VSX | Resource Monitor Control may cause segmentation fault when there are more than 64 CPUs. Refer to [sk125112](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk125112). |
| PRJ-13080, PRHF-10978 | VSX | When performing a provisioning operation in VSX, process may hang on "Pushing configuration to ...". Refer to [sk167175](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk167175). |
| PRJ-10912, PMTR-22709 | VSX | In VSX cluster with VMAC mode, traffic may not pass through VSX Cluster members if SecureXL is enabled. Refer to [sk138894](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk138894). |
| PRJ-3814, PRHF-3767 | Routing | Active VRRP cluster member may not show full accounting information in logs. Refer to [sk159432](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk159432). |
| PRJ-12800, ROUT-541 | Routing | In some scenarios, when processing BGP ECMP routes, routed may unexpectedly exit, resulting in loss of BGP adjacency. |
| PRJ-12796, ROUT-530 | Routing | In some scenarios, there may be a loss of BGP adjacency when displaying BGP routes with very long AS paths or large numbers of BGP communities. |
| PRJ-9348 | Routing | Scanning large number of interfaces may cause some of the interfaces to be in "master" state on the backup member. |
| PRJ-3616, PRHF-4829 | Routing | In some scenarios, routed unexpectedly exits when receiving an LSA with a checksum value of zero. |
| PRJ-9072, PRHF-8337 | Routing | In some scenarios, a corrupted BGP AS4_PATH attribute value may result in an invalid, long BGP update that is rejected by the BGP peer. |
| PRJ-5998, ROUT-445 | Routing | In a rare scenario, last two (or more) nexthops of a BGP ECMP route disappear simultaneously and are not removed from the forwarding database. Refer to [sk153552](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk153552). |
| PRJ-9037, PMTR-29811 | VPN | Connectivity improvement of IPSec tunnels when IKEv2 is configured. |
| PRJ-4251, PRHF-2844 | VPN | Added L2TP Remote Access client connectivity improvements. Refer to Scenario 2 in [sk145895](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk145895). |
| PRJ-11261, PRHF-7681 | VPN | In a rare scenario, vpnd process unexpectedly exits due to Segmentation fault. |
| PRJ-11241, PMTR-42727 | VPN | Added connectivity improvement for VPN over NAT traversal (UDP 4500). Refer to [sk155953](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk155953). |
| PRJ-5242 | VPN | Remote Access connectivity improvement. |
| PRJ-10047, VPN-196 | VPN | In some scenarios, Remote Access clients cannot connect to a load sharing cluster. Refer to [sk159052](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk159052). |
| PRJ-11641, VPNRA-353 | VPN | Added stability improvement for Remote Access VPN. |
| PRJ-11573, PRHF-314 | VPN | The fwk process may unexpectedly exit on a VS, creating a core dump file. Refer to [sk129772](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk129772). |
| PRJ-4450, PMTR-40912 | VPN | Improved IKEv2 negotiation flow. |
| PRJ-6116, PMTR-44901 | VPN | In some scenarios, NAT-D traffic goes out from the first external interface. |
| PRJ-7691, PRHF-7359 | VPN | Improved usability of VPN tunnel monitoring "*vpn tu*" command. |
| PRJ-6717, PRHF-6672 | VPN | In some scenarios, the vpnd process unexpectedly exits on cluster members. |
| PRJ-639, PRHF-2142 | VPN | In a rare scenario, a VPN memory leak may appear. |
| PRJ-6137, PRHF-4292 | VPN | In a rare scenario, the vpnd process unexpectedly exits due to memory access problem. |
| PRJ-11448, PMTR-51868 | Gaia OS | **NEW**: Added support for Smart-1 3150/3050 SAN and 'show asset' line cards for SAN. |
| PRJ-8005, PMTR-46037 | Gaia OS | **NEW:**Apache API was updated. |
| PRJ-10808, PMTR-50836 | Gaia OS | CVE-2020-8597: pppd is vulnerable to buffer overflow. Refer to [sk165875](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk165875). |
| PRJ-7370, PMTR-44835 | Gaia OS | In some scenarios, the iDRAC (LOM) interface is not pingable. |
| PRJ-444, PRJ-446 | Gaia OS | In some scenarios, the '*show asset all*' command may fail. |
| PRJ-468, PRJ-469 | Gaia OS | During *load configuration* command, when the loading configuration file contains SNMP, interface config commands may not apply the configuration correctly. |
| PRJ-10396 | Gaia OS | In some scenarios, transmit queues may stop, causing packet loss. |
| PRJ-499, PRJ-500 | Gaia OS | In some scenarios, the l*oad configuration* command fails when trying to add an SNMP user with a hashed password. |
| PRJ-9349, PRHF-8098 | Gaia OS | Added optimization for 40GbE and 25/100GbE cards configured in multiqueue allowing better transmit performance when Hyper-Threading (SMT) is enabled. |
| PRJ-966 | Hardware | The '*show configuration bonding*' command may list an incorrect interface type in clish when used together with 21000 appliances and a SAM acceleration card. |
| PRJ-2460, PRHF-4097 | VoIP | In some scenarios, MGCP traffic may be dropped by the Security Gateway with the following message in *fw ctl zdebug* drop: `fw_mgcp_undo_earlynat: the needed early_nat request entry (with natted src) not found, dropping;` `fw_conn_post_inspect Reason: Handler 'mgcp_manager' drop;` |
| PRJ-2215, PMTR-30347 | VoIP | In some scenarios, VoIP calls are dropped with "*SIP Re-Invites exceeded the limit* " reject reason. Refer to [sk145412](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk145412). |
| PRJ-10533, PMTR-51177, PRJ-9102, PRHF-7758 | VoIP | In a rare scenario, with Static NAT enabled, Security gateway may crash when passing SIP traffic. Refer to [sk166474](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk166474). |
| PRJ-11242, PRHF-9628 | VoIP | SIP calls with NAT (SIP packet with no SDP but content-type=sdp) may fail to open correctly. |
| PRJ-4234, PRHF-4250 | VoIP | In some scenarios, H323 connections are dropped after "Virtual session timeout" is configured. Refer to [sk156372](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk156372). |
| PRJ-9954, PRHF-897 | VoIP | In some scenarios, UA traffic is dropped when packet contains more then 9 UA's. Refer to [sk135114](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk135114). |
| PRJ-5803, VSECNSX-1211 | CloudGuard IaaS | **NEW**: Added support for Identity Sharing with CloudGuard for NSX-V. |
| PRJ-10865, VSECC-1119 | CloudGuard IaaS | In a rare scenario, the OpenStack Data Center becomes unresponsive, which results in a loss of updates to the Security Gateway. |
| PRJ-9633 | Compliance | In some scenarios, database import on a single Domain machine on which the Compliance blade is activated fails. As a result, the FWM process unexpectedly exits after the import. |
| PRJ-12689, MB-731 | Compliance | Compliance blade may show incorrect Best Practice status if one or more relevant network objects for that Best Practice is in status "N/A". |
| **R80.10 Jumbo HotFix - General Availability Take 275 (24 May 2020)** |||
| PRJ-9293 | SmartConsole | When running Management API commands, the default values for '*dereference-group-members* ' and '*show-membership*' flags may change from "True" to "False". |
| PRJ-11216, PRHF-252 | ICA | In a rare scenario, some daemons (like FWM, CPCA, etc.) may unexpectedly exit while signing a certificate. |
| PRJ-12749, PRJ-12738 | VPN | Some Remote Access clients that do not support Multi-Factor Authentication (MFA) are able to connect to a Security Gateway even though the "Allow older clients" option is disabled. Refer to [sk166912](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk166912). |
| **R80.10 Jumbo HotFix - General Availability Take 272 (22 March 2020, GA from 05 April 2020)** |||
| PRJ-9626, PRJ-9461 | Security Management | **NEW** : Added ability for R80.10 Security Management or Multi-Domain Server to manage R80.40 Security gateway. Refer to [sk164652](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk164652). * Requires R80.10 SmartConsole Build 177 (or higher). |
| **R80.10 Jumbo HotFix - Ongoing Take 270 (13 February 2020)** |||
| PRJ-9396, PMTR-44668 | Security Management | In a rare scenario, the FWM process will utilize 100% CPU, and connections to SmartConsole may fail. |
| PRJ-7916, PRHF-7614 | Security Management | When installing policy to a Cisco router, an automatic ACL number change may cause networking issues. |
| PRJ-8797, PMTR-48610 | Security Management | If the database contains an internal user object with the same account name as an administrator object, then after the user publishes any change to the internal user object, the login in SmartConsole with the administrator account may fail. |
| PRJ-8857, PMTR-48652 | Security Management | If the database contains an internal user object with the same account name as an administrator object, then after the user publishes any change to the administrator object, the login in a VPN client with the internal user account may fail. |
| PRJ-8004, PMTR-46434 | Security Management | In some scenarios, HA synchronization in the Global Domain fails with the "*Failed to sync peer - Global Domain is incompatible with the Domains*." error. |
| PRJ-7467, CPM-1745 | Security Management | Global policy reassignment may fail after a rulebase is deleted in the Global Domain. |
| PRJ-7038, PRHF-6722 | Security Management | The '*fwm sic_reset*' command does not print which object still has an IKE certificate. |
| PRJ-8374, PRHF-7874 | Security Management | In some scenarios, the exported database may be very large and include redundant data. |
| PRJ-5493, PRHF-5881 | Security Management | **NEW** : Added the policy verifier memory enhancement and additional debugging options. Refer to [sk162453](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk162453). |
| PRJ-5095, PMTR-41712 | Security Management | When an administrator edits the description of a revision, he becomes the publisher of the revision. |
| PRJ-8093, PRHF-7729 | Security Management | In some scenarios, policy installation fails when installation target is Check Point Host. |
| PRJ-3037, PMTR-39305 | Security Management | In some scenarios, the Management Server takes a long time to start or even fails to start. |
| PRJ-4307, PMTR-45046 | SmartConsole | When performing a login using *mgmt_cli* as root admin (with '*-r* ' set to "*true*"), session timeout is not set. |
| PRJ-6841, API-841 | SmartConsole | **NEW** : Added integration of Management API with Ansible 2.9. For more info see: |
| PRJ-2436, PRHF-4184 | SmartConsole | When disabling NAT for a network object and searching for the NAT IP address, the network object is still shown as part of the search results even though it should not be. |
| PRJ-7945, PMTR-46715 | SmartConsole | In some scenarios, when the user runs the '*show-mdss* ' command with '*details-level full*', not all domains are retrieved. |
| PRJ-4684, PMTR-41238 | SmartConsole | In a rare scenario, SmartConsole unexpectedly closes when trying to create a user with certificate. |
| PRJ-7833, PMTR-43461 | Multi-Domain Management | In some scenarios, upgrade of R7x secondary Multi-Domain Management Server or Multi-Domain Log Server fails. |
| PRJ-7134, PMTR-44390 | Multi-Domain Management | Improved Domain/CMA logs visibility. |
| PRJ-7104, PRHF-6605 | Multi-Domain Management | The *cma_migrate* may fail if the IPS version does not exist on the R80.x Multi-Domain Management Server. |
| PRJ-3792 | Smart Event | Added the Log Exporter functionality. Refer to [sk122323](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk122323). |
| PRJ-6045, PMTR-43654 | Security Gateway | Improved misleading log for connections that terminate before detection. |
| PRJ-7750, PRHF-7389 | Security Gateway | In some scenarios, there is no SIC after applying the ICA certificate replacement procedure. |
| PRJ-7868, SWG-2361 | Security Gateway | Improved DNS caching and negative DNS response handling. |
| PRJ-4747, PRHF-5313 | Security Gateway | In a rare scenario, the FWK process unexpectedly exits during debug. |
| PRJ-3425, PMTR-35854 | Security Gateway | In a rare scenario, changing the xmit-hash-policy of the bonding group while the machine is handling traffic causes it to crash. Refer to [sk154573](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk154573). |
| PRJ-7485, GAIA-4638 | Security Gateway | Connectivity issues on some HTTPS sites (as login pages) when the Security Gateway is configured as a proxy. Refer to [sk147878](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk147878). |
| PRJ-6073, PMTR-41138 | Identity Awareness | Machine identity for Terminal Server agent is not identified unless Identity Agent is also enabled on the Security Gateway. |
| PRJ-7647, PMTR-45863 | SSL Inspection | HTTPS Inspection's default CA certificate was upgraded to use a signing algorithm based on SHA256 instead of SHA1. Refer to [sk163932](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk163932). |
| PRJ-7636, PMTR-46064 | ClusterXL | The '*set router-options auto-restore-iface-routes*' command is now deprecated. |
| PRJ-6154, PRHF-6490 | SecureXL | In some scenarios, SecureXL causes an issue in the routing of multicast traffic. |
| PRJ-2978, VPNS2S-417 | VPN | SmartView Monitor VPN tunnel status may show incorrect or missing tunnels status for a cluster object. |
| PRJ-7266, CRYPTOIS-903 | VPN | In some scenarios, the vpnd process unexpectedly exits during decryption of SSL traffic. Refer to [sk109140](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk109140). |
| PRJ-7064, PMTR-45006 | CloudGuard | In some scenarios, subnet objects may not contain all the relevant IP addresses for VMSS VMs. |
| PRJ-7301, PRHF-4371 | Mobile Access | In a rare scenario, when Mobile Access blade is enabled, the Security Gateway may crash with vmcore. |
| PRJ-6853, PMTR-42177 | Logging | In a rare scenario, the "Logs \& Monitor" view in SmartConsole freezes while scrolling down the results. |
| PRJ-8156 | Logging | In some scenarios, CPSEMD remains down after restarting all processes in a SmartEvent Server. |
| PRJ-6188, PRHF-6325 | Logging | Widgets inside SmartView's "Views and Reports" may result in "Query Failed" messages when filtered by the "Log Server Origin" field. |
| PRJ-7813, PMTR-42519 | Logging | In a rare scenario involving multiple disconnections and reconnections between Security gateway and Log Server, connection is not automatically restored and logs may not be written locally. Refer to [sk164852](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk164852). |
| **R80.10 Jumbo HotFix - General Availability Take 259 (19 December 2019, GA from 13 February 2020)** |||
| PRJ-4928, PMTR-41602 | Upgrade | In some scenarios, the FWM process fails to start after a successful upgrade with the "*Found an indication that the current domain was migrated, and the migration had failed. Cannot start after a migration failure* " message in *fwm.elg* file. |
| PRJ-5659, PRHF-5965 | Security Management | Blank lines may appear in SmartConsole Purge Revisions view after purging a large database. |
| PRJ-5663, PRHF-6087 | Security Management | In some scenarios, purge revisions fails and blank lines, that cannot be deleted, appear in SmartConsole Revisions view. Refer to [sk163116](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk163116). |
| PRJ-5654, PRHF-5776 | Security Management | In some scenarios, *cpm_status.sh* reports incorrect CPM status. Refer to [sk162633](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk162633). |
| PRJ-5755, PMTR-43497 | Security Management | High Availability synchronization between Management Servers may fail when there is no enough disk space in the *root* partition. |
| PRJ-4833, PRHF-5419 | Security Management | The FWM process may unexpectedly exit The FWM process may unexpectedly exit when an incorrect license SKU with a specific format is applied. |
| PRJ-4969, PRHF-5435 | Security Management | In some scenarios, disconnected sessions with no changes or locks appear in SmartConsloe session view. |
| PRJ-3691, PMTR-36555 | Security Management | New policy creation may fail when there are no installation targets defined in this policy. |
| PRJ-3540, UP-240 | Security Management | **NEW:** Improved debug prints in case of access policy drops. |
| PRJ-4873, PRHF-5274 | Security Management | In some scenarios, when setting or modifying the Email/Phone fields of an administrator, the old values still appear at the bottom pane under "View Sessions" instead of the updated values. |
| PRJ-5555, PMTR-43278 | Security Management | In some scenarios, policy installation fails with "*Policy installation failed on gateway. If the problem persists contact Check Point support (Error code: 0-2000117)* ". Refer to [sk162554](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk162554). |
| PRJ-5411, PRHF-5815 | Security Management | In some scenarios, policy Installation fails with "*Operation failed, install/uninstall has been improperly terminated* " error. Refer to [sk162855](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk162855). |
| PRJ-6940, PRHF-6754 | Security Management | In a rare scenario, policy installation fails with "*Policy installation had failed due to an internal error* ". Refer to [sk163482](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk163482). |
| PRJ-6668, PMTR-44148 | Security Management | In some scenarios, traffic outage may happen after policy installation from Multi-Domain SmartConsole. Refer to [sk163712](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk163712). |
| PRJ-4727, PMTR-41157 | Security Management | After deleting a network object that is part of a network group, the audit log of the group modification does not show who is the removed member. Refer to [sk164057](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk164057). |
| PRJ-5721, PMTR-42089 | Security Management | In some scenarios, upgrade from R7x is not aborted when there is not enough disk space to complete the import operation. |
| PRJ-5427, PMTR-41518 | Security Management | In some scenarios, policy fetch fails if name of the Security gateway that tries to fetch this policy is not defined in DNS. Refer to [sk150472](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk150472). |
| PRJ-5027, PRHF-4877 | Security Management | In some scenarios, policy verification process fails after reaching memory size of 4GB. Refer to [sk161412](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk161412). |
| PRJ-4664, PMTR-41210 | Multi-Domain Management | The FWM process may unexpectedly exit when there is no valid license on the Multi-Domain Server. |
| PRJ-3524, PMTR-40003 | Multi-Domain Management | Objects on Domain level that should be shown on the Multi-Domain Server level, sometimes are not shown correctly. |
| PRJ-5527, PRHF-5527 | SmartConsole | In some scenarios, applying "Where used" from the local Domain on an object that is used in global policies, may return results from the global policies that are not assigned to the local Domain. Refer to [sk162753](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk162753). |
| PRJ-6932, PRHF-6842 | SmartConsole | Threat Prevention policy installation may include wrong topology warning on VSX cluster interfaces. |
| PRJ-5372, PMTR-43427 | SmartConsole | In Multi-Domain environment, IPS protections become staging on each domain after global policy assignment while the protection does have override/staging status in the global domain. |
| PRJ-6644, PRHF-6606 | SmartConsole | In some scenarios, administrator cannot open the 'RemoteAccess' - VPN community object for editing. |
| PRJ-4200, PMTR-40076 | SmartView | **NEW:** Added support for "SmartView for QRadar" extension. |
| PRJ-1675 SL-1890 | SmartView | In some scenarios, Hit Count on specific rules does not increment after they were recently created or re-ordered. Refer to [sk138033](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk138033). |
| PRJ-5628, PRHF-5810 | SmartView | In SmartView, when exporting logs to Excel after drill-down, the amount of logs is less than expected. Refer to [sk162621](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk162621). |
| PRJ-5484, NAT-110 | Security Gateway | **NEW:** Enhancement: NAT port exhaustion logs mechanism was updated. Refer to [sk156852](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk156852). |
| PRJ-4614, PMTR-40937 | Security Gateway | In some scenarios, VoIP traffic is dropped with "*allocate_port_impl: could not find a free port;*" error in dmesg. |
| PRJ-4162, PMTR-39641 | Security Gateway | In some scenarios, when the ICAP server on the Security gateway is enabled, some web pages do not load. |
| PRJ-5318, NAT-137 | Security Gateway | In a rare scenario, Security gateway freezes when IP pool NAT and VPN are used. |
| PRJ-5868, SWG-2208 | Security Gateway | In a rare scenario, Security gateway crashes when proxy is enabled. |
| PRJ-5325, PRHF-551 | Security Gateway | In a rare scenario, Security gateway crashes when using the Web Servers Slow HTTP Denial of Service protection. |
| PRJ-2359, PMTR-10094 | Security Gateway | In a rare scenario, some commands on Security gateway fail and traffic may be dropped. |
| PRJ-2917, UP-293 | Security Gateway | In a rare scenario, Security gateway may crash due to NULL pointer reference. |
| PRJ-6655 | Security Gateway | **NEW:** Performance enhancement for gzip traffic on VSX environment. |
| PRJ-4526, PMTR-34813 | Security Gateway | In some scenarios, traffic is dropped with "*\[ERROR\]: network_classifier_handle_dag: failed to get uuid of DAG bogus_ip* " error in *dmesg*. |
| PRJ-5935, PRHF-5344 | Logging | In some scenarios, when retrieving the UserCheck logs, FWD process on the Security gateway may unexpectedly exit. |
| PRJ-735, SL-1290 | Logging | In a rare scenario, Security gateway starts writing logs locally due to the high CPU utilization by the FWD process on the Log Server. Refer to [sk152113](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk152113). |
| PRJ-4963, SL-2456 | Logging | In a rare scenario, a specific log fails to be written and an alert informing on this is displayed in SmartConsole. |
| PRJ-7459, PMTR-45826 | IPS | Cannot update the Geo Policy IPToCountry database on Security Gateways. Refer to [sk163672](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk163672). |
| PRJ-1019, PRHF-2795 | DLP | DLP activation was optimized to reduce the CPU consumption. |
| PRJ-4846, PMTR-4178 | SSL Inspection | In a rare scenario, when SSL Inspection is enabled and there is big latency, Microsoft websites (for example Azure) may not respond. Refer to [sk150175](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk150175). |
| PRJ-5612, PRJ-5609 | HTTPS Inspection | In a rare scenario, Security Gateway may crash during non-compliant HTTP traffic. |
| PRJ-4464, PMTR-39191 | Gaia OS | While unplugging one of the power supply cables on Smart-1 5150/5050/525 appliances, a false '*No Read*' message appears for \~5 seconds in both PSUs statuses (instead of Present/Input Lost/Absence). |
| PRJ-1543, GAIA-4880 | Gaia OS | In some scenarios, the VSX Management fails to be properly restored from backup. |
| PRJ-6790, PRJ-6158, PRHF-6143 | Gaia OS | "*Gaia Web-UI recognized a non-valid input data*" error when creating a scheduled backup in WebUI via SCP or FTP with special characters used. |
| PRJ-960, PRHF-2474 | Gaia OS | In some scenarios, user cannot access terminal from WebUI in monitor role mode. |
| PRJ-1756 PRJ-6056, PRHF-3943 | Gaia OS | A network interface may restart when changing its properties from WebUI if the interfaces configuration was performed via CLISH. |
| PRJ-346, PRHF-1739 | Gaia OS | In some scenarios, Smart-1 405 and 410 appliances may show high voltage due to incorrect VBat thresholds. |
| PRJ-1259, PRHF-3675 | Gaia OS | CPD process may unexpectedly exit when attempting to query sensor values on Smart-1 525, Smart-1 5050 and Smart-1 5150 appliances. |
| PRJ-4181, CLUS-1486 | VSX | In some scenarios, the *vsx_util vsls* commands fails to change the VSs priority. Refer to [sk160832](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk160832). |
| PRJ-4676, PMTR-41221 | VSX | VSX configuration cannot not be applied after upgrade from R77.x to R80.x, due to duplicated VSX routes. |
| PRJ-6963, PMTR-44031 | VSX | In some scenarios, when running the *cphaprob show_bond* command, one of the bond's slave may be missing from the output. Refer to [sk163333](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk163333). |
| PRJ-5876, PRJ-5875 | Acceleration Card | Policy installation may take a long time when using SAM-108 Acceleration Card on 21000 appliances. |
| PRJ-7183, PMTR-44859 | CloudGuard | Public IP addresses for Virtual Machines and Virtual Machines Scale Sets may be missing. |
| PRJ-5528, PMTR-42941 | CloudGuard | In some scenarios, centrally distributed license disappears from CloudGuard Gateways. Refer to [sk151794](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk151794). |
| PRJ-4075, PMTR-25655 | VPN | If the VPN tunnel is configured with GCM ciphers for Phase 2, encrypted traffic may be dropped when SecureXL is enabled. Refer to [sk152832](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk152832). |
| **R80.10 Jumbo HotFix - General Availability Take 249 (21 November 2019, GA from 23 December 2019) Note: This Take updates Take 245 released on 24 October 2019. It is recommended to install Take 249** |||
| PRJ-7006, PRJ-6992 | Multi-Domain Management | The Gaia restore of Multi-Domain Server fails when using Take 245 of R80.10 Jumbo Hotfix Accumulator. Refer to [sk163473](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk163473). |
| PRJ-6781 | ClusterXL | Using R80.10 management to manage R80.30 Cluster may lead to a split brain scenario and traffic loss on the Security gateway side. |
| PRJ-6684, PMTR-44076 | Gaia OS | In some scenarios, Gaia restore on Multi-Domain Server fails with error "*failed to edit update registry* ". Refer to [sk163312](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk163312). |
| PRJ-2346, PMTR-38631 | VPN | Remote Access client randomly disconnect / unable to connect when DHCP multi-homed server is configured. |
| **R80.10 Jumbo HotFix - Ongoing Take 245 (24 October 2019)** |||
| PRJ-2724, PMTR-38948 | Upgrade | Added a pre-upgrade verification that Global network objects with NAT configuration are not supported. |
| PRJ-2982, API-744 | Security Management | In some scenarios, *show generic-objects* API command fails with "*Management Server failed to execute command* ". Refer to [sk157693](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk157693). |
| PRJ-3187, PMTR-39644 | Security Management | Added ability to automatically determine the API process memory allocation to avoid "*Out of memory* " errors. Refer to [sk119553](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk119553). |
| PRJ-3635, PMTR-19721 | Security Management | In some scenarios, policy installation fails with "*Policy installation had failed due to an internal error*" message. |
| PRJ-2952, PMTR-23492 | Security Management | Added support for Internal CA certificate replacement. |
| PRJ-2337, PRHF-4046 | Security Management | In some scenarios, user cannot discard or publish a worksession, receiving the general message "*Internal error*". |
| PRJ-4277, PRJ-4301 | Security Management | When a purge operation is performed on a large amount of revisions, the operation may take a long time to complete. |
| PRJ-2293, PMTR-38293 | Security Management | In some scenarios, QoS policy installation fails when installing the blade without installing Access or Threat blades of the same policy first. |
| PRJ-4184, PMTR-38720 | Security Management | When many users are connected to and actively working in the same domain in SmartConsole, they may experience: * Slowness in SmartConsole responses * Long duration of operations * High load on the Management Server |
| PRJ-2647, PMTR-38095 | Security Management | In a rare scenario, the Security Management server does not start due to a missing object, or a duplication of objects. |
| PRJ-1516, CPM-2264 | Security Management | Performance and stability improvements in large High Availability setups. |
| PRJ-3639, PRHF-3463 | Security Management | In some scenarios, size of the *shadow_object.C*file increases after each policy installation, eventually causing a failure in installing a policy. |
| PRHF-3242, PRJ-657 | Security Management | In a rare scenario, the policy verifier ignores rules with object named "Internet" used with negate operator. |
| PRJ-4304, PMTR-40468 | Security Management | Added a mechanism to prevent the Management Server from starting if an import process was interrupted. |
| PRJ-1272, PMTR-38720 | Security Management | When many users are connected to and actively working in the same domain in SmartConsole, they may experience: * Slowness in SmartConsole responses * Long duration of operations * High load on the Management Server |
| PRJ-1760, PMTR-37924 | Security Management | Due to a failed full sync, FWM was restarted unexpectedly and obsolete domain sessions were used in the global policy assignment. |
| PRJ-2491, PMTR-38103 | Security Management | In some scenarios, a validation incident about Invalid Email Address is presented in SmartConsole after upgrade from R77. |
| PRJ-1864 | Security Management | In some scenarios, SmartConsole unexpectedly exits while adding or removing many objects via Web API. |
| PRJ-2748, PRHF-4334 | Security Management | In some scenarios, the "*migrate export*" command fails on the Secondary Security Management machine. |
| PRJ-2680, PRHF-3584 | Security Management | Added a Security Management feature that allows CPDiag to route data (in uploads and downloads) for offline Security gateway (gateway with no direct Web access) using the Management server as a proxy to the internet. |
| PRJ-1442, PRHF-3783 | Multi-Domain Management | In some scenarios, gateways are missing in the 'Gateways and Servers' view in SmartConsole on the MDS level. |
| PRJ-2158, PMTR-33605 | Multi-Domain Management | In some cases on Multi-Domain environments with several servers, tasks still appear in progress after restart of the server even though they are not really running. |
| PRJ-3050, PMTR-39455 | Multi-Domain Management | If user deletes a CLM from a Domain (it's forbidden, the validation was added), the CLM remains as partially deleted and user cannot create a new one. |
| PRJ-1532, PRJ-1536 | Multi-Domain Management | In a specific scenario, Global policy rules may change order after Multi-Domain Server upgrade. Refer to [sk155432](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk155432). |
| PRJ-371, PRHF-3285 | Multi-Domain Management | In a rare scenario, FWM process unexpectedly exits on the Domain level during login. |
| PRJ-3619, PMTR-36765 | Multi-Domain Management | In some scenarios, the "*Unable to connect to server. Please make sure the server is up and running* ." error appears when trying to log into single Domain from SmartConsole. Refer to [sk153293](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk153293). |
| PRJ-2243, PMTR-36614 | Multi-Domain Management | The *mds_backup* command will generate an output file of format *.tar* instead of *.tgz* to improve the duration time of backup (*mds_backup* ) and restore (*mds_restore* ) of Multi-Domain Server. Refer to [sk163300](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk163300). |
| PRJ-1968, PRHF-3268 | SmartConsole | In setups with a large quantity of network object, users may experience slowness when editing the HTTPS Inspection policy. Refer to [sk147134](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk147134) * Requires R80.10 SmartConsole Build 154 (or higher). |
| PRJ-1343 | SmartConsole | In some scenarios, DNS Maximum Reply Length IPS protection is not enforced. * Requires R80.10 SmartConsole Build 154 (or higher). |
| PRJ-782, PRJ-777 | SmartConsole | In a rare scenario, the FTP Bounce, Port Overflow and Known Ports IPS protections are not enforced. * Requires R80.10 SmartConsole Build 154 (or higher). |
| PRJ-3868, PRHF-4655 | SmartConsole | In a rare scenario, when user clicks on Mail Transfer Agent (MTA) options in the Security gateway settings or on 'Next hop' column inside MTA settings, SmartConsole shows "Not Responding" and freezes. Refer to [sk161232](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk161232). * Requires R80.10 SmartConsole Build 154 (or higher). |
| PRJ-2558, MCFG-200 | SmartConsole | In "Gateways and Servers" view, gateways are missing status when managing more than 1000 gateways. This fix supports statuses up to 5,000 gateways. |
| PRJ-783 | SmartConsole | In some scenarios, user cannot delete a VS object since it is referenced by an automatically generated exception rule. Refer to [sk167272](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk167272). |
| PRJ-4431, PMTR-27392 | SmartConsole | In some scenarios, when there is a large quantity of unused permission profiles in the system, the CPM server takes a long time to start. |
| PRJ-4130, PRHF-1847 | SmartConsole | Administrators with "\\" in their username receive the "Error Occurred" pop-up when trying to view a packet capture. Refer to [sk140992](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk140992). |
| PRHF-2194, PRJ-4432 | SmartConsole | In some scenarios, Client certificate is removed when deleting Domain that is included in certificate's permissions. |
| PRJ-559, PMTR-2800 | SmartConsole | In some scenarios, custom time frame filter in Logs \& Monitor view returns wrong results. |
| PRJ-4354, CIS-2085 | SmartConsole | SmartConsole configuration settiings on Citrix clients are not saved after logging off. |
| MCFG-199, PRJ-2382 | SmartProvisioning | SmartUpdate generates audit log even when no action was taken. |
| PRJ-865, PRHF-3392 | SmartProvisioning | In VPN star community managed by SmartProvisioning, VPN tunnels may not be established after installing policy to CO gateway (center). Refer to [sk152612](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk152612). |
| PMTR-31278, PRHF-4404 | Security Gateway | Connectivity issues on some HTTPS sites (as login pages) when Security gateway is configured as proxy. Refer to [sk147878](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk147878). |
| PRJ-4105, PRHF-2796 | Security Gateway | In some scenarios, logs cannot be seen because the *log_indexer* process stopped working. |
| PRJ-3541, PMTR-28915 | Security Gateway | Possible performance impact on NAT port exhaustion scenarios. |
| PRJ-3029, PRHF-1865 | Security Gateway | In a rare scenario, Security gateway may crash when proxy is enabled. |
| PRJ-2072, PMTR-13868 | Security Gateway | In a rare scenario, FWD process unexpectedly exits and generates a core dump file. |
| PRJ-4807, PMTR-41392 | Security Gateway | Enabled avoiding source port allocation for specific predefined connections. |
| PRJ-2683, PMTR-3739 | Security Gateway | Enabling by default the HTTP Strict Transport Security (HSTS) policy on Check Point's portals (WebUI, Mobile Access, DLP, Captive Portal, UserCheck). Refer to [sk121795](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk121795). |
| PRJ-3369, PMTR-13884 | Threat Prevention | Deleting a Threat Prevention profile may fail if the IPS profile has many overrides. Refer to [sk136552](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk136552). |
| PRJ-3551, PMTR-3105 | HTTPS Inspection | In some scenarios, some web sites are loading for a long time and eventually fail to load. |
| PRJ-1919 | Identity Awareness | Security hardening for Identity Awareness Agent (IDA) enforcement according to XFF IP. |
| PRJ-4232, PRHF-1495 | URL Filtering | In some scenarios, high latency for HTTPS traffic is observed when using URL Filtering. Refer to [sk140213](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk140213). |
| PRJ-1024, PMTR-3398, SWG-1879 | URL Filtering | In some scenarios, many messages similar to "*appi_rad_uf_cmi_handler_async_service_cb* " are listed in */var/log/messages* file. Refer to [sk156572](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk156572). |
| PRJ-688, PMTR-26827 | Application Control | In some scenarios, custom Application Object that was initiated with wrong "Application Risk" value may cause connectivity problems. Refer to [sk140892](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk140892). |
| PRJ-3674, PMTR-32168 | Logging | In a rare scenario, Security gateway starts to log locally even if logs are sent to backup server. |
| PRJ-1689, PMTR-22797 | Logging | Machine statuses in "Gateways and Servers" disappear from SmartConsole and reappear periodically. |
| PRJ-868, PRHF-2806 | Logging | In a rare scenario, SmartConsole does not show indexed logs because the *log_indexer* process stopped working. Refer to [sk152934](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk152934). |
| PRJ-1309, PRHF-3681 | Logging | In the Logs \& Monitor view, the "File size" field is missing from the logs generated by Media Encryption \& Port Protection blade. Refer to [sk157952](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk157952). |
| PRHF-4975, PRJ-4060 | Logging | In some scenarios, when exporting logs with "Visible columns" option selected from SmartView, some columns return empty record. Refer to [sk161712](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk161712). |
| PRJ-2676, PRHF-3831 | Logging | In a rare scenario, the accounting of bytes in a report is not accurate. |
| PRJ-1156, PRHF-3561 | Logging | In SmartView, if a view contains 2 map widgets, one displaying source countries and the other displaying destination countries, drilling down on one of them may display incorrect data. |
| PRJ-2643, SL-2509 | Logging | Running views and reports with a filter fails if the filter contains a "NOT" operator combined with parentheses. |
| PRHF-4497, PRJ-3208 | Logging | In some Full HA environment scenarios, the "*Logserver \ is disconnected*" error pops up in SmartConsole log view. |
| PRJ-1323, PRHF-3690 | Logging | In some scenarios, when running *mdsstart* , the following error message is shown: "*/opt/CPSmartLog-R80.20/bin/smartlogstop: line 65: /opt/CPmds-R80.20/customers/\/CPSmartLog-R80.20/log/smartlogRun.log: No such file or directory*". |
| PRJ-1240, SL-2002 | Logging | Running views or reports that contain the *attack* / *attack_info* fields may fail or not be completed. |
| PRJ-2912, PRHF-1554 | Logging | In some scenarios, the log maintenance mechanism deletes the earliest logs due to mistake in Emergency mode maintenance. Refer to [sk161712](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk163813). |
| PRJ-1274, SL-1052 | Logging | In a rare scenario, when an environment has many gateways (dozens), FWM on the log server may crash when reaching to 4 GB memory. |
| PRJ-3627, PRHF-2607 | Logging | In some scenarios, when SAM activity is defined and a Log server receives a high amount of packets, the FWD porcess on the Log server unexpectedly exits. |
| PRJ-2144, PRHF-4105 | ClusterXL | In a rare scenario, the *fw_workers* process consumes high CPU on the Standby member of a ClusterXL. Refer to [sk156333](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk156333). |
| PRJ-419 | SecureXL | In some scenarios, it may take a long time to remove some connections from the SecureXL connections table. |
| PRJ-1173, SPC-2008 | SecureXL | Fast Accelerator (*sim fastaccel*) does not support different number of rules for different VS's on VSX environment. |
| PRJ-629, PRHF-5533 | SecureXL | In some scenarios, latency is observed on the Security gateway when SecureXL is enabled. Refer to [sk162914](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk162914). |
| PRJ-417, PRHF-5267, PRHF-3649 | SecureXL | In some scenarios, DHCP relay traffic is dropped with the "*dropped by handle_outbound_pac, Reason: connection not found*" error, although the policy and DHCP relay are configured correctly. |
| PRJ-4088, PMTR-21608 | SecureXL | In some scenarios, dmesg shows drops from link collisions in Performance Pack when using NAT Dynamic port allocation. Refer to [sk162252](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk162252). |
| PRJ-34, ROUT-318 | Routing | In some scenarios, Routed Pnote in 'Problem' state and ClusterXL member is down after enabling OSPF. Refer to [sk123317](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk123317). |
| PRJ-33, ROUT-209 | Routing | Enhancement: Improved the memory handling mechanism in Routed. |
| PRJ-3142, GAIA-2861 | Gaia OS | In some scenarios, the IGB driver interfaces are occasionally down after reboot of a Management machine. Refer to [sk135532](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk135532). |
| PRJ-2334, PRJ-2335, PMTR-26981 | Gaia OS | Added '*pigz* ' and '*unpigz*' binaries. |
| PRJ-4643, PRJ-4644, 02473276 | Gaia OS | "*Authentication failure* " error when authenticating with TACACS+ user that has special characters in their password. Refer to [sk101332](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk101332). |
| PMTR-37425, PRJ-1402 | Gaia OS | Backup task fails if SmartConsole is open during backup. |
| PRJ-531, PMTR-1424 | Gaia OS | In some scenarios, the LSI MegaCli tool used to monitor Smart-1 3050 and 3150, unexpectedly exits. |
| PRJ-4933, PRHF-4416 | Gaia OS | In a rare scenario, failing scheduled backup from the Management server causes the SCP server password to appear in HEX. |
| PRJ-3795, PRHF-1778 | Gaia OS | Enhancement: The maximum size of the arp table was increased to 4096. |
| PRJ-1028, GAIA-5047 | Gaia OS | Changing the *xmit-hash-policy* of the bond may cause all static arp entries to disappear from the *arp -a* output. Refer to [sk152892](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk152892). |
| PRJ-4685, SPC-1903 | VSX | In some scenarios, running the "*fw vsx resctrl monitor disable* " command or disabling VSX Resource Monitor via CPView causes crash of the VSX Gateway. Refer to [sk144432](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk144432). |
| PRJ-161 | VPN | In some scenarios, simultaneous login is not enforced on Capsule VPN / Connect for Mobile devices in IPsec flow. |
| PRJ-2957, CRYPT-210 | VPN | After running "*cpca_client re_sign_ca" and "mcc replace*", SmartConsole shows the same Internal CA certificate. |
| PRJ-2875, PMTR-38894 | VPN | Connectivity improvement for Remote Access clients in environments with 3rd party VPN tunnels. |
| **R80.10 Jumbo HotFix - General Availability Take 225 (04 August 2019, GA from 04 September 2019)** |||
| PRJ-601, PRJ-648 | Security Management | Added ability for R80.10 Security Management or Multi-Domain Server to manage R80.30 Security gateway. Refer to [sk149272](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk149272). * To fully resolve the issue, R80.10 SmartConsole Build 137 (or higher) should be installed. |
| PRJ-714, PMTR-36761, CPM-2191 | Security Management | Enhancement: added feature for tracking random CPM process crashes on Security Management server. Refer to [sk150913](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk150913). |
| PRJ-1899, PMTR-38614 | Security Management | After opening and searching in pickers for a few times, the "*error retrieving results*" message appears when opening a picker. |
| PRJ-672, PMTR-36302 | Security Management | In some scenarios, Check Point services fail to start and the CPM log shows that there are duplicate session aggregators. |
| PRJ-1920, CPM-2300 | Security Management | In a rare scenario, CPM server does n?t start after failure in deleting domain. |
| PRJ-1378, PRHF-3514 | Security Management | In a rare scenario, upgrade from R77.x to R80.x fails with *cpdb* core dump file created. |
| PRJ-1304, PRJ-1303 | Security Management | When running '*add-domain*' Web API command on an existing Domain, the original Domain is deleted. |
| PRJ-1241, PRHF-2012 | Security Management | High CPU utilization by FWM process when SmartEvent is enabled on the Security Management Server. Refer to [sk147563](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk147563). |
| PRJ-449. PRHF-3283 | Security Management | In a rare scenario, a failure in policy installation causes a false "*Policy installation is currently in progress*" error message. |
| PRJ-591, PRHF-3300 | Multi-Domain Management | Multi-Domain Server processes must be down when running *cma_migrate*. |
| PRJ-1400 PMTR-29769, CPM-1730 | Multi-Domain Management | The Multi-Domain Management database size grows significantly causing operations like "*mds restore*" and HA full sync to take much longer time. |
| PRJ-1687, SMCUPG-719 | Multi-Domain Management | "*Delete Domain Server failed: 'Could not send Message*.'" error on Domain deletion attempt failure when there is a large amount of gateways in this Domain. |
| PRJ-2385, PMTR-38670 | Multi-Domain Management | In a rare scenario, CPM server fails to start after successful Domain deletion. |
| PRJ-1102, PMTR-25835 | Multi-Domain Management | API is missing a validation allowing the assignment of permissions to MDS Super-User. |
| PRJ-2302, PMTR-39001, GAIA-3984 | SmartConsole | Added Management support for 16000 and 26000 appliances. * Requires R80.10 SmartConsole Build 137 (or higher). |
| PRJ-1432, PMTR-31155 | SmartConsole | In some scenarios, SmartConsole unexpectedly closes when installing policy on many targets simultaneously. |
| PRJ-152, PMTR-35845 | SmartConsole | In some scenarios, Installation Targets do not show the correct gateways when cloning and editing the installation targets in the same session. |
| PRJ-1142, API-549 | SmartConsole | Management API command "*put file*" can be used for command execution with certain permissions. |
| PRJ-589, PMTR-36527 | SmartConsole | Redundant layers appear in the output of *show-package* command when Global policy holding more than 1 layer is assigned to Domain. |
| PRJ-785 | SmartConsole | In a rare scenario, invalid IPS packages and empty lines appear in 'Switch version' window under IPS update. |
| PRJ-248, PMTR-35836 | SmartConsole | "*Runtime error: java.lang.String incompatible with com.checkpoint.management.web_api_is.common.multi_values.objects.MultiStringForSet*" error when trying to set a tag to ICMP and ICMP6 services or set those services into a group with API command. |
| PRJ-1188, PRHF-3134 | Security Gateway | In some scenarios, when Graceful Restart is enabled, not all BGP routes are advertised. |
| PRJ-605, PRHF-3117 | Security Gateway | In a rare scenario, *routed* process unexpectedly exits when ECMP is enabled for both IBGP and EBGP. Refer to [sk162547](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk162547). |
| PRJ-843, PMTR-35251, PMTR-34543 | Security Gateway | OpenSSL is vulnerable to Padding Oracle Timing / Side Channel Attack. |
| PRJ-74, PRHF-2868 | Security Gateway | Added ability to monitor the number of SYN packets on the Security Gateway. |
| PMTR-32539, IDA-1803, PRJ-1861 | Identity Awareness | Users are not authenticated when an identity source provides the login name in an 'User Principal Name' format "*user@domain* ". Refer to [sk147417](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk147417). |
| PMTR-32057, PMTR-36871, PMTR-37867, PRJ-1861 | Identity Awareness | The output of *pep show pdp all* command on the Identity Gateway (PEP) contains "*inx invalid type (0)* " instead of an Identity server (PDP) IP address. Refer to Scenario #3 in [sk156953](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk156953). |
| IDA-1981, IDA-2032, PRJ-1629, PRJ-1861 | Identity Awareness | In some scenarios, users are not propagated from the Identity server (PDP) to the Identity Gateway (PEP) on a specific network. |
| IDA-1987, PRHF-4175, PRJ-1955 | Identity Awareness | In a rare scenario, sessions longer than 24 hours disappear from the Identity Gateway (PEP) but exist on the Identity server (PDP). |
| IDA-1966, PRHF-4508, PRJ-1748 | Identity Awareness | In a rare scenario, identities are missing from all connected Identity Gateways (PEPs). |
| IDA-2067, IDA-1892, PRJ-1947 | Identity Awareness | Performance improvement of Identity Awareness kernel tables for Cluster and multi-fw1 instances gateways. |
| PRJ-942, UP-258, PMTR-23445 | Application Control, URL Filtering | In some scenarios, it takes time to load a website when certain applications/links in Application Control/URL Filtering rulebase are blocked. Refer to [sk135132](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk135132). |
| PRJ-1821, PRHF-3890 | SSL Inspection | Added support of RDP over SSL inspection as part of Inbound HTTPS Inspection blade. (Relevant for [Remote Desktop Protocol Vulnerability CVE-2019-0708](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk154232).) |
| PRJ-1554, PMTR-37434 | Logging | * In some scenarios with low disk space and customized retention configuration, logs and indexes may be deleted contrary to the configuration. * In some cases, logs are not forwarded when log forwarding in enabled on a Log server machine. |
| PRJ-345, PMTR-19854, PRHF-1915 | ClusterXL | SNMP variables for VRRP MIB are now available in R80.10. Refer to [sk141334](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk141334). |
| PRJ-1329, PRHF-3032, 02541089 | SecureXL | In a rare scenario, Security Gateway freezes / crashes when SecureXL is enabled and multicast routing is configured. Refer to [sk119299](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk119299). |
| PRJ-2374, PRJ-2375 | Gaia OS | CVE-2019-11477, CVE-2019-11478 \& CVE-2019-11479: TCP SACK PANIC - Linux Kernel vulnerabilities. Refer to [sk156192](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk156192). |
| PRJ-1868, PRJ-1677 | Gaia OS | Clish command "*show system init-services* " and Expert command "*service --status-all* " run "*mdsstart*" on the server. |
| **R80.10 Jumbo HotFix - Ongoing Take 214 (04 June 2019)** |||
| PMTR-22530, PMTR-22677, MBS-2739 | Security Management | Management API on an R80.10 Management Server does not support Security Gateways R80.20SP. |
| PMTR-27538, PMTR-27797 | Security Management | False message "*peer failed to synchronized me* " appears in Multi-Domain Server HA window although machines are successfully synced. Refer to [sk151392](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk151392). |
| PRJ-95, PRHF-2762 | Security Management | In some scenarios, the *postgres.elg* file grows and fills up the disk space. Refer to [sk143852](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk143852). |
| PMTR-22975, PMTR-21449 | Security Management | In a rare scenario, Application Control policy installation fails with "*Load on Module failed - failed to load security policy* " error, caused by the string dictionary table overflow on the Security gateway. Refer to scenario 3G in [sk33893](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk33893). |
| PMTR-27993, API-526 | Security Management | The size of the policy has a significant performance impact when adding a rule to the bottom of policy via API. |
| PMTR-30694, API-569 | SmartConsole | When using the Threat Exception API and specifying Anti-Virus or Anti-Bot protection, the request fails with "*Protection cannot be found*" error message. |
| PMTR-17190, PRHF-2129 | SmartConsole | In some scenarios, Access Policy Hitcount shows zero in the Hitcount column. Refer to [sk150492](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk150492). |
| PMTR-35705, PRHF-3127 | SmartConsole | Enhanced the policy verification error message related to end of Legacy URL Filtering support by adding the list of gateways that are using it. Refer to [sk110116](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk110116). |
| PMTR-22200, API-392 | SmartConsole | In some scenarios, "*show package* " API command fails with "*generic_server_error* ", reporting "*Unable to get all policies because access policy container not used* ". Refer to [sk136432](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk136432). |
| PMTR-34788, PRHF-2252 | SmartConsole | "Get Gateway Data" returns "*Execution error*" for cluster object in SmartUpdate. |
| VPNRA-189, PRJ-160 | SmartView Monitor | In some scenarios, SNX client is not seen in SmartView Monitor tracking page after connecting to the Security gateway. |
| PMTR-33423, SL-1997 | SmartView Monitor | SmartView Time filter does not work correctly if the server Time Zone is different than the client Time Zone. |
| PMTR-35201, PMTR-12088 | Multi-Domain Management | When using an inline layer in a Global policy, during installation of a policy with "rule hide rule" verification, the wrong rule numbers show in the Policy Installation window. Refer to [sk125672](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk125672). |
| PRJ-45, PMTR-2403 | Multi-Domain Management | In some scenarios, Global policy assignment fails with "*An internal error has occurred* " error. Refer to [sk155412](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk155412). |
| PRJ-65, PRHF-1880, PMTR-245 | Security Gateway | In some scenarios, the following error appears in dmesg: "*cmik_loader_fw_dyn_parsers_is_set_conn_flag_on_up_conn: failed to retreive the 'parsers_is_opq' or it doesn't exists on that connection*". |
| PMTR-34112, PMTR-32168 | Logging | In a rare scenario, Security gateway starts to log locally even if logs are sent to backup server. |
| PMTR-34331, PMTR-30064 | Logging | When logging in with web app to a Domain, the application name and correct IP address are not displayed in SmartConsole Sessions tab. |
| PMTR-31035, IDA-1689 | Identity Awareness | In rare scenario during Identity Agent or Terminal Server Agent IP change, PEP database becomes corrupted. |
| PRJ-360, PMTR-33177 | Identity Awareness | In some scenarios, when using Load Sharing, upon the same IP address used by two different users, users may be able to access or to be restricted from accessing resources without proper roles. |
| PMTR-33363, IDA-1225 | Identity Awareness | In some scenarios, session becomes corrupted on PDP side, leading to unexpected behavior. |
| PMTR-33237, PMTR-32352 | IPS | R77.x gateways managed by R80.x Security Management show that IPS blade is enabled while it is disabled on the gateway object. Refer to [sk146592](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk146592). |
| PRJ-118, PRHF-327 | IPS | When inspecting raw logs, entries with "origin = 0.0.0.0" can be seen under IPS logs, while logs in the SmartConsole appear fine. |
| PMTR-35095, MB-30 | ClusterXL | New validation added: Starting from R80.20, ClusterXL does not support Load Sharing mode. SmartConsole blocks such configuration with a warning message. |
| PMTR-34633, PMTR-34634 | Gaia OS | After installing R80.10 Jumbo Hotfix on 6800/6500 appliances running R80.10 installed from Dual ISO, the Hardware diagnostic tool cannot recognize certain NICs. |
| **R80.10 Jumbo HotFix - General Availability Take 203 (25 March 2019, GA from 12 May 2019)** |||
| PMTR-31335 | General | **NEW:** Added support for 6500 and 6800 appliances. Refer to [sk139932](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk139932). |
| PMTR-32772, PMTR-28379 | Security Management | **NEW:** Added ability to manage Check Point R80.20SP and Check Point Maestro. |
| PMTR-33029, SMCPOL-195 | Security Management | OSE policy cannot be viewed without installing it on device. |
| PMTR-29497, PRHF-1960 | Security Management | Manual changes in INSPECT files under *$FWDIR/lib* directory of compatibility packages are not synchronized from active to standby Management servers. Refer to [sk143792](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk143792). |
| PMTR-29584, PMTR-29856, PMTR-29855 | Security Management | Policy installation fails with "*IPv6 addresses domain is not supported for Remote Access VPN community* " message when using Domain object in Remote Access encryption domain. Refer to [sk142832](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk142832). |
| PMTR-29921, PMTR-28958, PMTR-29923 | Security Management | "*Error retrieving results*" message is displayed in SmartConsole after searching for unused objects in Object Explorer. |
| PMTR-23744, MCFG-80 | Security Management | Unjustified validation error is displayed when installing Threat Prevention policy on Cluster object: "*Threat Prevention requires topology to be defined.* *At least one internal, one external, and no undefined interfaces are required. Incorrectly defined topology impacts performance and security.* *Please install both Access Control and Threat Prevention policies after fixing the topology.*" |
| PMTR-28643, PMTR-28557 | Multi-Domain Management | In some scenarios, the *fwm sic_reset* command from Domain fails with "*reset_objects: updateMultiple failed* " message. Refer to [sk142512](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk142512). |
| PMTR-17991, PRHF-359, PRHF-714 | Multi-Domain Management | In some scenarios, the Interpreter process unexpectedly exits. Refer to [sk132892](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk132892). |
| PMTR-21787 | Multi-Domain Management | CPView is not supported on Multi-Domain Server environments. |
| PMTR-8603, PMTR-30286 | Multi-Domain Management | Multi-Domain Server GUI randomly does not reflect the Domain Management objects change. |
| PMTR-31520, PMTR-31800 | SmartConsole | When using the "*add/set simple-gateway*" API command and specifying backup log servers, the input servers are not saved in the same order as listed in the request. |
| PMTR-34013, API-595 | SmartConsole | Number of sessions in "Changes" list does not match the value of 'total'. |
| PMTR-28058, PMTR-31248 | SmartConsole | When an administrator publishes session for a different administrator, the name of the administrator that invoked the action will be written in the audit logs as the publisher. |
| PMTR-12448, PMTR-12430 | SmartConsole | When searching in the SmartConsole main search bar for network groups we can see some number of network groups, but the search inside the Logical Server object shows the different number of Logical server objects groups. |
| PMTR-30570, IDA-1120 | Security Gateway | Group update request is sent specifically to the originator LDAP server even if it is down. Refer to [sk127833](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk127833). |
| PMTR-21207, PMTR-20424 | Security Gateway | In rare scenarios, Security Gateway runs out of kernel memory and may stop processing traffic, printing "*double record of connection* " message in /var/log/messages file. Refer to [sk143432](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk143432). |
| PMTR-31314, PRHF-2244 | Security Gateway | In some scenarios, TCP state information is not displayed in the log despite being enabled in SmartConsole. |
| PMTR-21080, UP-251 | Security Gateway | A large number of Time objects used in the rule base may cause rulebase matching failures resulting in connectivity issues. |
| PMTR-17490, PRHF-642 | Security Gateway | When working with NAT on DNS payload and having disabled NAT rules, NAT on DNS payload may not work. Refer to [sk132032](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk132032). |
| PMTR-28414, PMTR-30657 | Identity Awareness | When X-Forwarded-For (XFF) settings are enabled on one of the policy layers or/and on the Security gateway object, the*/var/log/messages* file shows errors related to asynchronous identity fetch. Refer to [sk145673](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk145673). |
| PMTR-11999, PMTR-3286 | Threat Prevention | In some scenarios, creation of a new gateway upgrade to R80.10 fails with "*An internal error has occurred. (Code: 0x8003001D, Could not access file for write operation*)" message. |
| PMTR-25755 | Threat Prevention | In some scenarios, IPS purge makes a deadlock for some GUI clients, resulting in "*Timeout error* " error. Refer to [sk150312](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk150312). |
| PMTR-31100 | Threat Extraction | In some scenarios, extracted Microsoft Azure files contain only blank pages. |
| PMTR-24066, PRHF-134 | Threat Emulation | Non-ASCII named files cause the undecoded non-ASCII characters to appear in the Threat Emulation log. |
| PMTR-27876, AVIR-370 | Anti-Malware | Traffic from the client to the bogus IP address is handled according to the Access Control policy, but not logged as "prevented". Refer to [sk141853](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk141853). |
| PMTR-30608, PMTR-29583 | Logging | In rare scenarios, when the Log server miscalculates the available disk space, it may stop receiving logs from the connected gateways and cause the logs to accumulate locally on the Security gateway. Refer to [sk146152](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk146152). |
| PMTR-30217, TPM-1378 | IPS | "*A general error has occurred*" message appears when trying to edit the IPS Protection settings. |
| PRHF-523, PMTR-16583 | IPS | Some SMTP-related IPS Core Protections remain enabled despite the IPS is disabled. |
| PMTR-31135, SA-99 | Mobile Access | Mobile Access Portal Agent installation page is vulnerable for XSS attack in Chrome and Firefox. |
| PMTR-15461, PMTR-21043, PMTR-28348 | SecureXL | Added support for i40evf driver. |
| PMTR-22503, MB-166, PMTR-28064 | SecureXL | In some scenarios,*virtio_net* is not able to run multiqueue. |
| PMTR-35032 | VPN | Important security update for IPSec Site-to-Site (S2S) VPN. |
| PMTR-27144, 02657434 | VPN | Improved connectivity with 3rd party VPN peers using IKEv2. Refer to [sk120835](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk120835). |
| PMTR-30870, PMTR-21587 | VPN | Connectivity improvements for certain Windows L2TP client versions. Refer to [sk145895](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk145895). |
| PMTR-19379, PMTR-23292, PMTR-23293, 02031663 | Gaia OS | The CLISH command "*show arp table dynamic all* " and Bash command "*arp -an* " show different entries. Refer to [sk112753](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk112753). |
| PMTR-15738, PRHF-270 | Gaia OS | In some scenarios, *routed* process unexpectedly exits when a VPN tunnel interface is deleted without removing the dynamic routing protocols. |
| PMTR-18254, PMTR-18255 EPS-17135 | Endpoint Security | In some scenarios, SmartEndpoint shows different numbers of reported "Anti-Malware signature was not upgraded in the last 72 hours" between the warnings and the Active alerts section. |
| **R80.10 Jumbo HotFix - General Availability Take 189 (12 February 2019, GA from 03 March 2019)** |||
| PMTR-32542, PMTR-32187 | Multi-Domain Management | * Log servers are not seen in the SmartConsole Log Server tab after Advanced Upgrade to Jumbo Hotfix Accumulator Take 33 or after adding new MLM to the environment. * After new Domain creation, logs from this Domain are not seen in SmartConsole. |
| PMTR-28470, PMTR-329 | Security Gateway | Before R80.10 Jumbo Hotfix Accumulator Take 189, the Probing feature is set, by default, to *Fail Open* . From Take 189, the default behavior is changed to *Fail Close* . Refer to [sk104717](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk104717). |
| **R80.10 Jumbo HotFix - Ongoing Take 185 (22 January 2019)** |||
| PMTR-29919, PMTR-27655 | Security Management | Values updated in *resourceProfiles* files to handle high CPU utilization for "Java" process (described in [sk123417](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk123417)) are not resistant and get overridden after Jumbo Hotfix Accumulator installation or backup/restore or export/import procedures. |
| PMTR-25817, PMTR-25793 | Security Management | Once user performs any change to his configuration, the Compliance blade performs a partial scan and calculates the relevant Best practices. During this scan, exceptions of relevant objects for these Best practices are deleted. Meaning, if previously obj1 was excluded from applying Best practice #1, during partial scan obj1 will be relinked to Best practice #1. |
| PMTR-26826, PMTR-25909 | Security Gateway | Added support for NAT on payload of H323 packets when different IP addresses are used for payload and control. |
| PMTR-28490, DO-902 | Security Gateway | In some scenarios, traffic is dropped when using non-FQDN Domain object in policy. |
| PMTR-28195, PMTR-27742 | Security Gateway | No service enforcement when creating "Other services" without match expression for TCP, UDP or SCTP. |
| PMTR-27366, IDA-1609 | Identity Awareness | In some scenarios, Identity Agent fails to authenticate using Kerberos SSO due to very large Kerberos ticket and the agent fallback to User/Password authentication. Refer to [sk145832](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk145832). |
| PMTR-21925, CP-299 | Anti-Malware | Added support for more than 10000 IOC indicators to improve capacity and performance. |
| PMTR-24802, PMTR-28320 | Threat Emulation | Added ability to update Threat Emulation file types in an offline environment. |
| PMTR-27869, PMTR-27889 | Threat Extraction | The *scrub_cleanup* script fails to delete files when there is a large amount of files (over 5000) in the */tmp/scrub* directory. |
| PMTR-26537, PMTR-26474 | SmartConsole | "*Error: SIC initialization failed because of failure in parsing the certificate file*" error when user attempts to log in with certificate to API (mgmt_cli) with password including "!". |
| PMTR-29457, PMTR-26606 | SmartConsole | "Synchronization with Check Point UserCenter" feature displays "*Synchronization with Check Point UserCenter requires a valid license*." warning message even though all licenses are valid. |
| PMTR-25588, API-512 | SmartConsole | Web API *show-package* fails if the package was installed on a cluster member which is already deleted. Refer to [sk144132](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk144132). |
| PMTR-29045, SL-1538 | Logging | When Security gateway is configured to send alerts only to a specific Log server, logs may be written locally on the gateway instead to be sent to the Log server. |
| PMTR-29008, SL-1878 | Logging | After configuring mail alerts to be sent using "*internal_sendmail* " script, emails from Check Point server arrive with blank email body. Refer to [sk142492](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk142492). |
| PMTR-25638, SL-1752 | Logging | When scheduled log switch is set to midnight in SmartConsole, logs and indexes are not being deleted according to configuration. |
| PMTR-26697, PMTR-26696, CP-11 | Logging | After Daylight saving time change, the logs from the time of change until the end of the day are not indexed and the "*Illegal instant due to time zone offset transition (daylight savings time 'gap')* " error is displayed in *solr.elg* file. |
| PMTR-24738, PMTR-18469 | Logging | In some scenarios, Log indexer stopped indexing logs because of a corrupted row in FetchedFiles. |
| PMTR-28970, PMTR-29049 | VPN | Remote Access VPN connectivity process when authenticating with certificates was improved. |
| PMTR-11377, 02100804 | VPN | After Cluster failover, VPN tunnel is down and "*Unknown SPI for IPsec packet* " log is shown. Refer to [sk112339](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk112339). |
| PMTR-26021, PMTR-25770 | HTTPS Inspection | When HTTPS Inspection is enabled and "Hide X-Forwarded-For in outgoing traffic" option is selected, the XFF header is not obfuscated on HTTPs traffic. |
| PMTR-26171 | SSL Inspection | Change SSL Network Extender on MacOS to 64-bit architecture to support 32-bit apps depreciation in OSX. |
| PMTR-22965, 01604908 | SSL Inspection | Traffic to HTTPS websites is dropped on "*Unknown Traffic* " category, if the certificate length sent from web server exceeds the limit. Refer to [sk105321](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk105321). |
| PMTR-26140, 01967376 | SSL Inspection | Added support to custom extension used by Apple. |
| PMTR-16544, CLUS-937 | ClusterXL | In some scenarios, local traffic between cluster members is dropped due to out of state. Refer to [sk123795](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk123795). |
| PMTR-22839, 02535956 | SecureXL | Memory consumption on Security Gateway increases after enabling NetFlow v9 in Gaia OS. Refer to [sk118719](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk118719). |
| PMTR-11959, 02567792 | SecureXL | Connectivity issues with "*handle_outbound_pac, Reason: connection not found* " debug messages on dropped traffic. Refer to [sk101134](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk101134), Scenario 2. |
| PMTR-28839, PRHF-1502 | Gaia OS | When using conv2db to recreate Gaia database from */config/active* , comments are not skipped and the new database file may contain irrelevant information. Refer to [sk139832](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk139832). Note: the issue is cosmetic only. |
| PMTR-8411, PMTR-8869 | Gaia OS | The "*iotop*" command does not work on Smart-1 525, 5050 and 51580 appliances. |
| PMTR-23155, GAIA-3010, PMTR-26453 | Gaia OS | CVE-2018-15473: Username enumeration is possible due to a premature bail-out while dealing with a malformed packet. The issue exists in several authentication protocols. |
| PMTR-20000, GAIA-2493 | Gaia OS | Connectivity problem for 10 Gigabit fiber network interfaces (*be2net* driver) after upgrade from R77.30. |
| PMTR-13024, PMTR-9624, GAIA-3597 | Gaia OS | In some scenarios, BIOS sensor randomly goes into "*unknown* " state. Refer to [sk138332](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk138332). |
| PMTR-25685 | VSX | In some scenarios, vpnd process unexpectedly exits and there is no decrypt log. |
| PMTR-28424, PMTR-11165 | VSX | There is no failover after disabling a monitored VLAN after upgrade to R80.10. Refer to [sk128692](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk128692). |
| PMTR-28021, VSX-1895 | VSX | Traffic from a Virtual System in VSX Cluster to Security Management Server is dropped with "*Local interface address spoofing* " log. Refer to [sk110473](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk110473). |
| **R80.10 Jumbo HotFix - Ongoing Take 177 (26 December 2018)** |||
| PMTR-26796, PMTR-26802 | Security Management | When creating a Security Gateway object and click OK, SmartConsole may close with "*The connection with the server was lost.*..." error. |
| PMTR-23409 | Security Management | Cannot create new object from SmartConsole after upgrading Security Management server to R80.10. Refer to [sk139812](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk139812). |
| PMTR-25487, PMTR-25218 | Security Management | When Database is more than 100 objects and searching for the objects in the Objects Explorer and scrolling down, list of items disappears and the results in the bottom-left show "*No items found* ". Refer to [sk139793](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk139793). |
| PMTR-23377, PMTR-25006, PRHF-1385 | Security Management | In some scenarios, purge operation fails with "*Task was interrupted because of server restart*" message and the CPM process unexpectedly exits, producing core dump file. |
| PMTR-22755, PMTR-21811, PMTR-21868 | Security Management | When using Global Dynamic Network objects, creating a new policy package in a local Domain fails with '*Internal error*' if it is assigned to the Global Domain. |
| PMTR-23132, CPM-1662 | Security Management | Access role changes of public sessions are missing audit logs and causing synchronization error. |
| PMTR-25183 | Multi-Domain Management | Cannot export logs to Excel from SmartView connected to Multi-Domain Log Server. Refer to [sk140433](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk140433). |
| PMTR-26180, PMTR-21125, PMTR-26133 | SmartEvent | In large-scale environments, log_indexer process may unexpectedly unexpectedly exit producing 3.5GB core file. |
| PMTR-21633, PMTR-27331 | SmartConsole | Upon resuming purge operation that was not completed in a single-domain server, the "*purge is already in progress*" message is displayed repeatedly, although there is no purge operation in progress. |
| PMTR-23295, PMTR-23080, PMTR-26750, PMTR-23297 | SmartConsole | HTTPS Inspection rule with mixed Access Role and network object cannot be enforced. |
| PMTR-14661, TP-1953 | SmartConsole | "*SessionInWorkLoginException* " error when using the API "*discard* " to discard a connected session other than the current session. Refer to [sk142534](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk142534). |
| PMTR-11398, 02063066 | Security Gateway | UDP server to client connections are not getting rematched. Refer to [sk121933](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk121933). |
| PMTR-23852 | Security Gateway | Memory leak in FWD process. |
| PMTR-12764, PRHF-173, UP-216 | Security Gateway | Many "*fw_up_get_application_opaque: Failed to retrieve conn_opaq* " messages in the */var/log/messages* file. |
| PMTR-17087, PMTR-12889 | Security Gateway | In some scenarios, when configuring rule with CIFS resource, policy enforcement does not work as expected and is denied to access all the permitted CIFS shares. As a result, all CIFS traffic is dropped. |
| PMTR-19178, PMTR-18866 | Security Gateway | In some scenarios, the */var/log/messages* file is full with messages "*Error:up_classifier_notify_clob_from_cmi: _up_handle structure is corrupt 0000000000000000*". |
| PMTR-14588, PMTR-22784, 02768662, 02769044, MBS-4743 | Security Gateway | Potential Security gateway crash after running "*cpstop* " when using IP pool NAT. Refer to [sk162712](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk162712). |
| PMTR-23464, 02661309 | Security Gateway | DNS NAT does not work when the DNS parser encounters an IPv6 record in DNS servers answer. Refer to [sk121346](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk121346). |
| PMTR-24201, PMTR-416 | Security Gateway | In rare scenarios, Security gateway crashes due to certain flow in NAT dynamic port allocation. |
| PMTR-20173 01619796 | Security Gateway | Security gateway does not load policy after reboot when number of SAM rules reaches its limit of 25000. Refer to [sk110560](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk110560). |
| PMTR-23317, PMTR-23567 | Logging | A Domain administrator connected to a specific Domain in Multi-Domain Server environment cannot see suggestions when typing in logs search box. |
| PMTR-22564, SL-1594, PMTR-22562 | Logging | In rare scenarios, monitoring information (such as licensing information, CPU usage, etc.) displayed in SmartConsole and SmartView Monitor is not updated. Refer to [sk137092](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk137092). |
| PMTR-17242, PMTR-17241, SL-1536 | Logging | Reports with enabled "Add summary row" feature fail to be processed. |
| PMTR-18140, SL-1219 | Logging | Unable to export a 3 month report to PDF for any period other than up to current date. Refer to [sk135452](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk135452). |
| PMTR-26423, AVIR-125, PMTR-21436, PMTR-11534 | Anti-Malware | Anti-Spam bypass shows "*Temporary Scan failure*" message on IP Reputation. |
| PMTR-25289, PRHF-1556 | Threat Prevention | In some scenarios, Advanced Upgrade fails with different errors due to NULL pointer exception check. |
| PMTR-23379 | Threat Emulation | In rare scenarios, Threat Emulation log card description "File is pending emulation" is incorrect. |
| PMTR-12790, PRHF-1 | Application Control | While reporting miscategorized items using email through UserCheck Portal in the event that the activity contains the "\&" character, the rest of the email message is truncated. Refer to [sk124073](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk124073). |
| PMTR-26588, IDA-1604 | Identity Awareness | In some scenarios, MUH session Access Role is missing on PDP but exists on PEP, causing next PEP to PDP sync to be removed from PEP and thus the accessibility loss. |
| PMTR-25152, USF-215 | SecureXL | Added support for SecureXL Fast Accelerator (*sim fastaccel* ). For more information, refer to [sk139772](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk139772). **Note**: This functionality is supported only for R80.10 with Jumbo HFA Take 177 and higher. Customers who upgrade to releases other than R80.10 will lose this functionality. |
| PMTR-9488, PMTR-9448 | SecureXL | In rare scenarios, traffic is accepted or dropped although not in the time frame, defined by the Time object. |
| PMTR-22505 | SecureXL | In rare scenarios, Security gateway crashes when offloading multicast nexthops to SAM when configuring PIM in Sparse mode on the interfaces. |
| PMTR-22504 | SecureXL | In rare scenarios, Security gateway crashes when running multicast jumbo traffic packets while the SAM Acceleration card is enabled. |
| PMTR-16754, 02552764 | SecureXL | If SecureXL is enabled, output of "*fwaccel stat* " command shows "*Accelerator Status : off by Firewall (failed to update link selection due to error 3)* " after a policy installation. Refer to [sk119833](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk119833). |
| PMTR-22465, PRHF-1156 | SecureXL | SNMP data and CPView count statistics for outgoing interfaces differs after upgrade. |
| PMTR-20376, CLUS-1137 | ClusterXL | When working in Load Sharing mode, the value of "Not held due to no members" counter in the output of "*cphaprob syncstat*" command is displayed wrong. |
| PMTR-16007, 02663779 | VPN | Unable to connect with SHA-512 user certificate on Windows Capsule. Refer to [sk121418](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk121418). |
| PMTR-24290, VSECC-785 | CloudGuard | Attempt to install central license on CloudGuard gateway fails with "*not vSec product*" error. |
| PMTR-17889, PRHF-864, PMTR-19838, PMTR-23288, 02561478, 02559704 | Gaia OS | After adding the RBA roles Gaia commands (*add rba role TACP-0 virtual-system-access all* ), the lines are missing from the "*show configuration* " command output, but the values can be seen in Expert mode (*/config/active* ). Refer to [sk119394](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk119394). |
| PMTR-20499, PRHF-1259, PRHF-1882, PRHF-1571 | Gaia OS | Added SHA2 encryption for Gaia users passwords for Smart-1 525, 5050 and 5150. |
| PMTR-11335, PMTR-25658, 01579916 | Gaia OS | Added the host name column to the Syslog messages. Refer to [sk100727](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk100727). |
| PMTR-25878, PMTR-24803 | Gaia OS | Security Management / Multi-Domain Management server OS backup fails due to package compression errors. Refer to [sk121212](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk121212). |
| **R80.10 Jumbo HotFix - General Availability Take 169 (27 November 2018, GA from 26 December 2018)** |||
| PMTR-23990, PRHF-1450 | Security Management | Policy installation fails with "*Policy installation had failed due to an internal error* " message when Security gateway has more than hundred interfaces. Refer to [sk138592](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk138592). |
| PMTR-24005, PMTR-22022 | Security Management | Remote Access users configured with Pre-Shared Secret Key (PSK) cannot connect after upgrade from R77.x. |
| PMTR-22277, PMTR-23219, PMTR-23217 | Security Management | Log in to the primary Multi-Domain Server GUI fails due to HA and logging objects synchronization generating high load. |
| PMTR-22725, PMTR-22508, PMTR-23500 | Security Management | Upgrade from R77.30 fails with "*Object SyncUsrCntr could not be deleted because it is referenced by other objects*" exception. |
| PMTR-22894, PMTR-10245 | Security Management | The */var/log* partition fills up with the core dump files when Management server is overloaded. |
| PMTR-23698, 02499554 | Security Gateway | The following errors may be displayed while uploading archive with several data types: * *"Application Control - HTTP parsing error occurred"* * *"Content Awareness - Error: Invalid state in protocol (11)"* * *"HTTP parsing error occurred, bypass request"* |
| PMTR-14596, PMTR-10574 | Security Gateway | DCOM traffic (part of DCERPC services) is dropped by Security gateway when allowing specific DCOM services. |
| PMTR-25227, PMTR-25078, PMTR-25181, IDA-1226 | Identity Awareness | Improved error handing when Identity Sharing is used and remote PDP server does not respond due to prolong outage. Refer to [sk141152](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk141152). |
| PMTR-24535, IDA-1434 | Identity Awareness | Improved error handling when Identity Sharing is used and XFF is enabled but parsing the XFF headers is not required. |
| PMTR-25286, PMTR-25287, PMTR-25106 | Identity Awareness | User's access to a network resource may fail in the following scenario: * Access to a network resource is through an Identity Awareness Gateway (configured as PEP) * In SmartConsole, the Identity Awareness Gateway object is configured with "Identity Awareness -\> Identity Sharing -\> Get identities from other gateways -\> All sharing gateways" * The sharing Identity Awareness Gateway (configured as PDP) that shares identities with the affected Identity Awareness Gateway (configured as PEP), opens an identity sharing connection not from its main IP address Refer to Scenario 1 in [sk156953](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk156953). |
| PMTR-25103, IDA-1396 | Identity Awareness | Identity sharing fails when XFF is enabled and remote PDP does not respond. |
| PMTR-23898 | Logging | * Added new "GDPR security report" report. * The "Security Checkup report" was updated with the new content. |
| PMTR-23418, PMTR-23417 | Logging | In some scenarios, the Logs \& Monitor -\> Logs section in SmartConsole is stucked on searching. Refer to [sk144313](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk144313). |
| PMTR-22950, 02490101 | VPN | VPN Tunnel instability problem when working with Cisco Gateway using IKEv2. Refer to [sk116776](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk116776). |
| PMTR-22825, VSECC-734 | CloudGuard | CloudGuard Controller Data Center objects are not enforced on Multi-Domain Server. Refer to [sk139372](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk139372). |
| **R80.10 Jumbo HotFix - Ongoing Take 167 (12 November 2018)** |||
| PMTR-22521 | All | Added ability for R80.10 Security Management or Multi-Domain Server to manage R80.20 Security gateway. To enable this: * Install R80.10 Jumbo Hotfix Accumulator Take 167 or higher * Install R80.10 SmartConsole Build 89 or higher (refer to [sk119612](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk119612)) Note that if you choose to not upgrade to R80.20 Security Management server or Multi-Domain Server, the new features will not be supported. |
| PMTR-20498 | Gaia OS | Added SHA2 encryption for Gaia users passwords (excluding Smart-1 525, 5050 and 5150). |
| PMTR-16440, PRHF-530, 01743689 | Gaia OS | Sensors display order is incorrect in the output of "*cpstat os -f sensors* " command. Refer to [sk107672](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk107672). |
| PMTR-20038, PMTR-22373 | Gaia OS | "*/opt/CPInstLog/uninstall_SecurePlatform_R80_10_JHF_PLATO:Uninstallation failed!*" error during uninstallation of Jumbo Hotfix Take on Smart-1 device. Newer version of RPMs remain installed after uninstall. |
| PMTR-11977, PMTR-20018, 02567615 | Gaia OS | An event logged in */var/log/messages* is generated multiple times in consecutive order, and the *syslog* daemon compresses all repeated attempts with entry "*last message repeated X times* " in */var/log/messages* file. Refer to [sk119913](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk119913). |
| PMTR-20425, PMTR-14191, PMTR-20370 | Gaia OS | In some scenarios, machines with the igb driver (on-board Mgmt/Sync and 1G expansion cards) receive the "*Detected Tx Unit Hang* " messages in */var/log/messages* file. |
| PRHF-734, PMTR-11728 | Security Management | In rare scenarios, the CPM service does not start on machine startup. |
| PMTR-22967, MCFG-45 | Multi-Domain Management | The license status for the MDS shows as "*N/A* " in SmartConsole's License Report. Refer to [sk132575](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk132575). |
| PMTR-18007, PMTR-18004 | Multi-Domain Management | After cloning a policy package that has an assigned Global Policy package, the Domain layers in the placeholder of some of the assigned global layers are not cloned and empty. Refer to [sk134012](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk134012). |
| PMTR-12050, PMTR-13198 | Multi-Domain Management | Cannot synchronize secondary Domain Server after migrating new Domain with *cma_migrate.* Refer to [sk127954](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk127954). |
| PMTR-20295, API-409 | SmartConsole | When specifying from-date in the "*show-changes*" Management API command, changes of the first session in range are not displayed. |
| PMTR-23062, PMTR-22415 | SmartUpdate | SmartUpdate hangs on launch due to over 4000+ unattached licenses. Refer to [sk136512](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk136512). |
| PMTR-20272, 02692416 | SmartView Monitor | In some scenarios, SmartView Monitor shows more throughput than what actually goes through the Security gateway. |
| PMTR-15575, 02436860 | Content Awareness | Content Awareness supports HTML forms using URL encoding (also known as Percent-encoding). HTML traffic, encoded (binary to text encoding) as Base64 and NCR, is not properly inspected for content. |
| PMTR-14858, PMTR-14633 | Threat Extraction | TIFF images replacement on PDF files sometimes fails and can corrupt the file. |
| PMTR-21559, PMTR-21393 | Anti-Malware | In rare scenarios, a Security gateway crashes in mail_security code due to out of bound memory access. |
| PMTR-21913, PMTR-16557 | DLP | Improved DLP file type detection when uploading files to Gmail. |
| PMTR-6238, IDA-623 | Identity Awareness | High CPU usage after policy installation when PDPD is running. Refer to [sk122352](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk122352). |
| PMTR-19899, PMTR-19733 | Identity Awareness | Enabling Packet Tagging and MUH traffic enforcement takes effect only after reboot. |
| PMTR-21289, PMTR-19167 | SSL Inspection | Several applications are not matched correctly when Application Control and HTTPS Inspection are enabled. |
| PMTR-18923, PRHF-743 | SSL Inspection | HTTPS traffic is inspected when it is configured to be bypassed: when HTTPS Inspection is enabled and probe bypass is 0. Refer to [sk132913](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk132913). |
| PMTR-19664, PMTR-19049 | Routing | PIM standby node crashes when adding multiple VPN tunnels with the same local endpoint as PIM interfaces. |
| PMTR-20075, PMTR-18338 | SecureXL | "*sume_from_fw_forward: dropping packet of for vsid=0 due to loop prevention*" dmesg errors during policy installation failure. |
| PMTR-19063, 02305365 | SecureXL | In a rare scenario, in SIP implementations, call may disconnect after a few minutes. Refer to [sk112913](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk112913). |
| PMTR-11941, PMTR-13827, 02482488 | CoreXL | CoreXL FW instance offloads a partial/anticipated connection that already exists. Refer to Scenario 5 in [sk100467](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk100467). |
| PMTR-20161, PMTR-5366 | CoreXL | When running the "*fw ctl multik stop*" command several times, only the target instance of the last command is stopped, while others start working again. |
| PMTR-21760, 02630742 | Mobile Access | In some scenarios, Capsule Workspace Push notifications are not received. Refer to [sk120334](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk120334). |
| PMTR-21684, VPNRA-99 | VPN | In a rare scenario, Security gateway randomly drops all SNX packets on a connection attempt. |
| PMTR-19532, 02550811 | VPN | When a second user behind the same router connects with an L2TP client, the first user that is already connected gets disconnected. Refer to [sk119141](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk119141). |
| PMTR-12787, IDA-982, PMTR-23382 | VPN | User cannot connect to a VPN site that belongs to a group that has a special character in its name. Refer to [sk124514](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk124514). |
| PMTR-17652, PMTR-16730, PMTR-17651, PMTR-16731, PMTR-17648, PMTR-16734 | VPN | Improved IKE negotiation stability in S2S with 3rd party devices. |
| PMTR-17650, PMTR-16732 | VPN | When NAT-T is detected, Security gateway not always switches to port 4500, causing a VPN tunnel termination. |
| PMTR-10457, 02708339 | VPN | Site-to-Site VPN cannot be established with IKEv2 on VSec for Azure / CloudGuard for Azure. Refer to [sk122675](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk122675). |
| PMTR-21859, VPNS2S-280 | VPN | Improved fragmentation handling for TCP over VPN. |
| PMTR-19703, PMTR-8170 | VPN | Tunnel to 3rd party device fails if IKE-ID is not equal to local outbound interface. |
| PMTR-17289 | VSX | In rare scenarios, VSX gateway crashes under heavy load when SecureXL is enabled. |
| PMTR-19973, 02757621 | Endpoint Security | "*Cannot create certificate* " error message when cannot enroll user certificate on Endpoint Security VPN client after January 24th 2018. Refer to [sk122874](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk122874). |
| PMTR-18402, PMTR-9755 | Acceleration Card | In rare scenarios, Security gateway crashes after enabling Acceleration Card and using the *ipsctl*utility. |
| **R80.10 Jumbo HotFix - General Availability Take 154 (16 October 2018, GA from 23 October 2018)** |||
| PMTR-23151 | All | R80.10 Jumbo HotFix support for R80.10 image *Take 479*. |
| **R80.10 Jumbo HotFix - Ongoing Take 151 (02 October 2018)** |||
| PMTR-18655 | Security Management | Changes for LDAP Account Unit priority performed from SmartConsole per Security gateway, are not saved in database. * Requires R80.10 SmartConsole Build 073 (or higher). |
| PMTR-17198, PMTR-9087, PMTR-13128 | Multi-Domain Management | Global Policy Assignment fails with "*Task failed* " error with no details. Refer to [sk123578](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk123578). |
| PMTR-15142, PMTR-19143 | Multi-Domain Management | There is no clear error message in case of a license violation during Multi-Domain Server database import. |
| PMTR-15111, PMTR-18242 | Multi-Domain Management | CMA/Domain upgrade failure indication was improved. |
| PMTR-14649, PMTR-12942 | Multi-Domain Management | In Multi-Domain Server environment, Compliance updates do not take effect although a success message is presented in Compliance Overview. |
| PMTR-7361 | Multi-Domain Management | When trying to delete a Domain in a Multi-Domain Server, operation fails with "*Delete Domain failed: Trying to update a detached objectthrough ObjectStoreSession* " error. Refer to [sk124492](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk124492). |
| PMTR-12247, THREATEMUL-3847 | Threat Emulation | Added new implied rule to allow communication from TED to SYMO. |
| PMTR-22236, PMTR-20344 | Application Control | The *fw_full* (*fwd* daemon) unexpectedly exits producing a core dump fila and causing a cluster failover. |
| PMTR-9852, PMTR-19993 | HTTPS Inspection | The following errors may be seen in *dmesg* and */var/log/messages* when enabling HTTPS Inspection: ``` [ERROR]: rad_kernel_urlf_request_set_url: cp_lstring_search for path slash failed [ERROR]: nrb_https_inspection_column_category_fill_rad_request: rad_kernel_urlf_request_set_url() failed [ERROR]: nrb_rulebase_default_match: virtual match_func failed for column 'External Column' (11) [ERROR]: nrb_rb_https_inspection_match: virtual rb_match_func failed ``` |
| PMTR-18692, IDA-1150 | Identity Awareness | MUH Agent sends unnecessary MUH updates causing high CPU on PEP, which leads to delays with getting identities and can cause connectivity issues. |
| PMTR-19154, IDA-1250, IDA-648 | Identity Awareness | PDPD daemon unexpectedly exits periodically when the configured Account Unit contains Domain Controllers that are all defined as "Ignored". |
| PMTR-18661, PRHF-808 | Identity Awareness | In rare scenarios, PDPD daemon unexpectedly exits repeatedly during groups update process. |
| PMTR-20144, IDA-1176, PRHF-721 | Identity Awareness | Update with "-" machine name from the Domain Controller causes the Identity Collector to create un-authenticated sessions on the PDP. |
| PMTR-16060, PMTR-10601, IDA-763 | Identity Awareness | In some cases, users are associated not with all LDAP groups to which they actually belong. Therefore, data from the LDAP server may be sent in different order. |
| PMTR-8958, PMTR-21600, SL-690 | SmartEvent | "*No matches found for your search* " message in the browser when searching for a user's name when it starts with 0 and contains only numbers. Refer to [sk122294](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk122294). |
| PMTR-16588, SL-1363 | Logging | When setting *'log_delete_below_metrics* ' to MBytes, '*log_delete_below_value* ' cannot be set to more than quarter of disk size. When setting it with '*log_delete_below_metrics* ' to percent, '*log_delete_below_value* ' is unlimited. Refer to [sk133473](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk133473). |
| PMTR-17415, PMTR-15486 | SmartConsole | SmartConsole exits at the "Initializing Services" stage of login. |
| PMTR-15841, PMTR-2085, PMTR-19958, PMTR-14469 | SmartConsole | Running "Get Interfaces without Topology" automatically enables Anti-Spoofing. Refer to [sk136372](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk136372). |
| PMTR-9858, GAIA-2202 02526946 | Gaia OS | *tcpdump* exits with "*Buffer overflow* " messages when running "*tcpdump -i any -eP*" command. |
| PMTR-8477, PMTR-8479, PMTR-2295 | Gaia OS | New connections to the gateway are rejected due to too many "*kernel: dst cache overflow* " messages in */var/log/messages* file. |
| PMTR-14932, MPTT-141 | VPN | Route based VPN stability was improved. |
| PMTR-14933, VPNS2S-215 | VPN | MSS clamping cooperation with SecureXL in certain scenarios was improved. |
| PMTR-14920, PMTR-8075 | VPN | Improving IPSEC renegotiation stability in S2S with 3rd parties. |
| PMTR-15949, PMTR-15954, PMTR-15955, PMTR-16379 | Security Gateway | R80.10 Security Gateway send some wrong SNMP VRRP OID's. Refer to [sk130412](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk130412). |
| PMTR-5259, PMTR-18368, 02536701 | Security Gateway | Client packets stay not NATed in connection table if NAT fails. |
| PMTR-11894, PMTR-4734 | Security Gateway | Link collisions in Security Gateway due to race condition in cluster environment. |
| PMTR-18574, CLUS-1097 | ClusterXL | ClusterXL stability during policy installation was improved. Refer to [sk133372](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk133372). |
| PMTR-20985, ROUT-125 | ClusterXL | When there is a large number of BGP peers and interfaces and ClusterXL failover occurs, resulting CPU utilization can be high for a few minutes on the old active member. During this time, *routed* did not respond to queries such as "*show route*" command in clish. |
| PMTR-19667, PMTR-17973 | ClusterXL | With a large number of eBGP peers (\>200), RouteD daemon repeatedly unexpectedly exits. |
| **R80.10 Jumbo HotFix - Ongoing Take 142 (21 August 2018)** |||
| PMTR-19132 | Threat Prevention | **NEW:** Added new Threat Prevention capabilities. For more information, refer to [sk122853](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk122853). New feature in Mail Transfer Agent (MTA): MTA is now updatable (refer to [sk123174](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk123174)). The first MTA engine update contains several enhancements and new features, including: * Setting a next-hop server by Domain name. * Removing/replacing malicious links \& attachments from e-mails with a customizable text. * Adding a customized text to a malicious e-mail's body or subject. * Malicious e-mail tagging using an X-header. * Sending a copy of the malicious e-mail. |
| PMTR-5685, 02696314 | Security Management | Inplace upgrade from R77.30 to R80.10 fails with "*Invalid white space character* " message. Refer to [sk122098](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk122098). |
| PMTR-10306, PMTR-19066 | Security Management | Security Management migration to R80.10 fails due to *NumberFormatException* . Refer to [sk125272](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk125272). |
| PMTR-9663, PMTR-18829 | Security Management | Following an upgrade from R77 to R80.10, 'Inspection Settings' view will not correctly reflect overridden actions. This does not affect the Security Gateway that continues to receive the correct overridden actions. |
| PMTR-15318, PMTR-15613 | Security Management | Performance issues in the Management HA incremental HA synchronization mechanism of the Global Domain. |
| PMTR-12006, PMTR-11175 | Security Management | Performance optimization of Compliance Blade in large scale environment. |
| PMTR-12446 | Security Management | Added infrastructure support for AWS Transit VPC. |
| PMTR-9000, PMTR-18966 | Security Management | Upgrade to R80.10 fails with "*Maximum Number of Child Elements limit (50000) Exceeded* " message. Refer to [sk123857](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk123857). |
| PMTR-16063 | Multi-Domain Management | Global Domain Assignment fails with "*Missing protection 'Protection_Name' in profile 'Default Inspection' in the global domain* " message. Refer to [sk130492](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk130492). |
| PMTR-15065, CPM-1625 | Multi-Domain Management | When attempting to import Multi-Domain Server or Multi-Domain Log Server database onto R80.10 machine, the import script fails with "*The IP address of the source and target Secondary Multi-Domain Servers/Multi-Domain Log Servers must be the same.* " error. Refer to [sk129092](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk129092). |
| PMTR-717, 02569693 | Multi-Domain Management | DBsync unexpectedly exits during a CMA import from R77.x. |
| CPM-1404, PMTR-12819 | Multi-Domain Management | After changing the name of a Multi-Domain Server, the previous name is still shown in the Domain editor. |
| PMTR-3872, PMTR-18309 | Multi-Domain Management | "*No MD role specified* " error when migration\\upgrade of Multi-Domain Server pre-R80 MDS to R80.10 fails. Refer to [sk123862](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk123862). |
| PMTR-8236 | Multi-Domain Management | The *mdsstat* command was updated for Smart-1 525, 5050 and 5150 Appliances. |
| PMTR-7744, PMTR-18982 | Multi-Domain Management | *"dleserver.utils.UidManager"* errors on *cma_migrate* failure on Multi-Domain Server upgraded from R80. |
| PMTR-16843, PMTR-9344 | Multi-Domain Management | Upgrade from R77.X to R80.10 of Multi-Domain Server environments that use partial assignments and have more than 50 Domains and local policies (combined), has inconsistent assignment settings (loss of data). |
| PMTR-17774 | Multi-Domain Management | Cannot log in to upgraded Multi-Domain Server due to IP duplication source database. |
| PMTR-20164 | Security Gateway | Check Point response to SegmentSmack (CVE-2018-5390) \& FragmentSmack (CVE-2018-5391). Refer to [sk134253](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk134253). |
| PMTR-17571, PMTR-17576 | Security Gateway | After upgrade to R80.10, BGP peer is stuck in Active state. Refer to [sk131592](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk131592). |
| PMTR-6011, 02701016 | Security Gateway | Dynamic ID does not send correctly a username using the*$NAME* tag. |
| PMTR-6008, 02669026 | Security Gateway | Dynamic ID fails with "*Dynamic ID authentication failed* " error after upgrade to R80.10. Refer to [sk124953](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk124953). |
| PMTR-9982, PMTR-6005, IDA-775 | Security Gateway | Dynamic ID does not work with specific vendors that require user's phone number. |
| PMTR-17083, PMTR-17901 | Security Gateway | BGP communities are not correctly matched by routemaps, resulting BGP routes not being populated and not advertised. |
| PMTR-16621, PMTR-18028 | Security Gateway | BGP connections from point-to-point clustered interfaces are rejected. |
| PMTR-11667, PMTR-15610 | Security Gateway | Security Gateway unexpectedly exits in some scenarios when Mobile Access blade is enabled in Unified Policy mode and Security Zones are used in the security policy. |
| DOMO-9, PMTR-16311 | Security Gateway | Traffic drops after adding rules with Domain objects and installing policy. Refer to [sk133253](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk133253). |
| PMTR-17414, 02689115 | Security Gateway | Emails remain in the spool when SMTP Resource Rule is defined. Refer to [sk122010](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk122010). |
| PMTR-12167 | Security Gateway | "*dynamic objects -c*" command returns partial output when more than 20 Dynamic objects are defined on the Security Gateway. |
| PMTR-15421 | Security Gateway | Traffic to span port interfaces is dropped when Security Zones are used in Access policy. |
| PMTR-17399 | Security Gateway, Security Management | The CPView Utility was improved: * Added new capability to collect and present I/O data. * Enabled CPView History collection on Management machines. |
| PMTR-8455 | Routing | NetFlow IPv6 daemon cannot be started after upgrade from R77.30 due to missing bindings in configuration file. |
| PMTR-10917, 02426496, 02474798 | Routing | RouteD daemon unexpectedly exits or OSPF Adjacency is stuck in "Loading" state when receiving OSPF LSA of Type 10 and Type 11. Refer to [sk115314](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk115314). |
| PMTR-11392, 01593435 | Routing | VRRP member freezes when deleting a VLAN interface. Refer to [sk106226](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk106226). |
| PMTR-12798, PMTR-10503 | Routing | Enabling ping option for static routes causes the routes to disappear on the standby member. |
| CPM-1381, PMTR-10927 | SmartConsole | After upgrade to R80.10, validation incidents do not disappear although solving the error. Refer to [sk123357](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk123357). |
| PMTR-14250, PMTR-18053 | SmartConsole | "*Policy installation had failed due to an internal error*" message on policy installation failure when using Native Mobile Access application that uses '\*Any' services (with no other existing Native Mobile Access applications that use other services in the system). |
| PMTR-12813, TPM-1007 | SmartConsole | Cannot update the Security gateway object when using permission profile without write permissions for Threat Prevention policy. |
| PMTR-14653, API-180 | SmartConsole | API is missing targets information in reply of "*install-policy*" command when installing on more than 50 targets. The reply holds the first 50 targets only. |
| PMTR-12782, SL-1110 | SmartEvent | SmartEvent's Automatic Reaction emails are missing information in some fields. Refer to [sk133032](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk133032). |
| SL-1464, PMTR-18204 | SmartEvent | In 'LOGS \& MONITOR' tab, HTTPS Inspection queries show no results. Refer to [sk133392](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk133392). |
| PMTR-7545, PMTR-7405, 02489539 | Logging | When certain security rule definition includes the "Alert -\> mail" log track option, email alerts have ".." at the end which means some fields were truncated. Refer to [sk123240](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk123240). |
| PMTR-13899 | Logging | When running "SmartConsole -\> Logs \& Monitor -\> Queries -\> Threat Prevention -\> IPS Blade -\> Staging" query in non-index mode, the "*There is a problem to read log file. Try again*" error is displayed. |
| PMTR-10071, PMTR-3322, 02503468 | Logging | When generating a view of any report, the "Problem has occurred during search" errorpops up with details: "*Query resolution failed. Logs may not display properly*". |
| PMTR-17353 | Mobile Access | Multi-factor authentication with Dynamic ID using Email does not work when the email address ends with '*t* ' or '*n*'. |
| IDA-735, PMTR-7985 | Identity Awareness | Identities are not synced to PEP if two PDPs will report the same network Refer to [sk130373](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk130373). |
| PMTR-6226, IDA-550, PMTR-8718 | Identity Awareness | When using multiple PEP gateways with the same internal IP address, only one of the PEP gateways gets identities from PDP. |
| PMTR-13166, IDA-949 | Identity Awareness | RADIUS accounting server does not understand accounting-response from Check Point gateway. Refer to [sk130532](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk130532). |
| PMTR-11965, 01500409 | Identity Awareness | "*Group membership of the required account (user or machine) could not be retrieved from the AD. Make sure the account exists in the AD* ." log is received from Identity Awareness blade when format of RADIUS user is "*user@domain* ". Refer to scenario 6 in [sk106133](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk106133). |
| PMTR-17129, 01786753 | Identity Awareness | AD users with special characters in their names cannot authenticate. Refer to [sk131872](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk131872). |
| PMTR-10269, PMTR-663 | DLP | The *dlp_fingerprint* and *cp_file_convert* processes consume CPU at high level although DLP blade is disabled. Refer to [sk102213](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk113398). |
| PMTR-17822, PMTR-17783 | IPS | New logs of IPS update tool are created in *$FWDIR/log* directory on a daily basis. For more information refer to [sk131652](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk131652). |
| PMTR-7252, PMTR-17432, PMTR-3135 | IPS | No packet capture is received with IPS protection log. Refer to [sk121605](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk121605). |
| PMTR-17134, PMTR-17469 | IPS | Failures during batch update of IPS objects. |
| PMTR-9114 | IPS | Snort protections are not fully enforced after upgrade from R77.x to R80.10. Refer to [sk123575](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk123575). |
| PMTR-7924, PMTR-3091 | Anti-Malware | Threat Prevention policy installation fails with "*malware_policy_get_ioc_override() failed*" message when disabling the "Enable indicator scanning" option. |
| PMTR-15102, PMTR-16351 | Application Control | Some non-SSL applications are identified as 'Unknown Traffic' when Application Control, URL Filtering and 'Categorize HTTPS Sites' are enabled. |
| PMTR-12335, 01431893 | Application Control | Non-SSL traffic is dropped with "*appi_rad_uf_cmi_handler_server_response: no hello done, failed* " error message in dmesg when "Categorize HTTPS sites" feature is enabled. Refer to [sk64162](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk64162). |
| PMTR-9355, PMTR-17726, 02694599 | Gaia OS | Output of "*show message motd* " clish command is corrupted if the "motd" message is too long. Refer to [sk122199](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk122199). |
| GAIA-1532, PMTR-7822 | Smart-1 | Pressing \ (autocomplete mechanism) from the Expert mode of Smart-1 525, 5050 and 5150 does not convert paths stored in variables (like *$FWDIR*) to full paths. |
| PMTR-5576 | VSX | Trusted Source feature does not work in VSX environment. Refer to [sk122533](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk122533). |
| PMTR-12886, 02667600 | SecureXL | Multiple RX drops during policy installation under high load traffic. Refer to [sk123312](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk123312). |
| PMTR-15631, 02508263 | SecureXL | Connectivity issue during policy installation when NAT templates are enabled between CPUs. |
| PMTR-13127, PMTR-10631 | SecureXL | EIGRP traffic going through Security Gateway in bridge mode with SecureXL enabled, is randomly dropped. Refer to [sk125632](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk125632). |
| PMTR-11321, 02340209 | SecureXL | When the Dynamic Dispatcher is enabled together with SecureXL NAT templates, traffic on port 80 and 443 is dropped with "*Instance mismatch (inbound)* " messages. Refer to [sk113398](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk113398). |
| PMTR-16773, 02447010 | VPN | "*You cannot receive an office Mode IP address because the security gateway does not have a license for Office mode* " error on SSL Remote Access VPN client (SNX client / Capsule VPN client / Capsule Connect client / Endpoint Connect client) that tries to connect to a Cluster in High Availability mode. Refer to [sk120652](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk120652). |
| 02441588, PRHF-233, PMTR-11416 | VoIP | Avaya VoIP calls with Avaya Call Manager may fail through the Check Point Security Gateway. Refer to [sk104786](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk104786). |
| PMTR-5487, 02669997 | Hardware | Improved forensics with host-side PCIe drivers during shutdown, during Seurity gateway crash triggered by a SAM-related problem. |
| PMTR-10569, VSECC-609 | CloudGuard | After installing policy, when adding a new Data Center object and running "Menu" -\> "Verify Access Control Policy", the verification may fail with the "*Rule 1 Hides rule 2 for Services \& Applications: Any* " error message. Refer to [sk123572](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk123572). |
| **R80.10 Jumbo HotFix - Ongoing Take 131 (19 July 2018)** |||
| PMTR-9748 | Security Management | Monitoring view does not show the ClusterXL status of VSX members. |
| PMTR-14149, PMTR-14416, PMTR-16997 | Security Management | In some scenarios, API login requests fail with "*errorCode \[CP_ERR_COULD_NOT_CONNECT_FWM\]"* error in *api.elg* file. |
| PMTR-9440, API-280 | SmartConsole | When changing the administrator profile by API in Multi-Domain Server, the following scenarios may occur: 1. Modifying administrator's profile may not take effect, previous permissions are still configured and may be enforced. 2. User can configure "Permission profile per domain" in addition to "Multi-Domain Super User" or "Domain Super User" not knowing it may not take effect. |
| PMTR-15572, API-338 | SmartConsole | In some scenarios, the "*show package*" API command fails due to timeout. |
| PMTR-10861, API-268 | SmartConsole | On environments with many revisions, "*show-changes*" API calls take long time to finish and can cause API server to terminate unexpectedly. |
| PMTR-14634, 02775187 | Security Gateway | Using two Domain objects for the same domain name, one with "www." prefix and the other without, in different rules in the rulebase may cause those rules not to be enforced correctly. |
| PMTR-2653, PMTR-4733 | Security Gateway | Domain objects of domain names that are defined in local hosts file are not enforced. |
| PMTR-14694, PRHF-257 | Security Gateway | A rule with Security Zone object may not be correctly matched for broadcast traffic. |
| PMTR-16561, PMTR-15022 | Security Gateway | Performance optimization of services and applications matching process. Refer to [sk128452](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk128452). |
| PMTR-9133, PMTR-12783, SL-982 | SmartEvent | After upgrade of a dedicated SmartEvent server, Object synchronization status appears as "Failed" in the status window of SmartEvent GUI. |
| PMTR-9186, PMTR-10070 | SmartEvent | When setting up clear connection between the Security Management server and R80.10 SmartEvent server per [sk101928](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk101928), Log indexer clear connection could not be established. Refer to [sk123580](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk123580). |
| PMTR-10074, PMTR-13687 | SmartEvent | Added ability to filter logs in queries and reports using the "Packets" field. |
| PMTR-10072, PMTR-3320, 02504996 | SmartEvent | Automatic reaction is not initiated when selecting the "*Send automatic reactions but do not generate an event*" option in SmartEvent policy. |
| PMTR-8959, SL-1112 | Logging | In some scenarios, the "Logs \& Monitor" view is stuck on searching and does not respond to any query. |
| PMTR-13098, 02714001 | Threat Emulation | The system cannot emulate files due to lack of disk space. Refer to [sk124712](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk124712). |
| PMTR-14612, PMTR-14587, PMTR-14621, PMTR-14619, PMTR-16581 | Gaia OS | Security hardening for Gaia OS WebUI. |
| PMTR-15646, CLUS-938 | ClusterXL | In CloudGuard Azure clusters environments, some packets are incorrectly identified as Cluster Control Protocol packets, potentially causing error logs related to cluster state. In some cases, this can lead to a cluster failover. |
| PMTR-12884, PMTR-12109 | SecureXL | In some scenarios, when SecureXL is enabled, Security gateway crashes under heavy load while opening a new connection from template mask. |
| **R80.10 Jumbo HotFix -- General Availability Take 121 (24 June 2018, GA from 19 June 2018)** |||
| PMTR-14713 | Data Center Security Appliances | Added support for 23900 appliances. Refer to [sk107516](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk107516). |
| PMTR-8482, 02693254 | Security Management | When configuring Legacy User Authentication rules, it is not possible to choose 'Group-With-Exclusion' in the option. Refer to [sk122100](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk122100). |
| PMTR-10959, PMTR-10810 | Multi-Domain Management | FWM process unexpectedly exits during initialization when there are many VSs in database. |
| PMTR-9350, CPM-1454, PMTR-12823 | Multi-Domain Management | Domain migration from R77.30 to R80.10 fails when the exported Domain is of a standalone machine. |
| PMTR-10811, PMTR-10803, CPM-1525 | Multi-Domain Management | It is impossible to install policy from Domain Server after failing attempt to install policy from Multi-Domain Server. |
| PMTR-9439, 02644200 | Multi-Domain Management | Import of R77.30 Security Management to R80.10 Multi-Domain Server using *cma_migrate* fails with "error 0x80004005 (Unspecified error)" in upgrade log. Refer to [sk120497](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk120497). |
| PMTR-7160, 02718576 | SmartConsole | In some cases, SmartConsole exits when changing a name entry in the user field. Refer to [sk122917](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk122917). |
| PMTR-3115 | SmartConsole | When creating new 1400 SMB appliance in SmartConsole, the Platform Type menu is empty. Refer to [sk111292](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk111292%20). |
| PMTR-8793 | SmartConsole | The "*api status"* command was enhanced to include Apache status and to collect additional log files. |
| PMTR-12268 | SmartConsole | When reinstalling policy on two cluster members, the override policy dialog does not display all cluster members in the list. |
| PMTR-7073, PMTR-8716 | SmartConsole | "*Update operation failed* " error when editing a group of Applications/Sites which are used in a Threat Prevention Exception rule. Refer to [sk124932](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk124932). |
| PMTR-10011 | SmartConsole | In some scenarios, when trying to remove gateways from VPN community or edit a VPN community object, the operation fails with "*Update operation failed*" error. |
| VSECC-551, PMTR-10257, PMTR-10344 | CloudGuard | OpenStack v3 is now supported on Keystone server v3. |
| PMTR-9619, 02665634 | Identity Awareness | DynamicID authentication randomly unexpectedly exits after policy installation. Refer to [sk121213](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk121213). |
| PMTR-13831, PMTR-12971 | Logging | No "*query resolution failed* " logs on natted Management after following solution for Scenario 1 from [sk100583](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk100583). |
| PMTR-9968, 02562533 | Logging | The 'Access Rule Name' field is blank/missing in "Logs \& Monitor" view when using filter *blade: "URL Filtering"* or *blade:"Application Control"* . Refer to [sk123974](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk123974). |
| PMTR-11244, PMTR-11242 | Logging | When searching for logs in "Logs \& Monitor" view with specific time filter from the past, the response may contain logs generated after that time range. |
| PMTR-12009, PMTR-12000, PMTR-3665 | Logging | In SmartView Monitor, changes to the Threshold settings of a Gateway are not properly saved or shown. |
| PMTR-12052, 01646584 | Cluster | Various traffic issues on cluster due to FWD daemon taking all slots on cluster subscriber list. Refer to [sk109596](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk109596). |
| PMTR-11902, PMTR-13723, PMTR-13723, UP-11, UP-211 | LTE | Firewall session logs without application or protocol are generated. Refer to [sk123715](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk123715). |
| **R80.10 Jumbo HotFix - General Availability 112 (23 May 2018, GA from 19 June 2018)** |||
| PMTR-2477, PMTR-10469, PMTR-2468 | WebUI | Gaia Portal shows blank page after log in with Firefox 5x or Chrome 66. Refer to [sk121373](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk121373). |
| PMTR-8249 | Security Management | Creating a Domain (Log) Server using an IP address that is already in use, fails with an uninformative error message "*Update Domain 'name' failed:Create Domain: 'name' - Create Domain server 'name'.Cannot create domain 'name*'". |
| PMTR-7418 | Security Management | *FWM* process unexpectedly exits when there is a soft link to *$FWDIR/tmp/fwmtrace.log* file that reaches 2GB due to enabling debug for a long period of time. |
| PMTR-8570, 02698348 | Security Management | *fw_loader*process unexpectedly exits due to invalid VPN community configuration. |
| PMTR-8206 | Security Management | *"An internal error has occurred"* message when trying to discard the disconnected session. Refer to [sk123741](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk123741). |
| PMTR-6048, PMTR-7403, 02512737 | Security Management | In some scenarios, Compliance blade Best practices show incorrect "*N/A* " status. Refer to [sk117292](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk117292). |
| PMTR-5747 | Security Management | In some scenarios, CPM and Solr may consume high CPU, causing SmartConsole to disconnect. |
| PMTR-2649 | Security Management | When connecting to an earlier revision version, some objects may not be visible if you: * ran *Purge Revisions* and rebooted your machine. * performed HA full sync from a Security Management server that ran *Purge Revisions*. |
| CPM-945, PMTR-9176 | Security Management | "*You have reached the maximum number of active sessions*" error on login failure when expired Web API sessions appear as disconnected in SmartConsole Sessions view and cannot be discarded. |
| PMTR-9180 | Security Management | Performance and stability improvements in Security Management Server when using CloudGuard IaaS. |
| PMTR-7670 | Security Management | In some scenarios, policy installation does not progress when installing policy from several Domains simultaneously. |
| PMTR-9029 | Multi-Domain Management | Global Domain Assignment may fail with "*Global Domain Assignment Failed: Failed to connect to FWM*" message when FWM is busy or not responsive. |
| PMTR-10840, PMTR-8562, 02686845, 02686649 | Multi-Domain Management | Some Security gateway objects are missing from the Gateways view in R80.10 Multi-Domain Server after migration. Refer to [sk121890](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk121890). |
| PMTR-5840, 02540859 | SmartConsole | When editing Security Management or Gateway object, the "*The referred entity does not exist in the Certificate Authority* " or "*Failed to save object. Server error is: An internal error has occurred* ." error pops up. Refer to [sk118938](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk118938). |
| PMTR-10665 | SmartConsole | When running multiple scripts on short time intervals from the Management API, the progres of some of the scripts stops at 10-20%. |
| PMTR-8679 | SmartConsole | In Multi-Domain Server, reassign or removal of a Global Domain assignment fails if you clone an assigned Threat Prevention profile in the Local Domain. |
| PMTR-7874, API-254 | SmartConsole | In Multi-Domain Server, when the user overrides global values in the UI or the API and then performs '*show service* ', the global values are displayed instead of the changes made by user. When the user tries to override the global values twice, the second try fails with "*Validation error* " message. Refer to [sk123334](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk123334). |
| PMTR-9564, API-283 | SmartConsole | The *web_api_show_package.sh* script fails if TLSv1.0 is disabled on Apache server, displaying errors: *ERROR: failed connecting to the server: 127.0.0.1* *Script stopped running due to severe error!* |
| PMTR-8136, 02726944 | SmartConsole | Cluster object still appears in the MDS level after it was deleted from a Domain. Refer to [sk123343](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk123343). |
| PMTR-7942 | SmartConsole | Cannot open WebUI to cluster member if SecurePlatofrm Main URL of the cluster has been changed. Refer to [sk123195](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk123195). |
| PMTR-8929, 02733670 | SmartConsole | "*Validation error - Invalid Domain name at .\*" message after successful upgrade to R80.10 or when creating a Domain object with an invalid name. |
| PMTR-9333 | SmartConsole | Using Management API to get Access rule hit count values without specifying start date returns 0 hits for all rules. Refer to [sk123736](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk123736). |
| PMTR-8114 | SmartUpdate | When clicking "*Generate CPInfo*" in SmartUpdate, the progress bar indicates that action is successful but CPInfo file is not created. |
| PMTR-5359 | CloudGuard | Data Center objects can be deleted for a short period of time due to disconnections of a Data Center. |
| PMTR-8934 | Security Gateway | Improved connectivity when using Domain objects and/or when gateway is configured as HTTP/HTTPs proxy. |
| PMTR-3901 | Security Gateway | In rare scenarios, CPD process unexpectedly exits when running for a long time period. |
| PMTR-11991 | Security Gateway | Traffic is droped with "*Rulebase - ERROR* " error in kernel debug. Refer to [sk133176](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk133176). |
| PMTR-3871 | Gaia OS | In some scenarios,*routed* process unexpectedly exits when OSPF is configured. |
| PMTR-8801 | Gaia OS | Gaia OS hardening fix. |
| PMTR-5560 | Gaia OS | In some scenarios,*routed* process unexpectedly exits when unnumbered interfaces are configured. |
| PMTR-7741, 02553209, 02669458 | Logging | When receiving logs with ELA protocol, FWD process core file may be generated. Refer to [sk121594](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk121594). |
| PMTR-5671, 02705815 | SecureXL | When sending multicast packets to multiple receivers behind several interfaces and SecureXL enabled, either only the hosts behind the VLAN outgoing interfaces receive the multicast packets or none will receive them. Refer to [sk122481](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk122481). |
| PMTR-6725, PMTR-11741 | Identity Awareness | PEP opens an unnecessary connection to PDP while there is no sharing configured between the PDP and PEP. Refer to [sk129392](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk129392). |
| PMTR-10466, 02758290, 02722485 | HTTPS Inspection | Improved handling of Trusted CAs certificates when HTTPS Inspection is enabled. Refer to [sk122973](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk122973). |
| PMTR-7811, PMTR-8999 | Mobile Access | SNX traffic is dropped by Security Gateway with "*Rulebase - ERROR* " message in "*fw ctl zdebug drop* " debug. Refer to [sk123336](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk123336). |
| PMTR-10782 | VSX | CPM Server fails to start due to postgres idle open connections. |
| **R80.10 Jumbo HotFix - General Availability Take 103 (12 Apr 2018, GA from 03 May 2018)** |||
| PMTR-7377 | Security Management | Management HA fails to synchronize with "*The Security Management Servers contain different Hotfixes* " error even though the same packages are installed on servers. Refer to [sk123048](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk123048). |
| PMTR-7668 | Security Management | Upgrade may get stuck if there is not enough memory allocated to the upgrade process. Refer to [sk123136](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk123136). |
| PMTR-6398 | Security Management | Externally managed gateways are displayed in SmartView Monitor although they should not be. * For each externally managed gateway that was already defined in the database, after Take installation, open this gateway object in SmartConsole, close the window and publish the session. After this you will not see them anymore in the SmartView Monitor. Refer to [sk122999](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk122999). |
| PMTR-7583 | Security Management | If one administrator creates a rule, deletes it, and publishes the changed policy (meaning that the rule's creation and deletion were published together), other administrators connected via SmartConsole will see an "any any drop" rule in the policy where the original rule was meant to be created. |
| PMTR-7164, PMTR-7803 | Security Management | Management HA performance improvements. Refer to [sk123313](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk123313). |
| PMTR-5407 | Security Gateway | Security fix for Client Authentication rule matching. |
| PMTR-3038 | Security Gateway | SecureXL forwards non-accelerated packets to the gateway, causing it to crash if the packet contains corrupted data. |
| PMTR-3433, 02667797 | SmartConsole | "*Could not delete object. An internal error has occurred* " error when removing old Security gateway object. Refer to [sk121593](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk121593). |
| PMTR-7055 | SmartConsole | After IPS update, protections with release date older than one year are removed from staging if they were changed during the update. |
| PMTR-7891 | SmartConsole | Performance improvement in basic Access policy functionalities (like add/remove rules and layer scroll). |
| PMTR-7565, CPM-1375, CPM-1277 | SmartConsole | Delete operation of a service, source or destination in a single Publish operation does not appear in audit log, although it does exists in the Security Management server database. Refer to [sk123324](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk123324). |
| PMTR-2666, CRYPT-51 | SmartConsole | "*An error occurred while receiving the HTTP response to..* ." error when trying to log in to the R80.10 SmartConsole. Refer to [sk122073](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk122073). |
| PMTR-2743 | SmartConsole | When publishing operation via API fails, the failure reason is not displayed. Refer to [sk121414](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk121414). |
| PMTR-2445 | SmartConsole | Policy installation via API ends with unclear status: within the response, the "*statusCode* " field value is "*in progress* " and the "*statusDescription* " field value is "*Performing Legacy data dump* ". Refer to [sk121217](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk121217). |
| PMTR-1489 | SmartEvent | In rare scenarios where R80.10 SmartEvent is managed by an R77.x Security Management server and there are many Domains which are updated/deleted/added, the *dbsync* process may unexpectedly exit. |
| PMTR-697 | Logging | Added ability to filter the "File operation" field in SmartLog. |
| PMTR-3942, 02655514 | Logging | In environments with large amount of gateways managed by a single Security Management server or Domain, FWM process unexpectedly exits printing the "*T_get_event: cannot register socket x (1024 sockets already registered for exp)* " error to the *fwm.elg* file. |
| PMTR-7185 | Logging | On Multi-Domain Server, log storage maintenance does not work with SmartEvent, thus not freeing up the disk space. |
| PMTR-1483 | Logging | In environments with many log activities, report generation may fail causing progress bar to stuck. |
| PMTR-6585 | Gaia OS | Deleting last backup IP address from VRRP Interface triggers a transition from master state to backup. |
| PMTR-5157 | Gaia OS | When a user invokes tcpdump on a 40GbE/100GbE interface, using *mlx5_core* driver 3.2-2.0.4.12, a small packet in a narrow size range causes a driver to crash. |
| PMTR-5158, PMTR-2681 | Gaia OS | Multi-Queue (MQ) cores performance optimization. |
| PMTR-8779, 02707238 | Gaia OS | After installing R80.10 Jumbo Hotfix Take_70, data and rules are not restored correctly with backup/restore via Gaia Portal -\> Maintenance -\> System Backup or CLISH backup/restore commands. Refer to [sk123352](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk123352). |
| PMTR-4236 | Cluster | In ClusterXL, when using VMAC, Gratuitous ARP Request (GARP) packets are generated with both VMAC address and physical MAC address. |
| PMTR-7312, PMTR-791 | Cluster | Enhancement: adding a grace period before failover when detecting 'Interface Active Check' state to prevent unneeded failovers. |
| PMTR-4475 | DLP | Files are not deleted from the *$FWDIR/tmp/dlpu* directory causing the Security gateway's hard drive to fill up. |
| PMTR-6303, IDA-762 | Identity Awareness | In rare scenarios, when Terminal Server Identity Agent is used and SecureXL is enabled, connections from the Terminal Server can be matched on the wrong user. |
| PMTR-6581, 02398542, 02500815 | Identity Awareness | In some scenarios, Kerberos based authentication fails when Kerberos ticket is encrypted using AES-128. Refer to [sk111945](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk111945). |
| MAGB-254, MAGB-268, PMTR-5386 | Mobile Access | "*Mobile Access - Reject. Reason: Error in disconnecting user. Access Denied* ." message in SmartLog when user tries to use the SNX Network Mode. Refer to [sk123037](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk123037). |
| PMTR-6169, MAGB-240 | Mobile Access | When a browser sends a cookie that it got from another page on a different port, the Mobile Access gateway does not recognize the cookie. |
| PMTR-2141 | VPN | In a certain Remote Access flow, Security gateway crashes when kernel cannot allocate memory. |
| PMTR-4469 | Compliance | First Scan must be performed after R80.10 Jumbo Hotfix installation to update the Best Practice IPS114. Initial First Scan in Compliance blade: 1. From the CLI, enter Expert mode, run *dbedit* and press Enter for Server name. 2. In DBedit type: *grc_test_elements grc_interpreter first_scan **true*** . Then type *update_all* You should get a message "*grc_test_elements::grc_interpreter Updated Successfully"*. 3. Verify the value of*first_scan* is *true* by typing: *print grc_test_elements grc_interpreter* 4. Quit. 5. Perform Full Scan in Compliance blade via the SmartConsole or type *interpreter full_scan.* |
| GAIA-2218, PMTR-9922 | Smart-1 | On Smart-1 525 appliance, Raid diagnostics from Clish and WebUI display status "*Degraded* " instead of "*Optimized* " when two disks are 100% synced. Refer to [sk123847](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk123847). |
| PMTR-14895 | VSX | After updating Virtual System object and pushing configuration to VSX object, most of the routes are removed. |
| **R80.10 Jumbo HotFix - General Availability Take 91 (6 Mar 2018, GA from 01 Apr 2018)** |||
| PMTR-5419, PMTR-2799, PMTR-5418 | Security Management | Cannot delete OPSEC application with AMON entity. Refer to [sk121377](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk121377). |
| PMTR-507 | Security Management | FWM process unexpectedly exits in case a malformed license file is reported from the Security gateway. |
| PMTR-3190 | Security Management | When installing policy following Global Domain Assignment a false message of "*policy installation is currently in progress* " appears, while there isn't any. Refer to [sk122253](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk122253). |
| PMTR-3847 | Multi-Domain Management | "Get License" operation in SmartUpdate of Multi-Domain Server hangs on "*Operation started*" stage. |
| PMTR-6825, PMTR-7453, CPM-456 | Multi-Domain Management | Cannot change the IP address of Domain Server when using R80.10 GA Take 462 or Takes 70, 79 and 85 of the R80.10 Jumbo Hotfix Accumulator. |
| PMTR-3718 | Multi-Domain Management | Synchronization failure after purge operation in MDS level. |
| PMTR-6095 | Multi-Domain Management | Only a single report is generated in SmartView MDS level when selecting multiple Domain Management Servers. |
| PMTR-2815, API-196 | SmartEvent | "*SmartView server certificate is invalid* " error when connecting to Domain (via SmartConsole) from MDS level and navigating to 'Logs and Monitor' tab. Refer to [sk121443](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk121443). |
| PMTR-3271 | Security Gateway | When installing policy on gateways with different profiles (where netquota or malicious IPs protection is enabled on one of the profiles), traffic is dropped with "*dropped by fw_runfilter_ex Reason: function does not exist* " error. Refer to [sk123040](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk123040). |
| PMTR-4106, 02689215 | Logging | In rare scenarios, enabling log forwarding may trigger a memory leak. |
| PMTR-3544 | Gaia OS | Random routes are sometimes missing after rebooting the system. |
| PMTR-3783 | Gaia OS | *routed* process stucks at slave/slave state in ClusterXL setup. |
| PMTR-2853, 02662054 | Gaia OS | DHCP Relay traffic is dropped when ClusterXL unicast load sharing mode is configured. Refer to [sk121347](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk121347). |
| PMTR-1602 | Gaia OS | *routed* process restarts infrequently when Bootp/DHCP Relay is enabled. |
| PMTR-3546 | Gaia OS | *routed*process repeatedly exits on standby cluster member when VPN is configured on a cluster. |
| GAIA-1619 | Gaia OS | Security hardening for Gaia Clish. |
| PMTR-3318, 02639628 | Gaia OS | Security gateway may crash during *unmount* operation on a remote network filesystem (samba). |
| PMTR-4374, 02677981 | ClusterXL | Active member in ClusterXL HA sends an ARP request for cluster VIP causing a temporary outage. This can happen in a rare scenario as described in [sk121846](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk121846). |
| PMTR-4362, PMTR-1582 | DLP | DLP Exchange Server Agent load when Security gateway is configured as MTA was optimized to enable a better stability of MTA functionality. |
| PMTR-5289 | VSX | Threat Prevention blade failure can occure in the following scenarios: 1. No Threat Prevention blade is active on VS0 and a Threat Prevention blade is active on a different VS 2. That VS has no connectivity to the Internet 3. VS0 has connectivity to the Internet but through a proxy |
| PMTR-4457 | VPN | BGP traffic initiated by the gateway is not matched by the VPN directional rule. |
| PMTR-2372 | VPN | IPsec renegotiation fails with peer DAIP gateways. |
| **R80.10 Jumbo HotFix - General Availability Take 85 (15 Feb 2018) Note: include support for Smart-1 525/5050/5150 appliances** |||
| PMTR-7017 | Smart-1 | **NEW:** Added support for Smart-1 525 / 5050 / 5150 appliances. Refer to [sk120453](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk120453). |
| **R80.10 Jumbo HotFix - Ongoing Take 79 (05 Feb 2018)** |||
| PMTR-2818 | Security Management | Some API commands fail with "*Internal error* " message when called with "*details-level* " flag set to "*full* ". Refer to [sk121475](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk121475). |
| PMTR-2819 | Security Management | The*"show gateways-and-servers"* API command fails with the "*Runtime error: An internal error has occurred*." error. |
| PMTR-2812 | Security Management | After global policy assignment, when running the "*show access-rulebase*" API command with a filter, no results are shown. |
| API-120 | Security Management | When executing an API request via CLI, cannot set the custom timeout using the "*-conn-timeout*" flag. The default timeout of 3 minutes is always used. |
| PMTR-4816, PMTR-4499 | Security Management | Stabilization improvement of *fwm* , *fw_loader* and *dbedit* Security Management processes. |
| PMTR-2597 | Security Management | Enhancement: Improved policy installation performance when installing policy on multiple targets. |
| CPM-654, PMTR-2439 | Multi-Domain Management | Deletion of Domain Management Server may fail on timeout when few dozens of administrators with customized permission profiles are assigned to the Domain Management Server. |
| IDA-170, PMTR-2973 | Identity Awareness | When Full Identity Agent is used with packet tagging feature, Anti-Spoofing may not be enforced for some of the connection packets. |
| PMTR-2944 | Identity Awareness | Many "*ida_classifier_send_log_cb: dst clob is active but there is no identity sharing!* " errors in */var/log/messages* file after upgrade to R80.10. |
| PMTR-3375 | Logging | Logs are shown with delay after policy installation if there are more than ten thousands Binary Large Objects (BLOBs) on the Log Server. |
| PMTR-5782 | Logging | When more than 50 Log servers are created in SmartEvent, sometimes a Log server the administrator is searching for is not in the query and is not available for service. |
| **R80.10 Jumbo HotFix - General Availability Take 70 (15 Jan 2018)** |||
| TPM-494 | Multi-Domain Management | Global policy assignment fails after removing staging overrides in the Global Domain. |
| PMTR-1458, 02659051 | Multi-Domain Management | Attaching a central license from Multi-Domain Server to a Domain/CMA creates duplicate license objects in SmartUpdate, which cannot be deleted. Refer to [sk120833](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk120833). |
| API-146 | Security Management | Enhancement: New flags to control the API commands output in full details level. Refer to [sk121292](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk121292). |
| API-124 | Security Management | The "*show-access-rulebase* " API command fails if the rulebase contains rules with "*Encrypt* " or "*Client Encrypt*" action. |
| CPM-948 | Security Management | There is no status in the SmartView Monitor for Mobile Access blade. |
| PMTR-2379 | Security Management | *querydb_util* generates core file when cannot connect to Security Management server. |
| PMTR-2376 | Security Management | *fwm*process is down during gateway creation after configuring shared secret for VPN community. |
| PMTR-2722 | Security Management | After reboot or HA Full sync, some objects are not visible in a specific private session. |
| PMTR-712 | Security Gateway | CPD process exits with core dump generated while stopping CPD / rebooting the system / restarting watchdog. |
| PMTR-1677, VSECNSX-951 | Security Gateway | In some scenarios, the Security gateway crashes when installing Access Control Policy and Threat Prevention Policy in parallel. Refer to [sk140172](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk140172). |
| PMTR-1310 | Security Gateway | Connections configured with Drop and Block message were actually dropped, but log appears as Accept log. |
| PMTR-1388 | Security Gateway | Upon packet loss, the clients' retransmit "strategy" triggers an issue of reassembling the TCP stream incorrectly. The SSL stream cannot be decrypted like this, so the SSL session is closed. Refer to [sk121738](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk121738). |
| PMTR-2660, 02666905 | Security Gateway | When DHCP is configured to work with VPN, DHCP Relay traffic is dropped. |
| PMTR-709 | Logging | Enhancement: Allow viewing HTTPS related fields according to permission profile in LEA. When configuring a permission profile that allows HTTPS, you will be able to see the related fields when receiving them with LEA OPSEC client, instead of obfuscating them. |
| PMTR-1771, 02525352 | Gaia OS | Gaia backup files are not created on Multi-Domain Server. Refer to [sk119401](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk119401). |
| PMTR-2368 | Gaia OS | Configuring more than 200 logical interfaces can cause *routed* to crash upon the next change in configuration. |
| PMTR-1442, 02554018 | SmartLog | SmartConsole search does not work for strings that include non-English characters. For example, Cyrillic characters and characters with accent marks. Refer to [sk120293](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk120293). |
| PMTR-1224, 02562873 | SmartLog | After performing a Gradual Upgrade of the Domain Management Server, no logs are displayed in the relevant domain until running the *mdsstop;mdsstart* commands on MLM. |
| TEX-412 | Threat Extraction | Security enhancements for Data Loss Prevention and Threat Extraction blades |
| PMTR-1932, 02590986 | Threat Emulation | Links inside email with domain suffix (e.g. *www.example.com* ) are emulated as *.com* files. |
| PMTR-2891 | Anti-Virus, Threat Emulation | Enhancement in Anti-Virus to allow replacement of Kaspersky Labs components. For removal instructions see [sk118539](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk118539). For further information visit |
| PMTR-1303 | Mobile Access | Connection to internal sites or Capsule Docs server via Mobile Access Blade's Reverse Proxy feature fails due to an incorrectly forwarded 'Host' header. |
| PMTR-2089 | Mobile Access | An incorrect policy installation warning "*R80.10 gateways cannot be included in the Mobile Access Legacy Policy when Mobile Access Unified Policy is the selected policy source*" is shown when installing the Access Control policy on a Mobile Access gateway and the legacy Mobile Access policy is empty. |
| PMTR-1183 | URL Filtering | Enhancements in categorization in cases where only URL Filtering is enabled. |
| PMTR-2594 | HTTPS Inspection | HTTPS based traffic is bypassed when using a category based HTTPS inspection rulebase on a SMB gateway without URL Filtering blade enabled. |
| **R80.10 Jumbo HotFix - General Availability Take 56 (23 Nov 2017)** |||
| PMTR-683, 02648460 | Security Management | Users that are not configured with Multi-Domain super user permissions, experience slowness in running queries. |
| PMTR-2697 | Security Management | FWM process restarts when trying to read the *$FWDIR/tmp/fwmtrace.log* file from an incorrect directory where this file does not exist. |
| **R80.10 Jumbo HotFix - Ongoing Take 53 (25 Oct 2017)** |||
| PMTR-1702 | Security Management | Policy installation fails when Access Role is configured in the Access Control policy on a gateway with no Identity Awareness enabled. |
| SMCPOL-122 | Security Management | When policy installation fails with "*Operation incomplete due to timeout* " error, timeout can be increased via [GuiDBedit Tool](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk13009). Refer to [sk112353](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk112353)**.** |
| CPM-830 | Security Management | FWM process crash in Management HA environment when *$FWDIR/tmp/fwmtrace.log* file reaches 2GB. |
| PMTR-738, 02608827 | Security Gateway | Cluster member IP addresses is not added correctly during policy generation. |
| PMTR-1421 | Gaia OS | Outputs of "*top* " and "*ps -aux* " commands show *lspci* as zombie process. Refer to [sk121891](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk121891). |
| PMTR-330 | DLP | Enhancement: Maximum allowed SMTP headers length can be configured. Refer to [sk119293](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk119293). |
| PMTR-332 | DLP | Enhancement: Improved DLP stability. |
| GM-2855 | SMB Appliances | Enhancement: IPv6 support for 700 / 1200R / 1400 SMB Appliances. Refer to [sk118816](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk118816). |
| **R80.10 Jumbo HotFix - General Availability Take 42 (17 Sept 2017) Note: This Take updates Take 40 released on 12 Sept 2017. It is recommended to install Take 42** |||
| GAIA-1060 | Security Gateway | SIC status is "*Not Communicating* " and CPD process restarts after installing R80.10 Jumbo HotFix Take 40. Refer to [sk120494](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk120494). |
| UP-94, 02556604 | Security Gateway | Websites with short Host headers (like *ab.com*) cannot be loaded. |
| TEX-328 | Threat Extraction | Security gateway hangs when enabling Threat Extraction Web API. |
| TPM-373 | Threat Prevention | The API command "*show threat-profile*" wrongly reports configuration of internal settings which causes failure in certain scenarios. |
| PMTR-748 | Anti-Virus, Anti-Bot | Crash in Anti-Virus \& Anti-Bot blades. |
| CPM-806 | Security Management | Policy installation fails on DAIP gateways after changing Domain Server from *Standby* to *Active*. |
| PMTR-464 | Security Management | After upgrade to R80.x, Administrator's "email" field does not show in SmartConsole. |
| PMTR-466 | Multi-Domain Management | Rulebase initialization fails after CMA migration from R77.30 to R80.10 via cma_migrate. |
| TPM-419 | SmartConsole | After a period of time in which multiple IPS updates have been performed, the database size can become very large because of unused data. * Enhancement: new procedure to clean old / unused IPS version in the database |
| TPM-334 | SmartConsole | Geo policy allows to configure several rules for the same country, causing incorrect policy enforcement. |
| PMTR-631 | SmartEvent | In SmartEvent policy, when selecting two 'Event Fields' with the same 'Log Field' in 'Event Format' tab, the Event fails to generate. |
| PMTR-625 | SmartEvent | When automatic reaction mail is sent, the resolving name of source and destination is missing and only the source and destination IP address is shown. |
| PMTR-655 | SmartEvent | When automatic reaction email is sent, wrong "Start time" is displayed. |
| **R80.10 Jumbo HotFix - Take 37 (04 Sept 2017)** |||
| PMTR-397 | Security Gateway | *export_p12*feature is missing in VPN utilities. |
| PMTR-418 | Security Gateway | Security Gateway / Active cluster member freezes / locks up randomly. Refer to [sk114977](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk114977). |
| PMTR-454 | Security Gateway | Login to Smart Console fails with "*The server did not provide a meaningful replay; This may be caused by a contract mismatch, a Premature session shutdown or an internal server error*" error. |
| PMTR-469 | Security Gateway | FWM process consumes high CPU in case of unreachable DAIP objects existing in the system. |
| PMTR-458 | Security Gateway | Enhancement: Performance of Global Domain Assignment for Open Servers with 9-24 GB memory is improved. |
| PMTR-473 | Security Gateway | Enhancement: Improved Security Gateway stability when it is configured as proxy. |
| BS-175 | Security Gateway | Some objects are missing when querying for unused objects. |
| SL-441 | Security Gateway | In environment with more than 50 Log servers, log queries return results only from 50 log servers. |
| GAIA-634 | Gaia OS | Enhancement: Improved clish stability. |
| CPM-792 | Security Management | Log Server status in Monitoring view is not presented for cluster members of Full HA environment. |
| CPM-734 | Multi-Domain Management | Global policy assignment fails after section manipulation in the Global Domain's rulebase. |
| BS-149 | Multi-Domain Management | Policy installation from Multi-Domain Server following a Threat policy uninstall, fails. |
| API-99 | SmartConsole | Security Management API server fails under heavy load. Refer to [sk119553](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk119553). |
| API-92 | SmartConsole | API "*show-packages* " (when set to "*details-level" : "full*") fails where the revision in one of the package's installation targets has been purged from the database. |
| API-93 | SmartConsole | If object is used inside a disabled rule, the "*where-used*" Security Management API command shows that the rule is enabled. |
| API-94 | SmartConsole | Reply to Security Management API "*show-gateways-and-servers* " misspells the name of the "*identity-awareness* " blade as "*identical-awareness*". |
| API-88 | SmartConsole | Under certain conditions, after restarting Security Management Server, the API server, although configured to accept requests from GUI clients, no longer does so, but reverts to the default behavior of accepting only calls from the local host. |
| **R80.10 Jumbo HotFix - General Availability Take 35 (22 Aug 2017)** |||
| MAGB-27, MAGB-28 | Mobile Access | Improved stability of Mobile Access WebMail application. |
| PMTR-172 | Security Gateway | Security hardening for Client Authentication portal. |
| CPM-534 | Security Management | *migrate_global_policies* and *cma_migrate* commands can run when processes are down. |
| PMTR-436 | Security Management | Long duration of policy installation for large number of NAT rules. |
| CPM-665 | Security Management | Performance improvements. |
| DP-1079 | Check Point Appliances | "*Can't validate base version is a GA take of R80.10*" error message when installing Jumbo Hotfix Accumulator Take 24 on 405 / 410 appliances. |
| **R80.10 Jumbo HotFix - General Availability Take 24 (01 Aug 2017)** |||
| PMTR-290 | Application Control | Support for user-defined application with encoded escaped characters within the URL. |
| GAIA-760 | Gaia OS | BGP does not work for VTIs and Point-to-Point interfaces with mask length of 32 with Virtual IPs. |
| TEX-329 | DLP, Threat Extraction | Security enhancements for Data Loss Prevention and Threat Extraction blades. |
| 02559994, PMTR-385 | SmartLog | On Open Servers with 24G-35G of RAM running R80.10 Jumbo Hotfix (Take 10/15/18) logs are not indexed and SmartLogs queries fail. |
| **R80.10 Jumbo HotFix - General Availability Take 18 (24 July 2017)** |||
| ACM-520 | Application Control | Improved Policy Verification for Pre-R80.10 Security Gateways that support only services of type "TCP" or ?"UDP" in the Application Control layer. |
| 02522974, PMTR-100 | Identity Awareness | Improved Access Role identification for different login/logout scenarios. |
| 02524894, PMTR-99 | Security Management | Automatic NAT rule is not removed after the corresponding network object is removed. |
| 02521459, GM-2678 | Security Management | Policy installation fails in some cases when installing policy on all managed Security Gateways at once, if Security Management manages both standard Security Gateways and UTM-1 Edge devices. |
| **R80.10 Jumbo HotFix - General Availability Take 15 (11 July 2017)** |||
| 02536538, PMTR-147 | Security Gateway | Improved URL recognition mechanism for Anti-Virus, Anti-Bot, and URL Filtering blades. |
| PMTR-44 | vSEC | vSEC objects are not enforced on part of the gateways. Problem is relevant only for large scale environment with more than 50 gateways/cluster/vs/member. |
| PMTR-45 | vSEC | In large scale Azure environments, Data Center objects are partialy imported. |
| PMTR-167 | SmartView | Security hardening of SmartView. |
| 02539824, PMTR-164 | Security Management | Security Management access hardening. |
| **R80.10 Jumbo HotFix - General Availability Take 10 (28 June 2017)** |||
| 02530810 | Smart-1 | **NEW:** Added support for Smart-1 405 / 410 appliances. Refer to [sk117578](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk117578). |
| 02524737, PMTR-88 | VSX | Wrong license status for '*Virtual Systems*' blade for VSX objects in R80 SmartConsole. |
| **R80.10 Jumbo HotFix - Take 7 (22 June 2017)** |||
| 02528737, 02529416, 02533097, CPM-535 | Multi-Domain Management | Several *cpsm-domains-X* licenses are counted only once. Refer to [sk118316](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk118316). |
| 02520574, CPM-462 | Multi-Domain Management | Upgrade failure of secondary Multi-Domain Log Server when using NGX license. |
| 02520796, CPM-460 | Multi-Domain Management | *mds_import* fails with "*CPM server failed to start, see server logs*" message when trying to import a database exported from R80.10 Multi-Domain Server. |
| 02524769, PMTR-87 | Security Management | While updating a User name, the logged in User name in the logs is wrongly reported with the old User name. |
| 02449460, CPM-465 | Security Management | Management High Availability synchronization between primary server upgraded from R80 Jumbo Hotfix to R80.10 and new R80.10 secondary server, fails. |
| 02532395, ACM-335 | Security Management | Security rules that should be installed on a specific Security Gateway wrongly can be installed on another R80.10 Security Gateway. Refer to [sk118153](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk118153). |
| 02526608, PMTR-81 | Security Gateway | Improved non-compliant HTTP protection to enforce more rare cases of non-compliant HTTP traffic. |
| 02523046, PMTR-47 | Security Gateway | *in.emaild.mta* process may crash randomly (once every few days was observed) when the Security gateway is configured as Mail Transfer Agent (MTA). Mails under inspection may be delayed by up to a few minutes. |
| 02513631, PMTR-96 | IPS | When an IPS protection is overridden, it is enforced correctly however it may cause higher performance load. |
| PMTR-98 | SmartConsole | Translated Source column with "Original" object wrongly has a Hide NAT option. |
| **R80.10 Jumbo HotFix - General Availability Take 3 (06 June 2017)** |||
| 02521398 | Threat Emulation | Fixed Mail Transfer Agent (MTA) enforcement issue. |
Installation Instructions {#Installation instructions}
------------------------------------------------------
**Procedure:**{#Installation instructions - Procedure}
* **Show / Hide instructions for installation in Gaia Portal - using CPUSE (Check Point Update Service Engine)**
* **Offline installation**
**Note:** Either get the offline package from [Check Point Support](http://www.checkpoint.com/support-services/contact-support/index.html), or export the package from a source Gaia machine, on which this package was already downloaded / installed (for package export instructions, refer to [sk92449](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk92449#How%20to%20work%20with%20CPUSE) - section "(4-D) "*How to* ..."").
1. Install the latest build of CPUSE Agent from [sk92449](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk92449#Latest%20build%20of%20CPUSE%20and%20What%27s%20New).
2. Connect to the Gaia Portal on your Check Point machine and navigate to ***Upgrades (CPUSE)*** section - click on ***Status and Actions***.
3. In the upper right corner, click on the ***Import Package*** button.
4. In the ***Import Package*** window, click on ***Browse...*** - select the CPUSE package (either offline TGZ file, or exported TAR file) - click on ***Import***.
5. Above the list of all software packages, click on the ***Showing Recommended packages*** button - select***All***.
6. Select the imported package ***Check Point R80.10 Jumbo hotfix T\ for sk116380*** - click on ***More*** button on the toolbar - click on ***Verifier*** (or right-click on the package and click on ***Verifier***).
7. Select this package and click on ***Install Update*** button on the toolbar.
{#Anchor_to_Installation_CPUSE_Gaia_Portal}
{#Anchor_to_Installation_CPUSE_Gaia_Portal}
* **Show / Hide instructions for installation in Gaia Clish - using CPUSE (Check Point Update Service Engine)**
For detailed installation instructions, refer to [CPUSE - Gaia Software Updates (including Gaia Software Updates Agent)](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk92449#How%20to%20work%20with%20CPUSE) - section "*(4) How to work with CPUSE*".
* **Offline installation**
**Note:** Either get the offline package from [Check Point Support](http://www.checkpoint.com/support-services/contact-support/index.html), or export the package from a source Gaia machine, on which this package was already downloaded / installed (for package export instructions, refer to [sk92449](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk92449#How%20to%20work%20with%20CPUSE%20-%20Additional%20How%20To) - section "*(4-D) "How to ..."*").
1. Install the latest build of CPUSE Agent from [sk92449](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk92449#Latest%20build%20of%20CPUSE%20and%20What%27s%20New).
2. Connect to command line on target Gaia OS.
3. Log in to Clish.
4. Acquire the lock over Gaia configuration database:
***HostName:0\> lock database override***
5. Import the package from the hard disk:
***HostName:0\> installer import local \/\.TGZ_or_TAR***
6. Show the imported packages:
Note: Refer to the top section "*Hotfixes* " - refer to "*Check Point R80.10 Jumbo hotfix T\ for sk116380* "
***HostName:0\> show installer packages imported***
7. Verify that this R80 Jumbo Hotfix Accumulator package can be installed without conflicts:
***HostName:0\> installer verify \***
8. Install the imported package:
***HostName:0\> installer install \***
{#Anchor_to_Installation_CPUSE_Gaia_Clish}
{#Anchor_to_Installation_CPUSE_Gaia_Clish}
Uninstall Instructions {#Uninstall instructions}
------------------------------------------------
**Important Note:**This Jumbo Hotfix Accumulator removes all its packages during uninstall.
**Procedure:**
* **Show / Hide instructions for uninstall in Gaia Portal - using CPUSE (Check Point Update Service Engine)**
1. [CPUSE Software Updates Policy](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk92449#How%20to%20work%20with%20CPUSE%20-%20Additional%20How%20To) should be configured to allow self-update of CPUSE Agent.
Otherwise (and if this machine is offline), users should manually install the latest build of CPUSE Agent from [sk92449](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk92449#Latest%20build%20of%20CPUSE%20and%20What%27s%20New).
2. Connect to the Gaia Portal on your Gaia machine and navigate to the '*Upgrades (CPUSE)* ' section - click on '*Status and Actions*'.
3. Above the list of all software packages, click on the '*Showing Recommended packages* ' button - select '*All*'.
4. Right-click on the Jumbo Hotfix Accumulator package - click on '*Uninstall*'.
5. A warning will be displayed that after this uninstall, the machine will be automatically rebooted.
Click on '*OK*' to start the uninstall.
* **Show / Hide instructions for uninstall in Gaia Clish - using CPUSE (Check Point Update Service Engine)**
1. [CPUSE Software Updates Policy](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk92449#How%20to%20work%20with%20CPUSE%20-%20Additional%20How%20To) should be configured to allow self-update of CPUSE Agent.
Otherwise (and if this machine is offline), users should manually install the latest build of CPUSE Agent from [sk92449](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk92449#Latest%20build%20of%20CPUSE%20and%20What%27s%20New).
2. Connect to command line on Gaia OS.
3. Log in to Clish.
4. Acquire the lock over Gaia configuration database:
***HostName:0\> lock database override***
5. Uninstall the package:
***HostName:0\> installer uninstall \***
Note: The progress (in per cent) will be displayed in Clish.
6. **Machine will be rebooted automatically**.
Revision History {#Revision History}
------------------------------------
Show / Hide revision history
|--------------|---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|
| Date | Description |
| 26 Jan 2022 | *Take 298* of R80.10 Jumbo Hotfix Accumulator moved to General Availability |
| 22 Dec 2021 | Released*Take 298*of R80.10 Jumbo Hotfix Accumulator |
| 27 Jun 2021 | *Take 290* of R80.10 Jumbo Hotfix Accumulator moved to General Availability |
| 28 Apr 2021 | * Released *Take 290* of R80.10 Jumbo Hotfix Accumulator * SmartConsole package has been updated to *Build 186* |
| 18 Apr 2021 | Updated the Important Notes section |
| 16 Feb 2021 | Updated the Important Notes section |
| 03 Feb 2021 | *Take 288* of R80.10 Jumbo Hotfix Accumulator moved to General Availability |
| 24 Dec 2020 | * Released *Take 288*of R80.10 Jumbo Hotfix Accumulator * SmartConsole package has been updated to *Build 185* |
| 17 Dec 2020 | *Take 287* of R80.10 Jumbo Hotfix Accumulator moved to General Availability |
| 10 Dec 2020 | Released*Take 287*of R80.10 Jumbo Hotfix Accumulator |
| 26 Nov 2020 | *Take 283* of R80.10 Jumbo Hotfix Accumulator moved to General Availability |
| 10 Nov 2020 | Added PRJ-15606 to Take 283 |
| 07 Oct 2020 | * Released *Take 283* of R80.10 Jumbo Hotfix Accumulator * SmartConsole package has been updated to*Build 183* |
| 24 Aug 2020 | Published List of upcoming resolved issues |
| 13 Aug 2020 | *Take 279* of R80.10 Jumbo Hotfix Accumulator moved to General Availability |
| 03 Aug 2020 | Updated the Important Notes section |
| 22 Jul 2020 | Released *Take 279* of R80.10 Jumbo Hotfix Accumulator |
| 12 Jul 2020 | *Take 275* of R80.10 Jumbo Hotfix Accumulator moved to General Availability |
| 08 Jul 2020 | SmartConsole package has been updated to*Build 180* |
| 05 Jul 2020 | Released *Take 278* of R80.10 Jumbo Hotfix Accumulator |
| 24 May 2020 | Released *Take 275*of R80.10 Jumbo Hotfix Accumulator |
| 06 May 2020 | Updated List of upcoming resolved issues |
| 03 May 2020 | Published List of upcoming resolved issues |
| 22 Apr 2020 | Released Blink images for R80.10 GA Take + Jumbo HF Take_272 |
| 05 Apr 2020 | *Take 272* of R80.10 Jumbo Hotfix Accumulator moved to General Availability |
| 22 Mar 2020 | * Released *Take 272* of R80.10 Jumbo Hotfix Accumulator * SmartConsole package has been updated to *Build 177* |
| 03 Mar 2020 | Added PRJ-5528 to *Take 259* |
| 24 Feb 2020 | Added PRJ-6045 to *Take 270* |
| 18 Feb 2020 | SmartConsole package has been updated to *Build 176* |
| 13 Feb 2020 | * Released *Take 270* of R80.10 Jumbo Hotfix Accumulator * *Take 259* of R80.10 Jumbo Hotfix Accumulator moved to General Availability |
| 06 Jan 2020 | Released Blink images for R80.10 GA Take + Jumbo HF Take 249 and Jumbo HF Take 259 |
| 29 Dec 2019 | * Published List of upcoming resolved issues * Added CPUSE offline packages for Ongoing Take |
| 24 Dec 2019 | SmartConsole package has been updated to*Build 161* |
| 23 Dec 2019 | *Take 249* of R80.10 Jumbo Hotfix Accumulator moved to General Availability |
| 19 Dec 2019 | Released *Take 259* of R80.10 Jumbo Hotfix Accumulator |
| 10 Dec 2019 | SmartConsole package has been updated to*Build 159* |
| 21 Nov 2019 | Released *Take 249* of R80.10 Jumbo Hotfix Accumulator |
| 05 Nov 2019 | * SmartConsole package has been updated to*Build 154* * Added PRJ-1968, PRJ-1343, PRJ-782 and PRJ-3868 to Take 245 |
| 03 Nov 2019 | Published List of upcoming resolved issues |
| 24 Oct 2019 | Released *Take 245* of R80.10 Jumbo Hotfix Accumulator |
| 04 Sep 2019 | *Take 225* of R80.10 Jumbo Hotfix Accumulator moved to General Availability |
| 04 Aug 2019 | * Released *Take 225* of R80.10 Jumbo Hotfix Accumulator * SmartConsole package has been updated to*Build 137* |
| 07 July 2019 | Added PMTR-25878 to Take 177 |
| 11 June 2019 | SmartConsole package has been updated to*Build 128* |
| 04 June 2019 | Released *Take 214* of R80.10 Jumbo Hotfix Accumulator |
| 12 May 2019 | *Take 203* of R80.10 Jumbo Hotfix Accumulator moved to General Availability |
| 01 Apr 2019 | SmartConsole package has been updated to*Build 122* |
| 25 Mar 2019 | Released *Take 203* of R80.10 Jumbo Hotfix Accumulator |
| 04 Mar 2019 | *Take 189* of R80.10 Jumbo Hotfix Accumulator moved to General Availability |
| 12 Feb 2019 | Released *Take 189* of R80.10 Jumbo Hotfix Accumulator |
| 22 Jan 2019 | Released *Take 185* of R80.10 Jumbo Hotfix Accumulator |
| 14 Jan 2019 | SmartConsole package has been updated*to Build 105* |
| 26 Dec 2018 | * Released *Take 177* of R80.10 Jumbo Hotfix Accumulator * *Take 169* of R80.10 Jumbo Hotfix Accumulator moved to General Availability |
| 06 Dec 2018 | SmartConsole package has been updated to*Build 093* |
| 27 Nov 2018 | Released *Take 169*of R80.10 Jumbo Hotfix Accumulator |
| 12 Nov 2018 | * Released *Take 167*of R80.10 Jumbo Hotfix Accumulator * SmartConsole package has been updated to*Build 089* |
| 23 Oct 2018 | *Take 154* of R80.10 Jumbo Hotfix Accumulator moved to General Availability |
| 16 Oct 2018 | Released Take *154* of R80.10 Jumbo Hotfix Accumulator |
| 02 Oct 2018 | * Released *Take 151* of R80.10 Jumbo Hotfix Accumulator * SmartConsole package has been updated to*Build 073* |
| 02 Sep 2018 | Added PMTR-14532 to *Take 131* |
| 30 Aug 2018 | Updated description of PMTR-19132 |
| 27 Aug 2018 | Added PMTR-17399, PMTR-14653 and PMTR-12446 to *Take 142* |
| 21 Aug 2018 | Released *Take 142*of R80.10 Jumbo Hotfix Accumulator |
| 19 Jul 2018 | Released *Take 131* of R80.10 Jumbo Hotfix Accumulator |
| 03 Jul 2018 | SmartConsole package has been updated to*Build 056* |
| 19 Jun 2018 | *Take 112* of R80.10 Jumbo Hotfix Accumulator moved to General Availability |
| 12 Jun 2018 | *Take 112* for Smart-1 525/5050/5150 appliances was removed. |
| 28 May 2018 | SmartConsole package has been updated to*Build 042* |
| 23 May 2018 | Released*Take 112* of R80.10 Jumbo Hotfix Accumulator |
| 03 May 2018 | * *Take 103* of R80.10 Jumbo Hotfix Accumulator moved to General Availability * Important Notes were updated |
| 12 Apr 2018 | Released *Take 103* of R80.10 Jumbo Hotfix Accumulator |
| 01 Apr 2018 | *Take 91* of R80.10 Jumbo Hotfix Accumulator moved to General Availability |
| 21 Mar 2018 | *Take 85* of R80.10 Jumbo Hotfix Accumulator moved to General Availability |
| 06 Mar 2018 | Released *Take 91* of R80.10 Jumbo Hotfix Accumulator |
| 15 Feb 2018 | Released *Take 85* of R80.10 Jumbo Hotfix Accumulator |
| 05 Feb 2018 | * Released *Take 79* of R80.10 Jumbo Hotfix Accumulator * *Take 70* of R80.10 Jumbo Hotfix Accumulator moved to General Availability |
| 15 Jan 2018 | Released *Take 70* of R80.10 Jumbo Hotfix Accumulator |
| 18 Dec 2017 | SmartConsole package has been updated to*Build 013* |
| 12 Dec 2017 | *Take 56* of R80.10 Jumbo Hotfix Accumulator moved to *General Availability* |
| 23 Nov 2017 | Released *Take 56* of R80.10 Jumbo Hotfix Accumulator |
| 07 Nov 2017 | Added CPUSE Online Identifier of *Take 53* |
| 25 Oct 2017 | Released *Take 53* of R80.10 Jumbo Hotfix Accumulator |
| 24 Sep 2017 | Added note regarding CPUSE Agent build 1298 |
| 18 Sep 2017 | Added reference to [sk120494](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk120494) |
| 17 Sep 2017 | Released *Take 42* of R80.10 Jumbo Hotfix Accumulator |
| 12 Sep 2017 | Released *Take 40* of R80.10 Jumbo Hotfix Accumulator |
| 04 Sep 2017 | Released *Take 37* of R80.10 Jumbo Hotfix Accumulator |
| 22 Aug 2017 | Released *Take 35* of R80.10 Jumbo Hotfix Accumulator |
| 09 Aug 2017 | Added note regarding *SmartConsole Build 005* |
| 01 Aug 2017 | Released *Take 24* of R80.10 Jumbo Hotfix Accumulator |
| 27 July 2017 | Added the following notes: * SmartConsole for [R80.10 Jumbo Hotfix Accumulator](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk116380) can be used to manage [R80.10 GA Take 421](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk111841) Security Gateways / Management Server. * [R80.10 GA SmartConsole](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk111841) can be used to manage R80.10 Security Gateways / Management Server with installed [R80.10 Jumbo Hotfix Accumulator](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk116380). |
| 24 July 2017 | Released *Take 18* of R80.10 Jumbo Hotfix Accumulator Released updated R80.10 SmartConsole for R80.10 Jumbo Hotfix Accumulator (for Take 7 and higher). |
| 19 July 2017 | Added an important note that to check the Take number of the installed R80.10 Jumbo Hotfix Accumulator, user should run the "`cpinfo -y all`" command |
| 11 July 2017 | Released *Take 15* of R80.10 Jumbo Hotfix Accumulator |
| 28 June 2017 | Released *Take 10* of R80.10 Jumbo Hotfix Accumulator |
| 22 June 2017 | Released *Take 7* of R80.10 Jumbo Hotfix Accumulator |
| 06 June 2017 | First release of R80.10 Jumbo Hotfix Accumulator (*Take 3*) |
---
# Agent Instructions
This content is from the Check Point Support Center (https://support.checkpoint.com), the official knowledge base for Check Point cybersecurity products.
## Navigating This Knowledge Base
- **Complete index**: [llms.txt](https://support.checkpoint.com/llms.txt)
- **All SK articles**: [SecureKnowledge Sitemap](https://support.checkpoint.com/sitemaps/secureknowledge-sitemap-index.xml)
- **SK article URL pattern**: `https://support.checkpoint.com/results/sk/{skId}`
- **Markdown responses**: AI bot User-Agents automatically receive `text/markdown` content