> Source: [sk152652](https://support.checkpoint.com/results/sk/sk152652) # sk152652 - Check Point R80.30 with Gaia 3.10 | Property | Value | |----------|-------| | Solution ID | sk152652 | | Date Created | 2019-04-29 | | Last Modified | 2022-10-13 | | Technical Level | General | | Products | Security Gateway, Cloud Firewall, Hardware | | Versions | R82.10, R82, R81.20, R82.10, Not Version-Specific, R81.20, R82 | | OS | Gaia | | Platform | 3000, 7000, 28000, VMWare ESX, Open Server, 16000, 26000, 6000 | ## Solution **Check Point Default version widely recommended for all deployment is [R81.10 Take 335](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk170416#Installation) with the latest [Jumbo Hotfix Accumulator](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk175186) GA Take.** **For more info on all Check Point releases, refer to [Release map](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk152052) and [Release Terminology](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk95746) articles.** **Table of Contents:** * Introduction * Key Features * Supported Platforms * Downloads * Resolved Issues * Known Limitations * Documentation Introduction {#Introduction} ---------------------------- R80.30, part of the Check Point Infinity architecture, delivers the most innovative and effective security that keeps our customers protected against large scale, fifth generation cyber threats. This release introduces **R80.30 3.10** for Security Gateway and VSX, with major enhancements in firewall resiliency and Clustering mechanism. This release is considered as a Main Train release, however it is not part of the Check Point R80.30 Release and requires a dedicated image. Note it can be managed by a Check Point R80.30 Security Management Server, which already supports the 3.10 kernel. Starting August 2019 this release will be supported by a Jumbo Hotfix Accumulator release for both R80.30 3.10 and standard R80.30 versions.
R80.30 3.10 can be managed by the following Security Management Server releases: * [R80.30](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk144293) * [R80.20 with a supported Jumbo Hotfix Accumulator](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk137592) * [R80.10 with a supported Jumbo Hotfix Accumulator](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk116380) (will be available soon) [Contact Check Point Support](https://www.checkpoint.com/support-services/contact-support/) to obtain a special Hotfix for R80.10 and R80.20 based on your current Jumbo Hotfix Take. Key Features {#Key Features} ---------------------------- * Improved firewall resiliency * Support for IPv6 (resolving [R80.20 3.10](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk141173) limitations) * Support for Dynamic CLI - Enhancing Gaia Clish with new Expert mode commands. See [sk144112](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk144112). * Clustering and VSX capabilities: * Unicast support for Cluster Control Protocol eliminating the need for CCP using Broadcast or Multicast modes * MAC magic configuration is no longer needed * CCP encryption is enables by default * New kernel capabilities: * Upgraded Linux kernel * New partitioning system (gpt): * Supports more than 2 TB physical/logical drives * Faster file system (XFS, see [sk141432](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk141432)) * Supporting larger system storage (up to 48 TB tested) * I/O related performance improvements * Multi-Queue (see [sk153373](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk153373)): * Full Gaia Clish support for Multi-Queue commands * Automatic "on by default" configuration * SMB v2/3 mount support in Mobile Access blade * Added NFSv4 (client) support (NFS v4.2 is the default NFS version used) * Support of new system tools for debugging, monitoring and configuring the system: * *iotop* (provides I/O runtime stats) * *lshw* (provides detailed information about all HW) * *lsusb* (provides information about all devices connected to USB) * *lsscsi* (provides information about storage) * *ps*(new version, more counters) * *psmisc* (new version, more counters) * *top* (new version, more counters) * *iostat* (new version, more counters * New *glibc* : *glibc-2.17-157* * New *ethtoo* l: *ethtool-4.8-7* * New Bash: *bash-4.2.46-29* * *lbzip2* support (free, multi-threaded compression utility) * *xz* support (compression utility) * *rsync* support Supported Platforms {#Supported Platforms} ------------------------------------------ |---------------------------------------------------|-----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------| | Product | Details | | **3600 and 3800 appliances** | Refer to [sk110052](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk110052). | | **6200, 6600, 6900, 6400, 6700, 7000 appliances** | Refer to [sk139932](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk139932). [](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk152733) | | **16000, 26000 and 28000 appliances** | [26000/26000T, 16000/16000T, 28000](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk152733) | | **23000 appliances** | [23800, 23900](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk107516) | | **CloudGuard** | * VMWare * KVM * Hyper-V * AHV * AWS * Azure * Google Cloud Platform | | **Open Servers** | Refer to the [Hardware Compatibility List.](https://www.checkpoint.com/support-services/hcl/) | Downloads {#Downloads} ---------------------- |-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|--------------|-------------------|----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------| | | Take # | Date | Clean Install | CPUSE Upgrade | | * [**26000/26000T, 16000/16000T**](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk152733) * [**23800, 23900**](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk107516) * **CloudGuard** * **Open Servers** | **Take 300** | 23 September 2019 | [![](https://sc1.checkpoint.com/sc/images/download-m.png)](https://supportcenter.checkpoint.com/supportcenter/portal?action=portlets.DCFileAction&eventSubmit_doGetdcdetails=&fileid=99103) (ISO) | [![](https://sc1.checkpoint.com/sc/images/download-m.png)](https://supportcenter.checkpoint.com/supportcenter/portal?action=portlets.DCFileAction&eventSubmit_doGetdcdetails=&fileid=99107) (TGZ) | | * **[6200, 6600, 6900](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk139932)** * [**3600**](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk110052) | **Take 47** | 13 January 2020 | [![](https://sc1.checkpoint.com/sc/images/download-m.png)](https://supportcenter.checkpoint.com/supportcenter/portal?action=portlets.DCFileAction&eventSubmit_doGetdcdetails=&fileid=102224) (ISO) | N/A | | * **[6200, 6600, 6900](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk139932)** * [**3600**](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk110052) | **Take 47** | 13 January 2020 | [![](https://sc1.checkpoint.com/sc/images/download-m.png)](https://supportcenter.checkpoint.com/supportcenter/portal?action=portlets.DCFileAction&eventSubmit_doGetdcdetails=&fileid=102224) (ISO) | N/A | | * [**3800**](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk110052) * [**6400/6700/7000**](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk139932) * [**16200/16600**](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk152733) * [**28000**](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk152733) | **Take 320** | 21 May 2020 | [![](https://sc1.checkpoint.com/sc/images/download-m.png)](https://supportcenter.checkpoint.com/supportcenter/portal?action=portlets.DCFileAction&eventSubmit_doGetdcdetails=&fileid=105602) (ISO) | N/A | | * [**28600**](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk152733) | **N/A** | 15 June 2020 | [![](https://sc1.checkpoint.com/sc/images/download-m.png)](https://supportcenter.checkpoint.com/supportcenter/portal?action=portlets.DCFileAction&eventSubmit_doGetdcdetails=&fileid=106390) (ISO) | N/A | Also see [sk153152 - Jumbo Hotfix Accumulator for R80.30 (R80_30_jumbo_hf)](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk153152) Note: Starting from *Take 50* of R80.30 Jumbo Hotfix Accumulator: * Each Jumbo Hotfix Take is based on [Check Point R80.30 with Gaia OS 2.6.18](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk144293) GA Take 200 or [Check Point R80.30 with Gaia OS 3.10 (R80.30 3.10)](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk152652) GA *Take 273*. * Each Jumbo Hotfix Take supports all R80.30 3.10 platforms and can be installed on CloudGuard IaaS products [AWS](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk125252), [Azure](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk132192), [GCP](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk147032). Resolved Issues {#Resolved Issues} ---------------------------------- |-----------------------|------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------| | R80.30 with Gaia 3.10 Take 300 || | ID | Description | | GAIA-6457 | In a rare scenario, memory leak appears when sending fragmented Multicast traffic | | GAIA-5914 | Drop templates are not disabled for USFW (User space Firewall mode). | | GAIA-6172 | In some scenarios, a new hotfix installation via CPUSE fails on VSX. Refer to [sk159713](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk159713). | | GAIA-5883 | In rare scenario, when configured as a proxy/ICAP client, a Security gateway may crash when using HTTPS Policy Categorization. | | GAIA-6397 | In some scenarios, traffic does not pass in VSX setup with VS-VSW-VS topology and some Threat prevention blades enabled on VSs. | | GAIA-6324 | In some scenarios, sending IP fragmented traffic through a Virtual Switch or Virtual Router fails with "*Virtual defragmentation error*". | | GAIA-6325, PMTR-39660 | In a rare scenario, when SecureXL is enabled, a VSX gateway may crash. Refer to [sk160912](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk160912). | | GAIA-6260, STRM-149 | In some scenarios, a remote client disconnects after one hour although the session is not idle. Refer to [sk160213](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk160213). | | GAIA-6383 | Improved scalability and resiliency of URL Filtering service. | | PRHF-4499, PRHF-3608 | On cluster, Drop templates are disabled on reboot. Refer to [sk153412](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk153412). | Known Limitations {#Known Limitations} -------------------------------------- |----------------------|---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------| | ID | Description | | - | Stand-Alone deployment supported only in 3600/3800/6200/6400/6600/6700/6900/7000 appliances. | | - | Conn?ctivity upgrade is not supported. | | DP-6242 | To enable a CPUSE upgrade from gogo_heat_188_main to R80.40 or R81, do the following: 1. Run '*touch /var/tmp/allow_r80_40_new_upgrade*' 2. Initiate CPUSE upgrade. | | GAIA-3380 | The '*raid_diagnostic*' utility does not work for open servers. | | GAIA-2649 | On CloudGuard for AWS, the '*ethtool -G*' command is not supported. | | GAIA-2648 | On CloudGuard for Azure, the '*ethtool -G*' command is not supported. | | GAIA-2650 | On CloudGuard for AWS, speed and duplex information is not available when using the *ethtool.* | | GAIA-3205 | Cannot change interface link speed to 1000MB after it is changed to 100MB. | | GAIA-3180 | On HP Open servers with onboard NIC, Interface status in the switch might show as "Connected" even though the state in Gaia is OFF. | | GAIA-3345 | Changing the MTU on the directly connected switches may cause drops of fragmented traffic due to a MTU mismatch. | | ACCL-417 | The following were removed: CPView Network -\> Top-Protocols and Network -\> Top-Connections tabs. | | GAIA-3957, GAIA-3944 | When running the Hardware Diagnostic options of the RMA tool, "*ipsctl_get_family_id:received error*" messages may appear. These error messages can be safely ignored. | | GAIA-3490 | 10GbE i40e NICs determine their link-speed based on the type of connected transceiver (1G ot 10G) and cannot be changed manually. | | GAIA-4937 | Installing R80.20, R80.20.M2 and R80.30 Security Management Server with CPUSE or Blink on a machine previously installed as a R80.30 Security Gateway that uses the Linux Kernel version 3.10 is not supported. Instead, it is possible to perform a clean install using an ISO file. | | GAIA-4849 | OSPF is not supported with unnumbered VTIs. | | GAIA-5914 | Drop templates are not disabled for USFW (User space Firewall mode). * **Resolved in R80.30 with Gaia 3.10 Take 300** | | GAIA-6184 | "Error while stopping check point processes" error when installing packages on a VSX environment. | | GAIA-4573 | Upgrade is only supported between kernel 3.10 versions (R80.20 3.10 and R80.30 3.10) | | GAIA-6992 | CPUSE Clean install is not supported for 23000 appliances. | | GAIA-5737 | Duplicate ping messages may appear when configuring bonding groups (\~30 sec), one over the X722 based network interfaces and the other on Intel X710 Based network interfaces. | | GAIA-5732, PRJ-2583 | The *fw ctl multik utilize* command is not supported in the User Mode Firewall (USFW). | | PMTR-57258 | Connections do not survive failover in a ClusterXL configured in the Active/Standby Bridge mode. | Documentation {#Documentation} ------------------------------ |---------------------------------------------------------------------------------------------------------------------------------------------------| | Administration Guides | | [R80.30 3.10 Release Notes](https://sc1.checkpoint.com/documents/R80.30_3.10/WebAdminGuides/EN/CP_R80.30_3.10_RN/Default.htm) | | Related Solutions | | [sk144112 - Gaia Dynamic CLI](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk144112) | {#limitationTable} --- # Agent Instructions This content is from the Check Point Support Center (https://support.checkpoint.com), the official knowledge base for Check Point cybersecurity products. ## Navigating This Knowledge Base - **Complete index**: [llms.txt](https://support.checkpoint.com/llms.txt) - **All SK articles**: [SecureKnowledge Sitemap](https://support.checkpoint.com/sitemaps/secureknowledge-sitemap-index.xml) - **SK article URL pattern**: `https://support.checkpoint.com/results/sk/{skId}` - **Markdown responses**: AI bot User-Agents automatically receive `text/markdown` content