> Source: [sk162552](https://support.checkpoint.com/results/sk/sk162552) # sk162552 - Check Point Maestro R80.30SP with Gaia 3.10 | Property | Value | |----------|-------| | Solution ID | sk162552 | | Date Created | 2019-09-22 | | Last Modified | 2023-06-11 | | Technical Level | General | | Products | Scalable Platforms | | Versions | R82.20, R82.10, R82, R81.20 | | OS | Gaia | | Platform | 7000, 28000, 16000, 26000, 6000 | ## Solution **Table of Contents:** * What's New * Downloads * Known Limitations * Documentation * Revision History > |------------------------------------------------------------------------------|------------------------------------------------------------------------------|------------------------------------------------------------------------------| > | ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk138233/11902270251.png) | ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk138233/21902270252.png) | ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk138233/31902270252.png) | > | ### Security at Hyperscale | ### Operational Supremacy | ### Cloud-Level Resiliency | > | On demand expansion available for Security Gateways of all sizes | Introduces new and simple ways to architect and manage cyber security | Delivering the highest standard of resiliency with Telco-Grade Technology | What's New {#What's New} ------------------------ R80.30SP is supported on: 6200 Base/Plus, 6400 Base/Plus, 6600 Base/Plus, 6700 Base/Plus, 6900 Base/Plus, 7000 Base/Plus, 16000 Base/Plus/Turbo, 16200 Base/Plus, 26000 Base/Plus/Turbo, 28000 Base/Plus, 16600 HS appliances, and 28600 HS appliances (clean install only, no upgrade path) R80.30SP is **not** supported on **all**Orchestrator appliances. ### Linux Kernel 3.10 Show / Hide this section > ? Improved firewall resiliency > > ? New kernel capabilities: > > ? Upgraded Linux kernel 3.10 > > ? New partitioning system (*gpt*): > > ? Supports more than 2TB physical/logical drives > > ? Faster file system (*xfs*) > > ? Supports larger system storage (up to 48TB tested) > > ? I/O related performance improvements > > ? Multi-Queue (refer to [sk153373](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk153373)): > > ? Full Gaia Clish support for Multi-Queue commands > > ? Automatic "on by default" configuration > > ? SMB v2/v3 mount support in Mobile Access blade > > ? Added NFSv4 (client) support (NFS v4.2 is the default NFS version used) > > ? Support of new system tools for debugging, monitoring, and configuring the system: > > ? *iotop* (provides I/O runtime stats) > > ? *lshw* (provides detailed information about all hardware) > > ? *lsusb* (provides information about all devices connected to USB) > > ? *lsscsi*(provides information about storage) > > ? *ps* (new version, more counters) > > ? *psmisc*(new version, more counters) > > ? *top*(new version, more counters) > > ? *iostat* (new version, more counters > > ? New *glibc* : `glibc-2.17-157` > > ? New *ethtool* : `ethtool-4.8-7` > > ? New *Bash* : `bash-4.2.46-29` > > ? *lbzip2* support (free, multi-threaded compression utility) > > ? *xz* support > > ? *rsync* support ### Threat Prevention Show / Hide this section > > #### SandBlast Threat Extraction for web-downloaded documents > > ? Simple to use, easily enabled for an existing Security Gateway, and does not require any changes to your configuration on the network or client side. > > ? Extends Threat Extraction, Check Point's File Sanitization capabilities, to web-downloaded documents. Supported file types: Microsoft Word, Excel, PowerPoint, and PDF formats. > > ? Threat Extraction prevents zero-day and known attacks by proactively removing active malware, embedded content, and other potentially malicious parts from a file. Promptly delivers sanitized content to users, maintaining business flow. > > ? Allows access to the original file, if it is determined to be safe. > > #### Endpoint Security Threat Extraction for web-downloaded documents > > ? Endpoint and Network compatibility includes a new mechanism that inspects files just once, either by the Security Gateway or the Endpoint client. > > #### Advanced Threat Prevention > > ? Advanced forensics details for Threat Prevention logs. > > ? Ability to import Cyber Intelligence Feeds to the Security Gateway using custom CSV and Structured Threat Information Expression (STIX). > > ? Stability and performance improvements for SandBlast Threat Prevention components. > > ? Consolidated Threat Prevention dashboard provides full threat visibility across networks, mobile devices, and endpoints. > > #### Enhanced visibility to "Malware DNA" analysis > > Improved understanding for security personnel of how malware analysis is performed and the reasons a file is flagged as malicious. The Threat Detail report now includes the Malware DNA -- a deeper exploration into any features that are similar to those in known malware families. The enhanced analysis of similarities includes: > > ? Behavior > > ? Code structure > > ? File similarities > > ? Patterns of connection attempts to malicious websites and C\&C servers. > > #### Complete face-lift for the Threat Emulation Findings Summary Report > > ? Redesigned Threat Emulation findings report for a more modern look. > > ? The report also includes a dynamic map view of malware family appearances around the globe over time. > > ? For more details, as well as information about availability, refer to [sk120357](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk120357). > > #### Threat Prevention APIs enhancements > > ? Added ability to send files via APIs to be scanned by Anti-Virus on local Check Point appliances. This capability is supported for both Security Gateways and dedicated Threat Emulation appliances. > > ? For more information, refer to the [Threat Prevention API Reference Guide](https://sc1.checkpoint.com/documents/TPAPI/CP_1.0_ThreatPreventionAPI_APIRefGuide/html_frameset.htm). > > #### New and Improved Machine-Learning Engines for Threat Emulation > > ? Added new machine-learning engines focused on malware detection inside document files raising the catch rate to optimum. > > #### Enhanced Control of Threat Emulation and MTA actions behavior in case of a failure > > ? Added ability for administrators to granularly configure Threat Emulation policy for different behaviors for specific errors - the administrator can decide whether to allow a file transfer based on the error type. > > ? When administrators configure the MTA gateway to block emails in case a scan fails (fail-block), they can now also granularly configure MTA to deliver emails to the users for specific failure types. > > ? For more details and configuration instructions, refer to [sk132492](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk132492) and [sk145552](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk145552). > > #### Enhanced Anti-Virus support > > ? Anti-Virus protections are now applied by default on files received through the MTA gateway. These protections include signatures, hashes and link reputation checks for attachments, link reputation checks for the email body, and granular enforcement based on the file type. > > #### Enhanced Import of additional IOCs > > Security Gateways configured as MTA can now be enriched with custom Anti-Virus IOCs from external sources. > > ? IOCs can be manually imported via the User Interface. > > ? Links to external feeds for automatic ongoing IOC importing can be added via a configuration change. > > ? For more information and setup instructions, refer to [sk92264](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk92264) and [sk132193](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk132193). > > #### Enhanced management of the MTA > > ? Failure to inspect the attachments or links inside an email is now immediately treated as a failure. Previously, this was treated by adding the email to the MTA queue and retrying the action. As the majority of inspection retries fail as well, this change reduces the size of the queue and improves MTA performance. ### Security Gateway Show / Hide this section > > #### SSL Inspection > > **Server Name Indications (SNI)** > > ? Improved TLS implementation for TLS Inspection and categorization > > ? Next Generation Bypass - TLS inspection based on Verified Subject Name > > **TLS 1.2 support for additional cipher suites** > > ? TLS_RSA_WITH_AES_256_GCM_SHA384 > > ? TLS_RSA_WITH_AES_256_CBC_SHA256 > > ? TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256 > > ? TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256 > > ? TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384 > > ? TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256 > > ? TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384 > > ? TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256 > > ? X25519 Elliptic Curve > > ? P-521 Elliptic Curve > > ? Full ECDSA support > > ? Improved fail open/close mechanism > > ? Improved logging for validations > > ? For the complete list of supported cipher suites, refer to [sk104562](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk104562) Downloads {#Downloads} ---------------------- **Important Notes**: * R80.30SP GA release is aligned with [R80.20SP Jumbo Hotfix Accumulator Take 191](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk155832). * R80.30SP is not supported on Orchestrator appliances MHO140 and MHO170. Use R80.20SP with Jumbo Hotfix (see table below). > |-------------------------------|----------------------------------------------------------------------------------|-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|------------------------------------| > | **Security Appliances** |||| > | **Take** | **Appliances** | **Package** | **Comments** | > | R80.30SP Take 47 | Refer to [sk162373](https://supportcontent.checkpoint.com/solutions?id=sk162373) | [![](https://sc1.checkpoint.com/sc/images/download-m.png "R80.30SP (Take 47)")](https://supportcenter.checkpoint.com/supportcenter/portal?action=portlets.DCFileAction&eventSubmit_doGetdcdetails=&fileid=105346) (ISO) | Aligned to R80.30SP Jumbo Take 31 | > | **Orchestrator** |||| > | R80.20SP Take 210 (and above) | N / A | Refer to [sk155832](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk155832) | R80.20SP JHF Take 210 (and higher) | Known Limitations {#Known Limitations} -------------------------------------- > Refer to [sk148074: Known Limitations for Scalable Platform and Maestro Appliances](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk148074). > Documentation {#Documentation} ------------------------------ > |---|---| > | Datasheets || > | [Maestro Hyperscale Orchestrator Datasheet](https://www.checkpoint.com/downloads/products/maestro-hyperscale-orchestrator-datasheet.pdf) || > | [Port Mapping for Quantum Maestro Orchestrator MHO-140](http://downloads.checkpoint.com/dc/download.htm?ID=116650) || > | [Port Mapping for Quantum Maestro Orchestrator MHO-170](http://downloads.checkpoint.com/dc/download.htm?ID=116651) || > | User Guides || > | [Maestro R80.30SP Release Notes](https://sc1.checkpoint.com/documents/R80.30SP/WebAdminGuides/EN/CP_R80.30SP_Maestro_ReleaseNotes/Content/Front-Matter/Front-Matter-Important-Information.htm) || > | [Quantum Maestro Orchestrator Quick Start Guide for MHO-140 and MHO-170](http://downloads.checkpoint.com/dc/download.htm?ID=75205) || > | [Quantum Maestro Getting Started Guide](https://sc1.checkpoint.com/documents/Appliances/GSG_Maestro/EN/Default.htm) || > | [Maestro R80.30SP Administration Guide](https://sc1.checkpoint.com/documents/R80.30SP/WebAdminGuides/EN/CP_R80.30SP_Maestro_AdminGuide/Default.htm) || > | [Maestro R80.30SP Gaia Administration Guide](https://sc1.checkpoint.com/documents/R80.30SP/WebAdminGuides/EN/CP_R80.30SP_Maestro_Gaia_AdminGuide/html_frameset.htm) || > | [Maestro R80.30SP Next Generation Security Gateway Guide](https://sc1.checkpoint.com/documents/R80.30SP/WebAdminGuides/EN/CP_R80.30SP_Maestro_NextGenSecurityGateway_Guide/html_frameset.htm) || > | [Maestro R80.30SP Performance Tuning Administration Guide](https://sc1.checkpoint.com/documents/R80.30SP/WebAdminGuides/EN/CP_R80.30SP_Maestro_PerformanceTuning_AdminGuide/html_frameset.htm) || > | [Maestro VSX R80.30SP Administration Guide](https://sc1.checkpoint.com/documents/R80.30SP/WebAdminGuides/EN/CP_R80.30SP_Maestro_VSX_AdminGuide/html_frameset.htm) || > | Related Solutions || > | [sk148074: Known Limitations for Scalable Platform and Maestro Appliances](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk148074) || > | [sk165312: Maestro R80.30SP Jumbo Hotfix Accumulator](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk165312) || > | [sk147853: Maestro Frequently Asked Questions (FAQ)](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk147853) || > | [sk96246: Documentation for Check Point Appliances](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk96246) || Revision History {#Revision History} ------------------------------------ > Show / Hide this section > > |---------------|---------------------------------------------------------------------------------------------------------------------------------------------------------| > | Date | Description | > | 30 June 2022 | Updated the link to the Maestro Getting Started Guide | > | 19 July 2021 | Added the "Port Mapping for Quantum Maestro Orchestrator MHO-140" document. Added the "Port Mapping for Quantum Maestro Orchestrator MHO-170" document. | > | 10 April 2021 | In the "Documentation" table added the "Datasheets" section and added links to additional related solutions | > | 02 April 2021 | In the "Downloads" table added software versions "R80.30SP" and "R80.20SP" | > | 08 June 2020 | GA Replacement of R80.30SP image | > | 31 March 2020 | GA Replacement of R80.30SP image | > | 06 Oct 2019 | First release of this document | --- # Agent Instructions This content is from the Check Point Support Center (https://support.checkpoint.com), the official knowledge base for Check Point cybersecurity products. ## Navigating This Knowledge Base - **Complete index**: [llms.txt](https://support.checkpoint.com/llms.txt) - **All SK articles**: [SecureKnowledge Sitemap](https://support.checkpoint.com/sitemaps/secureknowledge-sitemap-index.xml) - **SK article URL pattern**: `https://support.checkpoint.com/results/sk/{skId}` - **Markdown responses**: AI bot User-Agents automatically receive `text/markdown` content