> Source: [sk166715](https://support.checkpoint.com/results/sk/sk166715)
# sk166715 - Check Point R81
| Property | Value |
|----------|-------|
| Solution ID | sk166715 |
| Date Created | 2020-05-07 |
| Last Modified | 2026-08-12 |
| Technical Level | General |
| Products | Security Gateway, Security Management Server |
| Versions | R81 (EOS), R81 (EOS) |
| OS | Gaia |
## Solution
Click Here to Show the Entire Article
### R81 reached its End of Support
**If you are using this version (or lower), we strongly recommend you upgrade your environments.
Check Point Recommended version for all deployments is [R82.10](https://support.checkpoint.com/results/sk/sk183506) with its Recommended [Jumbo Hotfix Accumulator](https://sc1.checkpoint.com/documents/Jumbo_HFA/R82.10/Default.htm) Take**
**For more info about all Check Point releases, refer to [Release map](https://support.checkpoint.com/results/sk/sk152052) and [Release Terminology](https://support.checkpoint.com/results/sk/sk95746) articles**
**Introduction \| What's New \| Documentation \| Downloads \| Released Hotfixes \| Additional Downloads and Products \| Revision History**
|---|---|---|
|  |||
|---|---|---|
| Introduction {#Introduction} ---------------------------- Welcome to Check Point's Cyber Security Platform. R81 is the industry's most advanced Threat Prevention and security management software that delivers uncompromising simplicity and consolidation across the enterprise. Whether it is deploying the latest technologies and security to protect the organization or expertly crafting security policies, R81 new features include: Infinity Threat Prevention, the industry's first autonomous Threat Prevention system that provides fast, self-driven policy creation and one-click security profiles keeping policies always up to date. Policies are installed in seconds, upgrades require only one click, and gateways can be simultaneously upgraded in minutes. R81 further features secure connectivity for encrypted traffic utilizing the latest standards including TLS 1.3 and HTTP/2. In addition, the Scalable Platform software is now aligned with the R81 Cyber Security Platform bringing feature parity to Check Point Maestro. |||
| What's New in R81 {#New} ------------------------ |||
|  Infinity Threat Prevention > Infinity Threat Prevention is an innovative management model that: > * Provides zero-maintenance protection from zero-day threats, and continuously and autonomously ensures that your protection is up-to-date with the latest cyber threats and prevention technologies. > * Empowers administrators with out-of-the-box policy profiles based on business and IT security needs. > * Streamlines the configuration and deployment of policy profiles across gateways. > * Provides simple and powerful customization to best serve your organization's needs. > ### Threat Prevention {#Toggle_Infinity} > * Manage your custom intelligence feeds through SmartConsole. Add, delete or modify IoC feeds fetched by the Security Gateways as well as import files in a CSV or STIX 1.x formats. > * Threat Extraction is now supported on ICAP server mode, in addition to Threat Emulation and Anti-Virus. > * Improved use of IoCs for indicators based on source IPv4 and IPv6 addresses. > Note: Administrators can still perform granular manual changes to override Check Point's recommended policies and profiles. *** ** * ** ***  Security Gateway and Gaia > ### Scalable Platforms {#Toggle_GW} > * Scalable Platforms is now streamlined and part of R81 General Availability, aligning Jumbo Hotfix accumulators to deliver the latest enhancements and bug fixes and support most of the new features introduced in R81. See [sk169954](https://support.checkpoint.com/results/sk/sk169954) for more information. > ### HTTPS Inspection > * HTTPS Inspection supports the FutureX Hardware Security Module (HSM) by storing outbound HTTPS Inspection cryptographic keys and certificates on the HSM server. > * Implementation of TLS 1.3 for SSL inspection. > Note: > > * TLS 1.3 is off by default and is only applicable with User Space Firewall (USFW) is active > * Hardware Security Module (HSM) is not supported with TLS 1.3. >
> ### Access Control > * Generic Data Center - Use Generic Data Center Objects in the Source and Destination columns of Access Control, NAT, Threat Prevention and HTTPS Inspection rules to enforce access to or from IP addresses defined on external web servers. IP addresses defined in the object are automatically updated without the need for policy installation. > * Support an unlimited number of languages in UserCheck objects. > ### Policy Installation > * Accelerated Policy Installation - A new Access Control policy installation flow that optimizes common use-cases and drastically speeds up the installation. The Policy installation is accelerated based on the changes made to the Access Control policy since the last installation. To learn more about Accelerated Policy Installation refer to the [R81 Security Management Administration Guide](https://sc1.checkpoint.com/documents/R81/WebAdminGuides/EN/CP_R81_SecurityManagement_AdminGuide/Default.htm). > * Concurrent Security Policy installation - One or more administrators can run multiple installation tasks of different policies on multiple gateways at the same time. > ### NAT Rule Base > * Support for Domain objects, Updatable objects, Security Zones, Access Roles and Data Center objects. > * Hit count for NAT rules. > ### Identity Awareness > * Azure Active Directory support for Identity Awareness - Use the Identity Awareness Access role picker to authenticate and authorize Azure AD users and groups. > * Identity Awareness nested groups - Discovers all the groups a user belongs to from the branch specified in the LDAP account unit in one query. > * Security ID (SID) support for Identity Awareness - Move users and groups to different LDAP Organizational Units without the need to modify the Access Role Policy. > Note: Security ID (SID) feature is off by default. Refer to [R81 Identity Awareness Administration Guide](https://sc1.checkpoint.com/documents/R81/WebAdminGuides/EN/CP_R81_IdentityAwareness_AdminGuide/Default.htm) for more information. > ### IPsec VPN > * Ability to configure multiple ciphers for external Gateways in a single VPN community. Use granular encryption methods between two specific VPN peers. > * Support for SHA-512 encryption method. > ### Mobile Access > * A fresh and modern user interface with improved user experience: > * Redesigned scan results > * Discontinued the SNX connection pop-up > * Greater accessibility for non-English speakers > * Launch all applications in separate tabs without losing the main page window > * One click sign-out > * Simplified customization to easily utilize a brand identities > * Full support for mainstream browsers that run on all major platforms > * Clientless RDP and SSH access through Mobile Access Blade's browser portal using Apache's Guacamole? software suite > * Support for custom AD attributes to allow mapping of end-users to their office desktops for personalized portal link display and Access Control > ### Clustering > * Geo-Cluster in HA mode for cloud environments - Supports the configuration of the cluster Sync interface on different subnets while allowing L3 communication between the members on the sync interface. L2 connectivity and a trusted network between the cluster members (although still available) is not mandatory anymore. > ### VSX > * Configure Virtual Router in VSX VSLS mode. > * Configure Multi-Bridge in VSX VSLS mode. > * Configure bridge interfaces on a standard Virtual System in VSX. > * Use Threat Emulation and Identity Awareness Software Blades on a Virtual Systems in Bridge mode. > * Configure VSX Gateway and VSX Cluster objects using Management REST APIs. > * Configure Dynamic Routing VPN through Virtual Tunnel Interface (VTI) in VSX mode. > * Independent QoS, DNS and Proxy server configuration per Virtual System. > * VSX_util tool to downgrade VSX management objects to earlier versions. > ### Acceleration > * Enhanced Multi-Queue distribution of IPsec VPN traffic. > ### Remote Access VPN > * Significant performance improvements for Remote Access VPN clients in Visitor Mode. > * Support for strongSwan IPsec clients on different Linux distributions. > ### Gaia OS > * Scheduled Gaia Snapshots - Use Gaia Scheduled Snapshot to automatically back up and export configuration settings. > * Added support for: > * The Google Compute Engine virtual Network Interface (gVNIC). > * Additional tunneling protocols: > * Virtual Extensible LAN (VXLAN). > * Generic Routing Encapsulation (GRE). > * Link Layer Discovery Protocol (LLDP) configuration trough CLISH and the Gaia Portal. > * IP conflict detection - Monitor and detect duplicate IP addresses located in the network. > * Multi-Queue for Management and Sync interfaces. > ### Gaia REST API > * API to set your device as a Gateway/Management/Multi-Domain/Log Server in the First Time Configuration Wizard. > * Control IPv6 status. > ### Advanced Routing > * Enhancements for additional Dynamic Routing features > * OSPFv3 AH authentication for OSPFv3 protocol security. > * IPv6 route aggregation - Reduces the number of prefixes advertised to neighbor routers to improve performance and scaling. > * IPv4/IPv6 NAT-pool routes - Configure and redistribute NAT-pool routes to routing protocols. > * Routing Information Protocol (RIP) route sync. > * PIM restart capability. > * BGP support for VxLAN interfaces. > * Dynamic Routing support for GRE interfaces *** ** * ** ***  CloudGuard IaaS > ### CloudGuard Controller {#Toggle_CloudGuard} > * Data Center Query Objects - Use Data Center Objects to represent multiple Data Centers in the Security Policy when you build queries. This provides easier and more efficient division of the responsibilities to manage Data Centers. > * New Data Centers support: > * Kubernetes Data Center - Added CloudGuard Controller support for Kubernetes Clusters. Administrators can now create a Kubernetes-aware security policy for Kubernetes North-South traffic. > * VMware vCenter version 7. > * CloudGuard Controller can use the system proxy for connections to all Data Centers. > * A new object category in SmartConsole's object explorer called "Cloud" aggregates all Data Centers, Data Center objects and Data Center queries into one. > ### CloudGuard Data Centers > * Integration of CloudGuard IaaS for East-West deployments using VMware NSX-T. *** ** * ** ***  Security Management > ### Central Deployment {#Toggle_Management} > Use SmartConsole to: > * Upgrade Security Gateways and Clusters between major versions > * Upgrade VSX Gateways and VSX Clusters > * Install offline packages - The Security Gateway does not need to be connected to the internet to import the installation packages to the Security Management Server and distribute to targets > ### Multi-Domain Server > * Cross-Domain Management Server Search to search for objects across multiple Domain Management Server databases. > * High Availability for Domain Management Server with the Security Management Server. A Security Management Server can operate as a standby or an active Security Management in a Management High Availability setup. > * Configure a dedicated Log Server and a dedicated SmartEvent server for an individual Domain in a Multi-Domain environment. > ### Management REST API > * General performance improvement to Management REST API. > * API throttling for login commands, to prevent load on the Security Management Server. > * New API commands for: User Management, Identity Tags, Multi-Domain Server, High Availability, Automatic Purge and much more. Visit the [Check Point API reference](https://sc1.checkpoint.com/documents/latest/APIs/#introduction~v1.7%20) for more information. > * Use the Security Management Server to run REST API commands on a gateway. > ### SmartConsole > * Support for multiple TACACS servers to utilize redundancy when administrators authenticate to SmartConsole. > * Changes Report - Generate a report that lists the changes between two revisions or lists the changes performed during a private session. > * Administrators can now view, add and delete licenses through SmartConsole. > * Support for CloudGuard Edge configuration in SmartConsole. > ### SmartEvent > * A new MITRE ATT\&CK view to investigate security issues according to the MITRE defense models, and extract immediate action items based on the mitigation flow. > ### Management Server Upgrade > * Significant performance improvement in the upgrade process starting from R80.20 and higher to R81 for Security Management Servers. > ### Logging and Monitoring > * New API for log queries to fetch logs through API. Use a single API management command to query for logs or statistics. > * Significant improvement in log indexing, queries and SmartEvent views and reports. > * Export logs with a timestamp of milliseconds, to construct a *chain of events* more easily and efficiently. > * Log attachment API to automatically fetch log attachments with Log Exporter, or API for logs. > . *** ** * ** ***  Endpoint Security > * SandBlast Agent Web Management - A new Web-based management interface for Endpoint Threat Prevention components. > Note: For the best user experience it is recommended to use SandBlast Agent Web Management with Google Chrome. > * Communication with management services remains on port 443 instead of port 4434 when the Endpoint Management component is activated. > * Anti-Malware support for shared signature locations to support non-persistent VDI environments. > * Manage URL Filtering capabilities of SandBlast Agent Browser Extension. > * Application Control policy changes - Support multiple versions per product, terminate application and block WSL. (Windows Subsystem for Linux). > * New set of Developer Protections for developers computers. > * Compliance integration with Windows Server Update Services (WSUS). > * TACACS authentication for Web Remote Help (WebRH). > * Media Encryption \& Port Protection - Import device overrides from a file. *** ** * ** *** |||
|---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|----------------------------------------------------------------------------------------------------|-----------------------------------------------------------------------------------------------------------------------------------------------|------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|
| Documentation {#Documentation} ------------------------------ ||||
| **[R81 Release Notes](https://sc1.checkpoint.com/documents/R81/WebAdminGuides/EN/CP_R81_RN/Default.htm)** | ** Administration Guides** |  **[Resolved Issues](https://support.checkpoint.com/results/sk/sk166716)** | ** [Known Limitations](https://support.checkpoint.com/results/sk/sk166717)** |
| More |--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------| | ### R81 Guides | | [R81 Installation and Upgrade Guide](https://sc1.checkpoint.com/documents/R81/WebAdminGuides/EN/CP_R81_Installation_and_Upgrade_Guide/Default.htm) | | [R81 CLI Reference Guide](https://sc1.checkpoint.com/documents/R81/WebAdminGuides/EN/CP_R81_CLI_ReferenceGuide/Default.htm) | | [R81 Gaia Administration Guide](https://sc1.checkpoint.com/documents/R81/WebAdminGuides/EN/CP_R81_Gaia_AdminGuide/Default.htm) | | [R81 Gaia Advanced Routing Administration Guide](https://sc1.checkpoint.com/documents/R81/WebAdminGuides/EN/CP_R81_Gaia_Advanced_Routing_AdminGuide/Default.htm) | | [R81 Carrier Security Administration Guide](https://sc1.checkpoint.com/documents/R81/WebAdminGuides/EN/CP_R81_CarrierSecurity_AdminGuide/Default.htm) | | Security Management | | [R81 Quantum Security Management Administration Guide](https://sc1.checkpoint.com/documents/R81/WebAdminGuides/EN/CP_R81_SecurityManagement_AdminGuide/Default.htm) | | [R81 Multi-Domain Security Management Administration Guide](https://sc1.checkpoint.com/documents/R81/WebAdminGuides/EN/CP_R81_Multi-DomainSecurityManagement_AdminGuide/Default.htm) | | [R81 Logging and Monitoring Administration Guide](https://sc1.checkpoint.com/documents/R81/WebAdminGuides/EN/CP_R81_LoggingAndMonitoring_AdminGuide/Default.htm) | | [R81 SmartProvisioning Administration Guide](https://sc1.checkpoint.com/documents/R81/WebAdminGuides/EN/CP_R81_SmartProvisioning_AdminGuide/Default.htm) | | [R81 CloudGuard Controller Administration Guide](https://sc1.checkpoint.com/documents/R81/WebAdminGuides/EN/CP_R81_CloudGuard_Controller_AdminGuide/Default.htm) | | Security Gateway | | [R81 Quantum Security Gateway Guide](https://sc1.checkpoint.com/documents/R81/WebAdminGuides/EN/CP_R81_NextGenSecurityGateway_Guide/Default.htm) | | [R81 ClusterXL Administration Guide](https://sc1.checkpoint.com/documents/R81/WebAdminGuides/EN/CP_R81_ClusterXL_AdminGuide/Default.htm) | | [R81 VSX Administration Guide](https://sc1.checkpoint.com/documents/R81/WebAdminGuides/EN/CP_R81_VSX_AdminGuide/Default.htm) | | [R81 VoIP Administration Guide](https://sc1.checkpoint.com/documents/R81/WebAdminGuides/EN/CP_R81_VoIP_AdminGuide/Default.htm) | | [R81 QoS Administration Guide](https://sc1.checkpoint.com/documents/R81/WebAdminGuides/EN/CP_R81_QoS_AdminGuide/Default.htm) | | [R81 Performance Tuning Administration Guide](https://sc1.checkpoint.com/documents/R81/WebAdminGuides/EN/CP_R81_PerformanceTuning_AdminGuide/Default.htm) | | [R81 Site-to-Site VPN Administration Guide](https://sc1.checkpoint.com/documents/R81/WebAdminGuides/EN/CP_R81_SitetoSiteVPN_AdminGuide/Default.htm) | | [R81 Identity Awareness Administration Guide](https://sc1.checkpoint.com/documents/R81/WebAdminGuides/EN/CP_R81_IdentityAwareness_AdminGuide/Default.htm) | | [R81 Threat Prevention Administration Guide](https://sc1.checkpoint.com/documents/R81/WebAdminGuides/EN/CP_R81_ThreatPrevention_AdminGuide/Default.htm) | | [R81 Data Loss Prevention Admin Guide](https://sc1.checkpoint.com/documents/R81/WebAdminGuides/EN/CP_R81_DataLossPrevention_AdminGuide/Default.htm) | | [R81 Remote Access VPN Administration Guide](https://sc1.checkpoint.com/documents/R81/WebAdminGuides/EN/CP_R81_RemoteAccessVPN_AdminGuide/Default.htm) | | Mobile Security | | [R81 Mobile Access Administration Guide](https://sc1.checkpoint.com/documents/R81/WebAdminGuides/EN/CP_R81_MobileAccess_AdminGuide/Default.htm) | | Endpoint Security | | [R81 Harmony Endpoint Server Administration Guide](https://sc1.checkpoint.com/documents/R81/SmartEndpoint_OLH/EN/Default.htm) | | [R81 Harmony Endpoint Web Management Administration Guide](https://sc1.checkpoint.com/documents/R81/WebAdminGuides/EN/CP_R81_EndpointWebManagement_AdminGuide/Default.htm) | | SmartConsole | | [R81 SmartConsole Online Help](https://sc1.checkpoint.com/documents/R81/SmartConsole_OLH/EN/default.htm) | | Other | | [R81 Documentation Package](https://supportcenter.checkpoint.com/supportcenter/portal?action=portlets.DCFileAction&eventSubmit_doGetdcdetails=&fileid=110062) | ||||
|---------------------------------------------------------------------------------------------------------------------------------------------------|---|---|
| Downloads {#Downloads} ---------------------- |||
|  |  ||
| **SmartConsole** | **Security Gateway / Standalone / Security Management** ||
| [](https://support.checkpoint.com/results/download/135417) | [](https://support.checkpoint.com/results/download/109064) [](https://support.checkpoint.com/results/download/109068) ||
| **Scalable Platform software is now aligned with R81. Refer to [sk169954](https://support.checkpoint.com/results/sk/sk169954) for more information** [Release map](https://support.checkpoint.com/results/sk/sk152052) \| [Upgrade and Backward Compatibility maps](https://support.checkpoint.com/results/sk/sk113113) \| [Releases Terminology](http://supportcontent.checkpoint.com/solutions?id=sk95746) |||
|---|---|---|
| Released Hotfixes {#Released Hotfixes} --------------------------------------
|----------------------------------------------------------------------------------------------------| | Released Hotfixes | | [Jumbo Hotfix Accumulator for R81](https://sc1.checkpoint.com/documents/Jumbo_HFA/R81/Default.htm) | | [Smartconsole R81](https://sc1.checkpoint.com/documents/Jumbo_HFA/R81_SC/Default.htm) |
|---|---|---| | Additional Downloads and Products {#Tools} ------------------------------------------
|------------------------------------------------------------------------------|---|---|---|---|---|---| | Product | Download |||||| | **SmartConsole** | [Check Point R80.x Cloud Demo (sk103431)](https://support.checkpoint.com/results/sk/sk103431) [Portable SmartConsole for R80.x (sk116158)](https://support.checkpoint.com/results/sk/sk116158) |||||| | **Blink - Gaia Fast Deployment** | For Gaia Security Gateway and Management, see [sk120193](https://support.checkpoint.com/results/sk/sk120193) |||||| | **Upgrade Tools package (Migration Tool) for upgrade from R80.20 and above** | See [sk135172](https://support.checkpoint.com/results/sk/sk135172) |||||| | **ISOMorphic Tool** | For Gaia, SecurePlatform and Linux, see [sk65205](https://support.checkpoint.com/results/sk/sk65205) |||||| | **DLP Agent for Exchange Server** | [](https://supportcenter.checkpoint.com/supportcenter/portal/role/supportcenterUser/page/default.psml/media-type/html?action=portlets.DCFileAction&eventSubmit_doGetdcdetails=&fileid=109200)For Windows (MSI) |||||| |||
|---------------------------------------------------------------------------------------|--------------------------------------------------------------------------------------------------| |  |  | | **[Check Point CheckMates Community](https://community.checkpoint.com)** | **[Education and Training](https://support.checkpoint.com/results/sk/sk163417)** |
|---|---|---| | Revision History {#History} --------------------------- Show / Hide
|-------------|--------------------------------------------------------------------------------------------------------------------| | Date | Description | | 03 Nov 2024 | R81 reached its End of Support | | 22 Oct 2024 | Updated SmartConsole package to Build 569 | | 10 Jul 2024 | This version will reach its End of Support on October 31, 2024. | | 05 Jun 2024 | Updated SmartConsole package to Build 568 | | 23 Nov 2023 | Updated SmartConsole package to Build 567 | | 27 Jun 2023 | Updated SmartConsole package to Build 566 | | 22 Mar 2023 | Updated SmartConsole package to Build 565 | | 09 Jan 2023 | Updated SmartConsole package to Build 564 | | 06 Nov 2022 | Updated SmartConsole package to Build 563 | | 01 Sep 2022 | Updated SmartConsole package to Build 562 | | 23 Jun 2022 | Updated SmartConsole package to Build 561 | | 27 Apr 2022 | Updated SmartConsole package to Build 560 | | 15 Mar 2022 | Updated SmartConsole package to Build 559 | | 29 Dec 2021 | Updated SmartConsole package to Build 556 | | 01 Sep 2021 | Updated SmartConsole package to Build 553 | | 27 Jun 2021 | Updated SmartConsole package to Build 552 | | 29 Apr 2021 | Updated SmartConsole package to Build 550 | | 18 Mar 2021 | Updated SmartConsole package to Build 549 | | 27 Dec 2020 | Updated Blink and CPUSE Upgrade packages. Refer to [sk170757](https://support.checkpoint.com/results/sk/sk170757). | | 14 Dec 2020 | * Updated SmartConsole package to Build 548 * Added the Released Hotfixes section | | 09 Dec 2020 | Updated Blink and CPUSE Upgrade packages. Refer to [sk170757](https://support.checkpoint.com/results/sk/sk170757). | | 27 Oct 2020 | Added R81 Documentation Package. | | 22 Oct 2020 | Added downloading packages and additional downloads. | | 21 Oct 2020 | First release of this document. | |||
|||
---
# Agent Instructions
This content is from the Check Point Support Center (https://support.checkpoint.com), the official knowledge base for Check Point cybersecurity products.
## Navigating This Knowledge Base
- **Complete index**: [llms.txt](https://support.checkpoint.com/llms.txt)
- **All SK articles**: [SecureKnowledge Sitemap](https://support.checkpoint.com/sitemaps/secureknowledge-sitemap-index.xml)
- **SK article URL pattern**: `https://support.checkpoint.com/results/sk/{skId}`
- **Markdown responses**: AI bot User-Agents automatically receive `text/markdown` content