> Source: [sk166954](https://support.checkpoint.com/results/sk/sk166954) # sk166954 - Resolved issues for 1200R appliances | Property | Value | |----------|-------| | Solution ID | sk166954 | | Date Created | 2020-05-18 | | Last Modified | 2020-05-19 | | Technical Level | General | | Products | Spark Firewall (Locally Managed) | | Versions | R82.00.X, R81.10.X | ## Solution The following table lists all issues for 1200R appliances that were resolved since October, 2018, the date on which the last GA for 1200R ([R77.20.81](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk137212)) was published. Resolved Issues {#Resolved Issues} ---------------------------------- > |-------------|-----------|----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------| > | **Build #** | **ID** | **Description** | > | 530 | SMB-5527 | In rare scenarios, PPPoE traffic causes 1400 appliances to crash. | > | 531 | SMB-6450 | The NAS-IP-ADDRESS attribute is missing from the RADIUS authentication packet sent from the SMB to the RADIUS server. | > | 533 | SMB-6606 | Configuring a switch (through the CLI) that contains 2 digit ports in S2 takes the wrong pivot port. | > | 539 | SMB-6597 | When QoS is configured on a dual internet connection (two Internet connections on a single physical interface), the QoS policy may be applied incorrectly or not applied at all. | > | 540 | SMB-6592 | After installing R77.20.81 firmware on the appliance, the firmware upgrade check fails with this error message: "`No valid internet connection`." | > | 541 | SMB-6560 | Trial mode starts as soon as a factory reset is done even if the user does not run the First Time Configuration Wizard. | > | 542 | SMB-6608 | New Advanced option to avoid packet drop of applications that have a low TTL value. | > | 543 | SMB-6480 | On locally managed SMB appliances, configuring a cluster with 2 or more VLANs and syncing the secondary member causes all interfaces to appear as "non HA." | > | 547 | SMB-5586 | Locally managed Gateway might establish a VPN tunnel using aggressive mode negotiation (instead of main mode) even if aggressive mode is enabled only on one site. | > | 548 | SMB-6350 | Security portfix: SAN field that contains '\\0' causes a parsing issue. | > | 548 | SMB-6664 | High CPU load and excessive logs may occur when two PPP internet connections are configured on a single DSL interface with QoS configured on both connections, and both connections have difficulties due to the DSL line quality. | > | 550 | SMB-6760 | VPN certificate's public key is printed in log. | > | 551 | SMB-6762 | Attempting to add a bridge through the CLI using the command '*\> add bridge name br0*' fails. | > | 555 | SMB-6791 | Access to HTTPS sites signed by specific trusted root CAs may fail when SSL inspection is enabled. | > | 556 | SMB-7063 | Editing a bridged internet connection in the Local Network tab deletes the internet connection | > | 557 | SMB-7183 | An image upgrade may fail in the rare event that the last block in the kernel partition is bad. | > | 571 | SMB-8543 | ClusterXL translates DHCP relay port to ephemeral port. | > | 573 | SMB-9032 | cptls is vulnerable to padding oracle Timing/Side Channel Attack. | > | 583 | SMB-9663 | CIP - CVE-2019 - TCP SACK Vulnerability. | > | 586 | SMB-9839 | Locally managed clusters are sometimes not synced when a fail-over is triggered by the 'force member down' button in the WebUI. | > | 591 | SMB-8343 | Updated trusted CA list for locally manged. | > | 592 | SMB-10856 | When a cluster member is down after using the command '*cpstop* ', the command '*cpstart*' does not bring it back up. | > | 593 | SMB-10864 | CIP - ability to overwrite the cluster members' interface IP addresses, as part of the gateway side enablement of the SmartLSM GUI configuration. | > | 597 | SMB-10258 | WAN interface might lose the IP and Gateway on 1200R firewalls. | > | 597 | SMB-10686 | When URL Filtering is enabled, if there is a proxy that uses a port other than 8080, the Gateway still tries to use port 8080 to open HTTP connections to . As a result, the URL Filtering blade may not function as expected. | > | 597 | SMB-10868 | SNMP walk might cause sfwd to stop working. | > | 597 | SMB-10969 | Cluster failover with ISP Redundancy and ping-probing does not work | > | 597 | SMB-7078 | Kernel panic in fwmultic_gconn.c after release lock | > | 597 | SMB-9402 | SMB Wireless network authentication DOS due to CVE-2019-11555 | > | 597 | SMB-9968 | Policy installation after load fails. | > | 601 | SMB-11217 | Fix httpd zombie processes. | > | 601 | SMB-11550 | VPN traffic is blocked by APPI or URLF. | > | 601 | SMB-11707 | Allow central mgmt of the fw_enc_conns_use_internal parameter. | > | 603 | SMB-11441 | httpd zombie processes appear in user's environment. | > | 604 | SMB-11853 | A vulnerability in the code enables an attacker to cause a buffer overflow which can lead to a Denial of Service condition. | > | 605 | SMB-11945 | Slow policy install to R77 SMB on MGMT R80.xx. | --- # Agent Instructions This content is from the Check Point Support Center (https://support.checkpoint.com), the official knowledge base for Check Point cybersecurity products. ## Navigating This Knowledge Base - **Complete index**: [llms.txt](https://support.checkpoint.com/llms.txt) - **All SK articles**: [SecureKnowledge Sitemap](https://support.checkpoint.com/sitemaps/secureknowledge-sitemap-index.xml) - **SK article URL pattern**: `https://support.checkpoint.com/results/sk/{skId}` - **Markdown responses**: AI bot User-Agents automatically receive `text/markdown` content