> Source: [sk170417](https://support.checkpoint.com/results/sk/sk170417)
# sk170417 - Check Point R81.10 Resolved Issues
| Property | Value |
|----------|-------|
| Solution ID | sk170417 |
| Date Created | 2020-11-10 |
| Last Modified | 2024-06-05 |
| Technical Level | General |
| Products | Security Gateway, Security Management Server, SmartConsole, Cloud Firewall |
| Versions | R81.10 (EOS) |
## Solution
**This article lists all new features and issues that have been resolved in Check Point R81.10 GA**.
* The R81.10 Release accumulates all fixes from previous releases, including fixes from
* [**Jumbo Hotfix Accumulator for R81**](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk170114)**Take 34**
* [Jumbo Hotfix Accumulator for R80.40](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk165456)**Take 118**(except PRJ-21304 - SAML authentication method for Remote Access VPN)
* **[Jumbo Hotfix Accumulator for R80.30](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk153152) Take 236**
* **[Jumbo Hotfix Accumulator for R80.20](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk137592) Take 202**
* **[Jumbo Hotfix Accumulator for R80.10](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk116380) Take 290**
* For more information on R81.10, see the [R81.10 Release Notes](https://sc1.checkpoint.com/documents/R81.10/WebAdminGuides/EN/CP_R81.10_RN/Default.htm), [R81.10 Home Page](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk170416) and [R81.10 Known Limitations](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk170418).
* Visit [Check Point CheckMates Community](https://community.checkpoint.com) to ask questions or start a discussion and get our experts assistance.
**Table of Contents**
|-----------------------------------------------------------------------------------------------------------------------------------|-----------------------------------------------------------------------------------------------------|--------------------------------------------------------------------------------|
| * Installation and Upgrade * Gaia OS * Security Management * Multi-Domain Security Management * SmartConsole / Management Console | * Logging / SmartLog / SmartView * SmartEvent * Compliance * Threat Prevention * Identity Awareness | * Cluster * VSX * Dynamic Routing / Advanced Routing * Small Office Appliances |
List of Resolved issues, New Features and Enhancements in R81.10 GA
-------------------------------------------------------------------
Enter the string to filter the below table:
{# Installation and Upgrade}{#Gaia OS}{#Security Management}{#MDS}{#SmartConsole}{#Logging}{#SmartEvent}{#Compliance}{#Threat Prevention}{#Identity Awareness}{#Cluster}{#VSX}{#Routing}{#SMB}
|------------------------|----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|
| ID | Symptoms |
| Installation and Upgrade ||
| PMTR-60066, PMTR-58941 | **NEW:** Added ability to upgrade the Security Management Server from R80.20 to R81.10 in an R80.20 Multi-Domain Server environment, where a Domain and an R80.20 Security Management Server are configured for High Availability. |
| Gaia OS ||
| PMTR-63096 | **NEW:** Added the ability to configure Ciphers and Message Authentication Codes (MAC) for the Gaia OS built-in OpenSSH Server in Gaia Clish. * To configure a Cipher, run: `set ssh server cipher VALUE {off | on}` * To configure a MAC, run: `set ssh server mac VALUE {off | on}` * To see the list of the supported Ciphers in the installed OpenSSH server, run: `show ssh server cipher supported` * To see the list of the enabled Ciphers, run: `show ssh server cipher enabled` * To see the list of the supported MACs in the installed OpenSSH server, run: `show ssh server mac supported` * To see the list of the enabled MACs, run: `show ssh server mac enabled` |
| PMTR-63821 | **NEW:** Added new Gaia Clish commands to configure and monitor the TLS version used by the Gaia Portal: * `show ssl tls enabled` * `show ssl tls supported` * `set ssl tls off` * `set ssl tls on` |
| PMTR-65666 | **NEW:** Added the ability to configure the access to Gaia REST API for specific users. In Gaia Portal: 1. Go to User Management \> Users. 2. Add a new user or edit an existing user. 3. In the Access Mechanisms section, select or clear Gaia API. 4. Click OK. In Gaia Clish, run: 1. `add rba user access-mechanisms Gaia-API` 2. `delete rba user access-mechanisms Gaia-API` |
| PMTR-66342 | **Enhancement**: Gaia Portal uses TLS 1.2 by default. If a client does not support TLS 1.2, then Gaia Portal uses TLS 1.x versions. |
| PMTR-62519 | **Enhancement:** The */usr/local/apache2/logs/access_log* file is now rotated when its size reaches 1GB. This log file was added to the */etc/cpshell/log_rotation.conf* configuration file (see [sk113241](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk113241)). |
| PMTR-63097 | **Enhancement**: Added the SNMP OID to return the current number of entries in the ARP table: .1.3.6.1.4.1.2620.1.6.22.1.iso.org.dod.internet.private.enterprises.checkpoint.products.svn.arpTableInfo.arpTableSize |
| PMTR-60804 | Bond interface in XOR mode or 802.3AD (LACP) mode may experience suboptimal performance, if on the Bond interface the Transmit Hash Policy is configured to "Layer 3+4" and Multi-Queue is enabled. |
| PMTR-50502, PMTR-63308 | On a CloudGuard Security Gateway for Google Cloud Platform (GCP), KVM, or OpenStack, outputs of these commands show empty RX and TX statistics for VirtIO: *# ethtool -S \* *# cat /proc/interrupts* *# mq_mng --show -v* |
| Security Management ||
| PRHF-15143, PMTR-64482 | **NEW:** Added support for SmartConsole "Extensions" feature when SmartConsole connects to the secondary IP address of the Management Server. |
| PMTR-54256 | When activating Endpoint Web Management, audit logs have many login and logout events by these users: *internal, sessionmanager, cachemanager, healthcheck*. |
| Multi-Domain Security Management ||
| PMTR-47778 | During mds_import, the incorrect "*Failed to open file 'obsolete_objects.C*'" message shows. |
| SmartConsole / Management Console ||
| PMTR-60476 | SmartConsole may hang in a loading state after enabling the Endpoint Policy Management Software Blade in the Security Management Server object and navigating to another tab. |
| PMTR-59400 | "*Publish failed due to session validation errors. Resolve the errors shown in the validation pane and publish again* ." error in SmartConsole. The "Validations" pane shows "*No items found*". |
| PMTR-24110 | The "Lockout administrator's account after X failed authentication attempts" setting affects only the main SmartConsole application. For Legacy GUI client applications, SmartEvent servers and Log Servers, administrator accounts are not locked out after multiple failed login attempts. |
| PMTR-39807 | *"Identity Provider authentication factor cannot be used in Capsule Workspace* " error appears in SmartConsole in this scenario: 1. Open a Security Gateway object with Mobile Access blade enabled. 2. From the left tree, expand "Mobile Access" and click "Authentication". 3. Refer to the "Multiple Authentication Clients Settings" section. 4. When editing an existing login option with "Identity Provider" as the Authentication Factor, the "Use in Capsule Workspace" option appears as selected (on the "Login Option" tab \> in the "Usage in Gateway" section). 5. When clicking "OK" to save the changes, the error "Identity Provider authentication factor cannot be used in Capsule Workspace" appears. |
| Logging / SmartLog / SmartView ||
| PMTR-44569 | **UPDATE**: Log server now supports up to 2700 Gateways (previously 1024). |
| PMTR-67490 | Export of a SmartEvent report that contains a huge amount of data to PDF/CSV, may fail when the device is very loaded. For example, if there are multiple concurrent requests, like multiple scheduled reports that are running at the same time, or in case of a very high log rate. |
| PMTR-12100, PMTR-55383 | Log Exporter exports logs from a Domain Management Server with the IP address of the Multi-Domain Server when using UDP protocol. |
| SmartEvent ||
| PMTR-54949 | **UPDATE**: In the Endpoint Web Management portal, no error message is displayed if SmartEvent is not activated. |
| Compliance ||
| PMTR-47592, PMTR-59547 | Compliance Blade regulation reports do not contain the Best Practices themselves. |
| Threat Prevention ||
| PMTR-70013 | In some scenarios, the */tmp/* directory on the Security Gateway / Cluster Member may contain a large number of empty sub-directories with the names that start with "*pymp-* ". Refer to [sk173930](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk173930). |
| Identity Awareness ||
| PMTR-44737, PMTR-52942 | **NEW:** Added support for Multi-User Host (MUH) version 2 with IPv6. |
| Cluster ||
| PMTR-63078 | **Enhancement:** * Added support for a Virtual IPv4 Address on Loopback interfaces. * Added support for a Virtual IPv6 Address on Loopback interfaces. |
| PMTR-65023 | **Enhancement:**Added support for ClusterXL in Load Sharing mode with Site to Site (IPSec VPN) |
| PMTR-59990 | GRE traffic fails to pass through a cluster after all cluster members are rebooted. For more information, see [sk169672](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk169672). |
| VSX ||
| PMTR-59810 | **NEW:** Added support for Dynamic Balancing on VSX Gateways and VSX Clusters. |
| PMTR-59845 | Installation or upgrade of Mobile Access Portal Agent on an end-user's computer may fail on a VSX Gateway or VSX Cluster. For more information, see [sk169614](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk169614). |
| Dynamic Routing / Advanced Routing ||
| PMTR-64578 | **NEW:** Added support for the BGP local-address in ClusterXL. |
| PMTR-47725 | On a Security Gateway that is configured with DHCP relay and automatic Hide NAT for the network(s) that the DHCP requests come from, DHCP offers are dropped at the gateway. This message shows: *fw_log_drop_ex: Packet proto=17 40.81.81.3:67 -\> 44.81.81.6:67 dropped by fw_conn_inspect Reason: post lookup verification failed;* |
| Small Office Appliances ||
| 02404766, PMTR-47765 | In Small Office appliance policy installation, services that are manually configured with INSPECT code including the definition "*CALL_XLATE_FOLD_FUNC (...*" will cause a policy installation failure. |
{#resolvedTable}
---
# Agent Instructions
This content is from the Check Point Support Center (https://support.checkpoint.com), the official knowledge base for Check Point cybersecurity products.
## Navigating This Knowledge Base
- **Complete index**: [llms.txt](https://support.checkpoint.com/llms.txt)
- **All SK articles**: [SecureKnowledge Sitemap](https://support.checkpoint.com/sitemaps/secureknowledge-sitemap-index.xml)
- **SK article URL pattern**: `https://support.checkpoint.com/results/sk/{skId}`
- **Markdown responses**: AI bot User-Agents automatically receive `text/markdown` content