> Source: [sk181842](https://support.checkpoint.com/results/sk/sk181842) # sk181842 - CloudGuard Controller Release Updates | Property | Value | |----------|-------| | Solution ID | sk181842 | | Date Created | 2023-12-26 | | Last Modified | 2026-08-27 | | Technical Level | General | | Products | Cloud Firewall | | Versions | R82.10, R81.10 (EOS), R81.20, R82 | | OS | Gaia | ## Solution Show the Entire Article **Introduction \| Prerequisites \| Manual Installation \| Availability \| Documentation \| List of Resolved Issues \| Installation Troubleshooting** Introduction {#Introduction} ---------------------------- CloudGuard Controller manages security in public and on-premises environments with one unified management solution. The CloudGuard Controller dynamically learns about objects and attributes in Data Centers, such as changes in subnets, security groups, virtual machines, IP addresses and tags. After using the vendor's API to establish a trust relationship with a Data Center, CloudGuard Controller regularly checks the connected environments for changes in objects and object attributes used in the Security Policy and automatically push the changes to the Security Gateway. ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk183114/CloudGuard_Controller_arch_24 (1)202511030923001.png) The CloudGuard Controller package is installed automatically on all relevant Check Point devices when Automatic Update downloads are enabled (see [sk175504](https://support.checkpoint.com/results/sk/sk175504), section 2-B). If Automatic Updates are disabled, you must first manually install the latest [AutoUpdater](https://support.checkpoint.com/results/sk/sk165653) Take and then install CloudGuard Controller package manually using the steps below. Prerequisites {#Prerequisites} ------------------------------ CloudGuard Controller self-updatable package requires Jumbo Hotfix Accumulator installed with the minimum version: |----------------|----------------------------------------------------------------------------------------------------------------------------------------| | Version | Required | | R82 and higher | No requierements | | R81.20 | [R81.20 Jumbo Hotfix Accumulator](https://sc1.checkpoint.com/documents/Jumbo_HFA/R81.20/R81.20/R81.20_Downloads.htm) Take 99 or higher | Manual Installation (Offline) {#Manual Installation} ---------------------------------------------------- Show / Hide this section > 1. Transfer the offline package to the CloudGuard Controller server. > > 2. Connect to the command line on the CloudGuard Controller server. > > 3. Log in to the Expert mode. > > 4. Install the offline package: > > `autoupdatercli install ` > > Example: > > `autoupdatercli install /home/admin/Check_Point_CloudGuard_Controller_R81_20_AutoUpdate_T7_AutoUpdate.tar` > 5. Make sure the installation completed successfully: > > 1. Examine this log file: `/opt/CPInstLog/AutoUpdateLogs/CloudGuard_Controller` > > 2. Run: > > `cpinfo -y CPUpdates 2>&1 | grep CLOUDGUARD_CONTROLLER` > > The take number in the output must be the Take that you installed. > > **Note** - The installation does not require `cpstop; cpstart` or a reboot. Once installed, no further action is required, the update will be applied immediately. > > **Important Notes for Security Management / Multi-Domain Security Server (MDS) in the High Availability mode:** > > * We recommend installing the CloudGuard Controller package on all servers in the Management High Availability environment in the same session - one after the other, so that all servers use the same package Take. > > * At the end of the installation, we recommend to make sure that all servers in the Management High Availability environment use the same package Take. > > Run this command on each server with CloudGuard Controller package installed: > > `cpinfo -y CPUpdates 2>&1 | grep CLOUDGUARD_CONTROLLER` Availability {#Availability} ----------------------------
|-------------|-------------|----------|------------------|-------------------------------------------------------------------------------------------------------------------------| | **Version** | **Release** | **Take** | **Release Date** | **Download** | | **R82.10** | Recommended | 12 | 09 Aug 2026 | [![](https://sc1.checkpoint.com/sc/images/download-m.png)](https://support.checkpoint.com/results/download/144772)(TAR) | | **R82** | Recommended | 35 | 09 Aug 2026 | [![](https://sc1.checkpoint.com/sc/images/download-m.png)](https://support.checkpoint.com/results/download/144771)(TAR) | | **R81.20** | Recommended | 39 | 09 Aug 2026 | [![](https://sc1.checkpoint.com/sc/images/download-m.png)](https://support.checkpoint.com/results/download/144770)(TAR) | Documentation {#Documentation} ------------------------------ * [R82.10 CloudGuard Controller Administration Guide](https://sc1.checkpoint.com/documents/R82.10/WebAdminGuides/EN/CP_R82.10_CloudGuard_Controller_AdminGuide/Default.htm) * [R82 CloudGuard Controller Administration Guide](https://sc1.checkpoint.com/documents/R82/WebAdminGuides/EN/CP_R82_CloudGuard_Controller_AdminGuide/Default.htm) * [R81.20 CloudGuard Controller Administration Guide](https://sc1.checkpoint.com/documents/R81.20/WebAdminGuides/EN/CP_R81.20_CloudGuard_Controller_AdminGuide/Default.htm) List of Resolved Issues and New Features per CloudGuard Controller Update {#List of Resolved Issues} ---------------------------------------------------------------------------------------------------- ### R82.10 Release Show / Hide this section > > |------------------------------------------------------------------------|-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------| > | ID | Description | > | **Take 12 - Gradual deployment from 09 Aug 2026** || > | CGNSIS-2555, ODU-4570 | In some scenarios, multiple domains scanning the same Cisco ACI APIC cluster could open redundant polling connections when APIC nodes were listed in a different order, causing unnecessary load on the APIC controllers. | > | CGNSIS-2609, ODU-4570 | In some scenarios, Cloud Firewall Controller fails to retrieve NSGroup content, which may cause group IP addresses to be deleted. | > | CGNSIS-2591, CGNSIS-2422, ODU-4570 | Additional improvements. | > | **Take 10 - Gradual deployment from 19 Jul 2026** || > | CGNSIS-2375 | In rare scenarios, Cisco ACI Data Center scans may receive an empty response from the Cisco APIC, causing Data Center objects to be temporarily removed. | > | CGNSIS-2136 | Enhancement: CloudGuard Controller now supports the Nozomi, ServiceNow CMDB and Akamai Guardicore Data Centers. Refer to the [R82 CloudGuard Controller Administration Guide](https://sc1.checkpoint.com/documents/R82/WebAdminGuides/EN/CP_R82_CloudGuard_Controller_AdminGuide/Default.htm). | > | CGNSIS-960 | Added CloudGuard Controller integration with AIOps in Check Point Portal to provide centralized visibility of CloudGuard Controller alerts. | > | CGNSIS-2049, CGNSIS-2094, CGNSIS-758 | Additional improvements. | > | **Take 9 - Gradual deployment from 07 Jun 2026** || > | CGNSIS-1907 | Enhancement: CloudGuard Controller now supports the [Claroty Continuous Threat Detection (CTD)](https://sc1.checkpoint.com/documents/Infinity_Portal/WebAdminGuides/EN/Threat-Exposure-Management-Admin-Guide/Content/Topics-TEM_AG/Claroty_CTD_Integration.htm) Data Center. | > | CGNSIS-1729 | Minor fix. | > | **Take 8 - Gradual deployment from 26 Apr 2026** || > | VSECC-3008 | Enhancement: Added support new IoT tags for third-party vendor discovery. | > | CGNSIS-1242 | Memory issue is caused when the VPN Cloud monitor (VCM) feature is disabled in Azure Data Centers. | > | CGNSIS-1240 | In rare scenarios, the scanner process gets stuck, as a result, the Data Center may not be scanned. | > | CGNSIS-1130 | Minor fix. | > | **Take 7 - Gradual deployment from 05 Apr 2026** || > | CGNSIS-1182 | Enhancement: CloudGuard Controller now supports the Illumio Data Center. Refer to the [R82.10 CloudGuard Controller Administration Guide](https://sc1.checkpoint.com/documents/R82.10/WebAdminGuides/EN/CP_R82.10_CloudGuard_Controller_AdminGuide/Content/Topics-CGRDG/Supported-Data-Centers-Illumio.htm). | > | CGNSIS-968 | Enhancement: Enhanced reliability of vCenter Data Center scanner connections. Refer to [sk184856](https://support.checkpoint.com/results/sk/sk184856). | > | CGNSIS-535 | Enhancement: Added partial-success support for Google Cloud Platform data center scans, consistent with existing Azure support. When a scan covers multiple GCP projects, and some fail, the successfully scanned projects are now updated instead of the entire scan being blocked. | > | CGNSIS-979 | The *cprid_util_debug.sh* script fails. | > | **Take 6 - Gradual deployment from 08 Mar 2026** || > | CGNSIS-451 | Enhancement: Introduced support for Nutanix Data Centers using API v4 integration. | > | CGNSIS-537 | Enhancement: Added support for GCP Secure Tags. [Refer to the R82.10 CloudGuard Controller Administration Guide](https://sc1.checkpoint.com/documents/R82.10/WebAdminGuides/EN/CP_R82.10_CloudGuard_Controller_AdminGuide/Content/Topics-CGRDG/Supported-Data-Centers-GCP.htm?tocpath=Supported%20Data%20Centers%7CCloudGuard%20Controller%20for%20Google%20Cloud%20Platform%20(GCP)%7C_____0#CloudGuard_Controller_for_Google_Cloud_Platform_(GCP)). | > | VSECC-3129 | Enhancement: Improved pagination mechanism handling the NSX-T Data Center when there is a large number of VIFs. | > | VSECC-3203 | Enhancement: Improved NSX?T Global Domain scanner stability when handling certain VIF entries because of a missing data check. | > | VSECC-3210 | Enhancement: Enhanced logging for Global NSX-T scanner for getting NSGroup and NSGroup IP addresses. | > | CGNSIS-625, CGNSIS-656 | Minor fixes. | > | **Take 5 (16 Feb 2026)** || > | VSECC-2911 | Enhancement: Improved NSX-T scanner resilience to mid-scan changes. | > | VSECC-3179 | Enhancement: Added Host header to HTTPS requests over proxy. | > | VSECC-2933 | Objects enforcement fails during connectivity issues with NSX-T Data Centers. | > | VSECC-3103, VSECC-2886, VSECC-3000, VSECC-3030, VSECC-3012, VSECC-3006 | Minor fixes. | ### R82 Release Show / Hide this section > > |------------------------------------------------|----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------| > | ID | Description | > | **Take 35 - Gradual deployment from 09 Aug 2026** || > | CGNSIS-2554, ODU-4577 | In some scenarios, multiple domains scanning the same Cisco ACI APIC cluster could open redundant polling connections when APIC nodes were listed in a different order, causing unnecessary load on the APIC controllers. | > | CGNSIS-2610, ODU-4577 | In some scenarios, Cloud Firewall Controller fails to retrieve NSGroup content, which may cause group IP addresses to be deleted. | > | CGNSIS-960, ODU-4577 | Added CloudGuard Controller integration with AIOps in the Check Point Portal to provide centralized visibility of CloudGuard Controller alerts. | > | CGNSIS-2421, ODU-4577 | Additional improvements. | > | **Take 33 - Gradual deployment from 19 Jul 2026** || > | CGNSIS-2376 | In rare scenarios, Cisco ACI Data Center scans may receive an empty response from the Cisco APIC, causing Data Center objects to be temporarily removed. | > | CGNSIS-2135 | Enhancement: CloudGuard Controller now supports the Nozomi, ServiceNow CMDB and Akamai Guardicore Data Centers. Refer to the [R82 CloudGuard Controller Administration Guide](https://sc1.checkpoint.com/documents/R82/WebAdminGuides/EN/CP_R82_CloudGuard_Controller_AdminGuide/Default.htm). | > | CGNSIS-1828, CGNSIS-2093 | Additional improvements. | > | **Take 32 - Gradual deployment from 07 Jun 2026** || > | CGNSIS-1906 | Enhancement: CloudGuard Controller now supports the [Claroty Continuous Threat Detection (CTD)](https://sc1.checkpoint.com/documents/Infinity_Portal/WebAdminGuides/EN/Threat-Exposure-Management-Admin-Guide/Content/Topics-TEM_AG/Claroty_CTD_Integration.htm) Data Center. | > | CGNSIS-1730 | Minor fix. | > | **Take 31 - Gradual deployment from 26 Apr 2026** || > | VSECC-3008 | Enhancement: Added support new IoT tags for third-party vendor discovery. | > | CGNSIS-1241 | Memory issue is caused when the VPN Cloud monitor (VCM) feature is disabled in Azure Data Centers. | > | CGNSIS-1130 | In rare scenarios, the scanner process gets stuck, as a result, the Data Center may not be scanned. | > | CGNSIS-1230 | Minor fix. | > | **Take 29 - Gradual deployment from 05 Apr 2026** || > | CGNSIS-1181 | Enhancement: CloudGuard Controller now supports the Illumio Data Center. Refer to the [R82 CloudGuard Controller Administration Guide](https://sc1.checkpoint.com/documents/R82/WebAdminGuides/EN/CP_R82_CloudGuard_Controller_AdminGuide/Content/Topics-CGRDG/Supported-Data-Centers-Illumio.htm). | > | CGNSIS-967 | Enhancement: Enhanced reliability of vCenter Data Center scanner connections. Refer to [sk184856](https://support.checkpoint.com/results/sk/sk184856). | > | CGNSIS-980 | The *cprid_util_debug.sh* script fails. | > | CGNSIS-965 | When importing a GCP Data Center object into SmartConsole and then creating an Access Control rule whose source or destination is that GCP Data Center object, if a subsequent CloudGuard Controller project scan fails, the GCP Data Center object may be deleted from the Security Gateway object database. This removal causes policy installation or enforcement to fail because the rule references a now-missing object. | > | **Take 28 - Gradual deployment from 08 Mar 2026** || > | VSECC-2889 | Enhancement: Added support for GCP Secure Tags. Refer to the [R82 CloudGuard Controller Administration Guide](https://sc1.checkpoint.com/documents/R82/WebAdminGuides/EN/CP_R82_CloudGuard_Controller_AdminGuide/Content/Topics-CGRDG/Supported-Data-Centers-GCP.htm?tocpath=Supported%20Data%20Centers%7CCloudGuard%20Controller%20for%20Google%20Cloud%20Platform%20(GCP)%7C_____0#CloudGuard_Controller_for_Google_Cloud_Platform_(GCP)). | > | **Take 26 (01 Feb 2026)** || > | VSECC-3055 VSECC-3211 | Enhancement: Enhanced logging for Global NSX-T scanner for getting NSGroup and NSGroup IP addresses. | > | VSECC-3021 | Enhancement: Improved pagination mechanism handling the NSX-T Data Center when there is a large number of VIFs. | > | VSECC-3204 | Enhancement: Improved NSX?T Global Domain scanner stability when handling certain VIF entries because of a missing data check. | > | VSECC-2972 | Enhancement: Added Host header to HTTPS requests over proxy. | > | VSECC-2920 | Minor fixes. | > | VSECC-2944 | Minor fixes. | > | **Take 23 (30 Nov 2025)** || > | VSECC-2773 | Enhancement: IPv6-only instances are now supported in Google Cloud Platform (GCP) Data Centers. | > | VSECC-2427 | Enhancement: AWS Data Centers can now scan and enforce Security Groups that are shared across multiple VPCs. When a Security Group is associated with another VPC and attached to instances, enforcement now applies to instances in all associated VPCs. Note: Enforcing at the VPC level will only affect instances within that specific VPC, even if its Security Groups are associated with other VPCs. | > | VSECC-2883 | In rare scenarios, a failure in Azure Data Center can cause enforcement issues. | > | VSECC-2878 | In rare scenarios, NSX-T Data Center fails to get response when VMs import parameter is enabled. | > | VSECC-2932 | Objects enforcement fails during connectivity issues with NSX-T Data Centers. | > | VSECC-2752 | Minor fixes. | > | **Take 22 (28 Oct 2025)** || > | VSECC-2730 | Enhancement: Added IPv6 support for OCI Data Center. Refer to the [R82 CloudGuard Controller Administration Guide](https://sc1.checkpoint.com/documents/R82/WebAdminGuides/EN/CP_R82_CloudGuard_Controller_AdminGuide/Default.htm). | > | VSECC-2816 | Enhancement: Added support to add the IP addresses of private endpoints in OCI Data Center. | > | VSECC-2741 | Minor fixes. | > | **Take 21 (07 Aug 2025)** || > | VSECC-2617 | In rare scenarios, subnets are not imported from Oracle Cloud. | > | VSECC-2566 | Minor fixes. | > | **Take 20 (21 Jul 2025)** || > | VSECC-2482, VSECC-2473 | Enhancement: Added GDC support for Maestro VSX setups. | > | DEVISEC-580 | Minor fixes. | > | **Take 19 (22 Jun 2025)** || > | VSECC-2523, VSECC-2456, VSECC-2455, VSECC-2447 | Minor fixes. | > | **Take 17 (29 May 2025)** || > | VSECC-2411 | Enhancement: Improved NSX-T scanner resilience to mid-scan changes. | > | **Take 16 (06 May 2025)** || > | VSECC-2328 | Enhancement: Improved handling of Azure Data Center scan failures. | > | VSECC-2324 | In rare scenarios, the Azure Data Center scan fails to complete checking Virtual Machine Scale Sets (VMSS). | > | VSECC-2329 | Minor fixes. | > | **Take 13 (16 Apr 2025)** || > | VSECC-2217 | Minor fixes. | > | **Take 9 (18 Mar 2025)** || > | VSECC-2241 | In rare scenarios, a member of Active-Active cluster does not receive an update for Data Center or Data Center Query objects. | > | VSECC-2320 | In rare scenarios, Data Center fails to connect to a Private Cloud account using a proxy. | > | **Take 8 (11 Feb 2025)** || > | VSECC-2024 | In rare scenarios, IP address of a Data Center object is not enforced on a Security Gateway when using the IoT Data Center along with other Data Center types. | > | VSECC-2186 | Generic Data Center fails to start or update because of the missing is_scalable_platform.sh script. | > | **Take 7 (13 Jan 2025)** || > | VSECC-2129 VSECC-2128 VSECC-2130 | Enhancement: Added support for Azure Application Gateway. Refer to the [R82 CloudGuard Controller Administration Guide](https://sc1.checkpoint.com/documents/R82/WebAdminGuides/EN/CP_R82_CloudGuard_Controller_AdminGuide/Default.htm). | > | VSECC-2131 VSECC-2132 | Enhancement: Added support for Azure API Management Service. Refer to [R82 CloudGuard Controller Administration Guide](https://sc1.checkpoint.com/documents/R82/WebAdminGuides/EN/CP_R82_CloudGuard_Controller_AdminGuide/Default.htm). | > | VSECC-2021 | Enhancement: Implemented Auto-Trust Public Certificates from predefined CAs for Private Cloud. | > | VSECC-2011 | Enhancement: General performance improvements. | > | VSECC-2069 | In rare scenarios, DCQ object is not enforced on Security Gateways after policy installation. | > | VSECC-1998 | CloudGuard Controller fails to retrieve IP addresses for Azure Application Security Groups (ASGs) when the ASGs are associated with a Private Endpoint. | > | VSECC-1875 | Some tags are not visible on CloudGuard Management when importing an object from Azure DC object. | > | VSECC-2110 VSECC-1988 VSECC-2007 VSECC-2032 | Minor fixes and enhancements. | > | **Take 6 (05 Dec 2024)** || > | VSECC-2154 | Minor fixes. | ### R81.20 Release Show / Hide this section > > |----------------------------------|-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------| > | ID | Description | > | **Take 39 - Gradual deployment from 09 Aug 2026** || > | CGNSIS-2611, ODU--4584 | In some scenarios, Cloud Firewall Controller fails to retrieve NSGroup content, which may cause group IP addresses to be deleted. | > | **Take 38 - Gradual deployment from 19 Jul 2026** || > | CGNSIS-2377 | In rare scenarios, Cisco ACI Data Center scans may receive an empty response from the Cisco APIC, causing Data Center objects to be temporarily removed. | > | CGNSIS-2089, CGNSIS-1731 | Additional improvements. | > | **Take 37 - Gradual deployment from 26 Apr 2026** || > | VSECC-3008 | Enhancement: Added support new IoT tags for third-party vendor discovery. | > | **Take 36 (01 Feb 2026)** || > | VSECC-3212 | Enhancement: Enhanced logging for Global NSX-T scanner for getting NSGroup and NSGroup IP addresses. | > | VSECC-3154 | Enhancement: Added Host header to HTTPS requests over proxy. | > | VSECC-2993 | Minor fixes. | > | VSECC-2979 | Minor fixes. | > | **Take 34 (30 Nov 2025)** || > | VSECC-2774 | Enhancement: IPv6-only instances are now supported in Google Cloud Platform (GCP) Data Centers. | > | VSECC-2519 | Enhancement: AWS Data Centers can now scan and enforce Security Groups that are shared across multiple VPCs. When a Security Group is associated with another VPC and attached to instances, enforcement now applies to instances in all associated VPCs. Note: Enforcing at the VPC level will only affect instances within that specific VPC, even if its Security Groups are associated with other VPCs. | > | VSECC-2880 | In rare scenarios, a failure in Azure Data Center can cause enforcement issues. | > | VSECC-2879 | In rare scenarios, NSX-T Data Center fails to get response when VMs import parameter is enabled. | > | VSECC-2753 | Minor fixes. | > | **Take 33 (28 Oct 2025)** || > | VSECC-2815 | Enhancement: Added support to add the IP addresses of private endpoints in OCI Data Center. | > | VSECC-2742 | Minor fixes. | > | **Take 32 (07 Aug 2025)** || > | VSECC-2616 | In rare scenarios, subnets are not imported from Oracle Cloud. | > | VSECC-2568 | Minor fixes. | > | **Take 31 (21 Jul 2025)** || > | VSECC-2481, VSECC-2472 | Enhancement: Added GDC support for Maestro VSX setups. | > | VSECC-2486 | Minor fixes. | > | **Take 30 (06 May 2025)** || > | VSECC-2377 | Enhancement: Improved handling of Azure Data Center scan failures. | > | VSECC-2323 | In rare scenarios, the Azure Data Center scan fails to complete checking Virtual Machine Scale Sets (VMSS). | > | VSECC-2371 | Minor fixes. | > | **Take 27 (16 Apr 2025)** || > | VSECC-2270 | Minor fixes. | > | **Take 25 (24 Mar 2025)** || > | VSECC-1777 | Importing Data Centers fails with a "*Connectivity error*" message. | > | VSECC-2088 | In rare scenarios, a member of Active-Active cluster does not receive an update for Data Center or Data Center Query objects. | > | VSECC-1871 | In rare scenarios, Data Center fails to connect to a Private Cloud account using a proxy. | > | **Take 18 (11 Feb 2025)** || > | VSECC-2185 | Generic Data Center fails to start or update because of the missing *is_scalable_platform.sh* script. | > | **Take 16 (14 Jan 2025)** || > | VSECC-2039 VSECC-2040 | Enhancement: Added support for Azure API Management Service. Refer to [R81.20 CloudGuard Controller Administration Guide](https://sc1.checkpoint.com/documents/R81.20/WebAdminGuides/EN/CP_R81.20_CloudGuard_Controller_AdminGuide/Default.htm). | > | VSECC-2002 | Enhancement: Improved the retry logic for failed Azure Data Center scans. | > | VSECC-1929 VSECC-2033 VSECC-2096 | Minor fixes and enhancements. | > | **Take 15 (05 Dec 2024)** || > | VSECC-1993 | Enhancement: Added support for Azure Application Gateway. Refer to [R81.20 CloudGuard Controller Administration Guide](https://sc1.checkpoint.com/documents/R81.20/WebAdminGuides/EN/CP_R81.20_CloudGuard_Controller_AdminGuide/Default.htm). | > | VSECC-1940 | Enhancement: Implemented Auto-Trust Public Certificates from predefined CAs for Private Cloud. | > | VSECC-2090 | Enhancement: Improved post-install validations. | > | VSECC-1997 | CloudGuard Controller fails to retrieve IP addresses for Azure Application Security Groups (ASGs) when the ASGs are associated with a Private Endpoint. | > | VSECC-2009 | In rare scenarios, IP of a Data Center object is not enforced on a Security Gateway when using IoT Data Center along with other Data Center types | > | **Take 12 (09 Oct 2024)** || > | VSECC-1773 | Enhancement: Logging for Cluster Members state change is now improved. | > | VSECC-1984 | Enhancement: Performance optimization. | > | VSECC-1768 | Some tags are not visible on CloudGuard Management when importing the object from Azure DC object. | > | VSECC-1896 | In rare scenarios, CloudGuard Controller does not enforce controller objects to a Virtual System. | > | **Take 9 (25 Sep 2024)** || > | VSECC-1952 | Minor fixes. | Installation Troubleshooting {#Installation Troubleshooting} ------------------------------------------------------------ These issues can rise when running the installation package: * **Issue 1: "A version of CloudGuard Controller bundle is already installed via AutoUpdater."** > **Solution:** > > CloudGuard Controller bundle has already been installed for the first time and is configured to receive updates automatically. If you have no Internet access, follow the instructions for "Offline Package Installation Procedure" in the Installation Instructions section above. * **Issue 2: How to return to previous version of CloudGuard Controller package.** > **Solution:** > > We highly recommend to use the latest take of CloudGuard Controller package. > > If you still want to revert to the previous Take: > 1. Connect to the command line on the CloudGuard Controller server. > > 2. Log in to the Expert mode. > > 3. Revert the package to the previous Take: > > `autoupdatercli revert CloudGuard_Controller` > > The revert takes up to 1 minute. > 4. Make sure CloudGuard Controller Bundle was reverted to the previous Take: > > 1. Run: > > `cpinfo -y CPUpdates 2>&1 | grep CLOUDGUARD_CONTROLLER` > > The Take number in the output must be the one to which you reverted. > 2. Examine this log file: > > `/opt/CPInstLog/AutoUpdateLogs/CloudGuard_Controller` > > **Notes:** > * CloudGuard Controller package is upgraded automatically each time a new take is released. > > * You can safely revert to the previous Take. However, if you attempt to revert to any Take older than the previous one, the CloudGuard Controller server will reset completely to its initial installation state. * **Issue 3: How to totally remove CloudGuard Controller package** > **Solution:** > 1. Connect to the command line on the CloudGuard Controller server. > > 2. Log in to the Expert mode. > > 3. Remove the package: > > `autoupdatercli revert-completely CloudGuard_Controller` > > The revert takes up to one minute. > 4. Make sure the CloudGuard Controller package was removed: > > 1. Run: > > `cpinfo -y CPUpdates 2>&1 | grep CLOUDGUARD_CONTROLLER` > 2. Examine this log file: > > `/opt/CPInstLog/AutoUpdateLogs/CloudGuard_Controller` * **Issue 4: How to stop receiving future updates of CloudGuard Controller package** > **Solution:** > 1. Connect to the command line on the CloudGuard Controller server. > > 2. Log in to the Expert mode. > > 3. Run: > > `autoupdatercli disable CloudGuard_Controller` * **Issue 5: R81.10 Management Server does not get the latest CloudGuard Controller package** > **Symptoms** : > 1)This error shows in the */opt/CPInstLog/Autoupdater.log* file: > `Problem with local certificate Error code: 10` > `...Abandoned file removed from the system` > `...Failed to download metadata package for component auto_updater` > > **Solution** : > > Refer to [sk184474](https://support.checkpoint.com/results/sk/sk184474). > For additional troubleshooting instructions, refer to the [sk115657 - ATRG: CloudGuard Controller](https://support.checkpoint.com/results/sk/sk115657) . If your issue is not resolved by one of the above solutions, [contact Check Point Support](https://www.checkpoint.com/support-services/contact-support/) and attach the `/opt/CPInstLog/AutoUpdateLogs/CloudGuard_Controller` log file.
--- # Agent Instructions This content is from the Check Point Support Center (https://support.checkpoint.com), the official knowledge base for Check Point cybersecurity products. ## Navigating This Knowledge Base - **Complete index**: [llms.txt](https://support.checkpoint.com/llms.txt) - **All SK articles**: [SecureKnowledge Sitemap](https://support.checkpoint.com/sitemaps/secureknowledge-sitemap-index.xml) - **SK article URL pattern**: `https://support.checkpoint.com/results/sk/{skId}` - **Markdown responses**: AI bot User-Agents automatically receive `text/markdown` content