> Source: [sk183421](https://support.checkpoint.com/results/sk/sk183421) # sk183421 - Policy Insights Release Updates | Property | Value | |----------|-------| | Solution ID | sk183421 | | Date Created | 2025-05-07 | | Last Modified | 2026-08-31 | | Technical Level | General | | Products | Security Management Server, SmartConsole, Multi-Domain Security Management Server | | Versions | R82.10, R82, R81.20, R82.10, R82.10, R82, R81.20, R81.20, R82 | ## Solution **Introduction \| Manual Installation \| Availability \| List of Resolved Issues** Introduction {#Introduction} ---------------------------- **Policy Insights** is a feature that analyzes both Access and Threat Prevention policy, as well as the network traffic to identify optimization opportunities, system performance and security risks. It suggests modifications to improve the security and performance posture by making rules more restrictive and eliminating unnecessary access and by improving the Threat Prevention Rule Base, profiles and exceptions. Policy Insights uses a self-updatable package. **Best Practice:** The latest Policy Insights Updates package should run on all Management and Log Servers. The feature is available starting from: * [R82 Jumbo Hotfix Accumulator](https://sc1.checkpoint.com/documents/Jumbo_HFA/R82/Default.htm) Take 14 * [R81.20 Jumbo Hotfix Accumulator](https://sc1.checkpoint.com/documents/Jumbo_HFA/R81.20/Default.htm) Take 99 Threat Prevention support is available starting from: * [Check Point R82.10](https://support.checkpoint.com/results/sk/sk183506) For more information, see: Access Policy Insights: * [R82 Quantum Security Management Administration Guide](https://sc1.checkpoint.com/documents/R82/WebAdminGuides/EN/CP_R82_SecurityManagement_AdminGuide/Default.htm) \> Creating an Access Control Policy \> Policy Insights * [R81.20 Quantum Security Management Administration Guide](https://sc1.checkpoint.com/documents/R81.20/WebAdminGuides/EN/CP_R81.20_SecurityManagement_AdminGuide/Default.htm) \> Creating an Access Control Policy \> Policy Insights Threat Prevention Policy Insights: * [R82.10 Threat Prevention Administration Guide](https://sc1.checkpoint.com/documents/R82.10/WebAdminGuides/EN/CP_R82.10_ThreatPrevention_AdminGuide/Default.htm) \> Custom Threat Prevention\> Threat Prevention Policy Insights The Policy Insights package is installed automatically on all relevant Check Point Management Servers when Automatic Update downloads are enabled (see [sk175504](https://support.checkpoint.com/results/sk/sk175504), section 2-B). If Automatic Updates are disabled, you must first manually install the latest [AutoUpdater](https://support.checkpoint.com/results/sk/sk165653) Take and then install the Policy Insights package manually using the steps below. Manual Installation (Offline) {#Manual Installation} ---------------------------------------------------- ### Instructions: {#Toggle_Manual_installation} 1. Download the offline package to your computer. See the "Availability" section. 2. Copy the offline package from your computer to your Check Point Management Server to some directory (for example, */var/log/*). 3. Connect to the command line on your Check Point Management Server. 4. Log in to the Expert mode. 5. Go to the directory with the offline package. 6. Install the offline package on the Management Server: `autoupdatercli install /var/log/Check_Point_Autonomous_Firewall_Bundle_T_AutoUpdate.tar` **Note** : The installation does not require **`cpstop; cpstart`** or a reboot. Once installed, no further action is required, the update will be applied immediately. Availability {#Availability} ---------------------------- #### How to check the currently installed Policy Insights Update package version Show / Hide Instructions 1. Run this command on either the Management or Log Server: `# autoupdatercli show json | jq '.products[]|select(."product-name"=="AutonomousFirewall")'` 2. Search for the "package-version" attribute. Example: ``` { "product-components": [ { "GA-Version": "0", "component-branch": "afw_AutoUpdate", "component-name": "afw", "download-action": "idle", "download-scheduler-active": true, "install-revert-action": "idle", "install-scheduler-active": true, "repository-packages": [ { "installation-date": "2025-06-16_17:43:44", "package-branch-name": "afw_AutoUpdate", "package-installable": "true", "package-installed": "true", "package-name": "Check_Point_Autonomous_Firewall_Bundle_T71_FULL.tgz", "package-previously-installed": "false", "package-version": 71 } ] } ], "product-name": "AutonomousFirewall" } ``` > |-------------|--------------|--------------------------------------------------------------------------------------------------------------------------|-----------------------| > | Latest Take | Release Date | Download package | Versions | > | Take 101 | 30 Aug 2026 | [![](https://sc1.checkpoint.com/sc/images/download-m.png)](https://support.checkpoint.com/results/download/145095) (TAR) | For R82.10 and higher | > | Take 101 | 30 Aug 2026 | [![](https://sc1.checkpoint.com/sc/images/download-m.png)](https://support.checkpoint.com/results/download/145096) (TAR) | For R81.20, R82 | List of Resolved Issues and New Features per Policy Insights Update {#List of Resolved Issues} ---------------------------------------------------------------------------------------------- |--------------------------------------------------|-----------------------------|-----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------| | Feature/ Issue | Component | Description | | **Take 101 Gradual deployment from 30 August 2026** ||| | New Functionality and Improvements ||| | Policy Insights | Docker | Enabled version 3.2, which includes the Traffic Flow Analyzer. | | Policy Insights | Docker | Added support for comments on accepted insights. | | Policy Insights | Docker | Added support for filtering insights by start date. | | **Take 100 Gradual deployment from 09 August 2026** ||| | New Functionality and Improvements ||| | Policy Insights | Docker | Implemented several fixes and improvements. | | **Take 97 Gradual deployment from 19 July 2026** ||| | New Functionality and Improvements ||| | Policy Insights | Docker | Disabled accept-suggestion validation on Install Policy. | | Policy Insights | Docker | Additional improvements. | | **Take 96 Gradual deployment from 28 June 2026** ||| | New Functionality and Improvements ||| | Policy Auditor | Data Sync | Added support for Policy Auditor Guidelines. | | Access Role Insights | Log Telemetry | Added support for Users. | | Policy Insights License Enforcement | Docker | Added support for complete and trial / evaluation licenses. | | **Take 94 Gradual deployment from 17 May 2026** ||| | New Functionality and Improvements ||| | Identities | Data Sync | Added support for LDAP Groups, User Groups and Access Roles. | | API v3.1 | API | * Introduced two new configuration parameters in "*set-config* " and "*show-config* ": "*maxReplacementObjects* " and "*ungroupMaxUsagePercent*". * Added a start-date filter, allowing to filter suggestions created after a specified date. | | **Take 91 Gradual deployment from 05 Apr 2026** ||| | New Functionality and Improvements ||| | User Configuration | API | Added new "*set-env* " commands for user configuration settings - "*afw set-env-config* " and "*afw reset-env-config*". | | Threat Prevention | Data Sync | Updated synchronization frequency mechanism, checking whether there are tasks scheduled for the next 12 hours. | | R82.20 | Log Telemetry | Added support for R82.20 EA (Early Availability program). | | **Take 87 Gradual deployment from 15 Mar 2026** ||| | New Functionality and Improvements ||| | NAT rules | Data Sync | Added support for NAT rules. | | Scheduled Tasks | Data Sync | Updated synchronization frequency mechanism, checking whether there are tasks scheduled for the next 12 hours. | | Threat Prevention - show-suggestions API | API | The recommended suggestions with medium and higher severity/confidence are displayed by default. | | Threat Prevention - Suggestion Decision Tracking | API | Added capability to include comments when declining suggestions or marking them as "decide later". | | Resolved Issues ||| | Threat Prevention - IPS logs | Log Telemetry | IPS logs may be collected not as expected. | | Empty name rule | API | The "Accept \& duplicate" command fails when running it on a rule with an empty name. | | Missing data | Log Telemetry | Multi-Domain environments do not send telemetry for some Domains. | | **Take 82 (03 December 2025)** ||| | New Functionality and Improvements ||| | Threat Prevention | API Data Sync Log Telemetry | Added Threat Prevention support for Policy Insights feature in Check Point R82.10. | | Australia Region | Cloud Infrastructure | Cloud service and storage are now available in Australia region. | | **Take 80 (25 November 2025)** ||| | New Functionality and Improvements ||| | Key validation | API | Improved the Management Private Key validation. | | **Take 78 (03 November 2025)** ||| | New Functionality and Improvements ||| | India Region | Cloud Infrastructure | Cloud service and storage are now available in India region. | | License Status in API | API | Added license status information to the "afw-status" API endpoint. | | Resolved Issues ||| | Rule duplication | API | In API v2.1, "apply as duplicated rule" functionality does not function as expected. | | Rule name length | API | Implemented rule name length restrictions to prevent validation errors. | | UUID validation | API | Aligned UUID validation with Check Point standards. | | **Take 77 (19 October 2025)** ||| | New Functionality and Improvements ||| | Extended Metadata | Data Sync | Added additional information and statistics to metadata files. | | Dialog Messages | API | Enhanced dialog messages and notifications for better clarity. | | **Take 76 (1 September 2025)** ||| | New Functionality and Improvements ||| | API v2.0 | API | Introduced support for API version 2.0. | | Rule Validation | API | Added ability to accept suggestions and create duplicate rules for validation purposes (API v2.1). | | **Take 74 (20 August 2025)** ||| | New Functionality and Improvements ||| | Partial Suggestion Application | API | Enabled selective acceptance of individual components within multi-part rule suggestions. | | Suggestion Decision Tracking | API | Added capability to include comments when declining suggestions or marking them as "decide later". | | Layer-Optional Summary | API | Removed layer requirement when displaying rule summaries. | | **Take 72 (29 July 2025)** ||| | New Functionality and Improvements ||| | Progress Indicator for Suggestions | API | Added progress tracking for suggestion acceptance operations in Management API. | | Health Check Utility | Log Telemetry | Introduced utility to validate log telemetry health status. | | **Take 71 (18 June 2025)** ||| | New Functionality and Improvements ||| | Duplicate audit logs | Data Sync | Removed redundant audit log entries. | | System stability | Log Telemetry | Implemented performance optimizations and stability improvements. | --- # Agent Instructions This content is from the Check Point Support Center (https://support.checkpoint.com), the official knowledge base for Check Point cybersecurity products. ## Navigating This Knowledge Base - **Complete index**: [llms.txt](https://support.checkpoint.com/llms.txt) - **All SK articles**: [SecureKnowledge Sitemap](https://support.checkpoint.com/sitemaps/secureknowledge-sitemap-index.xml) - **SK article URL pattern**: `https://support.checkpoint.com/results/sk/{skId}` - **Markdown responses**: AI bot User-Agents automatically receive `text/markdown` content