Take_103 JHFA is now GA. Do not install Take_91.

[Vladimir]

Jumbo Hotfix Accumulator for R80.10 (R80_10_jumbo_hf) 

For those contemplating upgrade to Take_91: I've just borked my SMS by going from Take_70 to Take_91.

No WebUI, ssh behaves weirdly and clish CPUSE uninstall is not working.

I am not implying that it is not a one-off issue, but keep it in mind and snapshot before JHFAs installations.

I've skipped it this time and am looking at a lab rebuild.

Also, the reason I was going to Take_91 is actually the first one described in Take_103: 

 "Management HA fails to synchronize with "The Security Management Servers contain different Hotfixes" error even though the same packages are installed on servers."

Another incentive to go with 103 is this: Issues Restoring Gaia Backup in R80.10 JHF 70, 79, 85, 91  

[Steven_Civitare]

We called into support after having problems with take 91 on multiple gateways within our environment.  They told us they were pulling it from GA due to reported issues.  We ended up having to roll back to 56 to get the environment stable again.

[Timothy_Hall]

One of my clients saw issues with R80.10 Take 91 as well, it broke logging to the SMS when applied on the gateway.  Even trying to run fw log -n on the gateway itself would throw an error with Take 91 installed; was resolved by backing it out on the gateway.

--
Second Edition of my "Max Power" Firewall Book
Now Available at http://www.maxpowerfirewalls.com

[Marco_Valenti]

Anyone have the same issue on multi domain?

[PhoneBoy]

Just as a point of reference, JHF 91 does NOT appear to have been pulled yet.

I am not saying there isn't an issue related to it, just putting the facts out there.

If you can send me your SRs privately, I'll look into it.

[Steven_Civitare]

Follow me so I can message them to you.  Came from Diamond support

[Iain_King]

I can't seem to be able to get access to Take_85 either.. none of the takes seems searchable.

I am experiencing problems from sk120558 which are resolved in Take_42, can't get any other take than 91 and R80.10 gaia CPUSE has Take91 available as an update. Can't access gaia webui with chrome or firefox either (only IE works - somewhat reliably) among many other problems with R80.10 - like the anti-spoofing dropping connections wholesale (including ospf) despite being disabled on the interface (or even when correctly configured).

This issue is huge. 

[Vladimir]

The "Check_Point_R80_10_JUMBO_HF_Bundle_T103_sk116380_FULL.tgz"  is searchable from cloud via WebUI.

I was able to locate it and am downloading it now.

t could be found here: Jumbo Hotfix Accumulator for R80.10 (R80_10_jumbo_hf) 

I use Opera browser for Gaia WebUI management of Take_70 with no issues.

[Iain_King]

What assurances are there that T103 is any safer than T91?

Doesn't it seem prudent to move backwards one rather than forwards?

[Vladimir]

Yep, looks like they've pulled the earlier packages and SKs associated with them.

If you have Take_70 (or other stable Take_#) on one of your appliances, export it from there using CPUSE WebUI and import to target appliances.

[Iain_King]

You use opera? can you use chrome or firefox?

[Iain_King]

I don't have it.. this is the first R80.10 boxes we are rolling out

[Vladimir]

Chrome generally works. So does the Firefox. Occasionally they upgrade browser engines too rapidly and CP has to adjust httpd to comply.

Vladimir Yakovlev

973.558.2738

vlad@eversecgroup.com

[Iain_King]

Alright, so I installed the T103, it resolved a bunch of problems (failed CPHA on one member with no problem stats). Still having some issues with OSPF and mobile blade that are unexplained, but the T103 at least hasn't broken anything as far as I can tell.

[PhoneBoy]

Just to add some semi-official commentary

We have not yet officially pulled R80.10 JHF 91 yet as it is listed as the current GA take in sk116380.

There is a known issue in JHF 91 that is fixed in JHF 103.

Even though the CPUSE identifier is posted above, you are encouraged to open a TAC case and report your findings: Contact Support | Check Point Software

This is important as the information will be helpful in building the necessary confidence in JHF 103 that will allow us to release it as the GA take sooner rather than later.

[Jim_Fessler]

Over the past week Chrome has stopped working on R77.30 and R80.10. Just built a test R80.10 with JHF91 everything works except WEBUI with Chrome (IE works) however no browser will import any hotfixes to R80.10 base install or JHF91 or a new T5 install of R77.30. 

Chrome on Server 2003 which is not updated does work. 

[PhoneBoy]

The issue with Chrome is a different issue that has a solution you can get from TAC: Gaia Portal shows blank page after log in with Firefox 5x or Chrome 66 

[Iain_King]

wow! the balls!

//

Solution

This is not a Check Point issue, but an issue with the browser. 

As a workaround, use Internet Explorer, or contact Check Point Support to get a procedure that will work around this issue. A Support Engineer will make sure the procedure is compatible with your environment before running it. 

//

[Vladimir]

They are, technically speaking, correct.

When browser engines change, it is your choice to upgrade them or not (nominally, both Google and Mozilla are pushing updates automatically).

[HristoGrigorov]

A new package is available on *****: R80.10 Jumbo Hotfix Accumulator (Take 103)

Download updated SmartConsole for R80.10 Jumbo Hotfix Accumulator

This package should not be installed on Smart-1 525/5050/5150.

For backup prior R80.10 Jumbo Hotfix Accumulator Take 103 installation, refer to sk123352.

Details:
Machine:*****
Package Name: R80.10 Jumbo Hotfix Accumulator (Take 103)
File Name: Check_Point_R80_10_JUMBO_HF_Bundle_T103_sk116380_FULL.tgz
Package Type: Wrapper
Package Size: 514.628 MB
Available From: 2018-04-12 00:00:00
Allowed Machine Types: All types.

I am tempted to install it. But should I ?

[PhoneBoy]

Yes JHF103 is now a GA take