topic Re: R81 is now available in General Topics

R81 is now available (Questions and Answers)

HeikoAnkenbrand — Tue, 27 Oct 2020 06:32:56 GMT

R81 is now available. More read here sk166715.

R81 Release Notes	link
What's New in R81	link
Check Point R81 Known Limitations	link
Download R81	link
R81 Upgrade Map	link
SmartConsole	Check Point R80.x Cloud Demo (sk103431) Portable SmartConsole for R80.x (sk116158)
Check Point R81 Resolved Issues	link

Re: R81 is now available

HeikoAnkenbrand — Thu, 22 Oct 2020 18:35:16 GMT

21-Okt-2020
R81 GA sk166715 is publicly available since yesterday:

The downloads section states “COMING SOON”.

When will the downloads for R81 available?

Re: R81 is now available

Christian_Wagen — Thu, 22 Oct 2020 19:43:10 GMT

We have waited a long time.

I will test it in the LAB in the next days 🙂

Re: R81 is now available

mats — Fri, 23 Oct 2020 06:04:56 GMT

nice news

Re: R81 is now available

red_tomato — Sun, 25 Oct 2020 08:56:06 GMT

Installed on the first 6000 appliance. Works fine.

Great job Check Point guys.

Re: R81 is now available

onur — Mon, 26 Oct 2020 06:54:57 GMT

Is the recommendation to use this version already productive?

Re: R81 is now available

Hugo_vd_Kooij — Mon, 26 Oct 2020 12:05:06 GMT

Right. As ever I went into this feet first.

Doing an in-place upgrade looks rather easy. But after the reboot there is still a lot to be done and you should pick a short lunch after that as th system is doing a lot of stuff in the background while it seems to be up rather fast at first glance.

Not sure what is the recommended way to keep tabs on it's progress yet.

api status is among them I guess.

Re: R81 is now available

RamGuy239 — Mon, 26 Oct 2020 15:57:16 GMT

Already upgraded our own environment and the improvements to how the $FWDIR/scripts/migrate_server seems to be handling things in a much more verbose way providing a lot of additional feedback and a better understanding of what is going on during a management server upgrade is really nice. Much better when compared to the old $FWDIR/bin/upgrade_tools/migrate.

Did also test the new major upgrade functionality within Smart Console. It seems to be more or less the same as utilising Central Deployment Tool (CDT) but it's much more user-friendly to have it through Smart Console and as a part of the GUI compared to preparing it through SSH. Worked flawlessly for our small and simple environment running a R80.40 HA-cluster on Open Server.

What does "In addition, the Scalable Platform software is now aligned with the R81 Cyber Security Platform bringing feature parity to CheckPoint Maestro" really entail? I don't quite understand this one? I can't find anything in the documentation pointing towards R81 being compatible with Scaleable Platform? And there is nothing in the Maestro Secure Knowledge articles showing anything new in regards to the release of R81. There is no new on-going jumbo hotfix takes for neither R80.20SP or R80.30SP for Maestro Gateways or anything. Could you please explain what the release of R81 bring to Scaleable Platform and Maestro?

Best regards,
Thomas Teige
Orange Cyberdefense Norway

Re: R81 is now available

HeikoAnkenbrand — Tue, 27 Oct 2020 06:26:51 GMT

Some questions are still open:

- When will the Scalable Platforms follow?
- When will R81 for SMB applications follow?
- Will there be a documentation package with all PDF documents available in one tgz file

Re: R81 is now available

Shirleyh — Tue, 27 Oct 2020 07:29:02 GMT

Hi,

- Scalable platforms version it is merged with main train R81 and currently in Early Availability program.

- It is not clear to me wha you ask about SMB, please explain.

- PDF in tgz file will be available later today

Thanks!

Re: R81 is now available

Shirleyh — Tue, 27 Oct 2020 07:29:51 GMT

Hi,

- Scalable platforms version it is merged with main train R81 and currently in Early Availability program.

- It is not clear to me wha you ask about SMB, please explain.

- PDF in tgz file will be available later today

Thanks!

Re: R81 is now available

PhoneBoy — Tue, 27 Oct 2020 17:13:33 GMT

The question is: when we will see a R81-based version for SMB appliances (1500 series)?

Re: R81 is now available

Amir_Ayalon — Tue, 27 Oct 2020 20:06:35 GMT

When SMB is doing alignment, this is just base alignment, meaning, although we are align to R80.20, we still merge a lot of content (features and bug fixes) from more advanced versions. (and of course adding the unique features which are more related to embedded Gaia (Access, WiFi, Dsl, LTE, locally managed UI, etc.)

So, calling it "R80.20 align", might be confusing, (we actually initially thought of a completely different naming scheme, so we would avoid such confusion)..

we are constantly adding capabilities from more advanced version, and every ~2 years we perform a bigger alignment to base.

So R81 alignment (or R8x alignment ) would occur, but not in the near future.

Thanks

Re: R81 is now available

PhoneBoy — Tue, 27 Oct 2020 20:26:49 GMT

It's good that I had the right idea of how this worked 🙂
For those asking about an R81 version of SMB, it's better to ask about specific features versus getting hung up on the exact version number.

Re: R81 is now available

HeikoAnkenbrand — Thu, 29 Oct 2020 06:44:32 GMT

Hi @Shirleyh,

Thanks, it is now available.

Re: R81 is now available

MarioB_1 — Thu, 29 Oct 2020 07:33:58 GMT

Is there any plan to support Inbound TLS decryption on SMB (1500 series) appliances?

Re: R81 is now available

Barel_Tkach — Thu, 29 Oct 2020 08:16:27 GMT

No plans right now - you can file an RFE.

Re: R81 is now available

_Val_ — Thu, 29 Oct 2020 09:43:44 GMT

@MarioB_1 I would be very surprised if we ever had such plans. SMB appliances are very limited in terms of performance.

Re: R81 is now available (Questions and Answers)

Paul_Hagyard — Tue, 03 Nov 2020 19:47:40 GMT

Hi,

There are a few things in the first time configuration wizard which are not (or not well) documented.

Looking at the output of config_system -l there are the following new attributes:

#########################################################################

# #

# Scalable Platforms parameters #

# #

# For keys below set "true"/"false" after '=' within the quotes #

#########################################################################

# Optional parameter, if not specified the default is false

install_security_vsx=

sg_cluster_id=

These parameters do not appear in the install/upgrade guide. I've installed VSX many times by building a standard gateway and then using SmartConsole to build a VSX gateway from it, what does "install_security_vsx" do?

I'm guessing sg_cluster_id is for scalable gateways - I thought R80.40+ did away with cluster IDs?

In the web UI the "Deployment options" page presents. Is there a way to invoke this from the CLI? The install/upgrade guide says "These options appear
(applies only to Check Point appliances that you configured as a Security Gateway)" - if they only apply to appliances, why do they also appear on an open server install?

When will install from cloud be supported for open servers?

Is recovery from existing snapshot supported for open servers?

Cheers,

Paul

Re: R81 is now available (Questions and Answers)

Reimar_W — Tue, 03 Nov 2020 20:00:19 GMT

nice