R82.10 invalid query syntax using subnets

Christopher_Ham — Sun, 05 Jul 2026 10:16:21 GMT

This is a single standalone instance of a firewall deployment where I'm having a problem querying IP subnets using asterisks or CIDR, no matter the combination. I'm just now observing this behaviour after upgrading to R82.10, no matter the JHF iterations.

No issues with the query using single host IPs such as /32, as they appear in the logs. Anything with a larger network prefix (/8,/30,/24 etc..) creates this error. Any assistance is appreciated to repair this problem

Log Query syntax:

blade:Firewall OR blade:IPS AND NOT dst:20.*
blade:Firewall OR blade:IPS AND NOT dst:10.0.0.0/8
NOT dst:20.0.0.0/8

fw ver: This is Check Point's software version R82.10 - Build 010

Cpinfo [FW1]
HOTFIX_NGM_DOCTOR_AUTOUPDATE
HOTFIX_R82_10_JUMBO_HF_MAIN Take: 24
HOTFIX_R82_10_GA_TIME_FIX_MAIN Take: 2
HOTFIX_GOT_TPCONF_AUTOUPDATE
HOTFIX_GOT_MGMT_AUTOUPDATE
HOTFIX_VCE_R82_10_AUTOUPDATE
HOTFIX_PUBLIC_CLOUD_CA_BUNDLE_AUTOUPDATE
HOTFIX_INEXT_NANO_EGG_AUTOUPDATE
HOTFIX_WEBCONSOLE_AUTOUPDATE
HOTFIX_GOT_TPCONF_MGMT_AUTOUPDATE

Re: R82.10 invalid query syntax using subnets

PhoneBoy — Mon, 06 Jul 2026 21:00:51 GMT

What version did this work with previously?
This likely needs a TAC case.

Re: R82.10 invalid query syntax using subnets

Christopher_Ham — Mon, 06 Jul 2026 21:04:20 GMT

R81.20

topic Re: R82.10 invalid query syntax using subnets in General Topics

R82.10 invalid query syntax using subnets

Re: R82.10 invalid query syntax using subnets

Re: R82.10 invalid query syntax using subnets