topic Re: R77.20.87 Jumbo Hotfix Accumulator in Spark Firewall (SMB)

R77.20.87 Jumbo Hotfix Accumulator

G_W_Albrecht — Mon, 19 Aug 2019 09:07:18 GMT

They did it again - in addition to sk151574: R77.20.87 for Small and Medium Business Appliances, we now have the fresh new sk153433: R77.20.87 Jumbo Hotfix Accumulator with the new firmware image Build 2960.

Nice to have a new build and a list of resolved issues - but for what reason name it Jumbo HF (which it is not, just a plain installation image containing fixed components) ? Or will R77.20.87 stay as a kind of final version for 7x0/9110/14x0 models that will get updated this Jumbo HF way from now on ?

Re: R77.20.87 Jumbo Hotfix Accumulator

HristoGrigorov — Tue, 20 Aug 2019 06:47:26 GMT

I think the answer is hidden in this sentence: "This Incremental Hotfix and this article are periodically updated with new fixes."

R77.20.87 Jumbo Hotfix Accumulator

G_W_Albrecht — Tue, 20 Aug 2019 06:51:55 GMT

Yes, i did read it - but this is not a Hotfix, but a (some bugs fixed) firmware image. But i do not like this terminology here because - technically speaking - it is just wrong... Sounds like a marketing McGuffin - we now even have a Jumbo for SMB appliances (broad smile) !

Re: R77.20.87 Jumbo Hotfix Accumulator

HristoGrigorov — Tue, 20 Aug 2019 06:59:30 GMT

Yeah, sounds a bit funny to have JHF for SMBs 🙂 But I think this comes from the CheckPoint internal development process for releasing hotfixes and it is more or less unified for all kind of devices. Only the way it is delivered is different.

Re: R77.20.87 Jumbo Hotfix Accumulator

G_W_Albrecht — Tue, 20 Aug 2019 07:07:09 GMT

I see a basic difference between them - a current CPUSE HFA / Jumbo contains fixed software pieces (e.g. rpms, scripts, binaries) and a lot of installation intelligence. The R77.20.87 Jumbo Hotfix Accumulator is a (sequence of) new firmware image(s), nothing else.

Re: R77.20.87 Jumbo Hotfix Accumulator

G_W_Albrecht — Mon, 26 Aug 2019 05:33:16 GMT

Some time ago i gave feedback in sk156192 TCP SACK PANIC requesting a link to the - available - SMB firmware version. Now it has been updated as follows:

SMB (700/900/1400) - R77.20.87 Jumbo Hotfix Accumulator- Build 2960 (and higher).

SMB (600/1100/1200R) - Contact Check Point Support to get a Hotfix for this issue. A Support Engineer will make sure the Hotfix is compatible with your environment before providing the Hotfix.

Re: R77.20.87 Jumbo Hotfix Accumulator

Pedro_Espindola — Thu, 22 Aug 2019 16:57:18 GMT

Did anyone here test build 2960? Is it good? Can I move from 2929 with no worries?

Re: R77.20.87 Jumbo Hotfix Accumulator

HristoGrigorov — Thu, 22 Aug 2019 18:37:42 GMT

I run it for few days already. It is super stable for me. Centrally managed cluster of 1470s.

Re: R77.20.87 Jumbo Hotfix Accumulator

Pedro_Espindola — Fri, 23 Aug 2019 16:56:13 GMT

Great! Thanks

Re: R77.20.87 Jumbo Hotfix Accumulator

PhoneBoy — Mon, 26 Aug 2019 02:34:33 GMT

A version increase usually implies new features and functionality whereas a jumbo hotfix is just bugfixes.
In the case of SMBs, there really isn't a "patch" mechanism like on non-SMB gateways.
As such, we have to distribute patches as a new firmware image.
We did the same thing in IPSO, using the "FCS" or "Build" moniker to differentiate within the same version.

Re: R77.20.87 Jumbo Hotfix Accumulator

G_W_Albrecht — Mon, 26 Aug 2019 05:52:16 GMT

Not only IPSO was distributed that way, but also the predecessor of GAiA Embedded running on Safe@Office / Edge appliances called Embedded NGX. We also had the separate bootloader and ADSL firmware files in Embedded NGX. But installation was only possible using TFTP 😞...

Re: R77.20.87 Jumbo Hotfix Accumulator

PhoneBoy — Tue, 03 Sep 2019 16:05:42 GMT

Modern-day SMB appliances have a similar bootloader, but it can be loaded via USB.

Re: R77.20.87 Jumbo Hotfix Accumulator

Greg_Harbers — Thu, 10 Oct 2019 23:28:40 GMT

FYI,

I have been supplied build 965 of R77.20.87.

This was to fix an issue where the defined proxy port was being overwritten by a default port of 8080. It is running on at least 4 devices currently without issue.

Re: R77.20.87 Jumbo Hotfix Accumulator

HristoGrigorov — Fri, 11 Oct 2019 03:05:17 GMT

Latest available for download is R77.20.87 Build 990172972 but there is no info what was changed.

Re: R77.20.87 Jumbo Hotfix Accumulator

Steffen_Appel — Wed, 23 Oct 2019 09:34:13 GMT

Now the reason became obvious, R80.20 for SMB is out (https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk159173), but it does not support the 1400, but they willstay on R77.20 - not good.

Re: R77.20.87 Jumbo Hotfix Accumulator

G_W_Albrecht — Mon, 21 Oct 2019 12:10:51 GMT

Now all is becoming much more unclear - a new firmware has been released, R77.20.87 Build 990172972 for 700/900/1400 Appliances. But there is neither any documentation about this build nor is it listed under R77.20.87 Jumbo Hotfix Accumulator- so i really do not know what to think about this...

Re: R77.20.87 Jumbo Hotfix Accumulator

HristoGrigorov — Mon, 21 Oct 2019 12:15:39 GMT

Come on... 🙂 This is an old story. Sometimes JHAs made to fix particular problem(s) for particular customer(s) make their way to download server. Like mine here:

# ver

This is Check Point's 1470 Appliance R77.20.87 - Build 973

Re: R77.20.87 Jumbo Hotfix Accumulator

G_W_Albrecht — Mon, 21 Oct 2019 14:04:40 GMT

Not so very old story - as there is no documentation at all and new firmware versions should be included in sk153433: Jumbo Hotfix Accumulator for R77.20.87 page!

> This is Check Point's 1470 Appliance R77.20.87 - Build 973

This is not available by the CP download server.

Re: R77.20.87 Jumbo Hotfix Accumulator

PhoneBoy — Mon, 21 Oct 2019 20:37:02 GMT

You are correct that we are not planning to release R80.20 SMB code for the 700/1200R/1400 appliances.
R77.20.87 will continue to be supported and receive bugfixes for the 700/1200R/1400 appliances per our Support Lifecycle Policy.

Re: R77.20.87 Jumbo Hotfix Accumulator

Greg_Harbers — Mon, 21 Oct 2019 20:48:55 GMT

I have got to say, that is cr*p. We have customers who have been purchasing 1400 series appliances to be centrally managed and that one day the R80.x features like layered policies etc would be available. At CPX earlier earlier this year it was indicated that it was planned for by the end of 2019. Now as the year draws to a close you are telling all of your customers who have purchased these that they have bought a lemon.