topic Re: R80.20.35 for Quantum Spark Appliances in Spark Firewall (SMB)

R80.20.35 for Quantum Spark Appliances

G_W_Albrecht — Wed, 13 Oct 2021 08:07:33 GMT

Finally GA sk174683: R80.20.35 for Quantum Spark Appliances for 1500/1600/1800 appliances was released yesterday - but which new features do we get ?

IPv6

ND (Neighbor Discovery) Proxy for delegating ISP SLAC prefix to Internal network.
IPv6 internet probing - Automatically detect loss of connectivity to default gateway when working in IPv6 mode.

Access Policy

VoIP wizard enhancements which simplify configuration of the most common VoIP topologies.
- Option to use objects instead of fixed IP.
- SIP Bypass.

Bypass the SSL Inspection for specific devices based on their MAC Addresses.
Use Updatable objects in Firewall Access Policy on Locally Managed appliances.

Quantum Spark Portal (SMP)

Support for SSL Exceptions and Threat Prevention Exceptions.

Access Control

Enable 802.1x based authentication on LAN ports when working with RADIUS Servers.
MAC Address based filtering "Allow" list - for 1500/1600/1800 appliances.
MAC Address based filtering "Deny" list - Ability to add a deny list mode to MAC address filtering that can block access to any MAC address that exists in the MAC address filtering table - for 1500/1600/1800 appliances.

General

Send encrypted security logs to user-defined external syslog server over TLS for locally managed appliances.

Fast Cluster failover with OSPF

Appliance can act as an NTP Server

System logs search

Upgrade your Locally Managed 700/1400 device to the new 1600/1800 Appliance Series which includes all configurations, Threat Prevention, and Access policies.

Enhancements

DHCP Server
- Increase the range of IP addresses allocated by the appliance DHCP server from 1024 to 4080.
Identity Awareness
- Exceptions for Browser-Based Authentication.

LTE
- PDP Context Activation Failures Retries Interval.
- Server Down Actions Retries Interval.

Re: R80.20.35 for Quantum Spark Appliances

G_W_Albrecht — Thu, 14 Oct 2021 06:47:56 GMT

Beware of the Limitations:

These features are currently not available in the R80.20.35 release:

ARP spoofing

Re: R80.20.35 for Quantum Spark Appliances

Ted_Serreyn — Fri, 29 Oct 2021 15:28:43 GMT

Are there any plans on adding GEO blocking to SMP?

Re: R80.20.35 for Quantum Spark Appliances

Tom_Hinoue — Thu, 16 Dec 2021 00:25:20 GMT

We now have a new replacement GA 🙂

sk174683: R80.20.35 for Quantum Spark Appliances

14 December 2021: R80.20.35 Build 992002577 for 1500/1600/1800 appliances is the latest General Availability release that can be downloaded directly from this article. It replaces Build 992002467.

Re: R80.20.35 for Quantum Spark Appliances

Nik_Bloemers — Thu, 16 Dec 2021 08:16:33 GMT

Where can I find what has been changed/fixed in this new build? So we can evaluate if this is important for us to roll out.

Re: R80.20.35 for Quantum Spark Appliances

Tom_Hinoue — Thu, 16 Dec 2021 14:03:08 GMT

The only details we have now is from the following SK:

Check Point R80.20.X for 1500, 1600, and 1800 Appliances Features and Known Limitations

Where we need to filter R80.20.35 in Known Limitations and Resolved Issues section to see what's changed.
....Though I expect more fixed issues to be on this list... the list seems a bit short in my opinion.

Re: R80.20.35 for Quantum Spark Appliances

Nik_Bloemers — Thu, 16 Dec 2021 14:37:23 GMT

There I can't see what changed between different builds of the same version, since there's nothing mentioned about it. We need a changelog. Or just a new version number. This is not transparent for the users.

Re: R80.20.35 for Quantum Spark Appliances

Chris_Atkinson — Fri, 17 Dec 2021 07:58:58 GMT

Thanks for the feedback I've taken it internally.

Re: R80.20.35 for Quantum Spark Appliances

Chris_Atkinson — Sun, 19 Dec 2021 22:32:43 GMT

Refer: https://community.checkpoint.com/t5/SMB-Gateways-Spark/R80-20-35-JHF/m-p/136778#M6156