topic Re: R80.20.40 for Quantum Spark Appliances in Spark Firewall (SMB)

R80.20.40 for Quantum Spark Appliances

G_W_Albrecht — Mon, 18 Apr 2022 14:18:55 GMT

Freshly released on 14 April 2022, sk176145 R80.20.40 Build 992002665 appears instead of R81.10.00 with the highlights:

SMP - Ability to send periodic Security Reports at a specific date/time.
IPIP internet connection.
Routing UI enhancement - Protocol and rank fields.
Support for Magic MAC on Centrally Managed clusters.
Allow setting the Expert Password Hash multiple times.
Adjusted AD-Query and Identity Logging solutions to work with Microsoft hardening changes in DCOM which were required for CVE-2021-26414
Stability and performance enhancements.
New CheckPoint Logo !

Support for Magic MAC on Centrally Managed clusters has been a feature also announced for R81.10.00, but R80.20.40 appears to have some important updates regarding IPv4/IPv6 and MS AD.

Re: R80.20.40 for Quantum Spark Appliances

G_W_Albrecht — Tue, 19 Apr 2022 14:47:48 GMT

A strange new advanced setting has survived Q & A 8):

Bypass CRL - You can not even edit it 😉!

Re: R80.20.40 for Quantum Spark Appliances

Tom_Hinoue — Thu, 21 Apr 2022 08:45:04 GMT

This setting is only configurable from clish atm, and was available from around R77.20.87 B3120/R80.20.35 B2577.

When CRL validation is enabled, the inspection of the CRL is now limited to 10000 entries (default) in the CRL file to prevent high-CPU utilization when the gateway tries to analyze a large-CRL file.