Win E88.61 and 24H2 GA Support?

[George_Casper]

Can we get clarity if E88.61 just released December 1, 2024 will fully support Win 11 24H2 GA Oct 1, 2024 edition?  That is out of the box without having to manually edit the config files on client or gateway side?   sk182788 doesn't list it as a resolved issue or any real mention of 24H2.   

[MikeB]

Hi @George_Casper ,

Windows 11 version 24H2 is supported as GA from version E88.41, as indicated in the SK182237:

https://support.checkpoint.com/results/sk/sk182237

[George_Casper]

E88.41 through E88.60 only support 24H2 EA (Released from Microsoft PRIOR to October 1, 2024) and only partially works with Win 11 24H2 GA (Released by Microsoft on October 1, 2024) only when you manually edit the config files to work around the VPN issue.    Sorry, not making global changes to gateway config files every time Microsoft adjusts a setting on a new Windows build.  The Checkpoint client needs to work "out the box" without having to edit the config files on every client.   Need clarification if E88.61 includes this fix/workaround natively or not.

[the_rock]

Maybe worth TAC case to confirm for sure?

Andy

[AdiGH]

The fix is expected as part of E88.70 which was not released yet. 

[George_Casper]

Checkpoint stated their policy was 2 months from OS GA release for endpoint client support.   Microsoft Win11 24H2 GA released on October 1, 2024, Checkpoint should have had an endpoint client supporting it by December 1, 2024.   Can you check up the chain and see when E88.70 is scheduled for release? 

Thank you

[PhoneBoy]

The original plan was for E88.70 to be out by now.
It is actually out for macOS.
Why it is not for Windows, I can only speculate.
Perhaps @BarYassure can comment.

[George_Casper]

Probably as 24H2 has been a nightmare of issues compared to most feature releases from Microsoft.   Hopefully it doesn't become the Windows Vista of this decade!

[BarYassure]

Hi

88.70 lease for Windows is a bit late, as we are trying to maximize the CPU Consumption improvements planned for this version.
Win11 24H2 GA support is starting from E88.41 and later versions - It was initially EA, but we saw that everything is working as expected so we have changed it to GA starting E88.41.

[George_Casper]

I believe there is a significant difference in opinion between what the customer base has experienced wide spread issues with VPN components vs what you stated with E88.41 and later Win11 24H2 GA "working as expected".     

We don't agree that "working as expected" should require making global config changes to the gateway or config files changed on each and every endpoint to make it work as expected.  

The expectation is the fix/workaround become default so that the Endpoint VPN works as expected, by the customer, without modification every time Microsoft makes releases a feature update or patch.   

Please clarify Checkpoint's position on this issue.

Thank you

[BarYassure]

You are right, let me correct myself.
Starting from E88.41 we have our official support for Win11 24H2 - but I agree this is a limitation and the workaround is not the best solution.
With E88.70 we are fixing this limitation, and customers will be able to choose which version they want to use.