R77.30: New Jumbo Hotfix (Take 338) GA-Release

[Danny]

A new General Availability Jumbo Hotfix Accumulator take for R77.30 (Take 338) is available (Resolved issues).

Also download and install the most updated R77.30.03 SmartConsole.

Take_338 is the latest General Availability release that can be directly downloaded from Check Point Cloud using CPUSE and from sk106162.

Take	Date	CPUSE Identifier	CPUSE offline package
Take_338	16 Oct 2018	Check_Point_R77_30_JUMBO_HF_1_Bundle_T338_FULL.tgz	Download

Note:

• Effective Oct 16th 2018, General Availability Take_338 is available for CPUSE online installation in Gaia Portal and Gaia Clish (it replaces Take_317).

List of resolved issues in R77.30 JHF (Take 338) since last GA-Take 317:

ID	Product	Symptoms
Take 338 (16 Oct 2018) - General Availability Take
02481671	Threat Extraction	When Threat Extraction is configured to block access to original files and to block corrupted/encrypted files (both not default) - The email that indicates that the encrypted/corrupted file has been removed is not received by email recipient.
01850251	Anti-Malware	UDP performance with Threat Prevention was improved.
SA-31	Gaia OS	Fixing an issue which can lead to the loss of connectivity.
02421166, 02482081, 02468381	VPN	Added Azure VPN IKEv2 enhancement. Refer to sk116157.
02431088	VPN	Stability improvements for IKEv2 and Azure gateways.
02058553	VPN	IKEv2 support for more than 8 proposals.
02471564	SSL Inspection	Improved stability of WSTLSD daemon.
IDA-949	Identity Awareness	RADIUS accounting server does not understand accounting-response from Check Point gateway. Refer to sk130532.
01786753	Identity Awareness	AD users with special characters in their names cannot authenticate. Refer to sk131872.
01500409	Identity Awareness	"Group membership of the required account (user or machine) could not be retrieved from the AD. Make sure the account exists in the AD." log is received from Identity Awareness blade when format of RADIUS user is "user@domain". Refer to scenario 6 in sk106133.
IDA-1150	Identity Awareness	Fixed a MUH Agent issue of sending unnecessary MUH updates causing high CPU on PEP. This lead to delays with getting identities and can cause connectivity issues.
IDA-735	Identity Awareness	Identities are not synced to PEP if two PDPs will report the same network Refer to sk130373.
PMTR-20184	Security Gateway	Check Point response to SegmentSmack (CVE-2018-5390) & FragmentSmack (CVE-2018-5391). Refer to sk134253.
PMTR-20189 & PMTR-20188	UserCheck, VSX	In VSX environment portals are down after uninstalling R77.30 Jumbo Hotfix take 266 or later and there are multiple defunc instances of mpdaemon.
02729238	SSL Inspection	Improved accuracy of HTTPS Inspection rule-base matching.
01699431	Mobile Access	Improving stability of SNX roaming feature.
02408359	QoS	VPN Stability improvements in setups with NAT.
PMTR-19603	Gaia	Jumbo Hotfix uninstall causes issues in boot and communication in TEX product line.
01855951	VPN	Improved stability for VPN Remote Access when using tcpt.
GAIA-2269	Data Center Security Appliances	Added support for 23900 appliances. Refer to sk107516.
02396869	VPN	Improved tunnel stability in site to site setups.
02447010	VPN	Improved accounting of Remote Access user licenses in cluster environment.
02006858	VPN	Improving consistency and stability of supernet encryption domains of gateways with Mobile Access blade.
PMTR-14587	Gaia OS	Security hardening for Gaia WebUI
PMTR-14615	Gaia OS	Security hardening for Gaia WebUI
PMTR-14614	Gaia OS	Security hardening for Gaia WebUI
01944349	Gaia OS	When browsing to the Time page in the GAIA WebUI, two messages are spammed in /var/log/messages (flag is ... and data is...).
02049361	Gaia OS	Intel X520 DP 10Gb DA/SFP+ Server Adapter is not detected by GAIA OS.
01876093	Mobile Access	Adding configurable option to allow compressed https connections to internal servers. Refer to sk128513
PMTR-15763	Gaia OS	Gaia Portal shows blank page after login with Firefox 5x or Chrome 66. Refer to sk121373.
THREATEMUL-4272	Threat Emulation	If Threat Emulation disk space threshold is higher than Log disk space threshold, then Threat Emulation will stop emulation while the logs will continue to accumulate, resulting in the emulation entering fail open.
GAIA-2269	Data Center Security Appliances	Added support for 23900 appliances. Refer to sk107516.
02725585	Mobile Access	CVPN daemon stability.
02764970	Gaia OS	lspci utility showing unknown devices on HP G9 server with 4TH gen Xeon CPU's.
02764972	Gaia OS	Fixed the output of raid_diagnostics command.
PMTR-9275	Security Gateway	In rare scenarios, CPD process stops working when running for a long time.
02757263	SSL Inspection	Improved resumption handshake behavior in SSL inspection.
02757276	SSL Inspection	Improved handshake handling in case of re-negotiation.
CPDIAG-936	Check Point Diagnostic tool	New cpview capability to collect and present IO data.  Enabled cpview history collection on Management machines

[Carsten_Weber]

Thanks for sharing. Much appreciated.

Regarding: "Also download and install the most updated R77.30.03 SmartConsole"
This SmartConsole version is not to be found over the regular channel, going via sk104859 for "Check Point R77.30". Where does it come from? I'd prefer this to be as official as possible.

Also, there is no information about the changes, version, nor checksum, etc. What is the difference and do I really need to change it (coming from Check_Point_SmartConsole_and_SmartDomain_Manager_R77.30_T204_Windows.exe") for the JHF 338? (as rolling out new software is a real hustle in the no local admin rights environment)

What is the part at the end of the file name "...E80.65.exe" referring to? Endpoint Server? It at least reminds me of it.

Cheers

Carsten

[PhoneBoy]

Best to search R77.30.03 SmartConsole in SupportCenter.

The most current one is for E80.87: Check Point SmartConsole for Endpoint Security Server R77.30.03 / E80.87

The one Danny Jung‌ linked in his original post is the one we originally released and is probably not the most current.