R80.20 is now GA?

[HeikoAnkenbrand]

Is this the GA version?

Check Point R80.20 

Dameon  or Valeri can you please say something about this?

Did I miss an announcement?

Regards,

Heiko

[_Val_]

Yes you did miss it: https://community.checkpoint.com/message/28644-check-point-r8020-now-ga 

[_Val_]

Once more, the second question is also answered in the link I gave you above: Check Point R80.20 Now GA. Yes, it is GA. No it does not have the new kernel for the GW, hence two separate. upgrade packages. 

Heiko Ankenbrand, may I ask, why did you create a document and not a discussion or question?

[Danny]

LOL!

[_Val_]

Oh yes, we are having fun already. Now, wait till you guys come to Israel....

[HeikoAnkenbrand]

I have to laugh at myself. Whoever can read wins. 

I did not read article  Check Point R80.20 Now GA from Dameon .

Sorry - I spend a round of beer for us in Israel for that!

But it would have been nice if we had received a mail in advance as a Partner.

Regards,

Heiko

[_Val_]

There is a reason you did not receive the mail. We want slow adoption till GW version with the new kernel is out as well. 

[HeikoAnkenbrand]

A customer called me this morning and asked if he could upgrade to R80.20. I was confused until I read it in the KB.

So it would be nice if you would inform us partners before.

Now I've caused confusion for everyone and now I call the customer.

Regards,

Heiko

[_Val_]

You are asking the wrong people, sir. From CheckMates perspective, we were all over the place with the announcement: CM, FB, LinkedIn and Twitter. 

By the way, the answer for your customer is, it depends... 

[Ali_Korkmaz]

I have to say, it was a surprise for me. I did not see any info on linkedin. But since I've been constantly browsing the support site, I've been aware before of the client. 

[G_W_Albrecht]

I just gave it a try, but there are some obstacles:

- for CPUSE upgrade, you will need deployment agent 1567 (i have downloaded it from CPUSE page, unstuffed the .rpm and installed it by CLI)

- CPUSE upgrade worked very well, but i have two issues now:

- i can log in to both SMS and GW 80.20 usinf winscp/ssh

- i can login GAiA WebGUI on SMS

- i can not login to GW GAiA WebGUI

- the R80.20 dashboard first presents the fingerprint, tries to connect and stops with "Authentication to server failed."

[PhoneBoy]

Much beer will be had in Israel

[_Val_]

it's a pity there is no option "correct answer" here. I blame Heiko Ankenbrand‌ for starting this as a document and not a discussion

[HeikoAnkenbrand]

I hope I can take a keg of beer on the plane.

Regards,

Heiko

[HeikoAnkenbrand]

Doesn't sound good.

I will also test the R80.20 GA in the LAB tonight. Günther I'll report tomorrow.

Regards,

Heiko

[G_W_Albrecht]

I will install fresh SMS tomorrow and migrate import the database, maybe that will be successfull...

[Daniel_Collins]

So this concerns me, as I'm confused about where we are in terms of support.

So we have a GA release of R80.20.. but with a different kernel version for the GW component;

- Is a standalone deployment supported at the moment?
- What kernel version will be used if so?

- How will Check Point bring the kernel version of the GW/All In One's in line with the manager?

- Will this be delivered through a jumbo hotfix like it has been in R77.30?

Apologies if I seem abrubt, we're still a bit frustrated we weren't notified about this as a partner - we have customer's waiting for the management features of R80.20, pure luck we noticed it.

[PhoneBoy]

A different installation ISO is provided for installing gateways, which also supports standalone installation.

This is done using the same (older) kernel we've had in past releases. 

We are in EA testing of R80.20 Gateway with the newer kernel, which will support Standalone installs.

We are looking for sites willing to test this in production: R80.20 EA for Gateway with Linux 3.10 Kernel Coming Soon‌

I assume we will provide this as something that can be installed with CPUSE (whether a jumbo hotfix, new version, etc). 

[Iain_King]

yuck.

[PhoneBoy]

Version 1573 or later of the Deployment Agent should be used for a CPUSE upgrade, FYI.

[G_W_Albrecht]

That is correct - but it was not easy to install DeploymentAgent_000001567_1.tgz, only CLI installation of the CPda-00-00.i386.rpm did work...

[PhoneBoy]

Define "not easy" -- was it failing through installing via the WebUI?

Any details you can provide?

I think I ended up installing via CLI as well.

[G_W_Albrecht]

I downloaded DeploymentAgent_000001567_1.tgz from the sk92449, but after uploading CPUSE did not like it (meta-information missing), so i ended up using rpm with CLI.

[Hugo_vd_Kooij]

I don't think that file was ever intended for CPUSE.

[G_W_Albrecht]

Yes, that is true - i just would prefer if it was.

[PhoneBoy]

With the newer Deployment Agent, there is an option to "Install DA" that pops up.

I noticed it after manually installing 1573 on both R80.20.M1 and R77.30.

[G_W_Albrecht]

Yes, i have found that, too - a valuable addition 😉