Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
Highlighted

R81 is now available (Questions and Answers)

r81.JPG

R81 is now available. More read here sk166715.

R81 Release Notes link
What's New in R81 link
Check Point R81 Known Limitations link
Download R81 link
R81 Upgrade Map link
SmartConsole Check Point R80.x Cloud Demo (sk103431)
Portable SmartConsole for R80.x (sk116158)
Check Point R81 Resolved Issues link

 

Tags (1)
19 Replies
Highlighted

21-Okt-2020
R81 GA sk166715 is publicly available since yesterday:

The downloads section states “COMING SOON”.

When will the downloads for R81 available?

r81a.JPG

 

Highlighted
Contributor

We have waited a long time.

I will test it in the LAB in the next days 🙂

Highlighted
Participant

nice news

0 Kudos
Reply
Highlighted
Participant

Installed on the first 6000 appliance. Works fine.

Great job Check Point guys.

Highlighted
Participant

Is the recommendation to use this version already productive?

0 Kudos
Reply
Highlighted

Right. As ever I went into this feet first.

Doing an in-place upgrade looks rather easy. But after the reboot there is still a lot to be done and you should pick a short lunch after that as th system is doing a lot of stuff in the background while it seems to be up rather fast at first glance.

Not sure what is the recommended way to keep tabs on it's progress yet.

api status is among them I guess.

 

 

0 Kudos
Reply
Highlighted
Participant

Already upgraded our own environment and the improvements to how the $FWDIR/scripts/migrate_server seems to be handling things in a much more verbose way providing a lot of additional feedback and a better understanding of what is going on during a management server upgrade is really nice. Much better when compared to the old $FWDIR/bin/upgrade_tools/migrate.

Did also test the new major upgrade functionality within Smart Console. It seems to be more or less the same as utilising Central Deployment Tool (CDT) but it's much more user-friendly to have it through Smart Console and as a part of the GUI compared to preparing it through SSH. Worked flawlessly for our small and simple environment running a R80.40 HA-cluster on Open Server.

 

What does "In addition, the Scalable Platform software is now aligned with the R81 Cyber Security Platform bringing feature parity to CheckPoint Maestro" really entail? I don't quite understand this one? I can't find anything in the documentation pointing towards R81 being compatible with Scaleable Platform? And there is nothing in the Maestro Secure Knowledge articles showing anything new in regards to the release of R81. There is no new on-going jumbo hotfix takes for neither R80.20SP or R80.30SP for Maestro Gateways or anything. Could you please explain what the release of R81 bring to Scaleable Platform and Maestro?

 

Best regards,
Thomas Teige
Orange Cyberdefense Norway

 

 

0 Kudos
Reply
Highlighted

Some questions are still open:

- When will the Scalable Platforms follow?
- When will R81 for SMB applications follow?
- Will there be a documentation package with all PDF documents available in one tgz file

Highlighted
Employee+
Employee+

Hi,

- Scalable platforms version it is merged with main train R81 and currently in Early Availability program.

- It is not clear to me wha you ask about SMB, please explain.

- PDF in tgz file will be available later today

Thanks!

Highlighted
Employee+
Employee+

Hi,

- Scalable platforms version it is merged with main train R81 and currently in Early Availability program.

- It is not clear to me wha you ask about SMB, please explain.

- PDF in tgz file will be available later today

Thanks!

Highlighted
Admin
Admin

The question is: when we will see a R81-based version for SMB appliances (1500 series)?

0 Kudos
Reply
Highlighted
Employee+
Employee+

Hi

When SMB is doing alignment, this is just base alignment, meaning, although we are align to R80.20, we still merge a lot of content (features and bug fixes) from more advanced versions. (and of course adding the unique features which are more related to embedded Gaia (Access, WiFi, Dsl, LTE, locally managed UI, etc.)

So, calling it "R80.20 align", might be confusing, (we actually initially thought of a completely different naming scheme, so we would avoid such confusion).. 

we are constantly adding capabilities from more advanced version, and every ~2 years we perform a bigger alignment to base.

So R81 alignment (or R8x alignment ) would occur, but not in the near future.

 

Thanks

 

0 Kudos
Reply
Highlighted
Admin
Admin

It's good that I had the right idea of how this worked 🙂
For those asking about an R81 version of SMB, it's better to ask about specific features versus getting hung up on the exact version number.

Highlighted
Participant

Is there any plan to support Inbound TLS decryption on SMB (1500 series) appliances?

0 Kudos
Reply
Highlighted
Employee
Employee

No plans right now - you can file an RFE.

0 Kudos
Reply
Highlighted
Admin
Admin

@MarioB_1 I would be very surprised if we ever had such plans. SMB appliances are very limited in terms of performance.

0 Kudos
Reply
Highlighted

Hi @Shirleyh,

Thanks, it is now available.

r81_dok.JPG

0 Kudos
Reply
Highlighted
Contributor

Hi,

There are a few things in the first time configuration wizard which are not (or not well) documented.

Looking at the output of config_system -l there are the following new attributes:

#########################################################################

#                                                                       #

#                       Scalable Platforms parameters                   #

#                                                                       #

#    For keys below set "true"/"false" after '='  within the quotes     #

#########################################################################

# Optional parameter, if not specified the default is false

install_security_vsx=

sg_cluster_id=

These parameters do not appear in the install/upgrade guide. I've installed VSX many times by building a standard gateway and then using SmartConsole to build a VSX gateway from it, what does "install_security_vsx" do?

I'm guessing sg_cluster_id is for scalable gateways - I thought R80.40+ did away with cluster IDs?

In the web UI the "Deployment options" page presents. Is there a way to invoke this from the CLI? The install/upgrade guide says "These options appear
(applies only to Check Point appliances that you configured as a Security Gateway)" - if they only apply to appliances, why do they also appear on an open server install?

When will install from cloud be supported for open servers?

Is recovery from existing snapshot supported for open servers?

Cheers,

Paul

0 Kudos
Reply
Highlighted
Explorer

nice

0 Kudos
Reply