Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
Christopher_Ham
Explorer

R82.10 invalid query syntax using subnets

This is a single standalone instance of a firewall deployment where I'm having a problem querying IP subnets using asterisks or CIDR, no matter the combination. I'm just now observing this behaviour after upgrading to R82.10, no matter the JHF iterations.

No issues with the query using single host IPs such as /32, as they appear in the logs. Anything with a larger network prefix (/8,/30,/24 etc..) creates this error. Any assistance is appreciated to repair this problem

Log Query syntax:

blade:Firewall OR blade:IPS AND NOT dst:20.*
blade:Firewall OR blade:IPS AND NOT dst:10.0.0.0/8
NOT dst:20.0.0.0/8

fw ver: This is Check Point's software version R82.10 - Build 010

Cpinfo [FW1]
HOTFIX_NGM_DOCTOR_AUTOUPDATE
HOTFIX_R82_10_JUMBO_HF_MAIN Take: 24
HOTFIX_R82_10_GA_TIME_FIX_MAIN Take: 2
HOTFIX_GOT_TPCONF_AUTOUPDATE
HOTFIX_GOT_MGMT_AUTOUPDATE
HOTFIX_VCE_R82_10_AUTOUPDATE
HOTFIX_PUBLIC_CLOUD_CA_BUNDLE_AUTOUPDATE
HOTFIX_INEXT_NANO_EGG_AUTOUPDATE
HOTFIX_WEBCONSOLE_AUTOUPDATE
HOTFIX_GOT_TPCONF_MGMT_AUTOUPDATE

0 Kudos
2 Replies
PhoneBoy
Admin
Admin

What version did this work with previously?
This likely needs a TAC case.

0 Kudos
Christopher_Ham
Explorer

R81.20

0 Kudos

Leaderboard

Epsum factorial non deposit quid pro quo hic escorol.

Upcoming Events

    CheckMates Events