R81.10 Jumbo Hotfix Accumulator - New GA Take #78

[eranzo]

Hi All,

R81.10 Jumbo HF Take #78 is now our GA take (replacing take 66) and is available for download to all via CPUSE (as recommended) and via Jumbo documentation ( R81.10 ) 

Full list of resolved issues can be found in the Jumbo documentation ( R81.10) 

New: Starting from R80.40, Central Deployment allows you to perform a batch deployment of Hotfixes on your Security Gateways and clusters from SmartConsole!!

For more information, see sk168597.

Thanks,

Release Operations group

[ptuttle_2]

Did 75 ever go GA ?

[Chris_Atkinson]

@ptuttle_2 

No - Not all individual takes will go GA, you can review the list of GA vs Ongoing takes here:

https://sc1.checkpoint.com/documents/jumbo_hfa/r81.10/r81.10/r81.10-list-of-all-resolved-issues.htm

[Ted_Serreyn]

Backup is definately broken on this release,  I'm also seeing some errors on disk space on threat extraction which may also be related.

from clish:

sns-fw1> backup local interactive
Creating backup package. Press CTRL+C to exit from interactive mode
In order for the backup to be effective you should copy the file outside the machine.
Performing backup
local backup has failed.
Cannot complete the backup process: not enough space in /var/log/CPbackup/backups .

Backup operation failed.

however disk is fine:

# df -k
Filesystem 1K-blocks Used Available Use% Mounted on
/dev/mapper/vg_splat-lv_current 33538048 11320496 22217552 34% /
/dev/sda1 297485 71357 210768 26% /boot
tmpfs 8075068 7080 8067988 1% /dev/shm
/dev/mapper/vg_splat-lv_log 75460608 11804772 63655836 16% /var/log

ticket opened with TAC, although I may have set the priortity a bit low.

Just had another report on disk space issues that may be related to same error above.

UPDATE:  second issue with Threat Extraction WAS a disk space issue and is not related to this JHF.

[Gregory_Azratz]

Hi @Ted_Serreyn,

We are checking the issue and update once we have a solution.

Thanks,

Gregory

[Piet_vd_Maas]

Anyone knows of the backup issue is also related to SCP backup?

[ptuttle_2]

Not sure if this backup problem is the same as the snapshot problem where it would get to 99% then disappear or not start at all in some cases.  We also could not take a backup when this happened. 

R&D sent us a new file  "au.cpbak". This fixed it when we were on Jumbo 55.  We went to jumbo 66 and the problem re-appeared.  I re-applied the file and followed the steps to correct it but I have not gone to any newer Jumbo's

Change the au.cpbak in this folder : /var/CPsnapshot/schemes/ with the one provided in the SFTP: au.cpbak
rm /tmp/.lock.backup_restore
umount /mnt/backup
rm -rf /mnt/backup
if /var/log/BKPAutoUpdater exist run:{}
unlink /var/log/BKPAutoUpdater
rm -rf /var/log/BKPAutoUpdater

[Dov_Fraivert]

@Piet_vd_Maas 

The space in /var/log/CPbackup/backups related to local storage of the backup.
Have you encountered a problem with SCP backup?

[Ted_Serreyn]

I believe the scp backup still runs local and then copies it off using scp.

yep, same error:

backup scp ip 1.1.1.1 path / username myscpuser interactive password ***
Creating backup package. Press CTRL+C to exit from interactive mode
Performing scp backup
scp backup has failed.
Cannot complete the backup process: not enough space in /var/log/CPbackup/backups .

Backup operation failed.

[erann]

Regarding sk168597 :

This is what im getting.

R81.10

[Piet_vd_Maas]

@Dov_Fraivert 

Just checking the impact of the issues to figure out if JHF T78 GA was the way to go for our customers.
With this information I'll skip this take for now.

[Gregory_Azratz]

Hi @erann 

Regarding you issue - please check sk167935 to see if it fixes your issue

Thanks,
Gregory

[erann]

• @Gregory_Azratz Thanks.

"Update the Gaia OS configuration database by running the following script"

From the SK.

Should this be run on the MGMT server only or also on the gateways?

Thanks! 

[Gregory_Azratz]

@erann - on the MGMT machine 

[yaird]

Hi All,
My name is Yair Danieli, a team leader in Check Point RnD. I would like to explain the issue discussed in this thread.

In some scenarios, when Threat Emulation Blade is enabled, a backup on a Gaia device may fail with the following error: "Cannot complete the backup process: not enough space".

This issue is caused due to a new Threat Emulation update (version: 59.990001349) released during the last 2 weeks, it is not related to the Jumbo releases

The root cause is a new directory that was not excluded from the backup process.

To resolve the issue, please follow sk180181

Issue will be resolved in the next Threat Emulation release.

I would like to thank you for pointing us to this issue

Thanks,

Yair Danieli
Advanced Threat Prevention Platforms team leader
Check Point

[APT_Protection]

Hi,

the last Update for sk95235( Threat Emulation Engine Release Updates ) was back in May.

Is it possible to add the latest engine versions with a changelog?

br

Ronny

[APT_Protection]

Hi,

we experience some problems with two of our gateways after a upgrade to R81.10 Take 78. This problem occurs at the moment only on our Gateways with ThreatExtraction enabled. On our other Gateways only with ThreatEmulation, this error hasnt occured yet. Im not sure if this problem is related to the R81.10 version or to the latest Threat Emulation Engine update. We upgraded to R81.10 last week and the te engine version 59.990001352 was installed.

Regarding that there were problems with engine version 59.990001349, maybe my problems are related to the latest engine version...

The problem:

After some while (days) the ThreatPrevention on the gateways stops without a reason and the mails are stored in the queue. So at this point there is no active ThreatEmulation/Extraction function at the gateway and therefore the mails are not processed. After a policy installation the gateway and the blades start working again. The problem occurs quite random and there is no core dump.

Problem occured with R81.10 GA Take 78 and ongoing Take 79.

I can only guess what the problem could be, maybe someone else experienced the same?!

I also opened a ticket, if someone from CheckPoint team is interested, I can share it via pm.

br

Ronny