R81.20 Jumbo Hotfix Accumulator take #45 has been released today

[gadt]

Hi All

R81.20 Jumbo Hotfix Accumulator take #45 has been released today, and is available for download.

Please note the following:

•        Availability:

o   Available to download the via Jumbo documentation R81.20 

o   Available for download via CPUSE by using package identifier.

o   Can be provided by customer support

Content included in this take:

• List of resolved issues in this take can be found in the Jumbo documentation R81.20 

Note:

• Central Deployment allows you to perform a batch deployment of Hotfixes on your Security Gateways and clusters from SmartConsole!! For more information, see sk168597.

Thanks,

Release Operations Group

[Steffen_Appel]

The reason for our problem was a behavioral change of the policy installation with updateable objects, up to take 41, the installation woul succeed with a warning, if the gateway was unable to fetch the updateable objects, since take 43, this results in an error and no policy installed - hopefully this gets added to the release notes.

[Henrik_Noerr1]

Hey Steffen, it is listed in take 43 notes:

UPDATE: When changes are made to updatable objects within a policy and a missing or corrupted package is detected, the policy installation will fail, resulting in the generation of a log.

[Matt_Taber]

Also stuck w/ this issue.   JHF41 did not resolve our issue w/ traffic dropping during policy install on 1 of our 3 clusters.  Don't want to try to install 43 or 45 based on the updateable object issue being noted.  This has been dragging out for us since November.  Very frustrating to have to do after hours policy install, and then recover all the systems that don't recover.

[itsysadmin]

Unfortunately, seems that the T43, installed by support suggestion to overcome the problem with traffic drops during policy installation on R81.20 T41 cluster, didn't solve the issue. He had again huge disruptions on several services, using different protocols, during yesterday's policy installation. Waiting for more guidance from support.

[Steffen_Appel]

@henrik: It is now listed (Update), probably because of our case.

IMHO this is a major change, but should have been in the https://sc1.checkpoint.com/documents/Jumbo_HFA/R81.20/R81.20/Important-Notes.htm (where it is still missing) from the day the HFA was pulished.

[Henrik_Noerr1]

@Steffen_Appel not sure it is ‘important notes’ material. But if the release notes were updated after the fact, it is indeed a real problem. 

I think we have seeb this to much lately. See the increased cpu load in later jumbos for vsx as well. 

I think we are returning to a company policy of our internally recommended release will be behind two check point recommendations. 

to many issues not caught by RnD. 

[genisis__]

I would like to see the support dates extended as people are moving to R81.20 because of EoS for R81.10 (a driver, shall we say), yet we all know R81.10 is solid, so it would make sense to push both R81.10 and .20 EoS dates out by a year (keeping in mind R82 is coming, which I would not be surprised if its release late next year).

[itsysadmin]

Quick update, end up reverting from T43 to T41 and installing fw1_wrapper_HOTFIX_R81_20_JHF_T41_116_MAIN_GA_FULL on top of it. Let's see how it goes