R81.20 Jumbo Hotfix Accumulator take #54 has been released today

[gadt]

Hi All

R81.20 Jumbo Hotfix Accumulator take #54 has been released today, and is available for download.

Please note the following:

•        Availability:

o   Available to download the via Jumbo documentation R81.20 

o   Available for download via CPUSE by using package identifier.

o   Can be provided by customer support

Content included in this take:

• PRJ-52484, PRJ-52942 - NEW: This Jumbo Hotfix Take introduces support for new Quantum Force appliances 19100 / 9800 / 9700 / 9400 / 9300 / 9200 / 9100 appliances. Refer to sk181698 and to sk180520. Requires installing SmartConsole R81.20 Build 653 (or higher)
• List of resolved issues in this take can be found in the Jumbo documentation R81.20

Note:

• Central Deployment allows you to perform a batch deployment of Hotfixes on your Security Gateways and clusters from SmartConsole!! For more information, see sk168597.

Thanks,

Release Operations Group

[the_rock]

Will install it in the lab and report back.

Andy

[the_rock]

Just installed it in Azure lab fw, will report end of day Tuesday.

Andy

[the_rock]

Just tested gateway I updated jumbo on, seems stable.

Andy

[EY]

So far, so good with Take 54 on two R81.20 devices here.

[the_rock]

Im also super impressed with it, @EY . I find the policy install is faster too.

Andy

[Alex-]

This Hotfix is necessary to support managing Force appliances which are already coming in.

Any indication when it will go Recommended?

[the_rock]

Im sure it will be recommended take soon.

Andy

[Peter_Lyndley]

Hi all,

We have two Multi -Domain servers, recently upgraded to Take 54  , we are seeing hundreds of zombied CPD processes and a performance impact on the management boxes. Is anyone aware of this issue, or seeing zombied processes on Take54 ? Obviously will also log a TAC case but i dont see anything in Take65 that might resolve it.

thanks

Pete

[the_rock]

@Peter_Lyndley Can you give an example? I have MDS in the lab with this take, no such issues that I observed.

Andy

[Peter_Lyndley]

ps -ef |grep defunct

admin    31768  6932  0 Jun03 ?        00:00:00 [cpd] <defunct>
admin    31858 19379  0 May31 ?        00:00:00 [cpd] <defunct>
admin    31860 19379  0 May31 ?        00:00:00 [cpd] <defunct>
admin    31862 19379  0 May31 ?        00:00:00 [cpd] <defunct>
admin    31941 19379  0 May29 ?        00:00:00 [cpd] <defunct>
admin    31944 19379  0 May29 ?        00:00:00 [cpd] <defunct>
admin    31946 19379  0 May29 ?        00:00:00 [cpd] <defunct>
admin    31977 22151  0 Jun03 ?        00:00:00 [cpd] <defunct>
admin    31978 22151  0 Jun03 ?        00:00:00 [cpd] <defunct>
admin    31980 22151  0 Jun03 ?        00:00:00 [cpd] <defunct>
admin    32130  7011  0 May30 ?        00:00:00 [cpd] <defunct>
admin    32131  7011  0 May30 ?        00:00:00 [cpd] <defunct>
admin    32133  7011  0 May30 ?        00:00:00 [cpd] <defunct>
admin    32261  7011  0 Jun01 ?        00:00:00 [cpd] <defunct>
admin    32262  7011  0 Jun01 ?        00:00:00 [cpd] <defunct>
admin    32264  7011  0 Jun01 ?        00:00:00 [cpd] <defunct>

top - 13:06:52 up 3 days, 3:09, 2 users, load average: 5.74, 3.87, 4.39
Tasks: 1534 total, 4 running, 1135 sleeping, 0 stopped, 395 zombie

[the_rock]

Will check soon @Peter_Lyndley . Just working on some Fortinet stuff now, give me couple of hours mate.

Andy

[the_rock]

@Peter_Lyndley Ok mate, just did a bit of research on this and I found couple of old cases I had with TAC and one was fixed by rebooting the device and another one with installing latest jumbo. Does not appear there was really good way to troubleshoot this issue otherwise, sorry : - (

Andy

[Douglas_Rich]

Multi-Domain Management Server or Security Management Server do not respond because of a high number of CPD processes in a zombie state
https://support.checkpoint.com/results/sk/sk182370

[the_rock]

@Douglas_Rich I think that might be fixed in jumbo 65

Andy

[Douglas_Rich]

@the_rock 
I can confirm that it is not fixed in JHF 65. That's exactly where I'm experiencing the issue. 🙂

[the_rock]

@Douglas_Rich Sorry mate, my bad, I think I confused it with a different issue. Did you open TAC ticket for it?

Andy

[Douglas_Rich]

indeed, surely they will share a HF later today

[the_rock]

@Douglas_Rich You mean new jumbo all together or custom fix on top of jumbo 65?

Andy

[Duane_Toler]

@Peter_Lyndley See this thread:

https://community.checkpoint.com/t5/Management/Management-Server-is-stuck-user-is-unable-to-run-any-...

Hotfixes available for R81.20 JHF 54 and jHF 65.  Hotfix is scheduled for future (next?) JHF as well.

Meanwhile, I posted a script to Toolbox to run as scheduled job to restart CPD safely for MDS (per-domain, all domains, or top-level CPD):

https://community.checkpoint.com/t5/Scripts/Restart-CPD-script/m-p/217862#M1159

[Douglas_Rich]

Fix is included in Latest Take JHF Take_70 released today. 

it also includes a fix for fwm core dumping. 

[the_rock]

I see lots of fixes in it. Now that I celebrated Canada day, let me install it and see what happens. Will report back.

Andy