R81.20 Jumbo Hotfix Accumulator take #96 has been released today

[gadt]

Hi All

R81.20 Jumbo Hotfix Accumulator take #96 has been released today and is available for download.

Please note the following:

•        Availability:

o   Available to download the via Jumbo documentation R81.20 

o   Available for download via CPUSE by using package identifier.

o   Can be provided by customer support

Content included in this take:

• List of resolved issues in this take can be found in the Jumbo documentation R81.20 

Note:

• Central Deployment allows you to perform a batch deployment of Hotfixes on your Security Gateways and clusters from SmartConsole!! For more information, see sk168597.

Thanks,

Release Operations Group

[the_rock]

Will report once I install it if it fixes my nat hit count in the lab 🙂

Andy

[the_rock]

Just installed it in my lab, so far, good!

[the_rock]

All still good 16 hours after install.

[CaseyB]

The addition of this feature is great sk182087 - would it be possible to improve on this? Such as, 3 different failed usernames from the same IP address gets blocked as well. While this feature will help cutdown on failed login attempts, I generally see them trying multiple usernames all the time, but I guess they will eventually run out of names, just a thought.

[the_rock]

Good point!

[the_rock]

48 hours after install, all still super stable and policy install appears to be faster as well.

Andy

[Steffen_Appel]

Please note that T96 has a bug in ike, which causes core dumps of the ike process, R&D is aware of this and we have a case open.

[the_rock]

@Steffen_Appel Thanks for sharing that info. Please let us know the fix.

Andy

[the_rock]

@Steffen_Appel Had customer inform me of same today, they opened the case with TAC as well.

Andy

[Steffen_Appel]

An hotfix was provided today.

[the_rock]

Let us know if it fixes the issue.

[the_rock]

No issues in my lab after install, all seems well.

Andy

[Steffen_Appel]

The fix seems to work, no more cores for a week now.

[Tobias_Moritz]

Hello Steffen, could you please share the bug id or the full hotfix filename, so that we can ask TAC if our deployment is affected before upgrading to JHF T96/98?

[the_rock]

Glad its fixed @Steffen_Appel 

[Steffen_Appel]

The fix is fw1_wrapper_HOTFIX_R81_20_JHF_T96_871_MAIN_GA_FULL

[MatanYanay]

Hi @Steffen_Appel and @the_rock 

The fix will be part of the next jumbo we plan to release in the upcoming 2 weeks 

Thanks 

Matan.

[Steffen_Appel]

Is R82 affected by the issue too and will the fix in the next R82 jumbo as well, if needed?

[MatanYanay]

Hi @Steffen_Appel 

The fix is already part of R82, so you should not see this issue in R82 version

Thanks 

Matan. 

[Steffen_Appel]

OK thanks

[Adam276]

Anyone have any idea how prevalent this bug is?  I was all setup to deploy this version (#96) and didn't see this post.  I didn't want to install the latest #98 as it was recently reported to have IKE crashes also.  It is hard to get a feeling for how prevalent any issues are of course.  Seems like both releases have a possibility for problems with IKE.  I might just wait a bit longer until things subside.

[Arne_Boettger]

It might be the issue described in sk183147 - Remote Access VPN users repeatedly lose connection to resources behind gateway, problems ... - maybe one of the affected people can answer if this is the bug they saw. According to Important Notes for R81.20 Jumbo Hotfix Accumulator this affects HFA Take 96 and 98.

[the_rock]

@MatanYanay Customer asked me yesterday when next R81.20 jumbo may be out? Reason is because we were thinking of installing jumbo 98, but considering the issue I saw on another post about remote access possible breaking after reboot, its way too much of a risk to do, as they rely on remote access heavily, considering they have people connecting from all over the world.

We will stick with jumbo 92 for now.

Andy

[MatanYanay]

Hi @the_rock 

Our target is to release the next jumbo in 2-3 weeks with stability fixes for the issues raised in the past few weeks 

Thakns 

[the_rock]

Thanks @MatanYanay !

Andy