Product Announcements - Page 2

Hi All,

R81.10  Jumbo HF Take #150 is now our Recommended Jumbo take and is available for download to all via CPUSE (as recommended) and via Jumbo documentation (R81.10) 

Release Highlight:

• PRJ-55495 - CVE-2024-24919 - Quantum Security Gateway Information Disclosure. Refer to sk182336.
• PRJ-55470 - Remote Access VPN for local accounts authenticated only with Check Point password created in R80.20 or lower and not updated after the upgrade to R80.30 is blocked until the password is reset. Refer to sk182336.

A full list of resolved issues can be found in the Jumbo documentation (R81.10) 

Note:

• Central Deployment allows you to perform a batch deployment of Hotfixes on your Security Gateways and clusters from SmartConsole!! For more information, see sk168597.
• With Blink images, you can upgrade your environment to the required Major version including its recommended Jumbo hotfix in one Step, using a single image file. You can install Blink images using CPUSE – More details can be found in sk120193

Thanks,

Release Operations Group

Hi All,

R81.10 SmartConsole Build #424 has been released today and is available for download.

For more info please refer to SmartConsole documentation (R81.10) 

New: Starting from R81.10, SmartConsole automatically updates to the latest Build, as long as you have an Internet connection. The update is rolled out gradually and should be completed within 1 week. It is not necessary to download and install newer builds manually.

Thanks,

Release Operations groups

Hi All

R81.20 SmartConsole Build #654 has been released today and is available for download.

For more info please refer to SmartConsole documentation R81.20 

New: Starting from R81.10, SmartConsole automatically updates to the latest Build, as long as you have an Internet connection. The update is rolled out gradually and should be completed within 1 week. It is not necessary to download and install newer builds manually.

Thanks,

Release Operations groups

Hi All,

R81 SmartConsole Build #568 has been released today and is available for download.

For more info please refer to SmartConsole documentation (R81) 

Thanks,

Release Operations groups

Hi All,

R81 Jumbo Hotfix Accumulator take #99 has been released today, and is available for download.

Please note the following:

•        Availability:

o   Available to download the via Jumbo documentation (R81) 

o   Available for download via CPUSE by using package identifier.

o   Can be provided by customer support

Content included in this take:

•  PRJ-55494 - CVE-2024-24919 - Quantum Security Gateway Information Disclosure. Refer to sk182336.
• PRJ-55469 - Remote Access VPN for local accounts authenticated only with Check Point password created in R80.20 or lower and not updated after the upgrade to R80.30 is blocked until the password is reset. Refer to sk182336.
• List of resolved issues in this take can be found in the Jumbo documentation (R81) 

Note:

• Central Deployment allows you to perform a batch deployment of Hotfixes on your Security Gateways and clusters from SmartConsole!! For more information, see sk168597.

Thanks,

Release Operations Group

While we have a thread on CheckMates related to CVE-2024-24919, we wanted to highlight the various resources we have related to this issue to assist in your patch and remediate efforts. This post will be added to the coming days and weeks.

You should, of course, follow the following SKs for the latest information:

• https://support.checkpoint.com/results/sk/sk182336 for Quantum appliances
• https://support.checkpoint.com/results/sk/sk182357 for Quantum Spark (SMB) appliances

We've created a number of videos on various aspects of patching and remediating from CVE-2024-24919 that are highlighted below. We also have a playlist on YouTube with these videos and more: https://www.youtube.com/playlist?list=PLMAKXIJBvfAiD8JbRZJGb2Bnrr7qkI5Fb 

Hotfix Installation and Triage on Quantum Appliances

How to install CVE-2024-24919 Hotfix on Quantum Spark (SMB) Appliances

How to Install Hotfixes with SmartConsole

How to Mitigate CVE-2024-24919 on Quantum Security Gateways If You Cannot Patch

Resetting LDAP Credentials

Note: It is critical to make sure when you reset the LDAP credentials that you are using a user with the minimum privileges necessary (i.e. not Domain Admin).  

Moving From Password to Certificate Based Authentication on Quantum Management

Bulk Reset of Passwords in Gaia OS

Hi All

R81.20 Jumbo Hotfix Accumulator take #65 has been released today, and is available for download.

Please note the following:

•        Availability:

o   Available to download the via Jumbo documentation R81.20 

o   Available for download via CPUSE by using package identifier.

o   Can be provided by customer support

Content included in this take:

• PRJ-55496 - CVE-2024-24919 - Quantum Security Gateway Information Disclosure. Refer to sk182336.
• PRJ-55471 - Remote Access VPN for local accounts authenticated only with Check Point password created in R80.20 or lower and not updated after the upgrade to R80.30 is blocked until the password is reset. Refer to sk182336.
• List of resolved issues in this take can be found in the Jumbo documentation R81.20 

Note:

• Central Deployment allows you to perform a batch deployment of Hotfixes on your Security Gateways and clusters from SmartConsole!! For more information, see sk168597.

Thanks,

Release Operations Group

Hi All,

R81.10 Jumbo Hotfix Accumulator take #150 has been released today, and is available for download.

Please note the following:

•        Availability:

o   Available to download the via Jumbo documentation (R81.10) 

o   Available for download via CPUSE by using package identifier.

o   Can be provided by customer support

Content included in this take:

• PRJ-55495 - CVE-2024-24919 - Quantum Security Gateway Information Disclosure. Refer to sk182336.
• PRJ-55470 - Remote Access VPN for local accounts authenticated only with Check Point password created in R80.20 or lower and not updated after the upgrade to R80.30 is blocked until the password is reset. Refer to sk182336.
• List of resolved issues in this take can be found in the Jumbo documentation (R81.10) 

Note:

• Central Deployment allows you to perform a batch deployment of Hotfixes on your Security Gateways and clusters from SmartConsole!! For more information, see sk168597.

Thanks,

Release Operations Group

Hi All,

R80.40 Jumbo HF Take #211 is now our Recommended Jumbo take and is available for download to all via CPUSE (as recommended) and via Jumbo documentation (R80.40) 

A full list of resolved issues can be found in the Jumbo documentation (R80.40) 

Note:

• Central Deployment allows you to perform a batch deployment of Hotfixes on your Security Gateways and clusters from SmartConsole!! For more information, see sk168597.
• With Blink images, you can upgrade your environment to the required Major version including its recommended Jumbo hotfix in one Step, using a single image file.

You can install Blink images using CPUSE – More details can be found in sk120193

Important - End-of-Support for R80.40 software version is April 30th 2024

We recommend starting to plan your upgrade.

Check Point Recommended version for all deployments is R81.20 Take 631 with its  Recommended Jumbo Hotfix Accumulator Take.

Thanks,

Release Operations Group

Hi All,

R81.10 SmartConsole Build #423 has been released today and is available for download.

For more info please refer to SmartConsole documentation R81.10

New: Starting from R81.10, SmartConsole automatically updates to the latest Build, as long as you have an Internet connection. The update is rolled out gradually and should be completed within 1 week. It is not necessary to download and install newer builds manually.

Thanks,

Release Operations groups