Gaia Embedded - R80.10

[Bjorn_Tore_Gard]

Hi.

I am not finding any information on when R80.10 is to be released for installation on the Gaia Embedded gateways ? (1450).

Does anyone have any information ?

Thank You.

[aner_sagi]

no. current gaia embedded version for this hardware is R77.20.51

sk114815

Aner.

[Maarten_Sjouw]

Check Point is there any update on this?? When can we expect a R80 embedded version?

[Miri_Ofir]

R80 embedded version is our roadmap for 700/1400 series

[Maarten_Sjouw]

Ofir,

By when can we expect the R80 version?

Regards, Maarten.

[PhoneBoy]

It is definitely in the plans as Miri Ofir said, but we don't have a specific timeframe we can share at this time.

[Jason_Carrillo]

Can you share any of the features that will be included that may have been left out of R77.20 embedded Gaia? For example, the lack of Geo Protections or IPS Packet Capture?

[PhoneBoy]

I think it's too soon to do that.

[Vincent_Bacher]

I think some features, for instance IPS packet capture won't be implementet because of the limited hardware performance of smb appliances.
@CP guys: am i right with my assumption?

[PhoneBoy]

I agree on that one: the limited storage space on SMB appliances means that particular feature/function won't be supported.

An actual MTA is something I would not expect either (same logic).

[Martin_Seeger]

I guess the release of the 1500 series together with SMB R80 (and only for the 1500) implies, that there will never be R80 for the 1400 series...

[Vincent_Bacher]

But R80.10 will be a kind of reduced Gaia as well because of the limited performance of the used hardware in 1400 series appliances.

Anybody may correct me if I am wrong.

Cheers

Vince

[G_W_Albrecht]

R80.10 runs on GAiA and it will never run on GAiA Embedded 😉 GAiA Embedded SW does not follow the same CP SW versions as GAiA / SPLAT / Win CP. First SG 80 SMB GWs had e.g. R71.45 firmware, manageable by SMS R70.40, R71.20 and R75 and higher. R75.20 Main Release firmware for 600 / 1100 / 1200R  was manageable by SMS R75.46 / R76 and above, but also featured a local management GUI. Currently, in R77.20 Main Release, the features from CP GWs running GAiA OS with R77.xx have partly been ported (Cloud TE, https inspection a.o.). But yes, this device is flash-based and has less performance than stronger hardware - so not everything does make sense her.

[PhoneBoy]

It may not be exactly R80.10, but it will be an R80 variant (which is the important thing for policy management purposes). 

[G_W_Albrecht]

SMB firmware R77.20.7x now even looks like R80.xx dashboard - R77.20.6x was in another design

I would say that it does not matter if you call it R80.20, R77.80.20 or infinity:13 - Embedded OS will stay Embedded OS, but newer hardware will make more features possible in the future.

[PhoneBoy]

Technically speaking, current releases of embedded R77.20 have R77.30 features in it.

Best not to get too hung up on the exact version

[MikeB]

I found this slide in a CPX 2018 SMB presentation

Also, you can find this presentation here: https://community.checkpoint.com/docs/DOC-2747 

[Aitor_Carazo]

Hello,

Is any news about this?

Thanks and regards

[PhoneBoy]

It's still planned, but don't have an update on the timeframe.

[Beja]

news? do we know when will got R80 for embedded versions.

EOL to them is May 2020

[Martin_Valenta]

Any update on this? Thanks

[G_W_Albrecht]

I do not really know what the people do expect - GAiA Embedded is a subset of GAiA created for flash-based HW. A new version R80.x.x for SMB will still be based on GAiA Embedded, and a 1430 will never be able to do local Threat Emulation 😉

[HristoGrigorov]

I expect 500 Mbps Gen V Security from my 1470 as promised on Web site. Don't care if it is R77 or R99 🙂

[Nik_Bloemers]

I think most people expect to finally be able to use unified policy/inline layers 🙂 Without having to move all 14xx appliances to a different policy package or have to make duplicate rules for the old and the new way.

[G_W_Albrecht · Accepted solution]

Please accept that a flash-based GAIA Embedded SMB device will have less HW/SW resources than a GAiA appliance. So if you want to use unified policy/inline layers i would suggest to change to another hardware !

[Martin_Seeger]

I had a short discussion about this topic on the CPX. The main constraint of the 14x0 hardware is the 32bit processor. Backporting R80 to 32bit is not a task that is feasible ressources. Therefore the 15x0 series was created.

P.S. My 1550 is already in my home network, currently migrating the setup from the 1470 to the 1550.

[SightLine]

I would hope it is pretty soon considering... quoted from the CheckMate blog this morning.

"Upgrade to R80.x
Given that R77.30 is going End of Support in September, now is as good a time as any to get upgraded."

If that is the case all current embedded devices (700, 900, 1200, 1400 even older 600/1100) will be unsupported in about a month. Obviously that makes no sense as the newer ones (700, 900,1200, 1400 series) are still current devices.

[Beja]

NO, they wont be unsupported.
Look below link.
https://www.checkpoint.com/support-services/support-life-cycle-policy/
Gaia embedded/SMB devices follow different life cycle than their big brothers. 😉

[Martin_Seeger]

I would have expected an EA version by now...

A layered policy for SMB devices would be nice. I don't see how a layered policy (at least on a firewall level) would require significantly more RAM/CPU.

[G_W_Albrecht]

Layered Policy is constructed in dashboard and compiled into a policy. To re-create this in GAiA Embedded WebGUI would be quite a task, if you look at current rule base configuration possibilities 😉. I would expect to see the first R80.xx-aligned SMB based on new hardware while current hardware will stick to R77.20.87 Jumbo Take...