Newest SMB devices SK´s

[G_W_Albrecht]

This is todays list of the newest SMB devices SK´s

sk166978  DHCP does not work when the DHCP server is behind the VPN peer on SMB appliances

sk167015  DHCP fails to issue new IP addresses in SMB appliances

sk167133  VPN traffic is blocked by Application Control and URL Filtering on SMB Appliances

SMB devices SK´s has been updated.

[G_W_Albrecht]

sk174254: Netflow Collector does not show Inbound flows

sk174603: Add an SSL Inspection Trusted CA certificate via CLI

[G_W_Albrecht]

sk175114 Policy installation on the 1100 appliance fails with Error "Installation failed. Reason: Se...

[G_W_Albrecht]

sk175403: Software Blades fail to update on Locally Managed Quantum Spark Appliances

[G_W_Albrecht]

sk167372: IPS Update Status shows the wrong information on the Security Gateway's status

sk175224: VPN certificates created through Internal Certificate Authority (ICA) have an expiration d...

[G_W_Albrecht]

sk173513: Partial information disclosure in SNX client for Linux before build 800008302 (CVE-2021-30...

sk175503: Error has occurred while applying the Network Objects settings (error 00362) with SMP - No...

[G_W_Albrecht]

Updates:

sk175544: SSL Bypass by MAC Address on Quantum Spark Appliances

sk175565: Adding a third party certificate for Captive Portal through Smart Provisioning doesn't wor...

sk175585: Bypass browse base authentication service for specific source address

[G_W_Albrecht]

sk144133: Appliance Sizing Tool (AST)

[G_W_Albrecht]

sk174683: R80.20.35 for Quantum Spark Appliances 

[G_W_Albrecht]

sk102557: User authentication to RADIUS server times out

[G_W_Albrecht]

sk176024 "Unexpected error: attempt to call a nil value" in Gaia Clish when running the "set hostnam...

[G_W_Albrecht]

sk175705 Establishing SIC with a Quantum Spark appliance fails with error message: "Security Policy ...

sk176108: Cluster member is down and running cphaprob list shows "ConnMonitor pnote" or "IAC pnote" ...

[G_W_Albrecht]

sk171038: Traffic over a VPN tunnel cannot reach a Standby member in a cluster of Quantum Spark / SM...

sk176211: GUI shows expired license but 'cplic print' shows correct date

[G_W_Albrecht]

sk176326: LMM Cluster - Upon "Reinitialize Trust", the Primary member should re-initialize its own S...

[G_W_Albrecht]

sk176107: Sporadic ESP drops on Quantum Spark

sk176113: Check Point response to Apache CVEs - November 2021 for httpd versions between 2.4.41 and ...

sk176147: IPS update status in SmartConsole shows error on Quantum Spark Gateway: "Update failed. Fa...

[G_W_Albrecht]

sk176295: How to configure VoIP on Locally Managed Quantum Spark appliances using new VoIP wizard (S...

sk176326: SIC between Locally Managed Quantum Spark Security Gateway cluster members is lost

sk176369: Configuring a new network interface to High Availability after the secondary member is alr...

[G_W_Albrecht]

sk173495: Firewall rules with IoT assets are not enforced on Quantum Spark Appliances

sk176387: How to configure VPN Aggressive Mode in locally managed Quantum Spark appliances

sk176544: The option to create a Virtual IP (VIP) interface on an SMB cluster object is grayed out i...

sk176564: Logs from Quantum Spark Appliances do not reach the Log Server

sk176623: Cannot establish GRE tunnel in Quantum Spark Appliances after reboot

sk176712: "DNS prefix is occupied" error when registering via Zero Touch on Quantum Spark Appliances

sk176713: "Policy installation failed on gateway" error message appears when the policy is pushed to...

[G_W_Albrecht]

First 2022 Update:

sk176854: IoT Security's influence on identity-based security for devices

sk176868: Dropped Security Logs on Quantum Spark Appliances seen with message "Missing OS Route"

sk177004: SSH disconnects from Quantum Spark Appliances after upgrade to R80.20.30

sk177025: SIP Traffic is dropped with message "dropped by cphwd_cpasglue_handle_packet Reason: CPAS:...

sk177029: Inserting an SFP into a 1200R appliance causes it to reboot

sk177037: Quantum Spark Appliances and Operational Technology (OT) Environments

sk177043: Policy installation to Quantum Spark Appliances fails with internal error - SmartProvision...

sk177063: Exceptions for IPS protections have limited functionality for some protections on Locally ...

sk177138: Console connectivity to SMB 1500 appliance via USB Type A

sk177168: Reach My Device troubleshooting

sk177183: How to assign LAN interfaces to WAN interfaces [FleXi Ports] in Quantum Spark Appliances

sk177203: Quantum IoT Controller [IoT Protect] Security Best Practices

sk177251: Quantum Spark appliance ports in built-in SIP services are opened for port-scan/Telnet wit...

sk177266: Using Reach My Device (RMD) on Quantum Spark Appliances

[G_W_Albrecht]

sk177523: How to change a gateway name when "automatic gateway creation" is enabled in the SMP Plan

sk177524: Custom log parser for Microsoft Defender for Cloud Apps

sk177545: Security Management Portal, SMP [Spark Cloud management] VPN configuration with externally...

sk177812: How to enable the clone button in Quantum Spark Security Gateways in SmartConsole

[G_W_Albrecht]

sk167452: Check Point response to CVE-2020-12465 (Mediatek MT76 driver)

sk168053: Check Point response to CVE-2020-13692 (PostgreSQL JDBC Driver (aka PgJDBC))

sk176113: Check Point response to Apache CVEs - November 2021 for httpd versions between 2.4.41 and ...

sk177763: Best Practices - How manage a large amount of SMB [Spark] Security Gateways

sk177683: Check Point's Response to CVE-2021-4034 - Local Privilege Escalation in polkit's pkexec

[G_W_Albrecht]

sk92755: Compatibility of transceivers for Check Point appliances

sk177883: How to upgrade the U-boot and firmware on 1600 and 1800 Quantum Spark appliances

[G_W_Albrecht]

sk174848: How to set up VPN between a Check Point Security Gateway and Zscaler ZIA Public Service Ed...

sk178047: "vpn tu tlist" command on Gaia Embedded appliances shows incorrect encryption and authenti...

sk178085: Encryption Domain per Community configuration does not work on Quantum Spark Centrally Man...

sk178128: The cell modem in 1500 appliances does not reconnect to the LTE network when the LTE netwo...

sk178129: "NAND status: NOT OK" message for 1500 appliances

[G_W_Albrecht]

sk178411 - Check Point response to OpenSSL CVE-2022-0778.

[G_W_Albrecht]

sk112732: Security Checkup in the Cloud - Automated Script

[G_W_Albrecht]

sk178605 Check Point Response to Spring Vulnerabilities CVE-2022-22963, CVE-2022-22946, CVE-2022-229...

sk178887 Check Point Response to CVE-2022-21449 Java "Psychic Signatures"

[G_W_Albrecht]

sk175566: In SmartProvisioning, it is not possible to configure the Captive Portal to use an FQDN UR...

sk178411: Check Point response to OpenSSL CVE-2022-0778 (possible infinite loop when parsing ECDSA c...

sk178509 After uninstalling R81.10 Jumbo Hotfix Accumulator, policy installation fails with "interna...

sk178566: Skyline Deployment

[G_W_Albrecht]

sk178804: Malware DNS Trap protection in R81 and higher generates "Prevent" logs

[G_W_Albrecht]

sk176148: Check Point response to CVE-2021-26414 - "Windows DCOM Server Security Feature Bypass"

[G_W_Albrecht]

sk178604: Check Point R81.10.X for 1500, 1600, and 1800 appliance features and Known Limitations

sk179004: R81.10.00 for Quantum Spark Appliances

[G_W_Albrecht]

sk179604: Fix for possible CPU instability in 1600/1800 Quantum Spark Appliances

[G_W_Albrecht]

sk179205: How to enable/disable IPS protection filter

sk179325: Major version Quantum Spark cluster upgrade from R80.20 to R81.10

sk179550: Quantum Spark Appliance performs static Hide NAT for an internal server only over one of t...

sk179588: How to restart SSH service (dropbear) on Gaia Embedded appliances