R77.20.86 for Small and Medium Business Appliances released!

[Danny]

R77.20.86 for Small and Medium Business Appliances

Check Point 1400 Appliance - FAQ

What's New in Check Point R77.20.86 for SMB Appliances?

• New Mobile Application
  • Push notifications for immediate reaction to security and network events.
  • Easily manage and switch between multiple Security Gateways with a single login.
  • Monitor your network and security status with simplified pages of statistics for traffic, events, and more. 
  • In addition to the above, R77.20.86 includes many other important features. For more information, refer to the SMB WatchTower App Release Notes. 

• Send security logs to an on-premise LogServer when connected to vSMP.

• The VPN remote access user password can now consist of more than eight characters. 

 

Supported Appliances

The supported appliances are:

• 700
• 910
• 1400

[PhoneBoy]

You beat me to posting about it 🙂

I've been using the WatchTower app for the last several weeks now, it's quite helpful at keeping track of what's going on while I'm away from home.

[HristoGrigorov]

Firmware Upgrade

The current firmware version is R77.20.85 (990172755)

Firmware is up to date | Check now

I clicked Check now like 10 times yesterday during the day. 

CheckPoint, seriosly?!? No one cares to fix this at all ???

[PhoneBoy]

Sure I've mentioned this in the last, but we usually don't offer it via the WebUI of the appliance way for a bit to ensure there are no unforeseen issues. It's definitely available for download.

[HristoGrigorov]

If I get it correct CheckPoint releases software that is not guaranteed to be stable and ready for production use w/o even warning us about that?!

I am out of words....

[PhoneBoy]

It's kind of like what we did when we released R80.20: the newest release won't be the default, recommend release initially. Once enough customers have adopted it and we see high stability, it becomes the recommended release for everyone.

[G_W_Albrecht]

I second that policy - the black bottomless pit is what waits for the culprits that do automatic firmware upgrades on SMB, and so it is better to care for them this way and keep customers safe 😉

[Robert_Rasner]

Personally, I like this policy.  But, maybe a compromise would be to give the user the option to d/l brand new releases.

[G_W_Albrecht]

I would like to add that the listed three new features are for locally or cloud managed SMBs only. So we have no gain except the resolved issues in R77.20.86 when installing it on centrally managed devices...

That the WatchTower App currently is only available for Android is also a - only current, of course - severe limitation.

[PhoneBoy]

Not sure what the holdup is for the iOS app, but I can confirm it DOES exist as I've been using it thru TestFlight.

[HristoGrigorov]

I am getting core dumps with this build. Two times today already.  Anyone else with similar problem ?

[PhoneBoy]

Any details around this you can provide?

[HristoGrigorov]

Only high load average (11.0) and then this:

[cpWatchDog 2144 1744597904]@RD6281[26 Mar 10:49:15] [ERROR] Process SFWD terminated abnormally : Unhandled signal 7 (SIGBUS). Core dumped.

[cpWatchDog 2144 1744597904]@RD6281[26 Mar 10:50:15] [SUCCESS] SFWD started successfully (pid=13993)

[cpWatchDog 2144 1744597904]@RD6281[26 Mar 16:46:36] [ERROR] Process SFWD terminated abnormally : Unhandled signal 7 (SIGBUS). Core dumped.

[cpWatchDog 2144 1744597904]@RD6281[26 Mar 16:47:36] [SUCCESS] SFWD started successfully (pid=30396)

[PhoneBoy]

Centrally managed SMB appliance? Because it sounds familiar if so...

[HristoGrigorov]

Yes, centrally managed appliances. I already notified RnD about it and they would like to investigate the core dump should it happen again. I was stupid enough to accidentally delete existing one.

[Danny]

Check Point's IOS Watchtower App was just released in the App Store.

https://itunes.apple.com/us/app/check-point-watchtower/id1294087547

[Vladimir]

Danny,

I am getting a "Connection Failed, Gateway could not be reached, please verify the connectivity, etc..."

Are there prerequisites for the gateway configuration?

[PhoneBoy]

I believe "Reach My Device" needs to be enabled.

[Vladimir]

@PhoneBoy , enabling this also requires:

"...specify the allowed IP address".

Since we do not have static IPs on our phones, how does this actually work?

[Vladimir]

.86 is not available yet. I am running .85 and the new one not available from both, WebUI Firmware upgrade wizard or the sk144852. The link to download in it results in .85 download.

[Pedro_Espindola]

It seems they've pulled the upgrade. sk144852 says: "The images and package will be available on 31 March 2019" (today).

[PhoneBoy]

I'm guessing not on the 31st, since it's almost over in the US. However, I would expect new images shortly.

[SightLine]

I see this was posted a couple of weeks ago. Was this update pulled? I saw it yesterday and it says on the page

"Note: The images and package will be available on 31 March 2019 (Sunday). "

Its getting pretty late in the day and I was hoping to load this new build but the page still says that for me. That being said apparently this was available as long as a couple of weeks ago.

My enterprise subscription is good until January 2021. I can still download other releases.

[SightLine]

Update to add - came in this morning and the download is now available....

I'll update to it this coming weekend.

[PhoneBoy]

Looks like it's available now.

[G_W_Albrecht]

Finally, WatchTower for iOS is available - i have already updated my version.

[HristoGrigorov]

Now that is wonderful news... They have finally released R80.20 for SMB! 🙂

[Vladimir]

Happy April 1st 🙂