R80.20.35 for Quantum Spark Appliances

[G_W_Albrecht]

Finally GA sk174683: R80.20.35 for Quantum Spark Appliances for 1500/1600/1800 appliances was released yesterday - but which new features do  we get ?

IPv6

• ND (Neighbor Discovery) Proxy for delegating ISP SLAC prefix to Internal network.

• IPv6 internet probing - Automatically detect loss of connectivity to default gateway when working in IPv6 mode.

Access Policy

• VoIP wizard enhancements which simplify configuration of the most common VoIP topologies.

  • Option to use objects instead of fixed IP.

  • SIP Bypass.

• Bypass the SSL Inspection for specific devices based on their MAC Addresses.

• Use Updatable objects in Firewall Access Policy on Locally Managed appliances.

Quantum Spark Portal (SMP)

• Support for SSL Exceptions and Threat Prevention Exceptions.

Access Control

• Enable 802.1x based authentication on LAN ports when working with RADIUS Servers.

• MAC Address based filtering "Allow" list - for 1500/1600/1800 appliances.

• MAC Address based filtering "Deny" list - Ability to add a deny list mode to MAC address filtering that can block access to any MAC address that exists in the MAC address filtering table - for 1500/1600/1800 appliances.

General

• Send encrypted security logs to user-defined external syslog server over TLS for locally managed appliances.

• Fast Cluster failover with OSPF

• Appliance can act as an NTP Server

• System logs search

• Upgrade your Locally Managed 700/1400 device to the new 1600/1800 Appliance Series which includes all configurations, Threat Prevention, and Access policies.

Enhancements

• DHCP Server

  • Increase the range of IP addresses allocated by the appliance DHCP server from 1024 to 4080.

• Identity Awareness

  • Exceptions for Browser-Based Authentication.

• LTE

  • PDP Context Activation Failures Retries Interval.

  • Server Down Actions Retries Interval.

[G_W_Albrecht]

Beware of the Limitations:

These features are currently not available in the R80.20.35 release:

• ARP spoofing

[Ted_Serreyn]

Are there any plans on adding GEO blocking to SMP?

[Tom_Hinoue]

We now have a new replacement GA 🙂

sk174683: R80.20.35 for Quantum Spark Appliances

• 14 December 2021: R80.20.35 Build 992002577 for 1500/1600/1800 appliances is the latest General Availability release that can be downloaded directly from this article. It replaces Build 992002467.   

[Nik_Bloemers]

Where can I find what has been changed/fixed in this new build? So we can evaluate if this is important for us to roll out.

[Tom_Hinoue]

The only details we have now is from the following SK:

Check Point R80.20.X for 1500, 1600, and 1800 Appliances Features and Known Limitations

Where we need to filter R80.20.35 in Known Limitations and Resolved Issues section to see what's changed.
....Though I expect more fixed issues to be on this list... the list seems a bit short in my opinion.

[Nik_Bloemers]

There I can't see what changed between different builds of the same version, since there's nothing mentioned about it. We need a changelog. Or just a new version number. This is not transparent for the users.

[Chris_Atkinson]

Thanks for the feedback I've taken it internally.

[Chris_Atkinson]

Refer: https://community.checkpoint.com/t5/SMB-Gateways-Spark/R80-20-35-JHF/m-p/136778#M6156