Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
Amir_Ayalon
Employee
Employee

R81.10.07 - New Firmware Available for Quantum Spark

Clipboard01777777.jpg

May 2023

We are happy to announce the release of R81.10.07 for Quantum spark 1500\1600\1800 appliances.

This release introduces new features, enhancements and stability improvements for both locally (Web UI and SMP) and centrally managed appliances.

 

New Pro Models

  • Support for Quantum Spark 1595 WiFi6 + 5G appliance.

Security

  • Two-Factor Authentication for Remote Access VPN users using Google Authenticator.

Networking

  • Generic Routing Encapsulation tunnels (GRE).
  • Jumbo frames - Support for frames with more than 1500 bytes of payload (in EA).
  • Bidirectional forwarding detection (BFD) in OSPF and BGP (in EA).
  • Dynamic Routing configuration with IPv6 in OSPF and BGP.

Usability

  • Easy onboarding over WiFi with the appliance's default SSID for running the First Time Configuration Wizard.

 

Supported Appliances

1500 Series: 1530, 1535, 1550, 1555, 1570, 1570R, 1575, 1590, and 1595 appliances.

1600 appliances.

1800 appliances.

 

 

More Details here:

https://support.checkpoint.com/results/sk/sk180628

Quantum Spark Appliances 1500 Series:

https://support.checkpoint.com/results/sk/sk157412

 

1595 Cellular / 1595R Cellular Appliances: Important Procedures:

https://support.checkpoint.com/results/sk/sk180545

 

More Details on new Pro Models:

https://www.youtube.com/watch?v=mkhTRiH-E_I

Amir_Ayalon_4-1684747696571.png

 

21 Replies
Jarvis_Lin
Collaborator

  • Two-Factor Authentication for Remote Access VPN users using Google Authenticator.

Is it possible on gaia in feature?

0 Kudos
PhoneBoy
Admin
Admin

On regular gateways, you can perform MFA using SAML Authentication with an IdP (which can use Google Authenticator as an authentication method).
Otherwise, this is an RFE that you should discuss with your local Check Point office.

Mlinko
Contributor

Hi,

where can I download the new software? The Official website still shows "996000575" as the newest version:

https://support.checkpoint.com/results/sk/sk179004

 

This version is far from new.

Thank you!

KR
Rok 

0 Kudos
Amir_Ayalon
Employee
Employee

0 Kudos
Greg_Harbers
Collaborator

Hi Amir,

the release notes indicate that the new 15x5 series of spark gateways are unable to be centrally managed with R81.20 smartcenter servers. When do you expect that this will be addressed?
Thanks

0 Kudos
Chris_Atkinson
Employee Employee
Employee

Correct this is mentioned in sk179615, will enquire regarding an ETA and revert.

CCSM R77/R80/ELITE
0 Kudos
Chris_Atkinson
Employee Employee
Employee

Pending an upcoming JHF expected during Q3.

--- Edit ---

R81.20 JHF Take 26 and higher supports central management of spark pro gateways.

sk179615 - currently states R81.10.05 (recommended), R81.10.08 (latest).

CCSM R77/R80/ELITE
0 Kudos
Zachi_Schnieder
Employee
Employee

Hi Greg, 

The new 15x5 appliances are planned to be supported on R81.20 JHF in the next release

Note that these appliances can be managed centrally as the 15xx appliances

Please let me know if you have any question

thanks, 

0 Kudos
Mlinko
Contributor

0 Kudos
Alex-
Leader Leader
Leader

I have some R80.20.50 1500 appliances managed by Smart-1 Cloud (R81.20) that I plan to upgrade soon, can I jump directly to this version?

I don't see any contraindications in the notes but would prefer to verify first.

0 Kudos
PhoneBoy
Admin
Admin

It should not be a problem to upgrade to this release directly.

0 Kudos
Alex-
Leader Leader
Leader

I notice that sk179615 still recommends R81.10.05 while mentioning that R81.10.07 is the latest.

I have an international deployment of 1500 managed by Smart-1 Cloud that I can upgrade only once per year each summer unless there is a compelling reason, what's the difference between latest and recommended when it comes to Spark, is it an approach similar to the Jumbo in Gaia? 

The Smart-1 Cloud upgrade assistant even still proposes R81.10.00 as recommended from R80.20.50.

0 Kudos
Alex-
Leader Leader
Leader

To answer my question, I added R81.10.05 (1301) to the Package Repository of the Smart-1 Cloud tenant as it's still the recommended version on this date and the following happened.

 

  • When selecting a Spark and the action Version Upgrade, it only shows the R81.10 Blink which is also appearing twice
  • I manually enter the image name and it's accepted
  • Running a verification succeeds
  • After, when coming back to Version upgrade, some of the Spark show R81.10.07 as recommended target versions while others still show R81.10.00
  • They all run R80.20.50 

 

0 Kudos
Alex-
Leader Leader
Leader

I spoke to Spark specialists within Check Point and it appears that when a Spark OS is released, it's good to go. They mentioned that R81.10.05 in this case is marked as recommended in the SK because it's the predecessor and still probably the most used everywhere and known to be stable but it's advised to use the latest version in case of upgrades.

0 Kudos
PhoneBoy
Admin
Admin

The "recommended" release nomenclature is only relevant to the regular Quantum gateways (not Spark): https://support.checkpoint.com/results/sk/sk95746 

0 Kudos
Alex-
Leader Leader
Leader

I confirm that an upgrade from R80.20.50 to R81.10.07 using Smart Console from Smart-1 Cloud R81.20 happened flawlessly.

0 Kudos
Cybersugi
Participant

Thanks, Updated my 1500, 1800. 
Like the simplicity of 2FA remote access VPN. 

Like to know, where do I find similar update for Quantum Edge Gateway (VNF on VMWare). ?

 

0 Kudos
Chris_Atkinson
Employee Employee
Employee

R81.10.xx is not currently available for Quantum Edge, suggest discussing this further with your local CP SE.

CCSM R77/R80/ELITE
0 Kudos
PhoneBoy
Admin
Admin

At this time, there are no plans to produce further Quantum Edge releases.
I suggest discussing your specific requirements with your local Check Point office.

0 Kudos
Michal_Gans
Contributor
Contributor

This is great news, but I was told by local SE, that Google Authenticator is supported only for localy managed gw. Is that true or Authenticator is also supported on centraly managed gw?

 

Thanks

0 Kudos
PhoneBoy
Admin
Admin

That is correct, only supported for local management at this time.
For central management, direct support for Google Authenticator is an RFE.

0 Kudos
(1)

Leaderboard

Epsum factorial non deposit quid pro quo hic escorol.

Upcoming Events

    CheckMates Events