R81.10.07 - New Firmware Available for Quantum Spark

[Amir_Ayalon]

May 2023

We are happy to announce the release of R81.10.07 for Quantum spark 1500\1600\1800 appliances.

This release introduces new features, enhancements and stability improvements for both locally (Web UI and SMP) and centrally managed appliances.

New Pro Models

• Support for Quantum Spark 1595 WiFi6 + 5G appliance.

Security

• Two-Factor Authentication for Remote Access VPN users using Google Authenticator.

Networking

• Generic Routing Encapsulation tunnels (GRE).
• Jumbo frames - Support for frames with more than 1500 bytes of payload (in EA).
• Bidirectional forwarding detection (BFD) in OSPF and BGP (in EA).
• Dynamic Routing configuration with IPv6 in OSPF and BGP.

Usability

• Easy onboarding over WiFi with the appliance's default SSID for running the First Time Configuration Wizard.

Supported Appliances

1500 Series: 1530, 1535, 1550, 1555, 1570, 1570R, 1575, 1590, and 1595 appliances.

1600 appliances.

1800 appliances.

More Details here:

https://support.checkpoint.com/results/sk/sk180628

Quantum Spark Appliances 1500 Series:

https://support.checkpoint.com/results/sk/sk157412

1595 Cellular / 1595R Cellular Appliances: Important Procedures:

https://support.checkpoint.com/results/sk/sk180545

More Details on new Pro Models:

https://www.youtube.com/watch?v=mkhTRiH-E_I

 

[Jarvis_Lin]

• Two-Factor Authentication for Remote Access VPN users using Google Authenticator.

Is it possible on gaia in feature?

[PhoneBoy]

On regular gateways, you can perform MFA using SAML Authentication with an IdP (which can use Google Authenticator as an authentication method).
Otherwise, this is an RFE that you should discuss with your local Check Point office.

[Mlinko]

Hi,

where can I download the new software? The Official website still shows "996000575" as the newest version:

https://support.checkpoint.com/results/sk/sk179004

This version is far from new.

Thank you!

KR
Rok 

[Amir_Ayalon]

https://support.checkpoint.com/results/sk/sk180628

[Greg_Harbers]

Hi Amir,

the release notes indicate that the new 15x5 series of spark gateways are unable to be centrally managed with R81.20 smartcenter servers. When do you expect that this will be addressed?
Thanks

[Chris_Atkinson]

Correct this is mentioned in sk179615, will enquire regarding an ETA and revert.

[Chris_Atkinson]

Pending an upcoming JHF expected during Q3.

--- Edit ---

R81.20 JHF Take 26 and higher supports central management of spark pro gateways.

sk179615 - currently states R81.10.05 (recommended), R81.10.08 (latest).

[Zachi_Schnieder]

Hi Greg, 

The new 15x5 appliances are planned to be supported on R81.20 JHF in the next release

Note that these appliances can be managed centrally as the 15xx appliances

Please let me know if you have any question

thanks, 

[Mlinko]

Found it:

https://support.checkpoint.com/results/sk/sk180628

KR
Rok

[Alex-]

I have some R80.20.50 1500 appliances managed by Smart-1 Cloud (R81.20) that I plan to upgrade soon, can I jump directly to this version?

I don't see any contraindications in the notes but would prefer to verify first.

[PhoneBoy]

It should not be a problem to upgrade to this release directly.

[Alex-]

I notice that sk179615 still recommends R81.10.05 while mentioning that R81.10.07 is the latest.

I have an international deployment of 1500 managed by Smart-1 Cloud that I can upgrade only once per year each summer unless there is a compelling reason, what's the difference between latest and recommended when it comes to Spark, is it an approach similar to the Jumbo in Gaia? 

The Smart-1 Cloud upgrade assistant even still proposes R81.10.00 as recommended from R80.20.50.

[Alex-]

To answer my question, I added R81.10.05 (1301) to the Package Repository of the Smart-1 Cloud tenant as it's still the recommended version on this date and the following happened.

• When selecting a Spark and the action Version Upgrade, it only shows the R81.10 Blink which is also appearing twice
• I manually enter the image name and it's accepted
• Running a verification succeeds
• After, when coming back to Version upgrade, some of the Spark show R81.10.07 as recommended target versions while others still show R81.10.00
• They all run R80.20.50 

[Alex-]

I spoke to Spark specialists within Check Point and it appears that when a Spark OS is released, it's good to go. They mentioned that R81.10.05 in this case is marked as recommended in the SK because it's the predecessor and still probably the most used everywhere and known to be stable but it's advised to use the latest version in case of upgrades.

[PhoneBoy]

The "recommended" release nomenclature is only relevant to the regular Quantum gateways (not Spark): https://support.checkpoint.com/results/sk/sk95746 

[Alex-]

I confirm that an upgrade from R80.20.50 to R81.10.07 using Smart Console from Smart-1 Cloud R81.20 happened flawlessly.

[Cybersugi]

Thanks, Updated my 1500, 1800. 
Like the simplicity of 2FA remote access VPN. 

Like to know, where do I find similar update for Quantum Edge Gateway (VNF on VMWare). ?

[Chris_Atkinson]

R81.10.xx is not currently available for Quantum Edge, suggest discussing this further with your local CP SE.

[PhoneBoy]

At this time, there are no plans to produce further Quantum Edge releases.
I suggest discussing your specific requirements with your local Check Point office.

[Michal_Gans]

This is great news, but I was told by local SE, that Google Authenticator is supported only for localy managed gw. Is that true or Authenticator is also supported on centraly managed gw?

Thanks

[PhoneBoy]

That is correct, only supported for local management at this time.
For central management, direct support for Google Authenticator is an RFE.