R81.10.17

[TJ_Aus]

R81.10.17 is now showing in Smart Dashboard as the "recommended jumbo"
sk183153 - R81.10.17 for Quantum Spark Appliances

Is anyone else already testing this release and can give feedback on the stability?

[Chris_Atkinson]

FYI - Last updated on 23 March 2025:

Latest Firmware	R81.10.17 Build 99600XXXX
Recommended Firmware	R81.10.10 Build 996002993

Source: sk179615: Quantum Spark Appliances - Releases R81.10.X 

[Amir_Ayalon]

Hi

The release in new

still not recommended,

we will check why it appear as recommended in smart dashboard.

thanks

[nmelay2]

Hi,

One of my customer's SMP managed gateway was upgraded from R81.10.10 to R81.10.17 today at 1am GMT.
The plan for these gateways is set to automatically upgrade to the "Check Point recommended" version.
Only 1 out of 15 gateways was upgraded, thankfully.
So my guess is R81.10.17 was promoted to recommended status on release, and that was fixed shortly thereafter.
Not good.

Everyone working with SMP and firmware upgrades enabled should probably check which firmware is now running on their gateways.

[G_W_Albrecht]

I would suggest to no one should enable automatic firmware upgrade on SMBs at all ! This could cause havoc since old Edge/Safe@office times, and although in most cases nothing bad will happen, we all here work in security, not in gambling 😉

[nmelay2]

That someone with your experience in the field considers that trusting Check Point not to mess up with software updates equals to gambling is quite alarming.
I wish Check Point QA would read this.

I used to have firmware upgrade in my plans point to a specific version.
Since "Check Point latest" was replaced with "Check Point recommended", I switched to this instead.
I guess I'll switch back.

[G_W_Albrecht]

As i wrote, the risk is only very small (as is the chance of winning a million by gambling), but out of my experience it does exist. Latest example was the introduction of the IoT blade that totally messed up an SMB cluster (that had later to be reconstructed manually) after manual upgrade by the customer ☹️

So my suggestion is to roll out new firmware versions manually and test it first on only one GW. If you can not test it without much risk i would wait some time until the gravest bugs have been fixed or the version is broadly accepted in the field and has proven its worth.

This is not only about SMB firmware - remember the Jumbo Takes whose download was disabled after feedback revealed (a) serious bug(s) ? I also would not suggest to install a new plain-vanilla version but instead wait at least for the first junbo take. This is all software and will contain errors / bugs, as is just natural with all man-made things. Only "AI" makes more mistakes 😉

[ANANTADSULE]

looks like optimization release for 2 GB Spark appliances ,nothing special changed except Spark support for DoS / Rate Limiting protocols for enhanced protection against DoS (Denial-of-Service) attacks which can be configured through CLI only.

[Petr_Hantak]

I agree, but there are resolved issues - https://support.checkpoint.com/results/sk/sk181134

I found some problems there which I already noticed. Happy to see it is fixed in this version.