Quantum Spark R82.00.10 has been released!

[Amir_Ayalon]

We are happy to announce Check Point Quantum Spark R82.00.10 has been released!

This Release extend R82 support for Pro appliance, includes more R82 features, alongside a suite of other features and enhancements for both locally and centrally managed gateways.

The Release also adds support for the upcoming 2550 5G and 2570 5G Appliances.

Key Version Highlights:

• R82 Alignment: Now providing comprehensive support for the 15x5 Pro appliance models, as well as the 1600, 1800, 1900, and 2000 series.

R82 features

• QUIC inspection - Deep‑packet inspection of QUIC traffic (UDP/443) to maintain visibility even when apps shift away from TLS over TCP
• DNS security - Blocks malicious domains and prevents data exfiltration via DNS tunnelling and other abuses
• HTTPS inspection enhancements / bypass under load - Smarter SSL inspection with adaptive bypass to protect critical flows when appliances hit resource thresholds
• Zero Phishing (Video)- Real‑time page scoring to stop   credential harvesting and spoofed login pages before users submit data
• IOC feeds - Allow you to configure a stream of malicious indicators (IPs, domains, file hashes) used to detect and block threats.
• Network feeds - real-time integration of external threat intelligence (IPs, domains, file hashes) for automatic detection and blocking – now in EA
• Quantum encryption - Quantum-safe cryptography using PQC algorithms (e.g., Kyber, Dilithium) to resist future quantum attacks.

Networking Enhancements

• WiFi Band steering (Video) - steers clients via probe/association control to 2.4/5/6 GHz based on RSSI, capability, and airtime load, available on 2530/2550/2560/2570
• BGP grouping - multiple BGP peers with identical routing policies into a single peer group to simplify configuration and improve efficiency.
• Cluster L2 - Locally Managed Spark appliances configured with bridge can be deployed as a cluster
• DHCP cluster enhancement – having one DHCP server active at a time and sharing the lease info.
• Allow cloned MAC on LAN-Bond

SDWAN Enhancements

• CGNAT Cluster - Support for SD-WAN VPN peers behind CGNAT without DAIP configuration (must use Smart-1 Cloud if the Management Server must connect to the SD-WAN Gateway through a CGNAT interface)
• Route Based Overlay with ECMP - Support SD-WAN Overlay to operation on top of Route-based VPN. In ECMP mode, SD-WAN selects both the best peer, and the best path to reach the peer.

IPV6 enhancements

• IPv6 Flexiport support
• IPv6 static route probing
• Multiple IPv6 Internet connections
• IPv6 GRE  (6 in 4, 6 in 6, and 4 in 6) 

New Hardware

• Support for the new 2550 WIFI 7 5G appliance – now in EA, GA is planned during Q1 2026
• Support for the new 2570 WIFI 7 5G appliance – now in EA, GA is planned during Q1 2026
• Support for the new 2590 high performance 1U appliance with 4x10GB SFP + 8x1GB SFP ports – now in EA

For additional information and release notes, please refer to: sk184357

Click here to see the general playlist of feature videos

[the_rock]

Hey,

We never upgraded to R82, as TAC engineer told us not to do it.

[the_rock]

I will check with my colleague Monday to see if she had a chance to do any config on the new fw.

[Tom_Hinoue]

Yes, in that case I believe building the new appliance from scratch is the best option for your customer as well.

[the_rock]

I believe so too.

[rjaniec]

So I noticed today that build R82.00.10 for the 15x5 appliance was removed from the site. Is that because of issues? Will it return?

[PhoneBoy]

I presume it will return, but do not know the specifics of why it was pulled.

[David_Evans]

I've been working with R&D for quite a while on the 1555 build.   They gave me a work around that has got my lab equipment stable, but I'm pretty sure that it is not a permanent solution.    So hopefully the removal means they are getting to the root cause and a fix.

[the_rock]

Any clue if this affects 25xx series appliances?

[PhoneBoy]

Guessing not since it appears only the 15x5 firmware was pulled...

[the_rock]

Great! And this is the latest firmware?

[Amir_Ayalon]

Correct David

We hope to release a new firmware next week, and until then, although the issue doesn't impact all installation and in order to minimize the risk, we want to avoid new upgrades to this firmware.

[genisis__]

I have TAC/R&D involved in a case regarding R82.00.10 at the moment, I'm hoping the resolution to my issues are going to be encompasses into the new update.

[Greg_Harbers]

All,

What is the collective wisdom on R82.00.10 for 1555/1595/1800 appliances? We have a customer with around 50 such devices (centrally managed) that will need to be upgraded in the next 3 months to this version as R81.10.17 is announced as being no longer supported on these devices from July '26.

These devices are not doing anything too special, no dynamic routing, no https inspection etc. around 50% are VPN connected

Is it production ready or should we wait a while longer for further updates?

Also, question for @amir_aylon, R81.10.17 is listed supported on 1550/1590 appliances through to the hardware EOL date of January 2030. Will there be ongoing development/bug fixes/ new releases of this version?

Thanks

Greg

[PhoneBoy]

While I would not expect a lot of new features, we will definitely provide bugfix releases.

[Amir_Ayalon]

Hi All

We have a firmware candidate for GA replacement for Pro appliances, if you which participate in testing the EA the image, please contact us directly.

amiray@checkpoint.com

noaal@checkpoint.com;

ohadp@checkpoint.com

[J_admin12]

Does anyone have any notes on the stability of this version of appliances such as 1800/1900, etc?

Stability on the 2500s seems OK, but given how many issues we had when trying to run this on 15x5 appliances we're hesitant to run this on 1800/1900 appliances.

Thanks

[genisis__]

Not sure if it helps, but I'm, running R82.00.10 on 2000 appliances, I've only noticed 2 issue.

1 - TAC connecting to the device (under investigation with them) does not show in logs.

2 - When connecting to a terminal session through the WEBUI using firefox it does not work (I've posted the workaround to this in Checkmates already).

[Amir_Ayalon]

Hi All

Please Notice we have release a new firmware for the Pro appliances

This firmware (Build 998002107)  resolves a specific issue in Pro models (1535, 1555, 1575, 1595, 1575R, and 1595R) that could cause the device to freeze or hang under heavy workload conditions. This fix applies only to Pro appliances. Other appliance series (1600, 1800, 1900, 2000, and 2500) are not affected.

https://support.checkpoint.com/results/sk/sk184357

Build 998002107

For those who consider to upgrade, you should be aware of an Issue (MT issue) that affect all R82 Mng and R82 GW.

The issue impact Certificate and CRL validation.

more details here:

https://support.checkpoint.com/results/sk/sk184766

Currently, Build 998002107 which is published in R82.00.10 SK include the fix for the freeze issue, but does not include the fix for the CRL issue.

Within the next 2-3 days we will release an image that fixes Both issues.

Sorry for the inconvenience.

Thus who wish to participate in EA the new image, are welcome to drop us an email.
Amiray@checkpoint.com

Noaal@checkpoint.com

ohadp@checkpoint.com

[genisis__]

Hi Amir,
Is a release due soon that is compatible with 2000 model appliances?

[Amir_Ayalon]

Hi
The 2000 Appliance is not impacted be the Freeze under heavy load, but is affected by the CRL issue, IF it is running R82 code base.
we will release an updated R82.00.10 firmware within 2 weeks, that will address the CRL (as well as other fixes) for Pro and for 2000 as well.
until then - those who manage the 1600/1800/1900/2000 appliances and are concerned with the CRL issue, can install the firmware that was published in the SK, or apply the WA.

[genisis__]

Thanks Amir,

Hopefully all the reported issue will be nipped in the bud by the upcoming release.

[J_admin12]

The instability issues are still present for us using 15x5 appliances running R82.00.10 build 2107.

[genisis__]

Please feedback specifically if you can, if its different to what has already been reported to Checkpoint.  In this way they can respond if its going to be resolved in the next release.

[Amir_Ayalon]

please update to the latest firmware 2110

[genisis__]

I've updated, will see how thing go.

[sx8n20394]

We were just notified that a problem was found with build 2110 and that they may need to direct people to use build 1660

[Chris_Atkinson]

All locations now reference Build 998002110 for PRO series, confirming this is the consolidated one?

[Amir_Ayalon]

indeed.

this firmware include CRL fixes and rare hang/freeze fixes

[mwakenell]

Thank you Amir for all the updates and assistance.  We are now running  version 2110 on 12 2530s and 4 1555s and stability/performance seems much improved!

[Milo2323_]

Hi,

I managed to update from R81.10.17 (996004721) to R82.00.10 (998002110) and discovered that the local interface does not apply changes from DHCP to DHCP Relay. When I modify the local interface by switching from DHCP to DHCP Relay and save, the changes are not applied when moving between interfaces. I also tried disabling the interface, applying the changes from DHCP to DHCP Relay, and then re‑enabling it, but the changes were still not applied. I additionally deleted the interface and recreated it with DHCP Relay, but the outcome was the same. The command “show dhcp servers” confirms that no DHCP Relay configuration exists, and the command “show dhcp-relay advanced settings” returns the following value: “use-internal-ip-addrs-as-source:false”.