Harald Hansen

R80.20 Management Feature Release

Discussion created by Harald Hansen on Jun 28, 2018
Latest reply on Jul 10, 2018 by awilk99fbe18d-5cf1-4543-9936-535b8747c024

R80.20 Management Feature Release (sk123473) was released yesterday. Release Notes: R80.20 Management Feature Release Release Notes 

Some first impressions are following.

What are your thoughts?

 

The good:

[Expert@r80-20-mgmt:0]# uname -a
Linux r80-20-mgmt 3.10.0-693cpx86_64 #1 SMP Tue Feb 6 12:13:02 IST 2018 x86_64 x86_64 x86_64 GNU/Linux

[Expert@r80-20-mgmt:0]# mount|grep vg_splat
/dev/mapper/vg_splat-lv_current on / type xfs (rw,inode32)
/dev/mapper/vg_splat-lv_log on /var/log type xfs (rw,inode32)

Endpoint Security Server from R77.30.3 is finally available on the R80-platform, even though I don't have any customers managing both firewalls and endpoint from the same SmartCenter.

fdisk and tools are updated and disk alignment, even though the disk layout still leaves a bit to be desired (VMware uses 4 MB blocks). The advice to add more storage to /var/log after installing GAiA still applies.

Expert@r80-20-mgmt:0]# parted /dev/sda

(parted) unit mib
(parted) p
Model: VMware Virtual disk (scsi)
Disk /dev/sda: 122880MiB
Sector size (logical/physical): 512B/512B
Partition Table: gpt
Disk Flags:

Number Start End Size File system Name Flags
1 0.02MiB 300MiB 300MiB ext3 boot
2 300MiB 8489MiB 8189MiB linux-swap(v1)
3 8489MiB 122880MiB 114391MiB lvm

The bad:

Still selecting the wrong scheduler by default on virtual machines. This should be deadline pr VMware recommendations! 

[Expert@harald-r80-20-mgmt:0]# cat /sys/block/sda/queue/scheduler
noop deadline [cfq]

No improvement to the legacy "Configure in SmartDashboard" blades.

Default new rules still not configurable; Action Drop/No log still default on all new rules.

No support for paravirtualized drivers in VMware, even though this release is supposed to be based on RHEL 7.

Conclusions:

I'm looking forward to do some performance tests on SmartConsole and logs, on larger installations this has been a concern. Also the new kernel and default XFS file system is a major improvement.

Still I'm disappointed with what's not solved or included in this release, hurry up Check Point, your driving to slow! 

Outcomes