Harald Hansen

R80.20 Management Feature Release

Discussion created by Harald Hansen on Jun 28, 2018
Latest reply on Jul 10, 2018 by awilk99fbe18d-5cf1-4543-9936-535b8747c024

R80.20 Management Feature Release (sk123473) was released yesterday. Release Notes: R80.20 Management Feature Release Release Notes 

Some first impressions are following.

What are your thoughts?


The good:

[Expert@r80-20-mgmt:0]# uname -a
Linux r80-20-mgmt 3.10.0-693cpx86_64 #1 SMP Tue Feb 6 12:13:02 IST 2018 x86_64 x86_64 x86_64 GNU/Linux

[Expert@r80-20-mgmt:0]# mount|grep vg_splat
/dev/mapper/vg_splat-lv_current on / type xfs (rw,inode32)
/dev/mapper/vg_splat-lv_log on /var/log type xfs (rw,inode32)

Endpoint Security Server from R77.30.3 is finally available on the R80-platform, even though I don't have any customers managing both firewalls and endpoint from the same SmartCenter.

fdisk and tools are updated and disk alignment, even though the disk layout still leaves a bit to be desired (VMware uses 4 MB blocks). The advice to add more storage to /var/log after installing GAiA still applies.

Expert@r80-20-mgmt:0]# parted /dev/sda

(parted) unit mib
(parted) p
Model: VMware Virtual disk (scsi)
Disk /dev/sda: 122880MiB
Sector size (logical/physical): 512B/512B
Partition Table: gpt
Disk Flags:

Number Start End Size File system Name Flags
1 0.02MiB 300MiB 300MiB ext3 boot
2 300MiB 8489MiB 8189MiB linux-swap(v1)
3 8489MiB 122880MiB 114391MiB lvm

The bad:

Still selecting the wrong scheduler by default on virtual machines. This should be deadline pr VMware recommendations! 

[Expert@harald-r80-20-mgmt:0]# cat /sys/block/sda/queue/scheduler
noop deadline [cfq]

No improvement to the legacy "Configure in SmartDashboard" blades.

Default new rules still not configurable; Action Drop/No log still default on all new rules.

No support for paravirtualized drivers in VMware, even though this release is supposed to be based on RHEL 7.


I'm looking forward to do some performance tests on SmartConsole and logs, on larger installations this has been a concern. Also the new kernel and default XFS file system is a major improvement.

Still I'm disappointed with what's not solved or included in this release, hurry up Check Point, your driving to slow!