Newest SMB devices SK´s

[G_W_Albrecht]

This is todays list of the newest SMB devices SK´s

sk166978  DHCP does not work when the DHCP server is behind the VPN peer on SMB appliances

sk167015  DHCP fails to issue new IP addresses in SMB appliances

sk167133  VPN traffic is blocked by Application Control and URL Filtering on SMB Appliances

SMB devices SK´s has been updated.

[G_W_Albrecht]

Upate:

sk167034   Cannot find logs on SMP
sk167116   How to configure Site-to-Site VPN between two SMB Gateways using hostname

[G_W_Albrecht]

sk166498 Cannot access WebUI on allowed subnet

sk166981 Captive Portal does not load on SMB devices

sk167199 How to disable username/password login for SSH on Embedded GAIA

sk167276 1590/1570R LTE Appliances: Important Procedures

sk167313 Not getting expected throughput on speed tests

sk167416 "sfw_mac_filtering_config: ioctl SFW_MAC_FILTERING failed" message when pushing policy on a...

sk167433 Surfing HTTP sites does not work on 1500 SMB appliances if more than one Internet connectio...

[G_W_Albrecht]

And:

sk167460   SSIDs of WLANs running 5 GHz take more time to appear in SMB appliances

[G_W_Albrecht]

sk167236   1500 / 1570R gateway blocking internal SNMP polling traffic when Firewall blade is in str...

sk167532   Connections through port forwarding or from VPN to 1500 are slow when SecureXL is enabled

[G_W_Albrecht · Accepted solution]

sk165478: CloudGuard Edge for Versa Networks

sk165479: CloudGuard Edge for Citrix SD-Wan

sk166421: CloudGuard Edge for Cisco ENCS

sk166422: CloudGuard Edge for VMware VeloCloud

sk166473: VPN user cannot access office PC with RDP after connecting to appliance and getting Office...

sk166873  Slow throughput for Remote Access VPN users connected to Gaia Embedded appliances

sk167201: Logging stops on locally managed SMB appliances when the storage on microSD reaches 2.2 GB

sk167498  Netflow shows that all outbound traffic is from WAN IP only

sk167717  Policy installation fails on SMB Gateway with "sfw_load: Failed to add CMI signatures" err...

sk167752  CIFS/SMB connection over site-to-site VPN gets stuck when br0 is configured on a locally m...

sk167852  When LSM Gateways are behind hide NAT (without port forwarding), connections initiated fro...

sk167873  How to configure a VPN between SMP managed devices and SMS managed devices

sk167876  Jumbo Hotfix Accumulator for R80.20.05

[G_W_Albrecht]

The new additions:

sk168061: Anti-Spam blade changes source IP when it reaches the internal SMTP server on 1500 and 157...

sk168072: 1500 Series Uboot version 112 known issues

sk168173: Check Point SMS provider service isn't showing in R80.20.10 appliance's WebUI for VPN 2FA

and do not forget:

sk167012: R80.20.10 for Small and Medium Business Appliances 😎

[G_W_Albrecht]

sk168039 CloudGuard Edge for Aryaka

[G_W_Albrecht]

sk166552: All LAN ports/switches and their associated VLANs share the same MAC address in 700/900/12...

sk168613: Country flag mismatch for Geo Protection logs on 1500 SMB appliance

sk168797: Traffic incorrectly routes out of the wrong interface after updating SMB image with ISP re...

[G_W_Albrecht]

sk170697: How to deploy a certificate to iOS for SSL inspection on a Locally Managed Gaia Embedded d...

sk170814: In some scenarios, upgrading the Security Gateway from R80.20.10 Build 1491 to a newer ver... 

[G_W_Albrecht]

sk175544: SSL Bypass by MAC Address on Quantum Spark Appliances

sk175565: Adding a third party certificate for Captive Portal through Smart Provisioning doesn't wor...

sk175585: Bypass browse base authentication service for specific source address

[Vladimir]

@G_W_Albrecht , Don't know if you've had a chance to try the sk167133, but it is unclear if its only the VPN traffic will be uninspected or if the egress traffic from VPN clients to the Internet will be uninspected as well. Additionally, if it is internal Web Apps that are being served via VPN, and are compromised, excepting them from inspection may have detrimental effect on security as well.

[G_W_Albrecht]

I would assume that only S2S traffic is not inspected - but you can give feedback to sk167133 with the question !

[G_W_Albrecht]

sk167693: Various issues with emails and Outlook when using IMAPS or POP3S on SMB appliances

[G_W_Albrecht]

sk168317: Guidelines for Cellular Cables and Antennas in 1500 Series LTE Products

[G_W_Albrecht]

sk169036: Unable to delete a network object on a Centrally Managed SMB appliance

[G_W_Albrecht]

sk168632: HTTPS sites are uncategorized on SMB appliances running R77.20

[G_W_Albrecht]

Not that new:

sk166653: ISL Light for Remote Support unable to connect to 1500 appliance, and as soon as you open...

[G_W_Albrecht]

sk168753: "Error has occurred while applying the Firewall settings (error 00351)" appears while appl...

[G_W_Albrecht]

sk168182: Cannot enable RADIUS on SMB via SmartProvisioning

sk169766: Capsule VPN application allows Two Factor Authentication (2FA) only on 1500 Branch Office ...

sk169768: VoIP phones are dropped on any Firewall Policy modification

sk169872: Custom application group icon shows a lock icon even after the user deletes it from the Ap...

[G_W_Albrecht]

sk168516: The implied rules for "remote access connections" are not matched on 1500 series devices

[G_W_Albrecht]

One i did overlook so long : sk100731: VPNs go down within 24 hours after primary Security Management server goes down

[G_W_Albrecht]

sk170035: "No License" status in SMP license column even though licenses are valid and active

[G_W_Albrecht]

YES:

sk166717: Check Point R81 Known Limitations

sk170155: SMB appliances report incorrect value for SNMP sysObjectID

sk170203: After connecting to a 1500 appliance with Capsule VPN from an Android device, the Authent... 

[G_W_Albrecht]

sk168333: R80.20.15 for Small and Medium Business Appliances

sk170162: How to upgrade hardware from R77.20.87 to R80.20.15 or above

[G_W_Albrecht]

sk170393: IKEv2 fails to connect in SMB appliances, "IKE failure: Informational exchange: Exchange f...

[G_W_Albrecht]

sk31404: How to Debug SecureXL

sk112716: Web SSL VPN Portal authentication fails with "Invalid username or password"

sk151114: "fwaccel off" does not affect disabling acceleration of VPN tunnels in R80.20 and above

[G_W_Albrecht]

sk170573: R80.30 Jumbo Hotfix installation overwrites vpn_route.conf for managed 1500 appliances

[G_W_Albrecht]

sk105722: How to configure Check Point Security Gateway to copy DiffServ mark between packet's heade...

sk117272: "show configuration" output does not list BGP configuration commands

[G_W_Albrecht]

sk170778: On a 1590 WiFi + LTE SMB Appliance, the second LTE Network interface with a USB LTE dongle...

sk170814: In some scenarios, upgrading the Security Gateway from R80.20.10 Build 1491 to a newer ver...

sk170930: "Installation failed. Reason: Failed load Policy on Security Gateway" error on SMB device ...