Support Center > Search Results > SecureKnowledge Details
Check Point R77.20
Solution

Table of Contents

  • R77.20 downloads for users running Gaia OS
  • What's New in R77.20
  • R77.20 Tools
  • CPUSE Offline Packages
  • R77.20 Released Hotfixes
  • R77.20 Downloads for other platforms
  • R77.20 Documentation
  • Revision History

 

Click Here to Show the Entire Article

 

For more information on Check Point releases see: Release map, Upgrade map, Backward Compatibility map, Releases plan.
For more information on R77.20, see the R77.20 Release Notes, R77.20 Known Limitations and R77.20 Resolved Issues. You can also visit our Firewall and VPN Blades forum or any other Check Point discussion forum to ask questions and get answers from technical peers and Support experts.

R77.20 downloads for users running Gaia OS

Use CPUSE in the Gaia Portal to quickly and easily update Check Point products. Offline mode CPUSE packages are available in the CPUSE Offline Packages table.

Images for Gaia Open Servers and appliances Fresh Install Upgrade from R76, R75.4x, R75.40VS Upgrade from R77.x
2012 Models Appliances*,
UTM-1 Appliances,
Power-1 Appliances,
Smart-1 Appliances,
Threat Emulation Appliances,
Open Servers		 (ISO)
Check_Point_R77.20_T124_Install.Gaia.iso

 (ISO)
(TGZ)		 (TGZ)
VMWare Virtual Machine OVF Template
Check_Point_Security_Gateway_R77.20_T124_OVF_Template_Gaia.tgz		 - -

*2012 Modules including: 21000, 13000, 12000, 4000, 2200 appliances

Important Note: Effective July 20, 2014, the Gaia Upgrade Package from R76 and R75.4x and SecurePlatform Upgrade Package for Multi-Domain from R76 have been replaced resolving sk101589.

Click here to see images for other platforms. Click here for upgrade wizard.

 

GUI

Platform / Package Link
Windows - SmartConsole and SmartDomain Manager (EXE)


For file revision history and MD5 see Check_Point_R77.20_File_Revision_History.

See sk91060: Removing old Check Point packages and files after an upgrade.


What's New in R77.20:


R77.20 delivers the latest resolved issues with additional support for existing features:
  • VSX stability fixes and enhancements.

  • MultiCore support for SSL - improved performance for portals (including Mobile Access) and SSL Network Extender. See sk101223 for more information.

  • New upgrade procedure for clusters, Connectivity Upgrade, which maintains connectivity when you upgrade from R76 and R75.40VS, to R77.20.

  • Threat Prevention detection and functionality enhancements:

    • Scan files that are passing on CIFS (see sk101606)
    • Anti-Spam support in MTA
    • Anti-Virus support for links inside emails *
    • Threat Emulation support in VSX *

  • DHCP simplified configuration and stability fixes. See sk98839.

  • IPsec VPN enhancements, including: MSS adjustments and 3rd party connectivity. For more enhancements, see sk101219.

  • SNMP: Quality improvements and Best Practices Guide.

  • Routing stability fixes and enhancements. See sk98226.

* The R77.20 Add-on brings more enhancements to R77.20. Read more in sk101217.

 

R77.20 Tools

Show / Hide the download matrix

Tools

Management Tools Gaia SecurePlatform & Linux IPSO Windows Solaris
Management Server Migration Tool (TGZ) * (TGZ) * (TGZ) (TGZ) ** (TGZ)
See R77 Release Notes
Multi-Domain Server Export Tool - - - - (ISO)
See R77 Release Notes
Bootmanager (for IP Appliances) (SH) - (SH) - -
Gaia Upgrade Verifier from IPSO - - (SH) - -
Gaia Upgrade Package for
IPSO 6.2 IP Appliances		 - - (TGZ)
(TGZ)		 - -
ISOMorphic Tool (EXE) (EXE) - - -

* To upgrade from E80.40 on Gaia / SecurePlatform / Linux OS, use this server migration tool.
** To upgrade from E80.40 on Windows OS, use this server migration tool.

Important Note: Effective Sep 23, 2014, the Management Server Migration Tool Package has been replaced resolving sk102486.

 

Agents

Agent Windows
DLP Exchange agent (MSI)

 

CPUSE Offline Packages

You can use R77.20 Gaia Offline Packages for CPUSE upgrade, on Security Gateways and Management Servers that are not connected to the Internet.

Show / Hide the download matrix

For R75.4x / R75.40VS / R76 / R77.x, download and install the latest build of Gaia Software Updates Agent.

Hardware / Appliance,
Gaia OS		 R77.20 Fresh Install and Upgrade from R75.4X/R75.40VS/R76 R77.20 Gaia Software Updates Package for R77 R77.20 Gaia Software Updates Package for R77.10 R77.20 Smart-1 2xx and 3xxx Gaia Software Updates Package for R77.10
All Check Point Appliances, Disk-Based IP Appliances
and Open Servers

 

R77.20 Released Hotfixes

Released Hotfixes
sk106478 - Check Point response to CVE-2015-2808 (Bar Mitzvah)
sk103839 - Check Point update and online services migration to SHA-256 based certificates
sk105062 - Check Point response to TLS FREAK Attack (CVE-2015-0204)
sk104443 - Check Point response to glibc - GHOST (CVE-2015-0235)
sk103683 - Check Point response to TLS 1.x padding vulnerability (CVE-2014-8730)
sk102989 - Check Point response to the POODLE Bites vulnerability (CVE-2014-3566)
sk102673 - Check Point Response to CVE-2014-6271 & CVE-2014-7169 Bash Code Injection vulnerability
sk101830 - High memory usage of all Multi-Domain Management servers in multi-site environment
sk101708 - Anti-Virus and Threat Emulation blades miss inspection
sk101610 - Smart-1 upgrade to R77.20 using legacy packages fails on conflict with hotfix GYPSY_SOC_HF_007 on platforms: 205, 210, 225, 3050 and 3150
(Upgrading to R77.20 using CPUSE prevents users from experiencing the issue described in this solution)
sk101589 - In-place MDM/MLM upgrade to R77.20 may fail due to lack of disk space on root partition
(This hotfix is a part of Gaia upgrade image and SecurePlatform MDM upgrade image T127, effective July 20, 2014)

 

R77.20 Downloads for other platforms

Download Wizard - Find your download file with just few clicks.

Show / Hide the download matrix

Notes:

  • In order to download some of the packages you will need to have a Software Subscription or Active Support plan.
  • There is no OS upgrade or change option in upgrade from R77. Only upgrade from Gaia to Gaia, or from SecurePlatform to SecurePlatform is supported.
  • For any OS besides Gaia, to upgrade from R75.4x and R75.40VS, upgrade first to R77.
Platform Hardware / Appliance Fresh Install Upgrade from R76 Upgrade from R77.x*
Gaia IP Appliances Disk-Based               -

(ISO)

 (1) and
or
(1) and 		(TGZ)
SecurePlatform 2012 Models Appliances,
Data Center Appliances,
UTM-1 Appliances,
Power-1 Appliances		 (ISO) (TGZ) (2) (TGZ)
Smart-1 Appliances (ISO)        (TGZ) (2)
(ISO)
(Multi-Domain)
Open Servers (ISO)
(ISO)
(Multi-Domain)		 (ISO)
(TGZ)
(ISO)
(Multi-Domain)
RHEL 5.0 /
RHEL 5.4 /
RHEL 5.9 /
RHEL 6.5		 Open Servers (ISO)
(ISO)
(Multi-Domain)		 - (3) (TGZ)
IPSO 6.2 Disk Based (4) IP150, IP280, IP290, IP390, IP560, IP690, IP1280, IP2450 and and and
IPSO 6.2 Flash Based (4) IP290, IP390, IP560, IP690, IP1280, IP2450 and - -
Windows               - (ISO) (ISO) (TGZ)

* Important: Upgrade on IPSO 6.2 requires IPSO 6.2 MR4 or later. See sk92306.

* Note: There is no OS upgrade or change option in upgrade from R77. Only upgrade from Gaia to Gaia, or from SecurePlatform to SecurePlatform is supported.

Additional Notes:

  1. Use these packages to upgrade IPSO OS for versions earlier than R77. Upgrade to the Gaia OS from another OS is supported for versions earlier than R77.

  2. When upgrading from R76 via SecurePlatform WebUI read sk93035 prior to upgrade.

  3. There is no direct upgrade from versions below R77 for Linux OS. Upgrade to R77 first.

  4. Upgrade on IPSO 6.2 requires IPSO 6.2 MR4 or later. See sk92306.

 

R77.20 Documentation

Show / Hide the documentation

R77.20 Documentation
Release Notes and R77.20 Guides
R77.20 Release Notes (for Gaia platform)
Appendix to R77.20 Release Notes (for SecurePlatform, IPSO, Linux, and Windows platforms)
CPView Tool: Monitor Security Gateway and Security Management Server Statistics
Endpoint Security on R77.20 Management Administration Guide
R77 guides updated for R77.10 and R77.20
R77 Documentation package

 

Revision History

Show / Hide the revision history

Date Description
06 Jul 2015 Added sk106478 to "R77.20 Released Hotfixes" section
10 May 2015 Added links to "Management Server Migration Tool" when upgrading from E80.40 (under the "R77.20 Tools" table)
19 Apr 2015 Added sk103839 to "R77.20 Released Hotfixes" section
30 Mar 2015 Added sk104443 to "R77.20 Released Hotfixes" section
11 Mar 2015 Added sk105062 to "R77.20 Released Hotfixes" section
15 Dec 2014 Added sk102989 and sk101708 to "R77.20 Released Hotfixes" section
23 Sep 2014
 Management Server Migration Tool Package has been replaced resolving sk102486.
05 Aug 2014 Added CPUSE Offline Package for Smart-1 2xx and 3xxx Appliances upgrading from R77.10 (take 2)
31 Jul 2014 Added sk101830 to "R77.20 Released Hotfixes" section
20 Jul 2014 Replaced Gaia upgrade image and SecurePlatform MDM upgrade image resolving sk101589 (take 127), resolving CPUSE compatibility issue with take 126
17 Jul 2014 Added sk101589 to "R77.20 Released Hotfixes" section and Replaced of Gaia upgrade image (take 126)
17 Jul 2014 Added sk101610 to "R77.20 Released Hotfixes" section
03 Jul 2014 First release of this document

Give us Feedback
Please rate this document
[1=Worst,5=Best]
Comment