Support Center > Search Results > SecureKnowledge Details
R77.20.70 for Small and Medium Business Appliances
Solution

This article is suitable for Check Point 600 / 700 / 1100 / 1200R / 1400 Small and Medium Business (SMB) Appliances

Table of Contents

  • What's New in Check Point R77.20.70 for SMB Appliances
  • Resolved Issues
  • Downloads
  • Known Limitations
  • Documentation

For more information, see the Check Point 600 , Check Point 700 , Check Point 1100 , Check Point 1200R and Check Point 1400 Appliance Product Pages.
Visit Check Point CheckMates Community  and the SMB Forum to ask questions or start a discussion and get our experts assistance.

 

What's New in Check Point R77.20.70 for SMB Appliances

  • HTTPS Inspection in Locally 700 / 1400 / 1200R Managed Appliances

    • SSL inspection on web traffic
    • Supported in all Threat Prevention blades as well as Application Control and URL Filtering.
    • For configuration and deployment instructions, refer to sk121214
  • Route base VPN Enhancements

    • Static routes are now available over Route based VPN (VTI)
  • Certificate Replacement

    • Replace the VPN remote access certificate in locally managed appliances.
    • Replace the WebUI certificate with an externally signed certificate.
  • Managing Firewall Access Policy from the SMP -  Refer to sk118035

  • Multiple Monitor Mode

    • Configure multiple local networks to be in monitor mode at the same time.
  • Enhanced license support

    • User Center ALL-IN-ONE EVALUATION license support.

     

R77.20.70 for SMB Appliances Resolved Issues

The below table lists R77.20.70 resolved issues:

ID Symptoms
SMB-2532
VPN connectivity problems when adding a new member to the VPN community in the SMP.
SMB-3379 The SMP WebUI displays the incorrect gateway firmware after a gateway managed by the SMP is updated.
01497836 Dead Peer Detection is not supported in centrally and locally managed modes of the appliances. 
SMB-2388 In a centrally managed 1100 appliance managed by SmartConsole in R80 and higher, the appliance is recognized as an Open server after SIC if it is not set manually.

 

R77.20.70 for SMB Appliances Downloads

Important: check the MD5 string before installing the downloaded file.

  • Effective January 24th, 2018, build 990171995 of R77.20.70 image has been released

    Download Package 700 Appliance 1400 Appliance 600 Appliance 1100 Appliance 1200R Appliance
    R77.20.70 Image (IMG) (IMG) (IMG) (IMG) (IMG)
  •  

  • Effective November 13rd, 2017, build 990171948 of R77.20.70 image has been released

    Show / Hide the Download Table
    Download Package 700 Appliance 1400 Appliance 600 Appliance 1100 Appliance 1200R Appliance
    R77.20.70 Image (IMG) (IMG) (IMG) (IMG) (IMG)
    R77.20.70 package for SmartUpdate - For R77.30 SmartUpdate and SmartProvisioing
    (TGZ)
    - (TGZ) (TGZ)
    For R80 SmartUpdate
    (TGZ)


Note: 
To download these packages you will need to have a Software Subscription or Active Support plan .


R77.20.70 for SMB Appliances Known Limitations

For SSL inspection  specific known limitations, refer to sk121214 - SSL Inspection on Locally Managed 700/1400/1200R appliances

The below table lists R77.20.70 known limitations:

ID Symptoms
General
SMB-3593,
SMB-3589

An increasing number of "Zombie" processes are presented in the output of ps command.
Zombies are created with a parent process ID which is the process ID of the 'sfwd' daemon. Usually there is 1 "Zombie" process every 24 hours.

  • Resolved in R77.20.70 Build 990171995 
SMB-4056 

You cannot connect a secondary High Availability cluster member in locally-managed mode if the member was upgraded from version R77.20.60 or lower.

  • Workaround: First re-initialize the member's internal certificate.
SMB-4186 For locally managed appliances: When SSL traffic inspection is enabled, you can only add/remove categories/sites to bypass via the "Other categories and sites" checkbox after disabling and re-enabling the feature to bypass other categories and sites, or disabling and re-enabling the SSL traffic inspection feature. 
WebUI
SMB-3333

WebUI SNMP Validation Error appears when editing the SNMP Traps settings.

  • Resolved in R77.20.70 Build 990171995 
SMB-2882 When changing the internal CA of the gateway from the SMP while the WebUI is open, the WebUI freezes and disconnects.
SMB-3424,
SMB-3048
When the Windows AD has more than 1000 groups, not all the groups can be seen on the SMB appliance outgoing rule/attach the appliance to the AD server. When the Windows AD has more than 500 groups, only 500 groups can be seen on the SMB appliance.
Refer to sk121442.
  • Resolved in R77.20.70 Build 990171995 
SMB-3632 

In the DHCP settings tab (or DHCP/SLAAC settings in IPv6 mode), when adding any custom DHCP option and save, if you try to edit this local network object again, an "Invalid Input - Unknown Field" error message appears.

  • Resolved in R77.20.70 Build 990171995
Anti-Virus
SMB-3909

Video on demand (VOD) service in YES satellite TV fails to play content when Anti-Virus is configured in Hold mode.

  • Resolved in R77.20.70 Build 990171995 
SMB-3153 When downloading the Eicar test file over HTTPS, sometimes the file is not blocked on the first attempt. 
User Awareness
SMB-3946

If User Awareness blade is disabled but Browser-Based authentication is enabled, hosts behind the appliance are unable to reach web sites.

  • Resolved in R77.20.70 Build 990171995
SMP
SMB-3917,
SMB-3916

The "Test Cloud Services Ports" test tool show "Unreachable" for some of the ports even when all cloud services are reachable.

  • Resolved in R77.20.70 Build 990171995 

 

R77.20.70 for SMB Appliances Documentation

Release Notes
Check Point R77.20.70 Release Notes
Administration Guides
Check Point R77.20.70 600/700 Administration Guide
Check Point R77.20.70 1100/1200R/1400 Locally Managed Administration Guide
Check Point R77.20.70 1100/1200R/1400 Centrally Managed Administration Guide
Check Point R77.20.70 600/700/1100/1200R/1400 Appliance CLI Reference Guide
Check Point 600/700/1100/1200R/1400 Appliance Advanced Routing Guide Reference Guide
Japanese R77.20.70 600/700 Administration Guide
Related Solutions
sk97766 - Check Point 600 / 1100 / 1200R /700 / 1400 Appliances Releases
sk105380 - Check Point R77.20 for 600 / 700 /1100 / 1200R / 1400 Appliance Known Limitations

Give us Feedback
Please rate this document
[1=Worst,5=Best]
Comment