R77.20.70 for Small and Medium Business Appliances

Support Center > Search Results > SecureKnowledge Details

Solution ID	sk120473
Product	Branch Office Appliances, Ruggedized Appliances, Small and Medium Business Appliances
Version	R77.20
OS	Gaia Embedded
Platform / Model	600, 700, 1100, 1200R, 1400
Date Created	08-Nov-2017
Last Modified	05-Jul-2018

Solution

This article is suitable for Check Point 600 / 700 / 1100 / 1200R / 1400 Small and Medium Business (SMB) Appliances

Table of Contents

What's New in Check Point R77.20.70 for SMB Appliances
Resolved Issues
Downloads
Known Limitations
Documentation

For more information, see the Check Point 600 , Check Point 700 , Check Point 1100 , Check Point 1200R and Check Point 1400 Appliance Product Pages.
Visit Check Point CheckMates Community and the SMB Forum to ask questions or start a discussion and get our experts assistance.

What's New in Check Point R77.20.70 for SMB Appliances

HTTPS Inspection in Locally 700 / 1400 / 1200R Managed Appliances
- SSL inspection on web traffic
- Supported in all Threat Prevention blades as well as Application Control and URL Filtering.
- For configuration and deployment instructions, refer to sk121214
Route base VPN Enhancements
- Static routes are now available over Route based VPN (VTI)
Certificate Replacement
- Replace the VPN remote access certificate in locally managed appliances.
- Replace the WebUI certificate with an externally signed certificate.
Managing Firewall Access Policy from the SMP - Refer to sk118035
Multiple Monitor Mode
- Configure multiple local networks to be in monitor mode at the same time.
Enhanced license support
- User Center ALL-IN-ONE EVALUATION license support.

R77.20.70 for SMB Appliances Resolved Issues

The below table lists R77.20.70 resolved issues:

ID	Symptoms
SMB-2532	VPN connectivity problems when adding a new member to the VPN community in the SMP.
SMB-3379	The SMP WebUI displays the incorrect gateway firmware after a gateway managed by the SMP is updated.
01497836	Dead Peer Detection is not supported in centrally and locally managed modes of the appliances.
SMB-2388	In a centrally managed 1100 appliance managed by SmartConsole in R80 and higher, the appliance is recognized as an Open server after SIC if it is not set manually.

R77.20.70 for SMB Appliances Downloads

Important: check the MD5 string before installing the downloaded file.

Effective January 24th, 2018, build 990171995 of R77.20.70 image has been released

Download Package 700 Appliance 1400 Appliance 600 Appliance 1100 Appliance 1200R Appliance

R77.20.70 Image (IMG) (IMG) (IMG) (IMG) (IMG)

Effective November 13rd, 2017, build 990171948 of R77.20.70 image has been released

Show / Hide the Download Table

Download Package	700 Appliance	1400 Appliance	600 Appliance	1100 Appliance	1200R Appliance
R77.20.70 Image	(IMG)	(IMG)	(IMG)	(IMG)	(IMG)
R77.20.70 package for SmartUpdate	-	For R77.30 SmartUpdate and SmartProvisioing (TGZ)	-	(TGZ)	(TGZ)
R77.20.70 package for SmartUpdate	-	For R80 SmartUpdate (TGZ)	-	(TGZ)	(TGZ)

Note: To download these packages you will need to have a Software Subscription or Active Support plan .

R77.20.70 for SMB Appliances Known Limitations

For SSL inspection specific known limitations, refer to sk121214 - SSL Inspection on Locally Managed 700/1400/1200R appliances

The below table lists R77.20.70 known limitations:

ID	Symptoms
General
SMB-3593, SMB-3589	An increasing number of "Zombie" processes are presented in the output of ps command. Zombies are created with a parent process ID which is the process ID of the 'sfwd' daemon. Usually there is 1 "Zombie" process every 24 hours. Resolved in R77.20.70 Build 990171995
SMB-4056	You cannot connect a secondary High Availability cluster member in locally-managed mode if the member was upgraded from version R77.20.60 or lower. Workaround: First re-initialize the member's internal certificate.
SMB-4186	For locally managed appliances: When SSL traffic inspection is enabled, you can only add/remove categories/sites to bypass via the "Other categories and sites" checkbox after disabling and re-enabling the feature to bypass other categories and sites, or disabling and re-enabling the SSL traffic inspection feature.
WebUI
SMB-3333	WebUI SNMP Validation Error appears when editing the SNMP Traps settings. Resolved in R77.20.70 Build 990171995
SMB-2882	When changing the internal CA of the gateway from the SMP while the WebUI is open, the WebUI freezes and disconnects.
SMB-3424, SMB-3048	When the Windows AD has more than 1000 groups, not all the groups can be seen on the SMB appliance outgoing rule/attach the appliance to the AD server. When the Windows AD has more than 500 groups, only 500 groups can be seen on the SMB appliance. Refer to sk121442. Resolved in R77.20.70 Build 990171995
SMB-3632	In the DHCP settings tab (or DHCP/SLAAC settings in IPv6 mode), when adding any custom DHCP option and save, if you try to edit this local network object again, an "Invalid Input - Unknown Field" error message appears. Resolved in R77.20.70 Build 990171995
Anti-Virus
SMB-3909	Video on demand (VOD) service in YES satellite TV fails to play content when Anti-Virus is configured in Hold mode. Resolved in R77.20.70 Build 990171995
SMB-3153	When downloading the Eicar test file over HTTPS, sometimes the file is not blocked on the first attempt.
User Awareness
SMB-3946	If User Awareness blade is disabled but Browser-Based authentication is enabled, hosts behind the appliance are unable to reach web sites. Resolved in R77.20.70 Build 990171995
SMP
SMB-3917, SMB-3916	The "Test Cloud Services Ports" test tool show "Unreachable" for some of the ports even when all cloud services are reachable. Resolved in R77.20.70 Build 990171995