Support Center > Search Results > SecureKnowledge Details
R80.10 image updates FAQ
Solution

In order to improve user experience, Check Point updates the latest product images with recommended fixes.
The new image (Take 479) contains several fixes and enhancements that apply to the First Time Configuration Wizard, Upgrade process and Initial Installation process.

New Image is relevant for:

  • New customers
  • Customers that would like to install new R80.10 version (Security Gateway or Management server)
  • Customers that would like to upgrade their setups from Check Point R80 versions and below to R80.10

For log of all changes including file names and MD5, see Check Point R80.10 File Revision History.

  • New R80.10 image Take 479 - released on October 16th, 2018

    Fixes included into the new R80.10 image Take 479 Reference
    Added support for 23900 Data Center Appliances. sk107516
    PMTR-21059: Check Point response to SegmentSmack (CVE-2018-5390) & FragmentSmack (CVE-2018-5391). sk134253 
    PMTR-17613: Gaia Portal shows blank page after log in with Firefox 5x or Chrome 66.  sk121373
    PMTR-14895: After updating Virtual System object and pushing configuration to VSX object, most of the routes are removed. -
    PMTR-16707: After upgrade to R80.10, Inspection Settings view does not correctly reflect the overridden actions. This does not affect the gateway that continues receiving the correct overridden actions. -
    PMTR-17519: Upgrade might get stuck if there is not enough memory allocated to the upgrade process.  sk123136
    PMTR-10394: After upgrade to R80.10, validation incidents do not disappear although solving the error.  sk123357
    PMTR-9114: Snort protections are not fully enforced after upgrade from R77.x to R80.10. sk123575
    PMTR-17774: Cannot log in to upgraded Multi-Domain Management Server due to IP duplication source database.  -
    PMTR-3872: "No MD role specified" error when migration/upgrade of Multi-Domain Management Server from pre-R80 MDS to R80.10 fails. sk123862
    PMTR-12819: After changing the name of a Multi-Domain Management Server, the previous name is still shown in the Domain editor. -
    PMTR-9000: Upgrade to R80.10 Multi-Domain Management fails with "Maximum Number of Child Elements limit (50000) Exceeded" error.  sk123857
    PMTR-10306: Security Management migration to R80.10 fails due to NumberFormatException. sk125272
    PMTR-22725: Upgrade from R77.30 fails with "Object SyncUsrCntr could not be deleted because it is referenced by other objects" exception. -


  • New R80.10 image Take 462 - released on January 18th, 2018
    Show / Hide this section

    Fixes included into the new R80.10 image Take 462 Reference
    Reduced running time for the First Time Configuration Wizard during Security Management Server installation -
    Replacement of Kaspersky Lab Anti-Virus components in accordance with security orders from the United States Department of Homeland Security. (www.checkpoint.com/kaspersky)
    sk118539
    Integrated support for Smart-1 405 and 410 appliances sk117578
    Upgrade Stability enhancements:
    • CPM-461: Upgrade of secondary R80 Security Management Server
    • CPM-1037: Upgrade of R80 Multi-Domain Log Server
    • CPM-462: Upgrade of R77.x Multi-Domain Log Server using NGX license
    • CPM-460: Import of R80.10 Multi-Domain Management Server using mds_import
    -
    Upgrade option from R77.30 with vSEC Controller to R80.10 is available via CPUSE
    -
    Resolves vSEC Controller for AWS connectivity issue due to CA change sk121885
    Gaia Fast Deployment Tool
    sk120193
    Integration of R80.10 Jumbo Hotfix Accumulator (Jumbo HFA) - General Availability Take 42 items
    sk116380
  • R80.10 GA is already installed on server. Is an upgrade to the new image required now?

    No, customers that installed the previously released R80.10 image (Take 421/Take 462) are not required to install this new image (Take 479). 
    For new image 479 - R80.10 Jumbo HFA Take 154 and above are compatible to (can be installed on) this new image.
    For new image 462 - R80.10 Jumbo HFA Take 70 and above are compatible to (can be installed on) this new image.

    Note that Check Point recommends to install the most recent General Availability Jumbo HFA.

  • What Jumbo HFA Take can be installed on top of R80.10 image?

    For image 479: R80.10 Jumbo HFA Take 154 and above are compatible with (can be installed on) this new image.
    For image 462: R80.10 Jumbo HFA Take 70 and above are compatible with (can be installed on) this new image.
  • What Jumbo HFA Take is included in this new image?

    New images (Take 462/Take 479) include Jumbo HFA Take 42.
    Customers who want to obtain the latest fixes, should install the relevant Jumbo HFA Take as mentioned in the previous question. 
  • Can the most recent R80.10 image be used to restore backup taken on a previous R80.10 image?

    Yes, it can be safely restored, even if you had hotfixes installed on the previous R80.10 image.
  • Can Management HA work on servers with different R80.10 images installed?

    No, it is not supported. Management High Availability is supported only between Management High Availability servers with the same build number (see limitation CPM-1167 in sk110519)
  • Can different R80.10 images be used on different cluster members?

    Yes, it can be safely used. Note that it is recommended to align the members with the same version.
  • Where to download the previous R80.10 images?

    All the original R80.10 images are available below:

    File name / CPUSE Identifier    Date    
    Take Download
    Check_Point_R80.10_T462_Gaia.iso 18 Jan 2018 462 (ISO)
    Check_Point_R80.10_T462_Fresh_Install_and_Upgrade_from_R7X.tgz 18 Jan 2018 462 (TGZ)
    Check_Point_R80.10_T462_Upgrade_from_R80_FULL.tgz 18 Jan 2018 462 (TGZ)
    Check_Point_R80.10_T421_Gaia.iso 17 May 2017 421 (ISO)
    Check_Point_R80.10_T421_Fresh_Install_and_Upgrade_from_R7X.tgz 17 May 2017 421 (TGZ)
    Check_Point_R80.10_T421_Upgrade_from_R80_FULL.tgz 17 May 2017 421 (TGZ)

    Note: In order to download some of the packages you need to have a Software Subscription or Active Support plan.
  • How to find out what take is installed on the machine?

    From clish, run the show version all or ver command, that displays the take number as appears in R80.10 Release Notes Build numbers table.

    For file revision history and MD5 see Check_Point_R80_10_File_Revision_History

Give us Feedback
Please rate this document
[1=Worst,5=Best]
Comment