R77.

10

Release Notes

28 May 2015

Classification: [Protected]
© 2015 Check Point Software Technologies Ltd.
All rights reserved. This product and related documentation are protected by copyright and distributed under
licensing restricting their use, copying, distribution, and decompilation. No part of this product or related
documentation may be reproduced in any form or by any means without prior written authorization of Check
Point. While every precaution has been taken in the preparation of this book, Check Point assumes no
responsibility for errors or omissions. This publication and features described herein are subject to change
without notice.
RESTRICTED RIGHTS LEGEND:
Use, duplication, or disclosure by the government is subject to restrictions as set forth in subparagraph
(c)(1)(ii) of the Rights in Technical Data and Computer Software clause at DFARS 252.227-7013 and FAR
52.227-19.
TRADEMARKS:
Refer to the Copyright page (http://www.checkpoint.com/copyright.html) for a list of our trademarks.
Refer to the Third Party copyright notices (http://www.checkpoint.com/3rd_party_copyright.html) for a list of
relevant copyrights and third-party licenses.
Important Information
Latest Software
We recommend that you install the most recent software release to stay up-to-date with the latest functional
improvements, stability fixes, security enhancements and protection against new and evolving attacks.

Latest Documentation
The latest version of this document is at:
(http://supportcontent.checkpoint.com/documentation_download?ID=30257)
To learn more, visit the Check Point Support Center (http://supportcenter.checkpoint.com).
For more about this release, see the R77.10 home page
(http://supportcontent.checkpoint.com/solutions?id=sk97617).

Revision History
Date Description

28 May 2015 Update regarding Security Gateway Virtual Edition in Network Mode ("Newly
Supported Platforms" on page 7)

03 December 2014 Fixed link to Appendix ("Introduction" on page 5)

02 November 2014 Corrected Security Gateway and VSX versions in Compatibility with Gateways
(on page 6)
Added Required Disk Space for Multi-Domain Security Management (on page 8)
Updated ESX information in Newly Supported Platforms (on page 7)

13 April 2014 Replaced Gaia images for fresh installation and upgrade ("Installation and
Upgrade Packages" on page 10), resolving sk98933
(http://supportcontent.checkpoint.com/solutions?id=sk98933)
Updated Upgrades (CPUSE) ("Recommended Upgrade: CPUSE" on page 8)
(formerly known as Gaia Auto Software Updates)

10 March 2014 Updated Compatibility with Gateways (on page 6)

and New Supported Platforms ("Newly Supported Platforms" on page 7)

06 March 2014 Added note to Before You Upgrade! (on page 8) for LOM firmware
Updated Upgrading with Legacy CLI (on page 9) for R75.4x

03 March 2014 SmartConsole and SmartDomain Manager EXE file replaced, to solve sk98734
(http://supportcontent.checkpoint.com/solutions?id=sk98734)

06 February 2014 Added R76SP as supported Chassis Security System in Compatibility with
Gateways (on page 6)

29 January 2014 Updated R75.4X upgrade packages ("Recommended Upgrade: CPUSE" on

page 8)

22 January 2014 General Updates

15 January 2014 First release of this document

Feedback
Check Point is engaged in a continuous effort to improve its documentation.
Please help us by sending your comments
(mailto:cp_techpub_feedback@checkpoint.com?subject=Feedback on R77.10 Release Notes).
 Contents

Important Information............................................................................................................ 3
Introduction ............................................................................................................................ 5
Important Note! ...................................................................................................................... 5
What's New in R77.10 ............................................................................................................ 5
Supported Upgrade Paths ..................................................................................................... 6
Compatibility with Gateways ................................................................................................ 6
Compatibility with Management Servers .............................................................................. 7
Newly Supported Platforms ................................................................................................. 7
Build Numbers ....................................................................................................................... 7
Installation and Upgrade ....................................................................................................... 8
Before You Upgrade! ........................................................................................................... 8
Required Disk Space on Gaia ............................................................................................. 8
Recommended Upgrade: CPUSE ....................................................................................... 9
Upgrading with Legacy CLI.................................................................................................. 9
Installing SmartConsole ....................................................................................................... 9
Post-Installation Configuration ........................................................................................... 10
Uninstalling ........................................................................................................................ 10
Installation and Upgrade Packages ................................................................................... 11
 Introduction

Introduction
This version installs important Check Point product and Gaia Operating System updates on computers and
appliances running R77.10 Multi-Domain Server, Security Management Server, or Security Gateways.
Please read this document before installing. This document has general data and requirements, installation,
and upgrade instructions for Gaia only. To install or upgrade on other platforms, see the Appendix to R77.10
Release Notes (http://supportcontent.checkpoint.com/documentation_download?ID=30993).
Review the Known Limitations (http://supportcontent.checkpoint.com/solutions?id=sk97619) before you
begin installation.

Important Note!
Effective 13 April 2014, the Gaia images for fresh installation and upgrade have been replaced, resolving
sk98933 (http://supportcontent.checkpoint.com/solutions?id=sk98933). When you install the new images of
Gaia, the hotfixes of that SK are installed automatically on top of the R77.10 installation.

What's New in R77.10

R77.10 delivers resolved issues (http://supportcontent.checkpoint.com/solutions?id=sk97620), consolidating
R77 and R75.47 with additional support for existing features:
• Gaia OS improved with resolved issues.
• Mobile Access support for IPv6, VSX, Push Notifications, Remote Wipe, and more. See sk98234
(http://supportcontent.checkpoint.com/solutions?id=sk98234).
• Integrated Appliance Hardware Diagnostic Tool. See sk97251
(http://supportcontent.checkpoint.com/solutions?id=sk97251).
• QoS support for SecureXL and CoreXL is included and disabled by default. See sk98229
(http://supportcontent.checkpoint.com/solutions?id=sk98229).
• Routing stability fixes and enhancements. See sk98226
(http://supportcontent.checkpoint.com/solutions?id=sk98226).
• Acceleration enhancements. See sk98230
(http://supportcontent.checkpoint.com/solutions?id=sk98230).
• VPN enhancements. See sk97746 (http://supportcontent.checkpoint.com/solutions?id=sk97746).

R77.10 Release Notes | 5

 Supported Upgrade Paths

Supported Upgrade Paths

You can install this release on supported appliances and open servers as a new installation. See the R77
Release Notes (http://supportcontent.checkpoint.com/documentation_download?ID=24827) for platform
details.
You can upgrade from these releases to R77.10:
Version Upgrade Path

R76, R77 Install the appropriate upgrade package.

See Gaia Installation and Upgrade Packages (on page 10).
For other platforms, see the Appendix to R77.10 Release Notes
(http://supportcontent.checkpoint.com/documentation_download?ID=
30993).

R75.40, R75.45, R75.46, R75.47, • For Gaia, install the appropriate upgrade package
R75.40VS
• Other Platforms: upgrade first to R77
R75, R75.10, R75.20, R75.30 Upgrade first to R77.

R70.40, R70.50, R71.50 Advanced Upgrade

See R77 Installation and Upgrade Guide
(http://supportcontent.checkpoint.com/documentation_download?ID=
24831).

R71 - R71.45 Upgrade first to R71.50.

R70 - R70.30 Upgrade first to R70.50.

Compatibility with Gateways

If you choose to install R77.10 Security Management Server only, you can manage gateways of these
versions:
Release Version

Security Gateway NGX R65

R70, R70.1, R70.20, R70.30, R70.40, R70.50
R71, R71.10, R71.20, R71.30, R71.40, R71.50
R75, R75.10, R75.20, R75.30, R75.40, R75.45, R75.40VS, R75.46, R75.47,
R76, R77, R77.10

Security Gateway 80 R71.45, R75.20.x

1100 Appliance R75.20.x

UTM-1 Edge 7.5.x and higher

61000/41000 Security 61000 R75.035, 61000 R75.05x

System R75.40VS for 61000, R76SP

VSX VSX R65, VSX R65.10, VSX R65.20, VSX R67, VSX R67.10, R75.40VS, R76,
R77, R77.10

Other gateways DLP-1: R71 and higher, IPS-1: R71

Connectra Centrally Managed: NGX R66
GX 4.0, 5.0

R77.10 Release Notes | 6

 Build Numbers

Compatibility with Management Servers

If you choose to install R77.10 Security Gateway only, you can manage the new gateways with these
versions of the Security Management Server or Multi-Domain Server:
Version Notes

R77 Some Resolved Issues on the server may not be applied to the new R77.10 Security
Gateways.

R76 Install the Hotfix and SmartConsole as instructed in sk97626

(http://supportcontent.checkpoint.com/solutions?id=sk97626).

Newly Supported Platforms

R77.10 supports all operating systems, platforms, and client systems described in R77 Release Notes.
R77.10 adds new supported platforms.
Platform/Version Impacted Component

Windows 8.1, 32-bit and 64-bit SmartConsole, Mobile Access client features

Windows Server 2012 R2 SmartConsole, Active Directory for AD Query, Identity Agent for
Terminal Servers

Windows 7, SP1 All installations and upgrades supported for Windows 7

Red Hat Enterprise Linux 5.9 All installations and upgrades supported for Linux

Internet Explorer 11 Mobile Access client features

ESX 5.5, ESX 5.1 The Security Gateway R77.10 ISO image can be used on ESX
as Security Gateway Virtual Edition in Network Mode.

Build Numbers
This table contains the R77.10 software products updated in this release and their build numbers. To
confirm installation, run the version command for each product.
Software Blade / Product Build No. Version Command

Security Gateway Build 243 fw ver -k

Security Management Build 037 fwm ver

Multi-Domain Security Build 159 fwm mds ver

Management

You must install an upgraded SmartConsole after you install the management server and gateways.

Console Build No. Version Command

SmartConsole 990150213 Help > About Check Point <Application Name>

Applications

R77.10 Release Notes | 7

 Installation and Upgrade

Installation and Upgrade

For platforms other than Gaia, see the Appendix to R77.10 Release Notes
(http://supportcontent.checkpoint.com/documentation_download?ID=30993).
To install or upgrade to VSX, follow the instructions in sk97552
(http://supportcontent.checkpoint.com/solutions?id=sk97552).

Before You Upgrade!

• Back up your system before installing this release package. Save a manually created image before you
install.
• R77.10 supports Full Connectivity Upgrade from R77 up to R77.10. To learn more, see the R77
Installation and Upgrade Guide
(http://supportcontent.checkpoint.com/documentation_download?ID=24831).
• If you upgrade from R77 or later, and manually configured a Mobile Access-enabled gateway, use the
important pre-upgrade instructions in sk98213
(http://supportcontent.checkpoint.com/solutions?id=sk98213).
• If you are installing or upgrading to R77.10 on a 21700, 21600, or 13500 appliance, you must update the
LOM firmware. Go to sk98788 (http://supportcontent.checkpoint.com/solutions?id=sk98788) for more
information.

Required Disk Space on Gaia

In R77.10, free disk space is verified before installation.
To make sure you have enough space, delete the downloaded TGZ after extracting.
Note: Upgrades (CPUSE) upgrade has the lowest requirements and is recommended when possible.

Component Clean Install Upgrade from R77 Upgrade from R76

Upgrade with CPUSE /var/log - 700 MB

/opt - 600 MB

Security Management root - 4 GB root - 3 GB root - 2 GB

Server or Standalone /var/log - 250 MB /var/log - 350 MB /var/log - 2.5 GB
using legacy upgrade

Security Gateway using root - 3.5 GB root - 3 GB root - 2 GB

legacy upgrade /var/log - 250 MB /var/log - 350 MB /var/log - 2.5 GB

Required Disk Space for Multi-Domain Security Management:

Before you run a clean install of R77.10 on Multi-Domain Servers, make sure that at least 10GB of free disk
space in the root partition is available. For an environment with many Domain Management Servers, more
than 10GB of free disk space is often required.

R77.10 Release Notes | 8

 Installation and Upgrade

Recommended Upgrade: CPUSE

To upgrade or install on Gaia, we recommend CPUSE. Select the appropriate package from the WebUI.

Install / Procedure Package Name

Upgrade
Install / Upgrades (CPUSE) > Status R77.10 Fresh Install and Upgrade
Upgrade from and Actions > Full Images
R76, R75.4X,
R75.40VS

Upgrade from Upgrades (CPUSE) > Status R77.10 Gaia Software Updates Package
R77, R77.10 and Actions > Updates

These appliances do not support install or upgrade using CPUSE:

• UTM-1 130, UTM-1 270, IP Appliances
• An appliance deployed as secondary management server
For more information, see sk92449 (http://supportcontent.checkpoint.com/solutions?id=sk92449).

Upgrading with Legacy CLI

To install on Gaia with the CLI, or to upgrade from R76 or R75.4x using legacy packages, see the R77
Installation and Upgrade Guide
(http://supportcontent.checkpoint.com/documentation_download?ID=24831).
Important - Before installing on Multi-Domain Security Management, run mdsenv and then mdsstop.
If this is not done, the system will experience functionality issues.
We recommend that you back up the system before installation: mds_backup

To upgrade from R77 or R77.10 with CLI:

1. Log on to the target machine.
2. Create a temporary directory in the /var partition.
3. Copy the upgrade package to the temporary directory using SFTP, SCP, or similar secure utility.
4. Go to the temporary directory and extract the .tgz package: gtar -zxvf <file name>
5. Start the upgrade. from the /var partition, run ./UnixInstallScript
Note: You must run this command from the /var partition.
6. Do the instructions on the screen to install the applicable components.
Only components required for a specific target (management or gateway) are installed automatically.
When the installation finishes, each successfully installed component appears in a list followed by:
Succeeded.
7. When prompted, reboot.
Note: In a cluster environment, make sure to upgrade all the cluster members.

Installing SmartConsole
Install the management SmartConsole after you install or upgrade Security Management Server or Multi-
Domain Server.

To manually install the SmartConsole:

1. Download R77.10 SmartConsole for Windows:
Check_Point_SmartConsole_and_SmartDomain_Manager_R77.10_T131_B990150213_Windo
ws.exe

R77.10 Release Notes | 9

 Installation and Upgrade

Important - This file was replaced on 2 March, 2014. If you have an older EXE file, download the
new one (http://supportcontent.checkpoint.com/file_download?id=30782). Use Windows Add
Remove Programs to uninstall the first SmartConsole and SmartDomain Manager.

2. Double-click the file to install the SmartConsole.

Post-Installation Configuration
After R77.10 is installed, including the SmartConsole, configure the environment to recognize the new
version.

To update the SmartConsole with the correct version of the R77.10 gateway:
1. Open SmartDashboard.
2. Log in to the R77.10 Security Management Server that controls the R77.10 gateways.
3. Open the gateway object General Properties window.
4. Click Get.
5. Install the security policy on new gateways and servers.
6. Install the database on the Security Management Server.

Uninstalling
You can uninstall only if the R77.10 was an upgrade from R77.
If you installed with CPUSE, you must uninstall with CPUSE.

To uninstall R77.10 from Security Management Server:

On each Security Management Server and dedicated Domain Log Server, run:
/opt/CPUninstall/R77.10/UnixUninstallScript

To uninstall R77.10 from Security Gateway:

Run: /opt/CPUninstall/R77.10/UnixUninstallScript

To uninstall R77.10 in Multi-Domain Security Management environments:

1. Disable R77.10 from each Domain Management Server:
a) Login to the SmartDomain Manager.
b) In Versions & Blades Updates, right click and select Deactivate.
2. Run this command on each Multi-Domain Server, Domain Log Server and Multi-Domain Log Server:
/opt/CPUninstall/R77.10/UnixUninstallScript
3. Activate Software Blades that were active before the upgrade to R77.10.

Note: After you uninstall, the Login prompt and the WebUI Welcome screen still show "Check Point Gaia
R77.10".

R77.10 Release Notes | 10

 Installation and Upgrade

Installation and Upgrade Packages

If you choose to install manually, to not use CPUSE ("Recommended Upgrade: CPUSE" on page 8):
1. Download the appropriate legacy package from the Check Point Support Center.
2. Use the R77 Installation and Upgrade Guide
(http://supportcontent.checkpoint.com/documentation_download?ID=24831) to upgrade from R76.
Use the instructions here to upgrade from R77.

Gaia Packages:
Package Clean Install of Upgrade Upgrade from
R77.10 from R77 R76, R75.4X,
R75.40VS
Check_Point_R77.10_T151_Install_and_Upgr from CLI from CLI
ade.Gaia.iso

Check_Point_R77.10_T152.Gaia.tgz from CLI,

SmartUpdate

Check_Point_R77.10_T151_upg_WEBUI_SmartU from WebUI,

pdate.Gaia.tgz SmartUpdate

Note: You cannot use the Check_Point_R77.10_152.Gaia.tgz to upgrade from another operating
system to Gaia. You can use the other packages to upgrade to Gaia R77.10.

R77.10 Release Notes | 11