R82 Jumbo Hotfix Take 10
Jumbo Hotfix Accumulator for R82
R82 Jumbo Hotfix Take 10
| Download Jumbo Hotfix Accumulator Takes | Download Previous Recommended Takes |
Download CSV
| ID | Product | Description |
|---|---|---|
| Take 10 Released on 27 January 2025 |
||
| Take 10 - New Functionality | ||
| PRJ-57908, PRHF-32290 |
Identity Awareness | NEW: Added new OID (1.3.6.1.4.1.2620.1.38.55) to monitor the Identity Collector connection status in the $CPDIR/lib/snmp/chkpnt.mib file. - This capability is supported for Identity Collector agents running with version R82.120.0000 or higher. |
| Take 10 - Improvements and Resolved Issues | ||
| PRJ-56747, PMTR-106894 |
SmartConsole | UPDATE: Resolved CVE-2024-3596 - Blast-RADIUS attacks. Fix for Remote Access VPN and login to SmartConsole, Mobile Access and Identity Awareness Captive Portal. Refer to sk182516. |
| PRJ-58281, PMTR-97400 |
Security Gateway | UPDATE: Deprecated RC2-CBC cipher for SIC in OpenSSL. |
| PRJ-57491, PMTR-108994 |
Security Management | UPDATE: The Management API command " set-https-rule" now automatically sets the negative value to " false" when modifying the destination, source, service, or site-category fields, regardless of its previous setting. |
| PRJ-57066, PRHF-34509 |
SecureXL | UPDATE: - Improved debugging in the Security Gateway to identify problematic hosts when resolving their next-hop IP addresses. - The custom ADP queue size configuration now persists after rebooting the Security Gateway. The relevant global parameters are located in the $PPKDIR/conf/adpkern.conf file: - " adp_nh_total_max_arp_qents" - " adp_nh_local_max_arp_qents" |
| PRJ-58125, PMTR-106186 |
Scalable Platforms | UPDATE: Added support for Multicast Listener Discovery (MLD) on Maestro Hyperscale Orchestrator (MHO). |
| PRJ-57074, PRHF-35818 |
Security Management | In rare scenarios, when exporting policy hitcounts to CSV format, the "Hitcount" column may appear blank in the exported file. |
| PRJ-58104, PRHF-32246 |
Security Management | Audit logs may not be generated when changes are made to an inline (shared) layer that appears multiple times within the same policy. |
| PRJ-57319, PRHF-25950 |
Security Management | The Database Installation progress bar may not update during task execution. |
| PRJ-59004, PMTR-111056 |
Security Management | When editing the administrator expiration date, after publishing, the expiration date resets to "Never". Refer to sk182997. |
| PRJ-56542, PRHF-34752 |
Multi-Domain Security Management | In some scenarios, in a Multi-Domain Security Management environment, the Hit Count retention mechanism may not remove the Hit Count data from all the Domains. |
| PRJ-56532, PRHF-35418 |
Multi-Domain Security Management | The Multi-Domain Security Management Server experiences high CPU usage when communicating with the Multi-Domain Log Server. And the cpm.elg log prints the " You have reached the maximum number of active session" error. Refer to sk182738. |
| PRJ-57531, PRHF-36514 |
Multi-Domain Security Management | In rare scenarios, in Multi-Domain Security Management environments, login to SmartConsole fails. |
| PRJ-57310, MCFG-666 |
SmartConsole | SmartConsole fails to connect with " Unable to connect to server. Server is initializing". Refer to sk182507. |
| PRJ-57273, PMTR-108672 |
SmartConsole | When the Security Management has an additional NAT configuration in the SD-WAN policy (Infinity Portal), an indicating banner may not appear in SmartConsole NAT Rule Base. This is a cosmetic issue. - Requires R82 SmartConsole Build 1051 or higher. |
| PRJ-58050, PMTR-109735 |
Security Gateway | In a rare scenario, the FWK process may exit when processing traffic over QUIC protocol. |
| PRJ-58659, PMTR-110556 |
Security Gateway | In a rare scenario, the FWK process may exit due to a race condition. |
| PRJ-56911, PRJ-56840, PRHF-33037, PRHF-35918 |
Security Gateway | The Security Gateway may crash after a failure in policy installation. |
| PRJ-56702, PRHF-35624 |
Security Gateway | Anti-Spoofing may drop IPv6 traffic that arrives at an interface with an IPv6 address configured. Refer to sk182725. |
| PRJ-57844, PMTR-109616 |
Security Gateway | In a rare scenario, when multiple Elephant Flows are running in parallel in the accelerated pipelining path, there may be high CPU utilization. Refer to sk183007. |
| PRJ-58100, PMTR-109857 |
Security Gateway | Traffic through specific interfaces is dropped when the QoS Software Blade is active and " ISP redundancy-LS" is configured. Refer to sk182807. |
| PRJ-57109, PRHF-36116 |
Security Gateway | Memory leak may occur in SecureXL templates. Refer to sk182648. |
| PRJ-57895, PMTR-108660 |
Security Gateway | DoS protection and connection rate limiting configurations may fail to effectively enforce rules. |
| PRJ-57098, PMTR-108273 |
SD-WAN | In a rare scenario, when SD-WAN transport is incorrectly marked as "UP" despite its underlying ISP interface is "DOWN", traffic fails to reach the remote peer because of incorrect routing decisions. |
| PRJ-58021, PMTR-109729 |
Threat Prevention | In a VSX environment, enabling Threat Prevention Software Blades may cause continuous file accumulation on the Security Gateway's hard drive. |
| PRJ-57007, PRHF-35823 |
Threat Prevention | In some scenarios, when Zero Phishing is enabled, kernel crash may occur. |
| PRJ-57926, PMTR-109709 |
Identity Awareness | Identity Broker Subscriber configured with recalculation of Access Roles does not match all Access Roles after the User and Machine are identified. |
| PRJ-56869, PRHF-35625, PRJ-56873, PRHF-35636 |
Identity Awareness | In rare scenarios: - The PDPD process may become unresponsive during termination. - PDP to PEP Identity synchronization fails on the PEP side when Identity Sharing is configured with PUSH Identity Sharing. Refer to sk182613. |
| PRJ-57046, PRHF-36045 |
Identity Awareness | In a rare scenario, the PDPD process may unexpectedly exit during policy installation. |
| PRJ-57411, PMTR-108321 |
SSL Inspection | The Trusted CA package update fails when the Security Management Server connects to the Internet only through a Proxy Server. |
| PRJ-57682, PRHF-36561 |
SecureXL | A memory leak may occur in the SIM process when using DOS/Rate Limiting rules. |
| PRJ-58592, PMTR-110486 |
SecureXL | When working with SecureXL in User mode (UPPAK), some CPUs may reach 100% utilization when enabling or disabling debug filters. |
| PRJ-57801, PMTR-109570 |
SecureXL | Policy installation failures can disrupt the expected behavior of " fwaccel dos" commands. |
| PRJ-57558, PRHF-34632 |
VPN | SSL Network Extender (SNX) traffic on Maestro may be dropped with " vpnk_tcpt invalid negative tunnel id". Refer to sk182806. |
| PRJ-56335, PRHF-35251 |
VPN | An ECDH object may be deleted before its associated event is completed processing. |
| PRJ-57901, PMTR-109649 |
VPN | After a cluster failover, VPN tunnels may be not stable. |
| PRJ-56499, PRHF-35416 |
VPN | There is no audio during the first 5 seconds of each VoIP call. Refer to sk182730. |
| PRJ-57825, PRHF-17665 |
VSX | Multi-Queue configuration does not survive reboot on VSX. Refer to sk173950. |
| PRJ-56915, PRHF-35806 |
VSX | In SmartConsole, in the Device and License Information view, the Compliance Software Blade license status may incorrectly display " Quota Exceeded" when Virtual Routers or Virtual Switches are present. |
| PRJ-57059, PRHF-34508 |
VSX | After a Jumbo Hotfix upgrade, the Mail Transfer Agent may fail on all Virtual Systems except one. |
22 July 2026