Check_Point_R80.30_Gaia_3.10_T

Check_Point_R80.30_Gaia_3.10_T273

Solution
Table of Contents:
? Introduction介紹
? What's New新的改變
? Supported Platforms支持的平臺
? Downloads下載
? Known Limitations已知的局限性
? Documentation文檔
Introduction
R80.30, part of the Check Point Infinity architecture, delivers the most innovative and effective security that keeps our customers protected against large scale, fifth generation cyber threats.
R80.30，check point 無限架構的一部分，提供最創新和有效的安全，保護我們的客戶免受大規模，第五代網絡威脅。
This release introduces R80.30 3.10 for Security Gateway and VSX, with major enhancements in firewall resiliency and Clustering mechanism.
這個版本為安全網關和VSX引入了R80.30 3.10，主要增強了防火墻的彈性和集群機制。
This release is considered as a Main Train release, however it is not part of the Check Point R80.30 Release and requires a dedicated image. Note it can be managed by a Check Point R80.30 Security Management Server, which already supports the 3.10 kernel.
這個版本被認為是一個主要的實驗版本，但是它不是check point R80.30版本的一部分，并且需要一個專用的映像。注意，它可以由check point R80.30安全管理服務器管理，該服務器已經支持3.10內核。

Starting August 2019 this release will be supported by a Jumbo Hotfix Accumulator release for both R80.30 3.10 and standard R80.30 versions.
從2019年8月開始，R80.30 3.10和標準R80.30版本都將支持大型熱修復累加器版本。

R80.30 3.10 can be managed by the following Security Management Server releases:
R80.30 3.10可以通過以下安全管理服務器版本來管理:
? R80.30
? R80.20 with a supported Jumbo Hotfix Accumulator
? R80.10 with a supported Jumbo Hotfix Accumulator (will be available soon)
Contact Check Point Support to obtain a special Hotfix for R80.10 and R80.20 based on your current Jumbo Hotfix Take.

What's New
? Improved firewall resiliency提高防火墻彈性
? Support for IPv6 (resolving R80.20 3.10 limitations)
? Support for Dynamic CLI - Enhancing Gaia Clish with new Expert mode commands.
? 支持動態CLI增強Gaia Clish與新的專家模式命令。
? See sk144112.
? Clustering and VSX capabilities: 集群和VSX功能:
o Unicast support for Cluster Control Protocol eliminating the need for CCP using Broadcast or Multicast modes
o 對集群控制協議的單播支持，消除了使用廣播或組播模式的CCP需求
o MAC magic configuration is no longer needed不再需要mac magic配置
o CCP encryption is enables by default缺省情況下啟用ccp加密
? New kernel capabilities: 新的內核功能:
o Upgraded Linux kernel升級的Linux內核
o New partitioning system (gpt): 新的分區系統
? Supports more than 2TB physical/logical drives
? 支持超過 2 TB 物理/邏輯驅動器
o Faster file system (xfs)更快的文件系統
o Supporting larger system storage (up to 48TB tested) 支持更大的系統存儲
o I/O related performance improvements I/O相關的性能改進
o Multi-Queue (see sk153373):
? Full Gaia Clish support for Multi-Queue commands
? Automatic "on by default" configuration
o SMB v2/3 mount support in Mobile Access blade
o Added NFSv4 (client) support (NFS v4.2 is the default NFS version used)
o Support of new system tools for debugging, monitoring and configuring the system: 支持新系統工具，以進行系統的調試、監察及配置:
? iotop (provides I/O runtime stats)
? lshw (provides detailed information about all HW)
? lsusb (provides information about all devices connected to USB)
? lsscsi (provides information about storage)
? ps (new version, more counters)
? psmisc (new version, more counters)
? top (new version, more counters)
? iostat (new version, more counters
? New glibc: glibc-2.17-157
? New ethtool: ethtool-4.8-7
? New Bash: bash-4.2.46-29
? lbzip2 support (free, multi-threaded compression utility)
? xz support
? rsync support

Supported Platforms 支持的平臺
? Check Point 16000 and 26000 series
? CloudGuard:
o VMWare
o KVM
o Hyper-V
o AHV
? Open Servers:支持的服務器平臺
o HP DL380 Gen10
o HP DL360 Gen10
o HP DL380 Gen9
o HP DL360 Gen9
o Dell PowerEdge R740/R740 XD
o Dell PowerEdge R640
o Dell PowerEdge R330
o Lenovo ThinkSystem SR650