Check_Point_R80.30_Gaia_3.10_T273新特性

Posted 2022-09-18

Check_Point_R80.30_Gaia_3.10_T273

Solution
Table of Contents:
? Introduction介绍
? What‘s New新的改变
? Supported Platforms支持的平台
? Downloads下载
? Known Limitations已知的局限性
? Documentation文档
Introduction
R80.30, part of the Check Point Infinity architecture, delivers the most innovative and effective security that keeps our customers protected against large scale, fifth generation cyber threats.
R80.30，check point 无限架构的一部分，提供最创新和有效的安全，保护我们的客户免受大规模，第五代网络威胁。
This release introduces R80.30 3.10 for Security Gateway and VSX, with major enhancements in firewall resiliency and Clustering mechanism.
这个版本为安全网关和VSX引入了R80.30 3.10，主要增强了防火墙的弹性和集群机制。
This release is considered as a Main Train release, however it is not part of the Check Point R80.30 Release and requires a dedicated image. Note it can be managed by a Check Point R80.30 Security Management Server, which already supports the 3.10 kernel.
这个版本被认为是一个主要的实验版本，但是它不是check point R80.30版本的一部分，并且需要一个专用的映像。注意，它可以由check point R80.30安全管理服务器管理，该服务器已经支持3.10内核。

Starting August 2019 this release will be supported by a Jumbo Hotfix Accumulator release for both R80.30 3.10 and standard R80.30 versions.
从2019年8月开始，R80.30 3.10和标准R80.30版本都将支持大型热修复累加器版本。

R80.30 3.10 can be managed by the following Security Management Server releases:
R80.30 3.10可以通过以下安全管理服务器版本来管理:
? R80.30
? R80.20 with a supported Jumbo Hotfix Accumulator
? R80.10 with a supported Jumbo Hotfix Accumulator (will be available soon)
Contact Check Point Support to obtain a special Hotfix for R80.10 and R80.20 based on your current Jumbo Hotfix Take.

What‘s New
? Improved firewall resiliency提高防火墙弹性
? Support for IPv6 (resolving R80.20 3.10 limitations)
? Support for Dynamic CLI - Enhancing Gaia Clish with new Expert mode commands.
? 支持动态CLI增强Gaia Clish与新的专家模式命令。
? See sk144112.
? Clustering and VSX capabilities: 集群和VSX功能:
o Unicast support for Cluster Control Protocol eliminating the need for CCP using Broadcast or Multicast modes
o 对集群控制协议的单播支持，消除了使用广播或组播模式的CCP需求
o MAC magic configuration is no longer needed不再需要mac magic配置
o CCP encryption is enables by default缺省情况下启用ccp加密
? New kernel capabilities: 新的内核功能:
o Upgraded Linux kernel升级的Linux内核
o New partitioning system (gpt): 新的分区系统
? Supports more than 2TB physical/logical drives
? 支持超过 2 TB 物理/逻辑驱动器
o Faster file system (xfs)更快的文件系统
o Supporting larger system storage (up to 48TB tested) 支持更大的系统存储
o I/O related performance improvements I/O相关的性能改进
o Multi-Queue (see sk153373):
? Full Gaia Clish support for Multi-Queue commands
? Automatic "on by default" configuration
o SMB v2/3 mount support in Mobile Access blade
o Added NFSv4 (client) support (NFS v4.2 is the default NFS version used)
o Support of new system tools for debugging, monitoring and configuring the system: 支持新系统工具，以进行系统的调试、监察及配置:
? iotop (provides I/O runtime stats)
? lshw (provides detailed information about all HW)
? lsusb (provides information about all devices connected to USB)
? lsscsi (provides information about storage)
? ps (new version, more counters)
? psmisc (new version, more counters)
? top (new version, more counters)
? iostat (new version, more counters
? New glibc: glibc-2.17-157
? New ethtool: ethtool-4.8-7
? New Bash: bash-4.2.46-29
? lbzip2 support (free, multi-threaded compression utility)
? xz support
? rsync support

Supported Platforms 支持的平台
? Check Point 16000 and 26000 series
? CloudGuard:
o VMWare
o KVM
o Hyper-V
o AHV
? Open Servers:支持的服务器平台
o HP DL380 Gen10
o HP DL360 Gen10
o HP DL380 Gen9
o HP DL360 Gen9
o Dell PowerEdge R740/R740 XD
o Dell PowerEdge R640
o Dell PowerEdge R330
o Lenovo ThinkSystem SR650