SNS 3.11.22 LTSB bug fixes

System

Proxies

Support references 84517 - 84824 - 84826 - 84868 - 84877 - 84879

The analysis of a self-signed certificate without a "Subject" field in traffic that matches an SSL decryption rule will no longer cause the proxy to hang.

Support reference 84899

An issue that could cause the SSL proxy to shut down unexpectedly on a firewall managing high traffic has been fixed.

High availability

Support reference 84711

Changes have been made to enhance the stability of the active member of a high availability firewall cluster.

GRE tunnels

Support reference 75479

During advanced troubleshooting, packets captured via tcpdump over GRE interfaces were malformed. This issue has been fixed.

GRE interfaces

Support reference 84625

In configurations that use GRE interfaces when non-IP packets are present, memory leak issues would sometimes cause network traffic to freeze unexpectedly, which would then require the firewall to be restarted. This issue has been fixed.

SSL VPN portal

As the signature of the Java applet used for the SSL VPN portal is close to expiry, users will see a warning message after the signature expires. This applet's signature has been renewed and the applet will be automatically updated when the firewall is updated to SNS version 3.11.22 LTSB.