SNS version 4.8.13 LTSB bug fixes

System

SSL VPN

Support reference 85904

When the listening port of the SSL VPN service is changed, a message now appears, indicating the need to restart the firewall to correctly apply the change.

Bypass mechanism - SNi20/SNi40 industrial firewalls

The bypass would no longer activate when the firewall's hardware manager was unexpectedly disrupted. This issue is now fixed. This regression appeared in SNS version 4.8.7 ?).

SMC server redundancy

Support reference 86112

When the main SMC server fails, the SNS firewall will connect to the backup server. Previously, when the main server recovered, no operations (deployment, firewall access, etc.) could be performed from it. This issue has been fixed.

List of group objects

Support reference 86221

In the object database, if the number of groups to be displayed exceeds 4096 entries, the comments that are associated with each group would not be displayed. This issue has been fixed in the web interface, and when the list of groups is exported in CSV format.

Virtual Pay As You Go (PAYG) machines

Support reference 86111

The enrollment of virtual PAYG machines now functions properly once again, and no longer wrongly displays a message indicating anyway that the enrollment was successful.

Certificate revocation list (CRL) retrieval mechanism

Support reference 86153

The CRL retrieval mechanism can once again set up its connections with a source IP address that is identified as <Firewall_interface_name>.

High availability

Support references 84970 - 85311 - 85657 - 85802

The synchronization of some files in the cluster has been improved. This prevents the inappropriate generation of error messages in the system log file when some of these files are justifiably absent.

Restoring configurations

Support reference 84995 - 85981 - 86070

The reloading of the configuration immediately after a deployment in SMC, or after a configuration has been restored, is now optimized.

Objects

Support reference 86070

In a configuration that contains a large number of objects, the list of objects would take a long time to appear in the web administration interface. The mechanism has been optimized to reduce the display time.

Disk monitoring - SNi20

Support reference 86265

The hardware monitoring module now recognizes M2 model disks that may be installed on SNi20 model firewalls, and no longer wrongly generates an alert indicating that a disk is missing.

Intrusion prevention engine

SCTP - High availability (HA)

Support reference 85372

During every HA swap, the date on which SCTP associations were established would be incremented by one second. This issue has been fixed.

Web administration interface

SSL VPN portal

Support reference 86186

Servers with a name that contains an uppercase letter are no longer wrongly shown as disabled. This regression appeared in SNS version 4.8.0.