New features and enhancements in SNS 4.3.11

Blackhole interface

Blackhole virtual interfaces can now be selected during the creation of a static route that aims to destroy a specific stream of traffic. Among other uses, this mechanism can be used in a configuration that contains IPsec tunnels - when a tunnel is down, packets that were meant for it will therefore be destroyed instead of being redirected to the firewall's default gateway.