Action required: Apply the fix for SNS firewall disks.
Please follow the procedure described in the How to update my SSD Firmware - Stormshield Knowledge Base article (authentication required).
Version 4.3.12 bug fixes
SNMP agent - MIB and traps
Support reference 78102
To keep up to date with the recommendations in RFC2578, and to resolve a compatibility issue with some monitoring applications, all SNMP tables in which the first index was set to 0 have been duplicated to new tables in which the first index is set to 1.
Older SNMP tables (index beginning with 0) will still be used by default, but are tagged as obsolete and will be phased out in a future SNS version.
To activate the new SNMP tables (index beginning with 1) on the firewall, you must:
- Connect to the firewall in SSH/Console mode (admin or administrator account with Console [SSH] permissions),
- Edit the section [Config] in the ConfigFiles/snmp configuration file and set the configuration token IndexStartAt1 to "1",
- Run the SNMP agent using the command ensnmp.
IPsec tunnel monitoring
The module that monitors the encapsulation of IPsec tunnels in UDP has been fixed and no longer wrongly indicates encapsulation as disabled all the time.
When tasks are not run in the right sequence during the firewall startup phase, issues may occur when loading certain services such as IPsec or sandboxing. This issue has been fixed.