TMS zl Module Release Notes ST.1.1.100330

Known Issues

Release ST.1.0.090603

Firewall

■ PR_15088 — A stateful firewall connection using a DNS object will have a high timeout

value when the DNS address object is modified while the connection is active. Using the

show connections command from the TMS zl Module CLI will show a high timeout value. For

these connections, the no connections command can be used to remove any problematic

sessions.

■ PR_38165 — When editing a connection reservation, the direction can't be modified.

Example:

1. Go to Firewall>Settings>Connection Allocations page.

2. Add a connection reservation. For example:

Zone INTERNAL, direction = inbound, 10.10.40.1, Reservation count = 3

3. Edit the connection reservation added in step 2 and change the direction to outbound.

4. Refresh the Connection allocation page. The direction remains after refreshing the page.

The connection allocation must be deleted and recreated to change the direction.

■ PR_39730 — Using the Authenticated Firewall feature, the TMS zl Module could experience

an httpd crash on malformed RADIUS packets coming from the trusted RADIUS server on

the internal network.

■ PR_40534 — An error message is displayed after applying changes on an attack settings

page. This occurs if the user enables the option Sequence Number Out of range and sets the

ranges with low values, then refreshes the page and clicks the Apply My changes button. The

page loads slowly and the problem appears to be due to clicking the Apply My changes button

while the page is loading.

Example:

1. Go to Firewall -> Settings -> Attack Settings page

2. Select the option Sequence Number Out of range

3. Set as Range and RST Range the value 10 and check the Drop packets outside the range.

4. Click Apply My Changes button

5. Refresh the page

6. Immediately click again the Apply My Changes button

You now see the error message.

■ PR_40663 — Log entries from the ping-of-death and jolt attacks are missing source and

destination zone information. However, the IP addresses are reported.