Release Notes

Version 5.2.0.2 Sourcefire 3D System Release Notes 24
Issues Resolved in Version 5.2.0.2
• Resolved an issue where reports generated graphs and charts without
labels for portscan events. (110828)
• The audit log (System > Monitoring > Audit) now provides details about
settings that changed during edits to the system policy. (110860)
• Resolved an issue where managed devices continued to store user data
purged from their managing Defense Center. (111234)
• Resolved a display issue on the intrusion policy comparison page. (111350)
• Improved accuracy of intrusion policy comparison reports. (111396)
• Resolved an issue where, in some cases, two interfaces viewing the same
network traffic experienced issues with application detection. (111554)
• Improved performance of the TCP stream preprocessor. (111871, 120171,
122391)
• Resolved an issue where negated predefined search objects lost the
negation after the search was saved. (111912)
• Added an alert to notify users that accented characters may not display
properly in custom login banners. (111957)
• Improved performance of custom workflows based on the hosts table.
(112204)
• Optimized database queries to improve performance of the connection
events table. (112506, 117165)
• Resolved an issue where, in some cases, intrusion events generated from
reassembled traffic did not contain packet data. (112519)
• Resolved an issue where physical appliances experienced system issues
after running continuously for a minimum of 208 days. (112556, 112765,
112766)
• Improved accuracy of operating system identification in the network map.
(112843)
• Resolved an issue where, in some cases, the host profile showed inactive
ports and services as pending. (113213)
• Resolved an issue where, in rare cases, the system omitted the first line of
text from an uploaded list of security intelligence objects encoded in UTF-8.
(113578)
• Resolved an issue where the eStreamer service returned events from
before the specified start time if the event request did not contain the
FLAG_DETAIL_REQUEST flag. (113599)
• Resolved an issue where, in some cases, the system incorrectly sorted the
Status column of custom report templates created based on the health
events table. (113618)
• Improved connection tracking to identify a separate ICMP session for each
ICMP type in a packet. (113663)