HP Switch Services Modules - HP SECBLADEII-CMW520-R3175 Release Notes Release Notes

5
HSD110063
 Symptom: When configuration synchronization is enabled between active and
standby firewalls, a change to the type of a physical port on the active firewall cannot
be synchronized to the standby firewall in real-time backup state.
 Condition: This symptom occurs when configuration synchronization is enabled
between active and standby firewalls.
 Workaround: Manually change the physical port type on the active and standby
devices.
HSD100621
 Symptom: If an attack protection policy that is configured at the CLI is removed in the
Web interface, the policy still takes effect after the device is rebooted.
 Condition: This symptom occurs if an attack protection policy that is configured at the
CLI is removed in the Web interface.
 Workaround: Delete the attack defence policy at the CLI.
HSD113033
 Symptom: If a regular expression is used to view a configuration file that exceeds 100
KB (for example, use the display current-configuration | include .*.*.*/. command), the
device might reboot.
 Condition: This symptom might occur if a regular expression is used to view a
configuration file that exceeds 100 KB (for example, use the display
current-configuration | include .*.*.*/. command).
 Workaround: Avoid using a regular expression. If you need to use it, do not use "*" that
matches any character.
TCD003105
 Symptom: If you shut down the stateful failover link and switch traffic from the active
firewall to the standby firewall, the standby firewall independently creates and deletes
sessions.
 Condition: This symptom occurs if you shut down the stateful failover link and switch
traffic from the active firewall to the standby firewall.
 Workaround: Do not perform both shutdown and traffic switchover operations.
HSD113409
 Symptom: In a stateful failover scenario, the active firewall might reboot or work
abnormally when more than two million sessions exist.
 Condition: This symptom might occur in a stateful failover scenario when the following
conditions exist:
 The internal 10 GE interface is used as the HA interface.
 Userlog is enabled.
 More than 2 million sessions exist.
 Workaround: Do not use the internal 10 GE interface as the HA interface when userlog
is enabled and more than two million sessions exist.