TMS zl Module Release Notes ST.1.2.100916
Table Of Contents
- Release Notes: Version ST.1.2.100916 Software for the HP ProCurve Threat Management Services zl Module
- Contents
- Software Management
- Download Documentation from the Web
- Software Updates
- Special Considerations Prior to Updating
- Clarifications
- Enhancements
- Enhancements in ST.1.2.100916
- ST.1.1.100430
- ST.1.1.100226
- Command Line Interface (CLI) control of VPN functionality
- RADIUS authentication for management logins
- RADIUS authentication for L2TP users
- Renaming zones
- 256 VLANs now supported, increased from 19 VLANs
- Enhanced sort and filter capabilities for displaying log files
- Improved SNMP Monitoring for network traffic and key system resources
- Software Fixes in Releases ST.1.0.090213 - ST.1.2.100916
- Known Issues
42
Known Issues
Release ST.1.2.100916
ICMP Error Message. ICMPMessage Type 3 and Code 1 are not
allowedseverity: infoid: configdst: 10.1.10.10proto: ICMPicmptype:
3adminname: sipsubfamid: ipsecv4payloadprocessingmtype: ipsecv6mid:
306569icmpcode: 1
■ PR_60506 — An erroneous log message displayed showing application connect failed but
with no details.
Example:
2010-08-03 17:36:52 minor Application connect failed (I) date:
2010-08-03 time: 17:36:52 msg: Application connect failed (I)
severity: minor id: system mid: 0
■ PR_60494 — Under certain rare conditions, when a user tries to delete a RADIUS server via
the Web browser interface or Command Line Interface, an incorrect error message will be
displayed indicating: could not delete RADIUS authentication server. However,
once OK is clicked on the Web browser interface or 'show radius server is executed on the
CLI, the RADIUS server was deleted successfully.
Firewall
(No known issues.)
Monitor Mode
■ PR_59483 — When in Monitor Mode, changes to the management interface issues a log
message that does not include a unique mid (mid is 0) and a field for the user name.
■ PR_59484 — When in Monitor mode, changes in management VLAN issues a log message
that does not include unique mid (mid is 0) and a field for the user name
■ PR_60441 — Monitor mode log displays ALG and incorrectly detects FTP traffic as Winnuke
in log messages.
Example:
2010-08-02 17:27:00 minor NON-ALG traffic, Possible WinNuke attack
detected, packets dropped date: 2010-08-02 time: 17:27:00 msg:
NON-ALG traffic, Possible WinNuke attack detected, packets dropped
severity: minor id: fw_l2l3_attack srczone: INTERNAL src:
192.168.4.15 srcport: 56901 dstzone: INTERNAL dst: 192.168.3.249
dstport: 21 proto: TCP subfamid: dosattack mtype: attack mid: 681