Version 11.0

Version 11.0.10

Released: 2021-01-06

New features

• Added regular security updates

Issues fixed

• Fixed configuration consistency issues in Distributed Architecture - user settings and renamed flow source mismatches no longer appear incorrectly (7633434)
• Fixed application protocol visibility for IPv6-based traffic - L7 values now appear correctly in Flowmon Probe exports

Version 11.0.9

Released: 2020-11-30

Issues fixed

• Fixed premature TCP connection closure when receiving flows over TCP
• Improved performance of data handover between Flowmon Collector and Flowmon ADS/DDoS Defender

Version 11.0.8

Released: 2020-11-23

Issues fixed

• 7633401: CPU usage on Flowmon Probe 20000 SFP+ and Flowmon Probe 40000 SFP+ appliances has been optimized. Appliances are no longer overloaded when processing traffic at higher packet rates.

• 7632678: All 30-second and 1-minute profiles can now be edited and saved in Flowmon Monitoring Center.

• 7632827: Flowmon Collector’s listening port no longer terminates all active connections when a TLS handshake fails for only one of the connections.

• 7632352: TOP chapters based on HTTP first- and second-level domains have been fixed.

• 7633287: The migration process to Flowmon Dashboard and Reports no longer fails for user accounts with empty surnames.

• 7632428: Issues with Flowmon Probe exporting some flows with a significant time delay have been resolved.

Version 11.0.7

Released: 2020-10-12

Issues fixed

• 7632524: Reliability of the Flowmon upgrade process on Flowmon Probe 20000 Pro, Flowmon Probe 40000 Pro and Flowmon Probe 200000 Pro appliances has been improved.

• 7632833: Profiled interfaces are no longer mixed up after an SNMP update on their respective sources.

• 7632924: Missing translations now automatically fall back to English instead of displaying an unreadable message containing only an internal identifier.

• 7632827: Reliability of Flowmon Probe 200000 Pro appliances with Netcope network interface cards has been improved. Appliances no longer experience intermittent problems with network interface card initialization during the boot process.

• 7633040: Fixed an issue with displaying correct network interface speeds for sources in Flowmon Monitoring Center > Sources.

• 7633021: Issues with displaying existing widgets on Flowmon Dashboard after updating to Flowmon v11.0.6 have been fixed.

• 7632643: Issues with editing channel and profile names containing Japanese characters have been fixed.

• 7632616: User’s language preferences are now correctly handled by the web interface.

• Fixed issues with NTP time synchronization when using a single time server.

Version 11.0.6

Released: 2020-09-15

Issues fixed

• 7632613: An issue causing failed migration of some legacy widgets to Flowmon Dashboard has been resolved.

• 7631182: Propagation of the configuration of listening ports in Distributed Architecture no longer triggers

unnecessary collector restarts that negatively impact performance.

• 7632325: Input and output interface data are now correctly shown in reports.

• 7632184: Reports owned by deleted users are now automatically deleted - they no longer trigger error messages.

• 7632184: An issue causing a migration error from v10.3.9 has been resolved.

• 7627039: Reports exported to CSV no longer use “sas” and “das” as column names for “Source AS” and “Destination AS” respectively.

• 7632310: Flowmon Probe stability when handling fragmented IP traffic has been improved.

• Unprofiled sources are no longer removed if there are profiled sources present and the disk quota is changed.

• Monitoring ports on 200 GbE Probes with NetCope cards no longer refuse to start in 8x 10 GbE mode.

• Disk usage in Quota Manager no longer exceeds 100 % when Flowmon DDos Defender is installed.

Version 11.0.5

Released: 2020-08-12

New features

• Active Devices and VoIP Analysis are available for tenant users in multi-tenant setup.

Issues fixed

• 7631935: Change of hostname in the web interface has been fixed.

• 7631606: Flowmon User Guide has been updated with a warning message about multiple sender email addresses and their impact on some SMTP servers.

• 7631558: Interface identifiers in flow records when using SNMPv3 have been fixed.

• 7630868: Propagation of interfaces in profiled sources to slave units in Distributed Architecture has been fixed.

• 7630799: A CLI command for exporting custom IP names has been added.

• 7625539: Restore factory settings for Netcope 200G2Q cards has been fixed.

Version 11.0.4

Released: 2020-07-13

Issues fixed

• 7631476: Issues with update to Flowmon v11.0.3 on appliances with Myricom network cards and a system partition smaller than 5 GB have been fixed.

• 7631485: The status of listening ports with names that consist entirely of numbers is now correctly reported.

• 7631488: Issues with upgrades from Flowmon Traffic Recorder to Flowmon Packet Investigator have been resolved.

• 7631484: DNS- and TLS-related filters in Advanced Analysis have been fixed.

Version 11.0.3

Released: 2020-06-30

Issues fixed

• 7628173: Advanced analysis in FMC now works for users with a space character in their login.

• 7630901: A profile import does not fail when backup is enabled.

• 7631353: Reports migration from FMC to new Reporting now works if multiple email addresses are set in the schedule.

• 7629302: A very long rebuilding of profile tree doesn’t cause exiting of the collector process (possible resulting in a process restart loop).

• 7624474: GUI glitch no longer hides exporting targets displayed on multiple lines.

• 7630868: Syslog Event Logging settings in DA are now correctly propagated to Source Group(s).

• 7629153: SNMP configuration in DA is now correctly propagated to all units.

• 7628806: Filters on Forwarding targets are now properly validated.

• Update to Flowmon v11.0 on appliances with an OS partition smaller than 5 GB has been fixed.

Version 11.0.2

Released: 2020-06-15

Issues fixed

• Export to a .pdf file for results in FMC Analysis now works properly.

• Retransmissions index widget in Flowmon Dashboard now changes colors at breaking points to point out the severity of degradation.

• Notification about reports migration failure has been added to identify possible migration issues.

Version 11.0.1

Released: 2020-06-03

New features

• Active devices now allow the user to set a key identifier of the active device from MAC address to IP address, User ID or a combination of MAC/IP with the User ID.

• Monitoring Center - Analysis - Advanced analysis now uses dropdowns with search functionality.

• Hyper-V Generation 2 is now supported along with compatible virtual appliance images.

• Nitro-based instances in AWS are now supported.

• Configuration Center - System - A set of optional features for the underlying HTTP server to improve the security of the user interface has been added.

Issues fixed

• 7630568: Selected end time in Reports is now applied correctly.

• 7629434: An issue in TOP chapters with a network mask (source/destination) has been fixed.

• 7630459: An issue causing an error when clicking on option IP information in the list of flows has been fixed.

• 7630265: Alerts with TOP 1 condition using "less than" (<) comparator return proper values via REST API.

• 7630265: AlertType IDs information in REST API Documentation has been corrected.

• 7630256: An issue causing displaying both FPI and FTR in the license list has been fixed.

• 7630184: Configuration Center - License tab now shows “Includes the Traffic Analyzer functionality” only if FTA is licensed.

• 7629621: XML configuration import now correctly creates channels using their original names.

• 7629757: Profile and channel is not created when saving new Profile with invalid Channels taken from previously selected Parent profile.

• 7629402: Advanced flow forwarding over TCP/UDP now fills NetFlow received time field in a flow record.

• 7628246: An issue where Source and Destination Autonomous System values were not shown in Analysis when Previous and Next Autonomous System values are present has been fixed.

• 7628037: Generic error message in logs regarding the dummy channel causing confusion has been removed. It was never an actual error, but a result of generic error handling not addressing this special case correctly.

• 7626590: In case of a Standalone Slave unit failure within a Source Group in Distributed Architecture, the Primary Master unit will correctly switch over to a different Standalone Slave unit.

• 7630716: An issue with adding syslog clients has been fixed.

• 7621489: Improved log management.

Version 11.0.0

Released: 2020-04-21

New features

• Reports have been redesigned into the new UI. The reporting supports a combination of chapters from different Flowmon modules, offers better user experience and wider scheduling options. FMC Reports are migrated into the new Reports during the update procedure. Please note that any changes made after the upgrade in old FMC Reports are not synchronized. Using the new Reporting is recommended.

• The Dashboard has been renamed to Dashboard and Reports where the new Reports are available.

• FMC Dashboard has been removed and replaced with central Dashboard and Reports.

• Predefined dashboards are available when creating the new tabs on dashboard. Users can easily create Status, NetOps or SecOps and Application dashboards (depends on installed modules).

• The dashboard tab can be converted into the Report.

• Configuration templates have been improved to streamline setup processes and ensure out-of-the-box functionality of the whole solution. A gallery of available configuration templates has been added into Dashboard and Reports > Configuration.

• New widgets

• High-level widgets provide an at-a-glance overview of connected flow sources, number of security incidents including their severity or application performance and delivery (depends on installed modules).

• New widgets to visualize KPI metrics for APM index and retransmission index.

• The access rights architecture has been redesigned to provide more flexible tenant management. Please note that this access right change brings necessary changes in REST API calls. Follow the REST API guide.

• To make the management of a large number of users easier, user roles can be managed on the level of a tenant.

• A hierarchy has been introduced to role management, where the Super Admin (Base Tenant Admin) creates tenants and limits visibility to flow sources and profiles.

• Tenant Admins manage users and roles within their tenants, and then the individual users within each tenant. This introduces a vertical structure to access rights for more intuitive management.

• Users within a tenant can see only the data specified in the tenant definition.

• DA status overview of distributed architecture deployments is available straight from the UI to provide visual information on unit availability status, unit topology status, XML configuration status and installed packages status in DA.

• Support for VxLAN VNI IPFIX field has been added to provide traffic statistics based on VxLAN. Flowmon Probe extracts VNI and exports this information via IPFIX. VNI can be monitored both with enabled or disabled VxLAN decapsulation.

• NPM metrics use a weighted average for data aggregation into time series data to ensure more accurate statistics.

• Dynamic memory management for Flowmon modules allows allocating portions of memory to individual modules. The system can better adapt to specific deployment scenarios with a preference of some modules.

• 7623065: Timeouts for flow source SNMP live check can be set.

Issues fixed

• 7626790: Fixed an issue causing inconsistency between alert threshold data and data shown in Analysis.

• 7627518: Traffic chapter with 1 min data granularity is no longer showing empty charts for intervals shorter than 24 hrs.

• 7627455: Syslog message configuration remains after reboot.

• 7625953: Fixed an issue causing a time zone switch when using the show in time chart on slave units in DA.

• 7622871: System prevents from exhausting all filesystem inodes when many 30 seconds profiled sources are in use.

• 7628335: Real profiles created from shadow profiles now appear in Quotas manager.

• 7627530: An issue causing negative "Rest" values in TOP chapters has been fixed.

• 7628822: TOP chapters based on IP conversations with TLS aggregations have been fixed.

• 7624550: When creating a traffic chapter widget in FMD, the user cannot set the "none aggregation" option.

• 7627567: The system does not show an option to change interface speed settings for 10G Flowmon Probes.

• 7627108: Fixed an issue causing empty traffic widget data for chapters built on custom profiles.

• 7629478: The system now allows to edit and save a profile when the user's time zone differs from the system’s time zone.

• 7625097: Messages about collisions in mysql flow dictionary do not spam log files anymore.

• 7621955: SNMP Trap action is now saved properly when set in Alert definition.

• 7623748: Complex filter definition for "Show in time" statistics no longer causes an error.

• 7625923: A parser for Syslog authentication messages now accepts newline characters.

• 7621227: Configuration of management interfaces now performs a validation for subnet overlaps.

• 7628834: Test connection in proxy settings has been improved for better troubleshooting.