Version 11.1

Version 11.1.14

Released: 2024-03-19

New features

• Added security improvements and fixes

Known issues

• When upgrading from Flowmon 11.0.x to Flowmon 11.1.x, you may see an error message stating that "There have been some issues when migrating FMC reports to the new Dashboard and Reports." If you see this message, open the following address in your browser: https://<appliance_ip_or_hostname>/ui/reports/fmc-to-nico#manually (you must replace <appliance_ip_or_hostname> with the hostname or IP address of your appliance) and click Start migration. If this migration finishes successfully, there is no need to contact Support. If your Flowmon appliance is configured with multiple tenants, this process must be repeated for each tenant. You can switch tenants in the menu in the upper-right corner of the web interface.

• Flowmon Probe 200000 Pro appliances with Mellanox network interface cards are not compatible with the Flowmon APM Probe. Attempting to install and use this module may prevent the appliance from functioning correctly. This issue impacts all Mellanox-based appliances regardless of the installed version of Flowmon and will be addressed in a future Flowmon APM Probe release.

Previous releases

Version 11.1.13

Released: 2022-03-21

Issues fixed

• 164942, 165102: Security vulnerability CVE-2021-4034 has been fixed.
• 160101: Custom logos for theme customization are not removed during updates.
• 163196, 160209: Creating multiple listening ports at once through remote FCC no longer results in a configuration mismatch in Distributed Architecture.
• 162026: Communication problems between units in Distributed Architecture (when a mismatch occurs) have been fixed.
• 164533: Installed Flowmon Packet Investigator no longer hinders manipulation with syslog targets in FCC - System settings.
• 165109: Email STARTTLS flow field value is now visible in flow detail.
• 166888: Allowing inbound NTP connections for a source group in remote Configuration Center > System > Time zone no longer causes configuration mismatches in Distributed Architecture.

Known issues

• When upgrading from Flowmon 11.0.x to Flowmon 11.1.x, you may see an error message stating that "There have been some issues when migrating FMC reports to the new Dashboard and Reports." If you see this message, open the following address in your browser: https://<appliance_ip_or_hostname>/ui/reports/fmc-to-nico#manually (you must replace <appliance_ip_or_hostname> with the hostname or IP address of your appliance) and click Start migration. If this migration finishes successfully, there is no need to contact Support. If your Flowmon appliance is configured with multiple tenants, this process must be repeated for each tenant. You can switch tenants in the menu in the upper-right corner of the web interface.
• Flowmon Probe 200000 Pro appliances with Mellanox network interface cards are not compatible with the Flowmon APM Probe. Attempting to install and use this module may prevent the appliance from functioning correctly. This issue impacts all Mellanox-based appliances regardless of the installed version of Flowmon and will be addressed in a future Flowmon APM Probe release.

Version 11.1.12

Released: 2022-01-10

Issues fixed

• 148791, 162057 – Validation of host HTTPS certificate in the Flowmon Configuration Center - System – Certificate management has been fixed.

• NSS security vulnerability CVE-2021-43527 has been fixed

Known issues

• When upgrading from Flowmon 11.0.x to Flowmon 11.1.x, you may see an error message stating that "There have been some issues when migrating FMC reports to the new Dashboard and Reports. If you see this message, please open the following address in your browser https://<appliance_ip_or_hostname>/ui/reports/fmc-to-nico#manually (you have to substitute the hostname or IP address of your appliance for <appliance_ip_or_hostname>) and click on the "Start migration" button. If this migration finishes successfully, there is no need to contact Support. If your Flowmon appliance is configured with multiple tenants, this process needs to be repeated for each tenant. You can switch tenants in the menu in the upper right corner of the web interface.

• Flowmon Probe 200000 Pro appliances with Mellanox network interface cards are not compatible with Flowmon APM Probe. Attempting to install and use this module may prevent the appliance from functioning correctly. This issue impacts all Mellanox-based appliances regardless of the installed version of Flowmon and will be addressed in a future Flowmon APM Probe release.

Version 11.1.11

Released: 2021-12-14

Important information

• Forward compatibility of exported configuration is guaranteed throughout all releases with the same major version number. Between major versions, the last stable release of the previous major version is guaranteed to export configuration that is compatible with the next major version. Example: For Flowmon 11 releases, configuration export from any 11.0.x release is compatible with any 11.1.y release. For upgrades between major versions, if 10.3.9 is the last version released for Flowmon 10 then configuration exported from this version is compatible with Flowmon 11 and can be imported.

• It is necessary to update Flowmon DDoS Defender prior to applying this update. Any version of Flowmon DDoS Defender older than v5.0.0 will prevent this update from being successfully completed.

• Starting with v11.0.7, the following appliances may require a reboot to successfully complete all Flowmon updates: Flowmon Probe 20000 Pro, Flowmon Probe 40000, Flowmon Probe 40000 Pro and Flowmon Probe 200000 Pro. Affected appliances will be rebooted automatically by the Flowmon update process.

Issues fixed

• 159829 – Filters applied to profile channels no longer cause configuration mismatches in Distributed Architecture.

• 160811 – Chapters imported from presets can now be used in Dashboard & Reports when using non-English localization.

• 159829, 160311, 160412 – Importing users and roles using XML configuration file no longer causes configuration mismatches in Distributed Architecture.

Known issues

• When upgrading from Flowmon 11.0.x to Flowmon 11.1.x, you may see an error message stating that "There have been some issues when migrating FMC reports to the new Dashboard and Reports. If you see this message, please open the following address in your browser https://<appliance_ip_or_hostname>/ui/reports/fmc-to-nico#manually (you have to substitute the hostname or IP address of your appliance for <appliance_ip_or_hostname>) and click on the "Start migration" button. If this migration finishes successfully, there is no need to contact Support. If your Flowmon appliance is configured with multiple tenants, this process needs to be repeated for each tenant. You can switch tenants in the menu in the upper right corner of the web interface.

• Flowmon Probe 200000 Pro appliances with Mellanox network interface cards are not compatible with Flowmon APM Probe. Attempting to install and use this module may prevent the appliance from functioning correctly. This issue impacts all Mellanox-based appliances regardless of the installed version of Flowmon and will be addressed in a future Flowmon APM Probe release.

Version 11.1.10

Released: 2021-11-29

Important information

• Forward compatibility of exported configuration is guaranteed throughout all releases with the same major version number. Between major versions, the last stable release of the previous major version is guaranteed to export configuration that is compatible with the next major version. Example: For Flowmon 11 releases, configuration export from any 11.0.x release is compatible with any 11.1.y release. For upgrades between major versions, if 10.3.9 is the last version released for Flowmon 10 then configuration exported from this version is compatible with Flowmon 11 and can be imported.

• It is necessary to update Flowmon DDoS Defender prior to applying this update. Any version of Flowmon DDoS Defender older than v5.0.0 will prevent this update from being successfully completed.

• Starting with v11.0.7, the following appliances may require a reboot to successfully complete all Flowmon updates: Flowmon Probe 20000 Pro, Flowmon Probe 40000, Flowmon Probe 40000 Pro and Flowmon Probe 200000 Pro. Affected appliances will be rebooted automatically by the Flowmon update process.

Issues fixed

• 158805: Stability issues on appliances equipped with Dell PERC H750 have been fixed. Affected appliances no longer freeze during the download of Appliance logs triggered from Configuration Center > System > System Settings > Maintenance.

• 158622: Filters applied to profile channels no longer cause configuration mismatches in Distributed Architecture.

• 158622: Profile size displayed in Monitoring Center > Profiles > Edit profile is no longer permanently set to 0 for every source profile in Distributed Architecture. Now, the value reflects the actual size of the source profile.

• 158600: Show-in-time charts in Monitoring Center > Analysis > Advanced analysis now correctly visualize data that belongs to the "Other" row in TOP-N tables. The chart data is correctly filtered and matches the table data.

• 157071: Widgets in Dashboard & Reports now correctly display colors in both the graph and the table below it - the colors match.

• 157069 & 157557: Flow data live check configurable in Monitoring Center > Sources > Edit source now works correctly in Distributed Architecture.

• 156216 & 157557: Disk usage of source profiles is now correctly included and displayed in the disk usage chart in Configuration Center > Resource Manager > Quota Manager.

• 156850: The performance and loading time of Dashboard & Reports has been improved.

• 158622: Source profile quotas can now be changed in Configuration Center > Resource Manager > Quota Manager even if the appliance hosts a large number of such profiles.

Known issues

• When upgrading from Flowmon 11.0.x to Flowmon 11.1.x, you may see an error message stating that "There have been some issues when migrating FMC reports to the new Dashboard and Reports. Please check your reports or see <a link to issues.flowmon.com>". If you see this message,please open the following address in your browser https://<appliance_ip_or_hostname>/ui/reports/fmc-to-nico#manually (you have to substitute the hostname or IP address of your appliance for <appliance_ip_or_hostname>) and click on the "Start migration" button. If this migration finishes successfully, there is no need to contact Support. If your Flowmon appliance is configured with multiple tenants, this process needs to be repeated for each tenant. You can switch tenants in the menu in the upper right corner of the web interface.

• Flowmon Probe 200000 Pro appliances with Mellanox network interface cards are not compatible with Flowmon APM Probe. Attempting to install and use this module may prevent the appliance from functioning correctly. This issue impacts all Mellanox-based appliances regardless of the installed version of Flowmon and will be addressed in a future Flowmon APM Probe release.

Version 11.1.9

Released: 2021-10-04

Important information

• Forward compatibility of exported configuration is guaranteed throughout all releases with the same major version number. Between major versions, the last stable release of the previous major version is guaranteed to export configuration that is compatible with the next major version. Example: For Flowmon 11 releases, configuration export from any 11.0.x release is compatible with any 11.1.y release. For upgrades between major versions, if 10.3.9 is the last version released for Flowmon 10 then configuration exported from this version is compatible with Flowmon 11 and can be imported.

• It is necessary to update Flowmon DDoS Defender prior to applying this update. Any version of Flowmon DDoS Defender older than v5.0.0 will prevent this update from being successfully completed.

• Starting with v11.0.7, the following appliances may require a reboot to successfully complete all Flowmon updates: Flowmon Probe 20000 Pro, Flowmon Probe 40000, Flowmon Probe 40000 Pro and Flowmon Probe 200000 Pro. Affected appliances will be rebooted automatically by the Flowmon update process.

Issues fixed

• A critical bug reported in Flowmon 11.1.8 causing a slow or unresponsive web interface has been resolved. This bug affected long-running appliances on which all previously dismissed notifications reappeared in the web interface and, depending on their number, caused the web interface to slow down or stop working. For reference, a ticket in the Flowmon Issue Tracker - https://issues.flowmon.com/view.php?id=288.

• Security fixes in Dashboard and Reports.

Known issues

• When upgrading from Flowmon 11.0.x to Flowmon 11.1.x, you may see an error message stating that “There have been some issues when migrating FMC reports to the new Dashboard and Reports. Please check your reports or see <a link to issues.flowmon.com>”. If you see this message, please open the following address in your browser https://<appliance_ip_or_hostname>/ui/reports/fmc-to-nico#manually (you have to substitute the hostname or IP address of your appliance for <appliance_ip_or_hostname>) and click on the “Start migration” button. If this migration finishes successfully, there is no need to contact Support. If your Flowmon appliance is configured with multiple tenants, this process needs to be repeated for each tenant. You can switch tenants in the menu in the upper right corner of the web interface.

• Flowmon Probe 200000 Pro appliances with Mellanox network interface cards are not compatible with Flowmon APM Probe. Attempting to install and use this module may prevent the appliance from functioning correctly. This issue impacts all Mellanox-based appliances regardless of the installed version of Flowmon and will be addressed in a future Flowmon APM Probe release.

• Changes introduced in Flowmon 11.1.7 are not reflected in the Japanese translation of the accompanying Flowmon User Guide at the time of release. This translation will be added in Flowmon 12.0.

Version 11.1.8

Released: 2021-09-23

Important information

• Forward compatibility of exported configuration is guaranteed throughout all releases with the same major version number. Between major versions, the last stable release of the previous major version is guaranteed to export configuration that is compatible with the next major version. Example: For Flowmon v11 releases, configuration export from any v11.0.x release is compatible with any v11.1.y release. For upgrades between major versions, if v10.3.9 is the last version released for Flowmon v10 then configuration exported from this version is compatible with Flowmon v11 and can be imported.

• It is necessary to update Flowmon DDoS Defender prior to applying this update. Any version of Flowmon DDoS Defender older than v5.0.0 will prevent this update from being successfully completed.

• Starting with v11.0.7, the following appliances may require a reboot to successfully complete all Flowmon updates: Flowmon Probe 20000 Pro, Flowmon Probe 40000, Flowmon Probe 40000 Pro and Flowmon Probe 200000 Pro. Affected appliances will be rebooted automatically by the Flowmon update process.

What's New

• Defaults for the Syslog Identity Parsing feature in the Configuration Center have been extended and now include rules for processing logs from Kemp LoadMaster with the Edge Security Pack (ESP).

Issues fixed

• 154584: The RESTful API endpoint for retrieving statistics from the Monitoring Center no longer incorrectly redirects to the login page.

• 149417 and 149422: The Monitoring Center’s profile backup feature now correctly handles a temporary lack of free disk space on remote storage. The running backup is interrupted when remote storage runs out of free disk space and then resumed during the next scheduled run if free disk space is available.

• 151748: Error reporting for the update process has been improved. Error messages now correctly distinguish between connectivity issues caused by the network, service issues during communication with services.flowmon.com and authentication issues caused by invalid product licenses - all with appropriate severities.

• 151026: Issues with Flowmon Probe appliances equipped with Netcope network interface cards running in the 10G8 mode (8x 10 Gbps) have been resolved.

• 152552: The Appliance logs > Download feature in Configuration Center now correctly handles large volumes of log data commonly present in Distributed Architecture.

• 152815: The performance of the Product usage data collection feature has been improved and no longer negatively impacts the UI response time on appliances with large numbers of configuration objects.

• 151066: A show-in-time graph for shadow profiles is now correctly displayed in the Monitoring Center.

• 149670: Reports with names containing the ‘&’ (ampersand) character are no longer exported from Dashboard and Reports as PDF or CSV files without a valid file extension.

• 149683 and 149195 and 147858: The reliability of data transfer in Distributed Architecture has been improved. Statistical profile data is now correctly transferred and shown on TPM units.

• 149481: Flowmon Probe appliances now correctly process DNS packets with DNSSEC Delegation Signer records.

• 148777: The Appliance logs > Download feature in Configuration Center now correctly cleans up used disk space and prevents data accumulation from interrupted or failed download attempts.

• 154584: The RESTful API endpoint for retrieving widget data from Dashboard and Reports now correctly filters returned data based on the provided Dashboard ID(s).

• 153719: Bandwidth utilization in Topology widgets in Dashboard and Reports is now correctly displayed and properly converted to k/M/Gps units.

• 152552: The process of configuration synchronization in Distributed Architecture has been optimized to reduce system load, improve unit response time and increase the reliability of communication between units. Warning and error messages associated with profile quota management have been rewritten to provide useful information and hints.

• 154124: Reports in Dashboard and Reports are now working correctly and display a time series even when working hours are not configured in the Configuration Center.

• 144479: The performance of Chapters in Dashboard and Reports has been improved to handle chapters with a large number of channels.

• 144720 and 151452: The performance of the RESTful API endpoint for retrieving reports and chapters from the Monitoring Center has been improved to handle responses containing thousands of chapters.

• 151500: The Flowmon User Guide document has been updated to correctly describe RESTful API limitations in the Monitoring Center. Analysis queries performed via the RESTful API are limited to 10 results.

• 151420: Changes in TOP Chapter metadata in the Monitoring Center no longer result in unnecessary (re)computation and loss of previously computed data. For example, chapter names or descriptions can now be changed without the need for recomputation.

• 148245: The Flowmon User Guide document has been updated to correctly describe the limitations of Alerts in the Monitoring Center. Starting with Flowmon 11.1, alerts on shadow profiles are fully supported.

Known issues

• Flowmon Probe 200000 Pro appliances with Mellanox network interface cards are not compatible with Flowmon APM Probe. Attempting to install and use this module may prevent the appliance from functioning correctly. This issue impacts all Mellanox-based appliances regardless of the installed version of Flowmon and will be addressed in a future Flowmon APM Probe release.

• Changes mentioned in the WHAT’S NEW section are not reflected in the Japanese translation of the accompanying Flowmon User Guide at the time of release. This translation will be added in Flowmon 12.0.

Version 11.1.7

Released: 2021-06-30

Important information

• Forward compatibility of exported configuration is guaranteed throughout all releases with the same major version number. Between major versions, the last stable release of the previous major version is guaranteed to export configuration that is compatible with the next major version. Example: For Flowmon v11 releases, configuration export from any v11.0.x release is compatible with any v11.1.y release. For upgrades between major versions, if v10.3.9 is the last version released for Flowmon v10 then configuration exported from this version is compatible with Flowmon v11 and can be imported.

• It is necessary to update DDoS Defender prior to applying this update. Any version of DDoS Defender older than v5.0.0 will prevent this update from being successfully completed.

• Starting with v11.0.7, the following appliances may require a reboot to successfully complete all Flowmon updates: Flowmon Probe 20000 Pro, Flowmon Probe 40000, Flowmon Probe 40000 Pro and Flowmon Probe 200000 Pro. Affected appliances will be rebooted automatically by the Flowmon update process.

What's New

• A feature allowing the decapsulation of 4in6 tunneling protocols has been introduced to Flowmon Probe. It adds the ability to decapsulate and analyze IPv4 network traffic transported over an IPv6 network. When the "4in6" option is enabled in Configuration Center / Monitoring Ports / Advanced Settings, a subsequent option "Process as DS-Lite" is shown. Enabling this option provides improved visibility for Dual-Stack Lite broadband deployments. For details, please refer to the accompanying Flowmon User Guide.

• A set of interactive, in-product guides has been introduced to the Configuration Center on all Flowmon appliances. Guides provide brief descriptions for key features of the product along with useful advice on how to use them correctly. New guides will be added over time. This feature requires direct connectivity from the client (browser) interacting with the Flowmon web interface to the Internet.

• In an effort to improve the product, a feature that collects solely non-personally identifiable data about the appliance configuration - including usage statistics, enabled features, and general configuration - has been introduced. It does NOT collect customer data stored on or processed by Flowmon appliances. The collected data can be reviewed in Configuration Center / System / System Settings / Maintenance / Product usage data collection. When enabled, it sends collected data to external servers via a secure communication channel. It is enabled by default and can be disabled in Configuration Center / System / System Settings / Maintenance / Product usage data collection. Interactive user guides and usage data collection are inextricably linked and can only be enabled/disabled together.

• Starting with Flowmon 11.1.7, the product uses a new color palette and logo aligned with other products and content offered by Kemp Technologies, Inc.

Issues fixed

• 146177: It is now possible to create or edit chapters in the Monitoring Center after a redirect from Dashboard and Reports / Reports / Chapters / New chapter.

• 145158: When decapsulating GRE or ERSPAN tunnels, Flowmon Probe now correctly exports inner MAC addresses belonging to clients communicating inside the tunnel instead of outer MAC addresses belonging to the tunnel endpoints.

• 7636363: User settings of LDAP-based users no longer produce configuration inconsistencies in Distributed Architecture.

• 7635560: The flow source live check can now be enabled or disabled in default flow source configuration.

• 7635560: In Distributed Architecture, newly detected flow sources now respect the default configuration of the flow source live check.

• 7635507: In Distributed Architecture, it is now possible to change the SNMP IP address of an already detected flow source.

• 146210: The reliability of syslog-based and email-based notifications produced by Flowmon appliances has been improved. All high-priority notifications are now reliably sent as log messages and/or emails, based on appliance configuration.

• 7636400: Language switching in Dashboard and Reports has been fixed.

• 7635655: A chapter with the "asa event denied" filter no longer breaks chapter editing and other reports in Dashboard and Reports.

• 7635054: Working hours have been fixed in Dashboard and Reports.

• 147344: Clicking on Report / Share in Dashboard and Reports no longer results in an error if a group name contains a numerical value.

Known issues

• Flowmon Probe 200000 Pro appliances with Mellanox network interface cards are not compatible with Flowmon APM Probe. Attempting to install and use this module may prevent the appliance from functioning correctly. This issue impacts all Mellanox-based appliances regardless of the installed version of Flowmon and will be addressed in a future Flowmon APM Probe release.

• Changes mentioned in the WHAT’S NEW section are not reflected in the Japanese translation of the accompanying Flowmon User Guide at the time of release. This translation will be added in the next regular bugfix release for Flowmon 11.1.

• An error message stating that "An error occurred during processing the request on 'services' server." may be periodically displayed in the web interface or sent as a notification after an appliance has been updated to Flowmon 11.1.7. This issue should impact only a very small percentage of deployed appliances. For more information and available workarounds, please refer to Flowmon Issue Tracker, Issue #285 https://issues.flowmon.com/view.php?id=285. This issue will be resolved in the next bugfix release for Flowmon 11.1.

• Chapter “4.2.1 Maintenance” of the Flowmon User Guide bundled with appliances contains a mistake in section “Product usage data collection.” The guide states that these features “require appliance connectivity to public Internet” - the statement is incorrect. As described in the WHAT’S NEW section of this document, these features require direct connectivity to the Internet from the client (browser) interacting with the Flowmon web interface, NOT from the Flowmon appliance. This issue will be resolved in the next bugfix release for Flowmon 11.1.

Version 11.1.6

Released: 2021-05-17

Important information

• Forward compatibility of exported configuration is guaranteed throughout all releases with the same major version number. Between major versions, the last stable release of the previous major version is guaranteed to export configuration that is compatible with the next major version. Example: For Flowmon v11 releases, configuration export from any v11.0.x release is compatible with any v11.1.y release. For upgrades between major versions, if v10.3.9 is the last version released for Flowmon v10 then configuration exported from this version is compatible with Flowmon v11 and can be imported.

• It is necessary to update DDoS Defender prior to applying this update. Any version of DDoS Defender older than v5.0.0 will prevent this update from being successfully completed.

• Starting with v11.0.7, the following appliances may require a reboot to successfully complete all Flowmon updates: Flowmon Probe 20000 Pro, Flowmon Probe 40000, Flowmon Probe 40000 Pro and Flowmon Probe 200000 Pro. Affected appliances will be rebooted automatically by the Flowmon update process.

What's New

• Flowmon 11.1.6 introduces a new system configuration dialog for centralized CA certificate management. The new dialog is available in Configuration Center / System / System Settings / Certificate Management and it currently serves primarily for the management of CA certificates used by proxies, to improve the overall security posture of deployments where proxies are used to access external networks. This feature can also be used to manage trust for connections to external services initiated from custom integration scripts as these certificates are added to the operating system’s trust store and will be automatically taken into consideration by a variety of CLI tools and programming libraries.

• Flowmon 11.1.6 introduces improved visuals for error codes displayed in various notification messages. Error codes are now visibly separated from the surrounding text and provide tooltip-based instructions on how to handle them along with a brief explanation of their added value in shortening time-to-resolution when issues are reported to Flowmon Support.

• A new notification for administrators on license and support expiration has been introduced. An email notification is sent 30 days prior to expiration to base tenant administrators. The email contains the appliance’s HW ID and a list of expiring licenses or professional services.

• User experience when editing a topology has been improved. A position of nodes in the topology is saved when leaving the editing form instead of being saved continuously. The continuous API calls no longer affect the editing experience.

Issues fixed

• 7636464: A show-in-time graph is now correctly displayed for TOP 20 or larger queries on busy profiles in Monitoring Center / Analysis.

• 7636445: Names of profiles containing special characters are no longer truncated when restored from External Data Storage.

• 7636399: Names of profiles or channels containing special characters are no longer truncated on creation.

• 7635389: Flowmon Probe appliances no longer run out of memory when monitoring MSSQL or MySQL protocols.

• 7634473: Performance when displaying a larger number of chapters in Monitoring Center / Reports / Chapters has been improved.

• 7634531: Stability of TLS-enabled listening ports on Flowmon Collector appliances has been improved.

• 7634165: Migration of legacy reports from Monitoring Center to Dashboard & Reports has been improved and is now able to handle hundreds of reports that require migration.

• 7635032: Table summaries in widgets in Dashboard & Reports are now displayed only when the table contains a column that can be numerically summarized.

• 7634340: Scheduled reports sent from Dashboard & Reports now support variables in email subject and the name of the report is included in the name of the attached file.

• 7636655: LDAP authentication no longer treats entered usernames as case sensitive.

Known issues

• Flowmon Probe 200000 Pro appliances with Mellanox network interface cards are not compatible with Flowmon APM Probe and Flowmon Packet Investigator Probe. Attempting to install and use these modules may prevent the appliance from functioning correctly. This issue impacts all Mellanox-based appliances regardless of the installed version of Flowmon and will be addressed in future Flowmon APM Probe and Flowmon Packet Investigator Probe releases.

• Starting with Flowmon 11.1.6, deprecated cryptographic protocols TLS 1.0 and TLS 1.1 are no longer supported on the listening ports of Flowmon Collector appliances. If you are using TLS-enabled flow sources other than Flowmon Probe appliances, make sure these flow sources support TLS 1.2 or newer. Flow sources not using transport protocol encryption will not be affected by this change.

• LDAP authentication in Flowmon 11.1 no longer treats entered usernames as case sensitive. It means that LDAP authentication in Flowmon 11.1, starting with Flowmon 11.1.6, behaves the same way as it did in versions prior to 11.1. For example, when using LDAP authentication, usernames “JDoe” and “jdoe” are considered identical again.

Version 11.1.5

Released: 2021-04-19

Important information

• Forward compatibility of exported configuration is guaranteed throughout all releases with the same major version number. Between major versions, the last stable release of the previous major version is guaranteed to export configuration that is compatible with the next major version. Example: For Flowmon v11 releases, configuration export from any v11.0.x release is compatible with any v11.1.y release. For upgrades between major versions, if v10.3.9 is the last version released for Flowmon v10 then configuration exported from this version is compatible with Flowmon v11 and can be imported.

• It is necessary to update DDoS Defender prior to applying this update. Any version of DDoS Defender older than v5.0.0 will prevent this update from being successfully completed.

• Starting with v11.0.7, the following appliances may require a reboot to successfully complete all Flowmon updates: Flowmon Probe 20000 Pro, Flowmon Probe 40000, Flowmon Probe 40000 Pro and Flowmon Probe 200000 Pro. Affected appliances will be rebooted automatically by the Flowmon update process.

Issues fixed

• 7636341: Form submission in the web interface is no longer intermittently failing on appliances updated to Flowmon 11.1 with a time zone different from "(UTC+02:00) Europe/Prague".

• 7636356: Reports and Active Devices now work correctly on appliances updated to Flowmon 11.1 with a time zone different from "(UTC+02:00) Europe/Prague".

• 7636154: Flowmon Probe’s compatibility with hardware older than 5 years has been improved. This issue impacted only Flowmon Probe 200000 Pro appliances based on Dell PowerEdge R730 in which Netcope network interface cards have been replaced with Mellanox network interface cards.

• 7636341: The Resource Manager in Flowmon Configuration Center now works correctly when Flowmon is deployed in Distributed Architecture.

• Flowmon Probe 200000 Pro appliances now correctly evaluate the state of monitoring ports on Netcope network interface cards.

Known issues

• Flowmon Probe 200000 Pro appliances with Mellanox network interface cards are not compatible with Flowmon APM Probe and Flowmon Packet Investigator Probe. Attempting to install and use these modules may prevent the appliance from functioning correctly. This issue impacts all Mellanox-based appliances regardless of the installed version of Flowmon and will be addressed in future Flowmon APM Probe and Flowmon Packet Investigator Probe releases.

Version 11.1.4

Released: 2021-03-29

Important information

• Forward compatibility of exported configuration is guaranteed throughout all releases with the same major version number. Between major versions, the last stable release of the previous major version is guaranteed to export configuration that is compatible with the next major version. Example: For Flowmon v11 releases, configuration export from any v11.0.x release is compatible with any v11.1.y release. For upgrades between major versions, if v10.3.9 is the last version released for Flowmon v10 then configuration exported from this version is compatible with Flowmon v11 and can be imported.

• It is necessary to update DDoS Defender prior to applying this update. Any version of DDoS Defender older than v5.0.0 will prevent this update from being successfully completed.

• Starting with v11.0.7, the following appliances may require a reboot to successfully complete all Flowmon updates: Flowmon Probe 20000 Pro, Flowmon Probe 40000, Flowmon Probe 40000 Pro and Flowmon Probe 200000 Pro. Affected appliances will be rebooted automatically by the Flowmon update process.

Issues fixed

• Scheduled reports are no longer sent every few minutes instead of once a day.

Known issues

• Flowmon Probe 200000 Pro appliances with Mellanox network interface cards are not compatible with Flowmon APM Probe and Flowmon Packet Investigator Probe. Attempting to install and use these modules may prevent the appliance from functioning correctly. This issue impacts all Mellanox-based appliances regardless of the installed version of Flowmon and will be addressed in future Flowmon APM Probe and Flowmon Packet Investigator Probe releases.

Version 11.1.3

Released: 2021-03-24

Important information

• Forward compatibility of exported configuration is guaranteed throughout all releases with the same major version number. Between major versions, the last stable release of the previous major version is guaranteed to export configuration that is compatible with the next major version. Example: For Flowmon v11 releases, configuration export from any v11.0.x release is compatible with any v11.1.y release. For upgrades between major versions, if v10.3.9 is the last version released for Flowmon v10 then configuration exported from this version is compatible with Flowmon v11 and can be imported.

• It is necessary to update DDoS Defender prior to applying this update. Any version of DDoS Defender older than v5.0.0 will prevent this update from being successfully completed.

• Starting with v11.0.7, the following appliances may require a reboot to successfully complete all Flowmon updates: Flowmon Probe 20000 Pro, Flowmon Probe 40000, Flowmon Probe 40000 Pro and Flowmon Probe 200000 Pro. Affected appliances will be rebooted automatically by the Flowmon update process.

Issues fixed

• 7635919: Status checking for units with corrupted or incomplete data has been fixed in Distributed Architecture. Corrupted data no longer prevents the unit from correctly reporting its status.

• 7635968: Minimal NPM delay is now correctly computed when aggregating flows with NPM delay equal to 0 in Flowmon Monitoring Center.

• 7635968: Export of extended NPM metrics for unidirectional flows has been fixed in Flowmon Probe.

• 7635971: Widgets with manually configured height are no longer automatically resized to fit available data on widget refresh in Flowmon Dashboard and Reports.

• 7635854: Time series charts in reports are no longer empty for small data sets in Flowmon Dashboard and Reports.

• 7633968: All scheduled PDF reports generated around midnight are now populated with data.

Known issues

• Flowmon Probe 200000 Pro appliances with Mellanox network interface cards are not compatible with Flowmon APM Probe and Flowmon Packet Investigator Probe. Attempting to install and use these modules may prevent the appliance from functioning correctly. This issue impacts all Mellanox-based appliances regardless of the installed version of Flowmon and will be addressed in future Flowmon APM Probe and Flowmon Packet Investigator Probe releases.

Version 11.1.2

Released: 2021-03-10

Important information

• Forward compatibility of exported configuration is guaranteed throughout all releases with the same major version number. Between major versions, the last stable release of the previous major version is guaranteed to export configuration that is compatible with the next major version. Example: For Flowmon v11 releases, configuration export from any v11.0.x release is compatible with any v11.1.y release. For upgrades between major versions, if v10.3.9 is the last version released for Flowmon v10 then configuration exported from this version is compatible with Flowmon v11 and can be imported.

• It is necessary to update DDoS Defender prior to applying this update. Any version of DDoS Defender older than v5.0.0 will prevent this update from being successfully completed.

• Starting with v11.0.7, the following appliances may require a reboot to successfully complete all Flowmon updates: Flowmon Probe 20000 Pro, Flowmon Probe 40000, Flowmon Probe 40000 Pro and Flowmon Probe 200000 Pro. Affected appliances will be rebooted automatically by the Flowmon update process.

What's New

• Flowmon Configuration Center / Monitoring Ports / Interface Settings - Configuration of the monitoring port on selected Flowmon Probe 20000 Pro, Flowmon Probe 40000, Flowmon Probe 40000 Pro and Flowmon Probe 200000 Pro appliances can be optimized for processing a constant stream of smaller packets (Maximum throughput) or for minimizing packet drop during occasional packet burst (Burst resistance). This configuration option represents a trade-off in which increasing burst resistance decreases the maximum throughput of the monitoring port and vice versa. It is highly sensitive to the type and character of traffic in the monitored network and should be configured accordingly on a per port basis. The default value represents the best possible configuration for most appliances and monitored networks. Changing the value of this configuration option may negatively impact the performance of your appliance and lead to an increased number of dropped packets on the affected monitoring ports.

Issues fixed

• 7635695: Scheduled email reports have been fixed in Flowmon Dashboard and Reports.

• 7635045: A TOP chapter with NBAR2 aggregation has been fixed in Flowmon Dashboard and Reports.

• 7634553: Active Devices no longer cause issues with configuration propagation in Distributed Architecture.

• 7635053: Access to Flowmon Dashboard and Reports on proxy units, slave units and standalone slave units has been restricted in Distributed Architecture. The Dashboard and Reports section is accessible only on master units.

• 7634997: A timing issue causing occasional inconsistencies in alert content has been fixed in Flowmon Monitoring Center.

• 7634897: Filtering for flows without any TCP flags has been fixed in Flowmon Monitoring Center / Analysis.

• A known issue with chapter recompute requests triggered in quick succession has been fixed in Distributed Architecture.

• A known issue with installation/update package propagation has been fixed in Distributed Architecture.

Known issues

• Flowmon Probe 200000 Pro appliances with Mellanox network interface cards are not compatible with Flowmon APM Probe and Flowmon Packet Investigator Probe. Attempting to install and use these modules may prevent the appliance from functioning correctly. This issue impacts all Mellanox-based appliances regardless of the installed version of Flowmon and will be addressed in future Flowmon APM Probe and Flowmon Packet Investigator Probe releases.

Version 11.1.1

Released: 2021-02-01

Important information

• Forward compatibility of exported configuration is guaranteed throughout all releases with the same major version number. Between major versions, the last stable release of the previous major version is guaranteed to export configuration that is compatible with the next major version. Example: For Flowmon v11 releases, configuration export from any v11.0.x release is compatible with any v11.1.y release. For upgrades between major versions, if v10.3.9 is the last version released for Flowmon v10 then configuration exported from this version is compatible with Flowmon v11 and can be imported.

• It is necessary to update DDoS Defender prior to applying this update. Any version of DDoS Defender older than v5.0.0 will prevent this update from being successfully completed.

• Starting with v11.0.7, the following appliances may require a reboot to successfully complete all Flowmon updates: Flowmon Probe 20000 Pro, Flowmon Probe 40000, Flowmon Probe 40000 Pro and Flowmon Probe 200000 Pro. Affected appliances will be rebooted automatically by the Flowmon update process.

Issues fixed

• Flowmon Probe 200000 Pro appliances with Netcope network interface cards no longer need to have packet trimming disabled in order to provide L7 visibility. Packets that do not fulfil the criteria for application protocol parsing will be ignored by the probe and will not cause the probe to crash. It is still recommended to have packet trimming disabled when performing L7 protocol analysis.

• Flowmon Dashboard configuration is not being corrupted during update if there are any fragments of obsolete configuration related to deleted users. This corruption of configuration resulted in dashboards not being displayed. Such lost dashboards are still present in the configuration and could be recovered by support engineers.

Known issues

• Possible issue with a recompute of report chapters in a DA environment - there is a possibility that some recompute requests can be lost if they were added shortly after each other. This issue has been discovered even in older versions of Flowmon. If a recompute request is lost, the only consequence is that the chapter will not be recomputed. The workaround solution is to try to recompute the chapter later by requesting it in the given chapter’s editing dialog. This issue affects only recomputes requested for new chapters or modified chapters with significant change (you will be notified about that in the editing dialog). This issue does not affect recomputes requested for an existing chapter with no additional changes other than the recompute itself.

• Flowmon Probe 200000 Pro appliances with Mellanox network interface cards are not compatible with APM Probe and Flowmon Packet Investigator Probe. Attempting to install and use these modules may prevent the appliance from functioning correctly. This issue impacts all Mellanox-based appliances regardless of the installed version of Flowmon and will be addressed in future APM Probe and Flowmon Packet Investigator Probe releases.

Version 11.1.0

Released: 2021-01-27

Important information

• Device will be rebooted during the update process.

• Forward compatibility of exported configuration is guaranteed throughout all releases with the same major version number. Between major versions, the last stable release of the previous major version is guaranteed to export configuration that is compatible with the next major version. Example: For Flowmon v11 releases, configuration export from any v11.0.x release is compatible with any v11.1.y release. For upgrades between major versions, if v10.3.9 is the last version released for Flowmon v10 then configuration exported from this version is compatible with Flowmon v11 and can be imported.

• It is necessary to update DDoS Defender prior to applying this update. Any version of DDoS Defender older than v5.0.0 will prevent this update from being successfully completed.

• Starting with v11.0.7, the following appliances may require a reboot to successfully complete all Flowmon updates: Flowmon Probe 20000 Pro, Flowmon Probe 40000, Flowmon Probe 40000 Pro and Flowmon Probe 200000 Pro. Affected appliances will be rebooted automatically by the Flowmon update process.

What's New

• Shared dashboards - a user can share a dashboard with another user or role so they can see (or edit if allowed) the same instance of the dashboard.

• Predefined dashboards - a user can set a dashboard as predefined so it appears in the list of predefined dashboards along with the out-of-the-box

offering. Other users can make their own copy when creating new dashboards.

• Topology visualization showing a bandwidth utilization in a geographical or logical context. Mapping of the topology to existing profiles and channels.

• Flows source live check has been improved. In addition to SNMP, the live-check feature now takes into account flow data received from the source to verify if it is delivering flows properly or to report in case it is not. Both methods (SNMP live-check and received flow data check can be combined).

• REST API documentation is now available as an interactive guide on every appliance. It offers comfort search and provides examples of REST API calls. Moreover, the calls can be tested directly from the documentation using a local or remote Flowmon REST API, including authentication.

• Presets have been extended to support alerts as a part of the preset configuration. New set of presets is available for Flowmon 11.1.

• Packet deduplication - the ability to perform packet deduplication has been added to Flowmon’s monitoring interfaces. It is especially useful for eliminating duplicates in virtual environments where Flowmon Probe is receiving data from a platform-native packet mirroring solution, such as Google Cloud VPC Packet Mirroring or AWS VPC Traffic Mirroring.

• Optional settings improving the security of Flowmon’s web interface are enabled by default.

• Flowmon Probe’s VoIP traffic analysis has been improved and now provides two alternatives: “VoIP” and “Extended VoIP”. Each alternative has a different performance profile and offers a different level of visibility. “Extended VoIP” provides full visibility, including RTP/RTCP correlation, and is suitable for speeds up to 10 Gbps. “VoIP” does not provide RTP/RTCP correlation but is suitable for high-speed networks. “Extended VoIP” is the default for upgraded appliances.

• A regular batch of security updates.

Issues fixed

• 7634909: An issue with translations of the interface in reports has been solved.

• 7634909: CHAP authentication is no longer available in TACACS+ settings.

• 7634909: An issue causing the disappearance of the “Bytes” column irregularly in widgets with TOP chapters has been fixed.

• 7634708: Monthly recurrence in the reports scheduler now works with the change of the year.

• 7634595: Traffic from probes with accelerated NICs can be now profiled based on monitoring ports.

• 7634191: Cleanup of widgets is performed upon profile change or deletion from the chapter settings.

• 7634461: An issue causing a logrotate failure has been resolved.

• 7634369: A licensing issue preventing monitoring ports on Hyper-V platform from starting has been fixed.

• 7633967: Notification messages in FMD are now saved with translated strings for all supported languages.

• 7634226: VXLAN VNI filter limit has been increased from 16 to 24 bit integer.

• 7634059: Flow source rename is now correctly removed from database when removed in GUI.

• 7633623: UTC time zone has been added into the available time zone list.

• 7634909: FMD now respects resolving preferences set in user settings.

• 7633401: Deleting a profile which is set as a default in Analysis no longer causes loading failure of Analysis page.

• 7633243: FMD Reports now have clickable Table of content in PDF reports so the user can navigate to respective chapters.

• 7632833: An issue with transfer data availability status has been resolved.

• 7632428: An issue causing delayed export of some flows on a probe has been fixed.

• 7632981: Links to installation instructions have been updated in the user guide.

• 7631932: An issue causing missing MAC and VLAN values in some flows caused by fragmented packets has been fixed.

• 7632846: An issue causing appliances to run out of disk space during Flowmon updates has been fixed.

• 7632877: Saving a profiled source without All Ports selected no longer breaks labels on interface checkboxes in Flowmon Monitoring Center.

• 7632647: Report configuration of chart options in Flowmon Monitoring Center Reports is no longer disappearing without applying the change.

• 7632004: Charts for 1-minute profiles are no longer missing when analyzing historical data.

• 7632343: Potentially sensitive data is no longer automatically exported along with appliance logs.

• 7632343: Terminology and localization have been improved in Flowmon Configuration Center - System - GPG Settings.

• 7632355: Misleading error messages referencing samplicator_check.sh are no longer present in system logs.

• 7632334: Input validation has been added to the edit profile form to prevent from saving unsupported characters.

• 7632255: An issue causing failure when changing the IP address of external storage in GUI has been resolved.

• 7632053: User guide has been updated to explain RTP Jitter unit properly.

• 7631925: When deleting a target for flow export, only target-related TCP/TLS files are now deleted.

• 7631922: Alert details no longer show incorrect conditions for alerts based on 30s profiles.

• 7631558: Flowmon Probe’s monitoring interfaces are now correctly numbered even when SNMPv3 is used for source monitoring.

• 7631885: Flow duration is now correctly computed for NSEL flow records containing both start time and observation time fields.

• 7631786: A slow or broken name resolution no longer prevents the PDF generator from generating a report in a timely fashion.

• 7631594: Translation for filters longer than 1500 characters has been fixed in Flowmon Monitoring Center.

• 7629548: A high number of 30-second profiles no longer slows down Flowmon’s web interface to the point of unusability.

• 7626606: A new VoIP preset can be used to set up recommended profiling and improve the performance of VoIP analysis in Flowmon Monitoring Center.

Known issues

• Possible issue with a recompute of report chapters in a DA environment - there is a possibility that some recompute requests can be lost if they were added shortly after each other. This issue has been discovered even in older versions of Flowmon. If a recompute request is lost, the only consequence is that the chapter will not be recomputed. The workaround solution is to try to recompute the chapter later by requesting it in the given chapter’s editing dialog. This issue affects only recomputes requested for new chapters or modified chapters with significant change (you will be notified about that in the editing dialog). This issue does not affect recomputes requested for an existing chapter with no additional changes other than the recompute itself.

• Flowmon Probe 200000 Pro appliances with Netcope network interface cards need to have packet trimming disabled in order to provide L7 visibility. Attempting to combine L7 visibility with packet trimming may lead to appliance instability. This issue impacts Flowmon v11.1.0 only and will be addressed in a subsequent bugfix release.

• Flowmon Probe 200000 Pro appliances with Mellanox network interface cards are not compatible with APM Probe and Flowmon Packet Investigator Probe. Attempting to install and use these modules may prevent the appliance from functioning correctly. This issue impacts all Mellanox-based appliances regardless of the installed version of Flowmon and will be addressed in future APM Probe and Flowmon Packet Investigator Probe releases.