Version 12.3

Version 12.3.6

Released: 2024-07-02

Copyright © 2007 - 2024 Progress Software Corporation and/or its subsidiaries or affiliates. All Rights Reserved.

Support

For technical assistance, visit the Flowmon Support and Learning Hub.

Compatibility

• Version 12.3.6 and higher is compatible with the following modules:
  • Flowmon ADS: v12.2.0
  • Flowmon APM: v5.2.0
  • Flowmon APM Probe: v5.2.0
  • Flowmon APM TG: v2.9.0
  • Flowmon DDoS Defender: v5.6.0
  • Flowmon Packet Investigator: v12.2.0
  • Flowmon Packet Investigator Probe: v12.2.0
  • Data Retention: v5.1.0
  • IDS Probe: v3.5.0
• If an incompatible version of any module is installed on a Flowmon appliance, it will be stopped and disabled during the update to Flowmon version 12.3.x. When a compatible version of the module is installed, the module will be automatically enabled and started again.

Installation requirements

• The Flowmon appliance must be updated to version 12.2.0 or newer before you can apply this update.
• Before you start updating the Flowmon appliance to version 12.3.x, ensure the installed modules meet the following version requirements:
  • Flowmon ADS: v12.1.0
  • Flowmon APM: v5.1.0
  • Flowmon APM Probe: v5.1.0
  • Flowmon APM TG: v2.7.0
  • Flowmon DDoS Defender: v5.5.0
  • Flowmon Packet Investigator: v12.1.0
  • Flowmon Packet Investigator Probe: v12.1.0
  • Data Retention: v5.0.0
  • IDS Probe: v3.3.1
• If any version is older than the ones specified above, the update will not complete successfully.

Installation

1. Download the package from the Support portal (do not unpack it).
2. Log in to the Configuration Center on your Flowmon appliance.
3. Select the Versions tab.
4. Click Import Package and select the update file you downloaded in step 1.
5. Wait until a notification is displayed informing you that the update was successful.
6. Some versions may require a reboot of the device to complete the update process. If so, it will be mentioned in the IMPORTANT INFORMATION section of this document.

Changes in version 12.3.6

Important information

• Forward compatibility of exported configuration is guaranteed throughout all releases with the same major version number. Between major versions, the last stable release of the previous major version is guaranteed to export a configuration that is compatible with the next major version. For example: For Flowmon 12 releases, a configuration export from any 12.3.x release is compatible with any future 12.4.y release. For upgrades between major versions, if 11.1.14 is the last version released for Flowmon 11 then the configuration exported from this version is compatible with Flowmon 12 and can be imported.
• The device is rebooted during the update process.
• Spanish, French, and German localization is scheduled to end with Flowmon v13. The 12.3 release includes a notification about this to inform users utilizing these languages.

What's New

• PHP was updated to version 8.1.29, fixing CVE-2024-2756, CVE-2024-4577, CVE-2024-5458, and CVE-2024-5585.
• The less utility was updated to version 458-10, fixing CVE-2024-32487.
• The glibc library was updated to version 2.17-326, fixing CVE-2024-2961 and CVE-2024-33599.
• The Docker package was updated to version 1.13.1-210, fixing CVE-2024-21626.
• The bind package was updated to version 9.11.4-26.P2.el7_9.16, fixing CVE-2023-6516, CVE-2023-5517, CVE-2023-50387, CVE-2023-5679, CVE-2023-4408, and CVE-2023-50868.
• The shim package was updated to version shim-x64-15.8-1.el7.x86_64, fixing CVE-2023-40547.

Issues fixed

• 203313: AWS Flow Logs configuration can be properly imported from the configuration XML file.
• 203556: The flow sampling rate works as epxected for negative values.
• 202217: Widgets based on Top Chapters with source or destination port agreggations are now fixed.
• 198590: The Server Response Time field value is calulated and exported properly for SMB traffic.

Previous releases

Version 12.3.5

Released: 2024-03-19

Important information

• Forward compatibility of exported configuration is guaranteed throughout all releases with the same major version number. Between major versions, the last stable release of the previous major version is guaranteed to export a configuration that is compatible with the next major version. For example: For Flowmon 12 releases, a configuration export from any 12.3.x release is compatible with any future 12.4.y release. For upgrades between major versions, if 11.1.14 is the last version released for Flowmon 11 then the configuration exported from this version is compatible with Flowmon 12 and can be imported.
• When updating from Flowmon version older than 12.3.3, the device is rebooted during the update process.
• Spanish, French, and German localization is scheduled to end with Flowmon v13. The 12.3 release includes a notification about this to inform users utilizing these languages.

What's New

• Security improvements and fixes

Version 12.3.4

Released: 2024-02-29

Important information

• Forward compatibility of exported configuration is guaranteed throughout all releases with the same major version number. Between major versions, the last stable release of the previous major version is guaranteed to export a configuration that is compatible with the next major version. For example: For Flowmon 12 releases, a configuration export from any 12.3.x release is compatible with any future 12.4.y release. For upgrades between major versions, if 11.1.13 is the last version released for Flowmon 11 then the configuration exported from this version is compatible with Flowmon 12 and can be imported.
• When updating from Flowmon version older than 12.3.3, the device is rebooted during the update process.
• Spanish, French, and German localization is scheduled to end with Flowmon v13. The 12.3 release includes a notification about this to inform users utilizing these languages.

What's New

• The ip package was updated to version 2.0.1, fixing CVE-2023-42282.
• PostgreSQL was updated to version 12.18, fixing CVE-2024-0985.

Issues fixed

• 200291: Fixed an issue that was introduced in Flowmon 12.3.3 and caused occasional corruption of chart data files, resulting in missing charts and a higher number of error log entries.
• 199246: The Historical Trends widget contains the correct chart for profiles in a group.
• 199246: The Historical Trends widget respects timezone settings.
• 199948: The Active Devices feature can properly handle long network flows from Juniper devices.
• 199010: The user language is correctly set when the user is created using the Rest API.
• 195099: The Host name assigned from the GUI is persistent after the reboot for appliances deployed from the AWS marketplace.

Version 12.3.3

Released: 2024-02-06

Important information

• Forward compatibility of exported configuration is guaranteed throughout all releases with the same major version number. Between major versions, the last stable release of the previous major version is guaranteed to export a configuration that is compatible with the next major version. For example: For Flowmon 12 releases, a configuration export from any 12.3.x release will be compatible with any future 12.4.y release. For upgrades between major versions, if 11.1.13 is the last version released for Flowmon 11 then the configuration exported from this version is compatible with Flowmon 12 and can be imported.
• The device reboots during the update process.
• Spanish, French, and German localization is scheduled to end with Flowmon v13. The 12.3 release includes a notification about this to inform users utilizing these languages.

What's New

• The OS kernel was updated to 3.10.0-1160.108.1, fixing CVE-2022-40982, CVE-2023-3611, CVE-2023-3776, CVE-2023-4128, CVE-2023-4206, CVE-2023-4208, CVE-2023-4207, and CVE-2023-42753.
• The java-1.8.0-openjdk package was updated to version java-1.8.0-openjdk-1.8.0.402.b06-1.el7_9, fixing CVE-2024-20952 and CVE-2024-20918.
• The open-vm-tools package was updated to version open-vm-tools-11.0.5-3.el7_9.9, fixing CVE-2023-34058 and CVE-2023-34059.
• The PyAML library was updated to version 6.0.1, fixing CVE-2020-1747 and CVE-2020-14343.
• The order of items in the exported configuration XML is deterministic, so it can be compared with a previous version.

Issues fixed

• 197420, 197727: Background processing of Active Devices is no longer suffering from temporary blocked database locks.
• 197639: Incompatible module versions are not offered for upgrade.
• 195735: Performance of storing flows to 30sec profiles was optimized to avoid gaps in collected data.
• 197435: The interactive REST API documentation page is functional even if a high number of profiles is present in the system.
• 197131: Live source status is shown properly in the Sources table.
• 195232: Long-duration flow data queries from the Master Unit to the Slave Unit in the Distributed Architecture are not timing out.
• 195704, 190580: The performance of the configuration changes distribution between units in the Distribution Architecture was improved so it is not causing disk utilization issues on systems with many flow sources.
• 196429: If the quota change process in the Distributed Architecture takes longer time, it does not cause corruption of the Source Group configuration.
• 196508: Results of a flow query with an unlimited amount of flows can be properly exported as a CSV.
• 190580: A change of the flow source SNMP settings on the Master Unit of the Distributed Architecture is applied without delay and GUI performance impact.
• 190580: The Master Unit replacement is not causing data loss.
• 196051, 197140, 198727: Traffic widgets automatic refresh works properly.
• 192585: There are no error messages in the log file about failures of deleting old, non-existing packages from the system.

Version 12.3.2

Released: 2023-11-22

Important information

• Forward compatibility of exported configuration is guaranteed throughout all releases with the same major version number. Between major versions, the last stable release of the previous major version is guaranteed to export a configuration that is compatible with the next major version. Example: For Flowmon 12 releases, a configuration export from any 12.3.x release will be compatible with any future 12.4.y release. For upgrades between major versions, if 11.1.13 is the last version released for Flowmon 11 then the configuration exported from this version is compatible with Flowmon 12 and can be imported.
• Spanish, French, and German localization is scheduled to end with Flowmon v13. The 12.3 release includes a notification about this to inform users utilizing these languages.

What's New

• An updated EULA is displayed to admin users after installation.
• Updated MAC - vendor mapping information used by Active Devices. The data was taken from IANA/IEEE.
• Long-running queries in Analysis now show an approximate time of completion.
• If the Product usage data collection is enabled, the help dropdown menu in the page header is replaced by an interactive Resource center.
• 192588: Support for initiatorPackets(231) and responderPackets(232) IPFIX fields (exported by Gigamon devices) has been added.
• PostgreSQL was updated to version 12.17, fixing CVE-2023-5869.
• The phpseclib package was updated to version 2.0.45, fixing CVE-2021-30130.
• The bind package was updated to version 9.11.4-26.P2.el7_9.15, fixing CVE-2023-3341.
• OS kernel was updated to 3.10.0-1160.102.1, fixing CVE-2023-32233 and CVE-2023-35001.

Issues fixed

• 195938: Reporting works properly when profiles with many channels are being used in a report.
• 195704, 189226: Flow source settings update in the Distributed Architecture (DA) was optimized so it is not causing outages if there are many flow sources in the DA topology.
• 189226: The DA topology package update process does not hang on the GUI of the Master Unit for small-sized packages.
• 195458: Occasional dashboard widget failures were fixed.
• 194085: Filtering in Analysis works properly for attributes containing a space character.
• 193732: There are no gaps in exported flow data on the Flowmon Probe caused by malformed QUIC packets.

Version 12.3.1

Released: 2023-10-24

Important information

• Forward compatibility of exported configuration is guaranteed throughout all releases with the same major version number. Between major versions, the last stable release of the previous major version is guaranteed to export a configuration that is compatible with the next major version. Example: For Flowmon 12 releases, a configuration export from any 12.3.x release will be compatible with any future 12.4.y release. For upgrades between major versions, if 11.1.13 is the last version released for Flowmon 11 then the configuration exported from this version is compatible with Flowmon 12 and can be imported.
• Spanish, French, and German localization is scheduled to end with Flowmon v13. The 12.3 release includes a notification about this to inform users utilizing these languages.

What's New

• NodeJS was updated to 16.20.2.

Issues fixed

• A GUI performance issue that was introduced in Flowmon 12.3.0 was fixed.
• 192585: Quotas can be changed again using an input box on appliances with history profiles present.
• 194833: The Yesterday time range has the correct start date set when used in reports.
• 194874: The Flowmon GUI is accessible again for appliances with a small system partition.

Version 12.3.0

Released: 2023-10-03

Important information

• Forward compatibility of exported configuration is guaranteed throughout all releases with the same major version number. Between major versions, the last stable release of the previous major version is guaranteed to export a configuration that is compatible with the next major version. Example: For Flowmon 12 releases, a configuration export from any 12.3.x release will be compatible with any future 12.4.y release. For upgrades between major versions, if 11.1.13 is the last version released for Flowmon 11 then the configuration exported from this version is compatible with Flowmon 12 and can be imported.
• Spanish, French, and German localization is scheduled to end with Flowmon v13. The 12.3 release includes a notification about this to inform users utilizing these languages.

What's New

• The Historical Trends tool in the Flowmon Monitoring Center enables you to compare current network traffic with historical values.
• The Active Sessions tab in Flowmon Configuration Center shows a list of all active users and provides you with the ability to log them off.
• There is a new navigation bar in Dashboards and Reports.
• The Flowmon documentation is now available on https://docs.progress.com.
• The subscription-manager package has been updated (fixing CVE-2023-3899).
• It is possible to import a license to the Flowmon appliance using the REST API.
• PHP was updated to 8.1.

Known issues

• 192585: Quotas cannot be changed using the input box if there is a history profile (you can use the slider as a workaround).

Issues fixed

• 192506: Fixed an issue where redundant firewall rules for a listening port were not created and deleted immediately if there was a listening port change in the past.
• 192507: It is possible to save the schedule of a report with a specific interval period ("Last 1 week").
• 192167: LDAP authentication works well for user groups defined in custom group DN.
• 191899: Monitoring ports are no longer missing after an upgrade, if the Flowmon 11.0.3 release was used as part of the upgrade path.
• 190419: Backup does not proceed if the IP address or Flowmon version is not defined.
• 186629, 186045: There are no gaps in exported flow data on the Flowmon Probe, due to high memory consumption, caused by high network traffic with a low inactive timeout value.
• 189835: An alert is only sent to the notification bell if the DA configuration consistency check is failing repeatedly for 10 minutes.
• 189647: The Analysis page opens properly in the Chrome browser when the tab is reopened after the browser startup.
• 190662: If an nfdump query is cancelled on the DA (Distributed Architecture) Master unit, it is cancelled on Slave unit too (and stops consuming resources).
• 189692: It is possible to access the Distributed Architecture unit CLI to download logs even if the UI gets stuck.
• 189648: Terminating a long-running query from the FCC UI does not affect the execution of other backend tasks.
• 187438: The 1min and 30s shadow source profile start time is now correct when importing XML for disaster recovery.
• 189102: An SNMP trap is generated for alert messages with high severity.
• 187701: After the APM module uninstall completes, the APM firewall rules are deleted from the source group configuration files.
• 191603, 186396: Renaming the port on the Analysis page is reflected in dashboards.
• 184718, 187943: Flowmon properly handles timestamps from the Sonicwall firewall, used as a flow source.
• 191263: Top Chapter computation is not causing the database connections limit to be reached.
• 184593, 185292: It is possible to change the IP address of the Distributed Architecture unit using the Top Priority Master unit.
• 184124: Aggregation has been fixed in the in the Top chapter widget by pairing the Flow source IP address with the interface index.
• 186754: User identity parsing works in Distributed Architecture.
• 191256: Presence of 30s profile is not causing Disaster backup to fail.
• 182391: The User details modified log entry only appears if the user details are updated from the LDAP server.