5.3 Release Notes
The release notes of all 5.3 rWeb and RIOS versions are stored here.
5.3.5 System Release Notes (RIOS v5.3.5)
RIOS v5.3.5 (RE2000, RE4000, RS10, RS30, RG)
A RioRey license is required to upgrade a filter device to RIOS 5.3.0 or later. If you don't have one, please contact RioRey.
Bug Fixes
- AT61 Regexes no longer interfere with AT11 processing.
- Fixed an internal error with SYN handling.
rWeb 5.3.0.release.2 (No rWeb changes)
5.3.4 System Release Notes (RIOS v5.3.4)
RIOS v5.3.4 (RE2000, RE4000, RS10, RS30, RG)
A RioRey license is required to upgrade a filter device to RIOS 5.3.0 or later. If you don't have one, please contact RioRey.
Enhancements
- Support for IF-MIB (defined by RFC2233) added.
Limitations on Traps and Informs:
- SNMP Version 1 -> Supports traps, but it does not support informs.
- SNMP Version 2 -> Supports both traps and informs.
- Supports informs, but it does not support traps.
- More internal logging added for device diagnostics.
Known Issues
- AT61 Regexes interfere with AT11 processing. If you receive too many AT11 in a zone with a regex configured, we recommend disabling the regex.
rWeb 5.3.0.release.2 (No rWeb changes)
5.3.3 System Release Notes (RIOS v5.3.3)
RIOS v5.3.3 (RE2000, RE4000, RS10, RS30, RG)
A RioRey license is required to upgrade a filter device to RIOS 5.3.0 or later. If you don't have one, please contact RioRey.
Enhancements
- AT1, AT2, and AT3 sensitivity adjusted to reduce low packet count victims.
- Internal logging added for attack sample correlation.
Bug Fixes
- The tcpdump function will now correctly record timestamps in captures.
- Fragmented GRE packets are now handled correctly.
- Fragmented traffic algorithms AT4, AT18, and AT24 handle all use cases (0%-100% allowed fragmented traffic).
Known Issues
- AT61 Regexes interfere with AT11 processing. If you receive too many AT11 in a zone with a regex configured, we recommend disabling the regex.
rWeb 5.3.0.release.2 (No rWeb changes)
5.3.1 System Release Notes (RIOS v5.3.1)
RIOS v5.3.0sp1 (RE2000, RE4000, RS10, RS30, RG)
A RioRey license is required to upgrade a filter device to RIOS 5.3.0 or later. If you don't have one, please contact RioRey.
Enhancements
Bug Fixes
- No longer Reporting victim for AT1 ST2 when AT1 is OFF.
- Deprecated use of an unstable internal time function.
- Suppressed unwanted diagnostic log messages from engine.
- Fixed segfault when packet length in IPv4 header is much larger than layer 2 frame.
- Fixed AT4, AT18 and AT24 false positives.
Known Issues
- AT61 Regexes interfere with AT11 processing. If you receive too many AT11 in a zone with a regex configured, we recommend disabling the regex.
rWeb 5.3.0.release.2 (No rWeb changes)
5.3.0sp1 System Release Notes (RIOS v5.3.0sp1, rWeb 5.3.0.release.2)
RIOS v5.3.0sp1 (RE2000, RE4000, RS10, RS30, RG)
A RioRey license is required to upgrade a filter device to RIOS 5.3.0 or later. If you don't have one, please contact RioRey.
Bug Fixes
- Patch for "Shellshock" vulnerabilities CVE-2014-6271/7169. Additionally, this version of RIOS was tested and not vulnerable to CVE-2014-7187.
Known Issues
- If both AT17 and AT22 are set to "Off", AT21 must also be set to "Off" or traffic will be negatively impacted.
- AT61 Regexes interfere with AT11 processing. If you receive too many AT11 in a zone with a regex configured, we recommend disabling the regex.
rWeb 5.3.0.release.2
5.3.0 rWeb upgrades migrate all pre-5.3.0 rWeb data to new tables. Depending upon the size of your existing data, the rWeb upgrade can be a lengthy process (several hours). The upgrade will take up to 30 minutes, plus 30 minutes for every 3 months of data from 100 zone-device pairs configured in rWeb. Do not reboot your rWeb during this time. Upgrades to an rWeb already running 5.3.0 or later should take 10-15 minutes.
Bug Fixes
Known Issues
- ICMP samples in Top Application and Top Protocol are double counted. The ICMP sample counts displayed will be inaccurate.
5.3.0 System Release Notes (RIOS v5.3.0, rWeb 5.3.0.release)
RIOS v5.3.0 (RE2000, RE4000, RS10, RS30, RG)
A RioRey license is required to upgrade a filter device to RIOS 5.3.0 or later. If you don't have one, please contact RioRey.
New Features
- All Attack Types can be set to "Off". Attack Types set to Off will neither filter or monitor traffic, disabling that mitigation control entirely.
- New controls for AT1 and AT2, allowing independent checks for spoofed floods and SYN or SYN-ACK packets with data.
- Advanced underlying controls for AT9, 10, 11, 13, 17, and 23 exposed. Please consult with RioRey before changing these controls.
- New controls under AT22, allowing blocking of SSDP traffic and independent control of data payload testing.
- Support Upload is now available. You can choose to send all essential log files from a filter device to RioRey, or download them to your local computer for review.
- Support added for Clear Filter List functionality.
- Traffic is now reported in the following categories: In, Out, Clean, Attack, Monitored, Dropped.
- Tcpdumps are available on a per device basis. They can now also be run against an entire Zone at once.
Enhancements
- Detection and mitigation time of AT17, 22, and 23 reduced to around 30 seconds.
- Additional subtypes added to AT1, 2, 3, 4, 5, 6, 9, 18, 22, and 24 for better reporting.
- Victim reporting now includes all subtypes.
- Added firewall on management port.
- Support for 1500 byte packets on 1G interfaces to improve performance.
- Improved matching of rFlow statistics against attacks and victims.
Bug Fixes
- MD5 and CBC disabled in SSH.
- System maintenance mode is now reported correctly.
- rFlow now correctly reports SCTP traffic.
Known Issues
- If both AT17 and AT22 are set to "Off", AT21 must also be set to "Off" or traffic will be negatively impacted.
- AT61 Regexes interfere with AT11 processing. If you receive too many AT11 in a zone with a regex configured, we recommend disabling the regex.
rWeb 5.3.0
The 5.3.0 rWeb upgrade migrates all rWeb data to new tables. Depending upon the size of your existing data, the rWeb upgrade can be a lengthy process (several hours). The upgrade will take up to 30 minutes, plus 30 minutes for every 3 months of data from 100 zone-device pairs configured in rWeb. Do not reboot your rWeb during this time.
New Features
- rWeb can now generate backups. The API for backups is also available.
- Support Upload is now available. You can choose to send all essential log files from a filter device to RioRey, or download them to your local computer for review.
- You can search and clear the Clear Filter List for previously blocked IP addresses under Attack Types 7, 8, 10, 11, 12, 13, 14, 15, or 16.
- Top Protocol section added.
- Traffic Summary now shows traffic in the following categories: In, Out, Clean, Attack, Monitored, Dropped.
- rWeb can have its IP and default admin login reset using serial.
Enhancements
- Detailed reporting on Victims is now shown on its own tab.
- Tcpdumps are available on a per device basis. They can now also be run against an entire Zone at once.
- Relabeled buttons on the Customer and Zone list to clearly show whether you go to the Routing, Mitigation, or Group Information page.
- rWeb Status now displays rWeb's uptime.
- rWeb Management now shows the current status of the configured NTP servers.
- All attack subtypes are shown for Victims.
- Victim notifications can now have individual criteria (time, packet count, packet rate) disabled.
- You can search Customers and Zones by subnet.
- Upgraded internal components.
- Tracks user IP and logged time.
Known Issues
- ICMP samples in Top Application and Top Protocol are double counted. The ICMP sample counts displayed will be inaccurate.