Skip to main content

5.7 Release Notes

The release notes of all 5.7 rWeb and RIOS versions are stored here.

5.7.5 System Release Notes (RIOS 5.7.5)​

RIOS v5.7.5 (RE2000, RE4000, RE2200, RE4200, RE5200, RX10, RS10, RS30, RG)

info

A RioRey license is required to upgrade a filter device to RIOS 5.3.0 or later. If you don't have one, please contact RioRey.

Bug Fixes

  • Fixed condition on RG devices where packets could sporadically be reflected on their input ports.

Known Issues

  • If both AT17 and AT22 are set to "Off", AT21 must also be set to "Off" or traffic will be negatively impacted.

rWeb 5.7.0.release (No rWeb Upgrade Required)

Known Issues

  • RADIUS and TACAS logins are currently being restricted to the admin group. Logins using one of the other predefined groups or a newly created group will fail.
  • Email notifications will fail to be received properly if you entered addresses separated by newline. As a workaround please use commas between addresses instead.

Configuration Recommendation We are observing an uptick in AT1, AT2, and AT5 excessive duplicate victims as a result of the Mirai botnet. In certain cases, the number of victims generated by this traffic at our default setting of '10' for 'Maximum Duplicates' under these attack types reaches excessive levels (millions of victims).

As a general recommendation, we suggest adjusting the 'Maximum Duplicates' controls for these attack types to 30 or 40. This will still afford effective mitigation to attacks but prevent excessive victim churn that has in some cases affected rWeb responsiveness.

An example script to make this change for AT1 can be found here.

5.7.4 System Release Notes (RIOS 5.7.4)​

RIOS v5.7.4 (RE2000, RE4000, RE2200, RE4200, RE5200, RX10, RS10, RS30, RG)

info

A RioRey license is required to upgrade a filter device to RIOS 5.3.0 or later. If you don't have one, please contact RioRey.

Release Recommendation This release fixes the issue that could affect an RS30 or RX10 that had not been cold rebooted (power cords pulled and reinserted) for over 200 days. In order to make sure the patch is applied correctly, we recommend triggering a reboot from within rWeb after upgrading to this version. No further cold reboots are required.

Enhancements

  • Enabled more detailed database logging.

Bug Fixes

  • Applied critical kernel patch that fixed issues with the TSC being set incorrectly on RS30s and RX10s, which was causing various performance and interface problems.
  • Fix for interface statistics process that was polling twice as often as expected.
  • Removed platform code that was trying to copy data for which it had no permissions.

Known Issues

  • If both AT17 and AT22 are set to "Off", AT21 must also be set to "Off" or traffic will be negatively impacted.

rWeb 5.7.0.release (No rWeb Upgrade Required)

Known Issues

  • RADIUS and TACACS logins are currently being restricted to the admin group. Logins using one of the other predefined groups or a newly created group will fail.
  • Email notifications will fail to be received properly if you entered addresses separated by newline. As a workaround please use commas between addresses instead.

Configuration Recommendation We are observing an uptick in AT1, AT2, and AT5 excessive duplicate victims as a result of the Mirai botnet. In certain cases, the number of victims generated by this traffic at our default setting of '10' for 'Maximum Duplicates' under these attack types reaches excessive levels (millions of victims).

As a general recommendation, we suggest adjusting the 'Maximum Duplicates' controls for these attack types to 30 or 40. This will still afford effective mitigation to attacks but prevent excessive victim churn that has in some cases affected rWeb responsiveness.

An example script to make this change for AT1 can be found here.

5.7.3 System Release Notes (RIOS 5.7.3)​

RIOS v5.7.3 (RE2000, RE4000, RE2200, RE4200, RE5200, RX10, RS10, RS30, RG)

info

A RioRey license is required to upgrade a filter device to RIOS 5.3.0 or later. If you don't have one, please contact RioRey.

Enhancements

  • Improved 10G interface packet processing.

Bug Fixes

  • Fix for interface statistics process that was polling twice as often as expected..

Known Issues

  • If both AT17 and AT22 are set to "Off", AT21 must also be set to "Off" or traffic will be negatively impacted.

rWeb 5.7.0.release (No rWeb Upgrade Required)

Known Issues

  • RADIUS and TACACS logins are currently being restricted to the admin group. Logins using one of the other predefined groups or a newly created group will fail.
  • Email notifications will fail to be received properly if you entered addresses separated by newline. As a workaround please use commas between addresses instead.

Configuration Recommendation We are observing an uptick in AT1, AT2, and AT5 excessive duplicate victims as a result of the Mirai botnet. In certain cases, the number of victims generated by this traffic at our default setting of '10' for 'Maximum Duplicates' under these attack types reaches excessive levels (millions of victims).

As a general recommendation, we suggest adjusting the 'Maximum Duplicates' controls for these attack types to 30 or 40. This will still afford effective mitigation to attacks but prevent excessive victim churn that has in some cases affected rWeb responsiveness.

An example script to make this change for AT1 can be found here.

5.7.2 System Release Notes (RIOS 5.7.2)​

RIOS v5.7.2 (RE2000, RE4000, RE2200, RE4200, RE5200, RX10, RS10, RS30, RG)

info

A RioRey license is required to upgrade a filter device to RIOS 5.3.0 or later. If you don't have one, please contact RioRey.

Bug Fixes

  • LLCF on RS30 and RX10 10G interfaces without an RB bypass will now work as expected.
  • Added a udev rule for RE management interfaces.

Known Issues

  • If both AT17 and AT22 are set to "Off", AT21 must also be set to "Off" or traffic will be negatively impacted.

rWeb 5.7.0.release (No rWeb Upgrade Required)

Known Issues

  • RADIUS and TACAS logins are currently being restricted to the admin group. Logins using one of the other predefined groups or a newly created group will fail.
  • Email notifications will fail to be received properly if you entered addresses separated by newline. As a workaround please use commas between addresses instead.

5.7.1 System Release Notes (RIOS 5.7.1)​

RIOS v5.7.1 (RE2000, RE4000, RE2200, RE4200, RE5200, RX10, RS10, RS30, RG)

info

A RioRey license is required to upgrade a filter device to RIOS 5.3.0 or later. If you don't have one, please contact RioRey.

Enhancements

  • Improved HTTP processing.
  • Internal debugging code improved.

Bug Fixes

  • Destination whitelist in the Default zone now works as expected.
  • Increased a timeout value for mounting the log partition.
  • Fix implemented for a memory leak found in victim syslog reporting.
  • Adjusted memory availability and usage for session tracking.
  • Fix for TX errors sometimes seen when sending full sized ethernet packets that may cause full sized packets to be dropped.

Known Issues

  • If both AT17 and AT22 are set to "Off", AT21 must also be set to "Off" or traffic will be negatively impacted.
  • RS30 and RX10 10G interfaces without an RB bypass unit will not trigger LLCF properly.

rWeb 5.7.0.release (No rWeb Upgrade Required)

Known Issues

  • RADIUS and TACACS logins are currently being restricted to the admin group. Logins using one of the other predefined groups or a newly created group will fail.
  • Email notifications will fail to be received properly if you entered addresses separated by newline. As a workaround please use commas between addresses instead.

5.7.0 System Release Notes (RIOS 5.7.0, rWeb 5.7.0.release)​

RIOS v5.7.0 (RE2000, RE4000, RE2200, RE4200, RE5200, RX10, RS10, RS30, RG)

info

A RioRey license is required to upgrade a filter device to RIOS 5.3.0 or later. If you don't have one, please contact RioRey.

Enhancements

  • Changed defaults for AT8 sensitivity level 5.
  • Added a log marker with vital info: free memory, uptime, etc.

Bug Fixes

  • Adjusted internal timing system to be more accurate.
  • Generates more information dumps when a device transitions to failure mode.
  • Now includes agent log rotations and failure dumps in the support upload.
  • Fixed a bug with AT17 subtype reporting and packet samples.

Known Issues

  • If both AT17 and AT22 are set to "Off", AT21 must also be set to "Off" or traffic will be negatively impacted.

rWeb 5.7.0.release

New Features

  • rWeb is now available as a VM image.

  • Different group permissions can be configured.

  • Web based console access for rWeb added for advanced support.

  • Maintenance user added for advanced support.

    We highly recommend configuring the maintenance user and securely storing the password in case advanced troubleshooting is required by RioRey Support.

Enhancements

  • Graphs can now display average bits per packet.
  • Ports on devices can be labeled using port alias.
  • AS/CC search responsiveness improved.
  • All categories in a percent chart are now selected by default.
  • rWeb setup pages have been touched up for a cleaner look and feel.
  • Email notification performance improved.
  • Net stats performance improved.
  • RioRey favicon added.

Bug Fixes

  • Patch for SSL CRIME vulnerability.
  • RIOS versions unsupported by the device's current license can no longer be staged (see section C.3).
  • Excessive bursts of cleanup activity are now more regular.
  • Fixed incorrect filter list reporting when filtering mode was changed.
  • Fixed an issue where backup couldn't properly load the restore file.
  • Fixed missing subtypes in email notifications.
  • API logins are now reported correctly.
  • Fixed https->http redirect issue reported in rWeb 5.6.0.release.

Known Issues

  • RADIUS and TACACS logins are currently being restricted to the admin group. Logins using one of the other predefined groups or a newly created group will fail.
  • Email notifications will fail to send if you entered addresses separated by newline. As a workaround please use commas between addresses instead.