Skip to main content

6.2 Release Notes

The release notes of all 6.2 rWeb and RIOS versions are stored here.

6.2.2 System Release Notes (RIOS 6.2.2)​

RIOS v6.2.2 (RE2000, RE4000, RE2200, RE4200, RE5200, RX10, RS10, RS30, RG)

All bug fixes in this release are RG specific.

Bug Fixes

  • Fix for bug in the packet switching code caused by IP packets containing a truncated IP header in the payload.
  • Adjusted internal recovery timeout for system component that was causing other system components to be rebooted unnecessarily.
  • Suppressed extraneous syslog entries for IPv6 Mobility traffic.

rWeb 6.2.0.release or higher required

6.2.1 System Release Notes (RIOS 6.2.1)​

RIOS v6.2.1 (RE2000, RE4000, RE2200, RE4200, RE5200, RX10, RS10, RS30, RG)

Bug Fixes

  • Fixed bug where IPv6 traffic with a Traffic Class other than 0 could be dropped as failing an IPv4 header length check under AT62.
  • Fixed case where filter list queries could report an attacker in 'auto' mode while the zone's algorithm for that attack type was set to 'monitor'. This was a reporting issue only; traffic would not actually be dropped.

rWeb 6.2.0.release or higher required

6.2.1 System Release Notes (rWeb 6.2.1.release)​

rWeb 6.2.1.release

Enhancements

  • Behavior on the Zone Victim Tab is now improved. The top sections is now relabeled "Victim Search" and can be toggled by clicking on its header bar. Clicking on victim detail links will now hide this section and bring the "Selected Victim" section to the top of the page for better viewing.

Bug Fixes

  • Fixed bug from rWeb 6.1.3 where a race condition could cause an extension used by many rWeb 6.2 features to be deleted, causing some components to fail.
  • Fixed bug where trying to go to a link while unauthenticated would redirect you to the Dashboard after logging in. You will now be brought to the correct original link instead.
  • Fixed bug where RIOS filter devices did not properly re-synchronize their blacklist/whitelist entries following a blacklist/whitelist fix made in rWeb 6.2.0. Devices which have resource limit conflicts will not receive zone configuration updates until the conflict is resolved.

6.2.0 System Release Notes (rWeb 6.2.0.release)​

rWeb 6.2.0.release

New Features

  • Syslog for rWeb. rWeb can now send syslog messages for alert messages, license statuses, and notification of attacks beginning and ending.
  • System alerts can now be configured. Ongoing statuses that affect your system can now be shown via GUI, email notifications, or syslog messaging.
  • New dashboard design. The dashboard now shows alerts, a synopsis of attack traffic and victims over the past 30 days, summary of zones and groups currently under attack, and an overview of your device's current license status.
  • Support for new whitelist, blacklist, and greylist functionality (global and greylist functionality requires RIOS 6.2.0).

Enhancements

  • Multiple query improvements for better performance, among them rendering on the netstats page.
  • Additional information about device interfaces is now shown on the device summary page (MAC address, flow control settings, RX/TX counts, etc).
  • The logo on the top bar is now a shortcut for the dashboard.
  • Updated backend database connection manager code for devices.
  • Support for new AT8 (subtype 7) and AT63 subtypes (requires RIOS 6.2.0).
  • Added country flag icons to blacklist, whitelist, and AS/CC lookup.
  • Device Administration dropdown now looks and behaves more like the Zone Control dropdown.

Bug Fixes

  • Fixed cases where a zone might only be partially pushed to devices.
  • NTP status will now differentiate between a server in the process of synching and one that's unreachable.
  • Zone management for devices now shows the prefixes used by the Default Zone correctly.
  • Device summary will now show "Port Down" alarm description for alarms caused by interfaces going down.
  • Fixed issue where zones at the same whitelist revision could alter other zone's entries.
  • Now reports Insufficient Resource/Unsupported NIC Alarms for non-VM Devices on device summary page.
  • Changed error message when trying to upload an excessively large file as a license.
  • Fixed bug where IP search would invisibly fail and prevent new searches.
  • Resized Clear Filter List History to show all entries clearly.
  • Fixed issue where the Zone column would be dropped from Zone Management when viewing by bits or bits/packet.
  • Fixed bug where deleting a subnet from Zone Routing while editing it would not close the editor properly.
  • Fixed bug where email addresses separated by newline characters would cause emails to fail to send properly.
  • Fixed several cases where Query Filter List would return incorrect results.
  • Test emails will only be sent once per request rather than constantly retrying to send.
  • Fixed issue where making a GET request of the /groups resource with a "name" query parameter would fail.
  • Fixed issue where you could upload an SSL Certificate that would then not properly show its status.
  • Fixed bug where additional "Select License Files" buttons were added on the Licenses page.
  • Updated backend logging code to prevent potential deadlocks.
  • Error message added for when attempting to use STARTTLS on an SMTP server that doesn't support it.
  • Fixed issue where deleting a template while it is used by a zone could cause permissions issues.
  • Fixed alerting and pushing of configuration when device blacklist/whitelist/subnet limits are reached.
  • Fixed issue where upgrading rWeb would not properly request all non-cached resources.
  • Fixed issue where a device commands handler was dying if certain commands got delayed, usually presented as multiple device disconnects when nothing was wrong.
  • Extended license status refresh rate from 5 seconds to 30 to prevent performance hit when a large number of uploaded licenses are present.
  • Editing a blacklist entry now properly accepts "unlimited" as an expiration time.

6.2.0 System Release Notes (RIOS 6.2.0)​

RIOS v6.2.0 (RE2000, RE4000, RE2200, RE4200, RE5200, RX10, RS10, RS30, RG)

New Features

Enhancements

  • AT8 can now be adjusted to block attackers abusing session behavior and closing by RST rather than FIN.
  • AT3 will now filter much faster (closer to 30 seconds on most tests) and with fewer false negatives.
  • Implemented DPDK support for future platform releases.
  • RIOS syslog messages will now be in RFC5424 compatible format.

Bug Fixes

  • Fixed case where the RG would not correctly recover a filter blade from a failure condition.
  • Removed erroneous log message related to AT8 processing.
  • Fixed case where duplicate AT25 victims could be created.
  • Fixed a small memory leak in a configuration handler.
  • Fixed some internal logging that was printing in network order rather than host order for structures that stored IPs in host order format.
  • Fixed bug where Force On mode for AT1 would not work in certain situations.
  • Fixed bug where if both AT17 and AT22 are set to "Off", AT21 must also be set to "Off" or traffic will be negatively impacted.

rWeb 6.2.0.release or higher required