NS-series Release Notes Network Security Platform 7.1 Revision A Contents About this document New features Resolved issues Known issues Installation instructions Product documentation About this document This document contains important information about the current release. We strongly recommend that you read the entire document. This release of Network Security Platform is to provide a few fixes on the NS-series Sensor software. This release was developed for use with: • Network Security Manager software version: 7.1.5.14 • Signature Set: 7.6.12.9 • NS-series Sensor software version: 7.1.5.72 This version of 7.1 Manager software can be used to configure and manage the following hardware: I-series Sensors, M-series Sensors, N-series Sensors, NS-series Sensors, XC Cluster, and NTBA Appliances. The 7.5.x.x Manager can manage NS9100 and NS9200 Sensors. The NS9300 Sensor cannot be managed using the 7.5.x.x Manager; it requires a 7.1.5.x Manager. New features This release notes is to announce the availability of a maintenance release for McAfee's NS-series Sensor software version 7.1. This release provides few fixes on the NS-series Sensor software issues. 1 Resolved issues These issues are resolved in this release of the product. For a list of issues fixed in earlier releases, see the Release Notes for the specific release. Resolved Manager software issues The following table lists the medium-severity Manager software issues: ID # Issue Description 941108 The Sensor performance report provides incorrect data and labels. 931928 The SMTP authentication settings change unexpectedly upon Manager reboot. 924593 All the data between the Manager and the Central Manager does not synchronize completely. 923970 The blocking shield icon is not displayed in the attack column even if it is configured to block. 921590 The "iv_alert_uri_info" table is included during configuration backup when taken from the infocollector utility. 910422 Codebase and permission attribute warnings are missing when Applet and Webstart are launched. 891373 GeoLoc update failure issue is fixed to trigger only after the completion of the configuration update. 886380 The Manager checks for updates even when it is offline and does not disable automatically when offline. 801944 Port speed and duplex settings does not function properly in TAP mode in a failover pair. 767932 The Manager timeout causes the flapping of channels. Resolved Sensor software issues The following table lists the high-severity Sensor software issues: ID # Issue Description 948624 When a 40 GB module is used in NS9300, the UDP performance is very low and the load balancing is affected. The following table lists the medium-severity Sensor software issues: ID # Issue Description 939311 The NTBA exporter is configured and cannot be reached due to which the Sensor gets into a deadlock in some rare cases. During the deadlock the Sensor stops processing packets thereby causing an outage. 937639 Under rare case scenario, the Sensor causes latency due to out-of-context traffic and many ACL rules. 936489 The Sensor returns an incorrect value for power supply status via SNMP. 934250 In rare case scenario, the Sensor raises false temperature alerts. 925881 The source IP address (octets) are reversed for ARP spoofing alerts. Also, the source IP address is replaced with all 0's in the Evidence Report. 921587 The user will not be redirected to remediation portal if the user has configured in his policy to redirect if a host is quarantined. 2 ID # Issue Description 918002 The hosts quarantined due to "BOT CC" attack, remains quarantined forever. 880770 The message "Sensor is unreachable" is displayed in the primary Manager for all the Sensors, when the Manager was replaced for an MDR pair. Known issues For a list of known issues in this product release, see this McAfee KnowledgeBase article: • Manager software issues: KB76517 • NS-series Sensor software issues: KB76518 Installation instructions Review the following before you install the Manager software: The following table lists the 7.1 Manager server requirements: OS Minimum required Recommended Any of the following: Same as the minimum required. • Windows Server 2008 R2 Standard or Enterprise Edition, English OS, SP1 (64 bit) (Full Installation) • Windows Server 2008 R2 Standard or Enterprise Edition, Japanese OS, SP1 (64 bit) (Full Installation) Only X64 architecture is supported. Memory 4GB 8GB CPU Server model processor such as Intel Xeon Same Disk space 40GB 80GB disk with 8MB memory cache or greater Network 100Mbps card 1000Mbps card Monitor 32-bit color, 1024 x 768 display setting 1280 x 1024 The following are the system requirements for hosting Central Manager/Manager server on a VMware platform. Table 5-1 Virtual machine requirements for Central Manager/Manager Component Minimum Recommended OS Same as minimum required. Any of the following: • Windows Server 2008 R2 – Standard or Enterprise Edition with SP1 (English) (64 bit) • Windows Server 2008 R2 – Standard or Enterprise Edition with SP1 (Japanese) (64 bit) Only X64 architecture is supported. Memory 4 GB 8 GB 3 Table 5-1 Virtual machine requirements for Central Manager/Manager (continued) Component Minimum Recommended Virtual CPUs 2 2 or more Disk Space 80GB 40GB Table 5-2 VMware ESX server requirements for Central Manager/Manager Component Minimum Virtualization software • VMWare ESX Server version 4.0 update 1 and version 4.1 • ESXi 5.0 • ESXi 5.1 CPU Intel Xeon ® CPU ES 5335 @ 2.00GHz; Physical Processors – 2; Logical Processors – 8; Processor Speed – 2.00GHz. Memory Physical Memory: 16GB Internal Disks 1 TB The following table lists the 7.1 Manager client requirements when using Windows 7: Minimum OS Recommended Windows 7 The display language of the Manager client must be same as that of the Manager server OS. RAM 2 GB 4 GB CPU 1.5 GHz processor 1.5 GHz or faster Browser • Internet Explorer 8.0 or 9.0 Internet Explorer 9.0 • Mozilla Firefox 4.0 and above The following table lists the 7.1 Manager client requirements when using Windows XP SP3: Minimum Recommended OS Windows XP SP3 RAM 1 GB 2 GB Browser • Internet Explorer 7.0 or 8.0 Internet Explorer 8.0 • Mozilla Firefox 4.0 and above For the Manager client, in addition to Windows 7 and Windows XP, you can also use the operating systems mentioned for the Manager server. For more information, see McAfee Network Security Platform Installation Guide. McAfee regularly releases updated versions of the signature set. Note that automatic signature set upgrade does not happen. You need to manually import the latest signature set and apply it to your Sensors. The following is the upgrade matrix supported for this release: 4 NSP Component Minimum Software Version Manager/Central Manager 6.1.1.7, 6.1.1.34, 7.1.3.5, 7.1.5.7, 7.1.5.10 NS-series Sensors • NS9100, NS9200: 7.1.5.23, 7.1.5.40 • NS9300: 7.1.5.33, 7.1.5.40 For more information, see McAfee Network Security Platform Upgrade Guide. Product documentation Every McAfee product has a comprehensive set of documentation. Find product documentation 1 Go to the McAfee Technical Support ServicePortal at http://mysupport.mcafee.com. 2 Under Self Service, access the type of information you need: To access... Do this... User documentation 1 Click Product Documentation. 2 Select a product, then select a version. 3 Select a product document. KnowledgeBase • Click Search the KnowledgeBase for answers to your product questions. • Click Browse the KnowledgeBase for articles listed by product and version. The related documents available with NS-series software are: • NS-series Quick Start Guide • NS-series Transceiver Modules Reference Guide • NS-series Sensor Product Guide • 40 Gigabit Active Fail-Open Kit Quick Start Guide • NS-series Interface Modules Reference Guide • Addendum II to 7.1 Documentation Copyright © 2014 McAfee, Inc. Do not copy without permission. McAfee and the McAfee logo are trademarks or registered trademarks of McAfee, Inc. or its subsidiaries in the United States and other countries. Other names and brands may be claimed as the property of others. 0A-00
© Copyright 2024 ExpyDoc
