This article contains important information about known issues of high or medium rating that are outstanding with this product release. This article will be updated if new issues are identified post-release, or if additional information becomes available. To read the Release Notes, see:
Issue: [M-series, Mxx30-series] Sensor enters auto-recovery mode. The reason is because the datapath processor becomes unresponsive.
Issue: Change to upgrade process requirements for Managers and Sensors for this release.
If you try to upgrade NSM to 8.1.7.91, without first upgrading to a supported Sensor version, the NSM upgrade wizard fails with the error:
Unsupported Device Certificate Strength Detected.
Cause: With this release, support for 1024-bit key encryption for Sensor to Manager communication has been removed. NSP only uses a 2048-bit key for stronger encryption. 1024-bit encryption is no longer supported with the latest release. You must upgrade the NSM and the Sensors to the following minimum required versions before you upgrade the manager to 8.1.7.91:
NSM: 8.1.7.33 and later through to 8.1.7.91
NS 9x00 Sensor models: 8.1.5.175 and later through to 8.1.5.210
NS 7x00 Sensor models: 8.1.5.175 and later through to 8.1.5.210
NS 5x00 Sensor models: 8.1.5.154 and later through to 8.1.5.210
NS 3x00 Sensor models: 8.1.5.170 and later through to 8.1.5.210
M-series Sensor models: 8.1.3.89 and later through to 8.1.3.124
XC-series: 8.1.3.89 and later through to 8.1.3.124
Virtual Sensor: 8.1.7.32 and later through to 8.1.7.44
Solution: To avoid or resolve this issue:
Ensure that the NSM is running a software version that is supported for upgrade to 8.1.7.91.
Upgrade each Sensor to one of the supported versions listed above.
NOTE: If you have tried the NSM upgrade and encountered the listed error, you see the file SensorCertificateLog on the NSM server desktop. This file lists the Sensors currently running 1024-bit encryption. You can refer this file to identify which Sensors you must upgrade.
After your Sensors are upgraded to supported versions, upgrade the NSM to 8.1.7.91.
Upgrade each Sensor to the latest release; see the list of release notes at the top of this article for further details.
NOTE: If you prefer to not upgrade the Sensors further, you can keep them on the supported version you have upgraded to.
Non-critical:
Reference Number
Related Article
Issue Description
1101150
Issue: Signature set update fails when CIDR is not configured and the number of VIDS configured exceeds 900.
947790
Issue: File name in URL, captured and sent as part of an alert from the Sensor to the syslog server, does not support non-English characters.
917539
Issue: DNS object-based rule does not work post auto-recovery with pptTask suspended to trigger the recovery.
914684
Issue: Layer 7 DDoS JavaScript challenge does not work.
