Network Security Platform Mxx30-Series 8.1.x Known Issues
技術的な記事 ID:
KB81376
最終更新: 9/11/2019
環境
McAfee Network Security Sensor Mxx30-Series 8.1.x
概要
This article contains important information about known issues of high or medium rating that are outstanding with this product release. This article will be updated if new issues are identified post-release, or if additional information becomes available. To read the Release Notes, see:
Issue: [M-series, Mxx30-series] [M-series, Mxx30-series] Sensor enters auto-recovery mode. The reason is because the datapath processor becomes unresponsive.
Issue: Change to upgrade process requirements for Managers and Sensors for this release.
If you try to upgrade NSM to 8.1.7.91, without first upgrading to a supported Sensor version, the NSM upgrade wizard fails with the error:
Unsupported Device Certificate Strength Detected.
Cause: With this release, support for 1024-bit key encryption for Sensor to Manager communication has been removed. NSP only uses a 2048-bit key for stronger encryption. 1024-bit encryption is no longer supported with the latest release. You must upgrade the NSM and the Sensors to the following minimum required versions before you upgrade the manager to 8.1.7.91:
NSM: 8.1.7.33 and later through to 8.1.7.91
NS 9x00 Sensor models: 8.1.5.175 and later through to 8.1.5.210
NS 7x00 Sensor models: 8.1.5.175 and later through to 8.1.5.210
NS 5x00 Sensor models: 8.1.5.154 and later through to 8.1.5.210
NS 3x00 Sensor models: 8.1.5.170 and later through to 8.1.5.210
M-series Sensor models: 8.1.3.89 and later through to 8.1.3.124
XC-series: 8.1.3.89 and later through to 8.1.3.124
Virtual Sensor: 8.1.7.32 and later through to 8.1.7.44
Solution: To avoid or resolve this issue:
Ensure that the NSM is running a software version that is supported for upgrade to 8.1.7.91.
Upgrade each Sensor to one of the supported versions listed above.
NOTE: If you have tried the NSM upgrade and encountered the listed error, you see the file SensorCertificateLog on the NSM server desktop. This file lists the Sensors currently running 1024-bit encryption. You can refer this file to identify which Sensors you must upgrade.
After your Sensors are upgraded to supported versions, upgrade the NSM to 8.1.7.91.
Upgrade each Sensor to the latest release; see the list of release notes at the top of this article for further details.
NOTE: If you prefer to not upgrade the Sensors further, you can keep them on the supported version you have upgraded to.
1178511
Issue: If you power down the Sensor and then quickly power it back up, the Sensor might then either fail to boot, report errors, or stop responding and handling traffic. Solution: When you power down the Sensor, always wait a minimum of two minutes for it to completely shut down before you power it back up.
Non-critical:
Reference Number
Related Article
Issue Description
947790
Issue: Filename in URL, captured and sent as part of an alert from the Sensor to the syslog server, does not support non-English characters.
917539
Issue: DNS object-based rule does not work post auto-recovery with pptTask suspended to trigger the recovery.
914684
Issue: L7 DDoS Java script challenge does not work.
691838
Issue: ARP packets are continuously sent to the NTBA appliance when the Sensor is switched to layer2 mode.
