HP Switch Services Modules - HP SECBLADEII-CMW520-F3171P05 Release Notes

HP SECBLADEII-CMW520-F3171P05

Release Notes

Hewlett-Packard Development Company, L.P.

• Description: The protected IP addresses configured in TCP Proxy get lost.

Problem 3 HSD98603

• Condition: Upgrade the firewall from version F3166, R3166, or F3169 to version F3171.

• Description: After the upgrade, the session backup function enabled for stateful

failover is not enabled.

Resolved problems in

SECBLADEII-CMW520-F3171P04

Problem 1 HSD97629

• Condition: Configure OSPF routes.

• Description: For an ABR that belongs to both Area 0 and a stub area, the ABR sends

the default route to the stub area only when it has a Full state neighbor in Area 0.

Problem 2 HSD94106

• Condition: Enable H.323 ALG.

• Description: ALG cannot correctly process fragmented application layer data,

resulting in a service failure.

Problem 3 HSD99322

• Condition: Configure a VRRP group comprising a master firewall and a backup firewall.

Then perform master/backup switchovers repeatedly.

• Description: Both the two firewalls may send the same directed broadcasts,

generating redundant traffic.

Resolved problems in

SECBLADEII-CMW520-F3171P03

Problem 1 HSD97657

• Condition: Enable the FTP ALG function and the NAT function.

• Description: If concurrent FTP connections are too much, memory may be overread

when the FTP control connection obtains some special FTP payload, resulting in a

device reboot.

Problem 2 HSD97664

• Condition: None

• Description: Run time displayed in the web interface and that displayed at the CLI are

inconsistent.

Problem 3 HSD96549

• Condition: Network attacks or burst traffic bring more sessions, resulting in high memory

occupation.