Release Notes 1.12.2
Release Date: August 25, 2016
Important: A Conductor running 1.11.3 must be upgraded using a different package
than used to update 1.12.1. Please follow the instructions carefully on the download page to
acquire the correct installer package.
Note: A HIPswitch running 1.11 can only be updated to 1.12 with a Conductor
running 1.12. Update your Conductor before updating your HIPswitches from 1.11.
Conductor Enhancements
| ID | Feature | Description |
|---|---|---|
| DEV-3585 | Conductor | You can now configure AWS cloud provider settings in the Conductor to allow the Conductor to manage AWS-based HIP Services. |
| DEV-3587 | Conductor | The Conductor now allows automatic injection of routes for protected devices in AWS, allowing traffic to pass through the Tempered infrastructure. |
| DEV-3813 | Conductor | You can now set the MTU for any wired port on a shared or device interface. Valid ranges are 100 - 9000 with a default of 1500. |
| DEV-3850 | Conductor, People | For security reasons, an Administrator can no longer view other user's API auth tokens. A user can only view their own. |
| DEV-3934 | Conductor, Provisioning | You can now provision a Conductor, physical or virtual, over the internet. When
connecting to the Conductor for the first time, you will be able to install your
license from your browser. Note: The Conductor is disabled until properly
provisioned. |
HIP Services Enhancements
| ID | Feature | Description |
|---|---|---|
| DEV-2556 | HIPswitch, Cellular | HIPswitch cellular models now allow you to select common APNs from a drop-down list in diagnostic mode. |
| DEV-3749 | HIP Services | You can now configure VLAN tags from the Ports configuration page in the Conductor UI and the diagnostic mode Web UI. |
| DEV-3755 | HIPserver | HIPserver, now available for Windows Server 2008 R2 and Windows Server 2012 R2, allows you to connect and protect your servers. |
| DEV-3778 | HIPapp/server | Configuring the device IP address is now done from the Conductor and not from the installed HIPapp/server. |
Fixes
| ID | Function | Resolution |
|---|---|---|
| DEV-2719 | Conductor UI | Fixed an issue where the Connection Lost message was not dismissed automatically when a connection is restored. |
| DEV-2973 | HIPswitch, Diagnostic Mode | Fixed an issue where the default IP address did not display correctly when in diagnostic mode. |
| DEV-2977 | Conductor, HIP Services | Fixed an issue where the Conductor allowed the reuse of underlay addresses as local device IP addresses and caused routing conflicts. |
| DEV-3095 | HIPswitch | Using now returns results more quickly when a large number of peer HIPswitches are offline. |
| DEV-3104 | Conductor, Provisioning | Fixed an issue where a voucher with no licenses available does not alert you correctly. |
| DEV-3272 | HIPswitch | Fixed an issue where the LCD front panel operator menu did not display an unmanaged HIPswitch correctly. |
| DEV-3301 | Conductor | Fixed an issue where the option to check secure tunnel performance (iperf) in the Support tab was visible if the target HIPservice did not support this function. |
| DEV-3332 | Conductor | Fixed an issue where the tunnel-check feature returned negative results if the amount of time building HIP tunnels takes longer than a second. |
| DEV-3454 | HIPswitch downgrade | Fixed an issue where downgrading to 1.11.3 from 1.12 on a HIPswitch does not preserve custom port assignments. |
| DEV-3483 | Conductor | Fixed an issue where a read-only administrator could not view a voucher on the Licensing tab. |
| DEV-3488 | HIPswitch | Fixed an issue where upgrading to 1.12 may display the product model incorrectly for a 400-series HIPswitch. |
| DEV-3583 | Provisioning | Fixed an issue where the provisioning server could return a certificate from a previous licensing request to a HIPswitch. |
| DEV-3605 | Conductor | Fixed an issue where demo vouchers could be accepted on a production Conductor. |
| DEV-3671 | Conductor | Fixed an issue that caused replaced HIPswitches to no longer be manageable in the Conductor requiring factory-resetting. |
| DEV-3674 | HIPapp | Fixed an issue that allowed an excessive amount of log files to be created by a HIPapp. |
| DEV-3706 | HIPswitch, HIPapp | Fixed an issue that caused HIPapp traffic to stall during fail-back when tunneling to HA-paired HIPswitches. |
| DEV-3707 | HIPswitch | Fixed an issue that caused the firewall to block all traffic when the HIPswitch was in transparent mode. |
| DEV-3715 | Conductor | Fixed an issue that could cause the Conductor to hang up and fill up the disk with log messages. |
| DEV-3720 | Conductor | Fixed a memory leak in the IFMAP server. |
| DEV-3747 | HIPswitch | Fixed an issue that could cause a HIPswitch-Conductor connection instability in large deployments (500+ HIPswitches). |
| DEV-3768 | HIPswitch - WiFi | Fixed an issue where the HIPswitch Port Assignment tab and diagnostic mode both incorrectly allow you to change cellular and WiFi ports to be part of the device network. |
| DEV-3769 | Conductor | Fixed an issue where the port configuration shown for a HIPswitch 100g having 1.12.0 / 1.12.1 may have incorrect port numbers. |
| DEV-3789 | HIPswitch | Fixed an issue that could prevent HIPswitch HA-pair configurations to be cleaned up correctly after deleting the configuration in the Conductor. |
| DEV-3793 | HIPswitch | Fixed an issue that prevented device activity to display in Conductor for NAT'ed devices. |
| DEV-3807 | Conductor | Fixed an issue where factory-resetting a Conductor could leave the database in an unusable state. |
| DEV-3819 | HIPapp | Fixed an issue where a desktop icon was not created when the option was checked in the installer. |
| DEV-3831 | Conductor, HIPswitch | Fixed an issue that caused a replaced HIPswitch to lose its association with the Conductor requiring a factory reset. |
| DEV-3832 | Conductor | Fixed an issue that could cause database connections to fail on HA-paired Conductors. |
| DEV-3837 | Conductor | Fixed an issue that caused device MAC lockdown to change the MAC address displayed for a device in the Conductor. |
| DEV-3878 | HIPswitch - WiFi | Fixed incorrect WiFi signal strength reporting. |
| DEV-3911 | Conductor - Diagnostic Mode | Fixed an issue on HIPswitches and Conductor that prevented creating support bundles in diagnostic mode if the system was unprovisioned. |
| DEV-3967 | HIPswitch | Fixed an issue that could cause static overlay routes configured on a HIPswitch to disappear when adding and removing devices. |
Known Issues
| ID | Function | Description |
|---|---|---|
| DEV-1994 |
Serial over IP configuration |
When modifying an existing Serial over IP configuration, you must reboot the HIPswitch to apply the new configuration settings. |
| DEV-2022 | HIPswitch Conductor High Availability configuration | After configuration setup completes on two HIPswitch Conductors in a High Availability pair, the Conductor user interface may not return to the Dashboard. Refresh your browser to return to the Dashboard. |
| DEV-2224 | HIP Services | Prior to configuring a HIPswitch HA-pair, the secondary HIPswitch may auto-discover the primary HIPswitch's gateway IP as a device. Workaround: Once the HA pair is configured, navigate to the secondary HIPswitch, go to the Devices tab, and delete the erroneous device with the primary HIPswitch’s gateway IP. |
| DEV-2417 | Password reset | The password reset email link defaults to the first web enabled interface, and will be successful only if an administrator configures the first interface with a publicly-facing default route. |
| DEV-2869 | AWS Conductor | AWS routes and security groups must allow and direct traffic to distant device networks when a trust is added. |
| DEV-3314 | HIPswitch | 100-series HIPswitches do not support VLAN-tagged traffic. Warning: Although the Conductor UI currently allows you to set a VLAN tag on a 100-series
HIPswitch, doing so will interfere with the HIPswitch's functionality. This issue
will be fixed in a future release. |
| DEV-3342 | Conductor | When configuring a HIPswitch, the firewall settings page may become
unresponsive. Workaround: Refresh the browser and try the operation again. |
| DEV-3386 | HIPswitch 101e | Do not put one-armed HIPswitches into transparent mode. ARP storms will result. |
| DEV-3466 | HIPapp | On Windows Server 2008, the HIPapp tray will not function unless .NET 4.5.2 is installed. |
| DEV-3840 | HIPapp, HIPserver | When uninstalling an unlicensed HIPapp or HIPserver, the uninstall program leaves the folder "Program Files (x86)\TemperedNetworks" and the two log files "firmware_install_record" and "hip.log". These are safe to delete after uninstall. |
| DEV-3846 | Conductor, Provisioning | When provisioning your Conductor, you may receive a certificate error message after granting the license. Refresh your browser to dismiss the error and continue. |
| DEV-3939 | HIPapp | When upgrading to 1.12.2, any HIPapp running on 1.12.1 will require reprovisioning. Contact Support for more information. |
| DEV-4219 | Conductor UI, HIP Services | The CPU graph can go over 100% on a busy HIPswitch. It's mis-named; it really is graphing the avg system load over the past 5 minutes. A value greater than 100% indicates that the system is busy and the excess amount indicates an overload in terms of avg number of processes waiting for the CPU. This is a standard metric on all unix systems and not a cause for concern. The real value of the graph is to show relative busy-ness over time. |