まっちゃだいふくの日記

セキュリティのこと、ITの気になった記事をリンクしています。

[製品情報] TippingPoint Security Management System 5.5.3 / TippingPoint Threat Protection System 5.5.3 公開のお知らせ:サポート情報 : トレンドマイクロ@ 機能追加や修正対応

[製品情報] TippingPoint Security Management System 5.5.3 / TippingPoint Threat Protection System 5.5.3 公開のお知らせ:サポート情報 : トレンドマイクロ

TippingPoint Security Management System 5.5.3 / TippingPoint Threat Protection System 5.5.3 が以下の通り公開されました。


■公開開始日
2022年5月4日 (月)

機能等の詳細につきましては以下のRelease Notes(英語)をご覧ください。

■入手方法
Trend Micro TippingPoint Threat Management Center(TMC)からアップグレード用のモジュールやドキュメントをダウンロード
することができます。
※ログインには TMC アカウントが必要です。

■導入手順
導入手順につきましてはOnline Help Centerからダウンロードできるインストールガイドやユーザーガイドをご参照ください。
※ドキュメントは全て英語です。

サポート情報 : トレンドマイクロ

Release contents

Description Reference
After upgrading to 5.5, some users noticed issues with the historical graphs, including units of measurement not being displayed, and data getting dropped when switching time periods. TIP-72090
SEG-120666
The SMB timeout has been increased to prevent SMS backup failures when using SMB encryption. TIP-74774
SEG-118198
Additional cipher support has been added to prevent SMS backup failures with sFTP. TIP-74536
SEG-128861
You can now configure a second Active Directory server that the SMS can use for authentication when the primary authentication server cannot be reached. TIP-77583
To improve the collection and analysis of threat statistics, the TMC Information Share setting Enable ThreatLinQ event sharing now defaults to ENABLED, with the option Hide All IP Addresses in ThreatLinQ selected. TIP-77732
TIP-77864
To avoid distribution delays after an SMS restart, restore the AuxDV schedule distribution. TIP-73834
SEG-125973
To secure sensitive login information, the auto-complete feature setting for browsers defaults to off. However, when users reflexively click Yes after the browser prompts them to remember login information, the users must manually remove the login information in order to prevent the browser from storing it. TIP-73560
SEG-124587
With FIPS and TLS1.2 enabled, the SMS no longer fails when connecting to a secure LDAP server that had certain ciphers enabled. TIP-76499
Performance has been improved in remote syslog over TCP. TIP-76351
SEG-129341
Remote SMS Authentication from a device would not work properly if that device was managed by another SMS while the remote authentication feature was still enabled. TIP-71137
SEG-112688
A vulnerability (CVE-2021-3449) that could enable attackers to exploit an OpenSSL TLS server with a malicious Client Hello message has been resolved in this release. Learn more. SEG-139152
This release sanitizes the names of policy exceptions so that invalid names do not cause profile distributions to fail. SEG-122201
The SMS ssh package has been updated to include security and bug fixes. TIP-76669
TippingPoint Security Management System 5.5.3 Release Note

Release Contents

Description Reference
TSRs now include relevant directory information for any partition that is at a critical threshold. The partition_full.txt in the TSR contains this information. TIP-74114
SEG-116874
You can now select whether all crash reports or just the most recent crash reports since thelast one are included in TSRs. TIP-75867
Logs now indicate whenever a transceiver is inserted or removed from a device. TIP-39167
SEG-49377
You can avoid parsing errors in the remote syslog server by removing excess spaces from the message field of the device’s audit and system logs. TIP-73837
SEG-126268
An issue that prevented auto-negotiation from working for a 1G I/O module on TPS platforms has been resolved. TIP-73790
SEG-117515
This release improves the performance of the scan/sweep feature, including its interoperability with the TLS Inspection feature. TIP-74665
TIP-74666
TIP-74667
TIP-74668
SCTP traffic processing by the device no longer impacts IPS performance. TIP-66982
After a reboot, reputation profiles that were set to pending block behavior would change to pending allowed behavior until the SMS preformed a profile distribution. This could result in intermittent reputation leaks. TIP-73838
SEG-119439
Some users noticed constant alerts generating from the "7703: SMB excessive header padding" filter after an upgrade. TIP-77795
SEG-135571
TippingPoint Threat Protection System 5.5.3 Release Note