Release Notes of 8.1.2
Feature / Enhancements
-
Hub with MPK Tunnel Support - Introduces MPK Tunnel support on Edge using Gen4 MPK. Supports both one-tunnel-per-WAN mode and a single tunnel spanning multiple WAN links, with TCP and UDP transport options. Flow balancing is supported for both transport types, while UDP additionally supports packet balancing, packet duplication, and Forward Error Correction (FEC).
-
Please refer the following link to view the Guide: MultiPath Konnect (MPK) Tunnel Support more information.
-
-
SIEM - Remote Syslog Support - Adds support for forwarding system logs to a remote Syslog server over UDP or TCP, with optional SSL encryption for secure TCP-based log transmission.
-
Logging Enhancements - Introduces centralized log management with options to clear/reset logs and manage logging from a single screen.
-
Please refer the following link to view the online help - Logging.
-
-
Dynamic DNS - Introduces Dynamic DNS (DDNS) service that automatically updates a domain name's DNS record to point to a changing (dynamic) public IP address, allowing users to reach home or small-business services (like VPNs, CCTV, or web servers) using a fixed hostname. It also enables Hubs to be accessed using a fixed Fully Qualified Domain Name (FQDN), eliminating the dependency on a static public IP address.
-
DNS for Hub IPs - Adds support for using Fully Qualified Domain Names (FQDNs) instead of static IP addresses for Hub Internet Drop-off (POP IP) configurations.
-
VoIP Enhancements - Enhances VoIP functionality with improved DID and CID support, outbound dialing restrictions, and a redesigned dial-plan implementation for improved clarity and reliability.
-
Please refer the following link to view the online help - VoIP.
-
-
Traffic Policy Rule Descriptions - Adds a Description field for Traffic Policy rules, allowing administrators to document the purpose of individual Application Policy rules.
-
Independent CAN User Portal Package - CAN User Portal updates can now be deployed independently of Edge software releases, simplifying maintenance and feature updates.
-
Multiplan Support - Introduces Multi-Plan support, allowing administrators to assign multiple plans to a single user account so users can maintain multiple active plans simultaneously. Please refer the following link to view how this can be configured:
-
Captive Portal Login Improvements - The Captive Portal login page now automatically selects the Terms & Conditions and Remember Me options to simplify user sign-in.
-
EdgePro and EdgeServer Configuration Compatibility - Configuration backups can now be restored between ES110 systems to ES120 systems, simplifying migration across supported systems.
-
Konnect End point Auto configuration - Adds automatic transport switching between UDP and TCP when the active Konnect transport becomes unavailable or blocked. For example, if a customer firewall blocks UDP traffic, Konnect automatically switches to TCP to maintain connectivity, and switches back when UDP is available.
-
Unmanaged network usage accounting – Usage generated from unmanaged access networks is now correctly accounted. For example, devices connected to an unmanaged access network will now display their bandwidth consumption correctly in the Usage screen.
Bug Fixes
-
MPK Hub listener – Added support to enable or disable the Hub Listener for Ethernet WAN interfaces in the Default WAN Profile (when the interface is inactive). Dedicated Hub listening interfaces are now moved to the MPK Hub network namespace, improving Konnect Hub performance.
-
Correction for MPK traffic disruption – Fixed an issue where tunnels could enter an invalid state following a disconnection event.
-
Correction for CAN user identification visibility – Resolved an issue where CAN user identification was not displayed correctly on the Usage screen.
-
InfluxDB stability and maintenance improvements:
-
Fixed excessive disk usage caused by missing InfluxDB retention policies.
-
Improved InfluxDB recovery to ensure usage statistics continue to be reported correctly after database recovery.
-
Resolved issues affecting usage statistics collection under certain InfluxDB conditions.
-
-
Usage reporting and analytics improvements
-
Fixed an issue where 7-day usage reports did not display DPI analytics data.
-
Resolved multiple issues that could prevent usage statistics from being collected or displayed correctly.
-
Improved usage accounting and policy enforcement for rapid port-hopping traffic patterns, ensuring accurate usage reporting during DoS-like scenarios.
-
-
Correction for untagged network visibility – Untagged networks are now displayed correctly even when usage is zero. The Untagged Network is now displayed with a unique color and the tooltip "Untagged Network" when it has non-zero usage. It is hidden from the Top Networks section when its usage is zero.
-
DPI Analytics enhancement – DPI Analytics now reports traffic for all IP protocol types, including ICMP, ESP, GRE, and other IP protocols.
-
Correction for Gen2 socket utilization – Enhanced firewall handling to prevent unnecessary inbound TCP connections from increasing Gen2 socket usage.
-
Correction for Hub probe handling – Added support for processing probe traffic correctly when NAT is disabled on Hub deployments.
-
Correction for Konnect TCP reconnection – Fixed an issue where the TCP bridge was not restarted after a connection interruption.
-
Correction for account password reset – Resolved issues affecting account password reset functionality.
-
Correction for ICMP and IP protocol blocking – Extended Application Policy support to block ICMP, GRE, ESP, and other IP protocol traffic in addition to TCP and UDP.
-
Correction for VM upgrade failure – Resolved an issue where virtual machine upgrades could occasionally become stuck during the upgrade process.
-
Correction for MPK flow balancing – Fixed uneven flow distribution across WAN interfaces when using TCP or UDP flow-balancing mode.
-
Correction for MPK packet balancing – Fixed packet drops in UDP packet-balancing mode caused by incorrect effective Path MTU (PMTU) handling.
-
Correction for PMTU handling – Resolved an issue where incorrect effective Path MTU settings could result in packet loss over UDP tunnel sessions.
-
Correction for Inbound NAT editing – Fixed an issue that prevented existing NETMAP-based Inbound NAT rules from being updated.
-
Correction for BGP service updates – Fixed an issue where editing an existing BGP service could fail with an "Error in Updating Service Routes" message.
-
Correction for Route Prefix advertisement – Fixed an issue where Route Prefixes outside the WAN interface subnet were not advertised to BGP neighbors.