Sav25 Data Systems

New Features and Enhancement

Geolocation Database Updated

The geolocation database has been updated to a newer version

Improved SSL VPN handshake error logs

Log and snoop messages for TLS handshake errors have been extended with more details.

Addressed Issues

SSM-13379: The SIP ALG used a non-optimal memory allocation algorithm. This has now been resolved, resulting in reduced memory usage footprint as well as shorter time before unused memory will be returned to the system. Ticket: TIC-21976

SSM-15463: When presented with a multi-socket single-NUMA CPU topology, the system was not able to correctly interpret and fully utilize the CPU resources. Now, all cores within a NUMA domain will be regarded as interchangeable regardless of socket and all unexpected CPU topologies will trigger a configuration warning. One such incorrect CPU topology is a single core with many hyper-threads, that will now be treated as multiple single-threaded cores.

SSM-15488: The output of the command 'system -cpuinfo' has been updated to be more informative. The '-cpuinfo' usage has been moved to the default command view. The '-brief'
option has been removed.

SSM-15640: The system statistics for memory usage was hard to interpret as it was tracking the memory that was actively registered/accounted by each subsystem, instead of the actual
usage. For the summarized amounts for both controlplane and dataplane, there has now been new statistical values added with a clear distinction between registered and used memory. The "memory" CLI command has been updated accordingly. Ticket: TIC-26705

SSM-15837: BGP occasionally wouldn't remove ECMP routes when BGP peer went offline.

SSM-16291: SSL VPN snoop messages were not aligned with other subsystems regarding how endpoint data was shown.

SSM-16304: The SCTP subsystem could in some scenarios cause the dataplane to become unstable. Ticket: TIC-30276

SSM-16364: The "OuterRoutingTable" property of IPsecTunnel did not work properly. AH/ESP packets were always forwarded using the "main" routing table, regardless of the property value. Ticket: TIC-30590

SSM-16423: Intel® QuickAssist Technology (QAT) accelerated IPsec operations could fail occasionally.