Table of Contents:¶
- 1. Presentation of GCap version 2.5.3.105
- 2. New features
- 2.1. High availability
- 2.2. SSH key authentication
- 2.3. Statistics and health information
- 2.4. Improvements to the Sigflow detection engine
- 2.5. vpn-link speed option for the VPN tunnel
- 2.6. Addition of an automatic restart mechanism for crashed services
- 2.7. Addition of the possibility of placing a command from the CLI with the SSH connection
- 3. Other features and improvements
- 3.1. Change of operating system
- 3.2. Change of the programming language
- 3.3. Update of the kernel
- 3.4. Performance improvement
- 3.5. Global security improvements
- 3.6. Changes to the CLI
- 3.7. Features available for extracting diagnostic data to Gatewatcher technical support
- 3.8. Changing the driver reload strategy
- 3.9. Modification of the crisis management strategy (emergency mode)
- 4. Patches
- 4.1. Eve-logs are automatically truncated if size > 65536 bytes
- 4.2. TCP transactions and extracted files (« unknown »)
- 4.3. Using RELP protocol and adding a queue between GCap and GCenter
- 4.4. Protection of the authentication mechanism (anti-bruteforce)
- 4.5. HTTP parsing problem
- 4.6. Problem when replaying some pcap files
- 4.7. Problem replaying pcap files with multi-tenancy enabled
- 4.8. Display of the GCap status as « undetermined » in the GCenter management interface
- 4.9. Erroneous status display of the monitoring interfaces
- 5. Known problems and limitations
- 6. Software compatibility
- 7. Hardware compatibility
- 8. Updating procedure