Release Notes for ExtremeSecurity V7.7.2.4 Patch 5

If your deployment is installed with ExtremeSecurity 7.7.1.2 or later, you can install fix pack 7.2.4-QRADAR-QRSIEM-1078277 and above to the latest software version. This release note does not cover all of the installation messages and requirements. For information on upgrading to V7.7.2.4, see the Extreme Networks Security Upgrade Guide.

To install this fix pack, see Patch Installation Instructions.

Resolved Issues

This is a cumulative release, meaning that installing the latest version includes all of the resolved issues identified in previous releases.

Note

Some APAR links in the table below might take 24 hours to display properly after a software release.

Issues Resolved in V7.7.2.4 Patch 5

Number	Description
IV66404	QRM - ZIPTIE SERVER LOGS ARE NOT ROTATING AND MAY CAUSE THE '/' PARTITION TO RUN OUT OF DISK SPACE
IV67045	SSHAUDIT.LOG FILE IS NOT ROTATING
IV67046	THE SYSLOG-NG SERVICE IS RESTARTED DAILY ON HIGH AVAILABILITY STANDBY SYSTEMS
IV67328	REMOTE METHOD ERROR POP-UP WHEN PERFORMING AN EVENT SEARCH
IV67691	EXTREME SYSTEM LOAD DUE TO MULTIPLE DF -TP PROCESSES
IV68100	EXTREME SECURITY SYSTEM NOTIFICATION MESSAGES SAR MONITORING REPORT: PERCENTAGE OF SWAP USED... ON SYSTEMS WITH LESS THAN 24GB
IV68151	THE USER ROLE VIEW VA DATA RADIO BUTTON DOES NOT WORK AS EXPECTED
IV68403	DEPLOY PROCESS FAILS FOR A NEWLY ADDED MANAGED HOST WITH ENABLE ENCRYPTION SELECTED
IV68437	ANOMALY DETECTION ENGINE RULES CAN CAUSE SYSTEM NOTIFICATIONS: DISCOVERED OUT-OF-MEMORY ERROR FOR ACCUMULATOR.ACCUMULATOR
IV68545	DASHBOARD GRAPH LEGEND ITEMS THAT ARE DESELECTED IN A UI LOGIN SESSION APPEAR SELECTED ON SUBSEQUENT LOGINS
IV68594	MANAGED SEARCH RESULTS EXPIRES ON DISPLAYED DATE AND TIME IS INCORRECT
IV68685	LOG SOURCES DISPLAYING ERROR STATUS AND LAST EVENT TIME UNCHANGED AFTER PATCHING EXTREME SECURITY
IV68778	EXTREME SECURITY SYSTEM NOTIFICATION FAILED TO RESET TRAFFIC ANALYSIS ENGINE ON A CONFIG CHANGE. REASON: NULL
IV68851	QRADAR..LOG REPORTS A NULLPOINTEREXCEPTION RELATING TO DISK MAINTENANCE
IV68853	AQL SEARCH 'RIGHT CLICK FILTER' RETURNS ERROR UNABLE TO PARSE EXPRESSION
IV68885	CONTENT MANAGEMENT EXPORTS AND IMPORTS CAN FAIL WHEN USING A LARGE REFERENCE SET
IV68973	SFLOW TRAFFIC CONTAINING VLAN TAGS WITH SUBSEQUENT VLAN TAGS ARENOT PARSED BY QFLOW
IV69080	DETECTED LANGUAGE FOR MICROSOFT WINDOWS EVENT LOG SOURCE MAY DISPLAY INCORRECT LANGUAGE
IV69090	PAGING IS NOT WORKING IN REFERENCE SET MANAGEMENT OR THE QVM SCAN POLICY EDIT SCREEN
IV69135	QVM: INSUFFICIENT DISK SPACE ERROR WHEN TRYING TO EXPORT SCAN RESULTS TO EITHER XML OR CSV
IV69179	NON-CONSOLE HA PRIMARY DOES NOT TIME SYNCHRONIZE WITH THE TIME SERVER, RESULTING IN DRIFT
IV69367	QVM - EXTREME SECURITY AUTOUPDATE CAN RETURN AN INSTALLED WITH ERRORS MESSAGE CAUSED BY MISSING QVM SQL RPMS
IV69397	EXTREME SECURITY DOES NOT LOG SIM AUDIT MESSAGES FOR FAILED AD LOGIN ATTEMPTS FOR USERIDS THAT DO NOT HAVE ACCESS TO EXTREME SECURITY
IV69494	QVM - BENIGN AUTOUPDATE FAILURE MESSAGES
IV69508	NULLPOINTEREXCEPTION ERRORS AROUND REFERENCE SET CACHES
IV69660	REPORTS AND GRAPHS MIGHT APPEAR EMPTY AFTER PATCHING TO EXTREME SECURITY V7.7.2.4
IV69729	TOMCAT OUT OF MEMORY ERROR CAN OCCUR WHEN USING REST API TO GET ALL ASSETS
IV69745	THE ECS-EP SERVICE CAN SOMETIMES BE SLOW TO RESTART CAUSING EVENT PARSING AND PERFORMANCE ISSUES
IV69749	UNABLE TO CREATE REPORT WHEN USING ADVANCED SEARCH
IV69800	APPLICATION ERROR OCCURS AND UNABLE TO VIEW TOPOLOGY IN QRM WHEN DEVICE IN TOPOLOGY CONTAINS INTERFACE WITH NO IP ADDRES
IV69818	CANNOT ACCESS CONFIGURATION SOURCES MANAGEMENT SCREEN WHEN USING THE HOSTNAME
IV69819	LOGIN FAILURE WARNING ICON DISPLAYS INCORRECTLY IN SCAN RESULTS
IV69827	SHELL SHOCK SCAN TOOL NOT ADDED TO AUTHENTICATIONSCANJOBANOINT SPRING BEAN FOR CENTRALIZED CREDENTIALS
IV69899	TOP DESTINATION IPS ASSET REPORT PERFORMANCE PROBLEM
IV69942	UNEXPECTED HIGH AVAILABILITY (HA) RESYNC OCCURS AFTER PATCHING TO EXTREME SECURITY V7.7.2.4
IV69943	QUERY ERRORS WHEN USING THE UTF8 FUNCTION ON THE PAYLOAD FIELD FOR AN AQL QUERY.
IV69948	MANAGED HOSTS CAN NOT DEPLOY IF THEY ARE IN THE SAME NAT GROUP AS THE CONSOLE.
IV70492	EXTREME SECURITY DATA NODE NO LONGER BALANCES DATA LOAD AFTER A PROCESS OUT OF MEMORY OCCURANCE
IV70519	'ALPHANUMERIC IGNORE CASE' REFERENCE SET TYPE IS BROKEN IN EXTREME SECURITY V7.7.2.4 PATCH 4
IV70554	APPLICATION ERROR WHILE CREATING TOPOLOGY
IV70556	CLEAN UP AGENT MESSAGING IN THE LOGS ON CANNOT RETRIEVE JMX PORT NUMBER FOR PROCESS
IV70599	REFERENCE SET FILTERS ARE NOT FUNCTIONING IN V7.7.2.4 PATCH 4
IV70715	MISSPELLED WORD IN RISK SCORE ON MANAGE VULNS SCREEN
IV70816	PERFORMANCE IMPROVEMENTS ON BUILDREPORT_WINDOWS_PATCHES
IV70826	TOMCAT INSTABILITY MAY OCCUR IN AN ENVIRONMENTS WITH A LARGE NUMBER OF MANAGED HOSTS OR OTHER INBOUND CONNECTIONS
IV70882	BUFFEROVERFLOWEXCEPTION FOR COMPLEX DEVICE CONFIGURATION
IV71346	/STORE/TRANSIENT CAN FILL UP AS IT IS NOT SETUP FOR AUTOMATIC FILE CLEANUP AND MAINTENANCE
IV71523	PAYLOAD EVENT FORWARDING WITH 'PREFIX A SYSLOG HEADER IF IT IS MISSING OR INVALID' ENABLED ADDS A CORRUPTED HEADER
IV71934	MESSAGE IN QRADAR.LOG ERROR FETCHING HOSTNAME OF DEVICE FOR ID XXXX WHEN USING DEVICE STOPPED SENDING RULE