Archived release notes
Version 3.1.3
Release Date: March 7, 2025
New Features
- Custom DPI Profiles: Support for creating DPI profiles for Ethernet/IP.
- Non-OT Protocol Validation: Validate formats for HTTP, HTTPS, SNMP, TELNET, DNS, and DHCP protocols. Improved SSH protocol support across multiple versions.
- Network Capture: Export PCAP files without a password.
Improvements/Updates
- Default Mode: The firewall defaults to Transparent mode.
- Update License Mechanism: Users can use the device without needing to upload a license file.
- Dual Mode: Smoother switching between Transparent and Routing modes.
- Rate Limiting: Implemented rate limiting for Transparent mode.
- UI/UX Improvements: Enhancements to firewall rules and setting modes.
- Memory Consumption: Reduced memory usage.
- Bug Fixes
Version 3.1.2
Release Date: February 7, 2025
New Features
Bidirectional Protection: Enable LAN ⇔ DEVICE traffic control in Transparent Mode.
Custom DPI Profiles: Support creating DPI profiles for BN3500.
Advanced Firewall Rules: Add subnet masks, IP ranges, and port ranges for Routing Mode rules.
Non-OT Protocol Validation: Validate formats for ICMP, FTP, SMB, TIME, RDP, VNC, SMTP and NTP protocols.
OT Protocol Validation: Validate formats for all the OT protocols that we support for DPI
Web Access Restriction: Restrict web UI access to specific IP addresses.
User Management: Allow multiple user accounts for web UI access.
Enhanced NAT 1:1: Support multiple NAT 1:1 configuration by enabling the use of virtual IPs on physical interfaces.
Rate Limiting:
- Apply bandwidth rate limits on specific firewall rules for Routing and Transparent mode.
- Apply limiting packet per second for Routing mode.
Dual Mode: Simultaneous operation of Transparent and Routing Modes.
Implement System Rule page:
- Display active system ports (e.g., SSH, HTTPS, Remote Syslog, Routing Port…).
- Add OTAccess rules for remote connections with OTA integration.
Object Management: Save group of IP addresses with meaningful names.
DHCP Support: Available for Physical, VLAN and Bridge Interfaces.
VRRP Support
UI/UX Improvements:
- Implement settings search for easier navigation.
- Option to hide/unhide Transparent/Routing settings.
Version 3.1.0
Release Date: 29 November 2024
New Features
- Firewall Learning Mode: Now supported in Routing Mode, enabling smarter and adaptive rule creation.
- Dynamic Routing: Added support for RIP and OSPF protocols, improving routing flexibility.
- Routing Redundancy: Integrated Virtual Router Redundancy Protocol (VRRP) for enhanced network failover.
- Support for VLAN configuration
- Bridging functionality
- Proxy ARP support for efficient IP management
Version 3.0.1
Release Date: 25 September 2024
Bug Fixes
- The rule for transparent mode was removed when applying the backup file.
- The Masquerade rules and pinging to the LAN port.
Version 3.0.0
Release Date: 26 August 2024
New Features
Support Routing mode:
Port Base Routing: Allows routing based on specific ports for granular control of network traffic.
Support NAT (1:1, Port Forwarding, Masquerade)
- 1:1: Direct mapping between internal and external IPs.
- Port Forwarding: Redirects specific port traffic to internal IPs.
- Masquerade: Maps multiple local devices to a single public IP.
Support Static Routing: Manual configuration of routing paths for consistent and predictable network traffic.
DPI Enhancements:
- Support for new protocols in the DPI engine.
- Support creating DPI Profile (Modbus, DNP3, MQTT, PROFINET-PTCP)
Improve new UI:
- Support Dashboard: Centralized view of device status, performance metrics, and security alerts.
- Improving the settings page: More user-friendly with better organization and clearer configuration options.
DOS/DDOS prevention:
- ICMP Protection: Filters malicious ICMP packets to prevent attacks like ping floods.
- Null Scan Filter Function: Blocks null scan attacks by filtering packets with no flags set.
- Xmas Filter Function: Prevents Xmas scan attacks by blocking packets with FIN, URG, and PSH flags set.
- SYN/FIN Filter Function: Detects and blocks SYN/FIN scan attacks.
- TCP Offset Protection Function: Ensures TCP packets have valid offsets to prevent manipulation.
- Min. Header Size Filter Function: Blocks packets below the minimum TCP header size to prevent attacks with malformed packets.
Support OTAccess Integration.