![]() Symptom: rename configuration file to 64 characters will fail. Symptom: IKE packet sent from wrong interface and wrong IP. The issue is usually happened while VPN failover and fallback is triggered. Symptom: IPsec sshipsecpm daemon is dead. ![]() Description: Modify usg100-plus maximum disk threshold WAS: maximum disk threshold was 95% IS: maximum disk threshold is 99%. Enlarge the value of nf_ct_expect_max to avoid SIP packets from dropping. Add CLI command 'app-watch-dog mem-drop-cache-threshold XX', where XX is in the range 50.90, to configure app watchdog to inform kernel to drop caches in order to free more memory when memory usage exceeds the threshold. Enhance IPsec Authentication with certificate to validate X509v1 CA certificate. The session will be automatically disconnected (Firewall rule takes effect immediately) when reaching the schedule. Support "space" for certificate in the following field: Organizational Unit, Organization, Town, State (Province), Country. PKI support import certificate with SHA384 and 512 hash algorithm. Using CLI “ip http secure-server sslv3” to turn on it. Default turn off SSLv3 Support in Built-in Service. Add SNMP VPN status and connection counter MIBs.
0 Comments
Leave a Reply. |