Protocols, Smart Polling, and Arc
A list of the improvements for Protocols, Smart Polling and Arc that have been introduced in this release.
- The Arc Deployment page now supports One-shot mode enabling single-execution endpoint and network analysis and returning target endpoint machines to their original state afterwards.
- Improved support of Yokogawa Vnet/ip traffic by adding asset serial number extraction.
- Extended the support for Yokogawa project files. More information is now collected, including serial number and multiple internet protocol (IP) allocations.
- Yokogawa imported information extracted by project files is now correctly tagged with source import.
- Users can now access an Arc's Status page and configure Arc in bulk from the user interface (UI) of an on-premise sensor.
- Nozomi Networks Operating System (N2OS) now supports tagging and function code extraction for the Hitachi Rails Genisys protocol.
- The Yokogawa Vnet/IP protocol now supports extraction of variables requested by name.
- A package file (.pkg) file is now available from the Sensors page for installing Arc under macOS. The existing ZIP archives for macOS are still available, allowing for One-shot and Offline executions.
- The nodes_count field of the sp_executions query source is now deprecated. In a future version of N2OS it will be removed.
- Addressed an issue that incorrectly confirmed invalid media access control (MAC) addresses coming from forged offline traffic.
- Added support for extracting asset information from GRE ERSPAN Type 3 encapsulated traffic.
- Broadcast IP addresses no longer generate assets.
- Improved sorting to show properties and hardware components in the asset view.
- Introduced the new field source Discovery for information obtained using the new feature.
- Smart Polling and Discovery can now be enabled or disabled independently from the Arc deployment settings.
- Improve the resiliency of the intrusion detection system (IDS) against unknown EtherTypes.