Highlights

Smart Polling enhancements

Smart Polling now delivers broader coverage and more accurate asset and topology information with less manual effort. Plans can be scheduled on an hourly basis, giving you finer control over polling frequency.

The Mitsubishi Electric MELSOFT strategy now correctly assigns internet protocol (IP) addresses to modules on polled devices. The simple network management protocol (SNMP) strategy uses human‑friendly interface names to improve physical link visibility. This supports CDP‑management information base (MIB), and combines data from both ENTITY‑MIB and IF‑MIB for a more complete hardware view.

To improve topology accuracy in multi‑virtual local area network (VLAN) environments, SNMP now uses VLAN‑specific community strings to retrieve physical links across all VLANs.

The MODBUS strategy is more resilient to non‑standard device responses, reducing missed assets due to imperfect implementations.

Two new Smart Polling strategies have been introduced to extend active discovery to additional critical operational technology (OT) devices:

• Owl OPDS SSH
• Phoenix Contact FL SWITCH TSN 2000 Series

Improved IDS trace management logging

Nozomi Networks Operating System (N2OS) now provides clearer and more reliable logging for trace file management in the intrusion detection system (IDS). Previously, inverted success and failure messages in the IDS logs could make troubleshooting trace deletions difficult, especially when analyzing storage or performance issues.

The logging has been corrected so that successful deletions are explicitly reported as completed, while failures are clearly identified as such. This improvement reduces confusion during incident investigation and maintenance, helping operators quickly understand the real state of trace file cleanup operations.

Customizable assertion names and descriptions

Users can now add placeholders to assertion names and descriptions to create more informative, context-aware alerts. When saving an assertion, you can include field placeholders such as ‎⁠{{host}}. These are automatically replaced with actual values from the query results when alerts are generated.

This capability lets you build assertion names and alert descriptions that reflect concrete asset or event attributes. For example, hostnames, IP addresses, or other fields. This makes alerts easier to interpret, filter, and act on without additional manual enrichment.

Enhanced Arc sensor configuration experience

The Arc sensor configuration experience has been redesigned to better reflect the separation between Arc Endpoint and Arc Network Sensor capabilities. The configuration options are now organized into dedicated tabs, aligning the user interface (UI) with how Arc is deployed and operated in the field.

This clearer separation reduces configuration complexity and helps users quickly locate the settings relevant to each Arc component. As a result, everyday administration becomes more intuitive, and the risk of misconfiguration between endpoint and network sensor functionality is reduced.