Highlights

Visibility and Asset Intelligence

Nozomi Networks Operating System (N2OS) provides more accurate asset identification and deeper visibility into critical industrial operations.

The platform now supports precise device naming and expanded protocol coverage for Automation Direct and Siemens S7 devices.

You can monitor specific controller actions, such as firmware transfers and program changes, to gain granular oversight of network activity.

Additionally, N2OS lets you group and organize assets to ensure the hardware inventory reflects a precise, real-time representation of the environment.

Security and threat response

N2OS now provides granular packet filtering for Fortinet and Palo Alto firewalls based on risk severity and automatically quarantines nodes triggered by high-risk signature events.

You can also verify host keys for secure shell (SSH) Smart Polling to secure connections and manage directory exclusions for malware scans through a new management interface.

System reliability and management

N2OS now provides more reliable sensor management and data collection to ensure continuous network visibility.

The system resolves previous errors affecting sensor configurations, Ovation project imports, and network interface settings to maintain an accurate source of truth.

Smart Polling for SSH and Windows Remote Management (WinRM) now uses optimized logic to streamline data collection, while automated certificate renewals prevent service interruptions caused by expired credentials.

These updates eliminate connectivity gaps and reduce manual maintenance tasks.

Alert deduplication behavior updates

Alert deduplication has been available as an experimental, opt‑in feature, disabled by default and fully configurable by users. It can currently be toggled at will and has been documented and announced in previous release notes. Over time, we have gathered valuable feedback and telemetry, but the core user workflow remains unchanged.

Starting with upcoming N2OS releases, we are formalizing and expanding this functionality across multiple versions, while keeping configuration simple and predictable.

N2OS 26.3.0: alert deduplication becomes a standard feature

With N2OS v26.3.0, we will no longer consider alert deduplication experimental. It will become a standard, fully supported feature that any deployment can use.

The feature will continue to be disabled by default.

• Users will be able to toggle alert deduplication from both N2OS and Vantage
• Existing documentation remains valid, and no changes are required to user workflows
• We incorporated learnings from the experimental phase into the underlying implementation, without changing how users enable or use the feature

This ensures a smooth transition for environments that are already using the experimental capability, while providing a clear and stable path for new adopters.