Protocols, Smart Polling, and Arc

A list of the improvements for Protocols, Smart Polling and Arc that have been introduced in this release.

  • ENG-591: Smart Polling and Discovery: new strategy Tattile ALPR introduced. Use these strategies to discover and poll Tattile devices that expose the NTCP protocol.
  • ENG-825: Addressed an issue affecting ABB devices using the MMS protocol that caused a SIGN:FIRMWARE-TRANSFER alert to be interpreted as a SIGN:DEV-STATE-CHANGE alert. Added a new detection using SIGN:LOGIN to alert on user accesses to the controller.
  • ENG-826: A detection for ABB devices exchanging programs talking MMS has been added. This requires enabling the full transport layer security (TLS) inspection.
  • ENG-909: Smart Polling: node points previouuly extracted by the hypertext transfer protocol (HTTP) Schneider strategy are now extracted as node properties.
  • ENG-1114: Smart Polling: addressed an issue that caused the polling of universal plug and play (UPnP) and ONVIF nodes to be marked as unsupported instead of inconclusive when the corresponding uniform resource locator (URL) is not found.
  • ENG-1253: Added exclusion of broadcast addresses from learning and listening-port logic, avoiding protocol misclassification.
  • ENG-1285: Smart Polling: the simple network management protocol (SNMP) strategy is now more robust when connecting to devices that do not export standard object identifier (OID)s, such as sysName.
  • ENG-1437: Smart Polling: improved the robustness when handling malformed network responses.
  • ENG-1493: Implemented redundancy management for ABB AC 800M controllers: primary and secondary interfaces are now correctly grouped under the same asset.
  • ENG-1494: Introduced support for Straton T5 protocol, including alerts for seven types of events.
  • ENG-1503: Smart Polling: the Modbus strategy has been enhanced to provide a better support for ABB devices.
  • ENG-1504: Smart Polling: The BACnet strategy has been enhanced to correctly parse the firmware version of various classes of devices.
  • ENG-1505: Smart Polling: the BACnet plans can now be configured to avoid searching for nested devices.
  • ENG-1734: Discovery: the sensor that performs Discovery is no longer marked as discovered, addressing some inconsistencies with Arc detection.
  • ENG-1931: Smart Polling: the secure shell (SSH) strategy now extracts the operating system (OS) architecture of the target device.
  • ENG-1975: Added a configurable option to disable ASCII variable extraction in the Vnet/IP protocol, allowing customers to control variable growth while keeping the feature enabled by default.
  • ENG-2370: Increased robustness of HiConis protocol parsing resulting in more accurate asset vendor name identification.