IBM QRadar Network Security firmware update 5.4.0.4 readme

Content

Fixed Defects:

• 98622: When Outbound SSL Inspection is enabled and when using the Chrome browser, an error message "ERR_SSL_SERVER_CERT_BAD_FORMAT" is displayed.
• 98672: Soon after multiple snapshots have been applied, SSH becomes unavailable.
• 98896: Malware Analysis events are sent in incorrect format, causing the SiteProtector System to reject such events.
• 99378: The special characters in some Security Event detail information causes texts to be truncated.
• 99462: In firmware 5.4.0.3, alpsd crashes after updating XPU.
• 99520: In firmware 5.4.0.3, after Port Speed/Duplex Settings are configured manually for 8-port copper NIM, the port link fails.
• 99756: The XGS appliance incorrectly reports the license status when only either the IP Reputation or Identity Application Control license is installed.
• 99865: The upload status of Malware Analysis always shows "Waiting," and no analysis result can be retrieved.
• 100032: In firmware 5.4.0.3, after firmware update, it takes around 10 minutes for the XGS appliance to start.
• 100104: The "Quarantine" event status is incorrectly displayed as "Blocked."
• 100109: Policy push fails when the version number is greater than 1,000.

Security Bulletins

• http://www.ibm.com/support/docview.wss?uid=swg22011740
• http://www.ibm.com/support/docview.wss?uid=swg22011746

Compatibility 
The following web browsers are currently supported by the IBM QRadar Network Security local management interface:

• Internet Explorer 10 or 11
• Firefox 28 and newer
• Google Chrome 34 and newer

To manage Network Security appliances using the SiteProtector System, you must apply the following database service packs before upgrading the appliance:

• SiteProtector System 3.0 - Install all DBSPs up to and including SP3.0 DBSP 3.0.0.81
• SiteProtector System 3.1.1 - Install all DBSPs up to and including SP3.1.1 DBSP 3.1.1.64
  Important: Ensure that the SiteProtector Core is at version 3.1.1.5 and newer before applying this Database Service Pack (DBSP) update to the IBM QRadar Network Security appliance.

To use IBM Network Protection Manager (NPM) 1.0, an add-on module to the SiteProtector System, to interoperate with this firmware release of IBM QRadar Network Security, you must apply the latest NPM hotfix or update. Contact IBM Support for details.

Installation and Configuration 
Prior to running firmware updates on a Network Security device, you should migrate your policies in SiteProtector to the new version. See technote #1959896 for more information:

• http://www.ibm.com/support/docview.wss?uid=swg21959896

For step-by-step installation instructions, see the Installing Updates topic in the IBM Knowledge Center:

• https://www.ibm.com/support/knowledgecenter/SSHLHV_5.4.0/com.ibm.alps.doc/tasks/alps_installing_updates.htm

Note: After installation, clear web browser cache, cookies, and temporary internet files.

For other configuration instructions, see the following topics in the IBM Knowledge Center:

• https://www.ibm.com/support/knowledgecenter/SSHLHV_5.4.0/com.ibm.alps.doc/alps_collateral/alps_dochome_stg.htm
• https://www.ibm.com/support/knowledgecenter/SSHLHV_5.4.0/com.ibm.alps.doc/concepts/alps_getting_started_container.htm
• https://www.ibm.com/support/knowledgecenter/SSHLHV_5.4.0/com.ibm.alps.doc/tasks/alps_configuring_settings_lmi.htm

Known issues 
This release contains no known issues at this time.

Copyright statement

© Copyright IBM® Corporation 2012, 2018. U.S. Government Users Restricted Rights - Use, duplication or disclosure restricted by GSA ADP Schedule Contract with IBM Corp.

Related information:
Contacting IBM Support

---