Release Notes
Abstract
This technical note provides guidance for installing IBM Guardium Data Protection Windows Agents 11.5.10.478, including any new features or enhancements, resolved or known issues, or notices associated with the patch.
Content
Patch information
| Product: | IBM Guardium |
|---|---|
| Release version: | Guardium 11.5 Windows Software TAP (S-TAP) |
| Completion date: | 2 September 2025 |
Fix IDs
|
Guardium_11.5.10.478_S-TAP_Windows
|
Finding the patch
- Select the following options to download this patch on the IBM Fix Central website and click Continue.
- Product selector: IBM Security Guardium
- Installed Version: 11.5
- Platform: Windows
- On the "Identify fixes" page, select Browse for fixes and click Continue.
- On the "Select fixes" page, select Database Agent (STAP, GIM and CAS). Then, enter the patch information in the Filter fix details field to locate the patch.
Notes
- A fresh install of Guardium 11.5 does not require a reboot.
- IBM strongly recommends that you do not use the following builds as they contain instabilities that can lead to system failure. Uninstall these builds and reboot before you install S-TAP 11.5. For all other builds, you can upgrade as usual.
- 11.4.0.168 through 11.4.0.204
- 11.3.0.257 through 11.3.0.287
Attention
Database instance stop and server reboot required for patch upgrade
When you upgrade to Windows S-TAP 11.5.10.478, you must reboot the database server to update the NmpProxy driver. To successfully install this patch, you must complete the following steps:
- Stop all database instances.
- Upgrade Windows S-TAP to version 11.5.10.478.
- Reboot your database server immediately after you upgrade Windows S-TAP.
- Start your database instances.
Deprecated support and functionality
Microsoft Windows Server 2012 and 2012 R2
Windows Server 2012 and 2012 R2 reached end of support by Microsoft on 10 October 2023 and no longer receive security updates. For this reason, as of 31 March 2024, Guardium no longer maintains support for these operating systems. For more information, see IBM Guardium support discontinuance notification for Microsoft Windows Server version 2012 and 2012 R2.
Windows Server 2012 and 2012 R2 reached end of support by Microsoft on 10 October 2023 and no longer receive security updates. For this reason, as of 31 March 2024, Guardium no longer maintains support for these operating systems. For more information, see IBM Guardium support discontinuance notification for Microsoft Windows Server version 2012 and 2012 R2.
Microsoft SQL Server 2012
Guardium no longer supports Microsoft SQL Server 2012 as of 12 July 2022. For more information, see IBM Guardium support discontinuance notification for Microsoft SQL Server version 2008 and 2012.
New support and functionality
Microsoft Windows Server 2025
Support added for Windows Server 2025.
Support added for Windows Server 2025.
New features and enhancements
Restricting traffic base on IE process name
S-TAP can now filter for Transmission Control Protocol (TCP) traffic directed to the database server processes specified in the inspection engines to reduce traffic noise. The following parameters were added to control this new functionality.
WFP_PROCESS_RESOLVE_MODE
Description: This parameter dictates how S-TAP handles traffic from non-SQL Server sources on SQL Server ports.
Description: This parameter dictates how S-TAP handles traffic from non-SQL Server sources on SQL Server ports.
Default value: 0
Possible values:
0 - Traffic from non-SQL Server programs using SQL Server ports is sent to the S-TAP and the collector.
Possible values:
0 - Traffic from non-SQL Server programs using SQL Server ports is sent to the S-TAP and the collector.
1 - Traffic from non-SQL Server programs using SQL Server ports is ignored.
2 - Traffic from non-SQL Server programs using SQL Server ports is passed if it reaches one of the two resolve limits, otherwise it is ignored.
WFP_PROCESS_RESOLVE_LIMIT
Description: This is the limit in KB of how much traffic is buffered per connection while attempting to resolve the server process name. If the limit is reached, traffic is either dropped or passed depending on the mode.
Default value: 2048
Value range: 1 - 20480
Default value: 2048
Value range: 1 - 20480
WFP_PROCESS_RESOLVE_TOTAL_LIMIT
Description: This is the limit in MB of how much traffic is buffered system-wide while attempting to resolve server process.
Description: This is the limit in MB of how much traffic is buffered system-wide while attempting to resolve server process.
These new parameters can be modified by using Windows GIM 11.5.0.437 or later (see release note).
Resolved issues
|
Patch
|
Issue key | Summary | Known issue (APAR) |
|---|---|---|---|
|
11.5.0.404
|
See release note for Windows S-TAP 11.5.0.404
|
||
|
11.5.10.478
|
GRD-89175 |
Fixed session correlation and Kerberos delivery timeouts.
|
DT438267
|
|
GRD-92349
|
Fixed an issue related to possible termination of sessions when Firewall S-Gate is enabled.
|
DT426053
|
|
|
GRD-94302
|
Fixed instability in Microsoft SQL Server caused by Correlator DLL of Windows S-TAP.
|
DT437922
|
|
|
GRD-97837
|
Windows S-TAP now uses OpenSSL 3.5.
|
||
|
GRD-99833
GRD-99842 |
Fixed Microsoft SQL Server instability caused by S-TAP related to correlator software, which is triggered when using multiple active result sets (MARS) on encrypted database connections. For more information, see Guardium Windows S-TAP 12.1.0.162, 12.0.0.293, and 11.5.0.437 might cause Microsoft SQL Server instability when using MARS on an encrypted database connection.
|
DT438501
|
|
|
GRD-101002
|
Fixed instability in Microsoft SQL Server caused by S-TAP when connecting to Microsoft SQL Server though IP. For more information, see Guardium Windows S-TAP 12.1.0.195, 12.0.1.295, and 11.5.1.437 might cause Microsoft SQL Server instability when using Kerberos authentication.
|
DT442106
|
|
|
GRD-101025
|
Fixed instability in Windows S-TAP caused by data packets exceeding 64K.
|
DT442121
|
|
|
GRD-101938
|
Fixed instability in Windows OS caused by Windows S-TAP WFP driver. For more information, see Guardium Windows S-TAP 12.1 might cause Windows OS server instability with non-database traffic using duplicate IPs and ports.
|
DT443493
|
Installers with MD5Sums
| MD5Sum | File Name |
|---|---|
|
29b88084a844963a334c5b511e9b6b8a
|
Windows-STAP-V11.5.10.478.zip
|
|
71e219c152f7ee7ec825747167779e99
|
conf.reload.WINSTAP
|
|
e35700d30d1d44a07f633c97ba597559
|
guard-WINSTAP-11.5_r110510478_1-x86_x64.gim
|
|
a88485bb3c14c5910af6d9f07c0cd4aa
|
guard-WINSTAP-guardium_11.5_r110510478_1-Windows-Server-Windows-x86_x64.exe.signed
|
Related Guardium updates
Guardium Data Protection Windows GIM 11.5.10.478 (see release note)
[{"Type":"MASTER","Line of Business":{"code":"LOB76","label":"Data Platform"},"Business Unit":{"code":"BU048","label":"IBM Software"},"Product":{"code":"SSMPHH","label":"IBM Security Guardium"},"ARM Category":[{"code":"a8m3p000000PCTuAAO","label":"Platform\/Installation\/Deployment"},{"code":"a8m0z000000Gp0IAAS","label":"STAP"}],"ARM Case Number":"","Platform":[{"code":"PF033","label":"Windows"}],"Version":"11.5.0"}]
Was this topic helpful?
Document Information
Modified date:
02 September 2025
UID
ibm17236870