Release Notes
Abstract
This technical note provides guidance for installing IBM Guardium Data Protection Windows Agents 11.5.10.528, including any new features or enhancements, resolved or known issues, or notices associated with the patch.
Content
| Product: | IBM Guardium |
| Release version: | Guardium 11.5 Windows Software TAP (S-TAP) |
| Completion date: | 23 March 2026 |
| Guardium_11.5.10.528_S-TAP_Windows |
- Select the following options to download this patch on the IBM Fix Central website and click Continue.
- Product selector: IBM Security Guardium
- Installed Version: 11.5
- Platform: Windows
- On the "Identify fixes" page, select Browse for fixes and click Continue.
- On the "Select fixes" page, select Database Agent (STAP, GIM and CAS). Then, enter the patch information in the Filter fix details field to locate the patch.
- A fresh install of Guardium 11.5 does not require a reboot.
- When you upgrade between versions, you must reboot the database server to update the NmpProxy driver. If there are no issues with your current NmpProxy functionality, you can delay the reboot until the next maintenance cycle. No fixes will be applied to the NmpProxy driver until a server reboot is completed.
- IBM strongly recommends that you do not use the following builds as they contain instabilities that can lead to system failure. Uninstall these builds and reboot before you install S-TAP 11.5. For all other builds, you can upgrade as usual.
- 11.4.0.168 through 11.4.0.204
- 11.3.0.257 through 11.3.0.287
Version 11.5 support transition
On 30 April 2026, Guardium Data Protection 11.5 reaches completion of Base Support and transitions to Extended Support. For more information, see IBM Support Product lifecycle overview.
Patch | Issue key | Summary | Known issue (APAR) |
|---|---|---|---|
| 11.5.10.495 | This patch includes resolved issues from Windows S-TAP 11.5.10.495 (see release note). | ||
| 11.5.10.528 | GRD-113649 GRD-119199 | Upgraded OpenSSL to version 3.5.5 to remove vulnerability subject to CVE-2025-9230. | DT457505 |
| GRD-115230 | Fixed an issue in WfpMonitor that may lead to an instability in the database server. For more information, see Windows S-TAP 12.2.0.x, 12.1.x, 12.0.x, and 11.5.x might cause MSSQL server instability when S-TAP process partial or malformed TDS PDUs. | DT457509 | |
GRD-117204 | Fixed an S-TAP instability following an upgrade with protocol 7 by clearing leftover registry entries. | DT460464 | |
GRD-117571 | Improved S-TAP robustness to avoid S-TAP instability even when memory resources are critically low. | DT465036 | |
| GRD-118214 | If there are any missing NETWORKS parameters for inspection engines in guard_tap.ini, restarting the Windows S-TAP service will update the file with default NETWORKS parameters (1.1.1.1/0.0.0.0,::1/0). | DT463953 | |
| GRD-120832 | Increased maximum value for LOAD_BALANCER_NUM_MUS to 300 and the buffer size to 64 KB. | DT465008 |
| Issue key | Description |
|---|---|
| GRD-120061 | If an Oracle table is built with NVARCHAR2 columns, running a predefined REDACT rule action (fast scrub) does not mask credit card details. Workaround: Use a regular expression (regex) to set up a scrub action. For guidance, see REDACT - Working with regex on Windows DB servers. |
| GRD-120773 | Guardium Installation Manager (GIM) does not clean up leftover OpenSSL files in subfolder structure from previous installations. Workaround: Manually remove the leftover files. |
| MD5Sum | File Name |
|---|---|
| 9744fff7a9edd012fd4cda917c07bbff | Windows-STAP-V11.5.10.528.zip |
| 4dcd8b4e8a9e9ea145225979bebc700e | conf.reload.WINSTAP |
| b1e0d904c5b7c2707d1694b3d8d3dab6 | guard-WINSTAP-11.5_r110510528_1-x86_x64.gim |
| eb70623a569d43eb83fdf22d58c63bcd | guard-WINSTAP-guardium_11.5_r110510528_1-Windows-Server-Windows-x86_x64.exe.signed |
- Guardium Data Protection Windows FamMonitor 11.5.10.528 (see release note)
- Guardium Data Protection Windows GIM 11.5.10.528 (see release note)
Was this topic helpful?
Document Information
Modified date:
27 March 2026
UID
ibm17263604