On This Page
Resolved Issues
R23-1 PHF3.2.0
Category |
Reference ID |
Also in |
Description |
---|---|---|---|
Backup and Restore |
TOS-83443 |
R24-1 PRC1.0.0 |
Unexpected behavior, such as high CPU usage, slow response time, and incorrect violation calculations, occurs after restoring from backup. Note that after upgrading to this hotfix, you must make a new backup. |
R23-1 PHF3.1.0
Category |
Reference ID |
Also in |
Description |
---|---|---|---|
Security |
TOS-81560 |
R22-2 PHF4.1.0 R23-2 PHF1.0.0 |
Resolved an issue where one of the TOS internal APIs could be accessed without authentication, something that could cause information disclosure |
R23-1 PHF3.0.0
Category |
Reference ID |
Also in |
Description |
---|---|---|---|
Configuration |
TOS-79147 |
R23-2 PGA.0.0 R23-2 PFH1.0.0 R24-1 PRC1.0.0 |
Resolved an issue in which the JAVA_TOOL_OPTIONS string length exceeded the maximum limit after upgrading. (SR125582) |
Designer |
TOS-76902 |
|
Resolved an issue in which Designer fails with a timeout message. (SR115750) |
Designer |
TOS-77095 |
|
For Check Point CMA devices, resolved an issue in which it was impossible to edit the position of a rule in Designer results. (SR121290) |
Designer |
TOS-79976 |
R23-2 PHF1.0.0 |
For Cisco ASA devices, resolved an issue in which Designer suggested creating an empty group when an access request contained two different access control lists for the same device. (SR115409) |
Device Monitoring |
TOS-75721 |
R23-2 PGA.0.0 R24-1 PRC1.0.0 |
For Cisco FMC devices, resolved an issue in associate High Availability FTDs with policies when the version of the FMC was 7.2 and above. (SR117139) |
Device Monitoring |
TOS-76502 |
R23-2 PGA.0.0 |
For Cisco FMC devices, resolved an issue in which revision retrieval failed when the IPv6 static route contained "none" as an interface. (SR122103) |
Device Monitoring |
TOS-76514 |
|
For Cisco FMC devices, resolved an issue in associate High Availability FTDs with policies when the version of the FMC was 7.2 and above. (SR114820) |
Device Monitoring |
TOS-77129 |
R23-2 PGA.0.0 |
For Fortinet FMG devices, resolved an issue when prehandling syslog messages caused an out-of-memory scenario. (SR123385) |
Device Monitoring |
TOS-77703 |
R23-2 PGA.0.0 R24-1 PRC1.0.0 |
For Fortinet FMG devices with SDWAN and version 7 and later, resolved an issue in which revision retrieval failed for Fortigate devices with a version of 6.4 or earlier. Note that there was no issue with ADOMS and FMG. (SR121845) |
Device Monitoring |
TOS-78133 |
|
For Checkpoint SMC/CMA devices, resolved an issue in which the configuration log displayed errors due to a failure to parse CPTag/CPDomain. (SR122539) |
Device Monitoring |
TOS-78288 |
R23-2 PHF1.0.0 R24-1 PRC1.0.0 |
For Fortigate devices, fixed an inconsistency for revision interfaces; unconfigured interfaces will have an empty IP field now instead of 0.0.0.0/0. (SR120974) |
Device Monitoring |
TOS-79037 |
R23-2 PHF1.0.0 |
For Cisco FMC devices, resolved an issue in which extended CIDR masks were not supported. (SR124254) |
Device Monitoring |
TOS-79429 |
R23-2 PHF1.0.0 |
Resolved an issue in which rule indexing took longer than expected due to duplicate paths. (SR99817) |
Device Monitoring |
TOS-80487 |
R23-2 PHF1.0.0 |
Resolved an issue in which revision retrieval failed when the process ended before completion. (SR124698) |
Resources |
TOS-75125 |
R23-2 PGA.0.0 R24-1 PRC1.0.0 |
Resolved an issue in which indexing SecureApp server applications caused an out-of-memory scenario. (SR116838) |
Risk Analysis |
TOS-75872 |
R23-2 PGA.0.0 |
Resolved an issue in which Risk Analysis failed when the first or last name of the admin user contained a letter with an umlaut. (SR119730) |
Rule Recertification |
TOS-79512 |
R24-1 PRC1.0.0 |
Resolved an issue in which the Backwards Compatibility API that edits rule documentation overwrote the rule certification status. (SR120593) |
Topology |
TOS-75871 |
R23-1 PGA.0.0 |
Resolved an issue in which devices with incorrect interfaces prevented the interactive map from loading. |
Topology |
TOS-76675 |
R23-2 PGA.0.0 |
For FortiManager devices, resolved an issue related to Central NAT calculations that caused topology jobs to fail. (SR122858) |
Topology |
TOS-77872 |
R23-2 PGA.0.0 |
Resolved an issue in which the device log collection for APGs defaulted to One month when a specific date was entered. (SR122882) |
Topology |
TOS-78313 |
|
Resolved an issue in which an incorrect calculation for SDWAN caused blocked traffic in the Interactive map. (SR121132) |
Topology |
TOS-78371 |
R23-2 PGA.0.0 R24-1 PRC1 |
For Check Point devices, resolved an issue preventing automatically created rules with Hide NAT from appearing in the Interactive Map. (SR127545) |
Topology |
TOS-78639 |
R23-2 PHF1.0.0 |
Resolved an issue in which traffic was incorrect after an SRX NAT simulation with an Cisco ACI device in the path. (SR122770) |
Topology |
TOS-79103 |
R23-2 PHF1.0.0 |
Resolved an issue in which the path calculation failed when the next hop was a cloud with an MPLS interface leading to it. (SR125046) |
Topology |
TOS-79880 |
R23-2 PHF1.0.0 |
Resolved an issue in which the Interactive map failed to show default BGP routes. (SR124258) |
Verifier |
TOS-76139 |
|
Resolved an issue in which Verifier and impact analysis in Server Decommission tickets failed when there was a network object without an IP address. (SR119984) |
Verifier |
TOS-79978 |
R23-2 PHF1.0.0 R24-1 PRC1.0.0 |
Resolved an issue in which Verifier does not support ICMP 0 service. (SR126758) |
R23-1 PHF2.1.0
Category |
Reference ID |
Also in |
Description |
---|---|---|---|
Upgrades |
TOS-77990 TOS-77880 |
|
Resolved an issue in which the last modified date in the Rule Viewer was lost when upgrading TOS, for some Stonesoft, Check Point and Fortinet devices. |
R23-1 PHF2.0.0
Category |
Reference ID |
Also in |
Description |
---|---|---|---|
APG |
TOS-72726 |
R23-2 PRC1.0.0 |
For Fortigate devices, resolved an issue impacting the performance of loading the device to an APG job. (SR116961) |
Authentication |
TOS-74363 |
R23-2 PRC1.0.0 |
Resolved a user interface issue impacting some users who were logging into SecureChange via TOS SSO. (SR116196) |
Database |
TOS-74931 |
R23-2 PGA.0.0 |
Resolved an issue causing the database growing abnormally large due to a problematic report. (SR116563) |
Designer |
TOS-71975 |
|
Resolved an issue causing Designer to suggest creating a new SecureApp group as the source when a matching group already exists. (SR114129) |
Designer |
TOS-72332 |
R23-2 PRC1.0.0 |
Resolved an issue in which provisioning failed after modifying data in Designer. (SR115493, SR116420) |
Designer |
TOS-73306 |
R23-2 PRC1.0.0 |
For FortiManager devices with a central NAT, resolved an issue preventing Designer from returning suggestions. (SR117273) |
Designer |
TOS-74763 |
|
For Cisco ASA devices, resolved an issue in which Designer suggested using a group before creating the group. (SR115409) |
Device Monitoring | TOS-55199 | R23-2 PRC1.0.0 | For Cisco ASA devices, resolved an issue when editing existing device in which the Login check box in Stage 2 was enabled automatically. (SR120892) |
Device Monitoring |
TOS-76172 |
R23-2 PGA.0.0 |
For monitored FortiManager devices, whose VDOMs had no rules, resolved an issue in which sync service did not get a report and therefore failed migration. (SR121834) |
Device Monitoring | TOS-72151 | R23-2 PRC1.0.0 | For Panorama devices, resolved an issue in which these devices could not be added if the string "port" appeared in the user name. (SR116014) |
Device Monitoring |
TOS-73080 |
R23-2 PRC1.0.0 |
Resolved an issue preventing hits on a policy from being shown when the policy name contained a semicolon and space characters. (SR115999) |
Device Monitoring |
TOS-73617 |
R23-2 PRC1.0.0 |
For Cisco ASA devices, resolved an issue in which a rule usage failure occurred when the device IP was parsed incorrectly. (SR117409) |
Device Monitoring |
TOS-73756 |
|
For GCP devices, resolved an issue in which a virtual machine with a Null description caused the client to return an error. (SR118290) |
Device Monitoring |
TOS-75119 |
R23-2 PGA.0.0 R24-1 PRC1.0.0 |
For NSX devices, resolved an issue preventing revisions from being retrieved. (SR114423, SR119628) |
Device Monitoring |
TOS-76407 |
R23-2 PGA.0.0 R24-1 PGA.0.0 R23-1 PHF3.0.0 |
For specific FortiManager devices, resolved an issue in which missing revision information caused an error during migration. (SR121834) |
Installation/Upgrade |
TOS-72135 |
|
Resolved an issue preventing migrations from TOS Classic to TOS Aurora (SR116793) |
Device Monitoring |
TOS-74642 |
R23-2 PRC1.0.0 |
For F5 Devices, resolved an issue preventing revisions from being retrieved due to a missing predefined port. (SR119524) |
Installation/Upgrade |
TOS-72135 |
|
Resolved an issue preventing migrations from TOS Classic to TOS Aurora (SR116793) |
Notifications |
TOS-74362 |
R23-2 PRC1.0.0 |
Resolved an issue preventing TOS from sending smtp alerts when the mail server was configured with authentication. (SR116213) |
Reports |
TOS-75352 |
|
Resolved an issue in which a race condition caused an incorrect calculation in reports. (SR116563) |
Reports (Rule and Objects Usage) |
TOS-73470 |
R23-2 PRC1.0.0 |
Resolved an issue preventing policies from appearing in the suggestions list of the Rule and Object Usage report, when creating new report, because at least one of the policy names contained an '&' character. (SR117050) |
Rule Decommission |
TOS-75112 |
R23-2 PGA.0.0 R24-1 PRC1.0.0 |
Resolved an issue preventing a Rule Decommission ticket from being created due to a Turkish character in the user name. |
System | TOS-72614 | R23-2 PRC1.0.0 | Resolved an issue in which the re-index of invalid tickets ran at the same time as the indexing process. (SR117850) |
System |
TOS-73159 |
R23-2 PRC1.0.0 |
Resolved an issue in which a syslog-cleaner jobs caused the TOS cluster to use up all resources. (SR118120) |
System |
TOS-75034 |
R23-2 PRC1.0.0 |
Resolved an issue in which the customer could not add a syslog timestamp separator. (SR118909) |
Topology |
TOS-71377 |
R23-2 PRC1.0.0 |
Resolved an issue impacting the performance of Interactive Map syncs. (SR115358) |
Topology |
TOS-73254 TOS-73595 |
|
For Cisco ACI devices, resolved an issue in which dynamic topology retrieval could failed when more than 300 static routes were configured on a logical node profile. (SR112123) |
USP |
TOS-71179 |
R23-2 PRC1.0.0 |
Resolved an issue causing a general error when navigating back to the USP viewer page. (SR112314) |
Zones |
TOS-72393 |
R23-2 PRC1.0.0 |
Resolved an issue in which a data error in a zone message blocked additional messages in the zone channel. (SR116768) |
R23-1 PHF1.2.0
PHF1.2.0
Category |
Reference ID |
Also in |
Description |
---|---|---|---|
Upgrades |
REL-764 |
|
Resolved an issue in which upgrading from some earlier releases failed. |
PHF1.0.0
Tufin Orchestration Suite R23-1 PHF1.0.0 includes these resolved or updated issues, and all resolved or updated issues from earlier versions.
Category |
Reference ID |
Also in |
Description |
---|---|---|---|
Device Monitoring | TOS-68287 | For GCP devices, resolved an issue in which the licensing page warned about an evaluation license after a full license was installed. (SR113948) | |
Device Monitoring |
TOS-69847 |
R23-2 PRC1.0.0 |
For Fortinet FortiGate devices, resolved an issue preventing revisions from being received. (SR114807) |
Device Monitoring | TOS-71156 | R23-2 PRC1.0.0 | For Check Point devices, resolved an issue in which a rule UID mismatch format on the Check Point side caused no results for st_apg_collect tool. (SR114091) |
Device Monitoring |
TOS-71341 |
R23-2 PRC1.0.0 |
For Check Point devices, resolved an issue in which the SMART console displayed errors on the domain-tools when the Check Point version did not support FQDN objects. |
Risk Analysis | TOS-63748 | For Access Request workflows, resolved an issue causing a SecureTrack Connection error to be returned during risk calculation. (SR106943) | |
System |
TOS-73079 |
R23-1 PHF2.0.0 R23-2 PRC1.0.0 |
Resolved an issue in which a TOS CLI error prevented pod readiness monitoring. (SR116781, SR117291, SR117848, SR118297) |
Topology |
TOS-71694 |
R23-2 PRC1.0.0 |
For ACI Tenants, resolved an issue in which routing information did not appear in the Interactive map. (SR112123) |
PGA.0.0
Tufin Orchestration Suite R23-1 PGA.0.0 includes these resolved or updated issues, and all resolved or updated issues from earlier versions.
Category |
Reference ID |
Also in |
Description |
---|---|---|---|
Change Management |
TOS-66572 |
|
Resolved an issue in which SecureChange's security zone feature didn't work for Access Requests in instances where Source and Destination were the same. (SR112046) |
Installation/Upgrade |
TOS-67654 |
|
Resolved an issue in which upgrading from R22-1 PHF3.1.0 to R22-2 PHF2.0.0 failed due to an invalid job name. (SR112907) |
Topology |
TOS-67651 |
R23-2 PRC1.0.0 R23-1 PRC1.0.1 |
On Microsoft Azure devices, resolved an issue in which cloud topology crashed on SecureTrack deployments with Virtual HUB. (SR110777) |
Topology |
TOS-68974 |
|
For Cisco Meraki devices, resolved an issue which prevented the interactive map from working. (SR 113352) |
PRC1.0.0
Tufin Orchestration Suite R23-1 PRC1.0.0 includes these resolved or updated issues, and all resolved or updated issues from earlier versions.
Category |
Reference ID |
Also in |
Description |
---|---|---|---|
Database |
TOS-56843 |
|
Resolved an issue in which a particular column in postgresql exceeded its limit and caused errors in the postgresql logs. (SR103024) |
Database | TOS-64751 | Resolved an issue preventing a SecureTrack script from running properly due to duplicate device records in the database. (SR110287) | |
Designer |
TOS-59283 |
|
Resolved an issue in which the inner group is not created automatically for a new group. (SR105486) |
Provisioning |
TOS-63214 |
|
For Cisco FMC devices, resolved an issue in which creating an Access Request with more than 50 hosts generated a generic error message rather than the correct message. (SR106931) |
Workflow |
TOS-58391 |
|
Resolved an issue in which marking the expiration field as non-mandatory triggered email notifications to be sent before the ticket expired. (SR103155) |