TufinOS 3.100 Release Notes

  • The TufinOS 3 operating system reached EOL (end of life) on June 30, 2024 and is no longer supported. The final version - TufinOS 3.110 - was released in December 2023. If you are still running on TufinOS 3, we recommend upgrading to TufinOS 4 to get the benefit of the latest security patches.

  • TufinOS 4 does not support TOS releases earlier than R22-2 so if you are still running R22-1 or earlier, you must upgrade TOS before upgrading to TufinOS 4.

What is TufinOS?

TufinOS 3 is a hardened Linux operating system that is based on CentOS 7. As a hardened OS, TufinOS includes only the RPMs and services necessary for the operation of Tufin Orchestration Suite. By removing unnecessary RPMs and services, TufinOS helps minimize the attack surface of the operating system. To maintain the integrity and security of TufinOS, we do not support installing third party RPMs.

TufinOS is updated at regular intervals, using the latest version of CentOS 7 available. CentOS is a community-supported distribution of Linux based on Redhat’s RHEL operating system.

Build Information

Build 414569
Release Date November 2022

Upgrade image

TufinOS-3.100-414569-x86_64-2009-Final-Update.run.tgz
ISO for VMware TufinOS-3.100-414569-x86_64-2009-Final.iso.tgz

USB image for Tufin appliances

TufinOS-3.100-414569-x86_64-2009-Final.usb.img.tgz
Important! Classic only. If you are upgrading from TufinOS 3.70, you will need to upgrade Tufin Orchestration Suite Classic to R21-3. TOS classic will be unavailable until it is upgraded. For more information, see TOS Classic compatibility requirements.

What's New

TufinOS 3.100 includes the following new features:

  • Hardening improvements:

    • Approved MAC algorithms are configured according to item 5.2.11 of CIS CentOS Linux 7 Benchmark. If you have TOS Classic R21-3, versions HF5 and earlier, we recommend updating your ciphers.

    • The root user is locked by default for new TufinOS installations. You can unlock the user by setting a password after the installation is complete. Aurora environments only.

    • The password of the root user can be reset via rd break mode.

  • Added fio RPM for storage I/O performance check.

  • Updated kernel to version 3.10.0-1160.76.1.el7.x86_64 for TOS Aurora and TOS Classic.

  • Updated PHP RPMs to version 7.4.32-1.el7 for TOS Classic.

  • Updated PostgreSQL 11 to version 11.17-1PGDG.rhel7 for TOS Classic.

  • Updated Wireguard driver to version 1.0.20220627 for TOS Aurora.

  • Updated RPMs based on CentOS 7.9 latest versions (Tue Oct 18, 2022).

RPMs and CVEs

For a full listing of RPMs that have been added or updated in this release, see the TufinOS Hardening Guide. The TufinOS Hardening Guide also lists all CVEs that are fixed by updates to this version.