DGW Release Notes v44.0.1535

IN-12607

The IPV4 header TTL was hardcoded to 64. The new Bni.IpGroup.IpTtlValue parameter was created to be able to the change the IPV4 header TTL in the range of 64..255.

This new parameter is only available using the CLI, a MIB browser, or in a configuration script.

The VNC can be now be disabled on the virtual machine of the Vm service by setting the value of the Vm.Vm.VncDisplayId parameter to -1.

The BRI telephony port is now supported by the DGW application for the Mediatrix C7, Mediatrix G7, and Mediatrix Sentinel 100/400.

IN-13430

The Mipt.SessionUpdateCryptoMode parameter enables regenerating or keeping the local crypto values was added.

The range of the accepted value for Vm.Vm.VncDisplayId parameter have changed from 0 - 99 to -1 - 99 and the type from unsigned integer to signed integer.

IN-13562

The new Lock protection parameter was added to the DGW Web interface, in the Users/Management/Access Control table. When the parameter is enable, the user's account may be temporary locked after repetitive login failures. When the parameter is not enabled, the user's account is not locked after repetitive login failures.

IN-13548

The diagnostic trace for CConfScriptsModifiers::ApplyScriptModifiers function will be a Debug trace and not an error.

The BRI telephony port is now supported by the DGW application for the Mediatrix C7, Mediatrix G7, and Mediatrix Sentinel 100/400.

The maximum number of Web page login failures can now be restricted by the rate limit of the Local Firewall (LFW) service of DGW.

When T.38 is enabled in the Mipt service, the DSP ressource allocation is now done correctly.

IN-13430

The local crypto parameter key is present in the SDP packet sent by the user to the peer. The value of the key is regenerated by default on each re-offer (hold-resume).

The timestamp and CSeq number are present in the RTP packets. These values are re-randomized after each re-offer breaking the continuity of the numbering.

The new Mipt.SessionUpdateCryptoMode parameter now enables regenerating or keeping the local crypto values

When a remote peer returns some AOC information in the SIP BYE, the 200 OK message may return some AOC information although it should not.  AoC information is no longer wrongly included in the 200 OK SIP response message.

Failback to primary server for Endpoint Gateways are now properly managed and now work correctly in TLS.

As described in the TR-069 standard, the CWMP Inform message must always contain all parameters with active notification. This behavior is now fixed. If one of these parameters cannot be read, the CWMP Inform message is not sent.

The Media Security Agreement headers were appearing in multiple instances when the same packet was sent to more than one destination. Media Security Agreement headers are no longer appearing in multiple instances.

Protection to avoid clickjacking attacks were added in the DGW Web interface.

IN-13765

Reading parameters via the Web page no longer locks the configuration.

IN-13562

It is now possible to allow multiple user login attempts without locking the account. 3 new parameters were added:

• Aaa.UsersTable.UsersLockProtectionEnable available in the DGW Web Interface, in the Users/Management/Access Control table.

When the parameter is enable, the user's account may be temporary locked after repetitive login failures. When the parameter is not enabled, the user's account is not locked after repetitive login failures.

• LoginLockedMaxRetry (integer – default 5 attempts) (available only via CLI, SNMP, or script)
• LoginLockedTimeoutS (integer – default 300 seconds)(available only via CLI, SNMP, or script)

IN-13548

The diagnostic trace for the CConfScriptsModifiers::ApplyScriptModifiers function will be a Debug trace and not an error.

During VM conversion, the partially converted image will no longer be displayed in the DGW Web under Management/Files. Once the conversion is completed, the VM converted image will be displayed in the DGW Web page under Management/Files.