ManageEngine NetFlow Analyzer v12.8 | ReadMe

12.5.659(Build 125659) - August 11, 2022

New Features & Enhancements:

1. General: There was an issue with loading the NOC page in Embed view. This issue has been fixed now.

12.5.656(Build 125656) - July 25, 2022

New Features & Enhancements:

1. General: Users have the option to skip TFA now. Option to disable Two Factor Authentication is now available.

12.5.647(Build 125647) - May 12, 2022

New Features & Enhancements:

1. HighPerf has been upgraded to the latest version with Postgres 11.15 & CStore 3.10.11.
2. Vectorwise to CStore data migration support is made available for DPI customers.
3. DPI with HighPerf(CStore) add-on is now available in NetFlow Analyzer, NFA-DE, OpManager, OpManager Enterprise Edition, and OpManager Plus.
4. Network Packet Sensor tool has been introduced under ITOM Agents. Network Packet Sensor provides the combined benefits of NetFlow Generator and DPI Engine.

12.5.615(Build 125615) - March 24, 2022

New Features & Enhancements:

1. Capacity Planning reports page has been revamped for better user experience.

2. Alert Profiles email PDF report has been revamped, and now includes DSCP IN and OUT report.

3. Support ID : 5853024 : Alert Profiles Email PDF report will now display applied alert criteria.

4. Support ID :7276134 : Search input boxes in Inventory’s WLC tab have been aligned with the table data columns.
5. Introduced the option to enable IP-based Autonomous System Number(ASN) . This update will reflect in the Inventory, Reports, and Dashboard widgets.
6. General: Log4j upgraded to version 2.17.2.

Issues Fixed:

1. Support ID : 7472047 : Scheduled Historic Data Cleanup issue in the ASAM module has been fixed.
2. Support ID :7525131 : The interface discovery issue in Distributed edition when more than 10 collectors were installed has been fixed.

3. Support ID :7637746 : The duplicate interface discovery in internal collectors when new interfaces were added in different routers in external collectors has now been fixed.

12.5.606(Build 125606) - August 04, 2022

Vulnerabilities Fixed:

• General: Earlier, there was a Remote Code Execution (RCE) vulnerability in IPv6 address management (CVE-2022-37024) and IPv4 address management (CVE-2022-38772) reported by an anonymous working with Trend Micro Zero Day Initiative. This has been fixed now.

• General: A vulnerability resulted in unauthenticated access of the user API key. This issue has been fixed now. (Reported by Anonymous working with Trend Micro Zero Day Initiative. Refer: CVE-2022-36923)

12.5.585(Build 125585) - February 03, 2022

Issues Fixed:

1. Support ID: 7515779 - The issue in updating TimeStamp Index in FileMetatable has been fixed.

12.5.584(Build 125584) - February 01, 2022

Vulnerabilities Fixed:

1. NCM: Earlier, there was a stored XSS vulnerability in the Schedule name field of Schedule page, reported by Hazem Osama. This has been fixed. (Refer CVE-2022-24703)
2. NCM: Earlier, there was a stored XSS vulnerability in the Change rule name field of Change Notification page. This has been fixed.

12.5.582(Build 125582) - January 17, 2022

Features & Enhancements:

1. Table data in Forensics Report has been synced with the zoomed-in graph time period.
2. The option to select user-specific column has been provided for the Forensics Conversation Report.
3. Support ID - 7031196,7317970,7311545,736133 - Parsing SAMPLING_INTERVAL field has been included in the optional template for V9 and IPFIX Flows.

Issues Fixed:

1. Support ID -7334658 -  NFA collector count update issue in the NFA central server’s About tab has been fixed.
2. Support ID - 6242236 - Schedule conversation/conversationNetwork report displayed Incorrect destination and hidden port details while fetching report from Aggregated Tables. This issue has been fixed.
3. Support ID -6337024 -  Support to suppress second alert for the given time period has been handled with system property.
4. Support ID -5911404, 5963439, 5996838,6003052, 6017482, 6019009, 6062107, 6291212, 6320005, 6027535, 5725112, 5644128 - Support to disable ‘No template received’ error has been handled with system property.
5. Support ID - 6685125 - The issue in scheduling capacity planning monthly report for months with 31 days has been fixed.
6. Support ID -  6960555 - The issue in adding CBQoS device for devices that are not present has been fixed.
7. Support ID - 6244685 - Support for sflow duplicate mpls processing has been  has been handled with system property.
8. Support ID - 6538238 -  Support to skip dst_tos if tos is already present in the template of v9 and IPFIX flows has been handled with system property.
9. Support ID - 6557590, 6134171 -  Inventory report data overflow due to cutoff has been fixed.
10. Support ID - 6557590 -  Inventory report data overflowing from file-reader, for data generated in previous 20 minutes has been fixed.
11. Support ID - 7370085 -  Log information maintained for all flows in Palo Alto Device has been handled with system property.
12. Support ID - 7439692 - Regenerate Bill option in Billing reports was missing. This has been fixed.

12.5.568(Build 125568) - February 24, 2022

Issues Fixed:

1. General : The upgrade process failed in secondary failover setup due to an issue. This issue occurs when upgrading from builds below 125561. This issue has been fixed.

12.5.566(Build 125566) - January 21, 2022

Vulnerabilities Fixed:

1. Authentication bypass vulnerability in a few file import APIs in the NetFlow EE Central Server has been fixed.

12.5.557(Build 125557) - November 26, 2021

Features & Enhancements:

1. Support ticket 6972531 - In the time series graph, horizontal and vertical lines as well as a tick mark for each data labels in x-axis have been added for better data visibility.

12.5.490(Build 125490) - November 26, 2021

Vulnerabilities Fixed:

1. OpUtils: The authentication issue in very few of OpUtils modules' audit directories has been fixed. (Refer CVE-2021-44514)

12.5.488(Build 125488) - October 29, 2021

Vulnerabilities Fixed:

1. There was a Remote Code Execution (RCE) vulnerability in the Ping functionality of the NCM module (Reported by Ma3i). This issue has now been fixed.

12.5.485(Build 125485) - October 21, 2021

New Features & Enhancements:

1. We have introduced a password reset policy for default SCP password.

12.5.484(Build 125484) - October 13, 2021

Issues Fixed:

1. Non-admin users of central server were able to access some admin APIs of collector servers. This issue has now been fixed.

12.5.483(Build 125483) - October 12, 2021

Vulnerabilities Fixed:

1. General : Low privileged users were able to access Audit reports and mail server details(Reported by Ranjit Pahan). This issue has been fixed.

12.5.482(Build 125482) - October 08, 2021

Features & Enhancements:

1. HighPerf add-on is now supported in the NetFlow Analyzer Enterprise Edition.
2. Counter samples-based traffic is now displayed for SFlow in Inventory Snapshot page.
3. Forensics report has been revamped with a new design.
4. Support Ticket : 5026116,6900843 : The option to edit existing IPGroups using bulk IPGroup XML file has been introduced.

Issues Fixed:

1. Support Ticket : 7160638 : Multiple duplicate interfaces were displayed when the same device was added to two collectors with an internal collector. This issue has been fixed.
2. Support Ticket : 6972531 : Fortigate device packets processed based on flowend reason with active timeout has been fixed.
3. Support Ticket : 7168731 : Search Report generation for IP group when it has high volume (GB, TB, etc.,) has been fixed.
4. Support Ticket : 7135949 : AS View Report issue that occured when 24 hours time period was selected has been fixed.
5. Support Ticket : 7237844,7160638 : Issue in deleting Interfaces with index zero has been fixed.

12.5.476(Build 125476) - January 13, 2022

Vulnerabilities Fixed:

1. Authentication bypass vulnerability in a few file import APIs in the NetFlow EE Central Server has been fixed.

12.5.471(Build 125471) - October 01, 2021

Vulnerabilities and Issues Fixed:

1. Low privileged users had access to multiple modules when it was disabled. This has now been fixed. (Reported by Ranjit Pahan)
2. CSRF vulnerability in multiple pages has been fixed. (Reported by Ranjit Pahan)
3. Stored XSS vulnerability while adding SNMP credential has been fixed. (Reported by Ranjit Pahan)

12.5.469(Build 125469) - September 24, 2021

Vulnerabilities Fixed:

1. General: The XSS vulnerability issue in Task Name of Workflow has now been fixed. (Reported by Ranjit Pahan.)

12.5.467(Build 125467) - September 17, 2021

Vulnerabilities Fixed:

1. CSRF vulnerability in the Cloud Repository page reported by Ranjit Pahan has been fixed.

12.5.464(Build 125464) - September 07, 2021

New Features:

1. HighPerf (Vectorwise) add-on data migration to HighPerf(CStore) add-on is now supported.
2. Introducing Percentile Report with 90th/95th/99th percentile-based traffic data.

Enhancements:

1. Support Ticket: 5993846: NetFlow Analyzer now allows you to create a Schedule Report profiles for the Forensics Report.
2. Percentile-based Report can be configured to create a Schedule Report profile.
3. In NetFlow Settings, the option to configure percentile values has been provided.

Issues Fixed:

1. Support Ticket : 7118987: TOS displaying wrong value for COST has now been fixed.
2. SQL Injection in Attacks Module API has now been fixed. (Reported by Hồng Dương Trần. Refer CVE-2021-41075)

12.5.459(Build 125459) - December 24, 2021

Vulnerabilities Fixed:

1. General: Low privileged users were able to access Support Module (Reported by Ranjit Pahan). This issue has been fixed.

12.5.447(Build 125447) - August 17, 2021

New Features & Enhancements:

1. Introducing HighPerf add-on, a highly scalable database for raw data storage.
2. Support ID : 6677447, 5444410, 5443803, 6355086, 5568161 : Introducing Autonomous System Number Report based on IP Address Mapping.
3. Support ID : 7050048 : Collector name will now be displayed in the Collector UI.
4. Support ID : 6784447, 6785960, 7033058, 7033052 : "Others" data has been removed from Dashboard widgets.
5. Support ID : 6179050 : Device group filter selection will now be retained in the Devices list page until it's cleared by the user.

Issues Fixed:

1. Support ID : 7124152 : Issue in loading client after login on Chrome, Firefox and Internet Explorer browsers has been Fixed.
2. Support ID : 7124696 : Issue in filtering Email notification templates in Alert Profile for other languages has now been fixed.
3. Support ID : 7037437 : IP Group Name configuration issue has now been handled, allowing 50 characters for Group Name in the XML for bulk loading and 255 characters for User Client in IP Groups.
4. Support ID : 7085799 : Issue in TimeZone Update while creating new users when the username with upper case or lower case of same characters were used in User Management has now been fixed.
5. Support ID : 7070148 : Fixed the redirection issue in Traffic widgets where data was displayed in terms of speed when utilization was selected.
6. Support ID : 6951682 : In OPM Enterprise Edition, NetFlow Device snapshot displayed sample data instead of the actual data when NFA router ID is stored as zero in the Config Table. This issue has been fixed now.

12.5.429(Build 125429) - July 13, 2021

New Features & Enhancements:

1. Introduced DHCP-based User Name - IP Address Mapping. Traffic reports will include Source, Destination and Conversation details with Hostname based on imported DHCP logs.
2. PDF and CSV Reports of Schedule Report have been revamped.
3. VPC Flow log support has been provided for the NetFlow Analyzer Enterprise Edition.
4. One click schedule option has been provided for the following reports
   • Consolidated Report
   • Capacity planning Report
   • Protocol Distribution Report
   • Inventory Report
   • Geolocation Report
5. SNMP operation has been made synchronous during with the Edit device details request made from device drill down.
6. Introduced the option to prioritize User-IP Mapping.
7. Introduced individual Enable and Disable options in the IP Resolution page.

Issues Fixed:

1. Support ID : 6995922, 6976373, 6755903, 7018811: Central server Upgrade Failure due to Router IP address duplicates have been fixed.
2. Support ID : 7031196: In NFADE central (Essential to Enterprise Edition) FlowCount was shown as 'Zero' though it had data. This has been fixed.
3. Support ID : 6793372: Paste action in Set Speed page has been disabled to avoid UI crashing.
4. Support ID : 6936072: Sorting issue in Inventory Report is now fixed.
5. Paste action in Billing Add/Edit page has been disabled to avoid UI crashing.
6. Sorting issue in reporting pages when data unit calculation is modified as 1024, has been fixed now.
7. Huawei SNMP ifIndex mapping issue has been fixed.

12.5.412(Build 125412) - June 14, 2021

New Features & Enhancements:

1. NetFlow : NetFlow Analyzer now offers support for AWS VPC Flow logs.
2. NetFlow : Introduced the option to enable V6/V4 while creating Report Profiles.
3. NetFlow : Support ID : 6139913 : Introduced the option to select multiple interfaces from different devices in Report Profiles.
4. NetFlow : Support ID : 5707385 : Introduced the option to select top devices based on 95th percentile values in Compare Report.

Bug Fixes:

1. NetFlow : Support ID : 6947524 : "Others" data being displayed on fetching data from the raw data table has been fixed.
2. NetFlow : Support ID : 6963234: Forensics report displaying duplicate rows in adjacent pages has been fixed.
3. NetFlow : Support ID : 6965297 : Unknown_App Application, Source and destination IP address details were not displayed on Next page navigation in the Forensic report. This has been fixed.
4. NetFlow : Support ID : 6881257 : sFlow traffic double count issue has been fixed.
5. NetFlow : Support ID : 6806564, 6871104 , 6905561 , 6955167 , 6969519 , 6990128 : BCP Alert triggers when DroppedFlow data was dumped has now been fixed.

12.5.399(Build 125399) - June 1, 2021

New Features & Enhancements:

1. General : User Management now supports custom role creation.
2. General : Previously, Add-On Modules were enabled/disabled globally.
3. Enabling/disabling Add-On Modules is now user specific.
4. General : Users can now choose to show/hide Add-On Modules for which they have been authorized.

Issues Fixed:

1. General : There was an issue when restoring backup during MSSQL installation after the 125301 upgrade. This has now been fixed.

12.5.393(Build 125393) - May 11, 2021

New Features & Enhancements:

1. The NetFlow Analyzer Essential Edition has been renamed as the NetFlow Analyzer Professional Edition.
2. WLC access points will henceforth be considered as interfaces for licensing(Build 125393 and above).

12.5.381(Build 125381) - April 30, 2021

New Features & Enhancements:

1. NetFlow Analyzer now offers flow support for Aruba Wireless Controller Model 7024 version 8.6.0.4.
2. Introducing V4/V6 View in Inventory, Dashboard, Search, and Forensics Reports.
3. NetFlow Analyzer integrates with JIRA Service Desk for Notification Template.
4. Inventory report will now include the IN and OUT 95th percentile values.
5. Selecting the threshold for 95th Percentile has now been provided as an option for Inventory report generation.

Issues Fixed:

1. WLC Access Point tab displaying OUT traffic as 0 has now been fixed.
2. Support ID : 6795227: Temp table creation issue in Capacity Planning Report has been fixed.

12.5.376(Build 125376) - April 12, 2021

New Features & Enhancements:

1. Support ID : 6630291: Criteria-based 'Favorite Report' has been introduced for Forensics report.
2. Support ID : 6713522, 6765483 : NetFlow Analyzer integrates with ManageEngine ServiceDeskPlus Cloud for Notification Templates.
3. Support ID : 6665423: Introducing support for NBAR2 Application data in IPGroup Report in Dashboard widgets.
4. Business hour, Exclude weekends, and Time Frame options have been provided for Forensics report for interface, WLC Device, Multicast, Medianet, Appflow Reports, and Drill down graphs.
5. Application group and Geolocation widgets have been introduced for the NFG Interface.
6. Geolocation status info will now be displayed in the Geolocation reports page.
7. Usability Enhancements:
   • Collector specific IP groups can now be created along in addition to the All collector view in CS.
   • Inventory User and Cloud list will be first sorted based on names and then IPs.
   • Support ID : 6763573 : One Offender and Target IP address will be displayed in place of count place in the main attacks list.

Issues Fixed:

1. Support ID : 6772844 : Issue in configuring 10.0.0.0 IP Network during IPGroup configuration has been fixed.
2. Support ID : 6722060 : sFlow negative graph issue has been fixed now.
3. Support ID : 6802123 : Issue in sorting Device groups in the Inventory has been fixed.
4. Support ID : 6779940 : 'No traffic data shown' was displayed for PFSense firewall device. This issue has been fixed.
5. Support ID : 6806564, 6847133 : BCP error due to 'dropped flows file not found' has been fixed.
6. Support ID : 6667292, 6665820, 6585682, 6470811 : Deleting interface/device handling for license management and rediscovery.
7. NetFlow Generator tool crashing when started in command prompt while was already running as service has been fixed.
8. Non English characters in NetFlow Alert Profile email subject got garbled while applying ppm. This issue is now fixed.
9. NFA DE alarms from Collector were not pushed to Central server post the recent upgrade. This issue is now fixed.

12.5.362(Build 125362) - March 26, 2021

Issues Fixed:

1. OpManager:The SparkGateway package has been upgraded to the latest version (SparkGateway 5.9.0) due to a path traversal vulnerability reported by David. (Refer CVE-2021-20078)

12.5.357(Build 125357) - March 04, 2021

New Features and Enhancements:

1. Support ID : 6339457 : NetFlow Analyzer now offers support for IPv6 for WLC reporting.
2. Support ID : 5550823 : Option to edit 'Group Name' for IP Groups has been introduced.
3. Support ID : 6665379 : NBAR2 Apps widget has been introduced for interface and interface group in the dashboard.
4. Support ID : 6501447 : Retry and Time out options for DNS lookup are now available on upgrading DNSjava jar.
5. Support ID : 6270157, 5494015, 5515873 : Introduced MAC address support for v9, IPFIX, and sFlow flows, and MAC address reporting in the Forensics report.
6. Bulk delete option for GroupSettings has been introduced under Settings -> NetFlow configuration page.

Issues Fixed:

1. Support ID : 6642095 : Access Point Name will be displayed in WLC Reports in the place of Access Point MAC Address.
2. Support ID : 6717054 : The issue in SNMPv3 Authentication when SNMPv3 credential is created with AES-192 and AES-256 algorithms has been fixed.
3. Support ID : 602764, 6659279, 6487138, 6493901, 6603837, 6603824, 6669408, 6650418  : Fixed NetFlow Analyzer—OpManager devices sync issue.
4. Support ID : 6684574 : Device snapshots were not loading because of invalid value for param[Name]. This issue has been fixed.
5. Support ID : 6628955 : Issue in Traffic Report widget's Graph Type has been fixed.
6. IPSLA data collection issue has been fixed.
7. Issue in Source Report drill-down for ASA Devices has been fixed.
8. In the Enterprise Edition, fixed the missed option of 'bulk uploaded IP Group' in Probe.
9. Support ID : 6652243 : Traffic spikes displayed for Palo Alto Devices based on firewall events has been fixed.
10. The following Dropped Flow report issues have been fixed,
    • Timeframe Selection option has been provided for Device Flow count in Central Server's Inventory.
    • Flow count was not displayed for the selected Timeframe in the WLC Inventory index page.

12.5.329(Build 125329) - February 04, 2021

New Features:

1. Support ID : 6448494, 6470564, 6658718 : Introducing Cloud Services reports to classify internet services based on IPs.
2. Support ID : 6226512 : User-bandwidth reports based on Active Directory.
3. Support ID : 6226512 :Dropped Flows reporting based on Flow Sequence Number(FSN).

Enhancements:

1. NetFlow Generator tool has been enhanced to handle more number of network packets processed per minute.
2. Support ID : 3271616, 5612670, 6052216, 4884857, 4374517 : Customers can now manually generate missed Billing reports from UI.
3. Support ID : 6229308 : Billing reports can be generated with 95th percentile based on IN+OUT summation.
4. Option to resend Billing reports from UI.

Issues Fixed:

1. Support ID : 6411252 : Memory leak issue in the NetFlow Generator tool has been fixed.
2. Support ID : 6501447 : DNS data dump when DNS name length > 255 has been handled.
3. Installation issue in Linux machines with Virtual IPs has been fixed.
4. Issues in individual graphs in the Forensics report of NFG devices have been fixed.
5. Issue in displaying ’Show All Conversations' under Forensics reports has now been fixed.
6. General : There was an unauthenticated Remote Code Execution (RCE) vulnerability due to general bypass for the deserialization class, as reported by Johannes Mortiz. This has now been fixed. (Refer CVE-2021-3287)

12.5.323(Build 125323) - January 05, 2021

New Features & Enhancements:

1. Application Forecast Report has been introduced.
2. NetFlow Analyzer now allows you to create Schedule Profiles for Geo Location Report.
3. Inventory Report types such as Layer4 , Layer7 and ASView can now be added in Schedule Reports separately.
4. Support Ticket : 5685326, 5995751 : Conversation reports will now include average traffic speed value.
5. Support Ticket : 6280722 : Introducing Management IP Mapping for SNMP parameter updates.
6. Introduced the option to select interface-name type in bulk SNMP configuration.
7. Alarm-Profiles notification has been enhanced. With the new 'Notification Templates' feature, users can
   • Raise new incident-tickets in ManageEngine ServiceDesk Plus (or) ServiceNow
   • Support Ticket : 6151588 : Get notified via Slack
   • Support Ticket : 4291780, 4564710, 809679 : Get notified with sound alerts(Web-Alarm) in webUI
   • Support Ticket : 5799336, 5641700 : Send 'Syslog' messages with event details
   • Send 'SNMP traps' alerts with criteria and event details
   • Support Ticket: 5566780, 6056880 : Run a system command when an alarm is triggered
   • Support Ticket : 6232664 : Configure notifications with preset Email and SMS templates

Issues Fixed:

1. Support Ticket : 6377319 : Traffic report did not display any data from the One-min file for Interface Group. This issue has been fixed.
2. Support Ticket : 6414066 : Users were unable to generate Consolidated report for IPGroup. This issue has been fixed now.
3. Support Ticket : 6425427, 6362464 : Introduced the option to change CBQoS graph y-axis in the readable format.
4. Internal Ticket : 36310 : Introduced the option to change the data order in CBQoS widget.
5. Internal Ticket : 36477 : Conversation network data did not load when raw data was enabled. This issue has been fixed.
6. Internal Ticket : 36368  :  Compare Report & AS view snapshot did now display data. This issue has been fixed now.

12.5.232(Build 125232) - October 23, 2020

Updates:

1. Users can now enable 30-day free trial for add-ons (NCM / Oputils) from webclient.
2. The API framework for the ServiceDesk Plus integration has been migrated to version 3.

12.5.217(Build 125217) - September 30, 2020

Features & Enhancements:

1. NetFlow Generator Tool: A standalone tool that captures network packets from devices that don’t support flow, and convert them into NetFlow packets to analyze traffic with ManageEngine NetFlow Analyzer.
2. Introducing 'LAN-WAN Reports' for interfaces and devices.
3. Option to customize, enable, and disable NCM and IPAM modules in WebUI.
4. Multi-select delete option has been provided for Applications, Services, DSCP and Top Sites in Mappings settings.
5. Users can now establish device terminal connections using Spark Gateway in 'Custom Flow Export' configuration.
6. Support Ticket Id : 6155449 : 'Geo Location Reports' for source, destination, and conversation reports for the interfaces.
7. Support Ticket Id : 6039827 : 'Export to XML' option is now available for 'Show ports' drill down reports.
8. Support Ticket ID : 6135502 : More than 1000 records can be configured in schedule reports now.
9. Support Ticket ID : 6143610 : Device ‘Added-time’ is shown under 'Device Summary' reports.

Issue Fixes:

1. Enabling 'Resolve DNS' was ON in Forensic Report while displaying 'All Conversations'. 
2. The pagination issue in the number of rows displayed per page in the Inventory is fixed now.
3. The issue in displaying report profile data for the application tab has been fixed.
4. The 'Disabled Collector' selection combo was not enabled when users leave the snapshot page. This issue has been fixed.
5. Protocol Distribution report - More granular information has been added to the report page and exported PDF documents.
6. Protocol Distribution report - Custom time selection changes were not reflected on updating the second time. This issue is now fixed.
7. Protocol Distribution report - Selected custom time was not validated in UI. This issue is now fixed.

12.5.213(Build 125213) - September 14, 2020

Issue Fixes:

1. General: Previously, there was a thread lock issue that sometimes caused the product to not function as intended. This issue has now been fixed.

12.5.212(Build 125212) - September 9, 2020

Enhancement:

1. jQUERY has been migrated to version 3.5.1 to avoid vulnerabilities.

12.5.200(Build 125200) - August 28, 2020

Features & Enhancements:

1. Failover : With the Failover Add-on, users will now be able to configure a secondary server in NFA with a Virtual IP Address. This helps you achieve 24x7 monitoring of your standalone and distributed networks.
2. Support Ticket : 6061425 : Billing report can now be generated for 75th , 80th , 85th , 90th data points in addition to 95th percentile.
3. Support Ticket : 6205506 - SDWAN device is now supported. - DSCP/TOS data can now be exported as different fields.
4. IP Network based grouping under "Device Groups”.
5. Zoho Maps has been upgraded to latest version for a more granular view.
6. Support Ticket : 5632738 : NFA Enterprise Edition: Live communication status of Central and Collector server details will be displayed in the WebUI now.
7. NFA Enterprise Edition: Listener port(s) can be configured for internal collector now.

Issue Fixes:

1. Support Ticket : 6094965 : Billing reports were not in sorted order. This issue is fixed now.
2. Support Ticket : 6095066 : Alert messages were not displayed in Billing Reports when they were edit. This issue is fixed now.
3. Support Ticket : 5867675 : Users were unable to delete devices from Maps. This issue is fixed.
4. Support Ticket : 6198818 : Issues faced while exporting Inventory report as a PDF file in Japanese has been fixed now.
5. Support Ticket : 6198362 : Issues faced while exporting  Report profiles as CSV files in Japanese is fixed now.
6. Support Ticket : 6159845 : NO data was displayed for interface group when the time period was set > 3 days. This has been fixed.
7. Support Ticket : 6119830, 6197625 : Between Sites classified IPAddresses other than the configured ones. This issue has been fixed.
8. Support Ticket : 6143593, 6183076 : ZERO values were included in Traffic graphs when there is no data for a given time period. This issue has been fixed.
9. Support Ticket : 5899731,6198558 , 6184671 : The issue where more than 90% of data was displayed as Others in Interface snapshot report is been fixed now.
10. Support Ticket : 33343 : Wrong Octets were displayed in the Search report. This issue has been fixed.
11. Support Ticket : 33347 : Removed the AS(-1) from Forensics AS View Report.
12. Support Ticket : 30316 : Removed the PING dashboard from CCTV listing.
13. SNMP PDU timeout issue is fixed now.

12.5.180(Build 125180) - July 24, 2020

Issue Fixes:

1. General: Previously, there was a login issue in the mobile app when Passthrough was configured in OpManager. This has now been fixed.

12.5.179(Build 125179) - July 22, 2020

Features & Enhancements:

1. ManageEngine OpUtils integrates with NetFlow Analyzer. It can now be enabled as an add-on to help network/system administrators manage,
   
   • IPAM (IP Address Management)
   • SPM (Switch Port Management)
2. The following enhancements have been made for AS(Autonomous Systems) monitoring,
   
   • A new inventory snapshot for AS
   • AS widget added to dashboard
   • AS Grouping has been introduced
   • Settings page to add/modify/delete AS Group under 'Settings' tab.
   • AS Group based data has been made available for Interface, Interface Group, Device snapshots.
   • Added a new 'AS View Report' under Inventory report
   • SRC AS, DST AS can now be selected as criteria for Forensics report and search report.
3. In the NFA Enterprise Edition, rebranding option specific to Collector and Collector-specific views have now been made available .
4. Bulk SNMP progress status messages have been added for better user experience.
5. 'Review Us' option has been added in the ‘Support' page. Users can now review us directly from the UI and claim a gift card.
6. Support Ticket : 6006387 : 95th percentile calculation using only non-zero values has been enabled in the Billing report.
7. Support Ticket : 6039238 : Latency information will now be included in the Forensics report.
8. Support Ticket : 5995751 : Source and Destination network options are now available in the Forensic reports.

Issue Fixes:

1. SNMP v3 session issue has been fixed.
2. 'Skip Now' was not accessible to NFA Enterprise Edition Operator and Guest users. This has now been fixed.
3. The issue in displaying 'Device summary widget' in the 'Embed widget" view has been fixed.
4. Inventory breakage issue that occurred while redirecting from short summary to Settings and back, has now been fixed.
5. The issue where the Settings tab list was not updated for Collector-specific view when redirected from Inventory (All Collector view) to Settings (Collector Specific view), has been fixed.
6. The issue where users were not being redirected to the selected collector on drilling-down to Settings (Collector Specific view) from Inventory (All Collector view), has been fixed now.
7. Console error in IP Groups snapshot has been fixed now.
8. The issue where selected dashboards had incomplete active classes has been fixed.
9. The extra green line appearing when Mappings and Groups tabs are selected has been fixed.
10. Previously users were able to create application groups and DSCP groups in Collector-specific view from the inventory. This has now been fixed to ensure application and DSCP groups can now be created only from the All Collectors view in the Enterprise Edition.
11. Support Ticket : 6003204 - While updating the sampling rate for single interfaces, wrong sampling rate values were being displayed for all interfaces of the device. This has been fixed.
12. Support Ticket : 6033649 - The error in sorting based on Interface name in 'Compare report' is fixed now.
13. Support Ticket : 6059975 - Data difference in table and chart views of Billing reports has now been fixed.

12.5.160(Build 125160) - June 19, 2020

Features and Enhancements:

1. Aggregated alert profile feature has been introduced for interfaces, interface groups, ipgroups, access points, access point groups and SSID groups.
2. Support Ticket ID: 6064841: Introduced the option to export Inventory list as CSV and Excel files.
3. ManageEngine Applications Manager integrates with NetFlow Analyzer to monitor bandwidth for,
   • Servers
   • Applications
   • Services
4. Client enhancements include,
   • Grid custom pager changed to JQGrid grid pager format with options to export as CSV and XLS files.
   • Custom pager added for most of the reports in Interfaces and WLC Forensic reports.

Issues Fixed:

1. Support Ticket ID: 6082615 : SNMP thread lock issue in NFA due to bulk set SNMP operation is fixed now.
2. Support Ticket ID: 6097274, 6091956 : Issues in SNMP speed update for 64bit routers has now been fixed.
3. Support Ticket ID: 5844571, 5884426 : Alarm popups were being displayed to users of all scopes. This issue has now been fixed to notify users only for devices associated with them based on scope.
4. Support Ticket ID: 6057092 : Schedule report listing issue that occurred when Compare reports are scheduled with special characters in the report name has been fixed. 
5. Support Ticket ID: 5867675 : Issues faced while deleting devices from Maps have been fixed now.
6. Support Ticket ID: 6021783 : Issues faced while exporting Inventory reports as XLS files have been fixed.
7. Support Ticket ID: 6059975 : Time format mismatch between Billing graphs in the UI and eported PDF files have been fixed.
8. Support Ticket ID: 6021783 : Issues faced while exporting Inventory reports as XLS file have been fixed.
9. Support Ticket ID: 6048328 : Unused JBoss files have been removed.
10. The issue where users were unable to edit WLC Controller name has been fixed.
11. Users were unable to deselect the selected SSIDs in SSID groups. This has been fixed.
12. Selected groups were getting emptied on report generation. This issue has been fixed.
13. The issue due to which ART applications drill down loaded a blank report has been fixed.
14. Storage issues that occurred in Schedule reports with special characters in their name has been fixed.
15. Authentication and communication between 'Central' and 'Collector' server in Enterprise edition is tightened for more security.

12.5.149(Build 125149) - July 21, 2020

Issues Fixed:

1. OpManager: An issue while viewing the short summary page of an alarm in the external monitor is fixed.
2. OpManager: Unable to redirect to Device Snapshot Page from the Short Summary page of an alarm. This issue has been fixed.

12.5.141(Build 125141) - May 21, 2020

Enhancements:

1. Support ticket ID : 5997081 - Flow processing error alarm messages have been enhanced for better user understanding.

Issues Fixed:

1. Support ticket ID : 5934127 - Incorrect granularity was obtained when the time period was selected as 'Yesterday'. This issue has been fixed now.
2. Support ticket ID : 5899731 - The issue with displaying AS data has now been fixed.
3. Support ticket ID : 5998043 - Issue where wrong y-axis data was displayed for devices with multiple interfaces and a large difference in traffic, has been fixed now.
4. Support ticket ID : 6006381 - Enabled row counts 50 and 100 in Consolidated report.

12.5.129(Build 125129) - July 6, 2020

1. General: After upgrading the product, there was an "Unable to start the product" error. This issue has now been fixed.
2. General: Previously, the backup functionality was not working for non-English installations. This issue has now been fixed.

12.5.125(Build 125125) - April 29, 2020

Vulnerability Fix:

1. General : Path Traversal vulnerability in URLs starting with <cachestart> has now been fixed. (Refer CVE-2020-12116)

12.5.122(Build 125122) - April 21, 2020

Bug Fixes:

1. Support ticket ID: 5848281 - In Forensics report, pagination has been introduced to list all source and destination IPs.
2. APMac IN/OUT , ClientMAC IN/OUT, Client IP IN/OUT widgets have been added in scheduled Consolidated report.
3. Support ticket ID: 5728200, 5865520 - IPFIX flow processing issues where multiple templates were sent in a single packet have now been fixed.
4. Support ticket ID: 5851174 - Business hours and timezone can now be modified in Alert Profile edit view.
5. Support ticket ID: 5927359 - In Schedule Report, the utilization range in graph showed 0-100% though the utilization was more than 100%, . This issue has been fixed.
6. Support ticket ID: 5838218 - sFlow processing issue that occurred when the sequence ID is not in order has been fixed.
7. Support ticket ID: 5872844 - In some instances, IPFIX flow from VeloCloud device was not processed. This issue has been fixed now.
8. Support ticket ID: 5911728 - The exact threshold violation value can now be viewed in the alarm message raised from alert profile.
9. Support ticket ID: 5746410, 5721866, 5940176 - In Export Flow page, there was an issue in the ping option when software was installed in Windows PC (traditional Chinese). This has been resolved now.
10. For Operator and Guest users, the alarms raised by associated Access Points or SSID groups were not listed in the Alarms list page. This issue has been fixed.

Enhancements:

1. Support ticket ID: 5826617 - Exclude criteria option has been introduced in Search report.
2. Support ticket ID: 5594417 - Exclude weekend and Business hour options can now be enabled in compare report and consolidated report.
3. Support ticket ID: 5825185 - Enabled CSV export for Schedule Consolidated report.

12.5.120(Build 125120) - April 16, 2020

Vulnerability Fix:

1. General: Unauthenticated access to API key disclosure from a servlet call - @kuncho, an independent Security Researcher, has reported this vulnerability to SSD Secure Disclosure program. The issue has been fixed. (Refer CVE-2020-11946)

12.5.115(Build 125115) - March 31, 2020

Enhancements:

1. Introduced Autonomous System field widget in interface snapshot view.

Issues Fixed:

1. Support Ticket ID: 5695599, 5928043 - PDF export failure in Enterprise Edition with upgraded central server and new collector server has been fixed.

12.5.109(Build 125109) - March 5, 2020

Device/Flow format support:

1. NetFlow Analyzer now supports Layer 7 for Palo Alto devices.

Features:

1. In DNS settings, Custom DNS server option has been introduced.

Enhancements:

1. Schedule reports page has been revamped for better user experience.
2. Support Ticket ID: 2358639, 5652049 - Users can now customize settings like Resolve DNS, Traffic graph, QoS options, ZIP (or) PDF/CSV format to export files for specific schedules.
3. Support Ticket ID: 475787 - In Schedule Reports, the mail subject and message can now be customized.
4. General UI issues have been fixed for a smoother user experience.
5. In Inventory, Filter icon has been introduced to show/hide the left side Inventory filters for devices and interfaces tabs.
6. Information on utilization and speed has been added in the global search for interfaces and IP groups.
7. In Inventory, WLC and DPI tabs, graph icon has been introduced to view the short summary. Hence, users can now easily access the Snapshot page in a single click.
8. The tooltip has been modified in all the time-series graph to enhance user experience.
9. Support Ticket ID: 5672483 - In Inventory, the grid record will be maintained the same even while switching the tabs.
10. Support Ticket ID: 5672483 - Search criteria values will be maintained the same for all tabs until it's cleared by the user.
11. Support Ticket ID: 5672483 - While adding device, application, DSCP and SSID groups, users can now have an expanded view of the available list which provides better usability.
12. In the Interface tab of Inventory, received time of the last flow is now displayed in the status tooltip for each interface.
13. In WLC, received time of the last flow and the status icon of access points have now been introduced.
14. Layer 4 and Layer 7 application reports have been included in Inventory report.
15. Total IN and OUT traffic values can now be viewed in Search report.

Bug fixes:

1. The overlapping of data in Japanese language which was persistent in Schedule Report and Alert Profile PDF has now been fixed.
2. Support Ticket ID: 5375916 - The issue with maintaining margin uniformity in the first and second page of Schedule Reports has been fixed.
3. Support Ticket ID: 5572538, 5566463 - While scheduling Reports, enabling Exclude Weekends and Business Hour options was not functioning properly for WLC consolidated, compare report for multiple devices and compare report for a single device. This issue has been resolved now.
4. Support Ticket ID: 5804812 - There was an issue with data sorting in traffic snapshots. It has been resolved now.
5. Support Ticket ID: 5592817 - When reports with charts were generated, there were some page alignment issues. This has been fixed now.
6. Support Ticket ID: 5789707 - Issue with SNMP timeout and retries has been fixed.

12.5.108(Build 125108) - March 4, 2020

Vulnerability fixes:

1. General : The obsolete code causing Remote Code Execution vulnerability in Mail Server Settings v1 APIs have been removed.

12.5.000(Build 125000) - February 19, 2020

Vulnerability fix:

1. General : PostgreSQL has now been migrated to version 10.10.
2. General : The PostgreSQL vulnerability issues from version 9.2.4 have now been fixed.

12.4.196(Build 124196) - April 29, 2020

Vulnerability Fix:

1. General : Path Traversal vulnerability in URLs starting with <cachestart> has now been fixed. (Refer CVE-2020-12116)

12.4.188(Build 124188) - April 20, 2020

Vulnerability fix:

1. General: Unauthenticated access to API key disclosure from a servlet call - @kuncho, an independent Security Researcher, has reported this vulnerability to SSD Secure Disclosure program. The issue has been fixed. (Refer CVE-2020-11946)

12.4.181(Build 124181) - January 28, 2020

Vulnerability fix:

1. OpManager : Previously, the users were able to read the Arbitrary file. This file read vulnerability has now been fixed.

12.4.180(Build 124180) - January 24, 2020

Enhancements:

1. The Alert Profile report exported via mail now includes the top IN and OUT conversations.
2. Devices can now be added using SNMP for NBAR and CBQoS monitoring.
3. Introduced option to acknowledge, ignore and clear alarm.

Bug fixes:

1. In Internet explorer, the application tab in interface snapshot view had loading issues.This has been fixed.
2. Previously, the Alert Profile remained uneditable when the threshold is entered in decimal value. This issue has been fixed now.
3. Support Ticket ID : 5707380 - Invalid IP address (0.0.0.0) was included in Between Sites IP group. This issue has been resolved now.
4. Free Enterprise Edition's license upgrade issue has been fixed.

12.4.172 (Build 124172) - March 11, 2020

Vulnerability fix:

1. General: The obsolete code causing Remote Code Execution (RCE) vulnerability in Mail Server Settings v1 APIs have been removed. (Reported by Jason Nordenstam. Refer CVE-2020-10541)

12.4.168(Build 124168) - December 31, 2019

Bug fixes:

1. Previously, auto-login was not working when the special character '&' was present in the username or password. This issue has now been fixed.
2. The JCE compatibility issue that occurred during PPM migration has now been fixed.
3. The issue in device configuration which led to performance issues while adding interfaces in lakhs has been fixed now.
4. In Inventory updater, SNMP scan failed when interface with index -1 was selected. This issue has now been fixed.
5. Support Ticket ID : 5712951 - Issue in fetching WLC Access Points name via SNMP has been resolved.

Vulnerability fixes:

1. XML injection vulnerability in IPGroup bulk load has been fixed now.

Enhancements:

1. Alarms page has been completely revamped for better user experience.
2. Under Mail Server Settings, the length of the 'User Name' field has now been increased from 50 to 100 characters.
3. Under User Management, the maximum length of the 'Password' field has now been increased from 25 to 100 characters.
4. First communication/registration between the central server and collector will now be authenticated while adding the collector.
5. Support Ticket ID : 5664509 - NBAR2 Criteria has been introduced in Forensics and Search reports.
6. Support Ticket ID : 5674050 - SNMP details are now fetched for unmanaged interfaces as well.
7. Support Ticket ID : 5680798 - Alert Profile has been enhanced for better performance.
8. NetFlow Analyzer Support page usability has been enhanced with more details.

Features:

1. Support Ticket ID : 5590650 - NetFlow Analyzer now offers support for Aruba 7205 series devices.
2. Forecast report has been introduced for interfaces, IP groups, interface groups, access points, access point groups, SSID groups.

12.4.099(Build 124099) - October 30, 2019

Bug fix:

1. Support Ticket ID : 5647817 - Flow collection issue while processing unsupported versions of flows has been fixed.

Vulnerability fix:

1. Weaker file permission for Nipper file has been fixed. (Reported by: Guy Levin (va_start). Refer CVE-2019-17421)

12.4.096(Build 124096) - October 16, 2019

Enhancements:

1. Introduced Inventory reports with the option to demarcate In/Out data based on traffic type.
2. Support Ticket ID : 5454602 - Search reports will now display interface details for Interfaces and Interface groups.
3. XML export option has been introduced for IP Group and Application mapping.
4. Access Point status can now be fetched via SNMP.
5. Introduced new setting page to edit Autonomous System details.
6. Layer 7 NBAR Application data is now generated based on aggregated data.

Bug Fixes:

1. MIB Browser APIs have been enabled for NetFlow.
2. Support Ticket ID : 5259557 - Traffic growth percentage has been removed from Dashboard overview band.
3. Support Ticket ID : 5075220 - Upgrade failure issue is now fixed.
4. Support Ticket ID : 5375916 - The PDF alignment issue in Schedule reports has been fixed.
5. Support Ticket ID : 5566463, 5572538 - Business hour and Exclude weekends filters have been added for the following Schedule reports :
   i. WLC Consolidated report
   ii. Compare report multi device
   iii. Compare report single device
6. Support Ticket ID :5597769 - Device and speed details are now added in the CSV file of capacity planning schedule report.

12.4.084(Build 124084) - September 16, 2019

Features:

1. DPI now supports UDP Protocol.

Enhancements:

1. The following enhancements have been made in WLC Device and Routers/Switch in the forensics report.
   • Displaying timestamp for all conversations.
   • Detailed conversation report with timestamp for every grouped conversation.
2. Option to view individual graphs has been introduced for Application, Source , Destination, DSCP, Next Hop in Forensics report.
3. Option to view individual graphs has been introduced for Access points.
4. Users can now configure no flows and link down time intervals from the GUI.
5. Protocol Distribution Report has been revamped.
6. Support Ticket ID : 5434910 - Introduced the option to view IN/Out data for AS View Conversation.
7. Export Flow page has been enhanced with a new CLI based "Custom Export Flow" option and other device specific configuration options.
8. Data rate units in speed configuration pages is now available in readable format.

Bug Fixes:

1. Support Ticket ID 5438556 - sFlow traffic double count issue in Cisco Nexus93180YC-EX - 7.0(3)I7(1) device has been fixed.
2. Earlier, the Protocol distribution report did not generate data for time periods lesser than 6 hours. This has now been fixed.
3. WLC Search Report Pagination issue in MSSQL has been fixed.
4. Search Filter in the Inventory is now case-insensitive.
5. The headers in Client IP and Client MAC schedule reports for AccessPoint Group and SSID Group were interchanged. This issue has now been fixed.
6. In some cases, the link down alert could not be enabled. This is fixed now.
7. Support Ticket ID 5463432 - Unique color code for IN and OUT data has been introduced.
8. Support Ticket ID 5528624 - BCP Error handling fix for Chinese version of MSSQL.
9. Support Ticket 5525960 - The NBAR based widgets under NBAR Tab in Interface Snapshot page have been grouped and renamed as NBAR (Flow) | NBAR (SNMP).

12.4.079(Build 124079) - November 28, 2019

Vulnerability Fix:

1. Weaker file permission for Nipper file has been fixed. (Reported by: Guy Levin (va_start). Refer CVE-2019-17421)

12.4.072(Build 124072)

Enhancements & Bug Fixes:

1. Forensics Report can now be generated for Next Hop IP Address based traffic details.
2. Introduced Exclude option for devices and WLC devices criteria in Forensics Report.
3. Introduced option to the following Schedule following reports
   i. NBAR2 Application
   ii. Http host
   iii. Qos Stats
   iv. ART
4. Forensics report can now be generated for Protocol,Source NAT, Destination NAT.
5. NFA SQL injection(internal) has been fixed.

12.4.068(Build 124068) - August 14, 2019

Bug Fixes:

1. Support ID - 5494343, 5495086 : API request parameter type and value-related issues have been fixed.

12.4.059(Build 124059) - August 1, 2019

Features, enhancements and bug fixes:

1. Support ID - 5285783 : NFA now supports AireOS 8.2 WLC flow format.
2. Support ID - 5389072 : NFA now supports option template for SSID information in WLC flow.
3. The usability of Inventory snapshot pages has been enhanced.
4. Option to view individual graphs has been provided under all WLC snapshots.
5. Capacity Planning Report has been added for Interface Groups.
6. A new trend-graph for QoS widget has been provided in the interface snapshot.
7. Geo-Location option has been added for Device snapshot widgets.
8. Graph granularity info has been included in the graph title for inventory snapshot widgets.
9. Actian Vector 5.1 DataBase Engine has been upgrade to its latest version.
10. Widget headers will be displayed as sub menu links when the tab has more than one widget.
11. Messaging framework notification has been enhanced for snapshot sub-tabs, IP group snapshot, Interface group snapshot and Meraki devices.
12. Users can now configure threshold-based alerts for access points and SSID groups.
13. Login banner message is now pushed from the Central Server to every individual Collectors in the distributed setup.
14. Support ID - 4775460 : Scheduled report now includes Interface group based Capacity planning report and Protocol distribution report.
15. Support ID - 5264766 , 5171076 : Second level drill-down option has been provided in the Snapshot tab view.
16. Support ID - 4583845 , 4527168 , 4980712 , 4432560 , 4764521 : Link Down and No-Flows alert time reduced to 5 mins from 15 mins.
17. Support-Id : 5375916 : Schedule - IPGroup Inventory (Overall) Report -> Traffic data will now be displayed with 2 decimal places instead of 3.
18. Support-Id : 5375916 : Schedule - IPGroup Inventory (Overall) Report - alignment issue has been fixed.
19. Support ID - 5326239 : Traffic data crunching in the Billing Report has been fixed.
20. The issue with DPI snapshots tab view had been fixed.
21. PDF logo mismatch has been fixed.
22. Earlier the Inventory back button was displayed in the in snapshot page header. This has been removed.
23. Individual graph will not be available for Meraki Snapshot conversation widget when DNS is resolved.
24. 'Show Application' option has been added for QoS widget in interface snapshot.
25. Earlier, alerts were not generated when 'ALL' option was selected for Interface/Interface Group unless the the product was restarted. This issue has been fixed now.
26. Earlier, there was an issue while creating alert profiles in the Distributed Edition when 'ALL' Sources option was selected. This has been fixed now.
27. The issue where sensitive data was printed as plain text in log files has been fixed now for more security.
28. The issue where sensitive data was printed as Community string in the log files has been fixed.
29. SQL injection Vulnerability has been fixed.

12.4.050(Build 124050) - July 8, 2019

Enhancements & Bug Fixes:

1. Inventory Reports have been added to Schedule Report. User can now generate and schedule Inventory Reports for Interface, Interface Group, IP Group, Access  Point, AccessPoint Group, SSID Group.
2. New flow export templates have been added to the Export Flow database.
3. SQL Injection vulnerability that occurred while listing TopSites & WAAS Application has been fixed now.
4. The possibility of injecting vulnerability, while deserialising untrusted data using ObjectInputStream has been fixed now.
5. Each API request's parameter type and value will now be verified before processing across product, to avoid any vulnerabilities.

12.4.043(Build 124043) - July 2, 2019

Enhancement:

1. You can now edit, re-arrange and hide the default tabs in the horizontal menu. New custom tabs can also be added, edited, rearranged and deleted from the horizontal menu.

12.4.038(Build 124038) - June 12, 2019

Features & Bug Fixes:

1. Option to upgrade to Enterprise Edition from StandAlone Server, on a single click, has been introduced.
2. IPAddresses will be resolved to DNS Names based on the 'Resolve DNS' setting for the Alert PDF report.
3. BCP will be checked during every startup in OPMPlus for the NetFlow module.
4. Help tips have been added in the NFA settings pages.
5. NFA related alignment and usability issues have been fixed.
6. Option to add SNMP credentials has been added in the Set SNMP page (device snapshot).
7. NFA Widget will now be hidden in OPM when NFA license is not available.
8. Unified colour support has been added to NFA Reports
9. All interfaces / interface groups / IPGroups have been listed under the Dashboard widgets.
10. Global page for configuring CBQoS for multiple devices has been provided under Settings.
11. Global page for configuring NBAR for multiple devices has been provided under Settings.

12.4.033(Build 124033) - July 22, 2019

Vulnerability Fix:

1. General: HTML Injection vulnerability issue in Google maps has now been fixed.(Refer CVE-2017-11560)

12.4.031(Build 124031) - June 4, 2019

Bug Fixes:

1. NCM module breakage in the NFA Enterprise edition has been fixed now.

12.4.029(Build 124029) - May 29, 2019

Vulnerability Fixes:

1. XSS vulnerability raised in APIs of NFA DashBoard, Reports and Settings Module has been fixed now.
2. SQL Injection vulnerability in Compare reports has been fixed now. (Refer CVE-2019-12196)
3. SQL Injection vulnerability while listing applications in the Application Mapping tab has been fixed now.

12.4.024(Build 124024) - May 16, 2019

Features & Bug Fixes:

1. General : Previously, when HTTPS was enabled in the WebClient, some unexpected loading issues were observed. This has now been resolved by upgrading the Tomcat version used in the product.
2. General : Scroll issue while listing custom dashboards has been fixed now.
3. General : Shift key support has been added for device associations.
4. General : The 'local privilege escalation' vulnerability has now been fixed.

12.4.016(Build 124016) - May 2, 2019

Features & Bug Fixes:

1. There was an issue in HighPerf Reporting Engine, where raw table split occurred frequently when more routers were added. This issue has been fixed.
2. The issue where Security Settings was not visible in the Central Server, has been fixed.
3. New flow export templates have been added to the Export Flow database.

12.4.014(Build 124014) - April 26, 2019

Features:

1. Total Volume consumption details have been added in Schedule Consolidated Report.

12.4.000(Build 124000) - April 9, 2019

Vulnerability Fixes :

1. JRE has been migrated to 1.8 and various vulnerabilities from JRE 1.7 have been eliminated. Highlights of JRE 1.8 migration:
   • General: Cipher algorithms AES-192 and AES-256 are supported in addition to AES-128 algorithm.
   • General: TLSv1.2 protocol is now supported by default.

12.3.327(Build 123327)

Features & Bug Fixes:

1. Custom time selection option has been added for multiple-device compare report.
2. Previously, FlowRate in forensics was calculated for Bytes/sec. It can now be calculated for bits/sec.
3. Geo Location has been updated with the latest details.
4. NetFlow database has been updated with the latest Application names.
5. Each API request's parameter type and value in the settings module will now be verified before processing, to avoid any vulnerabilities.
6. NFA now supports user defined data units.
7. Binary / Decimal notation for data units has been introduced.
8. 0.0.0.0 invalid IP address validation has been added to Applications Names creation.
9. The issue with scheduling Compare Reports for custom time period has now been fixed.
10. Dashboard graph issue has been fixed.
11. XSS vulnerability in the Attacks settings page has been fixed now.

12.3.324(Build 123324)

Bug Fixes:

1. Previously, negative sFlow graphs were generated when the sample pool was not in sequence, and when multiple devices had the same agent address. This has now been fixed.
2. The issue where NAT information was missing in forensics reports for ASA Flow has been fixed now.

12.3.323(Build 123323)

Features & Vulnerability Fixes:

1. XSS vulnerability in older version NFA 7.0 has been fixed now. (Refer CVE-2019-8925, CVE-2019-8926, CVE-2019-8927, CVE-2019-8928, CVE-2019-8929)
2. XSS vulnerability in input text boxes in the Reports and Settings page, have been fixed now. (Refer CVE-2019-7422, CVE-2019-7423, CVE-2019-7424, CVE-2019-7425, CVE-2019-7426, CVE-2019-7427)
3. General: In AD authentication, you can now configure scope to be auto-assigned to users logging-in for the first time, when auto-login is enabled.

12.3.312(Build 123312)

Features & Bug Fixes:

1. The option to log SDP/ SDP-MSP tickets has now been added for LinkDown alerts.
2. Previously, there was an issue with sflow negative graphs and no flows were generated when there were mismatches in the interface indexes. This has now been fixed.

12.3.308(Build 123308)

Bug Fixes & Features:

1. HighPerf installation error in the Japan language server has been fixed.
2. Users can now configure tax or additional fees in Billing.
3. Notification messages for product assistance have been included to help users. They can be enabled or disabled under general settings.

12.3.304(Build 123304)

Bug Fixes :

1. General: Previously, validation of session failed when the URL contained two or more consecutive backslashes. This vulnerability has been fixed now.

12.3.294(Build 123294)

Features :

1. Users can now generate search reports for Interface Groups & IP Groups.
2. Nexus 7k IOS Series flow parsing issue has been fixed.
3. NetFlow Analyzer now allows you to log SDP and SDP-MSP ticket for alerts.

12.3.288(Build 123288)

Features & Bug Fixes :

1. Introduced an option to view raw data storage information.
2. Introduced multiple combinations of IP address for "From" and "To" in Between Sites IP Grouping bulk load.
3. The bulk load feature in IP group and application mapping has been enhanced with options to download and upload sample .xml files.
4. This issue with wrong Maximum value displayed in the Compare Report Graph Table has been fixed.
5. The issue with schedule deletion, update and audit in Schedule Report has been fixed.

12.3.277(Build 123277)

Vulnerability Fixes :

1. The SQL injection vulnerability in 'getDeviceCompleteDetails' and 'getAssociatedCredentials' APIs have been fixed.

12.3.274(Build 123274)

Features & Bug Fixes :

1. Inventory updater feature that fetches device details on scheduled time, has been introduced.
2. WLC widgets now support SSID Group resource type.
3. Schedule reports have been added for Access Point Group and SSID Group.
4. Autonomous System details have been updated.
5. Added options to Create, Modify, and Delete SSID groups.
6. In the Inventory, Snapshot reports have been added for SSID groups.
7. SSID groups now support Capacity planning and Consolidated reports.
8. An option to assign SSID Groups for Operator, and Guest users has been provided.
9. The currency list for billing feature is updated.
10. Introduced an option to select multiple combinations of IP address for "From" and "To" in Between Sites IP Grouping.
11. Bulk load option to upload multiple unmapped applications is introduced in Application Mapping.
12. General : During API calls, there was an 'APIKey' exposure vulnerability. This issue has been fixed now.
13. General : There was an issue with the timezone displayed in the graph of an embedded NFA widget. This has now been fixed.
14. General : SMS notifications via the SMS gateway was not working properly when the proxy settings were configured. This issue has now been fixed.
15. General : Password length of Mail Server Settings and Proxy Server Settings have been increased.
16. General : Quicklinks and info messages have been added to help the user with 'How-To' and 'FAQ' in the Notification Profile, User Management, Mail Server Settings, Proxy Settings and Rebranding pages.
17. General : When a CCTV view was deleted from the CCTV list, the Dashboard kept loading for a long time. This issue has been fixed.
18. General : In CCTV view, the seconds timer sometimes displayed a negative value. This issue has been fixed.
19. General : In some cases, there was an out of memory (OOM) issue during product startup. This has now been fixed.
20. General : SQL injection vulnerabilities in unauthenticated servlets has been fixed.
21. General : Unauthenticated access to 'DataMigrationServlet' has been fixed. (Refer CVE-2018-19403)
22. General : The XSS vulnerability in alarm escalation has been fixed.

12.3.240(Build 123240)

Vulnerability Fixes :

1. The SQL injection vulnerability in 'getDeviceCompleteDetails' and 'getAssociatedCredentials' API's have been fixed.

12.3.239(Build 123239)

Bug Fixes :

1. General : There was an SQL injection vulnerability in the Alarms section. This issue has been fixed.
2. General : In Alarms, there was an XSS vulnerability in the Notes column. This issue has been fixed.

12.3.237(Build 123237)

Bug Fixes :

1. General : XSS vulnerability issue in domain controller has been fixed.

12.3.231(Build 123231)

Bug Fixes :

1. General : Apache's 'commons-beanutils' jar has been updated to version 1.9.3 due to 'Remote Code Execution' vulnerability in an older version. (Refer CVE-2018-19403)
2. General : Unauthenticated access to 'DataMigrationServlet' has been fixed. (Refer CVE-2018-19403)
3. General : The 'Browser Cookie theft' vulnerability has been fixed.

12.3.230(Build 123230)

Bug Fixes :

1. The issue with NBAR application data in Wireless Controllers has been fixed.
2. Missing I18N keys have been added for Chinese language.

12.3.223(Build 123223)

Bug Fixes :

1. In the Inventory Snapshot page, the pie chart had a legend status color mismatch. This issue has been fixed.
2. The XSS vulnerability issue in updateWidget API has now been fixed.

12.3.222(Build 123222)

Vulnerability Fixes :

1. SQL injection vulnerability in Mail Server settings has been fixed.

12.3.217(Build 123217)

Features :

1. Export Flow option has been added for NetFlow, and Flows can now be exported from the GUI.
2. How-To's and FAQ's have been added for Settings and Report pages.
3. An option has been added to view the Menu tab horizontally with mouseover links.
4. Added summary pages for Reports and Settings to list all menus in a single page.
5. WLC widgets now support Access Point and Access Point groups resource types.
6. The product web-client now supports Russian and Chinese(Taiwan) languages.
7. TCP / UDP port unblock rules for NetFlow packets / Syslogs packets have now been added in Windows Firewall.

12.3.206(Build 123206)

Bug Fixes :

1. The issue with adding Cisco devices via SNMP V3 credential has been fixed.
2. The issue while adding users in Japanese, or with special characters in IPGroup Name has been fixed.
3. Tooltip information added in the Settings page.
4. Search report with multiple criteria has been fixed.
5. The issue with severity level (Attention, Trouble, Critical) mismatch in email alerts has been fixed.

Features :

1. Default SNMP feature has been added.
2. Provision to 'Test & Associate' an SNMP credential with multiple devices has been added.
3. SNMP support for Huawei devices has been provided.
4. NetFlow now supports Fortigate's NBAR2.
5. Capacity planning and Consolidated reports have been added for access point groups.
6. An option to assign Access Point Groups for Operator, and Guest users has been provided.
7. In Interface snapshot, Auto Refresh has been added to Traffic widget.
8. Monitoring feature has been added for MS SQL transaction log. Alerts will be displayed when log size is full.
9. Monitoring feature has been added for MS SQL bulk load. Alerts will be displayed in case of BCP failure.
10. Monitoring feature has been added for Vectorwise . Alerts will be displayed in case of connection failure.

12.3.194(Build 123194)

Bug Fixes :

1. NetFlow Analyzer now extends customization options to the login page. You can now choose to show/hide the copyrights and also change the background to an image of your choice.

12.3.193(Build 123193)

Bug Fixes :

1. Added options to Create, Modify, Delete access point groups.
2. In Inventory, Snapshot reports have been added for access point groups.
3. Tooltip information added in the Settings page.
4. In the dashboard, Inventory list, Inventory snapshot, Heat maps and license pages, the Interface status color code mismatch has been fixed and the status names have been changed.
5. The 95th percentile line has been added to the Traffic graphs in the Snapshot page, Reports and exported PDF.
6. The issue with enabling polling for NBAR configuration, when the first interface is disabled, has been fixed.

12.3.183(Build 123183)

Bug Fixes :

1. New widgets for Top N Device by Speed (as table, line graph, pie chart), has been added.
2. The issue with Interface Traffic Graph in Custom Schedule Report has been fixed.
3. SQL injection vulnerabilities in java APIs has been fixed.
4. In End User tab, user data was vulnerable to XSS. This issue has been fixed.

12.3.179(Build 123179)

Features :

1. Previously, the upgradation to build 123159 and above caused network interruptions in Windows 7 & 2008 R2. The issue is fixed now.

12.3.169(Build 123169)

Features :

1. Data encryption has been provided for attachments in 'Schedule Report Mail'.

Vulnerability Fixes :

1. Under DNS Settings, the issue with Cross-site Scripting (XSS) on DNS Name has been fixed.
2. Cross site scripting(XSS) and arbitrary file read vulnerability in Fail Over has been fixed. (Refer https://nvd.nist.gov/vuln/detail/CVE-2018-12997CVE-2018-12997, https://nvd.nist.gov/vuln/detail/CVE-2018-12998CVE-2018-12998)

12.3.163(Build 123163)

Bug Fixes :

1. Option for IP group bulk-upload between sites is added.
2. NetFlow supports Resovle DNS option in Report profile.
3. NetFlow now provides detailed report for AS View.
4. The issue with data mismatch for devices in Inventory and Map module has been fixed.
5. The issue with the interface count mismatch has been fixed.

12.3.159(Build 123159)

Features :

1. NetFlow now supports remote PostgreSQL database.

12.3.156(Build 123156)

Features :

1. License Agreement has been updated.
2. Promotions related to ITOM Events will be displayed in the UI header after login.

12.3.151(Build 123151)

Bug Fixes:

1. In Group Chat Module, "Operator" user was not restricted from viewing the list of users, their User ID and Email addresses. This issue has been fixed.
2. EncryptPassword.bat has been removed due to DOS attack.
3. Path Traversal vulnerability in uploadMib API has been fixed (Reported by Pulse Security).

12.3.137(Build 123137)

Features :

1. Distributed Edition for the latest version has been released.
2. NetFlow Analyzer is now GDPR compliant with consent requests displayed across various modules in the UI.
3. Under Privacy settings, Personally Identifiable Information(PII) search and update options have been added. (PII Search helps identify the PII Details given by the user across various modules. The PII data can also be updated as anonymous to maintain privacy)
4. Audit logging has now been enabled to record all user activities.
5. A step by step guide on how to use NetFlow Analyzer has been added.
6. Resolve DNS handled for Conversation widget in Device snapshot.
7. The issue with the wrong granularity values being displayed in Device snapshot page has been fixed.
8. Search report and Global search report options have been combined together under Search Report.
9. IN and OUT traffic for Search report can now be seen in a single view.
10. Dashboards are now user-specific and allows users to create their own private dashboards. Apart from this, users with administrator privilege can associate dashboards that are created by them with select users.

12.3.129(Build 123129)

Bug Fixes :

1. Path Traversal vulnerability in upload Mib API has been fixed. 
2. The RemodeCodeExecution(RCE) vulnerability occurring while testing scripts has been fixed.
3. The SQL injection vulnerability in "FailOverHelperServlet" for the operation 'standbyprobestatus' has been fixed.
4. The SQL injection vulnerability in "FailOverHelperServlet" for the operation 'getprobenetworkshare' has been fixed.
5. In Group Chat Module, "Operator" user was not restricted from viewing the list of users, their User ID and Email addresses. This issue has been fixed.
6. Previously, "Operator" user was not restricted from viewing the URL monitors in the Inventory Page. This issue has been fixed.
7. Previously, "Operator" user was not restricted from being able to modify the background color and the tile color in the 3D floor view page. This issue has been fixed.

12.3.125(Build 123125)

Bug Fixes :

1. In Credential module, Stored Cross-site Scripting (XSS) vulnerability has been fixed. (Refer CVE-2018-10803).

Release Features

12.3.107 (Build 123107)

Bug Fixes :

1. 'Guest' user privilege has been added for NetFlow installation.
2. The issue with the wrong bandwidth value appearing in the "Overview" tab in Interface/Interface Group/IP Group snapshot when custom time period is selected has now been fixed.
3. Enhanced raw data dump to avoid increase in tmp/flow_log.txt file size.

12.3.083 (Build 123083)

Bug Fixes :

1. Dashboard loading has been revamped and optimized for better performance. 
2. In the Login page, Iphone/Android and Ipad application download links have been included.
3. License expiry information in header had a few alignment issues. This has now been fixed.
4. User Icon with product details and about information has been moved to right top corner.
5. In the Inventory page, product based tabs have been moved horizontally.
6. Sign out option has been moved from Quick links to User details menu.
7. Support icon has been added for (Mail, Apply license, phone number, SIF, User guide, Videos, Service pack, ThreadDump, DB Query & view Logs) links.
8. In support page, the Query page under DB Query will be opened in a new window without ember.

12.3.081 (Build 123081)

Bug Fixes :

1. The issue related to export to PDF and mail has now been fixed and enhanced.
2. Added an option to export to PDF and mail for Individual graph reports.
3. Added an option to export to PDF and mail for DPI snapshot widgets and widget drill down reports in the inventory.
4. Added an option to change the graph type for time series graphs in the inventory.
5. Inventory page related bugs have been fixed.
6. Added an option to select Business hours in the Last Quarter time period while scheduling reports
7. SFlow flow format for multiple MPLS can be added now.
8. Added an option to configure billing with base cost as zero.
9. The loading issue in the Dashboard with NBAR App widget has now been

12.3.070 (Build 123070)

Vulnerability Fixes :

1. SQL injection vulnerabilities in Servlet's API has been fixed.

12.3.62 (Build 123062)

Bug Fixes :

1. Now supports Meraki's latest firmware upgrade.
2. Removed product version number in the subject line of alert mail.
3. Added an option to select number of records as "30" for consolidated report.
4. Issue with showing the incorrect cost unit while editing billing profile has been fixed.
5. Added the value for MIN and MAX traffic in AS View.
6. Issue with generating CSV Report for WLC under Schedule Profile has been fixed.
7. Issue with deleting WLC device from inventory page has been fixed now.
8. Issue with listing interfaces in Qos drill down view has been fixed.
9. Removed the Free Version from the installation shield.
10. Issue with listing of interfaces in the Interface widget under Device snapshot has been fixed now and changed to a maximum of 10 interfaces.

12.3.57 (Build 123057)

Vulnerability Fixes :

1. DDI-VRT-2018-02 – Unauthenticated Blind SQL Injection via /servlets/RegisterAgent has been fixed.
2. DDI-VRT-2018-03 – Unauthenticated Blind SQL Injection via /servlets/StatusUpdateServlet and /servlets/AgentActionServlet has been fixed.
3. DDI-VRT-2018-04 – Multiple Unauthenticated Blind SQL Injections via /embedWidget has been fixed.
4. DDI-VRT-2018-05 – Unauthenticated XML External Entity Injection via /SNMPDiscoveryURL has been fixed.
5. DDI-VRT-2018-06 – Unauthenticated Blind SQL Injection via /unauthenticatedservlets/ELARequestHandler and /unauthenticatedservlets/NPMRequestHandler has been fixed.
6. DDI-VRT-2018-07 – User Enumeration via /servlets/ConfServlet has been fixed.

12.3.52 (Build 123052)

Bug Fixes :

1. The possibility to fetch user details through ConfServlet has been fixed and is secured now.
2. Schedule reports for report period as "Previous Week" shows data for current week. This issue has been fixed now.

12.3.47 (Build 123047)

Bug Fixes :

1. The framework for mail generation in NetFlow Analyzer has been revamped.
2. The issue with licensing in attacks has been fixed.
3. In Attacks module, time zone has been added in message for SMS alert.
4. Language translation issue in Attacks snapshot has been fixed now.

12.3.33 (Build 123033)

Bug Fixes :

1. Added SNMP support for Wireless LAN Controllers to fetch names of Access Points.
2. Client MAC based filter is added newly in Inventory and Snapshot under WLC.
3. Widget for Client MAC traffic is added in snapshot view of Client IP.
4. Overall Report for IP Groups is added in schedule reports.
5. Edit option in Alert profile has been fixed.
6. Unwanted vectorwise DB operation is removed to avoid loss of raw data.
7. Attacks information is now can be viewed for selected device and interface.
8. Issue in attacks search filter has been fixed.
9. Option to select Ethernet card name is available in DPI settings.
10. Promiscuous mode of ethernet cards has been enabled by default for DPI.

12.3.29 (Build 123029)

Bug Fixes :

1. Resource type and resource category are set by default to Top N Problems widget in dashboard.
2. Default name will get changed based on the category for Top N problem widget in dashboard.
3. The mismatch in Row Count for top source, destination, conversation, application ( L4,L7 ) has been fixed now.
4. Redirection issue in Dashboard from network based (Source network, Destination network) widget has been fixed.
5. A new column for DSCP has been added to top conversation widget in dashboard.
6. Added an option to redirect from meraki device in device summary widget.
7. Redirecting to particular snapshot with the configured timeframe is proper now and has been fixed.
8. Redirecting to snapshot from WLC widgets is proper now and has been fixed.
9. Enabling CBQoS policies for more than 2 interfaces has been fixed now.
10. Listing interfaces with the index -1 has been fixed now.
11. WAAS Total Volume graph plotting and time zone is proper now and has benn fixed.
12. TimeZone issue for Line graph has been fixed now.
13. Updating interface name when the speed is 0 is possible now.
14. Individual Graph feature across product is proper now and has been fixed.
15. Device traffic graph data in device Snapshot page showing incorrect value has been fixed now.
16. Error in displaying time across product when user and browser timezone differs has been fixed.
17. Drill down conversation in QoS shows only 50 records (pagination) has been fixed now.
18. "Invalid Device selected" displayed in Raw Data Settings while clicking on Save button has been fixed now.
19. Raw data was getting duplicated in the database. Now it has been fixed.

12.3.14 (Build 123014)

Bug Fixes :

1. The issue with export to CSV in inventory has been fixed and enhanced.
2. Added an option to export to CSV for NetFlow Group Configurations. This option is added under "Group Settings".

12.3.9 (Build 123009)

Bug Fixes :

1. The issue with IPv4 address based criteria in Alert Profiles has been fixed for V9/IPFIX/SFlow flow format.
2. The issue with Raw Data memory storage when toggle between raw ON and OFF for has been fixed for all databases i.e HighPerf, PGSQL and MS SQL.
3. Interface group name was missing in the PDF generated through Schedule Reports. Now, this has been fixed.
4. Application drill down & conversation reports from Inventory>>Interface has now mapped required Sr and Dst port for application mapping when data fetched from raw data. This issue with port and application mapping has been fixed.
5. Now there is an option to send an SMS alert to multiple mobile numbers from "Alert Profiles" tab in Settings.

12.3.2 (Build 123002)

Bug Fixes :

1. Router display name was not updated while fetching from Router via SNMP has been fixed.
2. Search Filter not working in NetFlow inventory has been fixed.

12.3.0 (Build 123000)

Features :

1. Deep Packet Inspection add-on captures and analyzes packets to monitor network and application response times for all critical applications and URLs accessed.
2. Support for Cisco Meraki Firewall to monitor real-time network traffic and provide bandwidth usage reports by applications, APs, users and protocols.
3. Out-of-the-box support for sFlow monitoring on Huawei routers.

Build No 126000 - June 14, 2022

12.2.1 (Build 12201)

Bug Fixes:

1. The possibility to fetch user details through ConfServlet has been fixed and is secured now.

12.2.0 (Build 12200)

Features:

1. Improved user interface to make navigation easier and faster.
2. Added "Report profiles" for NetFlow reports to add bulk filters and manage the most important reports at once location.
3. Option to export to PDF for reports is available for more reports.
4. Auto-refresh for zoomed traffic graphs gives all the graphs respective to selective time interval.
5. Improved SNMP v3 support is provided.
6. New tree view for CBQoS policies gives policy hierarchy in tree structure for better classification.
7. Option to export PDF is also available from device snapshot page for faster reporting.
8. Telnet/SSH access to devices is now made available from web UI itself.
9. Complete support for Wireless LAN controller is provided.
10. Cisco IP SLA monitors is improved in this version.
11. Night mode CCTV view brings low contrast screens to monitor critical items that needs constant monitoring.
12. One click schedule option is available from snapshot page.
13. One click flow export makes exporting flows simpler.
14. SSID based reporting is made available for WLC monitoring.
15. Added AD integration for user management.

12.0.0 (Build 12000)

Features:

1. New easy-to-use web client: 12 has made navigation between tabs even more easier with greater visibility and control over network data and thus, makes it more reliable and user friendly.
2. Tight integration with network management solution: This enhancement has brought bigger benefits by managing your entire network infrastructure with single exe for all the available softwares by availing very tight integration with ManageEngine OpManager.
3. Wireless LAN Controller monitoring: This feature is now available as add-on to take control of your wireless APs and LANs for better management of enterprise bandwidth.
4. End User Bandwidth monitoring: Introducing this feature as BETA to monitor end-users bandwidth usage which has enhanced the way of troubleshooting excessive bandwidth usage better.
5. Collaboration tool added: Group chat is now available at free of cost to interact within teams to resolve/assign the issues in more simplified way. Alerts can be discussed with the help of this tool.
6. Newly added settings for Network Mapping: Now you can create visual view of network maps with the help of this setting and add network devices and priority links to get live status of your network links.

11.0.0 (Build 11001)

Features:

1. sFlow Parsing for IPV6 Flow Export : IPV6 Flow Export is supported now for sFlow for both NetFlow and ASAM addon.

Bug Fixes:

1. Out Interface Value issue fixed for sFlow
2. ASAM Land Attack for IPV6 Flows issue fixed

11.0.0 (Build 11000)

Features

1. Application-level traffic shaping capabilities: NetFlow Analyzer can now reconfigure its QoS policies with traffic shaping techniques, to ensure critical business apps are served on priority. It allows to shape traffic via ACL or class-based policies(Service Policy) to gain control over the applications consuming unwanted bandwidth. Shaping bandwidth is also done at interface and router level.
2. ACL configuration for CISCO IOS device: Access control list can be viewed at device, interface and Layer 4 apps page to filter IP packets based on source & destination address rule. If there is a match in one of the access list statements, the ACL either permits/deny the traffic.
3. CBQoS configuration for CISCO IOS device: This feature allows to create new class with "match statement" and "match criteria" and apply policy to the created class from the web GUI itself. It also allows to delete or modify the existing policy. Service Policy can be viewed from Devices, Interface, Layer4 apps & Layer7 apps and QoS page along with Preview option.
4. One click flow export: "Add devices" facility from the NetFlow Analyzer, lets users to discover routers and switches and configure them to export flows from the web console itself— in just a single click. This reduces the energy to export it manually from devices and saves time.
5. Alert profile configuration for attacks: Now it is possible to create email and SMS notifications for DoS attacks. Add alert configuration from settings and generate alerts which satisfy defined criteria, thus notifying users about attacks in real time.
6. QoS level configuration: DSCP value can be configured to classify the traffic and shape it to ensure high priority for business critical apps.

10.2.5 (Build 10250)

Features

1. Heat Maps: Heat maps in NetFlow Analyzer helps to visualize the health status of all the interfaces in a single page. It uses color codes to depict the severity of the monitored devices.
2. QoS graphs: QoS graphs displays the real-time information of interface traffic in graphical format. This helps to get a better view of your interfaces and applications performance.
3. API Client Enhancements:
   • Add & Edit options included in IP Groups, Interface Groups & Alert Profiles.
   • Add option included in DSCP & App Groups.
   • Option to Add, Edit & Delete User Management.
   • New segment named "Attacks" added inside Settings. It comprises of three settings,
     • ASAM Setting:- Start/ Stop the flow processing for Advanced Security Analytics Module.
     • Manage Config:- Enable/ disable the Problems, Resources and Algorithms involved in ASAM.
     • Threshold Setting:- Basic and advance settings to update the threshold values in ASAM.

Note: All the above mentioned features are available in Essential and Large Enterprise Editions. For Distributed Edition, this release is just includes the scalability enhancements that got released in 10.2.

10.2 (Build 10201)

Features

1. Manual raw data collection option for a Router
2. Option to clean up aggregated data
3. Exclude weekends for alert profile
4. Performance enhancement and bug fixes
5. API support

10.2 (Build 10200)

Features

1. 100K flows/second(with raw data storage) - Scalability increase
2. New high-performance Fluidic UI powered by Ember js

NetFlow Analyzer 9.9.0 (Build 9900)

Features

1. Cisco AVC monitoring reports
2. NBAR2 support through AVC reports

NetFlow Analyzer 9.8.7 (Build 9870)

Features

1. 'All Collectors' option on Central Server
2. Across top stats ft. showing stats from across all the collectors in the Central Server dashboard
3. Interfaces & Interface groups across collectors can be added as a dashboard widget
4. 'Across Top Stats' - 18 new parameters have been added
5. Viewing all devices in the Central Server in one single view along with the drill down options
6. Create device groups from across collectors
7. Consolidated utilization based reports for IP groups

NetFlow Analyzer 9.8.6 (Build 9862)

Features

1. Flow rate graph - View in the UI

NetFlow Analyzer 9.8.6 (Build 9860)

Features

1. Service Pack Release
2. IPv6 support is extended to more reports

NetFlow Analyzer 9.8.5 (Build 9850)

Features

1. Localization of reports based on time-zone
2. New themes

NetFlow Analyzer 9.8 (Build 9800)

Features

1. Introduction of HighPerf Reporting Engine
2. NetFlow Configurator
3. Support for IP SLA SNMP v3
4. IPv6 support is extended to Historical data(aggregated data) reports, Application mapping, Top sites mapping, Schedule reports and Report profiles

NetFlow Analyzer 9.7 (Build 9700)

Features

1. Support for IP SLA Video Operations
2. Google maps visualization v3
3. Interface groups support in Billing module

Bug Fixes

1. Mail Authentication issues have been fixed
2. Issues with incorrect speed graphs in the Dashboard have been fixed
3. Cisco recommended QoS base line - PDF broken link has been fixed
4. Service start-up issues in Windows 2008 have been fixed
5. URL Related Security bug fixes

NetFlow Analyzer 9.6 (Build 9600)

Features

1. Source Network and Destination Network based Anamoly detection in ASAM module
2. Option to ignore events for all resources in ASAM module
3. IPv6 support in ASAM
4. Facility to shut down ASAM module from admin settings page
5. Support for Multicast Reporting
6. Alert clone copy
7. IPGroup clone copy
8. AS Report with Src/Dst port

Bug Fixes:

1. Issues in Ams Expiry message has been message
2. Issues in Auto login has been fixed
3. index page sorting has been fixed
4. MySQLl IPv6 issue has been fixed
5. MS SQl and empty page issue in WAAS has been fixed
6. Application mapping duplication has been fixed
7. Individual graph fix in non-English environment

NetFlow Analyzer 9.5 (Build 9500)

Features:

1. User interface has been re-vamped to suit Customer needs
2. Support for Cisco's Medianet and Mediatrace technology
3. Support for App-flow
4. Create and Monitor IP groups using WAN RTT Monitor
5. Edit Threshold Settings in WAN RTT monitor
6. Generate on-demand bills in capacity planning reports.
7. Option to schedule Capacity Planning reports and Medianet reports
8. Customizable e-mail subject
9. Performance tuning of product through user interface
10. Option to Add, Modify, and Delete Top sites
11. AS Number added in AS Report
12. Option to Exclude week-end and Business Hour in capacity planing PDF and CSV
13. Export reports in CSV format for Device and interface based Consolidated Report.
14. Option to load DNS Names from CSV file
15. View Top 20 interfaces in consolidated report view per page
16. Option to Export reports in CSV format for IP Group consolidated report
17. View IPSLA Collector name in GUI
18. Global Search - Report Based sorting.
19. New application names has been added

NetFlow Analyzer 9.1 (Build 9100)

Features:

The new features of Advanced Security Analytics Module are listed below:

1. Anomaly detection based on Source IP and Destination IP
2. Heuristics based event classification that includes Denial of Service Attack,Host Scan, Port Scan, Diagonal Scan and Grid Scan
3. Enrichment of events with location details(Geographical and Topological) for Offender IPs and Target IPs
4. Customized user interface for white listing problem specific Flows and Events(Ignore Events and Discard Flows)
5. Customized User Interface that includes
   -- Enable/Disable specific Problem
   -- Enable/Disable specific Algorithm
   -- Enable/Disable Resources
6. Algorithm Settings
   -- Customized Algorithm specific Threshold configuration
   -- Algorithm specific Offender/Target Field configuration
7. Location(EventList report)
   -- Customized Topological configuration for Offender IPs and Target IPs
   -- Offender/Target Location Mode settings
8. Security Posture dashboard - Problems & Time Lines
   - Listing all the Problems with the Events(with Pie Chart) and
   Resources(with Bar chart) for each Class
   - Multi-line graph of Time showing occurences of Events, Resources and Problems
9. Offenders & Targets dashboard - Resources & Time Lines
   - Lists all the Resources along with the Events(Pie-Chart) and problems (with Bar chart) for each Algorithm Type
   - Multi-line graph of Time showing occurences of Events, Resources and Problems
10. Problem Analysis dashboard
    - Lists all Resources along with the Events(with pie chart) for the specific Problem
    - Multi-line graph of Time showing occurences of Events and Resources
11. Resource Analysis dashboard
    - Lists all problems along with the events(with pie chart) for the specific Resource
    - Multi-line graph of Time showing occurences of Events and Problems

Bug Fixes:

1. Enhancements in WAAS Reporting to support all CM versions
2. Issue related to parsing IPSLA Monitor OID has been fixed
3. Handled Request time out error in QoS polling
4. CBQoS temp table split fixed
5. Handled AS Number field in a different position and not in usual position of V9 Flow
6. Report profile - report display issue on non-english environment
7. Bill plan config script error in French language
8. License management script error in Spanish language fixed

NetFlow Analyzer 9.0 (Build 9000)

Features:

1. Wide Area Application Services (WAAS)
2. Support IPV6 Address Format
3. Wan RTT
4. Enhanced Capacity Planning Report
5. Creating Alert Profile with IP Address as Criteria
6. Report Filter Enhancements
7. Option to map IP addresses to site names
8. Scheduling Options for Compare Reports and Report Profiles
9. Support for Radius server Authentication in MSSQL
10. Enhancements to Consolidated Reports
11. Network Snapshot Improved with Widget for Top N Alerts
12. String Search Option for IP groups
13. Custom Selection Option in Device Reports

Bug Fixes:

1. Dashboard related issues have been fixed.
2. Tomcat Vulnerability issues have been fixed
   a.Fix for Apache Tomcat SingleSignOn HTTP Cookie exposure Vulnerability. (Refer CVE-2008-0128)
   b.Hidden the webserver details (say Apache/Tomcat 5.0.28) and return a blank information for the sake of security.
   c.Fix for the multi-content-length vulnerability issue in Tomcat
   d.Fix for HTTP Cookie (jsessionid) Exposure Vulnerability
3. Voip related issues have been fixed
4. Temp raw table growing issue has been fixed
5. Index page sorting has been fixed
6. SNMP V3 related issue has been fixed

NetFlow Analyzer 8.6 (Build 8600)

Features:

1. Capacity Planning Report
2. Report Profiles
3. Top Sites
4. Selection box for list of application
5. Compare report include 95th percetile
6. Compare report should include 1,5,15 min reports
7. Resolve NATED Addresses in ASA reports
8. Resizeable columns
9. Configures CBQoS automatically for first 20 routers
10. Schedule Reports CSV option
11. Geo location PDF and CSV
12. Schedule Business hours for last month and week
13. Standard Deviation calculation in Traffic Report
14. Interface performance dashboard
15. Add custom URL widget in Dashboard

Bug Fixes:

1. The average for 5 / 15 Min Data point Average in traffic page has been fixed
2. The junk characters in Non-english property file have been removed
3. Sampling in Adtran Devices has been added
4. Dashboard related issues have been fixed
5. Consolidated Device based Report - (graph color related issue) fixed
6. Schedule Report file names with "null" has been fixed
7. IPSLA fix
8. Billing "Alert" issue has been fixed
9. User Defined DNS added for Schedule reports
10. Geolocation - "unaccounted" removed
11. Dashboard - Topstat - Last 15 Min Report - time period wrong

NetFlow Analyzer 8.5 (Build 8500)

Feature:

Advanced Security Analytics Module. More information.

Bug Fixes:

1. The average for 5 / 15 Min Data point Average in traffic page has been fixed
2. The junk characters in Non-english property file have been removed
3. Sampling in Adtran Devices has been added
4. Dashboard related issues have been fixed
5. Consolidated Device based Report - (graph color related issue) fixed
6. Schedule Report file names with "null" has been fixed
7. IPSLA fix

NetFlow Analyzer 8.0 (Build 8000 ) includes the following:

Features:

1. IPSLA (VoIP)
2. SNMP V3 support
3. Flexible NetFlow - NBAR integration
4. V9 Sampling
5. Cisco ASA
6. CBQoS Child Policy and Match Statements reports
7. PDF Option in CBQoS
8. Geo Locations reports of IP Addresses
9. Single Click Scheduling Option
10. Network Layout using google maps and Google map widgets
11. More Graphical Widgets and some new Widgets added in Dashboard
12. Sampling rate accounted during the flow calculation
13. Global search for IP Address link
14. Operator specific Dashboard permissions
15. Top N AS reports
16. Last 15, 30 Min reports
17. 1, 5, 15 Min averages in traffic report
18. Consolidated report for a device
19. Localization

Bug Fixes

1. In the build 7501, any report in "Compare same device for different time period" cannot be displayed in Non-english installation. This has been resolved
2. The issue in displaying problem on the sevirities of SNMP traps has been resolved
3. MSSQL Table split process is fixed now.
4. Issue in device group display has been fixed.
5. Pdf issue fixed for: (1) Application Group (2)Source Network (3)Destination Network (4)Tos (5)Dscp Group

NetFlow Analyzer 7.5.0 (Build 7600) (SP 4.0) includes the following:

Feature

1. Supports Microsoft SQL server 2000/2005

NetFlow Analyzer 7.5.0 (Build 7501) (SP 1.0) includes the following:

Features:

1. Interfaces without an IP address and without NetFlow exporting capability can be monitored for QoS policies if those interfaces are CBQoS enabled.
2. IP groups can be viewed in the network snapshot page.

Bug Fixes

1. The interfaces were not listed in the traffic page if the router name had special characters. That's been fixed.
2. A compatibility issue during patch installation has been fixed.
3. The patch CAN be applied in linux OS, even if the file system name is too long.
4. When having more than 100 IP groups, the IP groups page went blank. This has been fixed.
5. All the localization issues resolved.

NetFlow Analyzer 7.5.0 (Build 7500) includes the following:

Major Features:

1. Customizable dashboard
2. Site to site traffic monitoring
3. GRE application filter
4. Email option for sending reports with single click.
5. Policy enabled (CBQoS) routers need not export NetFlow for CBQoS monitoring
6. DSCP names in alerts and IP groups
7. Volume based billing
8. Secondary DNS server lookup
9. Raw data storage - Can be stored for as less as one hour
10. Report based on nexthop values.
11. Localization available in 8 languages.

Minor Features:

1. Password strength is displayed
2. "Compare reports" can also be exported as PDF now.
3. UAE Dirhams added in billing.
4. Option to modify interface groups.
5. Users can switch off raw data reports and generate reports from aggregated data, in case of time constraints
6. Look and feel changed
7. Subminute visibility available

Bug Fixes:

1. Issues related to sFlow fixed.
2. Day light saving time brought into effect. Product will automatically sync to the day light saving time change.
3. AS view related bug fixed
4. CBQoS related issues fixed
5. Automatic deletion of older raw data in non-English-OS issue fixed.
6. Issue with the "scheduled custom report" fixed

NetFlow Analyzer 7.0.0 (Build 7002) (SP 2.0) includes the following:

Bug Fixes

1. Issue related with "seeing data point only for the last ten minutes in the graphs" has been fixed.
2. Inablility to start as a service in Linux has been fixed.
3. Issue related to mysql crashing every 24 hours (typically at 2:00 am every day - while loading DNS entries) has been fixed.
4. Issue related to mail receiving and mail attachment in scheduled reports has been fixed.
5. NetFlow Analyzer temporary images stored in the OS tmp folder will be periodically cleaned up.

NetFlow Analyzer 7.0.0 (Build 7001) (SP 1.0) includes the following:

Major Features

1. Usage based billing
2. Localization supported
3. Reporting on source network and destination network
4. Look and feel changed

Minor Features

1. Option to resolve DNS for single IP addresses.
2. Quick view graph from the dashboard view for IP groups.

Bug Fixes

1. Application mapping with IP addresses will be categorized in the order in which they were created.
2. Ordering of interface list in the browsing of older scheduled reports.
3. Average calculation bug in scheduled custom report has been fixed.

NetFlow Analyzer 7.0.0 (Build 7000) (Beta) includes the following:

Major Features

1. Reporting on Cisco CBQoS - Useful for monitoring class based pre and post policy traffic usage, class based drops and queuing.
2. Authentication using radius server
3. Ability to create IP groups with exclude IP address option
4. Ability to add application mapping from the Show Ports page for enhanced usability
5. DNS resolving enhancement of source and destination addresses
6. Support for user configurable DNS names for IP addresses
7. Different IN and OUT speed can be configured for interfaces
8. Support for exporting reports to CSV
9. Sorting on the Autonomous Systems view for easier tracking and for peering arrangement
10. Option to exclude ESP_App on user defined interfaces - Ensures that traffic is not double counted in case of ESP tunnels.
11. Option to suppress output interface accounting on user defined interfaces - Useful when working with WAN accelarators
12. Option to suppress ACL(Access Control List) related drops (based on destination interface being null) on user defined interfaces
13. Quick view traffic graph in Dashboard view for enhanced usability
14. Graphs enhanced to one min granularity and also to real-time in Network Snapshot
15. Ability to set snmp parameters globally for all routers
16. Support for sorting of interfaces based on usage in Dashboard View
17. User management enhanced to provide last login time and current login status for all users
18. The LHS view can be re-arranged for convenience
19. Support for configuring alerts on interface groups. Interface groups can be used for checking the router traffic by combining all the interfaces into a single group.
20. User permission can be granted at a interface group level. This feature would enable providing permission at an interface level while creating a user
21. Option to view older schedules reports from the UI

Minor Features

1. Login page enhanced with a "keep me signed in" option
2. Alerting can be disabled for non-business hours
3. Ability to Backup.bat just the aggregated data
4. Option to bulk-load IP groups from flat file
5. Distribution graph for troubleshooting, custom reports and drill down reports
6. Configurable deletion of older alerts

Bug Fixes

1. Bug related to scheduled report attachment resolved
2. Today report to have only values from 00:00 to current time

NetFlow Analyzer 6.1.0 (Build 6100) includes the following:

Major Features

1. Network Snapshot View brought in
2. Global Comparison Report feature added
3. QoS reporting brought in
4. Alerting for IP group added

Minor Features

1. DSCP Group brought in
2. Distribution Graph for Conversation added
3. Support for mail in HTML format

Bug Fixes

1. Issue in average calculation and monthly report drilldown to 1 min code addition fixed
2. TCP FLAGS is not reported correctly - fixed
3. Issues related to google map fixed

NetFlow Analyzer 6.0.0 (Build 6001) includes the following:

Major Features

1. Real time reports with graphs updates immediately as the data is received
2. Support for sFlow data capture and reporting
3. Option to click and drag on the graph for easier drilldown
4. IN and OUT traffic (in bytes and packets) for each interface maintained with 1 minute granularity for upto 1 year
5. Performance improvement in IP group classification engine
6. Integration with Google Maps for a better view of the network
7. Ability to report on DSCP mapping
8. Alerting feature enhanced to send an alert when link goes down or when no flows are received for 15 minutes
9. Ability to group together applications into a single logical entity

Minor Features

1. Exporting pages to PDF
2. More options in the scheduled reports (Modify reports, speed / utilization, IP / DNS and option to zip or not zip the reports)
3. Option to back up configuration data
4. Source and Destination dissemination (to see how many unique destination that a source talked to and vice versa).
5. Individual graph for each source, destination and application
6. NBAR storage period extended to 1 year
7. Option to disable an IP Group

Bug Fixes

1. Bug related to random interfaces appearing with NetFlow V9 has been fixed
2. Bug in alert mail classification has been fixed
3. Ambiguity in Min and Max points with respect to the graph has been resolved

NetFlow Analyzer 5.0.0(Build 5505) (SP 1.2)included the following:

Major Features

1. Full i18N compliant
2. Localized setup in Chinese, Croatian, Dutch, French, German, Japanese, Spanish languages

Bug Fixes

1. Exporting V9 flows will report large number of interfaces than the actual number. This issue has been fixed

NetFlow Analyzer 5.5.0 (Build 5502) (SP 1.1)includes the following:

Major Features

1. Reporting on NBAR statistics
2. Support for netflow V9
3. Automatic Scheduling and emailing of reports
4. Associating IP address in application mapping (in addition to the port and protocol available now)
5. Ability to create interface group - ability to group interfaces together and monitor traffic
6. Reporting on ToS and TCP_Flag
7. Ability to listen on multiple UDP ports for incoming NetFlow datagram packets
8. Option to retain raw data for upto 30 days.( earlier limit was 2 weeks)

Minor Features

1. 95-th percentile added in traffic graph.
2. Configurable from address for emails - both in alert emails and scheduled reports
3. logZipUtil.bat to include .err file in mysql\data folder
4. Back-Up DB will have the backup location as configurable and also have option to overwrite the old backup
5. IP Groups list sorted by name
6. Values for the first few minutes were not plotted in the last traffic graph. This issue has been fixed.
7. Ability to enable/disable collection of AS information based on user's needs.

Bug Fixes

1. Alert will not be generated for interfaces whose interface index is 0.
2. Bug in NetFlowAnalyzer MIB for SNMP trap (Variables do not correspond to trap varbind order) has been fixed.
3. When reports are scheduled and automatically emailed, the files and the folders have been appropriately named for easier identification.

NetFlow Analyzer 5.0 Beta (Build 5001) (SP 3) includes the following:

Major Features

1. Threshold-based alerting - option to send e-mail notifications and SNMP traps based on alerts
2. Increased granularity - option to configure maximum time period for retaining raw data (upto 2 weeks)
3. Enhanced IP group management - option to modify IP groups and associate interfaces to IP groups
4. Internationalization - option to support local languages (French, German, Spanish, Japanese, and Chinese are available out-of-the-box)

Minor Features

1. Option to view IfName and If Alias values for an interface in addition to IfDesc value.
2. Dashboard filters - option to set filters on interfaces displayed on the Dashboard, based on the percentage of incoming and outgoing traffic received.
3. Enhanced Traffic Filter - option to view hour-based traffic data in daily and weekly traffic graphs.
4. Support link - Separate link with several options to contact NetFlow Analyzer Technical Support in case of any problems

NetFlow Analyzer 4.0.2(Build 4020) (SP 2)included the following:

Major Features

1. Support for NetFlow version 7
2. Reporting based on AS information
3. Localized setup in Chinese, and Japanese languages

Minor Features

1. Reporting based on packet count
2. Port range in mapping applications

Bug Fixes

1. Fixed PDF loading issue in Acrobat Reader 6.0
2. Fixed color bug in Dashboard percentage values
3. Fixed bug in IP address range when incorrect values were entered

NetFlow Analyzer 4.0.1 (Build 4010) (SP 1)included the following:

Major Features

1. Address Grouping - Create monitoring and reporting groups based on IP addresses or applications
2. Custom reports across multiple interfaces and devices

Minor Features

1. Criteria to define ports and port ranges in custom reports
2. Database archiving - Utility that makes a backup of the database.
3. Support file creation - Utility that zips the log files and database information to send to the NetFlow Analyzer Support Team.
4. Traffic graphs made as non-stacked graphs, and shown as a combination of line and area graphs
5. Interface Traffic graphs shown in one-minute intervals

Bug Fixes

1. Both In and Out traffic of managed interfaces are maintained - Previously traffic was accounted for flows whose source interface was managed. Now traffic is accounted for flows whose source or destination interface is managed.
2. Fixed mismatch in total number of interfaces marked as managed in DB and memory
3. Fixed PDF loading bug - Error when exporting to PDF when server was installed in non-"C" drive.
4. Fixed Applications graph bug - graph was hidden when more than 100 applications were listed.
5. runQuery.jsp file works fine on Linux platforms

NetFlow Analyzer 4.0.0 (Build 4002) included the following:

Bug Fixes

1. Fixed threading issues in updating database while handling more than 250 interfaces
2. Fixed issue in determining number of managed interfaces in License Management
3. Fixed application port bug - minimum value of ports was assigned to an application. Now whichever source or destination port maps to the application is used. Apart from this, source and destination ports are now displayed for unknown applications.
4. Fixed Delete Router bug - when all interfaces of a disabled router were deleted, new flows from any interface on that router were not processed. Now fixed to enable the router when all its interfaces are deleted. This ensures that if this router starts sending flows again, these incoming flows are processed.
5. Fixed percentage utilization bug in traffic reports - value was exceeding 100% in some cases.
6. Fixed Update Router Settings bug - device is now scanned again even if no changes have been made to Router Settings.
7. SNMP requests to routers sent in batches to ensure better response

Minor Features

1. NetFlow Analyzer can be run as a service on Linux
2. Update Manager tool included - tool to apply, manage, and remove service packs and patches
3. Option to edit Device Settings is available only for Administrator and Operator users
4. Application Mapping list is sorted on Application name for easy access
5. More enterprise applications added to the list of applications supported
6. NetFlow Analyzer can be run as root/non-root user
7. Server can be started in non-X-windows (headless) environment in Linux/Solaris

ManageEngine NetFlow Analyzer 4.0.0 (Build 4001) included the following:

Bug Fixes

1. Fixed time zone-related bug causing problems in setting Start and End time in graphs
2. About and Feedback links made to open in separate windows

NetFlow Analyzer 4.0.0 (Build 4000) (GA) General Release included the following:

General Features

1. Support for NetFlow version 5 exports
2. Web-based interface for viewing the network as well as performing administrative tasks
3. Configurable applications and application ports
4. Support for logical grouping of routers
5. Three user levels with different privileges, to enable managing of groups

Graphs & Reports

1. Instant graphs of network utilization per network interface
2. Daily, weekly, and monthly reports showing current, average, and peak traffic patterns on an interface, as well as percentage utilization
3. Reports on Top Applications, Top Sources & Destinations, and Top Conversations
4. Resolvable source & destination addresses
5. Reports include protocol & bandwidth utilization information
6. Subnet-based and IP range-based reports
7. Consolidated reports to show Top Application, Top Source, and Top Destination for an interface in one report