Sangoma NetBorder/Vega Session Controller ------------------------------------------------------------------------------------------------------------- 2022-01-19: NSC 2.3.31-147-GA ------------------------------------------------------------------------------------------------------------- == FEATURES & IMPROVEMENTS == Fixed NSC-1343 Handle RFC2833 with wide band codecs Fixed NSC-1396 Added database binlog files expiry option Fixed NSC-1344 mod_oreka update to override the local SIP and RTP address on session basis == BUG FIXES == Fixed NSC-1397 Advance routing save and apply Fixed NSC-1328 Coutner 32bit over flow on TLS outbound calls Fixed NSC-1143 Fixed snmpv3 authenticate user configuration Fixed NSC-1401 Fixed ipv6 subnet range check excluding start IP Fixed NSC-1384 Update proper transport type for upreg internal leg Fixed NSC-1389 Hold/Unhold issue caused parsing sdp string contains another INVITE request after sdplen ------------------------------------------------------------------------------------------------------------- 2021-05-05: NSC 2.3.30-134-GA ------------------------------------------------------------------------------------------------------------- == FEATURES & IMPROVEMENTS == Fixed NSC-1313 Added option to export custom invite pid header param Fixed NSC-1315 Added last bridge hangup cause on channel variable Fixed NSC-1257 Increasing the core start timeout based on number of sip profiles and added warning Fixed NSC-1254 Updated nua server request destroying changes == BUG FIXES == Fixed NSC-1060 DTMF relay RFC2833 UDP to SRTP leg Fixed NSC-1290 HEP capture logging for tls Fixed NSC-1246 Handling ptime change of 50ms causing session lock Fixed NSC-1200 Supporting sip unhold when reinvite wihtout sdp and variable 'sip_unhold_nosdp' exported Fixed NSC-1225 Avoid major version upgrade for 2.x to 3.x Fixed NSC-1302 Handled issue while deallocating event object Fixed NSC-1319 Handled authenticate response when registaer usage is removed in upreg Fixed NSC-1320 Updated binding of sofia_private and handle before set hparam in upreg ------------------------------------------------------------------------------------------------------------- 2020-11-12: NSC 2.3.29-133-GA ------------------------------------------------------------------------------------------------------------- == FEATURES & IMPROVEMENTS == Added TLS 1.2 support == BUG FIXES == Fixed NSC-1080 Adding domain users requesting for restart Fixed NSC-1017 Handle invalid characters while loading log report Fixed NSC-1182 Handle contact with multiple uris upreg while unregister ------------------------------------------------------------------------------------------------------------- 2020-09-28: NSC 2.3.28-130-GA ------------------------------------------------------------------------------------------------------------- == FEATURES & IMPROVEMENTS == Fixed NSC-1068 Provided configurable option to disable ptime warning Fixed NSC-1112 Updated mod_oreka module Fixed NSC-1022 Added option to upload WebSSL certificates Added option to get the octasic license file using sngtc_tool == BUG FIXES == Fixed NSC-853 Detection of DSP modules in System 1200 and System 400 Fixed NSC-1028 Updated sngmonit to reduce load on CPU Fixed NSC-1063 Update correct capture id HEP3 Fixed NSC-1021 Handle odbc config issue on backup restore from 2.2 version Fixed NSC-1145 Added option to force SRTP on outbound leg Fixed NSC-1026 Allow stun address in external sip address field ------------------------------------------------------------------------------------------------------------- 2019-12-24: NSC 2.3.27-126-GA ------------------------------------------------------------------------------------------------------------- == FEATURES & IMPROVEMENTS == Added Switchvox Remote Phone support with SBC Fixed NSC-903 Added option to enable NSC service to use system time == BUG FIXES == Fixed NSC-993 Pattern matching error in call routing rule with match 'any' condition Fixed NSC-986 Added Secure Media option on the trunk configuration for outbound calls Fixed NSC-1008 HA: Alert user when dedicated network(direct cable) used in failover triggers ------------------------------------------------------------------------------------------------------------- 2019-10-24: NSC 2.3.26-124-GA ------------------------------------------------------------------------------------------------------------- == FEATURES & IMPROVEMENTS == NSC-824 License validation before replacing existing license NSC-977 Added option to reload SIP firewall rules to clear old entries from db NSC-984 Added log rotate for cluster-service and mariadb files NSC-826 Added option to backup/restore TDM config in MSBG NSC-923 Alert critical resource on dashboard NSC-957 HA - Disable buttons for Generate and Reset Access Key once a HA pair is constructed NSC-972 HA - Notify peer nodes wrong network configuration before copy configuration == BUG FIXES == NSC-881 Allow escape string format for From Header NSC-823 Handle re-Invite in media bypass mode NSC-873 Handle SIP UPDATE with modified SDP during early media NSC-979 Accept demo license with double gzip format NSC-983 Avoid inappropriate switch to software mode when no DSP card NSC-937 Alert user while configuring TLS with invalid secure avp setting NSC-910 Improved logging for service timeout NSC-982 Prompt restart nsc service on DID list add or modify NSC-851 Display correct reload license status NSC-978 Prevent editing SIP Profile External IP field while nsc service is running NSC-955 Prevent editing SIP Trunk domain while nsc service is running ------------------------------------------------------------------------------------------------------------- 2019-08-19: NSC 2.3.25-123-GA ------------------------------------------------------------------------------------------------------------- == FEATURES & IMPROVEMENTS == NSC-976 Handling SIP method MESSAGE in upper registration NSC-961 Added WebGUI option to disable X-FS-Support NSC-895 Perform health check before applying HA Configuration and copying configuration to Slave NSC-948 Validate the dedicated network IP slowing ssh access to peer NSC-920 Prevent displaying 'pending synchronization' on Standalone Installation NSC-949 Removed option 'Migrate to this node' from stopped node as there is no effect NSC-938 Help comment for trunklist settings in Domain page. NSC-966 Avoid unwanted log entries from webui HA settings == BUG FIXES == NSC-911 Restoring backup configuration issue with LCR NSC-619 SBC HA Synchronization failure with autodns error NSC-928 Synchronization initiated from stopped node overwrite Master configuration NSC-950 Copying configuration to Slave issue when Peer node's IPv6 Gateway exist but IPv6 address is not present ------------------------------------------------------------------------------------------------------------- 2019-06-07: NSC 2.3.24-122-GA ------------------------------------------------------------------------------------------------------------- Release specific: WebUI requires browser refresh after upgrade. == FEATURES & IMPROVEMENTS == NSC-919 Add option to passthrough SIP INFO dtmf payload without validation NSC-889 Change SBC HA terminology 'Synchronization' to 'Copy to Slave' for better understanding NSC-891 Warn user of HA SBCs version mismatch when making configuration changes NSC-892 Prevent user to copy configuration to Slave with SBC version mismatch NSC-845 Reject HA setup if the Primary and Secondary versions don't match NSC-843 Prompt for configuration backup when adding HA key to peer node NSC-849 Warn user to reboot if user changes domain name NSC-842 Prompt for configuration backup when exporting HA key NSC-844 Prompt for configuration backup after HA copied configuration to peer NSC-894 Provide instruction in WebUI to handle HA upgrade failure NSC-522 Auto White List All HA Pair IPs NSC-746 Prevent copying configuration to Slave when there is unapplied configuration NSC-865 Disallow configuration changes on Slave NSC-945 Added IP range suggestion in help message for dedicated network interface NSC-939 Provide on screen instructions to remove HA setting after deleting Peer node == BUG FIXES == NSC-731 SIP Notify is being misrouted to ext in different domain NSC-905 SIP Trunk Going into a Not Activated State after Max sessions reached NSC-898 SRTP negotiation issue after sending re-Invite to client NSC-814 WebUI Notification of forced Hardware mode to Software mode switching causes unnecessary configuration restart NSC-925 Security Issue NSC-926 Security Issue NSC-854 SBC HA failed to copy DID, ACL and LCR configuration to Slave NSC-929 Incorrectly starting cluster services after configuring a stopped node NSC-886 Factory Reset Locks You Out Completely NSC-927 NSC WebUI stability improvement when Detecting Media Interface ------------------------------------------------------------------------------------------------------------- 2019-03-26: NSC 2.3.23-119-GA ------------------------------------------------------------------------------------------------------------- == FEATURES & IMPROVEMENTS == NSC-855 Asterisk DPMA support NSC-610 Improve WebUI user experience by detecting and avoiding circular configuration object dependency == BUG FIXES == NSC-798 Outbound call terminated by SBC when initial Invite does not contain multipart body but received 2XX response has multipart body NSC-581 SBC HA firewall whitelist not synchronized NSC-752 Registered (non Upper Registration) user dialplan not used when call access granted by ACL NSC-837 HA Slave SBC lost IP address after synchronization failure NSC-812 System stability issue due to 3PCC race condition NSC-793 Failed to hangup call after 482 "Loop Detect" from ReInvite NSC-838 Database setup issue during initial HA configuration NSC-850 Call transfer failure if the new call took more then 200ms to setup ------------------------------------------------------------------------------------------------------------- 2019-02-20: NSC 2.3.22-117-GA ------------------------------------------------------------------------------------------------------------- == FEATURES & IMPROVEMENTS == Added javascript support for glype proxy Added WebUI event and email notification for switching to Software transcoding mode due to hardware transcoding module issue Changed default Failed_Call_block SIP Firewall rule from 1 failed attempt to 10 Force re-generation of Media Profile configuration during upgrade == BUG FIXES == Fixed Memory leak due to SIP Subscribe/Notify handling Fixed Multiple registration issues Fixed DTMF Mode configuration issue Fixed Email notification issue with certain SMTP server Fixed WebUI dial plan frozen error after deleting object referenced by the dial plan Fixed Configuration template restore error Fixed issue on failing to auto fallback to Software transcoding mode from hardware transcoding failure Fixed error when renaming SIP Message Routing plan in WebUI Fixed HA synchronization error when MAX SIP Session in empty ------------------------------------------------------------------------------------------------------------- 2018-10-19: NSC 2.3.21-108-GA ------------------------------------------------------------------------------------------------------------- == BUG FIXES == Fixed performance issue on subscription termination handling ------------------------------------------------------------------------------------------------------------- 2018-07-31: NSC 2.3.20-105-GA ------------------------------------------------------------------------------------------------------------- == FEATURES & IMPROVEMENTS == Vocallo firmware updated to version 02.01.17-B17-V1-PR Upper Registration default forwarding if defined domains unmatch Ability to set T302 Timer in Gateway TDM settings WebUI improvement on date/time setup == BUG FIXES == Fixed session leak due to unresponsive external SIP endpoint during early media call state Fixed RTP flow sudden stop error Fixed system stability issue for Upper Registration Fixed missing database table issue Fixed WebUI issues with 1024x768 screen resolution Fixed WebUI network information display issue with duplicated VLAN interfaces Fixed WebUI Least Cost Routing date format Fixed WebUI DID lists lookup issue when used in basic dialplan Fixed WebUI error when applying configuration ------------------------------------------------------------------------------------------------------------- 2018-04-18: NSC 2.3.19-102-GA ------------------------------------------------------------------------------------------------------------- == FEATURES & IMPROVEMENTS == Auto switch to software DSP mode during NSC service startup when hardware DSPs are not detected Added Web UI option to download Freeswitch MIBS https://wiki.freepbx.org/display/SBC/SNMP Added REST API for provisioning functions Added ability to change default behaviour for dtmf inband to outband conversion == BUG FIXES == Fixed error when handling connection problem with Vocallo module Added WebUI checks to ensure inbound call ACL lists in a SIP Profile setting to have the same default policy Added WebUI checks to ensure registration ACL lists in a SIP Profile setting to have the same default policy Improved log rotation algorithm for MariaDB log files Fixed incorrect ACL behavior when the ACL is set with "allow" default policy Fixed vocallo dropping SRTP packets issue resulting from several ssrc changes Removed incorrect error message from sipsecmon for registration event on strict security disabled SIP Profile Fixed error during call routing when referencing to a deleted trunk Improved Web UI to prevent RTP IP Address changes in SIP Profile setting when NSC is running Improved Web UI to prevent SIP IP Address changes in SIP Profile setting when NSC is running Fixed broken DTMF type setting in media profile ------------------------------------------------------------------------------------------------------------- 2018-03-16: NSC 2.3.18-94-GA ------------------------------------------------------------------------------------------------------------- http://wiki.sangoma.com/NetBorder-Session-Controller == FEATURES & IMPROVEMENTS == Added support of PW headers and PW INFO message forwarding ------------------------------------------------------------------------------------------------------------- 2018-02-23: NSC 2.3.17-93-GA ------------------------------------------------------------------------------------------------------------- http://wiki.sangoma.com/NetBorder-Session-Controller == FEATURES & IMPROVEMENTS == Added new sip profile security mode to restrict sip traffic to only known sip endpoin https://wiki.freepbx.org/display/SBC/SIP+Profile+Strict+Security+mode Added Source Policy based network routing in web UI https://wiki.freepbx.org/display/SBC/Source+Policy+Routing Added SMTP - STARTTLS Support for web ui email notifications transport https://wiki.freepbx.org/display/SBC/SMTP+-+STARTTLS+Support Added snmp module control in web UI https://wiki.freepbx.org/display/SBC/SNMP Allow generating configuration templates from web UI Added support for hepv2 and hepv3 == BUG FIXES == Improved HA system synchronization stability Improved web UI performance when applying changes Fixed HA cluster misconfiguration issue that could lead leading to secondary reboot Added web UI warning when floating IP is not used in SIP Profile in HA mode Fixed web UI update button to point to the latest version Added web UI checks to ensure dedicated IPs in HA setup are belonging to the same subnet Adjusted web UI configuration dialog positioning Fixed web UI issue for SIP Profile rate limit where configuration is not properly generated ------------------------------------------------------------------------------------------------------------- 2018-02-18: NSC 2.3.16-91-GA ------------------------------------------------------------------------------------------------------------- == BUG FIXES == * Fixed signaling network connection dropp-off with VLANs caused by firewall sip traffic rate limitting. * Fixed DSP connection faillure issue caused by DSP card ethernet interface network driver disconnect under load ------------------------------------------------------------------------------------------------------------- 2018-01-25: NSC 2.3.15-87-GA ------------------------------------------------------------------------------------------------------------- == BUG FIXES == * Fixed HA configuration synchronization issue caused by unexisting sipsecurity database table schema entry * Fixed web ui issue with acls not reloaded to the core system when existing acls are modified while system is running ------------------------------------------------------------------------------------------------------------- 2017-12-29: NSC 2.3.14-86-GA ------------------------------------------------------------------------------------------------------------- == FEATURES & IMPROVEMENTS == * Added support of G.729 transcoding in software mode. New web ui Media Interfaces configuration parameter allows selecting between G.729 passthrough and G.729 transcoding when operating in software mode. * Added support for OPUS codec in software mode. * Improved DSP media interfaces handling to allow SBC service to start if at least one media DSP is active. * Added handling of native codec recording to oreka module. * Added support of regular expressions in DID list CSV file. * Improved SBC default VoIP security settings: - Default rate limiting rules are automatically created by web ui each time a new sip profile is added. This allows to protect the sip profile agains any DOS attempt. - Added support of IP whitelisting to SIP Firewall * Added hostname validation before starting HA synchronization * Added SNMPD Agent X configuration when configuring SNMP from web ui. * Introduced a new channel variable named check_media_server_availability. That channel variable can only be used when SBC is configured in hardware mode and it allows to automatically switch a call to software mode if all DSP connections are down. When that channel variable is set and ALL DSP connections are down, instead of rejecting the call, the SBC will still process the call in software mode with the following assumptions: - The call will not require any transcoding. - If codecs other than G711 are used for the call, it's expected that both legs of the call will use the same codec so passthrough mode can be used. == BUG FIXES == * Fixed issue with broken web ui logs rotation * Fixed one way audio issue caused by remote SSRC change when using SRTP in hardware mode. * Fixed service failure caused by wrongly nested call routing conditions * Fixed issue with upper registration configuration lost after modifying configuration on a profile that does not have any upper registration domain binded. * Fixed issue with bonding interfaces settings lost each time new network configuration is applied from web ui. * Fixed HA configuration sync issues caused by url redirection. * Fixed web ui issue preventing from editing an existing static IP address. * Fixed HA synchronization issue caused by insufficient memory to synchronize the full configuration blob for systems with big amount of configuration objects. * Fixed web ui issue with automatic DNS being configured when DHCP is not used. * Fixed HA synchronization issues caused by missing SIP firewall tables in slave cluster DB. == KNOWN LIMITATIONS == * SIP BYE REQUEST Challenge is not supported when operating in upper registration mode. * Video passthrough is only supported when operating in software mode. * FAX T.38 to T.30 transcoding is not supported. * OPUS codec is only supported in software mode. * Web UI RTCP statistics reporting and monitoring is only supported in hardware mode. * Only HEP v1 is supported when sending sip captures to HEP server. ------------------------------------------------------------------------------------------------------------- 2017-12-11: NSC 2.3.13-83-GA ------------------------------------------------------------------------------------------------------------- == INTERNAL IMPROVEMENTS == * Improved End of Line testing automation ------------------------------------------------------------------------------------------------------------- 2017-12-06: NSC 2.3.12-80-GA ------------------------------------------------------------------------------------------------------------- == BUG FIXES == * Fixed issue CVE-2017-17430: Web ui security vulnerability issues that could be exploited to execute system command remotely through the web interface. ------------------------------------------------------------------------------------------------------------- 2017-11-03: NSC 2.3.11-78-GA ------------------------------------------------------------------------------------------------------------- == FEATURES & IMPROVEMENTS == * Added support of rules based on SIP INVITE method to SIP Firewall * Added a new upper registration domain configuration parameter allowing to forward incoming registrations origination network information to remote PBX within and X-Origination-Network sip header * Added support of 802.3ad bonding type configuration * Added web ui notification when IP firewall is turned off == BUG FIXES == * Fixed service failure issue in upper registration when final registration answer form PBX is 401 or 407 without any authorization header * Fixed upper registration service failure issue when REGISTRATION messages are received before the sip profile startup completes * Fixed Failed registrations issue in upper registration when the endpoint sends a SIP OPTIONS or a SIP PUBLISH message before the first SIP REGISTER message * Fixed HA faulty default link issue caused by wrong entry in /etc/hosts file. * Fixed backup restore issue when restoring a backup from a different machine * Fixed non working SIP Firewall issue when HA mode is enabled ------------------------------------------------------------------------------------------------------------- 2017-09-30: NSC 2.3.10-76-GA ------------------------------------------------------------------------------------------------------------- == FEATURES & IMPROVEMENTS == * Improved upgrade process to prevent user from upgrading when he is not on the minimum required upgrade version * Added mod_snmp to SBC modules distribution, see here for more details about mod_snmp: https://freeswitch.org/confluence/display/FREESWITCH/mod_snmp * Enabled sip firewall rules to get triggered when REGISTRATION is blocked by an ACL. The Failed Attempts field of the SIP firewall rule MUST be set to 0 to allow it triggering even for ACL type blocked registrations * Added ability to merge all collected captures before downloading them when using web ui Network Capture feature. * Added ability to automatically collect existing core dump backtraces when generating a support backup. * Added ability to configure an HEP capture server from the web ui. * Improved number lookup database feature, see wiki page here for more details: https://wiki.freepbx.org/display/SBC/DID+List == BUG FIXES == * Fixed log rotation issue with web ui logging files * Fixed sql configuration upgrade issues when upgrading from 2.2 to 2.3 versions * Fixed hold/unhold no audio issues on lync express environment when SBC is configured in bypass media mode * Fixed issue with SIP CANCEL reason header not being passed through in upper registration * Fixed web ui issue with new network capture command being fired each time the Network Capture page was reloaded. * Fixed issue with cdr folder MAX size being checked only based on the configured cdr rotation period * Fixed issues with standard web ui text editor when accessing web ui through a proxy. * Fixed web ui issue when configuring carrier lcr tables with intralata and intrastates rates. * Fixed issue with TLS certificates path not being properly generated by web ui. ------------------------------------------------------------------------------------------------------------- 2017-08-17: NSC 2.3.9-71-GA ------------------------------------------------------------------------------------------------------------- == BUG FIXES == * Fixed webui backup restore failure introduced in previous 2.3.8-68-GA release ------------------------------------------------------------------------------------------------------------- 2017-07-31: NSC 2.3.8-68-GA ------------------------------------------------------------------------------------------------------------- == FEATURES & IMPROVEMENTS == * Added number lookup database support, see wiki page here for more details and how to configure: https://wiki.freepbx.org/display/SBC/DID+List * Added per user acl support in upper registration, see wiki page here for more details and how to configure: https://wiki.freepbx.org/display/SBC/User+ACL+for+Upper+Registration * Added support of VLAN based IPs for floating IP configuration on HA systems * Added support of multiple registrations in uper registrations * Added ability to apply new license without restarting teh SBC by just issuing a config reload * Added command line option to allow reloading DSP firmware image from the FPGA. == BUG FIXES == * Fixed service failure when invoking sodia_gateway_status api from the cli * Fixed issue with Precondition headaer that was advertised as supported for non TLS based sip profiles * Fixed calls faillure due to duplicate rtp ports entry in the free rtp ports queue when using hardware DSPs * Fixed issue with wrongly released rtp ports when processing multiple re-invintes with RTP Port auto renew feature enabled. * Fixed issue with intrusion detection config file that was constantly growing due to additional blank lines appended * Fixed issue with additional remote contact Route header added by the SBC when initiating an new transaction within a dialog that had Record-Route headers initially. A new sip profile Interoperability parameter named "Do not Append Contact to UAS Route" has been added to allow disabling that behavior. ------------------------------------------------------------------------------------------------------------- 2017-06-29: NSC 2.3.7-66-GA ------------------------------------------------------------------------------------------------------------- == FEATURES & IMPROVEMENTS == * Added automatic MAC address change detection and adjustment during system boot * Improved web ui page loading performances with less cpu being required during page laod * Improved installer SSD disk usage allowing to use more than 60GB out of the abvailable disk space * Added mechanism to automatically adjust maximum allowed sip sessions value each time a new license is uploaded * Added mechanisms to automaticallu update DSP firmware when using REST api to upgrade the SBC == BUG FIXES == * Fixed service failure when forwared registrations are received during profile restart * Fixed licensing issue with sip relay sessions being counted within the license used sessions * Fixed one way audio issues occuring when same codec payload type changes between hold and unhold ------------------------------------------------------------------------------------------------------------- 2017-05-08: NSC 2.3.6-65-GA ------------------------------------------------------------------------------------------------------------- == BUG FIXES == * Fixed service start failure issue when 127.x.x.x ip address type is assigned to sip profile. * Fixed "Supported" and "Allow" header are not inserted after an INVITE has been challenged. * Allow "nc" value containing 00000000 in Authorization headers. * Update function signatures for Snort Plugin responsible for the service to restart frequently * Fixed missing files in TDM Gateway configuration backup. ------------------------------------------------------------------------------------------------------------- 2017-04-14: NSC 2.3.5-63-GA ------------------------------------------------------------------------------------------------------------- == FEATURES & IMPROVEMENTS == * Allow trailing semi-colons in URI parameters send by some broken user agents * Allow relaying of SIP OPTIONS in non-upper registration mode * Added feedback during restore process to allow user see the advancement of the process * Added mechanism to prevent other users to modify config through web ui while backup restore process is running == BUG FIXES == * Fixed broken support for SIP profile filter in SIP firewall rule generation * Fixed no audio issues caused by wrong DSP channel audio mapping * Fixed web ui backup restore issue when one of the network interfaces from the initial backup is not present anymore on the system * Fixed wrong network configuration issue after a backup restore * Improve handling of old style hold for T.38 pass-thru * Fix issue where database related parameters are incorrectly set during update from backup * Fix update issues related to index assignment for media interface addresses * Fix backup and restore issue where firewall rules are sometimes not updated * Fixed wrongly configured firewall issue after restoring a config backup ------------------------------------------------------------------------------------------------------------- 2017-03-14: NSC 2.3.4-59-GA ------------------------------------------------------------------------------------------------------------- == FEATURES & IMPROVEMENTS == * Removed limitation for number of IP address that can be assigned for individual media interfaces * SIP Firewall blocking is now possible via a dialplan application * New Call Rate Status tab added to the webui * Automatic convertion of PKCS12 and P7B SSL certificates to PEM format * RTCP statistics can now be retrieved via the REST API == BUG FIXES == * Fixed webui not properly flushing inbound registrations * Enforce refresh of DSP configuration during an update that requires transport configuration changes * Improve handling of SDP with mixed old style hold (0.0.0.0) and sendonly/recvonly direction attributes * SIP firewall heartbeat event is now configurable in the GUI * Fixed time synchronization issue with SIP firewall hearbeat events * Fixed factory reset issue for restoration of network configuration * Added check in webui not to allow different SIP profiles to listen on the same address * Add SBC bin directory to the system path for users with elevated privilege via sudo ------------------------------------------------------------------------------------------------------------- 2017-02-01: NSC 2.2.13-55-GA ------------------------------------------------------------------------------------------------------------- == FEATURES & IMPROVEMENTS == * Added mod_expr as a built-in module. This would allow dial-plan to perform basic math operations such as random number generation * Change ceiling for number of domains per profile from 25 to 200 * Enabling/Disabling SIP relay no longer requires a restart * Performing NAPTR lookup when resolving gateway host is now supported * Web config logs are now rotated via system logrotate * OpenSSL library updated to latest release == BUG FIXES == * Fixed IPV6 related issue disallowing T.38 passthrough to work properly for the DSP module * Introduced preregister event to be sent to SIP security monitoring service for register requests without authentication * Fixed wrong parsing of host address in the SIP library resulting to packet capture messages getting sent to the wrong port * Fixed invalid pointer access when reporting ESL missed events * Fixed premature processing of re-Invites when setting up a T.38 call * Fixed issue where SBC can choose the wrong crypto attribute when multiple SRTP crypto tokens are present in the offer * Fixed gateway dialplan not identified if trunk registration is enabled * Corrected wrong SQL syntax when recreating subscription table * Fixed wrong registrar assignment for registration refresh when multiple registrar shares an FQDN * Fixed broken nsc/dsp/capacity script resulting to "Operations Not Permitted" error when invoked * Fixed webui to gracefully handle large CDR files when creating support backup * Fixed webui wrongfully notifiying that an update is available after an upgrade ------------------------------------------------------------------------------------------------------------- 2017-01-11: NSC 2.2.12-54-GA ------------------------------------------------------------------------------------------------------------- == BUG FIXES == * Fix service failure caused by mod_event_socket referencing an invalid address when reporting missed events ------------------------------------------------------------------------------------------------------------- 2016-11-18: NSC 2.3.3-51-GA ------------------------------------------------------------------------------------------------------------- == FEATURES & IMPROVEMENTS == * Updated media DSP firmware version to '02.01.12-B26-PR' * Added ability to retain source IP addresses when forwarding packets through NAT * Improved SIP Firewall to allow blocking of hosts from the dialplan * Improved SIP Firewall to detect malicious OPTIONS requests * Improved SIP Firewall to block REGISTER requests that never respond to challenge == BUG FIXES == * Fixed issue for missing TDM gateway configuration files in system backup * Fixed wrong web ui update notification issue where it keeps on saying an update is available after system is already updated * Fixed web ui issue preventing to add VLAN interface * Fixed web ui issue where active SIP profiles are shown as stopped * Fixed web ui issue where profiles can't be edited when HA mode is changed * Fixed web ui issue where distribution list is incorrectly generated * Improved domain validation webui rule ------------------------------------------------------------------------------------------------------------- 2016-10-05: NSC 2.2.11-53-GA ------------------------------------------------------------------------------------------------------------- == FEATURES & IMPROVEMENTS == * Introduced new sip profile configuration parameter enable-3pcc-relay-alerting allowing to forward 18X sip provisionnal responses in 3PCC scenarios. * Added support of pkcs12 and p7b TLS certificate file format uploading from the web ui. == BUG FIXES == * Fix wrong RTCP statistics reported by the hardware DSP when huge timestamp gap occurs. * Fixed service failure when using H323 signaling caused by race condition within the H323 stack library. * Fixed sip trunks configuration loading issue when several trunks using the same sip profile have the same realm. Introduced new configuration paramater allow-port-in-gateway-identity to enable this per sip trunk. * Fixed rejected Notify issue in upreg scenario caused by wrong sip to header sent to remote. * Fixed issue with sip ACK getting sent to wrong address when DNS round robbin is being used. * Fixed web ui advanced logs displaying issue. * Fixed web ui routing display issue when there are more than 100 call routes configured. * Fixed web ui license page display issue with licensing information displayed two times. ------------------------------------------------------------------------------------------------------------- 2016-10-12: NSC 2.3.2-40-GA ------------------------------------------------------------------------------------------------------------- == FEATURES & IMPROVEMENTS == * Upgraded built-in TDM gateway driver version to 7.0.20.1 == BUG FIXES == * Fixed web ui issue not properly creating vlan interfaces on apply ------------------------------------------------------------------------------------------------------------- 2016-08-25: NSC 2.3.1-37-GA ------------------------------------------------------------------------------------------------------------- == BUG FIXES == * Fixed upgrade issue from 2.2 to 2.3 versions. Added missing library dependency during upgrade ------------------------------------------------------------------------------------------------------------- 2016-08-24: NSC 2.3.0-35-GA ------------------------------------------------------------------------------------------------------------- == FEATURES & IMPROVEMENTS == * High Availability Stateless HA is now available in an active/passive mode. Special HA (High Availability) mode has been introduced. In HA mode, two SBC can be used with shared floatting IPs (one SBC is active and the other one passive). Uppon service failure on the active SBC, the passive one takes over the traffic and becomes active. A dedicated ethernet link between the two SBC is mandatory to work in HA mode. Configuration is always kept in sync between master and slave SBC when working in HA mode. * Security improvements SBC security features have been improved allowing more user management. Access Control Lists can now be created and managed from the ui and used within the dialplans and sip profiles. All source addresses are blocked by default in new deployments and user will have to explicitelly whitelist authorized ip addresses. Root user loggin has been disabled. * New GUI design The web ui visual aspect and usability has been improved. Dialplan conditions and actions can now be dynamically added or removed Dialplan conditions and actions can now be dynamically reordered. == UPGRADE NOTES= * HA synchronization must be triggered by user Users who have two SBCs and want to use HA mode will have to trigger configuration synchronization after properly configuring their master SBC. * Hardware exposed mode in media interfaces configuration was removed This option is not supported anymore as it was complicating overall SBC operation. So now only sofware mode and hardware hidden mode are available for media interfaces configuration. For users operating the SBC with Sangoma D150 card (for which the hardware exposed mode was mandatory) they can now use hardware hidden mode with their SBC. The procedure for using the SBC with a D150 in hardware hidden mode is the following: 1. If running the SBC in a VM: a) Connect the D150 directly to one oh the network interfaces of the VM host machine b) Create a virtual interface on your VM and change it's MAC address so it starts with prefix 02:19:23 c) Bridge the virtual interface with the ethernet interface connected to the D150 d) Start the VM, the newly created virtual interface should be automatically renamed sngdsp0 e) Proceed to the media inetrafaces configuration page and choose hardware hidden mode 2. If running the SBC on a hardware appliance: a) Connect the D150 directly to one oh the network interfaces of the hardware applicance machine. b) From the SBC network configuration page, create a DSP MACVLAN on that same interface connected to the D150 c) The automatically created MACVLAN should be an interface named sngdsp0 d) Proceed to the media inetrafaces configuration page and choose hardware hidden mode ------------------------------------------------------------------------------------------------------------- 2016-08-23: NSC 2.2.10-52-GA ------------------------------------------------------------------------------------------------------------- == BUG FIXES == * Fixed sip signaling issue caused by race condition between a CANCEL beeing sent by the SBC and the INVITE 200 OK being received at the same time. * Fixed web ui broken network configuration pages issues introduced by Advanced logs dislplay enhancement from version 2.2.9-50 ------------------------------------------------------------------------------------------------------------- 2016-08-19: NSC 2.2.9-50-GA ------------------------------------------------------------------------------------------------------------- == FEATURES & IMPROVEMENTS == * Made IAX endpoint creation configurable for H323 profiles * Added interoperability parameter to workaround microsoft lync issue where lync tries to play MOH while endpoint was put onhold with inactive streams. Added new channel variable parameter named media_audio_mode_inactive_to_recvonly. If that channel variable is set to "true", received inactive media m lines will be considered as sendonly, thus SBC will be in recvonly mode. * Added a new channel variable to control refer To headers mangling in upper registration scenarios on a per call basis. That channel variable is named sip_refer_to_mangled_user and possible values are true (always mangle all refer To headers), false (Never mangle refer To headers), blind-only (mangle refer To headers for bling transfer only), attended-only (mangle refer To headers for attended transfer only). * Added new channel variable allowing to reuse the same call-id for second invite resulting from a 302 redirect received by the SBC. That channel variable name is sip_redirect_call_id and when set to true, the invite resulting from a 302 redirect will have the same sip call-id as the initial invite. * Added an update checker to the webui. That update checker would check from available for updates from Sangoma once a day if the SBC has internet access. If any update is found, web ui will advertise user of the update availability and will let user download it and install it if he chooses too. * Updated php version from 5.5.9 to 5.5.37 == BUG FIXES == * Fixed service failure caused by memory corruption in H323 stack library. * Fixed memory leak caused by leaked tcp connection tport objects when a tcp connect fails because of invalid remote peer. * Fixed service failure in upper registration scenarios when re-invite is received from the PBX side. * Fixed issue with wrong session timers refresh setting when re-invite is received from the outbound leg. * Fixed service failure issue in upper registration scenarios when forwarded subscribe is not answered by the PBX side. * Fixed service failure issue in upper registration caused by race condition between registration refresh from a phone and invite from the PBX towards that same phone. * Fixed service failure in upper registration when received invite does not contain any user part. * Fixed one way audio issue in upper registration scenarios when PBX sends re-invite immediately after sending the 200 OK to connect the call. * Fixed cancel handling race condition preventing the SBC to send a cancel when the cancel is issued at the same time the B leg answers the call. * Fixed sip security monitor failure when received event does not contain all the expected headers. * Fixed web ui advanced logs displaying issue. * Fixed issue with cdr rotator failure when disk is full. ------------------------------------------------------------------------------------------------------------- 2016-06-03: NSC 2.2.8-49-GA ------------------------------------------------------------------------------------------------------------- == BUG FIXES == * Fixed memory leak issue when forwarding sip request in upper registration scenarios. * Fixed uncleared automatic DNS issue when changing ip assignment from dhcp to static. * Fixed wrong default transport in sip profile issue when received request url and contact do not contain any transport parameter. * Fixed issue with network validation acl list not being synchronized on sip profile restart. * Improved recover resiliency when disk has leftover RAID partition data in the same place where new partitions are created by deactivating any RAID detected by the kernel during the recovery process. * Fixed firewall panic mode issue caused when rule name is too long. * Fixed web ui issue with factory reset not deleting created users. * Fixed web ui issue with ipv6 gateway validation not allowing ink-local address. * Fixed web ui issue not properly setting ssh public key. * Fixed web ui issue not accepting some special characters in sip trunks password field. ------------------------------------------------------------------------------------------------------------- 2016-05-06: NSC 2.2.7-47-GA ------------------------------------------------------------------------------------------------------------- == BUG FIXES == * Fixed service faillure issue when sip profile max request uri length is set and an request without user part in the request uri is received. * Fixed service faillure issue in upper registration upon reception of SIP OPTIONS message not containing any user part in From header. * Fixed memory corruptions in upper registration caused by race conditions during message handling and that can lead to service faillures. * Fixed memory leaks in upper registration during expired authentication chanllege cleanup. * Fixed web ui issue failling to properly generate ip firewall rules when ip whitelist is used on open ports. ------------------------------------------------------------------------------------------------------------- 2016-04-08: NSC 2.2.6-41-GA ------------------------------------------------------------------------------------------------------------- == FEATURES & IMPROVEMENTS == * Allowing all SUBSCRIBE events to pass through when upper registration mode is used. * Added upper registration resiliency support. This refers to teh ability to routing call directly to upper registered phone when the registrar PBX is down. * Added ZRTP support when host media processing is used (software mode). * Added support for PUBLISH and OPTIONS pass through in upper registration scenarios. * Added option to allow forwarding REFER-To and REFERED-By headers in upper registration scenarios. * Added configuration options to allow modifying h245tunneling and bearer capability for H323. * Added SIP Trunk support for Network ACL validation. * Removed the requirement of sip trunk CAC "Max Sessions" for sip trunk routing plan to take effect. * Integrated new IGB network driver for Lanner 8771 appliances. * Updated TDM Gateway package to 5.2.0 113 version. See Changelog here: ftp://ftp.sangoma.com/nsg/5.2/Changelog/NSG-5.2-113-changelog-wiki.txt == BUG FIXES == * Fixed No Audio issues when RTP auto adjust mode was being used with DSPs. * Fixed non applied RTP TOS value in RTP packets when host media processing is used (software mode). * Fixed audio quality issues for SIP to H323 calls. * Fixed wrong RTP port range setting issue when host media processing is used (software mode). * Fixed service failure issue caused by some race conditions during upper registration expiration. * Fixed TLS memory leak issues. * Fixed TLS connection dropping issue caused by secondary connection tear down. * Fixed network audit points behaviour when interfaces were not configured or not present on system. * Fixed web ui issue with configuration backup restore overriding license file even if skip license is checked. * Fixed web ui issue preventing from downloading support backup when pcap capture folder size is big. * Fixed web ui issue reporting incorrect session capacity usage. * Fixed web ui issue with DHCP settings not properly applied during upgrade. * Fixed web ui issue not automatically redetecting media interfaces after configuration restore. * Fixed web ui issue with configuration backup restore going into infinite loop. ------------------------------------------------------------------------------------------------------------- 2016-01-20: NSC 2.2.5-38-GA ------------------------------------------------------------------------------------------------------------- == FEATURES & IMPROVEMENTS == * Allow asymmetric rfc2833 payload type when using DSP media stack. * Added new dialplan application sip_dns_resolve allowing to make DNS SRV queries from dialplan. Useful for authenticating calls from sip trunks configured with FQDN * Changed pcap captures naming file convention to keep the .pcap extension. * Allow user to configure the max capture size. * Added web ui notification during firmware update. * Updated TDM Gateway package to 5.2.0 110 version. * Integrated new network IGB driver for Lanner 8771. * Allow sip stack timers configuration from sip profile configuration page. * Improved security by automatically enabling ip address authentication on in sip profiles if any upper registration domain was binded to that sip profile. == BUG FIXES == * Fixed ARP response issue when using multiple IPs on the same subnet on different interfaces. * Fixed issue on existing domain parameters change from web ui not applied when reloading configuration. * Fixed issue with SIP Firewall rules not working on REGISTER without authorization header. * Fixed memory corruption issues in upper registration scenarios. * Fixed memory leak issues in upper registration scenarios. * Fixed service failure issue in upper registration when call gets rejected by outbound leg. * Fixed race condition issue preventing outbound leg from being cleared when it offers unsupported codec after early media. * Fixed issue with IP firewall blocking internal DSP ping status ICMP requests. * Fixed web ui critical media firewall error notification caused by unhandled exception. * Fixed web ui upgrade issue when TDM cards are being used. * Fixed web ui factory reset issue causing to totally loose network configuration. * Fixed webconfig service failure after upgrade. * Fixed issue with configuration backup overwriting network/license settings. * Fixed issue with wrong default gateway after deleting the gateway IP interface. * Fixed issue where deleting a vlan interface doesn't remove its configuration file. * Fixed issue with gso not disabled for DSPs interfaces. * Fixed web ui configuration restore issue with VLANs not properly restored. * Fixed RTP ports overlapping issue when DSPs are being used in parallel with host media processing. * Fixed issue with non-terminated sessions when http CDRs are being used and the http CDR upload blocks on remote end. * Fixed issue with sip firewall not able to block friendly scanner REGISTER that do not contain authorization header. * Fixed web ui issue with CDR downloading caused by zip library taking all available memory. ------------------------------------------------------------------------------------------------------------- 2015-11-20: NSC 2.2.4-35-GA ------------------------------------------------------------------------------------------------------------- == FEATURES & IMPROVEMENTS == * Unsolicited NOTIFY and MESSAGE forwarding from dialplan The SBC can now forward received unsolicitted (out of call) SIP NOTIFY and SIP MESSAGE. User can configure a forward/relay dialplan context for a profile and implement a dialplan logic in order to properly forward those sip messages when received on a sip profile. As of current version, only SIP NOTIFY and SIP MESSAGE can be forwarded. * Upper registration round-robbin load balancing User can now configure several registrar servers when enabling forward registration on a domain. The SBC will use a round-robbin load balancing algorithm to forward the received registrations requests to the configured registrar server list. When a registrar server is reported as down, it will not be considered by the load balancing algorithm when trying to assign a registrar server to a new registration request. * IP whitelist allowed for each opened service port through the IP firewall if address field is present on an "opened port" entry, SBC will allow access to that opened port to only the ip address/mask present in this field. and block all other ips. If no address is specified, SBC allows connection from any host. * mod_oreka now distributed with SBC modules. User can now manually configure mod_oreka in order to use it with his SBC. * Improved Support Backup to include iptables output and DSP mode. * Improved DSPs performances by adding a new DSP operation mode when more than one sngdspX interafce is present. * Now exposing 'autoneg' and 'duplex' configuration settings for non DSP interfaces. == UPGRADE NOTES == * registrar server, registrar port and register transport configuration fields, for a domain with forward registration enabled, have been deprecated. To specify a registrar to forward the domain registrations to, user must now create a sip trunk towards that registration server and attach that sip trunk to the registrar gateways list of the domain. The upgrade process will automatically adjust existing configuration to match this new requirement. == BUG FIXES == * Fixed memory leak issue in freeradius-client library. Upgraded freeradius libary to 1.1.7 to fix the memory leak. * Fixed wrong memory management issue when using session log dumping feature. * Fixed unresponsive service issue in upper registration caused by a race condition when stopping profile while cleaning existing expired registrations. * Fixed upper registration issue where thru registartion context is lost when restarting teh SBC or reloading teh profile configuration. * Fixed potential memory corruption in upper registration scenarios. * Fixed upper registration invalid CSeq numbers issue. * Fixed upper registration issue where accept header is misssing from forwarded SUBSCRIBE and NOTIFY * Fixed SIP firewall service failure because of inactive connection. * Fixed web ui issue forcing basic dialplan export action to always skip setting the channel variable for inbound leg. * Fixed web ui issue with the username/password field and filer vulnerable to xss attack. * Fixed web ui issue with PHP version shown in webserver configuration. * Fixed web ui issue restoring a system backup from older 2.1 overwrites my.cnf * Fixed web ui issue factory Reset does not bring SBC back to Static 192.168.168.2 * Fixed web ui issue where after software upgrade, the system is restarted but the cookies where not cleared. * Fixed web ui issue where an interface without any ip assigned fails to come up. * Fixed issue web ui permits a user to set a default gw not in any local subnet. * Fixed web ui issue where sip trunk did not allow '@' symbol in username and auth-username fields. * Fixed web ui issue where webpage session cache was not cleared after upgrade causing the web ui to be inaccessible. ------------------------------------------------------------------------------------------------------------- 2015-10-15: NSC 2.2.3-28-GA ------------------------------------------------------------------------------------------------------------- == FEATURES & IMPROVEMENTS == * Added sip profile configuration parameter allowing to enable/disable talk/hold events support * Added ability to forward in call NOTIFY messages for non upper registration calls * Upgraded built-in TDM gateway driver version to 7.0.14.31 == BUG FIXES == * Fixed service failure issue caused by race condition when transfer is being performed during call setup. * Fixed issue in upper registration where authentication INVITE for challenge from endpoints was using a different call id. * Fixed issue in upper registration where received challenged header was not properly relayed for REFER requests. * Fixed T.38 negotiation failure when audio media description with port 0 is present from remote T.38 re-invite SDP. * Fixed upper registration issue when re-invite is challenged by PBX or endpoint. * Fixed wrong logging when user part in not present in received contact header. * Fix issue with the built-in TDM gateway not being able to forward media to the SBC when the firewall is started * Fix web ui issue where DSP status reports error if first DSP is deactivated * Fixed web ui issue preventing to delete newly added users after upgrade. * Fixed web ui failure occurring if installation is done when TDM cards are present on the system. * Fixed web ui configuration restore process not to copy mac ethernet mac addresses from different system. * Fixed issue with support backup not containing SBC version. * Fixed web ui issue where vlan static rules where incorrectly applied. ------------------------------------------------------------------------------------------------------------- 2015-08-21: NSC 2.2.2-22-GA ------------------------------------------------------------------------------------------------------------- == FEATURES & IMPROVEMENTS == * Improved DSP failover reliability to handle better hardware or firmware failures on a DSP * Added ssh key field to the web ui for system users to allow ssh key authentication * Added Auto-restart prompt after a successful upgrade * Show the routing plan for every SIP profile in the main profile listing web page * Add warning if configuring more allowed sessions than licensed == BUG FIXES == * Fixed issue with TCP port-forwarding using an incorrect source address after the packet was forwarded * Fixed sporadic service restart due to a race condition when processing sip events * Update DSP firmware to 02.01.09-B1-PR to address a DSP halting problem * Fixed transcoding failure from G.726 to iLBC * Fixed issue in sngtc_tool command line disrupting existing sbc sessions * Fixed issue with burst of RFC2833 DTMF digits not passing through * Fix memory leak on sessions that timeout due to RTP inactivity * Fix restart on upper registration expiration check * Fix restart due to incorrect SDP parsing * Fix issue with user management after updating from NSC 2.1 releases * Fix issue with the SIP firewall hanging sporadically * Fix PHP fatal error when importing large LCR tables * Fix issue with the built-in TDM gateway not being able to forward media to the SBC when the firewall is started ------------------------------------------------------------------------------------------------------------- 2015-06-15: NSC 2.2.1-18-GA ------------------------------------------------------------------------------------------------------------- == FEATURES & IMPROVEMENTS == * Added peak sessions per second statistics on the 'status' command * Added CSV CDR module (must be manually configured, no web gui support) Make sure you setup a log rotation schedule suitable to your call load and available disk space * Included custom Python and Lua routing support Both modules must be loaded using modules_custom.xml as they are not loaded automatically * Improved the usability of web ui restart page == BUG FIXES == * Fixed issue with some services sometimes not restarting when the main SBC service is started * Fixed issue with upper registration not relaying authentication information for non-challenged REGISTER messages * Fixed issue with the RTCP SDES that could cause invalid RTCP packets to be sent when the software RTP stack is in use * Fixed SDP parsing for G.723.1 when endpoints use 6.3 instead of 6300 in the codec specification * Fixed G.723.1 silence suppression SDP negotiation * Fixed small memory leak in upper registration REGISTER authentication * Fixed web ui breadcrumb displayed menu when rebooting the system * Fixed 'External RTP IP' validation that was still allowing an old invalid field format * Fixed issue introduced in NSC 2.2.0 causing the web ui to not accept valid host:port syntax for the SIP trunk domain field * Fixed some variants of the iLBC and AMR codecs not being available during SDP negotiation * Fixed issue with the sip security monitor not starting when there are pre existing ip objects blocked in the database * Fixed issue with the sip security monitor failing to block ip addresses when the IP firewall is started first * Fixed updates reporting success even in failure situations * Fixed web update dialog closing when pressing escape * Fixed web ui not asking to restart after restoring a configuration ------------------------------------------------------------------------------------------------------------- 2015-06-04: NSC 2.2.0-16-GA ------------------------------------------------------------------------------------------------------------- == FEATURES & IMPROVEMENTS == * IPv6 support The SBC is now fully IPv6-enabled, you can create firewall rules, sip trunks, access control, and all other SBC configurations using IPv6 You can perform interworking (protocol conversion) from IPv4 to IPv6 and vice versa * IP Firewall Improvements The IP firewall functionality has been heavily improved. Automatic firewall rules are created and destroyed when enabling, modifying or disabling services in the SBC such as new SIP profiles and management services like web and ssh Support for port-fowarding has been introduced. You no longer need custom hand-written rules You can now integrate scripts to customize IP firewall behavior * Networking Improvements The networking configuration has been improved and simplified. The DSP configuration is automatically done for 'hidden' hardware mode and it is no longer required to have an IP address assigned for the sngdsp device when working in exposed mode * WebSSH You can now access an SSH console from the web interface Just follow the menu System -> Management -> WebSSH * TDM gateway integration Sangoma TDM gateway software is now available for SS7, PRI, MFCR2 protocols when there is TDM hardware installed * TR-069 protocol support SBC configuration can be managed via TR-069, see the CWMP service under System -> Management -> CWMP * Registration Security Improvements You can now completely block SIP messages from unregistered endpoints * New GUI design The web ui visual aspect and usability has been re-designed, there is a new menu bar at the top with common useful status information == UPGRADE NOTES == * The '-- Same Profile --' option is no longer valid when configuring SIP upper registration You have to select a profile to communicate with the PBX that is exclusively used to communicate with the PBX and not to talk to other user agents (e.g phones) * The IP firewall rules must be reviewed after update. The SBC firewall has received major changes in this release and now RTP, SIP, SSH and all other SBC services automatically create firewall rules when they are enabled; there is no need to manually create the firewall rules for them. This means many of the existing rules might be duplicated after updating from an older release. Be sure to double check your rules after upgrading to this release * There is a current limitation of 8 IP addresses per system This limitation applies to systems with hardware transcoding. If you need more than 8 IP addresses please contact Sangoma for possible work-arounds * Enhanced security mode option in the media firewall was removed This option is now removed as it reduced performance significantly and the DSP discards RTP traffic from unknown sources on its own without requiring help from the host kernel This option is now removed as it reduced performance significantly and the DSP discards RTP traffic from unknown sources on its own without requiring help from the host kernel * SIP and RTP external profile addresses now accept only IPv4 or IPv6 static addresses. The option to accept dynamic adddresses using the autonat:, stun: or host: prefixes has been deprecated and is not acceptable anymore