Trend Micro™ TippingPoint™
Threat Protection System
Release Notes
Version 6.0
To ensure that you have the latest versions of product documentation, visit the Online Help Center.

Important noteThis TippingPoint operating system (TOS) release ships with, and is supported on, 9200TXE devices only. Use
only SMS v6.0 and later to manage your 9200TXE device. Users can also continue to use the CLI interface tomanage their devices; however, the Local Security Manager (LSM) interface will no longer be available.

Threat Protection System Release Notes

1Release contents
Description

Reference

This release introduces the next generation of TPS devices, the TXE Series, beginning with
the 9200TXE. TXE devices offer improved hardware acceleration that enables
comprehensive threat protection against known and undisclosed vulnerabilities with highaccuracy.

New

The 9200TXE device uses Digital Vaccine (DV) v4.0.0.9765. This DV version includes ZeroDay Initiative (ZDI) filters with a static key.
For users upgrading from a TOS with DV version 3.2.0.xxxx, the DV automatically converts toversion 4.0.0.9765.

NewTXE devices support the following standard I/O modules:•

6-Segment 25/10/1 GbE SFP28•

4-Segment 100/40 GbE QSFP28

TXE devices support the following bypass I/O modules:•

4-Segment 25 GbE SR Bypass•

4-Segment 25 GbE LR Bypass•

2-Segment 100 GbE SR4 Bypass (MPO)•2-Segment 100 GbE LR4 Bypass

New

For more information on these modules, refer to the TPS Hardware Specification andInstallation Guide.
You can configure a TXE device’s I/O modules to support different transceiver speeds using
the SMS or the interface port physical-media command.
Note: If you configure a module to support a speed other than its native speed, you mustrevert the module to its native speed before removing the module.

NewWith appropriately installed transceivers, you can configure the 9200TXE 25 GbE I/O module
to support the following speeds:•25 GbE SR/LR•

10 GbE SR/LR – Configure the segment speed for both ports to 10 GbE using theSMS or interface port physical-media command.

•1 GbE SR/LR – Configure the segment speed for both ports to 1 GbE, and set
AutoNegotiate to OFF using the SMS or CLI. Note: The link state will always reportas UP, which can cause the link LED to be on constantly; however, it will blink toindicate traffic flow.

•TIP-77001

1 GbE Copper SFP support – Configure the segment speed for both ports to 1 GbEusing the SMS or interface port physical-media command.

Threat Protection System Release Notes

2

Similarly, appropriately installed transceivers also enable you to configure the 9200TXE 100
GbE I/O module to support the following speeds:•100 GbE SR4/LR4•40 GbE SR4/LR4 – Configure the segment speed for both ports to 40 GbE using theSMS or interface port physical-media command.

A new debug management-interface select command enables you to switch between
management ports.

New

Known issues
Description

Reference

For its initial release, the following features are not supported on the 9200TXE device:

TIP-88298•TLS inspection for TXE devices in a stack. TLS inspection is supported on unstacked
TXE devices.
Note: If a TXE device was removed from a stacking configuration, you must reboot
that device before using it for TLS inspection.

•802.1ah/ MAC-in-MAC.

•FIPS.

•

25 GbE management port.

If you insert an IOM into a running TXE device without cycling through a cold boot afterwards,
Layer-2 Fallback (L2FB) for the segments on that specific IOM will not work. Despite being fully
functional from an inspection point of view, the segments on that module will not pass traffic if
the device enters L2FB for any reason (including user-initiated L2FB, automatic L2FB during awarm reboot, and automatic L2FB caused by specific events).
To avoid this issue, take one of the following actions:•••Insert an IOM only while the TXE device is powered off.
Whenever you insert an IOM while the TXE device is running, make sure the device
goes through a complete power cycle afterwards.
From the device CLI, enter reboot full after inserting an IOM into a running TXE
device.

TIP-119635
PCT-23736

A driver issue with the high-speed 25 GbE management interface on a 9200TXE device used
for transparent high availability (TRHA) can cause the 25 GbE management interface to stop
responding under extreme load.

TIP-86621

Under some circumstances, removing a device from a stack can cause the device thatpreceded it in the stack ring to generate a stack-size configuration error.

TIP-88908

Threat Protection System Release Notes

3

An issue prevents the SMS from recognizing a device’s correct interface in the SSL logs.

TIP-88888
TIP-88726

A condition that causes the device to generate packet traces faster than the SMS candownload them generates an error in the device’s system log.

TIP-88844

The Stacking Primary LED remains lit after you delete the stack from the SMS.
To turn the light off, do one of the following:• Rebuild and delete the stack again.
• Reboot the device.
• Contact the Technical Assistance Center (TAC).

TIP-89155

SMS v6.0 requires TLS v1.2 for communication. If you disable TLS v1.2, you will not be able
to manage the device from SMS.

TIP-89187

The alert aggregation feature keeps restoring its interval value back to 1 minute.

TIP-88749

For SSL Inspection, the cipher suite TLS_RSA_WITH_DES_CBC_SHA has been disabled
and removed as a configurable option from existing SSL Inspection servers and client
proxies. If the removal process results in a proxy with zero ciphers configured, the proxy will
be automatically populated with default ciphers.
Values indicating the status of a module slot are in reverse order in the tptSlotEvent object of
the TPT-BAY MIB and in its corresponding description in the TPS MIBs Guide. The correct
values are as follows:
0: A module has been removed.
1: A module has been inserted.

TIP-84341

TIP-93071

Product support
For assistance, contact the Technical Assistance Center (TAC).

© Copyright 2024 Trend Micro Incorporated. All rights reserved. Trend Micro, the Trend Micro t-ball logo, TippingPoint, the TippingPoint logo,
and Digital Vaccine are trademarks or registered trademarks of Trend Micro Incorporated. All other company and/or product names may be
trademarks of their respective owners.

Threat Protection System Release Notes

4