Serie v5.0.x

Serie v5.0.x

v5.0.5 (2026-04-20)

SNMP Discovery Fix: Corrected the network protocol configuration for SNMP discovery to utilize UDP ports. This resolves an issue where Siemens device detection via SNMP could fail due to an incorrect port protocol, ensuring seamless and reliable asset identification.

Siemens Device Detection via SNMP: Expanded our passive and active discovery capabilities by enabling SNMP-based detection for Siemens equipment. This provides a reliable, non-intrusive alternative for identifying Siemens hardware, ensuring even better coverage and accuracy in your industrial asset inventory.

Security & Dependency Modernization: Upgraded core system dependencies to maintain a highly secure and optimized platform environment.

Blazing-Fast 10-Minute Traffic Aggregations: To support high-speed rendering of dashboards in high-volume plants, all global traffic charts now query a dedicated 10-minute pre-aggregated materialized view (_10m) rather than parsing raw flows. This results in near-instant load times for network traffic trend views.
Extended Historic Traffic Range: Expanded historical dashboard lookups to seamlessly request and display traffic data spanning beyond 25 hours, offering deeper forensic timelines for operational audits.
Top 5 Protocols Breakdown: Introduced a new global traffic widget highlighting a breakdown of the top 5 protocols active across your networks, simplifying protocol-level auditing at a glance.
Traffic Resilience Improvements: Ensured that network flows are successfully ingested even if the protocol cannot be parsed (gracefully omitting null values), preventing ingestion pipeline bottlenecks and maintaining uninterrupted flow capture.
UI & Documentation Polish: Fixed component naming inconsistencies across the documentation and corrected visual UI elements to ensure a clean and intuitive user experience.

Improved Siemens S7 PLC Connectivity: Resolved authentication-related issues that were hindering discovery and data retrieval for Siemens S7 PLCs. This fix ensures more stable and reliable communication with these core industrial controllers during automated inventory scans.

Optimized Network Flow Chunking: Following the initial implementation in v5.0.1, we have standardized the transmission size. This specific chunk size provides the optimal balance between network throughput and messaging server stability.
High-Concurrency Ingestion (ILP Pool): Implemented an ILP (Influx Line Protocol) pool to manage data writes more efficiently. This allows multiple internal processes (goroutines) to write traffic data simultaneously without conflicts, significantly increasing the backend’s ingestion capacity.

Dependency and Build Maintenance: Upgraded core libraries and removed unused code to maintain a lean and secure system architecture.

Improved Messaging Reliability: Network flows are now transmitted in chunks to the backend to prevent overloading the messaging server. This ensures reliable data ingestion even in high-traffic OT environments where thousands of flows are processed simultaneously.
Hardened Network Flow Processing: Resolved several errors related to network flow ingestion and refined the handling of protocol data. If a specific protocol cannot be identified for a connection, the value is now gracefully omitted to maintain data integrity.
Automated Dashboard Refresh: Materialized views, which power our high-speed traffic dashboards, are now updated every 10 minutes for all received network flows. This ensures that the insights you see in the console are always fresh and accurately reflect recent network behavior.
Calendar-Aligned Data Retention: Aligned the TTL (Time To Live) for network flow data with the calendar. This simplifies data retention management, making it easier for administrators to predict when historical data will be aged out.

UI Framework Upgrade: The On-Prem Console has been upgraded to its latest version. This major framework update improves overall application performance, accessibility, and provides a more modern foundation for future interface enhancements.
Configurable Inventory Limits: Introduced the ability to configure resource limits for the inventory. This gives organizations granular control over how many assets are tracked, helping to manage system resources effectively in massive deployments.
Vulnerability View Refinement: Updated the CVE Details view by replacing the semi-circle progress bars with a cleaner, linear progress design. This improves the readability of risk scores and exposure metrics.
Infrastructure & Stability Fixes:
- Resolved an issue with the Collapse UI component to ensure smooth navigation within resource details.

System-Wide Dependency Updates: Upgraded core libraries and frameworks to ensure the platform remains secure, performant, and compatible with the latest industrial security standards.

Granular Network Flow Aggregation (Ports): Network traffic aggregation now includes source and destination ports. Building on the initial traffic visualization introduced in v2.0.0, this enhancement provides deeper visibility into the specific services and industrial protocols being used across your network, enabling more precise troubleshooting and threat detection.
Increased Discovery Performance: Restored the default discovery parallelism to 64 concurrent scans. Following the memory optimizations implemented in v4.7.4 (specifically the use of smaller mmaped AF_SOCKETS), the sensor can now safely handle a higher volume of simultaneous network checks without sacrificing stability.

High-Fidelity Traffic Analysis: With the addition of port data from the sensor, the console’s traffic views (including the Sankey and connection maps) now offer a more comprehensive understanding of device-to-device communications.