Skip to content
Docs
Release Notes
Serie v6.2.x

Serie v6.2.x

v6.2.21 (2026-10-14)

Sensor

  • Fewer False Port Scan Alerts: Port scan detection now only scores a device once it has contacted at least 15 destination ports, so devices that talk to a handful of ports no longer raise port scan alerts.

v6.2.20 (2026-10-13)

Sensor

  • DNP3 and BACnet/IP Traffic Recognized: Network traffic now identifies DNP3 (TCP and UDP 20000) and BACnet/IP (UDP 47808) by protocol name.

v6.2.19 (2026-10-13)

Sensor

  • IEC 104 and MQTT Traffic Recognized: Network traffic now identifies IEC 60870-5-104 (TCP 2404) and MQTT (TCP 1883) by protocol name.

On-Prem Console

  • HTTPS Traffic Rule Removed: The HTTPS traffic detection rule and its compliance control have been removed from the rule catalog and from every benchmark. Alerts and findings it produced have been cleared.

v6.2.18 (2026-10-13)

Sensor

  • No More Dropped Traffic for Unrecognized Protocols: When a packet carries a protocol the sensor does not decode, it is now kept and labeled by its transport (TCP or UDP) instead of being discarded. NTP traffic is now recognized as well.

  • HTTP Traffic Recognized: Network traffic now identifies HTTP by protocol name.

On-Prem Console

  • New NIS2 Compliance Benchmark for Cyprus: Added support for auditing against Cyprus’s transposition of the NIS2 risk-management measures, with the existing controls already mapped to its requirements.

  • HTTP Traffic Rule Removed: The HTTP traffic detection rule and its compliance control have been removed from the rule catalog and from every benchmark. Alerts, findings, and accepted risks tied to it have been cleared.

v6.2.17 (2026-10-09)

Sensor

  • Detection of Siemens S7 Program Changes: New rules alert when someone downloads a program to an S7 PLC, uploads a program from it, or sends it a PLC Control command such as activating or deleting a block. The PLC Control alert names the exact command so you can tell them apart without opening a capture.

  • RDP Traffic Recognized: Network traffic now identifies Remote Desktop (RDP) by protocol name.

v6.2.16 (2026-10-08)

Sensor

  • Fixed Modbus Detection: Modbus traffic is correctly identified again.

On-Prem Console

  • Easier Access to Sensor Health: The sensors page is now reachable from the overview, shows when each sensor last reported and when its host booted, and charts its resource usage more clearly.

v6.2.15 (2026-10-07)

On-Prem Console

  • Sensor Host Health Charts: A new sensors page charts memory, swap, CPU load, and uptime for each sensor host over the last 7 days.

  • New NIS2 Compliance Benchmark for Belgium: Added support for auditing against Belgium’s transposition of the NIS2 risk-management measures.

v6.2.14 (2026-10-05)

Sensor

  • Sensor Host Health Reporting: Sensors now report memory, swap, CPU, and uptime of the host they run on every minute, so you can see when a sensor appliance is under pressure.

On-Prem Console

  • New NIS2 Compliance Benchmarks for Czechia, Croatia, Hungary, Luxembourg, Malta, and Slovenia: Added support for auditing against each country’s transposition of the NIS2 risk-management measures, with the existing controls already mapped to their requirements.

v6.2.13 (2026-10-02)

Sensor

  • Fixed Sensor Package Name: The sensor Debian package is published under the correct name again.

v6.2.10 (2026-10-02)

Sensor

  • Anomaly Models Update Without a Restart: Sensors now pick up freshly retrained anomaly detection models automatically and keep them on disk, so detection resumes right away after a sensor restart instead of waiting for models to download again.

On-Prem Console

  • New NIS2 Compliance Benchmarks for Greece, Latvia, and Romania: Added support for auditing against each country’s transposition of the NIS2 risk-management measures.

v6.2.9 (2026-09-30)

Sensor

  • Fewer Duplicate Anomaly Alerts: Machine-learning alerts are now deduplicated per device and rule, so one ongoing behavior no longer produces a stream of repeated alerts.

  • More Accurate Anomaly Alert Source IPs: The source IP on machine-learning alerts is now resolved from your inventory.

  • More Accurate Port Scan Detection: The port scanning rule now trains only on unicast traffic, which cuts false alerts caused by broadcast and multicast chatter.

On-Prem Console

  • New NIS2 Compliance Benchmarks for Austria, Bulgaria, Lithuania, and Poland: Added support for auditing against each country’s transposition of the NIS2 risk-management measures.

v6.2.8 (2026-09-30)

Sensor

  • Improved Port Scan Detection: The port scanning rule now looks at ratios in traffic rather than raw counts, so it tells scans apart from busy but normal devices more reliably.

On-Prem Console

  • Faster Inventory: The asset inventory is now refreshed on every snapshot and served from a precomputed table, so inventory pages load faster.

v6.2.7 (2026-09-28)

Sensor

  • Faster Recovery After Losing the Cloud Connection: Sensors now shut down cleanly and reconnect to the cloud with exponential backoff, so they come back quickly after an outage without hammering the server.

  • More Reliable Traffic Upload: Network flows are now sent to the cloud in chunks, so large bursts of traffic no longer fail to upload.

v6.2.6 (2026-09-25)

On-Prem Console

  • Updated Siemens Device Catalog: Device fingerprinting recognizes more Siemens models.

v6.2.5 (2026-09-25)

Sensor

  • Lower Sensor Memory Usage for Anomaly Models: The sensor now sizes its anomaly model cache by actual memory use, keeping its footprint under control on small appliances.

  • Richer Port Scan Model: The port scanning model now learns from more traffic characteristics, improving its accuracy.

v6.2.4 (2026-09-24)

Sensor

  • Reworked Port Scan Detection: The port scanning rule now evaluates network flows directly, improving detection of scans across your network.

On-Prem Console

  • Distinct Display for Machine-Learning Alerts: Alerts raised by anomaly detection now render with their own layout, so it is clear why they fired.

  • More TISAX Evidence Types: More TISAX requirements now accept evidence uploads.

  • Cleaner Vendor and Device Charts: Unknown devices and vendors are grouped under “Others” so charts highlight what you actually have.

  • Faster Anomaly Model Training: Anomaly detection models are trained incrementally, so they get ready sooner.

  • Fixed Large Evidence Uploads: Evidence files up to 6 MB now upload correctly.

  • Fixed Rule Actions in Compliance: Compliance no longer shows a rule action that does not match the rule’s current state.

  • Fixed Flow View for New Devices: New devices now open in the network flow view.

  • Fixed Empty Network Captures: A network capture that returns no data no longer shows a validation error.

v6.2.3 (2026-09-21)

Sensor

  • Automatic Sensor Updates: Sensors installed from the Debian package now check for and install updates every 8 hours, and restart cleanly on install or upgrade, so they stay current even when they cannot reach the cloud.

  • Fixed Traffic With Missing MAC Addresses: Traffic without a source or destination MAC address is now handled correctly instead of being dropped.

On-Prem Console

  • New NIS2 Compliance Benchmarks for Denmark, Finland, France, Ireland, Italy, the Netherlands, and Sweden: Added support for auditing against each country’s transposition of the NIS2 risk-management measures.

  • New Controls: Added controls that flag devices exposing remote administration (RDP, VNC, SSH) and devices exposing cleartext management protocols (Telnet, FTP, HTTP) where an encrypted alternative exists. Both are mapped to the relevant NIS2, IEC 62443, CIS, ENS, and NIST requirements.

Agentic OTSPM

  • Act on Compliance From the Assistant: The assistant can now attach compliance evidence, mute and unmute findings, and enable or disable rules. A new skill walks through improving your compliance score based on the gap analysis.

  • Fixed Benchmark Lookups: Looking up a benchmark through the assistant, including TISAX and ENS, now returns correct results.

v6.2.2 (2026-09-17)

On-Prem Console

  • Clickable Overview: The KPIs and distribution charts on the Overview now take you to the matching filtered list, for example running or stopped devices, or a given vendor.

Agentic OTSPM

  • Clearer Benchmark Requirements: Requirement descriptions that contain numbered lists now show each item on its own line.

v6.2.1 (2026-09-17)

Sensor

  • More Reliable Sensor Process Recovery: The sensor service now integrates with a systemd watchdog that detects when the agent process itself stops responding and restarts it automatically.

v6.2.0 (2026-09-17)

Sensor

  • Automatic Recovery When a Sensor Hangs: Sensor appliances now enable a hardware watchdog, and a kernel panic now triggers an automatic reboot, so a wedged sensor recovers on its own instead of needing someone to power cycle it on site.

  • More Efficient Anomaly Detection: Machine-learning based detection rules now evaluate traffic in flow windows instead of packet by packet, improving efficiency without losing detection accuracy.

Serie v6.1.x