Fireware XTM v11.4.1 CSP4

For XTM 1050, 8-series, 5-series, 2-series

Build # 320253

WSM v11.4.1 or higher is needed to manage a Firebox running Fireware XTM 11.4.1 CSP.
11.4.1 CSP releases are cumulative,  CSP4 includes the resolved issues from CSP 1 , 2 and 3.  



Resolved Issues:
CSP1:

BUG60217: Force failover on Master in A/P cluster - Master goes to Idle status
BUG60619: Mac address flapping on VLAN with FireCluster A/P

CSP2:

BUG59684: Resolved issue causing a Single firebox configured for Firecluster to fail to become Master. 
	  Additional fixes for BUG60217  Master become idle after failover
BUG60741  SSLVPN Multi AD Group - Traffic drops for non-SSLVPN-Users Group members 
BUG60480: zero route tunnel, remote side XTM unable to update GAV/IPS signature 
BUG60631: IPS set to block sites list does not expire 
BUG60940: Intermittently Firebox fails to send quarantined emails to the quarantine server

CSP3:	

BUG61227, BUG61157:   Traffic monitor blank after CLI login or PPTP connection
BUG56166: DYNDNS fails to resolve properly when using Zero route BOVPN tunnel
BUG61352: Firewall rules not being applied to traffic between two VLAN interfaces bridged together by using 	  	   	  same VLAN ID. 
BUG58141: Firebox stops sending traffic over BOVPN due to xfm_dst_cache becoming full
BUG61060: Mobile VPN with IPSec fails to connect when using previously generated certificates after upgrade to 	  	  	  11.4.x
BUG59214: Improve deny error message for second login attempt when limiting Users to a single login session.
BUG60045: Some log message not being displayed in syslogs
BUG61291: Download failing through HTTP Proxy with enabled GAV
BUG58097: Custom SOAP web application fails after 255 requests through HTTP Proxy

CSP4: 

BUG61585: Traffic via intra-vlan firewall rules fails when IPS is enabled. 
BUG61158: ip_dst_cache clean up time values have been shorted to prevent the ip_dst_cache from becoming full and 	          causing dropped packets.   
BUG61380: Shrewsoft IPsec client does not work with certificates
BUG61117: PPTP authentication challenges and connections not cleared and stopping new connections.  
BUG59479: Resolved issue causing some VoIP traffic to fail to pass through BOVPN tunnels due to Tos bit being 	  	  	  set on VoIP client.   




Description of v11.4.1 files available for download:


XTM_OS_1050_11_4_1.exe   -- appliance firmware to install 1050 sysa-dl file on your PC to upload to the 1050 using policy manager or the WebUI

XTM_OS_XTM2_11_4_1.exe   -- appliance firmware to install sysa-dl file on your PC to upload to the XTM 2-series using policy manager or the WebUI

XTM_OS_XTM5_11_4_1.exe   -- appliance firmware to install sysa-dl file on your PC to upload to the XTM 5-series using policy manager or the WebUI

XTM_OS_XTM8_11_4_1.exe   -- appliance firmware to install sysa-dl file on your PC to upload to the XTM 8-series using policy manager or the WebUI