Release Notes for Threat Prevention

Important Notes

With this release, Threat Prevention on SRM 1.2.5 will no longer receive updates to its signature database, as the upstream data source is no longer formally supported. All signatures will remain active, but there will be no further new signatures from future updates on SRM 1.2.5.  If you're using an RT2600ac or MR2200ac, please upgrade to SRM 1.3.1 and install the latest version of Threat Prevention to ensure your router continues to receive the latest threat signature updates and remains fully protected.

Fixed Issue

Fix the issue that newly installed Threat Prevention will not be able to start.

Important Note

1. The update will be available for selected regions within the following weeks, although the release time in each region may vary slightly.
2. This update is only applicable for RT2600ac models.

Fixed Issues

1. Fixed the issue where the map in Threat Prevention on SRM 1.2.5 might not display properly when using Safari.
2. Fixed the issue where the map in Threat Prevention on SRM 1.2.5 could not be adjusted properly.

Important Note

The update will be available for selected regions within the following weeks, although the release time in each region may vary slightly.

Fixed Issues

1. Fixed the issue where Internet connection speed might be slow after Threat Prevention was enabled.
2. Fixed an issue where the Threat Prevention might be unable to scan.
3. Fixed the issue where the Statistics page might be unable to display the map.

Important Note

1. This update is not applicable for RT6600ax models. After this update, new installations will no longer support ET Pro. If you are currently using ET Open, ET Pro will no longer be available as an option. If you are currently using ET Pro, it will still be usable after this update.

Important Note

1. This update is not applicable for RT6600ax models. After this update, new installations will no longer support ET Pro. If you are currently using ET Open, ET Pro will no longer be available as an option. If you are currently using ET Pro, it will still be usable after this update.

Fixed Issues

1. Fixed an issue where the overview page showed a blank page when the display language was set to Swedish.

Compatibility & Installation

1. ThreatPrevention 1.3.1-0905 requires SRM 1.3.1 or above.

What's New

1. Updated to support VLAN-related functions.
2. Updated the Suricata threat detection engine to version 6.0.3.
3. Supports automatically archiving past event logs when updating packages to reduce the update time.
4. Added network stability priority mode to avoid network disruptions when packets exceed the system's processing capacity.

Fixed Issues

1. Fixed an issue where Google Voice traffic would be incorrectly blocked by its signature.
2. Fixed a security vulnerability regarding Suricata (CVE-2021-45098).

Fixed Issues

1. Fixed the issue where Threat Prevention failed to build the database.

Fixed Issues

1. Optimized the efficiency of building the signature database.
2. Updated the Suricata threat detection engine to version 4.1.10.
3. Fixed an issue where the drop-down menus of source/destination IPs might incorrectly display the WAN interface during the setup of signature policies with Smart WAN load balancing enabled.
4. Minor bug fixes.

Fixed Issues

1. Fixed the issue where the device list might fail to be displayed at the Settings > Device tab after SRM is updated to 1.2.4.

Important Note

1. The update will be available for all regions within the following days, while the release time in each region may vary slightly.
2. Adjusted the default notification settings: only signatures labeled as "high severity" will trigger notifications by default (except for user-defined notification settings).

What's New

1. Added support to auto-detect the condition of signature database and automatically rebuild the damaged database.
2. Added the timestamp of an event to notification mails.
3. Updated Suricata threat detection engine to 4.1.4.

Fixed Issues

1. Fixed the issue where a single event might trigger multiple notifications.
2. Fixed the issue where the configurations might not be restored properly when database update is running at the same time.
3. Fixed the issue where database updates might fail owing to the inconsistency of signature classes between new and old databases.
4. Fixed the issue where the status on the Overview page might wrongly become "Service stopped" for a while if Synology Router is restarted during a database update.
5. Fixed multiple security vulnerabilities regarding Threat Prevention (CVE-2019-16410 and CVE-2019-15699).
6. Minor bug fixes.

Fixed Issues

1. Fixed the issue where a signature database update might cause incorrect update status.
2. Fixed the issue where the system status might be incorrect if Synology Router is restarted during a signature database update.
3. Fixed the issue where event notifications might be duplicated.
4. Fixed the issue where restoration will fail when database update is also ongoing.
5. Fixed the issue where restoration might fail if signatures in the database are modified or deleted.
6. Minor bug fixes.

Fixed Issues

1. Fixed the issue where some signatures detect packets from ".to" domain and Cloudflare DoH as risky events.

Compatibility & Installation

1. Threat Prevention 1.2.1-0774 is compatible with SRM 1.2.3 and above.

Fixed Issues

1. Fixed the issue where Threat Prevention might not work properly if the signatures contain specific characters.

Compatibility & Installation

1. Threat Prevention 1.2.0-0772 is compatible with SRM 1.2.3 and above.

What's New

1. Users can now copy the content on the event page.

Fixed Issues

1. Fixed the issue where the map in statistics might not show properly during the update of geographic database.
2. Fixed the issue where the event page might now show properly.
3. Fixed the issue where the timestamp of event might not be correct in daylight saving time.
4. Fixed the issue where the guest network might not be included by the Threat Prevention settings.
5. Enhanced system performance by reducing the memory usage.
6. Fixed the issue where the database might be corrupted after the interruption of signature database update.
7. Fixed the issue where the notification settings might not be applied properly.
8. Fixed the issue where a device which is not online might still display in the list.
9. Fixed the issue where the log storage settings might not be applied properly after the restoration of configuration.
10. Fixed the issue where the signature database might be corrupted after a self-defined policy is set up.
11. Users are now unable to change settings for certain signatures.
12. Minor bug fixes.

Compatibility & Installation

1. Threat Prevention 1.1.0-0760 is compatible with SRM 1.2.1 and above.

What's New

1. Added support for whitelist functions, limiting Threat Prevention protection to designated devices.
2. Added support for running Threat Prevention in Wireless AP mode.

Fixed Issues

1. Reduced the memory usage.
2. Fixed an issue where Threat Prevention pages might not function properly when a large number of events occur.
3. Fixed issues regarding signature schedules, names, and status displays.
4. Fixed an issue where destination IPs are not included in the Source Country count in the Statistics page.
5. Added a notification to the Overview page indicating the network is healthy.
6. Fixed an issue where traffic form the corresponding interfaces might not be filtered when an LTE dongle is in use.
7. Fixed an issue where the source and destination IPs of events are not shown simultaneously.

Limitation and Known Issues

1. Threat Prevention is not supported on RT1900ac models running Wireless Client mode and RT2600ac models running Wireless repeater mode.
2. In Wireless AP mode, please connect the uplink cable to the WAN port of the router to assure functionality.
3. Events generated by Intrusion Prevention will not be migrated.

Fixed Issues

1. Fixed an issue where the throughput of Threat Prevention may drop after self-defined policies are added or signatures are updated.

Fixed Issues

1. Fixed an issue where the time of events might be wrongly displayed on Safari.

2. Fixed an issue where the migration status might be wrongly displayed when Threat Prevention migrates from Intrusion Prevention.

Compatibility & Installation

1. Threat Prevention 1.0.0-0738 is only compatible with SRM 1.2 and above.

What's New

1. Fixed performance issues and reduced the CPU and memory usage.

2. Supports trend charts of detected malicious packets.

3. Supports batch setting for changing the action of multiple signatures.

4. Supports setting dropping high-severity packets automatically as default.

5. Supports the importing and exporting of Threat Prevention settings files.

6. Supports policy changing of triggered events.

7. Supports the listing of devices which need concern.

8. Supports the self-defined policy page to manage all modified classes or signatures.