NIOS 7.0.1 Release Notes - custhelp.com

NIOS 701 Release Notes

copy 2015 Infoblox Inc All Rights Reserved All registered trademarks are property of their respective owners Page 1 of 21 400-0579-001 Rev A 1212015

INTRODUCTION 2

Supported Platforms 2

NEW FEATURES 5

NIOS 700 5

CHANGES TO DEFAULT BEHAVIOR 7

NIOS 700 7 NIOS 6x Releases 7

CHANGES TO Infoblox API and RESTful API 7

RESTful API Deprecation and Backward Compatibility Policy 8 NIOS 70x 8 NIOS 6x Releases 8

UPGRADE GUIDELINES 9

Upgrading to NIOS 70x 9

BEFORE YOU INSTALL 10

ACCESSING GRID MANAGER 12

ADDRESSED VULNERABILITIES 12

RESOLVED ISSUES 13

Fixed in 701 13 Fixed in 700 13

KNOWN GENERAL ISSUES 16

NIOS 701 Release Notes

copy 2015 Infoblox Inc All Rights Reserved All registered trademarks are property of their respective owners Page 2 of 21 400-0579-001 Rev A 1212015

INTRODUCTION Infoblox NIOS 70x software coupled with Infoblox appliance platforms enables customers to deploy large robust manageable and cost-effective Infoblox Grids This next-generation solution enables distributed delivery of core network servicesmdashincluding DNS DHCP IPAM TFTP and FTPmdashwith the nonstop availability and real-time service management required for todayrsquos 24x7 advanced IP networks and applications Please note the following

bull NIOS 70x releases are not supported on the following appliances IB-250-A IB-550-A IB-1050-A IB-1550-A IB-1552-A IB-1852-A IB-2000 IB-2000-A IB-VM-250 IB-VM-550 IB-VM-1050 IB-VM-1550 IB-VM-1850 IB-VM-2000 and Trinzic Reporting TR-2000 series appliances You cannot upgrade to NIOS 70x on these appliances See Upgrade Guidelines on page 9 for additional upgrade information

bull NIOS 70x releases do not support the IF-MAP service You cannot upgrade Infoblox Orchestration Servers to NIOS 70 and later The IF-MAP service is supported in 51r2-IBOS-1 600-IBOS-1 IBOS 210 and later releases For more information visit the Infoblox Support web site at httpssupportinfobloxcom

Supported Platforms Infoblox NIOS 70x is supported on the following platforms bull NIOS Appliances

- Infoblox Advanced Appliances PT-1400 PT-2200 and PT-4000 - Network Insight Appliances ND-800 ND-1400 ND-2200 and ND-4000 - Trinzic Appliances TE-100 TE-810 TE-820 TE-1410 TE-1420 TE-2210 TE-2220 and Infoblox-4010 - All Trinzic Rev-1 and Rev-2 appliances (For more information about Trinzic Rev-2 appliances refer to

KB article 17748 available on the Infoblox Support web site at httpssupportinfobloxcom) - Cloud Network Automation CP-V800 CP-V1400 and CP-V2200 - Trinzic Reporting TR-800 TR-1400 TR-2200 and TR-4000 - Infoblox-4030 DNS Caching Accelerator Appliance

bull vNIOS for VMware on ESXESXi Servers

The Infoblox vNIOS on VMware software can run on ESX or ESXi servers that have DAS (Direct Attached Storage) or iSCSI (Internet Small Computer System Interface) or FC (Fibre Channel) SAN (Storage Area Network) attached You can install the vNIOS software package on a host with VMware ESX or ESXi 41 50 51 or 55 installed and configure it as a virtual appliance Note that IB-VM-100 virtual appliances can only run on ESXi 51 servers vSphere vMotion is also supported You can migrate vNIOS virtual appliances from one ESX or ESXi server to another without any service outages The migration preserves the hardware IDs and licenses of the vNIOS virtual appliances VMware Tools is automatically installed for each vNIOS virtual appliance Infoblox supports the control functions in VMware Tools For example through the vSphere client you can shut down the virtual appliance You can deploy certain vNIOS virtual appliances with different hard disk capacity Some vNIOS appliances are not supported as Grid Masters or Grid Master Candidates Note that the IB-VM-800 and IB-VM-1400 virtual appliances are designed for reporting purposes For more information about vNIOS on VMware refer to the Infoblox Installation Guide for vNIOS Software on VMware For information about vNIOS virtual appliances for reporting refer to the Infoblox Installation Guide for vNIOS Reporting Virtual Appliances

NIOS 701 Release Notes

copy 2015 Infoblox Inc All Rights Reserved All registered trademarks are property of their respective owners Page 3 of 21 400-0579-001 Rev A 1212015

bull vNIOS for Microsoft Server 2008 R2 and 2012 R2 Hyper-V The Infoblox vNIOS virtual appliance is now available for Windows Server 2008 R2 and Windows Server 2012 R2 that have DAS (Direct Attached Storage) Administrators can install vNIOS virtual appliance on Microsoft Windowsreg servers using either Hyper-V Manager or SCVMM A Microsoft Powerscript is available for ease of installation and configuration of the virtual appliance Note that vNIOS for Hyper-V is not recommended as a Grid Master or Grid Master Candidate With this release you can deploy certain vNIOS appliances with a 50 GB 55 GB or 160 GB hard disk You can also deploy the IB-VM-800 and IB-VM-1400 virtual appliances as reporting servers For more information about vNIOS for Hyper-V refer to the Infoblox Installation Guide for vNIOS on Microsoft Hyper-V

bull vNIOS for Xen Hypervisor The Infoblox vNIOS for Xen is a virtual appliance designed for Citrix XenServer 61 and 62 running Xen hypervisor and for Linux machines running Xenprojectorg 43 hypervisor You can deploy vNIOS for Xen virtual appliances as the Grid Master Grid members or reporting servers depending on the supported models Note that the IB-VM-800 virtual appliances are designed for reporting purposes only For more information about vNIOS for Xen refer to the Infoblox Installation Guide for vNIOS for Xen Hypervisor For information about vNIOS virtual appliances for reporting refer to the Infoblox Installation Guide for vNIOS Reporting Virtual Appliances

The following table shows available vNIOS virtual appliances and their specifications

Trinzic Series Virtual Appliances

Disk (GB)

of CPU Cores

Memory Allocation

Virtual CPU Core Frequency

vNIOS for VMware

vNIOS for MS Hyper-V

vNIOS for Xen

Supported as Grid Master and Grid Master Candidate (YesNo)

IB-VM-100 55 1 1 GB 1300 MHz No

IB-VM-800 (for reporting only

1 GB daily limit)

50 2 Range 2 ndash 8 GB

Default 8 GB

3000 MHZ No

IB-VM-800 (for reporting only

2 GB daily limit)

50 2 Range 4 ndash 8 GB

Default 8 GB

3000 MHZ No

IB-VM-810 55 2 2 GB 2000 MHz No

IB-VM-810 160 2 2 GB 2000 MHz Yes

IB-VM-820 55 2 2 GB 3000 MHz No

IB-VM-820 160 2 2 GB 3000 MHz Yes

IB-VM-1400 (for reporting only

5 GB daily limit)

55 4 Default 8 GB

8000 MHz No

IB-VM-1410 55 4 8 GB 6000 MHz No

NIOS 701 Release Notes

copy 2015 Infoblox Inc All Rights Reserved All registered trademarks are property of their respective owners Page 4 of 21 400-0579-001 Rev A 1212015

IB-VM-1410 160 4 8 GB 6000 MHz Yes

IB-VM-1420 160 4 8 GB 8000 MHz Yes

IB-VM-2210 160 4 12 GB 12000 MHz Yes

IB-VM-2220 160 4 12 GB 12000 MHz Yes

Network Insight Virtual Appliances

Disk (GB)

of CPU

Cores

Memory Allocation

Virtual CPU Core

Frequency

vNIOS for

VMware

vNIOS for MS

Hyper-V

vNIOS for Xen

Supported as Grid Master and Grid Master Candidate (YesNo)

ND-VM-800 160 2 8 GB 3000 MHz No

ND-VM-1400 160 4 16 GB 8000 MHz No

ND-VM-2200 160 4 24 GB 24000 MHz No

Cloud Platform Virtual Appliances

Disk (GB)

of CPU

Cores

Memory Allocation

Virtual CPU Core

Frequency

vNIOS for

VMware

vNIOS for MS

Hyper-V

vNIOS for Xen

Supported as Grid Master and Grid Master Candidate (YesNo)

CP-V800 160 2 2 GB 2000 MHz No

CP-V1400 160 4 8 GB 6000 MHz No

CP-V2200 160 4 12 B 12000 MHz No vNIOS for VMware on Cisco UCS ExpressSRE-V

The Infoblox vNIOS on VMware software can also run on Cisco SRE-V (Services Ready Engine Virtualization) which is part of the Cisco UCS (Unified Computing System) Express Infoblox has certified running vNIOS for VMware on Cisco SRE-V v15 (for ESXi 41) and v20 (for ESXi 50) Cisco SRE-V enables the VMware vSphere Hypervisor to be provisioned on Cisco SRE 700710 and 900910 Service Modules The Cisco SRE Service Module can reside in the Cisco 2900 and 3900 series ISRs G2 The following table lists the supported vNIOS on VMware virtual appliances on SRE 700710 and SRE 900910

vNIOS on VMware Virtual Appliances

Disk (GB) of CPU Cores

Memory Allocation

Virtual CPU Core

Frequency

Cisco SRE 700710

Cisco SRE 900910

IB-VM-810 55 2 2 GB 2000 MHz No Yes

IB-VM-810 160 2 2 GB 2000 MHz No Yes

IB-VM-820 55 2 2 GB 3000 MHz No Yes

IB-VM-820 160 2 2 GB 3000 MHz No Yes

NIOS 701 Release Notes

copy 2015 Infoblox Inc All Rights Reserved All registered trademarks are property of their respective owners Page 5 of 21 400-0579-001 Rev A 1212015

Note that all vNIOS on VMware virtual appliances running on Cisco SRE-V are not recommended as Grid Masters or Grid Master Candidates The IB-BOB virtual appliance has been renamed to IB-VM-100 For new installation use the 55 GB software image IB-VM-100 only supports configuration as a Grid member

bull vNIOS on Riverbedreg Steelhead Appliances

Infoblox has certified the vNIOS on Riverbed software with the following Riverbed Steelhead models and software versions

Riverbed Models Supported RiOS and EX versions

1050 2050 5050 RiOS 75 RiOS 80 RiOS 85

EX560 EX760 EX1160 EX1260 EX 10 (RiOS 7) EX 20 (RiOS 80) EX 25 (RiOS 80) EX 30 (RiOS 850) EX 31 (RiOS 851)

For additional information refer to the Infoblox Installation Guide for vNIOS Software on Riverbed Steelhead Platforms NOTE You can upgrade a Grid with a Riverbed virtual member to NIOS 7x Ensure that the Riverbed model has 64 bit support

NEW FEATURES This section lists new features in the 70x releases NIOS 700 Cloud Network Automation The Infoblox Cloud Network Automation solution automates IPAM (IP address management) for physical and virtual network devices on your CMP (Cloud Management Platform) Instead of manually provisioning IP addresses and DNS name spaces for network devices and interfaces you can use Cloud Network Automation to provision and manage IPAM DNS and DHCP within the Grid automatically as VMs (Virtual Machines) are created and destroyed When your Cloud consists of a large number of servers and VMs (virtual machines) that have multiple associated network interfaces manually provisioning and de-provisioning IP addresses and managing DNS and DHCP data can be error-prone and time consuming Utilizing Cloud Network Automation minimizes human errors by streamlining IP Address and DNS record management improves visibility of your cloud networks and maximizes the flexibility efficiency and agility of your cloud environment Cloud Network Automation includes two components the Grid Master that has a Cloud Network Automation license installed and one or more Cloud Platform Appliances The Cloud Network Automation license enables visibility and reporting on cloud tenant network VM IP address and DNS record allocation Cloud Platform Appliances enable processing of API requests from your CMP locally on the same appliances that serve DNS and DHCP to your cloud These appliances provide local survivability and additional scalability of Cloud API requests within your data centers in addition to the visibility provided by the Cloud Network Automation license on the Grid Master DNS Traffic Control Infoblox DNS Traffic Control provides a load balancing solution by adjusting DNS responses based on DNS query source IP server availability and network topology Through DNS Traffic Control you can set up multiple global sites and configure supported objects and load balancing methods to direct responses to the best available servers

NIOS 701 Release Notes

copy 2015 Infoblox Inc All Rights Reserved All registered trademarks are property of their respective owners Page 6 of 21 400-0579-001 Rev A 1212015

Support for IPv6 Grid

The Infoblox appliance now supports IPv6 networking configuration in most deployments You can deploy a Grid and configure a Grid Master Grid Member reporting member and an HA pair in one of the following modes IPv4 only IPv6 only or IPv4 and IPv6 dual mode You can also configure the default communication protocol settings using IPv4 or IPv6 In addition services and functionality such as NTP service DNS Firewall and admin notifications now support both IPv4 and IPv6 addresses In addition Grid communication can now support IPv6 only and you can configure an appliance with only IPv6 addresses (no IPv4 addresses are required) Support for Microsoft Sites This release enhances the Microsoft Management solution by adding support for managing Microsoft Active Directory Sites and Subnets on Microsoft servers through Grid Manager DNS Firewall Enhancements This release adds the following enhancements for DNS Firewall

bull Threat severity levels for RPZ zones bull Threat details in the syslog bull Categorization and filtering for DNS and Advanced DNS Protection syslog messages bull Severity level in the DNS Top RPZ Hits report

Automated Mitigation of Phantom Domain Attacks This release provides a few CLI commands for mitigating phantom domain attacks in which a flood of queries are sent to resolve non-existent domains When phantom domain attacks happen the recursive server continues to query non-responsive servers spending valuable resources waiting for responses When resources are fully consumed the recursive server may drop legitimate queries causing serious performance issues To mitigate phantom domain attacks you can use the following CLI commands to control queries to non-responsive servers set holddown set fetches_per_server set fetches_per_zone and set recursion_query_timeout For information about these commands refer to the Infoblox CLI Guide DNSSEC Enhancement You can now add multiple cryptographic algorithms that the Grid Master uses when it generates the KSK and ZSK When you add multiple algorithms at the Grid level you can override them at the zone level By default the appliance uses RSASHA1 for both KSK and ZSK You can now add DSA RSAMD5 RSASHA1 RSASHA-256 or RSASHA-512 algorithms Configuring Fixed Addresses without Restarting DHCP Service When you configure or modify a fixed address a DHCP service restart is required by default in order for the new configuration to take effect You can now override this default behavior by enabling the appliance to take immediate action without restarting DHCP service when you configure or modify a fixed address that is outside a DHCP range You can enable this feature at the Grid or member level For Cloud Network Automation deployment this feature is automatically enabled on the Cloud Platform Appliance that has a valid Cloud Platform license installed Ignoring MAC Addresses for New Leases In addition to the UID (unique client identifier) you can now set the DHCP server to ignore the MAC address (hardware address) of a DHCP client when it places a request to the DHCP server for a new lease When you configure the appliance to ignore the MAC addresses of DHCP clients you can specify up to 10 MAC addresses to be ignored

NIOS 701 Release Notes

copy 2015 Infoblox Inc All Rights Reserved All registered trademarks are property of their respective owners Page 7 of 21 400-0579-001 Rev A 1212015

Name Server Groups for Delegated Zones When you configure a name server group you can now create a set of external name servers as a delegation name server group and assign it to delegated zones Specifying a single delegation name server group instead of configuring multiple name servers individually for delegated zones can significantly reduce configuration efforts Network Insight Assets for Trunk Reports Device discovery now includes in the Asset tab all hosts (physical and virtual) connected to a trunk port Reporting Enhancement This release adds the capability to email reporting search results Infoblox API and RESTful API Enhancement This release adds newly supported objects for the API and RESTful API CHANGES TO DEFAULT BEHAVIOR This section lists changes to default behavior in NIOS 70x and 6x releases NIOS 700

bull Starting with this release you must have IPv6 addresses for both nodes in an HA pair if one of them has an IPv6 address This was optional in previous releases

bull In previous releases when you apply a non-global DHCP option filter to a DHCP range the appliance may return option 43 in the response Starting with this release the appliance does not return option 43 in any responses when you apply a non-global DHCP option filter to a range

NIOS 6x Releases bull In previous releases you could configure DHCP Option 60 (Vendor Class Identifier) match rules

associated with Microsoft option_space in the Grid or member DHCP properties or DHCP option filters associated with Microsoft option_space Starting with this release these configurations are no longer supported and you cannot configure them

bull Reporting The ldquoDomain Namerdquo and ldquoMitigation Actionrdquo filters are no longer supported in the Top RPZ Hits by Client report

bull In previous releases the appliance added grace period to the KSK (Key Signing Key) and ZSK (Zone Signing Key) rollover periods In this release the rollover periods for a particular zone start as soon as it is signed

bull In previous releases you could assign read-only permission for hosts in a network to restrict admins to only viewing hosts in the specified network In this release assigning read-only permission for hosts in a network does not affect the visibility of hosts in the specified network

CHANGES TO Infoblox API and RESTful API This section lists changes made to the Infoblox API and RESTful API in NIOS releases For detailed information about the supported methods and objects refer to the latest versions of the Infoblox API Documentation and the Infoblox WAPI Documentation available through the NIOS products and on the Infoblox Support web site The latest available RESTful API version is 20

NIOS 701 Release Notes

copy 2015 Infoblox Inc All Rights Reserved All registered trademarks are property of their respective owners Page 8 of 21 400-0579-001 Rev A 1212015

RESTful API Deprecation and Backward Compatibility Policy This policy covers the interfaces exposed by the Infoblox RESTful API and the protocol used to communicate with it

Unless explicitly stated in the release notes previously available RESTful API versions are intended to remain accessible and operative with later versions

The planned deprecation of a given version of the RESTful API will normally be announced in the release notes at least one year in advance Upon deprecation the announced RESTful API version and all prior versions will no longer be supported in subsequent releases For example if the current RESTful API release is v34 and the release notes contain an announcement of the v15 deprecation v14 and v15 API requests would continue to work with later releases for one year from the announcement date After that some or all requests for these deprecated versions may not work with versions later than v15 API requests adherent to versions later than v15 (v20 for example) would continue to work with subsequent releases Infoblox seeks to avoid any deprecation that has not been announced in advance however product modifications and enhancements may affect specific API requests without a prior announcement Infoblox does not warrant that all API requests will be unaffected by future releases This policy applies to both major and minor versions of the RESTful API Infoblox reserves the right to change this policy NIOS 70x

bull When executing a RESTful API request from version 20 and later the XML data format has been updated to accommodate tag names (used primarily in extensible attributes) that contain spaces andor invalid XML characters

NIOS 6x Releases

bull The RESTful API (WAPI) sample code advises using curl -k3 to access the RESTful API through SSLv3 SSLv3 is no longer supported and the ndashk3 option in curl is no longer supported To correctly use curl to access the RESTful API specify curl -k1 to force the use of TLS

bull The following changes for keytabs have been made in the Infoblox API

remove_datakeytab has been removed

import_datakeytab has been removed

import_dataupload_keytab has been added

The API also supports multiple TSIG keys To use a keytab you must upload it and manually assign it to individual members or to DHCP you cannot complete this task in one operation If you have only one keytab you can still use the old gss_tsig members However Infoblox recommends that you switch to the new gss_tsig_keysipv6_gss_tsig_keys members

bull The following objects have been deprecated in the Infoblox API

InfobloxGridMSServerDNS (new object InfobloxGridMSServerServerDNS)

status_last_updated member in InfobloxGridMSServerDNS (new object status_last_updated_ts member in epoc format)

Though the deprecated objects will continue to function for backward compatibility purposes Infoblox recommends that you use the new objects in your new code

bull The InfobloxGridAdminUser object password method and the InfobloxGrid object secret method have been modified to adhere to Infoblox security policies

NIOS 701 Release Notes

copy 2015 Infoblox Inc All Rights Reserved All registered trademarks are property of their respective owners Page 9 of 21 400-0579-001 Rev A 1212015

bull API and RESTful API After upgrading to NIOS 67x all international domain names (IDNs) in punycode are converted to Unicode (in the respective API way of encoding Unicode strings) You can use the dns_[hellip] fields in relevant objects to retrieve read-only IDNs in punycode For more information about IDNs refer to the Infoblox NIOS Administrator Guide For information about API and RESTful API refer to the Infoblox API Documentation and Infoblox RESTful API Documentation

UPGRADE GUIDELINES Upgrading to NIOS 70x NOTES

bull You cannot upgrade NIOS 6124 to NIOS 70x You will however be able to upgrade NIOS 6124 and later to NIOS 71x releases when they become available

bull You cannot upgrade directly from NIOS 5x to NIOS 70x However you can first upgrade to NIOS 66x or later and then to NIOS 70x

You cannot upgrade to NIOS 70x on the following appliances IB-250-A IB-550-A IB-1050-A IB-1550-A IB-1552-A IB-1852-A IB-2000 IB-2000-A IB-VM-250 IB-VM-550 IB-VM-1050 IB-VM-1550 IB-VM-1850 IB-VM-2000 and Trinzic Reporting TR-2000 series appliances For information about supported platforms see Supported Platforms on page 1 Note the following for IPv6 Grid support

bull If your Grid Master is configured with an IPv6 VIP all Grid Master Candidates must also include an IPv6 VIP For an HA pair both nodes of the HA pair must have IPv6 addresses for the Grid Master and the Grid Master Candidate

bull After you upgrade to NIOS 70x Infoblox recommends that you back up the configuration after you change network connectivity to a different mode (IPv4 IPv6 or IPv4 and IPv6 dual mode) Restoring an old backup by performing a forced restore may prevent some Grid members from rejoining the Grid after the restore

bull IPv6-only configuration does not support the following HSM LCD NAT groups OSPF and BGP

When you schedule a full upgrade from a previous release to NIOS 70x the following DNSSEC limitations are applicable

bull You cannot configure new settings that are added to the authoritative zone object while the upgrade is still in progress This restriction is not applicable to future upgrades

bull When you upgrade you can sign or unsign an authoritative zone only if the Grid Master Candidate and the associated serving members are upgraded This restriction is not applicable to future upgrades

bull An authoritative zone can have its KSK rollover only if the Grid Master Candidate and all the serving members are upgraded This restriction is not applicable to future upgrades

bull An authoritative zone can have its ZSK rollover by the daemon only if the Grid Master Candidate and all the serving members are upgraded This restriction is not applicable to future upgrades

bull You cannot delete keys while the upgrade is still in progress bull You cannot update DNSSEC related parameters at the member level while the upgrade is still in

progress Example rollover mechanism NSEC3 salt length and iterations and enable or disable automatic KSK rollover

NIOS 701 Release Notes

copy 2015 Infoblox Inc All Rights Reserved All registered trademarks are property of their respective owners Page 10 of 21 400-0579-001 Rev A 1212015

For Cloud Network Automation bull After upgrading to NIOS 70x you must manually select the Delegated To Cloud Usage

and Owned By columns in the Data Management tab of Grid Manager to display relevant information This is applicable only if you have installed the Cloud Network Automation license on the Grid Master

BEFORE YOU INSTALL To ensure that new features and enhancements operate properly and smoothly Infoblox recommends that you evaluate the capacity on your Grid and review the upgrade guidelines before you upgrade from a previous NIOS release Infoblox recommends that administrators planning to perform an upgrade from a previous release create and archive a backup of the Infoblox appliance configuration and data before upgrading You can run an upgrade test before performing the actual upgrade Infoblox recommends that you run the upgrade test so you can resolve any potential data migration issues before the upgrade Following is a list of upgrade and revert paths You can also schedule a full upgrade from these releases 700 6122 and earlier 612x releases 6117 and earlier 611x releases 610201 and 610200 61010 and earlier 610x releases 69201-LD and 69200-LD 690 6813 and earlier 68x releases 678 and earlier 67x releases 6613 and earlier 66x releases Technical Support Infoblox technical support contact information

Telephone 1-888-463-6259 (toll-free US and Canada) +1-408-625-4200 ext 1

E-mail supportinfobloxcom

Web httpssupportinfobloxcom

GUI Requirements Grid Manager supports the following operating systems and browsers You must install and enable Javascript for Grid Manager to function properly Grid Manager supports only SSL version 3 and TLS version 1 connections Infoblox recommends that you use a computer that has a 2 GHz CPU and at least 1 GB of RAM

NIOS 701 Release Notes

copy 2015 Infoblox Inc All Rights Reserved All registered trademarks are property of their respective owners Page 11 of 21 400-0579-001 Rev A 1212015

Infoblox supports the following browsers for Grid Manager

OS Browser Microsoft Windows 80 and 81reg Microsoft Internet Explorerreg 11x 10x

Mozilla Firefox 32x 31x 25x 21x 16x and 10x Google Chrome 37x 36x 30x 27x 22x and 16x

Microsoft Windows 7reg Microsoft Internet Explorerreg 11x 10x 9x and 8x Mozilla Firefox 32x 31x 25x 21x 16x and 10x Google Chrome 37x 36x 30x 27x 22x and 16x

Microsoft Windows XPreg (SP2+) Microsoft Internet Explorer 7x and 8x Mozilla Firefox 32x 31x 25x 21x 16x and 10x Google Chrome 37x 36x 30x 27x 22x and 16x

Red Hatreg Enterprise Linuxreg 7x Mozilla Firefox 32x 31x 25x 21x 16x and 10x Google Chrome 37x 36x 30x 27x 22x and 16x

Red Hatreg Enterprise Linuxreg 6x Mozilla Firefox 32x 31x 25x 21x 16x and 10x Google Chrome 37x 36x 30x 27x 22x and 16x

Red Hatreg Enterprise Linux 5x Mozilla Firefox 32x 31x 25x 21x 16x and 10x Google Chrome 37x 36x 30x 27x 22x and 16x

Applereg Mac OS X 109x Safari 7x Mozilla Firefox 32x 31x 25x 21x 16x and 10x Google Chrome 37x 36x 30x 27x 22x and 16x

Applereg Mac OS X 108x Safari 6x Mozilla Firefox 32x 31x 25x 21x 16x and 10x Google Chrome 37x 36x 30x 27x 22x and 16x

Applereg Mac OS X 107x Safari 5x Mozilla Firefox 32x 31x 25x 21x 16x and 10x Google Chrome 37x 36x 30x 27x 22x and 16x

Applereg Mac OS X 106x Safari 5x Mozilla Firefox 32x 31x 25x 21x 16x and 10x Google Chrome 37x 36x 30x 27x 22x and 16x

NOTE Grid Manager fully supports Microsoft Internet Explorerreg 11x and 10x when you enable compatibility view in the browser Features in the Reporting tab may not function properly if you disable compatibility view In the browser go to Tools -gt Compatibility View to enable the feature When viewing Grid Manager set the screen resolution of your monitor as follows

Minimum resolution 1280 x 768 Recommended resolution 1280 x 1024 or better

Documentation You can download the Infoblox NIOS Administrator Guide from the appliance From Grid Manager expand the Help panel and then click Documentation -gt Admin Guide Training Training information is available at httpinterviewcentralcomeventsuploadsinfobloxloginhtml

NIOS 701 Release Notes

copy 2015 Infoblox Inc All Rights Reserved All registered trademarks are property of their respective owners Page 12 of 21 400-0579-001 Rev A 1212015

ACCESSING GRID MANAGER Before you log in to Grid Manager ensure that you have installed your NIOS appliance as described in the installation guide or user guide that shipped with your product and configured it accordingly To log in to Grid Manager

1 Open an Internet browser window and enter httpsltIPv4 address or hostname of your NIOS appliancegt or https[IPv6 address] of your NIOS appliance The Grid Manager login page appears

2 Enter your user name and password and then click Login or press Enter The default user name is admin and password is infoblox

3 Read the Infoblox End-User License Agreement and click I Accept to proceed Grid Manager displays the Dashboard your home page in Grid Manager

ADDRESSED VULNERABILITIES This section lists security vulnerabilities that were addressed in the past 12 months For vulnerabilities that are not listed in this section refer to Infoblox KB 2899 For additional information about these vulnerabilities including their severities please refer to the National Vulnerability Database (NVD) at httpnvdnistgov The Infoblox Support website at httpssupportinfobloxcom also provides more information including vulnerabilities that do not affect Infoblox appliances CERT VULNERABILITY NOTE CVE-2014-8500 Failure to place limits on delegation chaining could allow an attacker to crash named or cause memory exhaustion by causing the name server to issue unlimited queries in an attempt to follow the delegation CERT VULNERABILITY NOTE CVE-2014-8104 The OpenVPN community issued a patch to address a vulnerability in which remote authenticated users could cause a critical denial of service on Open VPN servers through a small control channel packet CERT VULNERABILITY NOTE CVE-2014-3566 SSL3 is vulnerable to man-in-the-middle-attacks SSL3 is disabled in NIOS and connections must use TLSv1 (which is already used by all supported browsers)

CERT VULNERABILITY NOTE CVE-2014-3567 A denial of service vulnerability that is related to session tickets memory leaks

CERT VULNERABILITY NOTE CVE-2014-7187 Off-by-one error in the read_token_word function in parsey in GNU BASH through v 43 allowed remote attackers to cause a denial of service (out-of-bounds array access and application crash) or possibly an unspecified impact through deeply nested for loops (also known as the word_lineno issue)

CERT VULNERABILITY NOTE CVE-2014-7186 The redirection implementation in parsey in GNU BASH through v 43 allowed remote attackers to cause a denial of service (out-of-bounds array access and application crash) or possibly an unspecified impact through the redir_stack issue

CERT VULNERABILITY NOTE CVE-2014-6271 CVE-3014-6277 CVE-2014-6278 AND CVE-2014-7169 GNU Bash through v 43 processed trailing strings after function definitions in the values of environment variables which allowed remote attackers to execute arbitrary code via a crafted environment (also known as the ShellShock vulnerability)

NIOS 701 Release Notes

copy 2015 Infoblox Inc All Rights Reserved All registered trademarks are property of their respective owners Page 13 of 21 400-0579-001 Rev A 1212015

CERT VULNERABILITY NOTE CVE-2014-3470 Enabling anonymous ECDH cipher suites on TLS clients could cause a denial of service CERT VULNERABILITY NOTE CVE-2014-0224 A specially crafted handshake packet could force the use of weak keying material in the SSLTLS clients allowing a man-in-the-middle (MITM) attack to decrypt and modify traffic between a client and a server CERT VULNERABILITY NOTE CVE-2014-0221 Remote attackers could utilize DTLS hello message in an invalid DTLS handshake to cause a denial of service CERT VULNERABILITY NOTE CVE-2014-0198 Enabling SSL_MODE_RELEASE_BUFFERS failed to manage buffer pointer during certain recursive calls that could cause a denial of service CERT VULNERABILITY NOTE CVE-2014-0195 Remote attackers could trigger buffer overrun attack through invalid DTLS fragments to an OpenSSL DTLS client or server resulting in a denial of service CERT VULNERABILITY NOTE CVE-2014-0591 A crafted query against an NSEC3-signed zone could cause the named process to terminate RESOLVED ISSUES The following issues were reported in previous NIOS releases and resolved in this release The resolved issues are listed by severity For descriptions of the severity levels refer to Severity Levels on page 16 Fixed in 701

ID Severity Summary

NIOS-51535 Major An IPv6 address configured before NIOS 640 was not properly preserved during an upgrade to NIOS 700 which caused an error during product initialization

Fixed in 700

ID Severity Summary

NIOS-50432 Critical Addressed zone journal file size issues that caused DNS service to slow down

NIOS-50295 Critical After a DIW import there were some missing delegations and records in the Grid data set

NIOS-50162 NIOS-50124

Critical Under certain circumstances intermittent DNS service interruptions occurred

ID Severity Summary

NIOS-51186 Major DNS failed to respond to some queries due to new limits exposed by CVE-2014-8500

NIOS-51051 Major DNS service interruptions occurred after changing RPZ records

NIOS 701 Release Notes

copy 2015 Infoblox Inc All Rights Reserved All registered trademarks are property of their respective owners Page 14 of 21 400-0579-001 Rev A 1212015

NIOS-50894 Major Updated the Infoblox NIOS Administrator Guide to include information about virtual TFTP root is supported only for file downloads but not for file uploads using TFTP client

NIOS-50784 Major Addressed the following OpenVPN vulnerability CVE-2014-8104 The OpenVPN community issued a patch to address a vulnerability in which remote authenticated users could cause a critical denial of service on Open VPN servers through a small control channel packet

NIOS-50532 Major Addressed the following vulnerabilities CVE-2014-8500 Failure to place limits on delegation chaining could allow an attacker to crash named or cause memory exhaustion by causing the name server to issue unlimited queries in an attempt to follow the delegation

NIOS-50617 NIOS-49810

Major Grid Manager inappropriately marked IPv6 leases as having invalid MAC addresses

NIOS-50575 Major NIOS did not show the root domain for Microsoft servers belonging to two Domains in the same Forest

NIOS-50567 Major DIW failed to handle common CNAME records in different DNS views

NIOS-50453 Major Added information about HA Grid Master providing NTP service through VIP to the Infoblox NIOS Administrator Guide

NIOS-50402 Major Under certain circumstances NIOS returned option 43 in the response when users applied a non-global IPv4 option filter to a DHCP range

NIOS-50250 Major Unable to remove a Grid from the Master Grid

NIOS-50208 Major On some occasions the inheritance state for inherited extensible attributes was displayed as ldquooverriddenrdquo instead of ldquoinheritedrdquo

NIOS-50199 Major Unable to modify a DHCP scope that was synchronized from a Microsoft DHCP failover partner

NIOS-50171 Major Users could not convert a lease to a fixed address without the ldquoNetwork Discoveryrdquo permission which was not required

NIOS-50137 Major VLAN tagging was not functional properly on the HA interface

NIOS-50112 Major High CPU usage on Captive Portal caused by the ldquoomshellrdquo process

NIOS-50081 Major Unable to add the same IPv6 loopback address on other Grid members when the IPv6 address is already configured on the Grid Master

NIOS-50057 Major DHCP service interruptions occurred after an upgrade due to issues related to disabled Grid members in a MAC address filter

NIOS-50052 Major Addressed the following SSL 30 vulnerability CVE-2014-3567 A denial of service vulnerability that is related to session tickets memory leaks

NIOS-49962 Major Unable to edit and save Upgrade Schedule

NIOS-49941 Major In a Multi-Grid configuration the Master Grid experienced high swap usage while processing a lot of data

NIOS-49935 Major Under certain circumstances exporting visible data from Grid Manager could fail for a zone

NIOS 701 Release Notes

copy 2015 Infoblox Inc All Rights Reserved All registered trademarks are property of their respective owners Page 15 of 21 400-0579-001 Rev A 1212015

NIOS-49934 Major API On rare occasions searching with return_methods could result in incorrect PAPI results

NIOS-49847 Major The appliance returned an error when users tried to disable GSS-TSIG and remove the keys

NIOS-49826 Major Could not start DNS service on the Grid Secondary for a zone that had an external Primary while moving the LAN2 IP address from one member to the other

NIOS-49809 Major In a network template users could not save values for an extensible attribute that was a ldquolistrdquo type

NIOS-49735 Major The status of a Microsoft server was ldquoConnectingrdquo even when synchronization was in progress

NIOS-49505 Major High disk space usage was observed after enabling ldquoCapture DNS Queriesrdquo and ldquoCapture DNS Responsesrdquo

NIOS-49473 Major On rare occasions the Grid Master rebooted and went offline

NIOS-49349 Major The infobloxlog captured bloxTools user password in plain text

NIOS-49339 Major Grid Manager access was denied due to a missing object in the backup file

NIOS-49137 Major Advanced DNS Protection An unexpected HA failover occurred due to a general protection fault

NIOS-48437 Major DNS latency for DNS responses from cache was higher than usual for a duration of a couple seconds

NIOS-48009 Major A schedule upgrade did not function properly if the HA Grid Master had not replicated the schedule to the passive node before the upgrade started

NIOS-47994 Major DHCP service failed to start due to invalid DHCP option spaces defined in the DHCP configuration file

NIOS-50571 Minor Added descriptions about VLAN tag and DSCP support for TE-1400 series appliances to the Infoblox NIOS Administrator Guide

NIOS-50466 Minor DNS service startup took longer than expected due to journal file fragmentation

NIOS-50430 Minor Redefined the description for ldquoinfoblox-deny-rpzrdquo in the Infoblox NIOS Administrator Guide

NIOS-50401 Minor When associating a network with a Microsoft site an error message was displayed in the background instead of inside the editor

NIOS-50366 Minor Updated the CSV Import Reference to include the file format for ldquoresponsepolicyipaddressrdquo objects

NIOS-50267 Minor Unable to perform a discovery for a Microsoft managed subnet

NIOS-49986 Minor Updated IP addresses used in example in the Infoblox NIOS Administrator Guide

NIOS-49838 Minor Could not transfer support bundle using the transfer_supportbundle command

NIOS-49816 Minor The Discoverer field value was truncated in the IP MAP viewer under the Discovered Data tab

NIOS-49787 Minor The appliance logged excessive debugging messages

NIOS 701 Release Notes

copy 2015 Infoblox Inc All Rights Reserved All registered trademarks are property of their respective owners Page 16 of 21 400-0579-001 Rev A 1212015

NIOS-48037 Minor Value for the extensible attribute ldquoSiterdquo was not displayed in the Lease Selector when

users tried to connect to an auto-provisioned member

NIOS-50399 Enhance Enhanced the ldquoConvertrdquo button to also appear in the IPAM home page

Severity Levels Severity Description

Critical Core network services are significantly impacted Major Network services are impacted but there is an available workaround Moderate Some loss of secondary services or configuration abilities Minor Minor functional or UI issue Enhance An enhancement to the product

KNOWN GENERAL ISSUES

ID Summary

NIOS-51323 DNS Traffic Control The appliance may return a timeout error while loading the Traffic Management tab in Grid Manager if you have configured health monitoring for a lot of DTC servers

NIOS-51287 Cloud Network Automation Modifying resource records through the cloud API will cause extensible attribute values to be removed

NIOS-51235 In a Multi-Grid configuration converting network connectivity for the Master Grid and its sub Grids to IPv6 only is not supported even though Grid Manager may allow you to do so

NIOS-51134 Infoblox appliances currently do not support HP passive copper cables

NIOS-51054 After you upgrade to NIOS 700 Infoblox recommends that you back up the configuration after you change network connectivity to a different mode (IPv4 IPv6 or IPv4 and IPv6 dual mode) Restoring an old backup by performing a forced restore may prevent some Grid members from rejoining the Grid after the restore

NIOS-50997 In this release the appliance does not automatically create a reverse-mapping zones for 1 for DNS servers that support IPv6

NIOS-50873 When you enable DNS and DHCP services for IPv6 only DDNS updates may not function properly for certain configurations Infoblox recommends that you do not enable DDNS updates in an IPv6-only Grid

NIOS-50859 Creating custom IPv6 NS records and pointing a zone to a particular IPv6 name server is not supported in this release

NIOS-50994 Cloud Network Automation When there is no tenant associated with a network or VM or if a network or VM is created by a cloud adapter but the tenant ID is not specified in the cloud API request the Name or ID column for the tenant or VM is left blank in Grid Manager which implies ldquoNArdquo or not applicable for the specified network or VM

NIOS 701 Release Notes

copy 2015 Infoblox Inc All Rights Reserved All registered trademarks are property of their respective owners Page 17 of 21 400-0579-001 Rev A 1212015

NA Reporting When there is too much data being displayed in a graph data can overlap each other and make it difficult for viewing You can expand the graph to view specific data by stretching the graph on display However you will not be able to download the expanded graph in a PDF Workaround Right-click the expanded graph and then select This Frame -gt Print Frame from the drop-down menu to print the graph

NIOS-49238 Network Insight Under certain circumstances deleting networks may not remove the corresponding IP helper addresses from the device configuration

NIOS-49123 Network Insight When scheduling a discovery or port control blackout the scheduled time and time zone will always be standard time No time adjustments are made if the selected time zone is currently in daylight savings time and no adjustments are made when the time zone switches to daylight savings time

NIOS-49107 Network Insight If a recurring port control blackout is scheduled and it includes the current time port control tasks will be delayed during the current blackout period However you may not be warned until the next blackout period If a recurring discovery blackout is scheduled and it includes the current time the Discover Now functionality may not be blocked until the next blackout period

AUGUSTA2-1606

Network Insight Some devices such as the Cisco 3750X may report interfaces (that are not actually functional) as available through SNMP which could cause Port Control jobs on these non-functional interfaces to fail

NIOS-48944 Reporting When there are disconnected data points in the reporting data for reports (such as the DNS Query Rate by Query Type report) that support the stacked area panel type the stacked area that represents the disconnected data in the PDF report may not fill up accordingly and may cause it to look like a line chart when it is actually a stacked area chart Workaround Interpret the information correctly when reading the stacked area charts that contain disconnected data points

NIOS-48912 Network Insight Is a device is not connected to another host through a network the appliance will not be able to detect the Voice VLAN information

NIOS-48897 Network Insight Alcatel Omniswitches can operate in two modesmdashWorking mode and Certified mode Alcatel OmniSwitch 6000 devices must run in Working mode to allow Port Control jobs to work on these devices

NIOS-48704 Reporting When you configure a search for Top Devices Denied an IP Address using Member Network View Network and CIDR as alerting filters the alerts are triggered correctly but the alerting conditions are not included in the alerting email and the Query Terms field in the email may show ldquounconditionedrdquo Workaround Define the alerting and email titles to reflect the specified conditions

NIOS-48560 Network Insight Before joining the Network Data Consolidator to the Grid use the CLI command reset net-automation database to ensure that previously discovered device information is removed from the database

NIOS-48399 You cannot restore the existing deleted resource records from the Recycle Bin after you promote a Grid Master Candidate to the Grid Master

NIOS-48311 On the IB-4010 appliance the maximum resource records allowed in a single signing zone is 800K not 25 of the object limit as in other platforms Exceeding this limit may result in a system restart

NIOS-48135 bloxTools data prior to NIOS 640 cannot be restored on NIOS 611x Workaround Upgrade to NIOS 64x first to get a backup before upgrading to NIOS 611x

NIOS 701 Release Notes

copy 2015 Infoblox Inc All Rights Reserved All registered trademarks are property of their respective owners Page 18 of 21 400-0579-001 Rev A 1212015

NIOS-48030 You may not be able to log in to the bloxTools Workflow environment if you download the snapin-workflow file from the bloxTools Community site

NIOS-47959 Through the API and RESTful API users can add records and data without entering values for required extensible attributes Users cannot do the same through Grid Manager

NIOS-46356 An upgrade may fail if you clone reports and searches with duplicate names for the following reports DNS Query Rate by Server DNS Daily Query Rate by Server DNS Daily Peak Hour Query Rate by Server DHCP Device Operating System Trend DHCP Top Device Operating System and Traffic Rate

NIOS-46290 In some scenarios upgrading from NIOS 67x to NIOS 610x on an Infoblox-4030 appliance may require a manual restart to complete the upgrade

NIOS-46102 Advanced DNS Protection You may not be able to join an independent appliance to the Grid if the appliance has threat protection service enabled and only the LAN interface configured Workaround Disable threat protection service on the appliance before joining the Grid or configure the MGMT port and enable VPN on MGMT before joining the offline appliance to the Grid

NIOS-46051 Reporting When you configure a search for Threat Protect Event Count by Severity Trend using Member Category and Rule ID as alerting filters the alerts are triggered correctly but the alerting conditions are not included in the alerting email and the Query Terms field in the email may show ldquounconditionedrdquo Workaround Define the alerting and email titles to reflect the specified conditions

NIOS-45906 Network Insight On rare occasions when there is incomplete inaccurate or misinterpreted data in discovered spanning tree information the appliance may not be able to determine the correct switch to which an end host is attached In this scenario the appliance may display inaccurate discovered data

NIOS-45904 Network Insight In Grid Manager the same end host on different VLANs may appear as duplicates that contain the same VLAN information

NIOS-45872 Content in the bloxHub widget on the Status Dashboard may not be displayed in certain versions of Google Chrome Mozilla FireFox and Microsoft Internet Explorer browsers due to security updates implemented by these browsers Workarounds For Chrome Click the security shield icon next to the URL and select Load unsafe script For FireFox Click the security shield icon next to the URL and select Disable Protection on This Page from the drop-down list For IE Click Show all content in the Only secure content is displayed message bar at the bottom of the page

NIOS-45598 Network Insight When a seed router is specified for an IP address that has already been assigned as a fixed address the IP will still be discovered even if the fixed address is excluded from discovery

NIOS-45233 Reporting When you use Microsoft Internet Explorer 10x and disable ldquoCompatibility Viewrdquo you may not be able to view reports in the Reporting tab Workaround In the Internet Explorer 10 browser go to Tools -gt Compatibility View to enable the feature

NIOS-45220 When you upgrade from NIOS 51r6-12 or earlier releases the Try Snapinstall option may not be available in the bloxTools environment after the upgrade Workaround Stop bloxTools service on the member console connect to the member through the CLI and execute the set bloxtools reset all command Once the reset process is complete restart the bloxTools service to access the Try Snapinstall option

NIOS 701 Release Notes

copy 2015 Infoblox Inc All Rights Reserved All registered trademarks are property of their respective owners Page 19 of 21 400-0579-001 Rev A 1212015

VLAN-324 If you have assigned multiple VLANs to the LAN1 or LAN2 interfaces on the appliance you may receive messages about having ldquomultiple interfaces that match the same subnetrdquo during dhcpd process startups or restarts Note that these are not error messages and no actions are required

NIOS-44055 If you use certain versions of Mozilla FireFox to run Grid Manager the auto-detected time zone feature may not function properly even if you have enabled it in your User Profile

NIOS-43957 When you upgrade from NIOS 66x or earlier releases the email address in the SOA resource record that was entered in punycode will be converted into IDN (Internationalized Domain Name) after the upgrade Workaround Convert the IDN back to punycode using the IDN converter utility through Grid Manager

NIOS-43569 You may not be able to view reverse-mapping zones in an internal DNS view Workaround Set the table size to 10 in User Profile log out and then log back in to the system again

NIOS-41136 Reporting When you use certain versions of Mozilla Firefox and Google Chrome browsers on Windows 7 or Linux you may not be able to properly print reports

NIOS-39922 On Trinzic 2200 series appliances it may take up to three minutes for the LOM (Light On Management) LED to stop blinking after you have disabled the LOM feature

NIOS-38870 When you change the member type of an appliance from Infoblox to vNIOS the appliance might display an error message indicating that all network port settings of the vNIOS member must be changed to Automatic Workaround Through the Infoblox API use InfobloxGridMember and the functions lan_port_duplex( ) and lan_port_speed ( ) to change the network port settings for the vNIOS member

NIOS-38579 Reporting If you have a quick filter that includes a filter criterion with report comment equals to a value that NIOS automatically translates to another value the quick filter may not function properly after an upgrade to NIOS 65 or 66 NIOS automatically translates the following ldquoIPAM Utilizationrdquo to ldquoDDI Utilizationrdquo ldquoDNS Zone Statistics per DNS Viewrdquo to ldquoDNS Statistics per DNS Viewrdquo ldquoDNS Zone Statistics per DNS Zonerdquo to ldquoDNS Statistics per Zonerdquo ldquoDNS Member QPS Trendrdquo to ldquoDNS Query Rate by Serverrdquo and ldquoDNS Queries per Second Trendrdquo to ldquoDNS Query Rate by Query Typerdquo Workaround 1 Edit the original report comment values to match the translated values For example if you have entered ldquoIPAM Utilizationrdquo in the comment field of a report change it to ldquoDDI Utilizationrdquo Workaround 2 Edit the quick filter names to match the original comment values For example if you have entered ldquoQF1rdquo as a quick filter name and ldquoIPAM Utilizationrdquo as the report comment change the quick filter name to ldquoIPAM Utilizationrdquo

NIOS-37415 Users cannot execute Trinzic Automation Engine (TAE) if they log out of NetMRI during an active NetMRI session

NIOS-33600 There is an issue with SafeNet HSMs in that configuration changes do not immediately take effect such as when adding a new member to an existing SafeNet HSM Group deleting a client from the HSM or making member changes You can perform a forced restart of services to apply the changes immediately

NIOS-31864 Modifying a zone from a client increments the zonersquos serial number even if the zone contents did not change This causes unnecessary AXFRs to secondary servers and if the zone is served by a Microsoft Server that is managed in read-write mode it causes extra synchronizations as well

NIOS 701 Release Notes

copy 2015 Infoblox Inc All Rights Reserved All registered trademarks are property of their respective owners Page 20 of 21 400-0579-001 Rev A 1212015

NIOS-31501 When a Microsoft server is the primary server for a zone and another Microsoft server is hosting the same zone as a stub zone and the NIOS appliance synchronizes DNS data with only one of these zones it will synchronize the zone as an authoritative or stub zone depending on which Microsoft server it synchronizes with first For more information please refer to KB article 17593

NIOS-25064 (45488)

If you configured a member DHCP server to authenticate DHCP clients with a RADIUS authentication server group and RADIUS is disabled (the server group is disabled all RADIUS servers in the group are disabled or the member DHCP server was not assigned an authentication server group) NAC filters with ldquodoes not equalrdquo rules will always match Workaround Do not disable RADIUS

NIOS-21512 (39917)

When you stop the DNS service of an independent appliance with temporary DNS and DHCP licenses Grid Manager displays the Restart Services panel regardless of which function you select

NIOS-21499 (38968)

An admin cannot display DNS views created by other admins during the same browser session To display the DNS views created by other admins you must log out and log in again

NIOS-19853 (31668)

Grid Manager does not display an error when you move a DNS view to a network view that contains a host record that has the same MAC address as a host record in the DNS view that is being moved

NIOS-19144 (30208)

Grid Manager does not sort columns correctly in the IPAM and Network list panels when the columns contain UTF-8 data

NIOS-18163 (27831)

The appliance allows users with read-only permission to A records to view DNSSEC resource records as well

NIOS-17636 (26233)

Syslog messages generated during a TFTP file transfer display the incorrect time zone

NIOS-17513 (26080)

Adding updating or deleting reverse zones could fail due to unsupported PTR records in the root zone

PAPIPASS-39

When you use Mozilla Firefox 16x 17x or Mozilla Firefox Beta 180b3 browser the hidden password in the Add Administrator Wizard of Grid Manager may disappear when you click the Password field after you have confirmed the password This is a known issue when you use Firefox browsers

MME-154 When a NIOS user deletes a Microsoft AD domainrsquos primary zones and subzones NIOS should display a more specific message warning users about the consequences of the operation instead of the general warning message it currently displays

MME-129 When a Microsoft admin creates a delegation on the Microsoft server and the delegation is synchronized to the NIOS appliance the glue A record of the delegation name server is synchronized to the appliance as a manually created record If on the NIOS appliance an admin changes the IP address on the NS record of the delegation name server two A glue records are generated one with the original address one with the new address NIOS retains the original glue A record because itrsquos marked as a manually created record and it can only be changed or deleted either manually on Grid Manager or through the API When synchronization occurs the Microsoft server correctly updates the existing glue A record and does not retain the original Note that NIOS retains the original A record only after the initial update If you update the A record again NIOS just updates the existing record without retaining the original

MME-23 NIOS displays an ldquoInternal Errorrdquo message when you try to apply a quick filter for a range that equals 1 when you display a range in the IPv4 Microsoft Superscopes tab

MME-6 If you add a hostname to the Target field of an SRV record on Grid Manager when the member synchronizes the SRV record to a Microsoft server it adds a new SRV record with the hostname instead of modifying the existing record

NIOS 701 Release Notes

copy 2015 Infoblox Inc All Rights Reserved All registered trademarks are property of their respective owners Page 21 of 21 400-0579-001 Rev A 1212015

MSSS-11 (45296)

When you run a discovery on a network served by Microsoft servers and Grid Manager discovers a MAC address that does not match any of the fixed addresses associated with an IP address it reports a conflict and lists the associated fixed address objects in the Related Objects table You cannot select which fixed address to resolve in the Related Objects table You can only resolve the conflict for the first address

VNIOS-36 (41215)

If a virtual NIOS member does not start up due to a license violation Grid Manager displays the status of the vNIOS member as ldquoonlinerunningrdquo even though the member is not online