Release Notes

DGW-18130 - Upgrade wpa_supplicant to version 2.12

The application was re-built using wpa_supplicant version 2.12.

DGW-18129 - Upgrade Dropbear SSH server to version 2026.94

The application was re-built using Dropbear SSH server version 2026.94.

DGW-18123 - Upgrade to OpenSSL 3.5.8.

The application was re-built using OpenSSL 3.5.8.

DGW-18005 - Mediatrix (MX) profile Disable SNMP service by default, and enforce password change on first login, or after a factory reset

A password change is now enforced on first login, after a factory reset, or whenever an account is still using the firmware default password. This applies to the Mediatrix (MX) profile only.

Changes:

• At login, a password change is required for any user whose password matches the firmware's default value. No management or functionality access will be allowed until the password has been changed to a non-default value.
• Enforcement applies to bothCLI (SSH or Telnet)andWebconnections.
• SNMP service disabled by default
• Default "public" user removed

DGW-17975 - New "Disable rport on outbound Via" SBC call agent ruleset action

Incident Number: ID-10806

New "Disable rport field on outbound Via header" call agent ruleset action added to the Sbc service. By default the SBC adds the ";rport" parameter (RFC 3581) to the Via header field on generated requests; this action removes the parameter on requests sent towards the selected call agent, allowing symmetric response routing to be disabled per leg.

DGW-17854 - Ha service - User-defined template support removed

User-defined template functionality for the Ha service has been removed. Any leftover template file will be automatically cleaned when upgrading to version 50.3 or later.

DGW-17853 - NewEth.EapTlsCipherSuite and Eth.EapTlsVersion parameters

Incident Number: ID-9217

NewEth.EapTlsCipherSuite and Eth.EapTlsVersion parameters added to the Eth service,the Extensible Authentication Protocol (EAP)TLS version and cipher suite are now configurable.

DGW-17622 - Sbc service - Mutual TLS authentication support

Incident Number: ID-9949

Two TLS modes have been added to the Sbc.SignalingInterface table:BothMutualAuth and ServerMutualAuth. These modes enforce mutual authentication by requiring the remote peer to present a valid certificate when establishing a TLS server connection.

DGW-18146 - Mediatrix (MX) profile Disable partial reset

The partial reset option, allowing to enable the rescue mode on a Mediatirx device, is now disabled by default. This applies to the Mediatrix (MX) profile only.

The Hardware.ResetButtonManagement parameter default value is now set toDisablePartialReset.

DGW-18109 - The "Handle missing stream direction" SBC ruleset action parameter must only apply to SDP answers not advertising a stream direction

Incident Number: ID-10948

Previously, in the Sbc service, the "Rectify SDP content" call agent ruleset action always applied the "Handle missing stream direction" parameter to SDP offers, causing a no audio issue on calls transferred using 'Handle REFER internally' REFER mode.

This issue has been fixed: the "Handle missing stream direction" parameter now only applies to SDP answers not advertising a stream direction.

DGW-18094 - T.38 SDP answers enabling optional fax capabilities are no longer rejected

Incident Number: ID-10942

The SipEp service no longer rejects SDP answers where the remote peer enables T38FaxFillBitRemoval, T38FaxTranscodingMMR or T38FaxTranscodingJBIG capabilities.

These optional T.38 capabilities are always advertised as unsupported in the SDP offers sent by the SipEp service, previously, media negotiation failed upon reception of a peer SDP answer enabling them, and the fax call was released.

DGW-18057 - New "Filter forced transports" parameter for the "Force RTP/SRTP" SBC call agent ruleset action

Incident Number: ID-10904

New "Filter forced transports" parameter added to the "Force RTP/SRTP" call agent ruleset action in the Sbc service, for peers that cannot handle two media streams of the same type. When the same media type is offered both with and without the forced transport, the media lines not matching the forced transport are removed, and are re-inserted marked as rejected with a port of 0 in the answer sent back to the peer that made the offer.

DGW-18047 - IPv6 link-local networks incorrectly reported in the Bni.NetworkInterfacesStatus table

After completing the duplicate address detection, the Bni service reported an IPv6 link-local network twice and did not report the removal of an address that failed the detection. The Bni.NetworkInterfacesStatus table, and the services using these networks, could therefore list a link-local network twice, or keep listing it after removal.

This issue has been fixed; Bni service correctly reports IPv6 link-local networks.

DGW-17935 - Fixed a UUID generation issue on Sentinel Mini for new Armbian-based distributions.

Resolved a compatibility issue on Sentinel Mini where devices running new Armbian-based distributions could experience a licence activation failure due to unique device identification problems.

DGW-17870 - Sentinel CS - Conversion scripts may not be applied when installing a new firmware load via the Fpu service for a first time

When installing a new firmware load via the Fpu service after a first time installation (using the .bash script) the conversion config scripts may not be applied.

This issue has been fixed; the Sentinel CS now correctly executes the conversion scripts when installing a new firmware.

DGW-17463 - mTLS client certificates for Microsoft Teams SIP interface update

The following 7 certificates were added to the MX profile (Sentinel SBC series) for mTLS connectivity with Microsoft Teams SIP interface:

• MsTeams_DigiCertGlobalRootCA.crt
• MsTeams_DigiCertGlobalRootG2.crt
• MsTeams_DigiCertGlobalRootG3.crt
• MsTeams_DigiCertTLSECCP384RootG5.crt
• MsTeams_DigiCertTLSRSA4096RootG5.crt
• MsTeams_MicrosoftECCRootCA2017.crt
• MsTeams_MicrosoftRSARootCA2017.crt

The expired certificate MsTeams_BaltimoreRoot.crt was removed.

DGW-16478 - Missing Web service ciphers added

The following TLS 1.3 ciphers were added to the Web service:

• TLS_AES_128_CCM_8_SHA256
• TLS_AES_128_CCM_SHA256