Release date: September 18, 2025
This patch release resolves the following issue:
Knowledge
Unintended active execution of the asg_ntp_update_time
script on Check Point Maestro devices at frequent intervals, along with the
devices' hourly execution, could cause CPU softlocks and make the devices
unresponsive. The asg_ntp_update_time script has been
removed to resolve this issue.
In addition to resolving this issue, v25.2.1 also retains the fixes from v25.2.0, as listed below:
- When logging into the LiveAssurance GUI with SSO, a blank page was initially displayed after a successful login.
- The Vigile service crashed, causing a
Bad Gatewayerror and making the LiveAssurance GUI inaccessible. - In high availability environments, the synchronization of backup files from the primary to the secondary server failed due to insufficient space in the secondary server's storage volume. The backup files are now stored on a different volume with sufficient space, on the Secondary server.
- When creating a custom report with the line chart widget, the Y-axis scale incorrectly displayed metrics with values less than 1 as multiple 0s on the graph. Such values are now correctly displayed as decimals between 0 and 1.
- The
Unsuccessful BDDS Deploymentsalert was triggered by outdated failed update entries present in the logs, which also prevented open issues from being resolved. - The Watchdog service failed silently while processing the health
reports from the analytics service due to their unexpected format,
which caused monitoring to fail for all services. The Watchdog
service now correctly cycles through all services defined in
/usr/share/indeni-services/services.json. - Custom reports containing a large number of items and/or long item names generated PDFs with missing graphs and overlapping content. This issue has been resolved to ensure proper report rendering.
- Running a command to determine the DNS service state on BlueCat
Address Manager triggered errors in
/var/log/syslogbecause the DNS service does not run on BlueCat Address Manager. - Relevant INDs failed to run on Check Point Maestro gateway devices due to mismatched device tags, resulting in false positives and missing alerts.
Platform
- You can now install LiveAssurance by creating a virtual machine (VM) in Azure from a virtual hard disk (VHD) file. For details, refer to Installation using a VHD in Azure.
Knowledge
New features:
- Detailed traffic metrics collection, along with new alerting and reporting support, are now available for F5 Virtual IPs (VIPs), pools, and pool members.
Support:
- Validation of Cisco Firepower appliances operating in ASA mode is now supported, in addition to the existing support for ASA. For details, refer to Cisco ASA and Firepower (ASA Mode).
-
Key metrics are now consistently included in manifest reports across all supported firewall, load balancer, and DDI devices. This is to standardize the set of metrics included in manifest reports.
New/Updated CVE Rules:
Cisco ASA
| Severity | CVEs |
|---|---|
| High | CVE-2025-20182 |
F5
| Severity | CVEs |
|---|---|
| High | CVE-2025-31644, CVE-2025-35995, CVE-2025-36504, CVE-2025-36525, CVE-2025-36557, CVE-2025-41399, CVE-2025-41414, CVE-2025-41431, CVE-2025-41433 |
Fortinet
| Severity | CVEs |
|---|---|
| Critical | CVE-2025-22252 |
| Medium | CVE-2025-22254, CVE-2025-24471, CVE-2025-47294 |
| Low | CVE-2025-22251, CVE-2025-25250, CVE-2025-47295> |
Palo Alto
| Severity | CVEs |
|---|---|
| High | CVE-2025-0114, CVE-2025-0126, CVE-2025-0127, CVE-2025-0130, CVE-2025-4230, CVE-2025-4231 |
| Medium | CVE-2025-0108, CVE-2025-0111, CVE-2025-0115, CVE-2025-0116, CVE-2025-0123, CVE-2025-0125, CVE-2025-0128, CVE-2025-0133, CVE-2025-0136, CVE-2025-4229 |
| Low | CVE-2025-0109, CVE-2025-0124, CVE-2025-0137 |