Kaspersky Industrial CyberSecurity for Networks 4.2
UPDATING APPLICATION MODULES AND DATABASES

Revision date: 2025-10-20

After installing the latest updates, the application will have improved performance and reduced limitations due to the following changes:
	• Expanded list of supported types of external projects for importing configurations of devices and tags into the application.
	• [7902528, 7875825] Added support for the VNIIA and Telnet protocols and for devices that use these protocols.
	• [7880708] Expanded the set of supported protocols for the Prosoft-Systems Regul R500 device type.
	• [7562383] Fixed: in some cases, the application may incorrectly identify broadcast requests as network packets of the CODESYS V3 Gateway protocol, which leads to the registration of "Error (PARSING ERROR: WRONG PACKET SIZE)" events.
	• [7629347] Fixed: when downloading updates to sensors during high traffic intensity, the application may register an event after erroneously detecting the use of an outdated version of the SSL/TLS protocol in the network interaction between the Server and the sensor (due to the fact that the application layer protocol processing module incorrectly identifies the protocol version based on fragmented network packets).
	• [7800318] Fixed: when importing device configurations and tags from a Honeywell Control Builder project, errors occur if the ZIP archive contains several thousand files or if the project uses unsupported types of tag data.
	• [7852945] Fixed: when analyzing traffic over the Ethernet I protocol, the application may fail to trigger the device information detection rules designed to automatically obtain information (for example, information about the manufacturer, model and hardware version of the device).
	• [7937498] Fixed: when analyzing traffic over the Allen-Bradley EtherNet/IP protocol, the filter process may fail.
	• [8056572] Fixed: locally administered MAC addresses arbitrarily assigned by certain network device models to their virtual network interfaces and sent to other devices on the network via LLDP/CDP/MNDP are processed by the application as additional real MAC addresses for these network devices. For this reason, the application automatically adds network interfaces for these devices with the specified MAC addresses, and depending on the settings, the application may register a large number of device merge failure alerts due to the inability to update network interfaces.
	• [8104280] Fixed: when analyzing DHCP traffic on a sensor node, the filter process may fail due to an out-of-memory error.
	• [7586847] Added support for the CHINT MAS400 and MAS9600 device interaction protocols.
	• [7980074, 7980097] Added support for the ISaGRAF IXL, SNCP protocols and devices using these protocols (including Tecon MFK devices).
	• [8152754] The OPC UA Binary protocol processing module has been improved to support the features of using this protocol when transmitting system commands to Tecon MFK devices.
	• [7980102] Added support for the DLMS/COSEM protocol and the devices that use this protocol.
	• Expanded support for more tag data types and system commands for the Yokogawa Vnet/IP protocol (including messages containing different types of alarms). The application can now process return codes during tag operations.
	• [7910547] Fixed: to track system commands and tags via the Valmet DNA device interaction protocol, you have to load the device configuration file.
		o After installing the latest updates: the application automatically determines the necessary operating settings for the Valmet DNA protocol processing module without the need to load the device configuration file.
	• [8362427] Fixed: after importing device configurations and tags from a Honeywell Control Builder project, the application may incorrectly track tags that are transmitted over Honeywell Experion protocols. Tracking errors are caused by insufficient data in the configurations exported from the Control Builder application.
		o After installing the latest updates: export the data to the Honeywell Control Builder project as described under "How to prepare data for import" in the import settings window for this project type (using Microsoft SQL Server Management Studio instead of the Control Builder application), then perform the procedure for clearing the process control settings for Honeywell devices and import the configurations from the resulting project.
	• [8741199] Added support for analysis of the NTP/SNTP and PTP time synchronization protocols. The application analyzes time synchronization protocols and logs events after adding Process Control settings for devices that use these protocols.
	• [8712281] The capability to process and control configurations saved in files based on the IEC 61850-6 standard is supported for the IEC 61850-9-2 protocol (Sampled Values). The list of supported system commands for this protocol has been expanded.
	• [8741210] The list of supported system commands for the GOOSE protocol of the IEC 61850 standard has been expanded.
	• [8880532] Automatic detection of Process Control settings has been implemented for devices that use the DLMS/COSEM protocol, and Unknown Tag Detection has been improved.
	• The Valmet DNA device interaction protocol processing module has been improved to save information about controller stations and device modules in system command detection events.
	• The Honeywell Experion CDA protocol processing module has been improved to support the special features of this protocol on devices.

© 2025 AO Kaspersky Lab