Introduction

This document describes the features, bug fixes, and behavior changes, if any, in Cisco Secure Workload software patch 3.8.1.39. This patch is associated with Cisco Secure Workload software release 3.8.1.1, the details of which can be found here. As best practice, we recommend that you patch a cluster to the latest available patch version before performing a major version upgrade.

For more information, see Cisco Secure Workload Upgrade Guide.

Release Information

Version: 3.8.1.39

Date: November 23, 2023

Compatibility Information

For information about supported operating systems, external systems, and connectors for Secure Workload agents, see the Compatibility Matrix.

Verified Scalability Limits

The following tables provide the scalability limits for Cisco Secure Workload (39-RU), Cisco Secure Workload M (8-RU), and Cisco Secure Workload Virtual.

Table 1. Scalability Limits for Cisco Secure Workload (39-RU)

Configurable Option

Scale

Number of workloads

Up to 37,500 (VM or bare metal)

Up to 75,000 (2x) when all the sensors are in conversation mode

Flow features per second

Up to 2 million

Table 2. Scalability Limits for Cisco Secure Workload M (8-RU)

Configurable Option

Scale

Number of workloads

Up to 10,000 (VM or bare metal)

Up to 20,000 (2x) when all the sensors are in conversation mode

Flow features per second

Up to 500,000

Table 3. Scalability Limits for Cisco Secure Workload Virtual (VMWare ESXi)

Configurable Option

Scale

Number of workloads

Up to 1,000 (VM or bare metal)

Flow features per second

Up to 70,000


Note


The supported scale is based on the parameter that reaches the limit first.


Resolved and Open Issues

The resolved and open issues for this release are accessible through the Cisco Bug Search Tool. This web-based tool provides you with access to the Cisco bug tracking system, which maintains information about issues and vulnerabilities in this product and other Cisco hardware and software products.


Note


You must have a Cisco.com account to log in and access the Cisco Bug Search Tool. If you do not have one, register for an account.


For more information about the Cisco Bug Search Tool, see the Bug Search Tool Help & FAQ.

Resolved Issues

Identifier

Headline

CSCwi01465

[3.8.1.36] ADM Published Versions more than or equal to 128 will cause the policies to not enforce

CSCwh88981

3.8.1.19 Linux Enforcement Agent ipset deviation loop

CSCwi18086

AIX agents consumes more CPU than expected when Forensics are enabled

Open Issues

Identifier

Headline

CSCwb80213

vNIC is hung up on a baremetal server (eNIC version on BM should be upgraded)

CSCwb42177

Live and Enforcement policy analysis - hover over the table for scopes column and text chopped off

Related Documentation

Document

Description

Cisco Secure Workload M6 Cluster Deployment Guide

Cisco Secure Workload M6 Cluster Deployment Guide

Cisco Secure Workload Cluster Deployment Guide

Describes the physical configuration, site preparation, and cabling of a single- and dual-rack installation for Cisco Secure Workload (39-RU) platform and Cisco Secure Workload M (8-RU).

Cisco Tetration (Secure Workload) M5 Cluster Hardware Deployment Guide

Cisco Secure Workload Virtual Deployment Guide

Describes the deployment of Cisco Secure Workload virtual appliances (formerly known as Tetration-V).

Cisco Secure Workload Virtual (Tetration-V) Deployment Guide

Cisco Secure Workload Platform Datasheet

Cisco Secure Workload Platform Datasheet

Secure Workload Documentation

Secure Workload Documentation

Latest Threat Data Sources

Cisco Secure Workload

Contact Cisco

If you cannot resolve an issue using the online resources listed above, contact Cisco TAC: