Deep Security Feature Packs
Major releases of Deep Security Manager, such as Deep Security Manager 10.0, are made available on an annual basis, and include new functionality and enhancements for existing functionality. Feature Packs (FPs) are interim releases that provide early access to new Deep Security functionality and are made available at regular intervals between major releases. This means that with FPs you can immediately benefit from new functionality without having to wait for the next major release of Deep Security. FPs meet the same quality and release criteria as major releases, and are intended for use in production environments.
Feature Packs are comprised of new versions of Deep Security Manager and Agent. The new manager is compatible with both the new and older versions of agent. However, new features in a Feature Pack can require that both the new manager and the new agent are used. For information about which new features require an agent update, see “What’s New”.
While several FPs may become available between major releases, the functionality of all FPs is cumulative and is ultimately rolled into the next major release. New major releases continue to be made available on an annual basis. For example, if you are now using the latest major release of Deep Security, you can obtain the Deep Security FP to immediately take advantage of new functionality that it provides.
If you are constrained to longer adoption cycles, wait for the next major release to benefit from the new functionality.
You can easily distinguish major releases and FPs by the version number:
- Major releases use the x.0.z version pattern, for example the 10.0 GM release version number is 10.0.3259, where 10 is the major version, 0 is the minor version, and 3259 is the build number:
- Maintenance update versions are distinguished on the Deep Security Software page with a “U” suffix, for example 10.0_U1.
- Maintenance updates have the build number incremented, for example the first maintenance update of 10.0 is 10.0.3271.
- FPs increment the minor version number, for example 10.1.z, or 10.2.z, where z is the build number.
- FP versions are distinguished on the Deep Security Software page with an FP suffix, for example 10.1_FP.
You can obtain FPs from the Feature Packs tab on the Deep Security Software page.
Feature Pack life cycle
Deep Security FPs have a shorter life cycle than major releases, and you should upgrade to the next major release when it becomes available. If you do not upgrade, you risk running an unsupported version of Deep Security. To ease the challenges of scheduling the upgrade in your production environment, support for FPs is provided until 6 months after the next major release is available. The following diagram illustrates the timing of FP availability and the support duration with respect to that of the major releases.
FPs support the same platforms that the next major release supports. Do not equate the platform support of the current major release with that of FPs. To see a list of older operating system versions and Deep Security Agents that are supported, see Supported features by platform.
Most support items are provided for FPs.
|Support item||Major release||Feature Pack||Delivery mechanism|
|Small enhancements (no change to core functionality)||✔||Update|
|Linux kernel updates||✔||✔||Linux Kernel Package (LKP)|
|General bug fixes||✔||Update|
|Critical bug fixes (system crash or hang, or loss of major functionality)||✔||✔||Update or Hot-fix|
|Critical and high vulnerability fixes||✔||✔||Update or Hot-fix|
|Medium and low vulnerability fixes||✔||Update|
|Anti-Malware pattern updates||✔||✔||iAU (Active Update)|
|Intrusion prevention system, integrity monitoring, and log inspection rules updates||✔||✔||iAU|
|Support for Agents and Deep Security Manager on new versions of supported operating systems||✔||Update|
Although updates that include small enhancements, general bug fixes, and support for new versions of operating systems are not provided for FPs, these improvements are included in new FP versions. For example, if you use 10.1FP, to benefit from any of these support items you need to obtain 10.2FP when it is released. You should use the currently available FP to benefit from these continual improvements.