This section describes changes in Airlock Gateway 8.3 that may require manual actions. Read this section carefully to see whether your configuration is affected.
Airlock Anomaly Shield
In Airlock Gateway 8.3, improvements have been made to the Status Code and Timing models. In addition, new Training strategy options are now available. Due to the drastic improvements in false-positive detection, we now use stricter threshold default settings for Anomaly Shield.
- Automatic upgrade actions:
- Updating from Airlock Gateway 8.3 will add new columns to the database schema.
- Existing trained models will be removed because the new version of Anomaly Shield provides improved models.
- After the upgrade, follow our approach for migration from 8.2 to 8.3:
- Re-train the models as described in the article Training and model enforcement.
- Enforce the prepared model to secure your Anomaly Shield application as before the upgrade.
- (Suggested) settings:
- Enable training data collection for your Anomaly Shield application to collect traffic. It is recommended to keep training data collection enabled at all times so that automatic retraining can be used.
- For Automatic retraining, we recommend the Retrain and enforce setting.
- For Training strategy, we recommend the default setting Best sessions.
- Comment out any custom Anomaly Shield threshold settings on your mappings to take advantage of the improved false-positive detection.
Improved Airlock Anomaly Shield-related dashboards are installed when upgrading to Airlock Gateway 8.3. For more information, see article Working with Airlock Anomaly Shield dashboards.