Where can I download the current version of NetBotz 4.x BotzWare firmware 4.7.0

[spezialist]

Dear support,

Where can I download the current version of NetBotz 4.x BotzWare firmware, for example 4.7.0 according to Release Notes NetBotz 4.x BotzWare (990-3526Y Release date: August 2019)?

After searching for a long time, I couldn't find it: the latest I can find is version 4.6.4.

With respect.

[APC_Steve · Accepted solution]

Hi @spezialist ,

Other than on new units, it was never publicly released. The main changes are based on California law where you have to change the password on a new boot and SNMP is disabled by default etc. If you're putting that on an already configured unit, nothing will change there (unless you reset to defaults).

The only other change outside of the California law was updating openSSL to 1.0.2r.

If you feel that you need it, I can look to see if it's available to put on box.

Thanks,

Steve

[spezialist]

Dear @APC_Steve,

Okay, so the latest available for download NetBotz 4.x BotzWare firmware is 4.6.4, but new devices come with firmware 4.7.0, which is not available for download. Did I understand you correctly?

Very thanks for the support.

[APC_Steve]

Hi @spezialist ,

That is correct. 4.7 has not been made publicly available and was only released on the newest units. Again, the main changes were for California law compliance  and if installed on an already configured unit, those changes will not be seen unless the unit is reset to defaults. 

Again, I can try to get you a copy if you feel you need it.

Steve

[spezialist]

Dear @APC_Steve,

Great, that's clear.

It would be very nice if you could provide me with a link to download Advanced View software and BotzWare firmware (both v.4.7.0).

Very thanks for the support.

[APC_Steve]

hi @spezialist ,

This link should be valid until the end of next month:

https://schneider-electric.box.com/s/xupf212j2atgh8w0835n72thv3jpxfah

Steve

[spezialist]

Okay, great, I was able to download the zip-file of the software you posted.

Again, very thanks for your support :-).

[Jas0n]

Hi,

That link has expired and I was looking to download v.4.7.0 as well if possible.

Can you re-post the firmware?

Thanks

[APC_Steve]

Hi @Jas0n ,

Please note that the changes made in 4.7  are for initial configuration security such as by default, SNMP being turned off. Unless you are going to reset an appliance to defaults after upgrading it, there is no reason to install this version. Plea

Please also note that the configuration wizard will not work with this version either.

This link will expire in September.
https://schneider-electric.box.com/shared/static/kvogl79x37n7zlymhzhvxp7mojxuhzkw.zip

Steve

[Jas0n]

Thanks for re-posting, got the file and upgraded/configured the unit successfully.

The appliance I have is being re-purposed in a new role so the config needed to be totally re-worked.  having the latest version which has updated modules and better security defaults made sense.

Thanks

[MagicPockets]

Sorry to dig this back up @APC_Steve but I could do with this software as well. I was advised by support that upgrading to 4.7 will mitigate the log4j vulnerability.

Any chance you could post a link again please? I still can't find this anywhere. Many thanks  

[APC_Steve]

Hi @MagicPockets ,

4.7 does not mitigate log4J. NetBotz are not susceptible to this vulnerability. The only issues that 4.7 addresses are things like SNMP version 1 being enabled by default, generic passwords, etc. 4.7 has been out for quite some time and was not made to address this in any way. Additionally, if you already have 4.6.4 installed on a NetBotz appliance that is on-line, you will get no real benefit from this update. 

That being said, if you want it, here's the temporary link:

https://schneider-electric.box.com/s/9qmqdklf8og4re8vzt8ooexzdsl8cut1

Thanks,

Steve

[MagicPockets]

Many thanks for your quick reply, info and link @APC_Steve . Yes, I read that Advanced View isn't meant to be susceptible to the log4j. The issue I'm having is that the log4j versions being used in Advanced View are being flagged as critical in our Tenable reports with the file(s) location in Advanced View being shown as a culprit.

My problem I suppose, is that I don't know enough about Java to determine how it is susceptible and why log4j 1.2.8 or 1.2.14 in Advanced View is fine where the same file versions in another application are vulnerable.

Thanks for your help in this matter anyway. I'll keep researching!

[Lincoln_Darran]

@APC_Steve Any chance of getting the file made available again please.

[APC_Steve]

Hi @Lincoln_Darran ,

We've stopped using box so it's more difficult to make things available from tech support onto the local forum. Luckily however 4.7.2 appears to online:
https://www.se.com/eg/en/product/SFNBZ472/netbotz-firmware-v4-7-2-rack-monitor-570-451-wall-monitor-...

If you need 4.7.0 specifically though, you'll want to contact tech support directly.

Steve

[Lincoln_Darran]

Thanks @APC_Steve 

Interesting location for the file in the support hierarchy.  UPS management!?

No wonder I've not spotted it.

Wonder if that why Advanced View or DCE aren't picking it up...

thanks