SENTRA Network Threat Shield (NTS)

What changed in each version of SENTRA Network Threat Shield (NTS).

Newest first. Latest version: v0.18.0.

v0.18.0 · 2026-10-27#

Downtime The console restarts for a few seconds; traffic keeps flowing.

Roles you design: an Admin adds, renames, edits and deletes roles and picks exactly what each may do from a list of permissions in plain English (firewall rules, deploys, ending sessions, filtering, IPS, network, lab, reports, alerts, AI, system settings, licence, updates, users, the default dashboard)
Users › Roles & permissions shows every role side by side as a permission table (columns line up with their ticks; scrolls sideways on a phone)
The built-in Admin always has everything and can't be changed or deleted; the starting Operator and Viewer are ordinary roles you can change or remove; a role still given to users can't be deleted until they are moved; the last Admin can't be removed
A role with users.manage manages accounts but can never give the Admin role or touch an Admin's account; only an Admin changes roles
GUARD users: choose which role here a GUARD admin, operator or viewer gets (default as before)
Every change the console makes now checks a permission; anything not on the list stays Admin-only. Role changes are in the audit log
Dashboard: drag widgets to reorder, choose half or full width per widget, Reset to default; layouts are saved per user on the box (GUARD users too) and an Admin can set the default dashboard for everyone

Downtime The console restarts for a few seconds; traffic keeps flowing.

Stand-alone updates: a box that no SENTRA GUARD manages is offered new releases from the SENTRA release server (updates.sentra-ai.com) in Licence & Updates › Updates, with what's new; nothing is installed until its admin clicks Update now or schedules it.
Signed releases: a release is installed only after checking it end to end (SENTRA root key, release key, signed release list, package and every file); one that fails is refused and nothing changes. A withdrawn release is never offered, and the console warns when the running version was withdrawn.
Boxes managed by a GUARD keep getting their updates from the GUARD, which now checks them the same way.

Downtime The console restarts for a few seconds; traffic keeps flowing.

The tab icon is now cacheable, so Safari shows the SENTRA shield (it would not keep an icon marked "do not store")

Downtime The console restarts for a few seconds; traffic keeps flowing.

The browser tab now reads "SENTRA Network Threat Shield" with the SENTRA shield icon, like the other SENTRA consoles (Safari showed no icon)

Downtime The console restarts for a few seconds; traffic keeps flowing.

Online licence check-in: when the box can reach the internet the console checks in with the SENTRA licensing authority (licensing.sentra-ai.com) about 2 minutes after it starts and then every 6 hours
The licensing authority can revoke a key: the key then shows as REVOKED ("Revoked by the SENTRA licensing authority") and stays so after restarts until a later check-in lifts it
Renewed keys held by the licensing authority for this box are added automatically, through the same checks as a key pasted by hand
Licence & Updates shows "Verified online with the SENTRA licensing authority … ago", "Not verified online yet" or why the last check-in failed, with a Check in now button
New command: sudo sentra-nts licence check
Offline boxes keep working exactly as before: a failed check-in never restricts anything. Switch the check-in off with SENTRA_LICENSING_CHECK=0 or "licensing_check": false in config.json

Downtime The console restarts for a few seconds; traffic keeps flowing.

Accepts licence keys issued by a licensing authority (OTG2- keys): a SENTRA VIEW or GUARD certified by SENTRA can now issue NTS licences within its own limits
An OTG2 key is checked offline: the authority's certificate must be signed by SENTRA, the key must be signed by that authority, be for NTS, stay within the authority's modules and dates, and not run past its latest allowed expiry
Keys issued while an authority was valid stay valid after the authority's certificate ends
Clear reasons when a key is refused (for example "This key was issued for another SENTRA product"); existing OTG1- keys keep working as before

Downtime The console restarts for a few seconds; traffic keeps flowing.

Users can come from the managing SENTRA GUARD: same name, password, two-step and a role set on the GUARD
The GUARD can switch this box's local accounts off; they are kept and shown as disabled
Glass-break admin (set by root with sentra-nts glassbreak) that works only while the GUARD can't be reached; red banner and audit entry when used
GUARD users keep working with their last-known details when the box loses the GUARD
Admin → Users shows where each account comes from and the link to the GUARD

Downtime The console and the inspection service restart for a few seconds; traffic keeps flowing (the firewall rules stay loaded).

Updates are your decision: when the GUARD has a newer version, the Engine pill at the top shows Update available, and Admin → Licence & Updates → Updates lists what is in it
Update now, schedule the update for a time that suits you (for example a quiet night), cancel, or skip a version
The result of the last update is shown on the box and in the GUARD's agent activity
Admin → Licence is now Licence & Updates

Downtime The console restarts for a few seconds; traffic keeps flowing.

Report builder: 15 sections, rolling or custom periods, filters by segment, device and severity
Saved reports with daily, weekly or monthly schedules e-mailed to their own recipients; archive with print to PDF and CSV per section
Network → Interfaces: bonds (LACP and other modes), VLANs, MTU, bridges and segments chosen from real ports
Click any port for bandwidth, packets, drops and errors over 1 h, 6 h or 24 h

Downtime The console restarts for a few seconds; traffic keeps flowing.

Policies for groups of users: everyone, chosen segments or chosen devices, each fully editable
Dashboard with dials, traffic on every port, system performance and wall mode; each user picks the widgets
Light and dark theme
Threats page with threat level, timeline, attackers, targets and countries
System page with the box's hardware, ports and versions, and rename

Downtime The console restarts for a few seconds; traffic keeps flowing.

VPN (WireGuard, IPsec), multi-WAN, BGP, high-availability pair, reports and policy templates