Submit a ticketCall us

Training ClassThe Orion® Platform Instructor-led Classes

Provided by SolarWinds® Academy, these trainings will introduce users to the Orion Platform and its features, management, and navigation. These courses are suitable for users looking to discover new tips, tricks, and ways to adapt their Orion products to better suit their monitoring needs:
Deploying the Orion Platform
Configuring Orion views, maps, and accounts
Configuring Orion alerts and reports

Reserve your seat.

Home > Success Center > Netflow Traffic Analyzer (NTA) > NTA Documentation > NTA 4.4 Release Notes

NTA 4.4 Release Notes


Last updated: June 26, 2018

These release notes describe the new features, improvements, and fixed issues in NetFlow Traffic Analyzer 4.4. They also provide information about upgrades and describe workarounds for known issues.


IMPORTANT: Microsoft SQL Server 2016 SP1 or later is required for the Flow Storage database. See NTA 4.4 System Requirements.

New features and improvements

Read this section for descriptions of the new features and improvements NTA offers in this release, or compare NTA 4.4 with previous releases of NTA.

NTA 4.4 is an Orion Platform product, and it runs on Orion Platform 2018.2. For new features and improvements on Orion Platform 2018.2, see the NPM Release Notes.

NetFlow Traffic Analyzer uses a new database for storing flow data

Starting with version 4.4, NTA uses a Microsoft SQL server to host your NTA Flow Storage database for storing flow data. NTA 4.0 through 4.2.3 utilized a flat file database called FastBit for flow storage, which was included in the installer. The major difference is in installing the NTA Flow Storage database, which can be installed on one SQL server together with the Orion database. For more information, see NTA 4.4 System Requirements and NTA 4.4 Adoption: Frequently Asked Questions.

Support for TLS 1.2

Transport Layer Security (TLS) is a cryptographic protocol that provides communications security for computer networks. The primary target of the TLS protocol is to provide privacy and data integrity between two or more communicating applications.

Starting with Orion Platform 2017.1, some SolarWinds Orion Platform products support running solely on TLS 1.2, with versions TLS 1.1 and TLS 1.0 disabled. As of version 4.4, NTA supports only TLS 1.2 enabled.

Port 0 monitoring

Starting with version 4.4, it is possible to monitor TCP or UDP port 0. Use SolarWinds NTA 4.4 to monitor and report on malicious traffic running on port 0. After you install or upgrade NTA to version 4.4, you will see a new application called Port 0 in the NetFlow Settings, under Manage Applications and Service Ports. This application covers all traffic between TCP/UDP port 0 and any other TCP/UDP port. 

New customer installation

For fresh installations, you can co-locate the Orion Database and the NTA Flow Storage Database on one SQL server. For more information, see the SolarWinds Orion Installer.

Before you upgrade!

If you are upgrading from a previous version, be aware of the following considerations:

  • When upgrading to NTA 4.4, you will not be able to migrate your flow data to the new NTA Flow Storage Database, as data migration is not supported. For more information, see this article.
  • Review the deprecation notices.
  • Do not use the SolarWinds Orion Installer to upgrade a remote NTA Flow Storage Database. For more information on upgrading a remote NTA Flow Storage Database, see this article.
  • When upgrading to NTA 4.2.3, if you added a site binding to a host name before you upgrade, you must bind the Orion Web Console to a fully qualified domain name (FQDN). See this article.
  • When upgrading to NTA 4.2.3 with custom menus, you can not see the Performance Dashboard link in the menu. For details, see this article.
  • Always use the Product Upgrade Advisor to build your upgrade path.
  • See the SolarWinds Orion Installer documentation for more detail.

How to upgrade

If you are upgrading from a previous version, use the following resources to plan and implement your upgrade:

Fixed issues in NTA 4.4

NTA 4.4 fixes the following issues.

Case number Description


The Configuration wizard keeps running during the upgrade from NTA 4.1.2 to NTA 4.2.1.



After you click Edit, the NetFlow resources on the NPM Summary page open properly and don't rapidly update.


When you open the Top XX Resources on the NTA Summary page, the settings page no longer repeatedly flashes in the browser.


After you upgrade to NTA 4.2.2, the Last 25 Traffic Analyzer Events resource loads properly.


Last 25 Traffic Analyzer Events chart is renders without errors.


Data is available in the NetFlow Endpoint page after navigating from the Conversations page.


NTA is showing all data when you drill down to the Endpoint details from the Top Conversations resource.


Data from the FlowEngines tables match the data from the dbo.Engines table.


NetFlow listener no longer fails.


In NTA 4.2.1, the Last 25 Traffic Analyzer Events resource loads properly.


Configuration wizard keeps running during an upgrade.


Website configuration no longer fails during the upgrade of the additional polling engine with NTA and Flow Storage Database installed on it.


When you configure a scheduled and filtered Conversation resource report through Report Scheduler that excludes some conversations, the email is sent and the graphs show up.
The Top 10 Autonomous System resource does not show rows with ID=0.


Custom SQL reports no longer break after the upgrade to NTA 4.x.


Database maintenance does not delete resolved hostnames in flows.


On Demand DNS resolving does not populate NetFlow endpoints tables. The tables in the database are not growing rapidly anymore.

Fixed issues in Orion Platform 2018.2

Orion Platform 2018.2 fixes the following issues.

Case number Description


AppStack respects single group limitations.

1144272, 1176440,
1191598, 1197682

When the Orion Web Console is configured to use client certificate authentication, menu items are displayed correctly.

00066337,00061508, 00061508, 00055119

During the upgrade, website files are not overwritten.


The SQL performance is not affected by excessive reads.

1171110, 1186153

SHA1 certificate is not used anymore.


Orion Platform correctly executes repeated alert actions.

1336581, 00076562

Audit events are generated correctly.


Queries with Datetime are executed correctly

948689, 952451,
1066295, 1257968

Active alert resources respect view limitations based on Group Name Pattern or Group of Groups.

1092588, 1037529, 1260477, 1013431

Alerting actions trigger without delay.

00036699, 00025363

You can close ServiceNow tickets in ServiceNow. Closing a ServiceNow ticket stops sending Orion alerts for the issue.

1168389, 1173705, 1221600, 1120837,


You can add interfaces and volumes on agent-polled nodes or nodes that are found twice to the Discovery Ignore List.


Syslogs and Traps views are displayed correctly if you have devices with the same MachineTypes, each MachineType with different special characters.


External processes start successfully when the username has the format user@domain.

1355539, 1311390

The JobEngine service runs without issues, and performance data is updated on devices.

1089413, 1101096

Child elements of a storage array respect user limitations of the parent array.

1082086, 959170

The security issue with the OpenSSL library in Orion Platform products is resolved.

1163039, 1109011, 1148640, 1179830, 1161572

New custom properties are displayed without issues when inserting variables into alerts.


View limitations are applied correctly in the hardware Health Overview widget.

1094540, 1224160

When creating groups, the Search by Node IP address works correctly.


Using Advanced Database Queries in reports works without issues.

00022780, 00032805, 1130747, 1125894

Custom chart resources display correctly.

1104961, 1238351, 1150263, 1273370, 1338333

QoE/DPI does not excessively affect the performance of the Orion Web Console.

00018883, 1334323, 1355867, 1365779, 1359469

Custom properties show on maps without issues.


The readme for offline help files is correct.


Node validation issues with SNMPv3 columns are resolved.

1108733, 1357345, 1197953, 1174828

ServiceNow field is now displayed as a text box.

876639, 889594, 920136, 1102219, 1358660

Custom charts show only the number of top records configured in the Show only limited number of top records.


Latitudes and longitudes with a trailing 0 are displayed correctly on the WorldMap.

00036038, 00023095

The alerting service is working without issues.


SilverPeak devices are displayed correctly.

00053297, 1357894, 1361734

After the upgrade, user graphics are displayed correctly in the Network Atlas.


Credentials cache is disabled by default.


ServiceNow integration: The Contact type field provides correct values, and new tickets are created instead of reactivations.

1166495, 1188140, 1193919

The Credentials manager can support over 1,000 credentials.


Database maintenance retains dependencies between discovery profiles and found nodes.


Mount point disks are polled correctly when the node is an agent.


Alert macros using variables work correctly.

00021978, 808735, 1185765, 1232236

SWQL queries with long alert conditions are displayed correctly.

00022839, 1279384, 1325433, 1273022

SQL queries in send email actions are parsed correctly.

1336787, 00049928

You can integrate DPA into Orion using Windows SQL authentication.

1243055, 1258332, 1259100, 1273347, 1283616

Mount points on WMI nodes are monitored correctly.


A custom report resource retrieving a large amount of data displays without issues.


A new alert for groups based on MemberAvailability is available out-of-the-box.


The Configuration wizard completes successfully when the IP address is used in binding.


When configuring mail recipient actions, you can use more than one macros.

1233991, 1209460

After restarting the alerting service v2, old macros work without issues.


XSS vulnerability in the Message Center and in Details views has been resolved.


Limitations on views and resources work correctly.


Issues with receiving bad traps have been resolved.


ServiceNow integration now reflects inactive choices..

1243201, 1265030, 1241747, 1265030

After upgrading the Orion Platform, Configuration wizard completes successfully.

1234343, 1162526, 1347668, 1154095, 1234837, 1243148, 1263062

Mandatory custom properties are required.


Reports with duplicated charts initialize correctly.


When uninstalling Orion Platform products, Configuration wizard completes without issues.

1166270, 1174828, 1180967, 1207039

ServiceNow integration: issues with state and incident state have been resolved.


ServiceNow integration: the Contact type field references the correct field, and the Orion Platform correctly opens new tickets.


When editing custom properties, you can add notes and links without issues.

1243971, 1319151, 1243971, 1184410, 1178884, 1194514

Orion Web Console displays in one language.

00052045, 1321106

${N=SwisEntity;M=DetailsUrl} variable returns the correct value from the OrioWebServerAddress settings.

1155599, 1185495

PDF formatting issues when using third party engines have been resolved.

1149359, 1181261

Alert actions requiring executing external programs or VB scripts work without issues for non-built-in domain Administrator users.


Searching in the Action Manager returns correct results.

00034880, 1224826, 1356370, 1357396

Settings for an AD account are stored in the Orion Web Console even after the user logs out.

1191301, 1187591, 1329563, 1337451

Orion certificates are upgraded from sha1 to sha256.

00010367, 00068806, 00060064, 1365612, 1363354, 00060064

When displaying the Message Center page in the Orion Web Console, the memory utilization in SWIS is appropriate.


ServiceNow integration: Incidents closed based on events do not reopen incorrectly.

00050141, 00057324, 00032910, 00053703

The vulnerability towards the ROBOT attack has been addressed.


Inappropriate error messages in the Orion Web Console do not appear.

1197522, 1356174, 1202106

When a dependency is corrupted, valid dependencies display in the Dependency widgets and views.

1194193, 1240374

The OrionServers table is updated from the main polling engine server.

1356961, 00019305, 00056252, 00068463, 1197497, 1232325, 00042222, 1126690

The SWIS subscription link from an additional polling engine to the main polling engine is working correctly.


Performance Analysis queries NPM tables only if you have NPM installed.

Known issues in NTA 4.4

The Configuration wizard doesn't load after an upgrade from NTA 3.11 to NTA 4.2.3

Issue: The Configuration wizard gets stuck on the NTA Flow Storage Configuration screen where it requires to configure the remote NTA Flow Storage database instead of installing a local version.

Work-around: Uninstall NTA or configure a remote NTA Flow Storage database, running on the FastBit database engine.

Known issues in Orion Platform 2018.2

Template for Orion Maps

Issue: Orion Maps only works with the default device type view template.

Work-around: None


SRM Entity ancestry and Orion Maps

Issue: SRM Entity ancestry is not currently available in Orion Maps.

Work-around: None


VMware data-stores in Orion Maps

Issue: VMware data-stores are not currently represented in Orion Maps.

Work-around: None


IE11 and Orion Maps

Issue: There is a known issue with IE11 and Orion Maps that affects iconography.

Work-around: None


Hover behavior and muting in Orion Maps

Issue: Systems that do not have access to hardware acceleration could have issues with hover behavior and muting in Orion Maps.

Work-around: None

Deprecation notices

This version deprecates the following hardware, software, and features. 

Deprecation indicates that the feature should be avoided. Deprecated features remain in the software, but will be removed in a future release. Customizations applied to a deprecated feature may not be migrated if a new feature replaces the deprecated one.

Type Deprecation
Windows Server 2012, 2012 R2 This software is deprecated as of this release. Although you can install Orion Platform 2018.2 products on Windows Server 2012 and 2012 R2, Windows Server 2012 and 2012 R2 are deprecated and will not be supported in future versions of the Orion Platform. SolarWinds strongly recommends that you upgrade your operating system to Windows Server 2016 or later at your earliest convenience.
SQL Server 2012 This software is deprecated as of this release. Although you can use SQL Server 2012 with Orion Platform 2018.2 products, this version is deprecated and will not be supported on future versions of the Orion Platform. SolarWinds strongly recommends that you upgrade to Microsoft SQL Server 2016, 2017, or later at your earliest convenience.
All Active Alerts resource

The current  All Active Alerts resources is deprecated. The resource is replaced with a new, enhanced widget. You can continue to use the deprecated, legacy resource.

Pre-configured resources

(Availability, Min/Max/Average, Percent Loss, etc.)

Most pre-configured resources are deprecated as of this release. The resources will be compressed into single, configurable widget in a future release.
Last XX resources Pre-configured Last XX resources are deprecated as of this release. They will be replaced with a single, configurable widget in a future release.
Managed Nodes

The current Managed Nodes page is deprecated as of this release. A new version is available, but you can continue to use the legacy page.

SolarWinds recommends migrating to the new Managed Nodes page at your earliest convenience.

Customize Views  The Customize View page is deprecated as of this release. Functionality is migrating to the Customize Page feature.

Search resources

(legacy search, search on thwack, search for nodes, etc.)

All search resources are deprecated as of this release. Use the integrated search in the global navigation.

Legal notices

© 2018 SolarWinds Worldwide, LLC. All rights reserved.

This document may not be reproduced by any means nor modified, decompiled, disassembled, published or distributed, in whole or in part, or translated to any electronic medium or other means without the prior written consent of SolarWinds. All right, title, and interest in and to the software, services, and documentation are and shall remain the exclusive property of SolarWinds, its affiliates, and/or its respective licensors.


The SolarWinds, SolarWinds & Design, Orion, and THWACK trademarks are the exclusive property of SolarWinds Worldwide, LLC or its affiliates, are registered with the U.S. Patent and Trademark Office, and may be registered or pending registration in other countries. All other SolarWinds trademarks, service marks, and logos may be common law marks or are registered or pending registration. All other trademarks mentioned herein are used for identification purposes only and are trademarks of (and may be registered trademarks) of their respective companies.




Last modified