The new SmartShield OVA is great. Couple issues I noticed during setup. It needs to let you enter two DNS entries for the SmartShield setup, currently only allows one. You enter two for the server IP addressing part, but when you get to the SmartShield setup part, you can only enter one DNS server. I believe this requires a manual edit of /etc/resolve.conf to add the 2nd entry, since I did not find a /usr/local/rocket/etc/resolve.conf file. Furthermore, the /etc/netplan/01... file needs to have dhcp4 set to false, otherwise the server gets both a static and dynamic IP address. I had to manually edit the netplan file to disable DHCP. Lastly, when you upload a new SSL certificate via the SmartShield web UI, it doesn't tell you to restart the server which you must do to apply the new certificate.