ASG Up2Date 6.203 released [Middle]

Version 6.203 introduces two new features and a bunch of bug fixes. These new features are: support for USB sticks for backup-file installation during bootup and Port-80 support for the Surf Protection database connect. Check the details and also the list of 19 bug fixes.

USB stick support
During bootup ASG V6.203 will check if a USB stick a available and readable and if an unencrypted backup-file (backup.abf) is stored. If so, the backup-file will be installed without any user interaction. To prevent an inadvertent reinstall next time the ASG reboots the USB is logical locked. You need to remove and then plug-in again the USB stick to install the backup-file again. If there is more than one backup-file stored on the USB stick, the first one in lexical order will be used. We tested a wide range of USB controller and USB sticks but we afraid that there are some out, which will not work. Maybe you will test your USB controller and USB stick in the case you don’t use an ASG appliance. We thought that is a helpful shortcut for disaster recovery, but do not wish that you need it one day.

Port-80 support for the Surf Protection
The Surf Protection databases will be connected on TCP-Port 6000 per default. In some case this does not work because of an additional upstream firewall. With version 6.203 your ASG checks if it can connect the database via TCP-Port 80 (maybe through an additional upstream proxy and firewall). There is nothing to-do for you nor a menu in the WebAdmin to enable this feature.

Remarks

• Required previous version is 6.202
• Existing configuration will not be changed
• !! Firewall will reboot after Up2Date !!

New/Changed/Improved

• SurfProtection now also tries to connect via tcp port 80 to the external database. For HTTP this will also work via parent proxy. Connections via tcp port 6000 (default behavior before) are still supported
• Added Automatic Configuration Import from USB stick during ASG bootup
• Fixed possible evasion attack against IPS subsystem

BUGFIX

(please refer to the known issue list on http://www.astaro.com/kb)
ID3270 L2TP does not work if bridge is enabled
ID3340 DHCP server not authoritative
ID3462 Blacklist extension filter blocks wrong downloads
ID3464 Usernames do not show up in http_access log
ID3482 Default ICMP Flood Protection settings may cause issues
ID3630 Large swapfiles for hardware accelerated scanning
ID3642 Problem when using IPsec VPN on bridge interfaces
ID3715 Factory reset via cmdline may result in defective system
ID3719 SIP Proxy host length is limited to 32 characters
ID3744 Usernames do not show up in contentfilter blocked log
ID3767 IPSec Strict-Flag only used in Phase 2
ID3789 Petabyte spikes in network graphs
ID3798 IPSec autopacketfilter do not work in bridge mode
ID3802 HTTP download gets blocked as virus Oversized.zip
ID3811 Blocked webpages showing too many details
ID3816 Uplink Failover check IP is ignored for VLAN interfaces
ID3822 Single failed WebAdmin login counts two times in reporting
ID3838 Download window is too small when using Internet Explorer
ID3852 Max MTU limited to 3000 octets by WebAdmin

Download Information

All Up2Dates are GNUPG-signed! The Astaro Up2Date technology makes it easy to upgrade your installed Astaro Security Linux to the latest version. There are three ways to apply an Up2Date package to the system:

1. Log on to WebAdmin, navigate to "System -> Up2Date Service" and start a "Update now" in "System Up2Date. An extra browser window will show the progress of the Up2Date process and the System Administrator will receive a notification email once the Up2Date process has finished successfully.
2. Log on to WebAdmin, navigate to "System -> Up2Date Service" and enable "Prefetch Up2dates". The System Administrator will receive a Notification email after an Up2Date package has been successfully fetched and can install the Up2Date by clicking "[install]" on the now available menu item "Unapplied Up2Dates". An extra browser window will show the progress of the Up2Date installation and the System administrator will receive a notification email once the Up2Date process has finished successfully.
3. Download the Up2Date package from our HTTP or FTP Server:
   (MD5sum: f1a9ba0dbbf0735c39cd6c93a5ec8e75 Size : 71,683,253 bytes)
   HTTP: Astaro US – Astaro US2 – Astaro Germany – Astaro Germany2 – Australian Mirror – Austria Mirror – Japanese Mirror
   FTP: Astaro US – Astaro US2 – Astaro Germany – Astaro Germany2 – Australian Mirror – Austria Mirror – Japanese Mirror
   Log on to WebAdmin, navigate to "System -> Up2Date Service", start "Import from file" and import the downloaded Up2Date package. After a successful upload click "[install]" on the now available menu item "Unapplied Up2Dates". An extra browser window will show the progress of the Up2Date installation and the System Administrator will receive a notification email once the Up2Date process has finished successfully.

To install Astaro Security Gateway, you need the installation ISO image, available on our download page.