Up2Date 7.008 released [Middle]

We are pleased to announce the immediate availability of Astaro Security Gateway V7.008. Even if only titled as a maintenance release this version includes major functionality improvement besides many other enhancements and bug-fixes.

The major parts of the Up2Date are:

New Spam Scan Engine
As our existing SpamAssassin scanner was no longer sufficient for detecting latest sophisticated spam techniques we have replaced it with a new engine. This engine now allows precisely detecting spam techniques like PDF or image spam by use of advanced recurrent pattern detection technology. As this technique also consumes only a fraction of the CPU power required by SpamAssassin this furthermore leads to a significant overall performance improvement.

Regular Expressions within whitelists
You can now also use regular expressions within HTTP proxy whitelists. Hence please make sure not to use entries like "*.example.com" within the list of target domains, because those entries are no valid regular expressions and will therefore be skipped.

Deletion of user certificates
Deleting a user will now also result in deleting his certificate which means you can add a new user with the same username again.  

DSL reconnection
Automatic reconnection of DSL connections with statically assigned IP addresses now works properly. This also affects IPsec tunnels (Site-to-Site) which have not been established properly after a reconnect.

Other
Various scenarios creating a mix-up between WebAdmin, Enduser Portal and SSL VPN port have been fixed. Users that are added to a running system can now be used immediately for authentication, e.g. PPTP. Additionally this Up2Date contains a multitude of bugfixes for various sections of Astaro Security Gateway, please see below for details. Also browser incompatibilities, typos and other small issues have been corrected.

Up2Date 7.008

Remarks:

• Middleware will be restarted
• Active IP and VPN connections will be restarted
• Existing configuration will not be changed

News:

• Added new Antispam Engine for Email scanning
• Fixed several problems with WebAdmin and SSL VPN ports
• Fixed lots of small issues and browser problems
• Please check also the V7 release notes PDF.

Bugfixes:

5468 Definition dialog boxes with fixed width only
5711 IPSec tunnels may not come up after DPD event
5747 Intrusion Protection counter in dashboard incorrect
5778 User objects not allowed as source/destination in DNAT/SNAT rules
5786 SHA-2 with 512 bit not compatible with NCP/ASC IPSec client
5789 User certificate will not be deleted at all
6031 HTTP traffic in cluster may not be distributed to worker
6265 Portscan detection and logging consumes too much CPU resources
6320 POP3 spam email not tagged correctly
6333 Drag-and-drop fails with Internet Explorer
6375 Contentfilter whitelist does not use regular expressions
6421 HTTP Proxy does not log complete URL
6510 Up and down arrows don’t work correctly in HTTP Profiles
6571 L2TP daemon will not be restarted automatically
6607 Daily Spam Report may not be sent out correctly
6618 HTTP Proxy closes sessions after response
6639 Timezone glitch in WebSecurity Reporting
6692 Interface used in Dyndns settings can not be removed
6703 Automatic import of SMIME certificates not working correctly
6713 Changes to backend query order do not take effect
6715 Remote Syslog logs without facility and priority
6716 L2TP over IPsec offers wrong certificate
6732 Can not change PPPoE Daily Reconnect Time to ‘never’
6740 Authentication of new users may fail
6772 SMTP Mail processing may stop completely

Download Information

The Astaro Up2Date technology makes it easy to upgrade your installed Astaro Security Linux to the latest version. There are two ways to apply an Up2Date package to the system(All Up2Dates are GNUPG-signed!):

1. Log on to WebAdmin, navigate to Management >> Up2Date >> Overview and use Update to latest version now to install the Firmware Up2Date. Click on then Watch Up2Date Progress in new window and an extra browser window will show the progress of the Up2Date installation and the System administrator will receive a notification email once the Up2Date process has finished successfully.
2. Download the Up2Date package from our HTTP or FTP Server and install it under Management >> Up2Date >> Advanced:
   (MD5sum:598d2f716226e0c0d3eaf84f26cce92e Size : 107,631,385 bytes)
   HTTP:  Astaro US – Astaro US2 – Astaro Germany – Astaro Germany2 – Australian Mirror – Austria Mirror – Japanese Mirror
   FTP: Astaro US – Astaro US2 – Astaro Germany – Astaro Germany2 – Australian Mirror – Austria Mirror – Japanese Mirror

Feedback

If you want to provide feedback or want to discuss any of the ASG V7 features you should post it on our User Bulletin Board. Please take care to add always(!) the version you refer to (e.g. "[7.008] new spam scan engine and POP3 question…").
There is also a demo server to check ASG V7: http://demo.astaro.com.

Your Astaro R&D team