Thread Info
  • State Verified Answer
  • +6 person also asked this people also asked this
  • Locked Locked
  • Replies 165 replies
  • Answers 3 answers
  • Subscribers 55 subscribers
  • Views 525259 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Release of v17 MR-2?

Steppenwolf

Hej,

now that MR-1 has appeared, I wanted to ask when MR-2 will appear? The problems and instabilities of IPSec in v17 (especially in connection with V16.5) are very annoying.



This thread was automatically locked due to age.
Parents
  • +1

    Hi everyone,

    MR-2 release is tentatively on December 5th. This can change with unforeseen circumstance, but we'll update this thread if that is the case.

    We'll also post a Discussion post with Release Notes on the Community once its live.

    Cheers,
    Karlos

Reply
  • +1

    Hi everyone,

    MR-2 release is tentatively on December 5th. This can change with unforeseen circumstance, but we'll update this thread if that is the case.

    We'll also post a Discussion post with Release Notes on the Community once its live.

    Cheers,
    Karlos

Children
  • 0 in reply to Karlos

    Hi all !

    is there any news about the release of v17 mr2 ?

    i am a bit fedup with ipsec issues when wan links disconnections !

    thank's

  • 0 in reply to Karlos

    Any news about the MR-2 release? Will it arrive today?

  • 0 in reply to Steppenwolf

    I did have an open tech support case on this.   The tech told me yesterday that the release was going to be tomorrow Wed. (Dec 6th).  I'm hoping he was wrong and that it's today.  :-(

     

    -Scott

     

  • 0 in reply to Karlos

    Hej Karlos,

    what's the situation? December 5th is now over, what about MR-2?

  • 0 in reply to Karlos

    Hi Karlos

     

    Is there a list of for fixes or release notes for what is coming with 17 MR-2?

     

    thanks

  • +2 in reply to Kieron Goucher

    Hi Kiero,

    MR-2 is avaiable:

    A new firmware SFOS 17.0.2 MR-2 is available. We strongly recommend that you upgrade the device.
    Version
    • SF 17.0 MR2 (17.0.2.116)
    News
    • Maintenance Release.
    Bugs
    • NC-22609 [Access] Unable to import groups inside multiple OUs from AD.
    • NC-19427 [API] Wrong date in validationError.log.
    • NC-22394 [Authentication] User Portal login is logged as SSL VPN login.
    • NC-22769 [Authentication] When importing from AD, the name of OUs which are inherited by multiple OUs and groups is not shown correctly.
    • NC-23112 [Authentication] Authentication Agent - getting logged out automatically at random time.
    • NC-19665 [Backup-Restore] Downloading backup creates Java exceptions.
    • NC-21785 [Base System] Wizard UI Improvements.
    • NC-22229 [Base System] SG115: pressing power off button does not shutdown appliance.
    • NC-22574 [Base System] Control center misleadingly shows notification of new firmware availability for few minutes after firmware upgrade.
    • NC-22631 [Base System] Typo in fwinstaller.
    • NC-22688 [Base System, Certificates] Missing QuoVadis Root Certificate.
    • NC-22771 [Base System] Export of 16.5 MR8 and import into v17.0 GA fails for configs without hostname.
    • NC-22780 [Base System] Migration from CR to SF failed on CR500ia-10F appliance.
    • NC-22911 [Base System] Blank screen is displayed when user synchronizes license after successful registration.
    • NC-25573 [Base System] Users cannot activate license keys from SFOS.
    • NC-22354 [Certificates] Passphrase box disappears after trying to upload a CA with private-key after upload fails.
    • NC-22734 [Clientless Access] HTML5 VPN: keyboard input not working on Android devices.
    • NC-22751 [Documentation] Japanese translation for LogViewer missing.
    • NC-17413 [Firewall] Business rules created with device destined IP address can't be blocked with network rules.
    • NC-20602 [Firewall] Incorrect validation for local acl and zone where HTTPS is disabled from current login zone.
    • NC-21180 [Firewall] Add "Action" column to firewall rule grouping.
    • NC-21897 [Firewall] Import/Export of firewall rule with dependent entity fails when a VLAN is configured on WAN.
    • NC-22219 [Firewall] Issue with SNAT policy with multiple gateways.
    • NC-22557 [Firewall] Service edit option not working in specific case.
    • NC-22670 [Firewall] Unable to create RED interface.
    • NC-22923 [Firewall] Hostset ERROR: XG stopped Responding.
    • NC-22932 [Firewall] Export/Import fails for every entity after exporting Security Policy entity.
    • NC-22946 [Firewall] Typo in SF API documentation for IP host object.
    • NC-22958 [Firewall, SFM-SCFM] SFM Compatibility v17: DNAT rule cannot be updated in some combinations of forward type.
    • NC-22982 [Firewall] Incorrect position of firewall rule name in Firefox.
    • NC-22424 [Framework(UI)] Close notification button does not work properly.
    • NC-22917 [Framework(UI)] Infomation icon does not show any info text in authentication page.
    • NC-21856 [IPS] In AppFilter policy smart filter values are still displayed after removal.
    • NC-22448 [IPS] Custom IPS signature not working for all keyword supported by snort.
    • NC-22753 [IPS] Application filter is not updated when there is no application matching smart filter.
    • NC-22834 [IPS] Application Filter Policy: All application is showing while editing through firewall rule with "selected individual application".
    • NC-22382 [IPsec] IPsec UI allow to configure incompatible policy resulting in a silent DPD action change in the backend.
    • NC-22383 [IPsec] Typo in IPsec policy list: 'Action on Active Peer'.
    • NC-22489 [IPsec] Incorrect IP routes added for local VPN traffic in case of NAT over IPsec.
    • NC-22502 [IPsec] IPsec PSK secrets files do not contain local VPN IP.
    • NC-22620 [IPsec] DGD can not be disabled.
    • NC-22622 [IPsec] 'Remote ID' value shows blank on UI for IPSEC connection when external cert is used.
    • NC-22633 [IPsec] Activate on save tries to connect to respond only connections.
    • NC-22793 [IPsec] Cisco VPN connection with cert auth not working on iOS using config from userportal.
    • NC-22888 [IPsec] IPsec S2S tunnel with PSK and local/remote ids not working.
    • NC-22892 [IPsec] Aggressive mode IPsec policys are not filtered correctly in UI.
    • NC-22900 [IPsec] Cannot create 2 IPsec RSA connections with same local id to different remote gateways.
    • NC-22914 [IPsec] Connection status for DGD IPsec connections is not shown correctly.
    • NC-23035 [IPsec] DGD table locked - postgres has returned errcode 25P02.
    • NC-23125 [IPsec] "Randomize Re-Keying Margin by" - When setting the value to 0%, UI displays 100% after saving the policy.
    • NC-23186 [IPsec] IPsec status not displayed when too many SAs are established.
    • NC-22549 [Logging] Sandstorm logo displayed in RED for reason "eligible","pending" & "Cloud Malicious".
    • NC-22745 [Logging] Port and protocol information are missing in LogViewer standard view and filter.
    • NC-15612 [Mail Proxy] Update DLP engine and CCL data.
    • NC-19881 [Mail Proxy] Whitelist and blacklist for e-mail/domains in WebAdmin.
    • NC-21366 [Mail Proxy] Spam e-mails pass due to error " X-CTCH-Error: Unable to connect local ctasd".
    • NC-21437 [Mail Proxy] Mail addresses with "systems" or "solutions" as top level domain cannot be added in address groups.
    • NC-21671 [Mail Proxy] Message is not displayed properly in LogViewer.
    • NC-21891 [Mail Proxy] Spam headers displayed in e-mail when sent through reply portal.
    • NC-22271 [Mail Proxy] Issues with mails in spool marked with a firewall ID.
    • NC-22921 [Mail Proxy] Email flow is affected for recipients using TLS1.0.
    • NC-25332 [Mail Proxy] awarrenmta service segfaults when IP reputation is enabled.
    • NC-22504 [Network Services] Unable to assign two static IP mappings for the same host in different DHCP scopes.
    • NC-22163 [Networking] OSPF Neighbors not updated on changing multicast group limit.
    • NC-22539 [Networking] Fail to add vlan when specific DHCP server confiration migrated.
    • NC-22662 [Networking] Unable to make changes in WAN Link Manager for an interface with /31 subnet .
    • NC-21952 [RED] Site-to-Site RED tunnel between XG and UTM does not pass traffic with hardware acceleration enabled.
    • NC-22433 [RED] Generating certificates fails when long company name is used.
    • NC-22174 [Reporting] Missing size verification on custom logo for on-box reporting.
    • NC-22819 [Reporting] Application reports stop working after enabling Sync App Control.
    • NC-22853 [Reporting] Drill down is not working in mail report when "Mail Count" is selected as sortby.
    • NC-22868 [Reporting] Font style mismatch.
    • NC-22364 [SecurityHeartbeat] EP_Certificates table not available error .
    • NC-22778 [SecurityHeartbeat] Heartbeat registration fails with appliance in HA.
    • NC-22151 [SSLVPN] When using special character in Appliance Certificate, SSL VPN connection fails.
    • NC-22116 [Synchronized App Control] Last occurance time of applications in SAC is not consistent between HA nodes.
    • NC-22384 [Synchronized App Control] After de-registration of Heartbeat enhancedappctrl service is still running.
    • NC-22440 [Synchronized App Control] Sort list of categories in SAC customize menu.
    • NC-22766 [Synchronized App Control] Path of a customized app is shortened in SAC customize popup when app path contains slashes.
    • NC-22768 [Synchronized App Control] Uncategorized category is shown twice in the SAC customize popup.
    • NC-22813 [Synchronized App Control] Fixed height for SAC data table.
    • NC-22824 [Synchronized App Control] EP name with special character is not displayed correctly for macOS in SAC list.
    • NC-22962 [Synchronized App Control] Show category in SAC app list.
    • NC-22544 [UI] Incorrect start time displayed in Live Users list.
    • NC-22576 [UI] Disclaimer message is shown without line breaks.
    • NC-25275 [UI] Internet usage time displayed "NaN:NaN" value in Live Users list.
    • NC-22319 [WAF] "Edit Reverse Authentication" dialog contains untranslatable strings.
    • NC-22521 [WAF] Leftover of shm files cause a WAF restart loop.
    • NC-21534 [Web] Certificate error on accessing sites with https scanning enabled.
    • NC-21930 [Web] Incorrect Error message on Captive Portal when the user exceeds the number of simultaneous logins.
    • NC-22023 [Web] Word list files with non-UTF8 or whitespace-only should not be uploaded successfully.
    • NC-22124 [Web] Web Policy rule is converted to "AllWebTraffic" when adding more than one backslash character in the rule.
    • NC-22125 [Web] When maximum limit is reached, web exceptions cannot be updated anymore.
    • NC-22403 [Web] Certificate Error while accessing Outlook with direct proxy.
    • NC-22653 [Web] Policy Tester does not display backslash in policy name correctly.
    • NC-22721 [Web] AVD dies unpredictably when it runs out of memory.
    • NC-22800 [Web] AVD stability fixes.
    • NC-22930 [Web] Server side rbuf not reset for reused request.
    • NC-22954 [Web] Access to Custom Captive Portal does not work.
    • NC-23156 [Web] Not able to access any websites due to malformed ATP data update.
    • NC-23163 [Web] Font color for Initial Setup Wizard changes.
    • NC-12089 [Wireless] Unable to edit alias of "GuestAP" interface.
    • NC-19166 [Wireless] SSID disappears randomly with Dynamic Channel Selection.
    • NC-20761 [Wireless] Wireless Client List shows wrong IP address after network change.
    • NC-21369 [Wireless] VLAN and non VLAN SSIDs can't be selected at the same time for RED15w.
    • NC-22358 [Wireless] SSID is not broadcasted from time to time.
    • NC-22852 [Wireless] Wireless network interface status states being unplugged.
  • 0 in reply to Rodrigo Pereira

    Hi all

    IPSec failover group working as expected!  :)

    Regards

  • 0 in reply to Rodrigo Pereira

    Thanks for the Changelog/Update!

  • 0 in reply to Rodrigo Pereira

    Do you know when the files will be updated so can be manually updated?

    My 105 has picked up the update, but the two VMs I have for testing are not yet. The ISO's that are available are only MR1 spec.

    Thanks.

  • 0 in reply to Rodrigo Pereira

    Hmm....It seems as though user configured IPSEC Profiles are not able to be selected ?  We had a tunnel that is not coming up with a user created profile and you cant select it in the Profile drop downlist.