This weeks update contains the following additions:
Exceptions for WAF
You can now define exceptions from your usual WAF profile.
As you would expect, you can configure them at Web Application Security >> Web Application Firewall >> Exceptions.
Cluster Support for WAF
WAF connections can now be distributed over active cluster nodes.
Note about WAF signing keys
At Web Application Security >> Web Application Firewall >> Advanced you can now see and edit your signing keys for Cookie Signing and URL Hardening. Previously they were generated as strings of random bytes, so what you see there might look pretty garbled. New signing keys will be generated as strings of characters only to avoid this, but we decided not to change existing keys since that would require a lot of upgrade handling.
As a help text is still missing there some notes of caution: If you change the signing keys, obviously existing cookies stored in client browser will become invalid and saved links containing the URL signature will become invalid.
Fixed Issues
- [12278] [UBB][7.850] Failed to create PPPoE socket: Protocol not supported
- [12283] [UBB][7.851] Bandwith monitor Byte counter is confused
- [13645] [UBB][7.910] IPv6 not blocked with GeoIP
- [13659] [UBB][7.910]columns swapped in VPN reporting
- [13717] [UBB][7.911] utf8 handling broken when importing V7 backups with non-ASCII strings
- [13750] [UBB][7.911]pppd-l2tp: Could not determine local IP address
- [13813] [UBB][7.912]Remote syslog log selection
- [13823] [UBB][7.912]POP3-Proxy: Prefetching stops working when server offers messages with ambiguous UIDL ids
- [13891] [UBB] geoip-drops are logged with action "log" instead of "drop"
- [13921] [UBB][7.912]inline help references to removed "ACC version"
- [13929] [UBB][7.912]Teredo fails to send packets
- [13953] [UBB][7.920]http proxy fails eicar test
- [13954] [UBB][7.920]IPS broken again (shared object rule)
- [13957] [UBB][7.920] PPPoE fails on first boot after installation
- [13959] [UBB][7.920]WAF firewall profile AV Scan
- [13962] [UBB][7.920]http proxy failed to get scanner instance
Download Information
ASG ISO for Software/Virtual appliance installation:
ftp://ftp.astaro.de/pub/ASG/v8/beta/asg-7.921-7.1.iso
ISO size................: 352M (369190912 bytes)
ISO md5sum..............: 02d35c32d656d7848ff472308d7d9bf3
ISO sha1sum.............: 5db875329ab8c8dbcff3772c7358c899948d0f71
SSI ISO for Hardware appliance installation:
ftp://ftp.astaro.de/pub/ASG/v8/beta/ssi-7.921-7.1.iso
ISO size................: 362M (379453440 bytes)
ISO md5sum..............: 192e39464f3e35286cb6063f5e12528b
ISO sha1sum.............: 81ab91cbe04bb1e2b6fd66ee2697ad50a4040b7f
Up2Date package:
ftp://ftp.astaro.de/pub/ASG/v8/beta/u2d-sys-7.920-921.tgz.gpg
U2D size................: 79M (83345277 bytes)
U2D md5sum..............: b3232c090792c18fe2e34b54946b82a5
U2D sha1sum.............: dd928e73e74c43e3dc6f12a03139865cf7205fb8
Please note that the Up2date package will also be distributed over the
Up2Date server, so your ASG should usually download the package by itself.
