First Beta release from the new offices [:)]
Update: The Up2Date package is now also available.
Stripped Backups / "Templates"
When creating a backup at Management >> Backup/Restore you can now specify to strip all host specific data and/or admin contact information. This makes it easier to use the backup to install a similar machine with this backup.
Full backups (as always done so far) are really only suitable to install them on the same machine or a machine that is a direct replacement for the old (mainly since the certificates/CAs will be identical on both machines).
host specific data includes:
- hostname (including configuration for e.g. SNMP, dyndns, User Portal)
- unique IDs for the system (e.g. HA, OSPF)
- static IPs in interface configuration
- generated CAs and certificates (e.g. WebAdmin, proxies)
- license
You will be asked to do a new basic setup after installing such an backup on a machine, this should regenerate most of the missing information.
admin contact information includes:
- Recipient list for automatic backups
- Recipient list for executive reports
- Recipient list for notifications
- Postmaster address for SMTP proxy
- SNMP admin contact
If combining this with stripping the host specific data, the admin mail address entered during basic setup will be added in those places again. You can choose to only strip the contact information, then no basic setup will be done (although I can't currently see a good use case for this).
SNMP version 3 support
When configuring SNMP you can now choose whether you want to use SNMPv2c or SNMPv3. The main difference for the configuration is the authentication and encryption support in v3. We have however not added a complete user/access management for SNMPv3. The ASG only supports configuring one user who can access everything.
New IRQ balancer for improved network performance
The ASG will now better assign handling of network traffic to specific CPU cores. According to our benchmarks this improves network throughput on systems with many cores and fast NICs (10 GB and 1 GB), e.g. ASG 625.
WebAdmin menu changes
Some changes to the WebAdmin menu structure:
- Merged top menu items Definitions and Users
- Merged top menu items Logging and Reporting
- Menu items for HTTP/S Proxy were renamed to Web Filtering
- Tabs for iPhone VPN access were renamed to iOS devices to make clear that they apply to iPad, and probably to any future Apple devices based on iOS, too
HTTP/S Proxy operation mode selection improved
HTTP/S proxy operation and authentication mode selection at Web Security >> Web Filtering was split in two parts to make it easier to understand. You now first select the operation mode ("Standard" or "Transparent") and then choose from the applicable authentication modes.
SHA2 for Site-to-Site IPSec between ASG V7 and ASG V8
You can now choose SHA2 as IPSec authentication algorithm when configuring an IPSec Site-to-Site connection from an ASG V8 to an ASG V7 (or other IPSec servers implementing an older draft of how this should work). At Site-to-Site VPN >> IPSec >> Policies you have to create a new policy and choose one of the entries with the "(96 bit)" suffix as IPSec authentication algorithm.
If you have no idea what I'm talking about, you probably don't need to know [;)]
Fixed Issues
- [12839] Site-to-Site connection will not be established with SHA2 as ipsec authentication algorithm
- [13648] [UBB][7.910] IPsec - subnets left empty can confuse users
- [17403] [UBB][8.161] typo in ha_takover message
- [17470] [UBB][8.162] Packet filter style log for application control
- [17556] [UBB][8.162] Application Control Gone Nuts
- [17559] [UBB][8.162] AppCtrl: improve errmsg wrt QoS dependency
- [17568] [UBB][8.163] WiFi: AP logging does not honor daylight saving
- [17595] [UBB][8.162] consistency / view log files
- [17601] [UBB][8.163] rename AAC to AAA incomplete
- [17604] [UBB][8.163] consistent layout L2TP VPN
- [17612] [UBB][8.163] Application control definitions cloning is broken
- [17625] [UBB][8.163] AppCtrl: html entities encoding problem with "VPN & Tunneling"
- [17633] [UBB][8.163] external broadcast address appears as Top5 client in reporting
- [17636] [UBB][8.163] cosmetic: popup stays open when creating new packetfilter rule
Download Information
ASG ISO for Software/Virtual appliance installation:
ftp://ftp.astaro.de/pub/ASG/v8/beta/asg-8.164-9.1.iso
ISO size................: 497M (520769536 bytes)
ISO md5sum..............: 482efa38b66eae8e33693a9e66b24fc2
ISO sha1sum.............: 4b785496605c852a6ef82d72af256e76c6e1f307
SSI ISO for Hardware appliance installation:
ftp://ftp.astaro.de/pub/ASG/v8/beta/ssi-8.164-9.1.iso
ISO size................: 498M (522031104 bytes)
ISO md5sum..............: e213b2355c09ae1043c398162e9f6855
ISO sha1sum.............: 10d072ac7dba202189a9ca995dc7fa4b2978ddd3
Up2Date package:
ftp://ftp.astaro.de/pub/ASG/v8/beta/u2d-sys-8.163-164.tgz.gpg
ISO size................: 96M (99780552 bytes)
ISO md5sum..............: 083e745b43460766faf198555cb28a5f
ISO sha1sum.............: 3c5d41a544e2131fd051dd8563a99bea60add51f
