A little delayed against our initial schedule I've just released 8.910.
On the front-end side no change really sticks out, just lots and lots of fixed smaller issues.
There were two bigger changes in the backend, though:
Reducing number of Kernel variants
As you might know, we use different kernel variants depending on your machine. We have dropped the "default" and "default64" variants which were used for single-core machines. Given that none of the appliances we currently ship uses those variants anymore (the newest 110/120 already have two cores) and given that performance tests did not show a big advantage for the dedicated kernels we decided to drop them. So currently all machines will either use the "smp" or "smp64" kernel (except the Amazon EC2 instances which need a special variant).
IPS Engine now distributed as pattern
Previously we shipped the Snort IPS engine with the ISO/Up2Date and distributed only pattern updates via the pattern infrastructure. Starting with V9 we will ship the whole Snort via pattern infrastructure (like we do for our Antivirus scanners already). This should improve the quality of IPS patterns and the update speed.
This also includes an update of the Snort engine.
Fixed Issues
- [14384] Reporting for the FTP proxy does not work
- [19646] V9 fails to install in HyperV
- [19701] [UBB][8.900] WiFi: Client associated time not nice
- [20488] Backup restore doesn't work for Endpoint Protection
- [20495] Server Load Balancing is broken
- [20511] xen: oops at installation time
- [20512] [UBB][8.900] LCD Display wrong on UTM220
- [20518] [UBB][8.900] Packetfilter Group color "dark gray"
- [20521] [UBB][8.900] Clientless VPN is not clientless (Flash is always required)
- [20533] [UBB][8.900] IE8 glitch: Interfaces don't show up
- [20537] [UBB][8.900] Snort not running - restarted (without coredump)
- [20543] [UBB][8.900] Firewall violations graph / Bandwidth Usage Conter counts to high
- [20544] [UBB][8.900] View button in archived logs missing
- [20567] [UBB][8.900] If you enter a Voucher Definition dividable/ 24h the time will be set in minutes instead of days
- [20603] [UBB][8.900] Web Protection: Home license text overlaps normal text
- [20604] [UBB][8.900] Wrong description if "Network accounting" is disabled
- [20605] [UBB][8.900] IOS 5.01 issues so far
- [20610] [UBB][8.900] Webproxy takes 99% to 180% CPU
- [20621] [UBB][8.900] cluster: pop3/ftp distribution broken
- [20670] [UBB][8.900] Factory Reset does not clear DHCP IPv4 Lease Table
- [20678] Hotspots don't work with transparent proxy
- [20700] [UBB][8.900] add group-dropdown in NAT and AppCtrl (similar to packetfilter rules)
- [20730] [UBB][8.900] u2d parent-proxy causes "unknown service" errors
- [20731] [UBB][8.900] wizard-cosmetic
Download Information
ASG ISO for Software/Virtual appliance installation:
ftp://ftp.astaro.de/pub/UTM/v9/beta/asg-8.910-26.1.iso
ISO size................: 457M (478771200 bytes)
ISO md5sum..............: 19ccfd1f955431204a2879d709b6151d
ISO sha1sum.............: 04c7546ef70de49ea2dfd60ac124cf76e3ecbbf1
SSI ISO for Hardware appliance installation:
ftp://ftp.astaro.de/pub/UTM/v9/beta/ssi-8.910-26.1.iso
ISO size................: 459M (481419264 bytes)
ISO md5sum..............: 00a5c957eabf092ea6e44333889bc42f
ISO sha1sum.............: 54711cc48f6310054757943c462fae43524fcb13
Up2Date package:
ftp://ftp.astaro.de/pub/UTM/v9/beta/u2d-sys-8.900-910.tgz.gpg
U2D size................: 109M (114322692 bytes)
U2D md5sum..............: 18245748e410f626b8cef261a102e5f8
U2D sha1sum.............: 064664f45fddc2ac3f1c4de44d254770b3993388
Please note that the Up2date package will also be distributed over the
Up2Date server, so your appliance should usually download the package by itself.
