we recently upgraded from astaro's version 6.303 to 7.005
and we had some bad experience, so i'd like to share it
with those who are planning to migrate.
we use the astaro software for firewalling and
intrusion protection in a network with about 300 computers.
we have a lot of network and service definitions, quite a lot
of ips configuration, no ipsec vpn by now, because we
were wating for open vpn (before that we were wating for
ipsec vpn support in bridging mode for a long time and dropped
it in the end, tired of reading always the same slogan: "will be
a feature in the future", did it ever come?)
everything seemed to work after the backup import of 6.303, but
then we had strange behavior.
some vpn tunnels didn't work properly (e.g. some websites were
reachable, others not).
we had massive ping packet loss from outside to inside.
we switched off everything (ips, packet filter, icmp rules, etc.)
but nothing changed.
we realized that all the service definitions that contained groups
in a group were imported, but somehow broken. everytime when we
tried to edit the definition (you have to use 'edit' if you want to
see the group members), the webinterface hung up itself.
no chance to fix.
beside that we have double standard services now (e.g. the imported
imap and the version-7-imap).
i had a look at the iptables rules and everything looked fine.
i have no clue about what was going there and much more i don't
have the time to figure it out. i will reconfigure
everything by hand.
greets bibo
This thread was automatically locked due to age.
