Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 14 replies
  • Subscribers 2 subscribers
  • Views 1950 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Astaro Security Gateway Up2Date 8.303 Soft-Released

AngeloC
Greetings,

We have made available version 8.303 as a Soft-Release. This is a maintenance release designed to enhance the stability, performance, and security of your ASG V8 installation. Being a soft-release, we will monitor this thread until the expected GA Push via Up2Date on May 15th. If you would like to manually install this release and provide your feedback in this thread, you will find the details of this package below.

News:
- Maintenance Release
- Several improvements for Web Filter AD integration
- Several fixes for Web Security Reporting
- Updated timezone data

Remarks:
- System will be rebooted
- Configuration will be upgraded
- Connected Wifi APs will perform firmware upgrade

Bugfixes:
[18649] Remote Access Report pdf and xls download didn't work
[19889] HTTP proxy redirects Adobe Flash Action Message Format requests to downloader page
[19962] Some IPsec respond only connection can't establish after DSL reconnect from Provider
[19968] postgres causes high load due to the default websecurity detail level 4
[20238] ipsec packet loss after slave reboot
[20263] Trendmicro updates filling up tmp directory with downloads again
[20506] problems with MTU size after update on a HA system

Data:
- Size: ~103MB
- Md5sum: fe1250bb6ebfcbaf2f51c8088b4fb94a

Download:
ftp://ftp.astaro.de/ASG/v8/up2date/u2d-sys-8.303.tgz.gpg
ftp://ftp.astaro.de/ASG/v8/up2date/u2d-sys-8.303.tgz.gpg.md5


This thread was automatically locked due to age.
  • 0
    Angelo, does this up2date replace the bad intel NIC drivers (the ones with the issues with GRO and Bridging) -- I noted the new drivers are a different (newer) version than in 8.302.

    Also, there was talk of some fixes to Snort with 8.303 -- are these included as well?

    CTO, Convergent Information Security Solutions, LLC

    https://www.convergesecurity.com

    Advice given as posted on this forum does not construe a support relationship or other relationship with Convergent Information Security Solutions, LLC or its subsidiaries.  Use the advice given at your own risk.

  • 0
    We've been using it for 4 days in our office and have had no difficulties.  I haven't tested any of the issues, nor was any issue addressed above a problem for us.

    Cheers - Bob
     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
  • 0 in reply to BAlfson
    Bob, there were / are significant issues with Intel NICs (using the e1000e driver) and bridged mode, and we've also seen some significant issues with IPS when in bridged mode as well --- both were supposed to be fixed in 8.303, just checking with Angelo to see if they can confirm that, as it's not listed in the up2date description document.

    CTO, Convergent Information Security Solutions, LLC

    https://www.convergesecurity.com

    Advice given as posted on this forum does not construe a support relationship or other relationship with Convergent Information Security Solutions, LLC or its subsidiaries.  Use the advice given at your own risk.

  • 0 in reply to BrucekConvergent
    Can anyone expand as to what's included in "Several fixes for Web Security Reporting"?

    We've had a serious problem since upgrading from 7.511 to 8.301.  My daily websecurity graph and web usage reports only display an hour or so of active, after midnight.  It's basically worthless.

    Support's answer as of a month ago was "This issue has already been fixed in the public version 9 beta", but they didn't know if would/could be backported into 8.x.
  • 0
    Hi Angelo,

    since 8.302, all the web usage is written in kilobytes instead of MB (TOP10 Clients by time, TOP10 Clients by traffic,... in our daily reports). It has not been corrected in 8.303.
    We also had a few problems with proxy (standard mode) since 8.301 and it seems to be OK now.

    Cheers !
  • 0
    @Bruce:  Yes, the Intel NIC GRO issues should be resolved in 8.303.
    __________________
    ACE v8/SCA v9.3

    ...still have a v5 install disk in a box somewhere.

    http://xkcd.com
    http://www.tedgoff.com/mb
    http://www.projectcartoon.com/cartoon/1
  • 0 in reply to Scott_Klassen
    Scott, thanks for the response... How about the Snort issues?  I saw an update in a thread related to Snort issues in the Beta forum, where Kai and I discussed an issue that has a Mantis thread common to the Beta and 8.3xx branches -- and the BetaBot today moved the proposed fixes for the 8.3xx stream out to 8.305... Mantis ID is 19199.

    Oh.. here's the thread too:  https://community.sophos.com/products/unified-threat-management/astaroorg/f/75/t/64043

    CTO, Convergent Information Security Solutions, LLC

    https://www.convergesecurity.com

    Advice given as posted on this forum does not construe a support relationship or other relationship with Convergent Information Security Solutions, LLC or its subsidiaries.  Use the advice given at your own risk.

  • 0
    In 8.303, Snort was reverted back to a known working version, 2.9.0.4.  Update to a newer snort version, 2.9.2.0 has been pushed to 8.305 for furthre testing/tweaking.
    __________________
    ACE v8/SCA v9.3

    ...still have a v5 install disk in a box somewhere.

    http://xkcd.com
    http://www.tedgoff.com/mb
    http://www.projectcartoon.com/cartoon/1
  • 0 in reply to Scott_Klassen
    Thanks Scott, much appreciated... just curious, why aren't things like this included in the release notes?

    Thanks again!

    CTO, Convergent Information Security Solutions, LLC

    https://www.convergesecurity.com

    Advice given as posted on this forum does not construe a support relationship or other relationship with Convergent Information Security Solutions, LLC or its subsidiaries.  Use the advice given at your own risk.

  • 0
    Hello,

    what ist meant with "- Several improvements for Web Filter AD integration"? Does anyone know what problem this will resolve?

    Best regards,
    N. Koch
Cookie Information Banner