Astaro is pleased to announce that Astaro Security Gateway V7.1 GA is available now. Version 7.1 integrates exciting new Web Security features like Active Directory SSO native mode, improved performance, lower resource usage (without squid now), intelligent caching, re-added black/whitelist and audio/video streaming support.
On top of that we now support interface based packet filter rules, offer a detailed network accounting report and much more. Furthermore you will experience convenience changes and performance improvements.
What's new in ASG V7.1?
The new HTTP proxy provides the following major enhancements:
Active Directory native mode (NTLMv2/Kerberos)
Added support for NTLMv2/Kerberos authentication, which is required to authenticate against a Windows Domain Controller running in Native Mode.
Concurrent usage of black and white lists per profile
Within HTTP profiles you can now define filter actions that block and allow access to dedicated URLs/sites at the same time.
Streaming media bypass
Scanning of video and audio streams can be selectively disabled in order to avoid delays caused by downloading and scanning the entire stream through the HTTP proxy prior to playing.
Block content before download
File extension filter rules are now applied before downloading a file.
Dynamic configuration changes without restart
The new proxy now reloads its configuration without terminating existing connections
Profile/Filteraction logging
To help troubleshooting wrong profile/filter assignment matching, the used profile and filter action is now logged in the http logfile.
HTTP Proxy scans POST request bodies
The proxy now employs virus scanning for bodies sent with POST requests to foreign servers as well. If the body contains a Virus, the content is blocked with '403 Forbidden'.
Improved performance
Intelligent caching capabilities, support of HTTP 1.1 connection keepalive and a new IO model allow for increased network performance of up to 80% depending on hardware and content scanning configuration. Besides HTTP proxy enhancements the new release also includes the following new features:
- Packet filter based on interface
- Auto-Packetfilter rule generation for NAT traffic
- SPAM Scanner with X-SPAM Flag
- Network Accounting/Usage
- Contentfilter double byte support
- Virtual HA MAC-Addresses (MAC address takeover)
- Multiple-IP-Check Uplink Failover
- >utomatic user creation support for eDir SSO
- DynDNS-for-Static-Ethernet
- Disabling of proxy and IPS exceptions
- Disabling of aliases on network interfaces
- Global NAT Traversal option
A detailed description of the new features, changes, system requirements as well as installation and upgrade information is included within the Astaro Security Gateway V7.1 Release Notes. The Astaro Security Gateway Administration Guide, a hardware compatibility list and a Known Issues List for the GA release are available on our knowledge base.
License
ASG V7 includes a 30 day all feature on trial period.
Feedback
If you want to provide feedback or want to discuss any of the ASG V7 features you should post it on our User Bulletin Board. Please take care to add always(!) the version you refer to (e.g. “[7.100] Active Directory authentication “). If you have feedback to our documentation (Online Help) please send it to docu@astaro.com. There is also a demo server to check the new GUI: http://demo.astaro.com
Download Information
ISO image asg-7.100-071203-2.iso
size: 469 MB (469,676,032 Byte)
md5sum: e04aef8ea0bebb6051bf700a1309bc41
FTP server: * Germany * Germany2 * US * US 2 * Austria Mirror * Japanese Mirror
HTTP server: * Germany * Germany2 * US * US 2 * Austria Mirror * Japanese Mirror
VMWare Images for Player/Workstation, ESX v2 and ESX v3
FTP server: * Germany * Germany2 * US * US 2 * Austria Mirror * Japanese Mirror
HTTP server: * Germany * Germany2 * US * US 2 * Austria Mirror * Japanese Mirror
BitTorrent:
* http://download.astaro.de/ASL/v7.0/iso_i386/asg-7.100-071203-2.iso.torrent
(If you are not familiar with BitTorrent, please check out this detailed description: http://en.wikipedia.org/wiki/Bittorrent).
Search for “how to burn” on our Knowledge Base (http://www.astaro.com/kb/) if you have trouble to burn a CD from the ISO image.
Installation and Hardware Requirements
- The software needs to be installed on a dedicated Intel compatible PC.
- Astaro minimum recommendation for V7.1 BETA installations: Intel Pentium III 900 MHz, 512MB RAM, 10 GB hard disk drive and above.
- Best performance results running on: Dual Xeon or Athlon, 2GB RAM, 36 GB SCSI 15krpm hard disk drive and above.
- For proved hardware components please check our Hardware Compatibility List (HCL) at: http://www.astaro.com/lists/HCL-ASG-V7.txt
Up2Date 7.100
Remarks:
- System will reboot after Up2Date
- Existing configuration will not be changed
- Customers upgrading from versions prior to 7.100 MUST re-join the Firewall to the AD domain if they use SSO. In order to join the AD domain, the firewall must find a DC (Domain Controller) machine. In previous versions, this was done with a NetBIOS broadcast.
- Starting with ASG 7.100, pure AD (native) mode is used, which in turn requires finding the DC with a DNS lookup. There are also more strict requirements on DNS resolution and time differences. The following conditions must be met:
– The time zone on the firewall and the DC must be the same.
– There MUST NOT be a time difference of more than five minutes between the firewall clock and the DC clock.
– The ASG hostname must exist in the AD DNS system.
– The ASG must use the AD DNS as forwarder, or must have a DNS request route for the AD domain which points to the AD DNS server.
News:
- Please see detailed release notes at http://download.astaro.de/ASL/v7.0/iso_i386/ASGV7.1_ReleaseNotes.pdf
Bugfixes:
Fix [6102]: .com websites are blocked by file extension scanner
Fix [6106]: Changing type of an interface will delete corresponding NAT/Masq rules
Fix [6178]: Whitelisting does not work under certain circumstances
Fix [6281]: NTLM doesn't work with IE7 and Windows Vista
Fix [6389]: WebAdmin very slow when using many objects
Fix [6438]: WebAdmin SSO support for ACC not working
Fix [6463]: More than one Executive Report in HA/Cluster environment
Fix [6492]: WebAdmin becomes unresponsive after a longer log-in period
Fix [6628]: Wrong message after too many failed WebAdmin logins
Fix [6651]: HA/Cluster stops working if ha password has special characters
Fix [6741]: Email Encryption logfiles filling up partition
Fix [6763]: Problems with IPSec and DNAT on bridge interfaces
Fix [6865]: Daily Spam Report is sent to all users
Fix [6982]: Anti-Spam filter not working in some environments
Fix [7014]: eDirectory authentication does not work if BaseDN is empty
Download Information
The Astaro Up2Date technology makes it easy to upgrade your installed Astaro Security Gateway to the latest version. There are two ways to apply an Up2Date package to the system (All Up2Dates are GNUPG-signed!):
- Log on to WebAdmin, navigate to Management >> Up2Date >> Overview and use Update to latest version now to install the Firmware Up2Date. Click on then Watch Up2Date Progress in new window and an extra browser window will show the progress of the Up2Date installation and the System administrator will receive a notification email once the Up2Date process has finished successfully.
- Download the Up2Date package from our HTTP or FTP Server and install it under Management >> Up2Date >> Advanced:
(MD5sum: 2e1a36d6374fd663763e49367b54533d Size : 152,837,625 bytes)
HTTP: Astaro US – Astaro US2 – Astaro Germany – Astaro Germany2 – Australian Mirror – Austria Mirror – Japanese Mirror
FTP: Astaro US – Astaro US2 – Astaro Germany – Astaro Germany2 – Australian Mirror – Austria Mirror – Japanese Mirror
Supported Web Browsers
The Astaro Security Gateway V7 graphical user interface (WebAdmin) will support the following browser/platform combinations:
MS Windows 2000/XP/Vista
- IE6 or higher (including IE7)
note: parallel installations of IE6 and IE7 are not supported! - Mozilla Firefox 1.5 or higher
- Safari 3.0 or higher
Linux:
- Mozilla Firefox 1.5 or higher
Mac OSX:
- Safari 2.0.3 or higher
- Mozilla Firefox 1.5 or higher
Note: the iPhone Safari browser has certain limitations – hence it is not supported
Other browsers could also work, but might be subject to rendering or JavaScript issues. They are unsupported. Java or Flash support is not needed.
We recommend using Firefox on a system with at least 512 MB RAM and a CPU with 1.5 GHz or more to achieve maximum performance
Your Astaro Teams
You Can Learn More About the Astaro Internet Security Product Line By Going to www.FirewallShop.com/Astaro.
The original article/video can be found at Up2Date and ISO ASG V7.100