Tag: Network Security

New Astaro Secure Client released

Astaro Secure Client for VPN Networks. A Virtual Private Network (VPN) allows organizations to use the Internet for communication with mobile employees and remote offices at a low cost while maintaining excellent security. The Astaro Secure Client ensures the highest levels of security for VPN. It provides strong user authentication and end-to-end encryption so that mobile workers, home workers, and remote offices can communicate securely over the Internet with a central VPN gateway.

Astaro Report Manager released

Astaro Report Manager is a security data collection and reporting tool that makes it easy to collect, correlate and analyze data from Astaro Security Linux and other security products. It collects and correlates data related to firewalls, network activities, attacks and intrusions, VPN usage, email, viruses, and web usage by employees. Data is presented in a wide variety of easy-to-understand tables, charts and graphs that can be viewed online, printed, and emailed.

[Middle] Up2Date 5.023

Urgency: Middle(low, Middle, HIGH) Size: 23MB (23,672,123 bytes) md5sum: 76c1c10df79bfbe1e506f86b13c3250c Up2Date 5.023 Remarks Required previous version is 5.022 Existing configuration will not be changed Middleware will be restarted Active IP and VPN connections will be restarted Depending on the speed of the CPU the Up2Date installation will take a few minutes New/Changed/Improved Added NTLM authentication (Single Sign On with Active Directory) Added DNS hostname support to parent proxy for HTTP and Up2Date Improved HTTP Proxy performance when using authentication Bugfix (please refer to the known issue list on http://docs.astaro.org ) ID1463 Check for renaming Network Definitions is incomplete ID1482 Dead IPSec roadwarrior connections remain in system ID1491 Wrong formating in Proxy Content Manager ID1496 High Availability logs have wrong timestamp in WebAdmin ID1557 Uplink failover may not work correctly ID1564 HTTP uploads limited to 1 MB Download Information All Up2Dates are GNUPG-signed! The Astaro Up2Date technology makes it easy to upgrade your installed Astaro Security Linux to the latest version.There are three ways to apply an Up2Date package to the system. Log on to WebAdmin, navigate to “System -> Up2Date Service” and start a “Update now” in “System Up2Date. An extra browser window will show the progress of the Up2Date process and the System Administrator will receive a notification email once the Up2Date process has finished successfully.

[Middle] Up2Date 5.022

Urgency: Middle(low, Middle, HIGH) Size: 4MB (4,028,520 bytes) md5sum: 19da5947cedb35fd3b2e9f9a58e60fc5 Up2Date 5.022 Remarks Required previous version is 5.021 Existing configuration will not be changed Middleware will not be restarted Active IP and VPN connections will not be restarted New/Changed/Improved Improved notification for license counting Bugfix  (please refer to the known issue list on http://docs.astaro.org ) ID1556 HTTPS / SSL vulnerable to DoS attack (CAN-2004-0748) Download Information All Up2Dates are GNUPG-signed! The Astaro Up2Date technology makes it easy to upgrade your installed Astaro Security Linux to the latest version. There are three ways to apply an Up2Date package to the system: Log on to WebAdmin, navigate to “System -> Up2Date Service” and start a “Update now” in “System Up2Date

[Middle] Up2Date 5.021

Urgency: Middle(low, Middle, HIGH) Size: 3MB (3,590,211 bytes) md5sum: e18412da6ceff0dd82d02195cceefe45 Up2Date 5.021 Remarks Required previous version is 5.020 Existing configuration will not be changed Middleware will not be restarted Active IP and VPN connections will not be restarted Bugfix  (please refer to the known issue list on http://docs.astaro.org ) ID1532 Notifications about exceeding 100% user count ID1533 IPS Pattern update fails with valid license Download Information All Up2Dates are GNUPG-signed! The Astaro Up2Date technology makes it easy to upgrade your installed Astaro Security Linux to the latest version. There are three ways to apply an Up2Date package to the system: Log on to WebAdmin, navigate to “System -> Up2Date Service” and start a “Update now” in “System Up2Date. An extra browser window will show the progress of the Up2Date process and the System Administrator will receive a notification email once the Up2Date process has finished successfully

[Middle] Up2date 5.020

Urgency: Middle(low, Middle, HIGH) Size: 16MB (16,043,972 bytes) md5sum: ba0544e200970742006c863ce3d2875c Up2Date 5.020 Remarks Required previous version is 5.019 Existing configuration will not be changed Middleware will be restarted Active IP and VPN connections will be restarted Depending on the speed of the CPU the Up2Date installation will take a few minutes New/Changed/Improved Improved IP counting and handling Improved notification scheme for license features Bugfix   (please refer to the known issue list on http://docs.astaro.org ) Download Information All Up2Dates are GNUPG-signed! The Astaro Up2Date technology makes it easy to upgrade your installed Astaro Security Linux to the latest version. There are three ways to apply an Up2Date package to the system: Log on to WebAdmin, navigate to “System -> Up2Date Service” and start a “Update now” in “System Up2Date

[Middle] Up2Date 5.018

Urgency: Middle(low, Middle, HIGH) Size: 28MB (28,061,115 bytes) md5sum: 568e1f27de4a5ecba42abf12cf55ac99 Up2Date 5.018 Remarks Required previous version is 5.017 Existing configuration will not be changed Middleware will be restarted Active IP and VPN connections will be restarted Depending on the speed of the CPU the Up2Date installation will take a few minutes New/Changed/Improved Added Parent Proxy functionality for HTTP Proxy Re-enabled HTTP caching if Contentfilter is used Improved HTTP Proxy/Contentfilter performance Improved compatibility of HTTP Proxy/Contentfilter with unusual Webservers/Webclients Bugfix (please refer to the known issue list on http://docs.astaro.org ) 1143 Packetfilter: not possible to drop IGMP multicasts packets  1182 Proxy Content Manager: not possible to delete content when all mails are selected 1187 SSH Accession can not handle certificates generated with ASL V5 1207 Anonymity level in squid removes the authentication headers for the parent cache 1321 Webadmin can be set to operate on already used Ports 1324 Major HTTP Proxy improvement and reactivate caching with contentfilter 1329 Improved ICMP selection in Definition Services 1334 Changing the name of an interface makes it unresolvable in Definitions–> Networks 1351 FTP Proxy download with SP and IE: shows lot of XML-content displayed in the browser 1352 Content Filter is logging also if Log Level is set to None in HTTP-Proxy 1359 WebAdmin: admin accidentally deleted by saving new credentials 1365 Media Streams do not work if Content Filter is enabled 1379 HTTP Usage Report -> Accessed Sites do not map to user names 1380 Error Message for changing interface name is incomplete 1384 sundance driver: produces gigabytes of log entries 1386 www.wetter.com does not work if Content Filter is enabled 1392 Using a 'blank' (space) in comment field anticipate editing the comment field again 1400 Reporting-> Content Filter does not show SP/VP values under certain cirumstances 1401 Content removal doesn't work with MSN or Yahoo 1402 POP3 Spam Average is incorrect under certain circumstances 1407 SMTP Proxy option labeling needs to be improved 1411 Some sites are not working if Content Filter is enabled: HTTP Accept-Encoding workaround 1416 ip_nat_ftp connection tracking helper module not loaded 1417 Block embedded objects and Java Script is not working in certain cases 1444 Visual Bug after entering custom rule into intrusion protection rules 1454 Syslog Patch for Squid (improve logging speed) Download Information All Up2Dates are GNUPG-signed! The Astaro Up2Date technology makes it easy to upgrade your installed Astaro Security Linux to the latest version. There are three ways to apply an Up2Date package to the system: Log on to WebAdmin, navigate to “System -> Up2Date Service” and start a “Update now” in “System Up2Date. An extra browser window will show the progress of the Up2Date process and the System Administrator will receive a notification email once the Up2Date process has finished successfully

[Middle] Up2Date 5.014

Urgency: Middle(low, Middle, HIGH) Size: 10MB (10,524,310 bytes) md5sum: f568a2665fb53f6fd47aa5181d7cbc89 Up2Date 5.014 Remarks Required previous version is 5.013 Existing configuration will not be changed Middleware will be restarted Active IP and VPN connections will be restarted Depending on the speed of the CPU the Up2Date installation will take a few minutes Bugfix   (please refer to the known issue list on http://docs.astaro.org ) 1169 https pages don't work over HTTP proxy with content scanning enabled 1171 http Proxy – https does not work with SP enabled (Ebay) 1305 after 1-3 hours of http usage, SP stops working 1339 Downloaded files from firewall containing HTML code (e.g.

[Middle] Up2Date 5.012

Urgency: Middle(low, Middle, HIGH) Size: 20MB (20,132,969 bytes) md5sum: 1b8ef28cee5b81530d393a8edcee051c Up2Date 5.012 Remarks Required previous version is 5.011 Existing configuration will not be changed Active IP and VPN connections will not be restarted New/Changed/Improved Improved Up2Date backend Bugfix (please refer to the known issue list on http://docs.astaro.org ) ID1150 Internet Explorer does not show 'Pause'-Button in livelog We know there is in some cases with IPSec configurations still an open issue with the displayed Licensed Users (IPs) . We are aware of this and will fix it in one of the next Up2Dates. Download Information All Up2Dates are GNUPG-signed! The Astaro Up2Date technology makes it easy to upgrade your installed Astaro Security Linux to the latest version.

[Middle] Up2Date 5.011

Urgency: Middle(low, Middle, HIGH) Size: 20MB (20,817,204 bytes) md5sum: abc450b89c81757505d5a37a2b5cf19b Up2Date 5.011 Remarks Required previous version is 5.010 Existing configuration will not be changed Middleware will be restarted Active IP and VPN connections will be restarted Depending on the speed of the CPU the Up2Date installation will take a few minutes New/Changed/Improved Improved backend performance Bugfix (please refer to the known issue list on http://docs.astaro.org ) ID1021 Importing a V5 backup deletes IPsec policy MS_DEFAULT ID1039 Configuring Contentfilter related parts ID1046 Importing a V4 backup causes packetfilter issues ID1090 RSA connections may fail when using X.509 and RSA keys ID1109 Possibility to bypass Contentfilter/HTTP Proxy needed ID1195 User Authentication does not work with all passwords ID1198 Periodic services may not work after updating ID1200 Network definitions may not be edited/deleted ID1204 Uplink Failover ignores editing the 'Check IP' ID1211 POP3 File Extension / Expression filter does not work ID1217 Selfmonitoring does not check DNS proxy We know there is in some cases with IPSec configurations still an open issue with the displayed Licensed Users (IPs) . We are aware of this and will fix it in one of the next Up2Dates.