Software Update History
This page identifies software updates that have been made available for download
via NetMaster SafetyNet. Each section listed below indicates the date the updates
were posted to SafetyNet along with a list of what software changes were made at that
time.
November 8, 2005
- Resolved an issue where certain IP blocks that had been recently released by the IANA
(for instance 71.*, 72.*, etc.) were being blocked by the GGOS firewall.
October 20, 2004
- Fixed bug whereby GG-Blade/GG-EXT devices would try saving the DHCP Server
Lease Database to a (non-existant) floppy device instead of the embedded flash
memory during device shutdown/reboot.
- Several other minor "tweaks", updates, and bug fixes.
July 7, 2004
- Various modifications to the GGOS Installer. (Missing Ethernet devices
now only causes warnings instead of preventing GGOS from being installed.)
- Fixed bug whereby GG-Blade/GG-EXT devices would go into "Evaluation Mode"
after initial configuration under some circumstances.
- Fixed bug whereby the caching DNS service would not restart in some situations
after a device configuration update.
- Several other minor "tweaks", updates, and bug fixes.
Feb 18, 2004
-
Resolved an issue where certain IP blocks that had been recently released by the IANA
(for instance 69.*) were still getting blocked by the GGOS firewall.
Jan 23, 2004
-
Resolved an issue that was preventing external PPTP clients from successfully
connecting to a PPTP server located behind the firewall.
Jan 8, 2004
- Added a caching DNS Service to GGOS. Computers on the local network can now use GGOS as
a DNS server. DHCP Clients will auto-register themselves into the DNS on the GGOS. This
is enabled/disabled via a checkbox found under Device Configuration --> Network
Properties --> DNS. You can also have GGOS resolve additional "custom"
host and/or domain names by adding them to the Hosts table found under Security
--> Access Groups.
- The "Send to Device" dialog now allows the entry of hostnames in addition to IP Addresses.
(This allows you to add the IP of your device to your local DNS and/or "hosts
file" so that you can use a name instead of having to remember it's IP Address.)
- The VPN Tunnel configuration dialog now allows the entry of hostnames in addition to IP
Addresses for the remote endpoint of the VPN Tunnel.
- AES is now the default encryption algorithm when creating new VPN tunnels within CSM.
- As per the CIDR TCP/IP addressing schema, all host address fields within CSM
now accept 0 and 255 in the second and third octets of the IP Address.
- The list of IANA Reserved IP Subnet Addresses used to be "hard-coded" into CSM,
but is now pulled from an XML file (iana_ips.xml) stored in the root of the directory
where CSM is installed. (This list of reserved IP Subnets can be found by clicking on the
Advanced button found under Security --> Setup and the contents of this
XML file are added to the list by clicking on the Reset to Defaults button.)
- Improved the SSL communications software within CSM. If an in-progress connection to
SafetyNet for software updates is cancelled or fails for any reason, any future connection
to SafetyNet will continue the download process where it left off. (i.e. if the process
is stopped while downloading the fifth of 10 files, CSM will skip the first four files
that have already been downloaded before continuing with the fifth.)
- Updated many software components on GGOS including the Linux-based kernel, the Secure Shell
(SSH), and Secure Sockets Layer (SSL) used for communications between GGOS and CSM.
- Updated the Secure Sockets Layer (SSL) communications software within CSM to use Sun's
own Java Secure Sockets Extension (JSSE).
- Significantly improved the display rendering performance of the SNMP monitor pages within
CSM.
- Significantly improved (~100x) the performance of the System Logging Events feature within
CSM. CSM can now receive several dozen log messages per second with no perceptible
performance degredation of the system on which it's running.
- Significantly improved the speed at which firewall rules are generated when configuring a
security device within CSM.
- Resolved an issue where the VPN Wizard would not work until settings had been retrieved
from a device.
- Resolved an issue where CSM would crash when creating a new device if the user chose to
place the device in a Realm that had not been previously displayed within CSM since the
application was started.
- Many other minor "tweaks", updates, and bug fixes.
March 11, 2003
-
Resolved an issue that was preventing Road-Warrior VPN clients running SSH Communications
Sentinel VPN client from successfully connecting to GG-OS under some circumstances.
November 22, 2002
-
Modified several aspects of the Device Status screens (Status Web Server) based on
customer feedback and suggestions.
-
Resolved an issue on GG-OS devices where different reports showing System Memory
percentage use statistics didn't agree with each other. (The Device Status and GG-OS
bootup screens were not including Virtual Memory (swap) information in the calculations.)
-
Minor layout changes to the bootup console on GG-OS devices.
-
Several minor changes to the System Logging facility based on customer feedback.
November 4, 2002
-
Upgraded the Virtual Private Networking software infrastructure to prevent any
potential Denial-of-Service attacks via a recently discovered vulnerability in many
IPSec implementations including the one used in NetMaster's Gateway Guardian.
More information on this vulnerability can be found in the
Computer Emergency Response Team (CERT) bulletin.
No Denial-of-Service attacks of this type have been known to be performed against
any actively used NetMaster Gateway Guardian security devices; however, we highly
recommend all customers using Gateway Guardian VPN functionality to retrieve this
update via SafetyNet and upload it to their security device(s) as soon as possible.
-
Upgraded the Gateway Guardian Linux Kernel and software drivers for several Network
Interface Cards.
- Resolved an issue that prevented the Gateway Guardian Device Status Monitoring System
from detecting system problems under certain conditions.
- Resolved an issue that prevented CSM from locating new, unconfigured devices in
some situations.
October 22, 2002
-
Added support for the Netgear FA311 and FA312 PCI Ethernet adapters.
-
Introduced some optimizations to reduce RAM usage by several megabytes.
-
Resolved an issue that was preventing PPTP Passthrough from working properly.
October 15, 2002
- Added the ability to resize the Logging Events / SNMP Traps window and
adjust the size of the content buffer at the bottom of the CSM application.
To resize the window or the buffer, simply right-click in either window and
choose Properties from the popup window.
- Added the SNMP Action Manager. This feature, available within the SNMP Traps
window at the bottom of the CSM application, is used to define actions to
be taken at such time a particular SNMP Trap Message is received by CSM.
(For instance, pop up a web page in Internet Explorer, play a WAVE file, etc.)
- Added a system monitor daemon that runs on the security device to monitor
the system and report (via syslog) any problems as they are discovered.
(SNMP Traps can then be configured to catch these syslog events and
inform the Administrator as soon as a problem is reported.)
- Added an onscreen animated clock to provide a visual cue to users that
the current task will take some time to complete.
- Added a popup dialog to the Configuration Wizard (when setting up a new device)
that asks the user whether they want to enable SNMP Monitoring and Event Logging
for this installation of CSM. If the user clicks "Yes", several SNMP Services and
Events will be automatically created and activated and the security device will be
configured to send (syslog) Events and SNMP Traps to the workstation running CSM.
- Added additional help to the device status monitor window to help the user through
the Activation process in cases where the device has not yet received it's
activation codes.
- Host-portion of IP Addresses now allow 0 as a valid octet value. (i.e.
an IP Address of 192.168.0.10 is now permitted within CSM.)
- Significant additions to the online Technical Support FAQ - available online at
http://netmaster.com/support/faq
or directly within the CSM Help System (press F1 while running CSM).
- Removed the Class A 67 and 68 subnets from the blocked subnet list as they
are now in active use on the public Internet.
- Resolved a screen refresh and layout issue within the Eventrap Manager.
- Resolved an issue that prevented the removal of entries from the list of
Private Class IP Subnets.
- Resolved an issue within the Firewall plugin that was occurring under
certain conditions that prevented configuration changes from being sent to
the security device.
- Resolved an issue where the security device would try to connect to a time
synchronization server even if one was not configured.
October 3, 2002
- Added the Eventrap Manager plugin under Reports & Monitoring.
- Added "Create a VPN Tunnel" under the list of Tasks within CSM Help.
- Resolved an issue where CSM would halt the SafetyNet download process altogether
if one file being downloaded failed to transfer successfully. This would require
the user to restart the Check SafetyNet process all over again. Now, CSM not only
detects the transfer error, but will make several attempts to download the file
before finally giving up and displaying an error message to the user.
September 9, 2002
If you have any questions or comments about SafetyNet or any other NetMaster
product, please send an email to
support@netmaster.com.
|
