GB-OS FIREWALL SOFTWARE
VERSION 6.0.2
RELEASE NOTES
Author: Global Technology Associates, Inc.
Product: GB-OS version 6.0.2
Date: 17 October 2011
-------------------------------------------------------------------------
GB-OS version 6.0.2 includes updated versions of the following GTA
products and utilities:
GB-OS 6.0.2
Release notes are located on the installation CD and on GTA's Web site.
For more about upgrading related software, see individual product
release notes.
-------------------------------------------------------------------------
CONTENTS
Release Notes sections are categorized first by feature addressed, then
by the type of change.
1. INSTALL NOTES
2. SYSTEM
3. CONSOLE
4. SERVICES
5. REPORTS
6. WEB INTERFACE
7. RELEASE NOTES HISTORY
-------------------------------------------------------------------------
1. INSTALL NOTES
1.1 Entering New Activation Codes
If upgrading from 5.4.x or below, new activation codes must be
entered. GB-OS version 6.0.2 is available at no charge to customers
with a GTA support contract or annual maintenance agreement.
Other users should contact their local Authorized GTA Channel Partner
or email sales@gta.com for information and pricing of upgrade options.
1.2 Upgrade Notes
1.2.1 Upgrading to GB-OS 6.0.x
Firewalls must be on GB-OS version 5.2.0 or higher to properly
upgrade to GB-OS 6.0.x. See the Upgrade Guide for more information.
1.2.2 GB-250 Rev B Upgrade to GB-OS 6.0.x
GB-250 Rev B firewalls on version GB-OS 5.2.x should be on runtime
slice 2 when upgrading to version 6.0.x.
The firewall's current runtime slice is displayed on the
firewall's System>Overview screen. To view the current slice, log
into the firewall's web administration interface and navigate to
System>Overview. The runtime section will display the firewall's
current runtime slice.
Additionaly, some GB-250 Rev B firewalls require a Bios Update
before updating to GB-OS 6.0.x. If the Bios version is not v0.99h
or higher,the Bios may need to be updated.
You can check the BIOS by:
1. Examining the hardware report for the Bios version:
BIOS: PC Engines ALIX.2 v0.99h tinyBIOS V1.4a (C)1997-2007
2. Connecting on the console interface and rebooting the
firewall. The first line displayed should be BIOS revision.
Example: PC Engines ALIX.2 v0.99h
You can check if the firewall is a GB-250 Rev B by the following:
1. GB-250 Rev B firewalls have USB ports while GB-250 Rev A do
not have USB ports.
2. GB-250 Rev B firewall serial numbers are:
Starting at S/N 65002101 and above
Starting at S/N 65902101 and above
1.2.3 Re-sizing Slices and Runtime Upgrades
In order to support the new features in GB-OS 5.2.x and above,
some firewalls may require partition re-sizing during the
upgrade process. Upon re-sizing, both runtime slices will have
GB-OS 6.0.1, and firewall administrators WILL NOT be able to
revert to previous runtimes via the Console or Web interface.
GTA strongly recommends backing up current firewall
configurations PRIOR to upgrading.
Firewalls requiring re-sized partitions will take approximately
5-8 minutes to reboot and fully update once the runtime has
been applied. DO NOT switch off or reboot the firewall during
this process.
1.2.4 Error Messages Upon Initial Reboot
Upon rebooting after successful installation, the GTA
Firewall UTM Appliance may display errors when accessed
using the Web interface. This is expected, these errors are
generated because the browser's cache is trying to access
files and locations that no longer apply. Click OK to any
displayed errors and refresh the browser window to access
GB-OS 6.0.0. If the error messages persist, clear your
browser's cache.
1.2.5 Firewall Control Center No Longer Supported
With the release of GB-OS 6.0, GTA's Firewall Control Center
(FWCC) will no longer be supported and will be removed from the
firewall interface for all products.
1.2.6 IPSec Object Upgrade
When upgrading to GB-OS 5.4.2 and above, all firewalls using
SHA-2, with keys larger than 128, will need to be upgraded.
If unable to upgrade, firewalls must be switched to a compatible
algorithm
1.3 SSL Certificate Replacement
GB-OS version 6.0.2 will install a new default security/SSL
certificate. Some browsers, including Netscape and Mozilla,
will not recognize the new certificate if the original has
never been replaced. If you are unable to log on to the
firewall after upgrading, delete the browser's cached security
certificate, then close and restart your browser before
reattempting remote access to your firewall.
2. SYSTEM
2.1 New Features
2.1.1 Added PPTP support for multiple clients to connect to the
same server.
GBOS6020021101
2.2 Modifications
2.2.1 DHCPv6 and IPv6 gateways are now supported for
XML import/export.
GBOS6020020861
2.3 Bug Fixes
2.3.1 Router advertisement properly sends correct valid and preferred
lifetimes.
GBOS6020020776
2.3.2 Configuration settings are properly maintained when importing
XML configuration files.
GBOS6020020946, GBOS6020020951, GBOS6020020876, GBOS6020020931,
GBOS6020020871, GBOS6020020896
2.3.3 Importing configuration file no longer causes XML verification
crash.
GBOS6020020851
2.3.4 GB-250 systems with small CF cards properly upgrade.
GBOS6020020826
2.3.5 Interfaces are properly enabled when importing configuration
files.
GBOS6020020841
2.3.6 Extended FTP services properly function.
GBOS6020020996
2.3.7 Bridge mode properly functions with IPS.
GBOS6020021041, GBOS6020021046
3. CONSOLE
3.1 Modifications
3.1.1 Delete option has been removed from the backup section in the
console interface.
GBOS6020020816
4. SERVICES
4.1 Modifications
4.1.1 Improved error messaging for cloud backup.
GBOS6020020746
4.1.2 DNS servers learned via DHCP are now displayed in the
configuration summary.
GBOS6020020721
4.1.3 Licenses are properly verified with GB-Ware.
GBOS6020021096
4.2 Bug Fixes
4.2.1 IPS no longer continuously restarts.
GBOS6020020901
4.2.2 IPv6 properly works with link aggregation types of Load Balance
and Round Robin.
GBOS6020020686, GBOS6020019901
4.2.3 Router advertisement properly functions with DHCP override.
GBOS6020020961
4.2.4 DHCPv6 exclusion ranges now properly function.
GBOS6020020986
4.2.5 IPv6 connections no longer fail due to IPS.
GBOS6020021036
4.2.6 PPTP and L2TP clients are properly removed from the
authenticated list upon disconnection.
GBOS6020021106
5. REPORTS
5.1 Modifications
5.1.1 Improved icon display for reports.
GBOS6020020831
5.1.2 Improved configuration summary report.
GBOS6020020981
6. WEB INTERFACE
6.1 Modifications
6.1.1 Disabled router advertisement selection for bridged interfaces.
GBOS6020020766
6.1.2 Improved system configuration verification.
GBOS6020020966, GBOS6020020976, GBOS6020021001, GBOS6020021006,
GBOS6020021011
6.1.3 Increased remote access lockout duration limit to 1440 minutes.
GBOS6020021026
6.1.4 Improved license verification details on System Overview page.
GBOS6020021091
6.2 Bug Fixes
6.2.1 External interface remains properly enabled with IPv4 Only and
DHCP set through the Basic Setup Wizard.
GBOS6020020836
6.2.2 ANY_IP options are properly displayed in the inbound tunnel
source address drop down.
GBOS6020020911
6.2.3 Firewall no longer reboots when changing internet protocol
setting in test mode.
GBOS6020020906
6.2.4 Web interface properly displays correct configuration
notifications.
GBOS6020020956
6.2.5 Router advertisement settings are now properly displayed in the
summary report.
GBOS6020020941
6.2.6 Dynamic default route for IPv6 interfaces are properly displayed
in the static routes section.
GBOS6020020916
7. RELEASE NOTES HISTORY
7.1 Previous Release Notes
These notes cover the 6.0.2 release of GB-OS. Release notes for
previous versions can be found at GTA's website, http://www.gta.com.
-------------------------------------------------------------------------
Global Technology Associates, Inc.
3505 Lake Lynda Drive, Suite 109
Orlando, Florida 32817
www.gta.com
407.380.0220
|
