Unified Threat Management - Support | GTA, Inc.

		                         GNAT BOX SYSTEMS SOFTWARE 
                              VERSION 3.6.0
                              RELEASE NOTES

Author:   Global Technology Associates, Inc.
Product:  GNAT Box System Software version 3.6.0
Date:     29 Novemeber 2004 

-------------------------------------------------------------------------
GNAT Box System Software version 3.6.0 includes updated versions of the 
following GTA products and utilities:

     GNAT Box System Software      3.6.0
     GBAdmin                       3.6.0

Release notes are located on the installation CD and on GTA's web site.

For more about upgrading related software, see individual product 
release notes.

-------------------------------------------------------------------------
CONTENTS
Release Notes sections are categorized first by feature addressed, then 
by the type of change.

1.   INSTALL NOTES

2.   DNS PROXY OR DNS SERVICE

3.   H2A HIGH AVAILABILITY SERVICE

4.   MAIL SENTINEL EMAIL PROXY SERVICE

5.   CONTENT FILTERING HTTP PROXY SERVICE

6.   OBJECTS

7.   ADMINISTRATION AND REPORTS

8.   UTILITY SOFTWARE

9.   SSL CERTIFICATES

10.  RELEASE NOTES HISTORY

-------------------------------------------------------------------------

1.   INSTALL NOTES

     1.1  Entering New Activation Codes

          New activation codes must be entered.  GNAT Box OS version 3.6
          is available at no charge to customers with a GTA support 
          contract or annual maintenance agreement, or who purchased a 
          GTA firewall on or after 1 October 2004. Other users should 
          contact their local GTA channel partner or email sales@gta.com
          for information and pricing of upgrade options.

     1.2  SSL Certificate Replacement

          Version 3.6.0 will install a new default security/SSL 
          certificate. Some browsers, including Netscape and Mozilla, 
          will not recognize the new certificate if the original has 
          never been replaced. If you are unable to log on to the 
          firewall after upgrading, delete the browser's cached security
          certificate, then close and restart your browser before 
          reattempting remote access to your firewall.

     1.3  Email Proxy Configuration Conversion

          3.6.0 upgrade software converts old configuration data (where 
          possible) and disables the email proxy until converted data is 
          verified and re-applied using the new email proxy ACL features.
          Customers using the Mail Sentinel email proxy should configure 
          and verify the email proxy using the converted data before 
          re-enabling the email proxy service. 
          GBSS3600002418

     1.4  Windows-Only Version of GBAuth No Longer Supported

          The Windows-only version of GBAuth is no longer supported; the 
          multi-platform Java version of GBAuth should be used instead.
          GBAU1100002417
          
     1.5  Known Issues

          Help files for GBAdmin are not updated.


2.   DNS PROXY OR DNS SERVICE

     2.1  Feature Enhancements

          2.1.1 Access to DNS Proxy now controlled by remote access 
                filters.
                GBSS3600002323

          2.1.2 Allowed object for DNS proxy no longer needed.
                GBSS3600001917

          2.1.3 DNS service (bind) upgraded to version 8.4.5.
                GBSS3600002352

          2.1.4 DNS Proxy no longer allows misconfiguration of the DNS 
                proxy where the proxy makes DNS requests of itself.
                GBSS3600002383


3.   H2A HIGH AVAILABILITY SERVICE

     3.1  Bug Fixes

          3.1.1 Improved H2A stability when large numbers of aliases are 
                configured and an "em" driver is used.
                GBSS3600002407


4.   MAIL SENTINEL EMAIL PROXY SERVICE

     4.1  New Features

          4.1.1 Support for Mail Sentinel Anti-Spam added.
                GBSS3600002320

          4.1.2 Support for Mail Sentinel Anti-Virus added.
                GBSS3600002321

          4.1.3 Support for email proxy access control lists (ACLs) 
                added.
                GBSS3600002316         

          4.1.4 Support for white lists and black lists added.
                GBSS3600000872   

          4.1.5 Support for email quarantine (redirection to another 
                email address) added.
                GBSS3600002317         

          4.1.6 Support for relays added.
                GBSS3600000371

          4.1.7 Support for multiple protected email servers added.
                GBSS3600002276

     4.2  Feature Enhancements

          4.2.1 Email servers now allow more destination domains using 
                address objects.
                GBSS3600001936

          4.2.2 Email exchange server (MX) check is now off by default.
                GBSS3600002422

          4.2.3 Custom MAPS servers can now be specified as Email Abuse 
                objects.
                GBSS3600000372


5.   CONTENT FILTERING HTTP PROXY SERVICE


     5.1  New Features

          5.1.1 Ability to block unknown HTTP (e.g. RealAudio) commands 
                added.
                GBSS3600002410

     5.2  Feature Enhancements

          5.2.1 Surf Sentinel now categorizes content for every subsquent
                part of a persistent TCP connection.
                GBSS3600002229

     5.3  Bug Fixes

          5.3.1 FTP now works correctly when using the traditional HTTP 
                proxy.
                GBSS3600002412


6.   OBJECTS


     6.1  New Features

          6.1.1 Ability to use domain names and email addresses added. 
                (Email addresses are valid for use with quarantine 
                ("Email Domains") objects; "Servers" objects can now use 
                domain names as well as  IP addresses.)
                GBSS3600002318

          6.1.2 Ability to specify object type added. Only valid object 
                types are available for selection in any given section.
                GBSS3600002319

          6.1.3 Ability to add comments to address objects added.
                GBSS3600001745

          6.1.4 Ability to specify domain names or email addresses using 
                regular expressions added.
                GBSS3600002307

     6.2  Feature Enhancements

          6.2.1 Additional address object members are now available 
                (increased from 10 to 300).
                GBSS3600002322


7.   ADMINISTRATION AND REPORTS

     7.1  New Features

          7.1.1 Mail Sentinel email proxy, Mail Sentinel Anti-Spam and 
                Mail Sentinel Anti-Virus activity report added.
                GBSS3600002368

          7.1.2 Configuration report table of contents with hyperlinks to
                sections added.
                GBSS3600002448


8.   UTILITY SOFTWARE

     8.1  New Features

          8.1.1 GBAuth SSL certificates are now cached for certificate 
                spoofing protection.
                GBAU1100002416

     8.2  Feature Enhancements

          8.2.1 GBAuth Windows-only version is no longer supported; 
                multi-platform Java version should be used instead.
                GBAU1100002417

          8.2.1 Phase I configuration in GBAdmin is now available when 
                "Force mobile protocol" is set.
                GBAD3600002170

     8.3  Bug Fixes

          8.3.1 When running multiple instances of GBAuth, closing one 
                instance no longer disconnects the other instances' 
                connections.
                GBAU1100001955

          8.3.2 When saving the section after adding or modifying DNS 
                service information on GB-Ware, GBAdmin no longer fails 
                to save the new DNS service information.
                GBAD3600002353

          8.3.3 When port numbers are removed from a filter, GBAdmin no 
                longer fails to retain the change upon saving or moving 
                out of a section. 
                GBAD3600002362

          8.3.4 GBAdmin now allows H2A interfaces to be selected in VPN 
                objects.
                GBAD3600002433


9.   SSL CERTIFICATES

     9.1  New Features

          9.1.1 SSL certificates are automatically re-generated using the
                new host name when a host name change is made to the 
                firewall.
                GBSS3600002415

     9.2  Feature Enhancements

          9.2.1 SSL (OpenSSL) upgraded to version 9.7e.
                GBSS3600002447


10.  RELEASE NOTES HISTORY

     10.1 Previous Release Notes
          These notes cover the 3.6.0 release of GNAT Box System 
          Software. Release notes for previous versions can be found at 
          GTA's web site, www.gta.com.

-------------------------------------------------------------------------
Global Technology Associates, Inc.
3525 Lake Lynda Drive, Suite 109
Orlando, Florida 32817
www.gta.com
407.380.0220
		



Copyright © 2014 Global Technology Associates, Inc. All rights reserved.

'GB-OS' and 'GB-Ware' are registered trademarks of Global Technology Associates, Incorporated.
'Global Technology Associates' and 'GTA' are service marks of Global Technology Associates, Incorporated.