GB-OS FIREWALL SOFTWARE
                              VERSION 6.1.12
                              RELEASE NOTES

Author:     Global Technology Associates, Inc.
Product:    GB-OS version 6.1.12
Date:       22 February 2016

-------------------------------------------------------------------------
GB-OS version 6.1.12 includes updated versions of the following GTA
products and utilities:

    GB-OS                       6.1.12

Release notes are located on the installation CD and on GTA's Web site.

For more about upgrading related software, see individual product
release notes.

-------------------------------------------------------------------------
CONTENTS
Release Notes sections are categorized first by feature addressed, then
by the type of change.

1.  INSTALL NOTES

2.  SYSTEM

3.  SERVICES

4.  USER INTERFACE

-------------------------------------------------------------------------

1.  INSTALL NOTES

    1.1 Entering New Activation Codes
    
        If upgrading from 6.0.x or below, new activation codes must be
        entered. GB-OS version 6.1.12 is available at no charge to customers 
        with a GTA support contract or annual maintenance agreement. 
        Other users should contact their local Authorized GTA Channel Partner 
        or email sales@gta.com for information and pricing of upgrade options.

        
    1.2 Upgrade Notes   
        
        1.2.1 Upgrading to GB-OS 6.1.x
        
              Firewalls must be on GB-OS version 6.0.x or higher to properly
              upgrade to GB-OS 6.1.x. See the Upgrade Guide for more information.
              
              
        1.2.2 GB-250 Rev A Not Supported
                    
              GB-250 Rev A firewalls are NOT supported in GB-OS 6.1.0 and above.
              Determine GB-250 Rev A or Rev B by the following:
              
                 1. GB-250 Rev B firewalls have USB ports while GB-250 Rev A do
                    not have USB ports. 
              
                 3. GB-250 Rev B firewall serial numbers are:
                    Starting at S/N 65002101 and above 
                    Starting at S/N 65902101 and above
        
        1.2.3 Error Messages Upon Initial Reboot
    
              Upon rebooting after successful installation, the GTA
              Firewall UTM Appliance may display errors when accessed
              using the Web interface.  This is expected, these errors are
              generated because the browser's cache is trying to access
              files and locations that no longer apply. Click OK to any
              displayed errors and refresh the browser window to access
              GB-OS 6.1.12. If the error messages persist, clear your
              browser's cache.                         
              
              
        1.2.4 IPSec Object Upgrade 
        
              When upgrading to GB-OS 6.1.2 and above, all firewalls using 
              SHA-2, with keys larger than 128, will need to be upgraded. 
              If unable to upgrade, firewalls must be switched to a compatible 
              algorithm.
              
        1.2.5 Web Filtering Upgrade Notice
      
              GB-OS 6.1.3 and above includes enhancements to the Web Filtering
              category listings. The Web Filtering categories will be modified 
              when your GTA firewall is updated to GB-OS 6.1.12. Existing Web 
              Filtering categories will be automatically mapped to the enhanced 
              categories included in GB-OS 6.1.12. Please review the Content 
              Filtering Feature Guide for details on the Web Filtering 
              category mapping.
            
              GTA strongly recommends reviewing the settings for all (new and 
              automatically mapped) categories and making any necessary 
              revisions to your Web Filtering settings and policies to ensure 
              they meet your corporate Internet Access Policy.

        1.2.6 IPS Upgrade Notice

              GB-OS 6.1.10 includes enhancements to the IPS categories and
              rules. 

              GTA strongly recommends reviewing the settings for all enabled
              IPS rules and making any necessary revisions to your IPS settings
              to ensure they meet your corporate Internet Access Policy.

        1.2.7 GB-250 no longer support IPS, Anti-spam, and Anti-virus.
                    
              GB-250 firewalls do not support IPS, Anti-spam, and Anti-virus.
               
               
               
    1.3 SSL Certificate Replacement

        GB-OS version 6.1.12 and above install a new default security/SSL
        certificate. Some browsers, including Netscape and Mozilla,
        will not recognize the new certificate if the original has
        never been replaced. If you are unable to log on to the
        firewall after upgrading, delete the browser's cached security
        certificate, then close and restart your browser before
        reattempting remote access to your firewall.


2.  SYSTEM

    2.1 Modifications 

    2.2 Bug Fixes
        2.2.1   Fix issue with some Realtek NICs not working with PPPoE.
                GBOS6120029372

3.  SERVICES
                
    3.1 Modifications 
        3.1.1   Restrict list of ciphers supported by SSL client's command
                channel to:
                TLS-DHE-RSA-WITH-AES-256-GCM-SHA384
                TLS-DHE-RSA-WITH-AES-256-CBC-SHA256
                TLS-DHE-RSA-WITH-AES-256-CBC-SHA 
                GBOS6120029407

        3.1.2   Update IPS service to latest version.
                GBOS6120029392

        3.1.3   Update SSL client service to latest version.
                GBOS6120029412


    3.2 Bug Fixes
        3.2.1   Upgrade NTP service to latest version to fix possible security
                issues.
                GBOS61230029457

        3.2.2   Upgrade DHCP server service to latest version to fix possible
                security issue.
                GBOS61230029427

4.  USER INTERFACE

    4.1 Modificatons
        4.1.1   Enhanced validation of data entered by user.
                GBOS6120029502

        4.1.2   Remove legacy support for TLS v1.0 and TLS v1.1.
                GBOS6120029312

        4.1.3   Add support for Google Chrome's password saving mechanism.
                GBOS6120029512

        4.1.4   Send complete certificate chain and not just subject
                certificate.
                GBOS6120029442

        4.1.5   Added grey listing override object to mail proxy.
                GBOS6120029517

        4.1.6   Send X-Frame-Options in HTTP headers.
                GBOS6120029527

-------------------------------------------------------------------------
Global Technology Associates, Inc.
3361 Rouse Rd, Suite 240 
Orlando, Florida 32817
www.gta.com
407.380.0220