GB-OS FIREWALL SOFTWARE
                              VERSION 6.2.04
                              RELEASE NOTES

Author:     Global Technology Associates, Inc.
Product:    GB-OS version 6.2.04
Date:       16 August 2016

-------------------------------------------------------------------------
GB-OS version 6.2.04 includes updated versions of the following GTA
products and utilities:

    GB-OS                       6.2.04

Release notes are located on the installation CD and on GTA's Web site.

For more about upgrading related software, see individual product
release notes.

-------------------------------------------------------------------------
CONTENTS
Release Notes sections are categorized first by feature addressed, then
by the type of change.

1.  INSTALL NOTES

2.  SYSTEM

3.  SERVICES

4.  USER INTERFACE

-------------------------------------------------------------------------

1.  INSTALL NOTES

    1.1 Entering New Activation Codes
    
        If upgrading from 6.1.x or below, new activation codes must be
        entered. GB-OS version 6.2.04 is available at no charge to customers 
        with a GTA support contract or annual maintenance agreement. 
        Other users should contact their local Authorized GTA Channel Partner 
        or email sales@gta.com for information and pricing of upgrade options.

        
    1.2 Upgrade Notes   
        
        1.2.1 Upgrading to GB-OS 6.2.x
        
        Firewalls must be on GB-OS version 6.1.x or higher to properly
        upgrade to GB-OS 6.2.x. See the Upgrade Guide for more information.
              
              
        1.2.2 GB-250 Rev A Not Supported
                    
        GB-250 Rev A firewalls are NOT supported in GB-OS 6.1.0 and above.
        Determine GB-250 Rev A or Rev B by the following:
              
        1. GB-250 Rev B firewalls have USB ports while GB-250 Rev A do
           not have USB ports. 
              
        2. GB-250 Rev B firewall serial numbers are:
           Starting at S/N 65002101 and above 
           Starting at S/N 65902101 and above
        
        1.2.3 Error Messages Upon Initial Reboot
    
        Upon rebooting after successful installation, the GTA
        Firewall UTM Appliance may display errors when accessed
        using the Web interface.  This is expected, these errors are
        generated because the browser's cache is trying to access
        files and locations that no longer apply. Click OK to any
        displayed errors and refresh the browser window to access
        GB-OS 6.2.04. If the error messages persist, clear your
        browser's cache.                         
              
              
        1.2.4 Web Filtering Upgrade Notice
      
        GB-OS 6.1.3 and above includes enhancements to the Web Filtering
        category listings. The Web Filtering categories will be modified 
        when your GTA firewall is updated to GB-OS 6.2.04. Existing Web 
        Filtering categories will be automatically mapped to the enhanced 
        categories included in GB-OS 6.1.4. Please review the Content 
        Filtering Feature Guide for details on the Web Filtering 
        category mapping.
            
        GTA strongly recommends reviewing the settings for all (new and 
        automatically mapped) categories and making any necessary 
        revisions to your Web Filtering settings and policies to ensure 
        they meet your corporate Internet Access Policy.

        1.2.5 IPS Upgrade Notice

        GB-OS 6.1.10 and above include enhancements to the IPS
        categories and rules. 

        GTA strongly recommends reviewing the settings for all enabled
        IPS rules and making any necessary revisions to your IPS settings
        to ensure they meet your corporate Internet Access Policy.

        1.2.6 GB-250 no longer support IPS, Anti-spam, and Anti-virus.
                    
        GB-250 firewalls do not support IPS, Anti-spam, and Anti-virus.
               
               
    1.3 SSL Certificate Replacement

        GB-OS version 6.2.04 and above install a new default security/SSL
        certificate. Some browsers, will not recognize the new certificate if
        the original has never been replaced. If you are unable to log on to
        the firewall after upgrading, delete the browser's cached security
        certificate, then close and restart your browser before
        reattempting remote access to your firewall.


2.  SYSTEM

    2.1 Modifications 

     2.2 Bug Fixes
        2.2.1   Decrease number of transmit and receive descriptors for em
		NICs.
                GBOS62040029562

        2.2.2   Increase throughput when running under KVM.
                GBOS62040029582

        2.2.3   Apply traffic Shaping correctly to IPSec Policies.
                GBOS62040026071

3.  SERVICES
                
    3.1 Modifications 
        3.1.1   Add support for BGP authentication.
                GBOS62040017501

        3.1.2   Support Xen tools for graceful shutdown when running under Xen.
                GBOS62040029732

        3.1.3   Support VMware tools for graceful shutdown when running under
		VMware.
                GBOS62040027991

        3.1.4   Remove leading and trailing spaces from credentials when
		validating SSL user credentials.
                GBOS62040029722

        3.1.5   Update NTP service to 4.2.8p8.
                GBOS62040029687

        3.1.5   Update SSL engine to 1.0.2.h.
                GBOS62040029697

        3.1.6   Limit learned BGP routes to those provided by configured
		neighbors.
                GBOS62040029637

        3.1.5   Update DHCP server to 4.3.4.
                GBOS62040029617

        3.1.6   Pass source address, destination address, and category to
		blocked page for content filtering.
                GBOS62040029532

        3.1.7   Update IPSec service to 5.5.0.
                GBOS62040029741

        3.1.8   Update DNS server to 9.10.4-P2.
                GBOS62040029746

        3.1.9   Add enhanced anti-virus signature support.
                GBOS62040029781

        3.1.10  If firewall has support for "Web Filtering", add support for
		"content filtering bypass".
                GBOS62040029786

    3.2 Bug Fixes
        3.1.1   Modify email subject for suspected Spam.
                GBOS62040029597

        3.1.2   Fix issue with IPSec group override not working.
                GBOS62040028977

                
4.  USER INTERFACE

    4.1 Modifications
        4.1.1   Display start and end dates for contracts.
                GBOS62040012696

        4.1.2   Add ability to force A and CNAME records when defining DNS
		server host names.
                GBOS62040029717

        4.1.3   Add drive usage to USB configuration backup section.
                GBOS62040029727

        4.1.4   Add GB_OS product attribute to exported XML.
                GBOS62040029592

        4.1.5   Add audit event for exporting from cloud or USB.
                GBOS62040026911

        4.1.6   Add built in service object for NetBIOS Session Service.
                GBOS62040029776

    4.2 Bug Fixes
        4.2.1   Legends for email graphs align correctly.
                GBOS62040017426

        4.2.2   Don't use SI units for mail proxy graphs.
                GBOS62040029672

        4.2.3   Ignore trailing spaces when sorting IP addresses.
                GBOS62040029677

        4.2.4   All 10G cards should show support for full-duplex.
                GBOS62040029667

        4.2.5   Don't view domains starting with a '.' as CIDR.
                GBOS62040029662

        4.2.6   Correctly clear and set SIP enable when saving.
                GBOS62040029552

        4.2.7   Wrap IPSec banner at 120 characters when displaying in summary.
                GBOS62040025216

        4.2.8   Delete button no longer disappears after switching from DNS
		server to DNS proxy.
                GBOS62040026266

-------------------------------------------------------------------------
Global Technology Associates, Inc.
3361 Rouse Rd, Suite 240
Orlando, Florida 32817
www.gta.com
407.380.0220