GB-OS FIREWALL SOFTWARE
                              VERSION 6.2.07
                              RELEASE NOTES

Author:     Global Technology Associates, Inc.
Product:    GB-OS version 6.2.07
Date:       05 June 2017

-------------------------------------------------------------------------
GB-OS version 6.2.07 includes updated versions of the following GTA
products and utilities:

    GB-OS                       6.2.07

Release notes are located on the installation CD and on GTA's Web site.

For more about upgrading related software, see individual product
release notes.

-------------------------------------------------------------------------
CONTENTS
Release Notes sections are categorized first by feature addressed, then
by the type of change.

1.  INSTALL NOTES

2.  SYSTEM

3.  SERVICES

4.  USER INTERFACE

-------------------------------------------------------------------------

1.  INSTALL NOTES

    1.1 Entering New Activation Codes
    
        If upgrading from 6.1.x or below, new activation codes must be
        entered. GB-OS version 6.2.07 is available at no charge to customers 
        with a GTA support contract or annual maintenance agreement. 
        Other users should contact their local Authorized GTA Channel Partner 
        or email sales@gta.com for information and pricing of upgrade options.

        
    1.2 Upgrade Notes   
        
        1.2.1 Upgrading to GB-OS 6.2.x
        
        Firewalls must be on GB-OS version 6.1.x or higher to properly
        upgrade to GB-OS 6.2.x. See the Upgrade Guide for more information.
              
              
        1.2.2 GB-250 Rev A Not Supported
                    
        GB-250 Rev A firewalls are NOT supported in GB-OS 6.1.0 and above.
        Determine GB-250 Rev A or Rev B by the following:
              
        1. GB-250 Rev B firewalls have USB ports while GB-250 Rev A do
           not have USB ports. 
              
        2. GB-250 Rev B firewall serial numbers are:
           Starting at S/N 65002101 and above 
           Starting at S/N 65902101 and above
        
        1.2.3 Error Messages Upon Initial Reboot
    
        Upon rebooting after successful installation, the GTA
        Firewall UTM Appliance may display errors when accessed
        using the Web interface.  This is expected, these errors are
        generated because the browser's cache is trying to access
        files and locations that no longer apply. Click OK to any
        displayed errors and refresh the browser window to access
        GB-OS 6.2.07. If the error messages persist, clear your
        browser's cache.                         
              
              
        1.2.4 Web Filtering Upgrade Notice
      
        GB-OS 6.1.3 and above includes enhancements to the Web Filtering
        category listings. The Web Filtering categories will be modified 
        when your GTA firewall is updated to GB-OS 6.2.07. Existing Web 
        Filtering categories will be automatically mapped to the enhanced 
        categories included in GB-OS 6.1.4. Please review the Content 
        Filtering Feature Guide for details on the Web Filtering 
        category mapping.
            
        GTA strongly recommends reviewing the settings for all (new and 
        automatically mapped) categories and making any necessary 
        revisions to your Web Filtering settings and policies to ensure 
        they meet your corporate Internet Access Policy.

        1.2.5 IPS Upgrade Notice

        GB-OS 6.1.10 and above include enhancements to the IPS
        categories and rules. 

        GTA strongly recommends reviewing the settings for all enabled
        IPS rules and making any necessary revisions to your IPS settings
        to ensure they meet your corporate Internet Access Policy.

        1.2.6 GB-250 no longer support IPS, Anti-spam, and Anti-virus.
                    
        GB-250 firewalls do not support IPS, Anti-spam, and Anti-virus.
               
               
    1.3 SSL Certificate Replacement

        GB-OS version 6.2.07 and above install a new default security/SSL
        certificate. Some browsers, will not recognize the new certificate if
        the original has never been replaced. If you are unable to log on to
        the firewall after upgrading, delete the browser's cached security
        certificate, then close and restart your browser before
        reattempting remote access to your firewall.


2.  SYSTEM

    1.1 Modifications 
    2.2 Bug Fixes

3.  SERVICES
                
    3.1 Modifications 
        3.1.1   Upgrade SSL library to 1.0.2l.
                GBOS62070030131

        3.1.2   Upgrade routing service to 1.2.1.
                GBOS62070030101

        3.1.3   Upgrade DNS proxy service to 1.6.2.
                GBOS62070030156

        3.1.4   Upgrade NTP service to 4.2.8p10.
                GBOS62070030191

        3.1.5   Upgrade IPSec service to 5.5.3.
                GBOS62070030236

        3.1.6   Upgrade DNS server to 9.10.5.
                GBOS62070030226

    3.2 Bug Fixes
        3.2.1   IPS can crash on 32 bit GB-Ware with lots of RAM. Switch to 64
		bit GB-Ware to fix issue.
                GBOS62070030111


4.  USER INTERFACE

    4.1 Modifications
        4.1.1   Add ability to limit number of active connections displayed.
                GBOS62070030121

        4.1.2   Display more meaningful error messages when unable to update
		a user's password.
                GBOS62070030106

        4.1.3   Remove all GB-OS HTTP cookies when logging out.
                GBOS62070030171

        4.1.4   Use asynchronous AJAX when validating user login credentials.
                GBOS62070030166

        4.1.5   Strengthen user authorization cookie by using AES-GCM.
                GBOS62070030176

        4.1.6   Move client download buttons to center of their tables.
                GBOS62070030161

        4.1.7   Modify DropBox cloud backup to use DropBox API v2. This
		requires use of an popup window when authenticating. Allow
		popup if prompted by browser.
                GBOS62070030246

    4.2 Bug Fixes
        4.2.1   Fixed issue with not being able to update user password if 
		using alternate port.
                GBOS62070030126

        4.2.2   Fix issue with menus when SSL Client and Override are both
		enabled.
                GBOS62070030181

        4.2.3   Display correct IPSec description when multiple tunnels exist
		to same remote host using different local addresses.
                GBOS62070030116

        4.2.4   Don't view failing to update NIC media type as an error. This
		was preventing VLANs from being created in some cases.
                GBOS62070030256

-------------------------------------------------------------------------
Global Technology Associates, Inc.
3361 Rouse Rd, Suite 240
Orlando, Florida 32817
www.gta.com
407.380.0220