Tag Archives: Upgrade

Wi-Fi Cloud Upgrade/Wartungsarbeiten am 22.07. ab 02:00 Uhr

Am Sonntag, den 22. Juli, werden ab 02:00 Uhr morgens (Europa) die Wi-Fi Cloud Services geupgraded:

  • WatchGuard Wi-Fi Cloud und AP Firmware auf 8.6.0-634
  • Upgrade des “Analyze” Services, um die Ausfallzeiten des Captive Portals bei zukünftigen Upgrades zu verringern

Geplantes Wartungsfenster: 4 Stunden (02:00 Uhr – 06:00 Uhr)

In dieser Zeit ist die Verwaltung der Wi-Fi Cloud nicht erreichbar und somit sind keine Änderungen an der Konfig möglich. Die Funktionsweise und Sicherheit der Access Points bleibt dagegen unbeeinträchtigt. Allerdings wird es für neue Gäste nicht möglich sein, sich über das Captive Portal zu authentifizieren. Alle Gäste, die sich bereits authentifiziert haben, erhalten weiterhin Zugang zum WLAN (solange sie sich nicht neu authentifizieren müssen). Um allen Gästen den Zugang zum WLAN zu gewährleisten empfiehlt es sich VOR dem Wartungsfenster das Captive Portal zu deaktivieren und stattdessen ein WPA2 PSK Passwort für das Gäste-WLAN zu benutzen.

anbei die Original-Meldung von WatchGuard:

Weiterlesen »

Neues Software Release Dimension 2.1.1 Update 2

WatchGuard Dimension 2.1.1 Update 2

WatchGuard is pleased to announce the availability of WatchGuard Dimension 2.1.1 Update 2. This maintenance release is now available from the Software Downloads Center, together with release notes and update instructions. WatchGuard Dimension 2.1.1 Update 2 addresses several frequently reported issues and introduces some security enhancements, including:

  • APT content names with reserved characters would cause PDF reports to fail
  • Log Collector issue that caused incorrect logging status to be displayed for devices
  • Log Collector process unexpectedly restarts due to large number of simultaneous connections
  • Backup locations are now clearly indicated using sftp:// URLs instead of local mount points
  • Dimension SSH service now correctly rejects weak ciphers

Weiterlesen »

Zu beachten beim Upgrade einer XTMv von 11.x => 12.x

beim Upgrade einer XTMv kann es passieren, daß auf einem oder mehreren Interfaces keine Kommunikation mehr stattfindet. Der Grund hierfür liegt darin, daß die Erkennung der Interface-Reihenfolge bei der XTMv geändert wurde.

Aus dem Artikel aus der Knowledgebase:

On a FireboxV or XTMv on a VMWare ESXi server, after you upgrade from Fireware v11.x to v12.0, communication might be lost on one or more interfaces.

In Fireware v11.x and lower, Firebox interfaces correspond to ESXi interfaces based on the order in which ESXi interfaces become active.

In Fireware v12.0, Firebox interfaces correspond to ESXi interfaces based on the MAC address value of the ESXi interfaces. For example, the lowest ESXi MAC address is assigned to Firebox eth0, and the next lowest MAC address is assigned to eth1.

Empfohlener Workaround:

Before you upgrade from Fireware v11.x to v12.0, configure the ESXi MAC addresses in increasing order by the ESXi interface number. This ensures that the Firebox interfaces correspond to the ESXi interfaces in increasing order.

 

Neues Software Release Fireware 11.12 Update 1 und WSM 11.12 Update 1

On 21 December, WatchGuard released Fireware v11.12 Update 1, a maintenance update for Fireware v11.12 that resolves several outstanding issues.For information about the issues resolved in the Update 1 release, see Enhancements and Resolved Issues. We have updated these release notes for Fireware v11.12 Update 1 but most information related to Fireware v11.12 remains the same.

 

Neues Software Release Fireware 11.12 und WSM 11.12

Fireware 11.12 and WSM 11.12

WatchGuard is pleased to announce the release of Fireware v11.12 and WatchGuard System Manager v11.12. In addition to resolving many outstanding bugs, we’re pleased to announce these new features and functions for our Firebox users:

ConnectWise Integration

With Fireware v11.12, we deepen our integration capabilities with ConnectWise, a leading Professional Service Automation tool used by many managed service providers, to add support for the auto-synchronization of asset information, including subscription start and end dates, device serial numbers OS versions, etc., as well as closed-loop ticketing of system, security, and subscription events.

Threat Detection and Response

Built using technology acquired with Hexis, Threat Detection and Response (TDR) is our new cloud hosted security service that detects malware activity, correlates it with network events, and proactively responds to malware on endpoints. This release includes support for TDR, which is currently in Beta. Click here to join the TDR beta program.

Geolocation Service

With the Geolocation service, you can prevent malware communication and attacks from areas where you never have any need for legitimate business communication. Available as part of your Reputation Enabled Defense (RED) security subscription.

Dynamic VPN Tunnels to Azure

Hybrid cloud environments are becoming much more common, where companies have moved some workloads to cloud services such as AWS or Azure, but some key applications remain on premise. Secure VPN communication is needed between the on premise application and the cloud. Previously we supported only a single static or policy-based tunnel to Azure. Now we add the ability to have multiple tunnels, even with dynamic routes and failover between them.

IPv6 Support in Services and Proxies

WatchGuard firewalls have IPv6 Gold logo certification, but previously application proxies and the full set of security services were not supported. Now customers can apply full range of security services, including WebBlocker for content filtering and APT Blocker and Gateway AV to prevent malware in IPv6 environments.

Services and Proxies Enabled by Default

Customers that buy the appliance with Basic or Total Security Suite often neglect to turn on the security services that they have purchased. Now, services will be enabled by default during the initial setup wizard with a secure set of default settings to save time and simplify the initial setup for everyone.

Gateway Wireless Controller

This release introduces several updates to the Gateway Wireless Controller, including auto channel selection to enable smoother deployments without channel conflict, and a new repeater mode that allows access points to communicate over the air without a physical Ethernet connection.

FireCluster with DHCP on External Interface

If your ISP provides external-facing interface IP addresses by DHCP, you can now enable an active/passive FireCluster to provide high availability.

X-forwarded Information from Header in Logs and Dimension

If a company uses an explicit proxy service or a web gateway, like WebMarshal, all of the information in Dimension shows only the IP address for that proxy. Now we can go a level deeper and find the original source IP address and show this in Dimension, too.

The Release Notes include a comprehensive list of resolved issues, and the What’s New presentation provides a detailed review of the new enhancements.

Does This Release Pertain to Me?
The Fireware release applies to all Firebox T, Firebox M, and all XTM appliances, except XTM 21/21-W, 22/22-W, or 23/23-W.

Software Download Center
Firebox and XTM appliance owners with active support subscriptions can obtain this update without additional charge by downloading the applicable packages from the WatchGuard Software Download Center. Please read the Release Notes before you
upgrade to understand what’s involved.

Neues Software Release Dimension 2.1.1

Dimension 2.1.1

WatchGuard is pleased to announce the General Availability (GA) of new updates for  Dimension, available now at the software download site.  These releases include many important bug fixes, and some small enhancements:

  • A new Dimension administrator role that is restricted from seeing reports, dashboards, and managing devices.
  • Localization into French, Spanish, and Japanese languages.

The Release Notes include a comprehensive list of resolved issues, and the What’s New presentation provides a detailed review of the new enhancements.

Note: This release also adds support for new AP120 and AP320 wireless access points.Training and product launch
material will be available in early September.

Software Download Center
Firebox and XTM appliance owners with active support subscriptions can obtain this update without additional charge by downloading the applicable packages from the WatchGuard Software Download Center. Please read the Release Notes before you
upgrade to understand what’s involved.

The WatchGuard Team

Neues Software Release Fireware 11.11.4 und WSM 11.11.4

Fireware 11.11.4 and WSM 11.11.4

WatchGuard is pleased to announce the General Availability (GA) of new updates for Fireware, WSM, available now at the software download site.  These releases include many important bug fixes, and some small enhancements:

  • Support for Perfect Forward Secrecy (PFS) ciphers, which are the most secure options available for TLS protocols.
  • Localization into French, Spanish, and Japanese languages.

The Release Notes include a comprehensive list of resolved issues, and the What’s New presentation provides a detailed review of the new enhancements.

Note: This release also adds support for new AP120 and AP320 wireless access points.Training and product launch
material will be available in early September.

Does This Release Pertain to Me?
The Fireware release applies to all Firebox T, Firebox M, and all XTM appliances, except XTM 21/21-W, 22/22-W, or 23/23-W.

Software Download Center
Firebox and XTM appliance owners with active support subscriptions can obtain this update without additional charge by downloading the applicable packages from the WatchGuard Software Download Center. Please read the Release Notes before you
upgrade to understand what’s involved.

The WatchGuard Team