{"id":6743,"date":"2019-04-25T13:40:52","date_gmt":"2019-04-25T11:40:52","guid":{"rendered":"https:\/\/www.boc.de\/watchguard-info-portal\/?p=6743"},"modified":"2019-04-25T13:40:52","modified_gmt":"2019-04-25T11:40:52","slug":"fireware-v12-4-csp1-tls-probleme-behoben","status":"publish","type":"post","link":"https:\/\/wordpress.boc.de\/watchguard-info-portal\/2019\/04\/fireware-v12-4-csp1-tls-probleme-behoben\/","title":{"rendered":"Fireware 12.4 CSP1 &#8211; TLS-Probleme behoben"},"content":{"rendered":"<p>Im Release Fireware 12.4 kann es zu Problemen bei Zugriffen auf vereinzelte Websites geben. Die Ursache hierf\u00fcr liegt in der neu hinzugekommene Unterst\u00fctzung von TLS 1.3 im Release 12.4. Leider wurden hier wohl noch nicht alle m\u00f6glichen TLS-Cipher-Varianten unterst\u00fctzt, wodurch es vereinzelt Abbr\u00fcche geben kann &#8211; genau dann, wenn die Website eines der nicht unterst\u00fctzten Ciphers verwendet.<\/p>\n<p>Das Problem kann auch bei eingehenen TLS-Verbindungen \u00fcber SMTP auftreten, da hier die gleichen TLS-Profile verwendet werden.<\/p>\n<p>Abhilfe schafft ein Upgrade auf die Version 12.4 CSP1. Diese ist auf Anfrage \u00fcber einen Case bei WatchGuard erh\u00e4ltlich.<\/p>\n<p>Details:<\/p>\n<p><!--more--><\/p>\n<hr \/>\n<p><strong>Fireware v12.4 CSP 1 Release Notes<\/strong><\/p>\n<p><strong>Supported Devices Firebox:<\/strong> T10, T15, T30, T35, T50, T55, T70, M200, M270, M300, M370,\u00a0M400, M440, M470, M500, M570, M670, M4600, M5600 FireboxV, Firebox Cloud, WatchGuard AP<br \/>\n<strong>Release Date:<\/strong> 23 April 2019<br \/>\n<strong>Fireware OS Build:<\/strong> 592447<br \/>\n<strong>WatchGuard System\u00a0Manager Build:\u00a0<\/strong>592565<br \/>\n<strong>WatchGuard AP Device Firmware:<\/strong><br \/>\nAP100, AP102, AP200: 1.2.9.16<br \/>\nAP300: 2.0.0.11<br \/>\nAP125: 8.6.0-644.3<br \/>\nAP120, AP320, AP322, AP325, AP420: 8.6.0-646<\/p>\n<p><strong>Resolved Issues in Fireware v12.4 CSP 1 (Fireware Build 592447, WSM Build 592565)<\/strong><\/p>\n<ul>\n<li>This release resolves an issue that caused websites to fail to load through the\u00a0HTTPS Proxy when messages are split over multiple TLS records. [FBX-16195]<\/li>\n<li>The pxyassist process no longer crashes when PDF files are analyzed. [FBX16197]<\/li>\n<li>This release adds additional PFS grade ciphers for better compatibility with HTTPS webservers when using content inspection in the HTTPS Proxy. [FBX16227]<\/li>\n<li>The Inspect when a URL is uncategorized option in the HTTPS Proxy now works when you also use an On-Premise WebBlocker server. [FBX-15847]<\/li>\n<li>Proxy traffic for 1-to-1 NAT hosts now use the correct NAT Base IP address. [FBX16234]<\/li>\n<li>The Fireware Web UI Front Panel now loads correctly for all users. [FBX-15555]<\/li>\n<li>This release resolves several issues that caused websites fail to load through the\u00a0HTTPS Proxy with content inspection disabled. [FBX-16143, FBX-16203]<\/li>\n<li>When content inspection is disabled, the HTTPS Proxy can now correctly handle Client Authentication during the SSL handshake. [FBX-15916]<\/li>\n<li>An appliance kernel lockup issue was resolved. [FBX-15247]<\/li>\n<li>Policy Manager now correctly handles the configuration of BOVPN Virtual Interface settings in pre-Fireware v12.0 configurations. [FBX-16291]<\/li>\n<li>In Policy Manager, the default route for a VLAN External interface is now\u00a0correctly added to the Firebox routing table. [FBX-16358]<\/li>\n<li>This release resolves an issue that prevented Management Server Policy Templates from saving to a Firebox when they included FQDNs. [FBX-16237]<\/li>\n<\/ul>\n<p>&nbsp;<\/p>\n<div class=\"shariff\"><ul class=\"shariff-buttons theme-default orientation-horizontal buttonsize-medium\"><li class=\"shariff-button mailto shariff-nocustomcolor\" style=\"background-color:#b32317\"><a href=\"mailto:?body=https%3A%2F%2Fwordpress.boc.de%2Fwatchguard-info-portal%2F2019%2F04%2Ffireware-v12-4-csp1-tls-probleme-behoben%2F&subject=Fireware%2012.4%20CSP1%20%E2%80%93%20TLS-Probleme%20behoben\" title=\"Per E-Mail versenden\" aria-label=\"Per E-Mail versenden\" role=\"button\" rel=\"noopener nofollow\" class=\"shariff-link\" style=\"; background-color:#999; color:#fff\"><span class=\"shariff-icon\" style=\"\"><svg width=\"32px\" height=\"20px\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" viewBox=\"0 0 32 32\"><path fill=\"#999\" d=\"M32 12.7v14.2q0 1.2-0.8 2t-2 0.9h-26.3q-1.2 0-2-0.9t-0.8-2v-14.2q0.8 0.9 1.8 1.6 6.5 4.4 8.9 6.1 1 0.8 1.6 1.2t1.7 0.9 2 0.4h0.1q0.9 0 2-0.4t1.7-0.9 1.6-1.2q3-2.2 8.9-6.1 1-0.7 1.8-1.6zM32 7.4q0 1.4-0.9 2.7t-2.2 2.2q-6.7 4.7-8.4 5.8-0.2 0.1-0.7 0.5t-1 0.7-0.9 0.6-1.1 0.5-0.9 0.2h-0.1q-0.4 0-0.9-0.2t-1.1-0.5-0.9-0.6-1-0.7-0.7-0.5q-1.6-1.1-4.7-3.2t-3.6-2.6q-1.1-0.7-2.1-2t-1-2.5q0-1.4 0.7-2.3t2.1-0.9h26.3q1.2 0 2 0.8t0.9 2z\"\/><\/svg><\/span><span class=\"shariff-text\">E-Mail<\/span>&nbsp;<\/a><\/li><li class=\"shariff-button linkedin shariff-nocustomcolor\" style=\"background-color:#b32317\"><a href=\"https:\/\/www.linkedin.com\/sharing\/share-offsite\/?url=https%3A%2F%2Fwordpress.boc.de%2Fwatchguard-info-portal%2F2019%2F04%2Ffireware-v12-4-csp1-tls-probleme-behoben%2F\" title=\"Bei LinkedIn teilen\" aria-label=\"Bei LinkedIn teilen\" role=\"button\" rel=\"noopener nofollow\" class=\"shariff-link\" style=\"; background-color:#0077b5; color:#fff\" target=\"_blank\"><span class=\"shariff-icon\" style=\"\"><svg width=\"32px\" height=\"20px\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" viewBox=\"0 0 27 32\"><path fill=\"#0077b5\" d=\"M6.2 11.2v17.7h-5.9v-17.7h5.9zM6.6 5.7q0 1.3-0.9 2.2t-2.4 0.9h0q-1.5 0-2.4-0.9t-0.9-2.2 0.9-2.2 2.4-0.9 2.4 0.9 0.9 2.2zM27.4 18.7v10.1h-5.9v-9.5q0-1.9-0.7-2.9t-2.3-1.1q-1.1 0-1.9 0.6t-1.2 1.5q-0.2 0.5-0.2 1.4v9.9h-5.9q0-7.1 0-11.6t0-5.3l0-0.9h5.9v2.6h0q0.4-0.6 0.7-1t1-0.9 1.6-0.8 2-0.3q3 0 4.9 2t1.9 6z\"\/><\/svg><\/span><span class=\"shariff-text\">teilen<\/span>&nbsp;<\/a><\/li><li class=\"shariff-button xing shariff-nocustomcolor\" style=\"background-color:#b32317\"><a href=\"https:\/\/www.xing.com\/spi\/shares\/new?url=https%3A%2F%2Fwordpress.boc.de%2Fwatchguard-info-portal%2F2019%2F04%2Ffireware-v12-4-csp1-tls-probleme-behoben%2F\" title=\"Bei XING teilen\" aria-label=\"Bei XING teilen\" role=\"button\" rel=\"noopener nofollow\" class=\"shariff-link\" style=\"; background-color:#126567; color:#fff\" target=\"_blank\"><span class=\"shariff-icon\" style=\"\"><svg width=\"32px\" height=\"20px\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" viewBox=\"0 0 25 32\"><path fill=\"#126567\" d=\"M10.7 11.9q-0.2 0.3-4.6 8.2-0.5 0.8-1.2 0.8h-4.3q-0.4 0-0.5-0.3t0-0.6l4.5-8q0 0 0 0l-2.9-5q-0.2-0.4 0-0.7 0.2-0.3 0.5-0.3h4.3q0.7 0 1.2 0.8zM25.1 0.4q0.2 0.3 0 0.7l-9.4 16.7 6 11q0.2 0.4 0 0.6-0.2 0.3-0.6 0.3h-4.3q-0.7 0-1.2-0.8l-6-11.1q0.3-0.6 9.5-16.8 0.4-0.8 1.2-0.8h4.3q0.4 0 0.5 0.3z\"\/><\/svg><\/span><span class=\"shariff-text\">teilen<\/span>&nbsp;<\/a><\/li><li class=\"shariff-button facebook shariff-nocustomcolor\" style=\"background-color:#b32317\"><a href=\"https:\/\/www.facebook.com\/sharer\/sharer.php?u=https%3A%2F%2Fwordpress.boc.de%2Fwatchguard-info-portal%2F2019%2F04%2Ffireware-v12-4-csp1-tls-probleme-behoben%2F\" title=\"Bei Facebook teilen\" aria-label=\"Bei Facebook teilen\" role=\"button\" rel=\"nofollow\" class=\"shariff-link\" style=\"; background-color:#3b5998; color:#fff\" target=\"_blank\"><span class=\"shariff-icon\" style=\"\"><svg width=\"32px\" height=\"20px\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" viewBox=\"0 0 18 32\"><path fill=\"#3b5998\" d=\"M17.1 0.2v4.7h-2.8q-1.5 0-2.1 0.6t-0.5 1.9v3.4h5.2l-0.7 5.3h-4.5v13.6h-5.5v-13.6h-4.5v-5.3h4.5v-3.9q0-3.3 1.9-5.2t5-1.8q2.6 0 4.1 0.2z\"\/><\/svg><\/span><span class=\"shariff-text\">teilen<\/span>&nbsp;<\/a><\/li><li class=\"shariff-button twitter shariff-nocustomcolor\" style=\"background-color:#b32317\"><a href=\"https:\/\/twitter.com\/share?url=https%3A%2F%2Fwordpress.boc.de%2Fwatchguard-info-portal%2F2019%2F04%2Ffireware-v12-4-csp1-tls-probleme-behoben%2F&text=Fireware%2012.4%20CSP1%20%E2%80%93%20TLS-Probleme%20behoben\" title=\"Bei X teilen\" aria-label=\"Bei X teilen\" role=\"button\" rel=\"noopener nofollow\" class=\"shariff-link\" style=\"; background-color:#000; color:#fff\" target=\"_blank\"><span class=\"shariff-icon\" style=\"\"><svg width=\"32px\" height=\"20px\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" viewBox=\"0 0 24 24\"><path fill=\"#000\" d=\"M14.258 10.152L23.176 0h-2.113l-7.747 8.813L7.133 0H0l9.352 13.328L0 23.973h2.113l8.176-9.309 6.531 9.309h7.133zm-2.895 3.293l-.949-1.328L2.875 1.56h3.246l6.086 8.523.945 1.328 7.91 11.078h-3.246zm0 0\"\/><\/svg><\/span><span class=\"shariff-text\">teilen<\/span>&nbsp;<\/a><\/li><\/ul><\/div>","protected":false},"excerpt":{"rendered":"<p>Im Release Fireware 12.4 kann es zu Problemen bei Zugriffen auf vereinzelte Websites geben. Die Ursache hierf\u00fcr liegt in der neu hinzugekommene Unterst\u00fctzung von TLS 1.3 im Release 12.4. Leider wurden hier wohl noch nicht alle m\u00f6glichen TLS-Cipher-Varianten unterst\u00fctzt, wodurch es vereinzelt Abbr\u00fcche geben kann &#8211; genau dann, wenn die Website eines der nicht unterst\u00fctzten Ciphers verwendet. Das Problem kann auch bei eingehenen TLS-Verbindungen \u00fcber &hellip; <a href=\"https:\/\/wordpress.boc.de\/watchguard-info-portal\/2019\/04\/fireware-v12-4-csp1-tls-probleme-behoben\/\" class=\"more-link\">Weiterlesen <span class=\"screen-reader-text\">Fireware 12.4 CSP1 &#8211; TLS-Probleme behoben<\/span> <span class=\"meta-nav\">&raquo;<\/span><\/a><\/p>\n<div class=\"shariff\"><ul class=\"shariff-buttons theme-default orientation-horizontal buttonsize-medium\"><li class=\"shariff-button mailto shariff-nocustomcolor\" style=\"background-color:#b32317\"><a href=\"mailto:?body=https%3A%2F%2Fwordpress.boc.de%2Fwatchguard-info-portal%2F2019%2F04%2Ffireware-v12-4-csp1-tls-probleme-behoben%2F&subject=Fireware%2012.4%20CSP1%20%E2%80%93%20TLS-Probleme%20behoben\" title=\"Per E-Mail versenden\" aria-label=\"Per E-Mail versenden\" role=\"button\" rel=\"noopener nofollow\" class=\"shariff-link\" style=\"; background-color:#999; color:#fff\"><span class=\"shariff-icon\" style=\"\"><svg width=\"32px\" height=\"20px\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" viewBox=\"0 0 32 32\"><path fill=\"#999\" d=\"M32 12.7v14.2q0 1.2-0.8 2t-2 0.9h-26.3q-1.2 0-2-0.9t-0.8-2v-14.2q0.8 0.9 1.8 1.6 6.5 4.4 8.9 6.1 1 0.8 1.6 1.2t1.7 0.9 2 0.4h0.1q0.9 0 2-0.4t1.7-0.9 1.6-1.2q3-2.2 8.9-6.1 1-0.7 1.8-1.6zM32 7.4q0 1.4-0.9 2.7t-2.2 2.2q-6.7 4.7-8.4 5.8-0.2 0.1-0.7 0.5t-1 0.7-0.9 0.6-1.1 0.5-0.9 0.2h-0.1q-0.4 0-0.9-0.2t-1.1-0.5-0.9-0.6-1-0.7-0.7-0.5q-1.6-1.1-4.7-3.2t-3.6-2.6q-1.1-0.7-2.1-2t-1-2.5q0-1.4 0.7-2.3t2.1-0.9h26.3q1.2 0 2 0.8t0.9 2z\"\/><\/svg><\/span><span class=\"shariff-text\">E-Mail<\/span>&nbsp;<\/a><\/li><li class=\"shariff-button linkedin shariff-nocustomcolor\" style=\"background-color:#b32317\"><a href=\"https:\/\/www.linkedin.com\/sharing\/share-offsite\/?url=https%3A%2F%2Fwordpress.boc.de%2Fwatchguard-info-portal%2F2019%2F04%2Ffireware-v12-4-csp1-tls-probleme-behoben%2F\" title=\"Bei LinkedIn teilen\" aria-label=\"Bei LinkedIn teilen\" role=\"button\" rel=\"noopener nofollow\" class=\"shariff-link\" style=\"; background-color:#0077b5; color:#fff\" target=\"_blank\"><span class=\"shariff-icon\" style=\"\"><svg width=\"32px\" height=\"20px\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" viewBox=\"0 0 27 32\"><path fill=\"#0077b5\" d=\"M6.2 11.2v17.7h-5.9v-17.7h5.9zM6.6 5.7q0 1.3-0.9 2.2t-2.4 0.9h0q-1.5 0-2.4-0.9t-0.9-2.2 0.9-2.2 2.4-0.9 2.4 0.9 0.9 2.2zM27.4 18.7v10.1h-5.9v-9.5q0-1.9-0.7-2.9t-2.3-1.1q-1.1 0-1.9 0.6t-1.2 1.5q-0.2 0.5-0.2 1.4v9.9h-5.9q0-7.1 0-11.6t0-5.3l0-0.9h5.9v2.6h0q0.4-0.6 0.7-1t1-0.9 1.6-0.8 2-0.3q3 0 4.9 2t1.9 6z\"\/><\/svg><\/span><span class=\"shariff-text\">teilen<\/span>&nbsp;<\/a><\/li><li class=\"shariff-button xing shariff-nocustomcolor\" style=\"background-color:#b32317\"><a href=\"https:\/\/www.xing.com\/spi\/shares\/new?url=https%3A%2F%2Fwordpress.boc.de%2Fwatchguard-info-portal%2F2019%2F04%2Ffireware-v12-4-csp1-tls-probleme-behoben%2F\" title=\"Bei XING teilen\" aria-label=\"Bei XING teilen\" role=\"button\" rel=\"noopener nofollow\" class=\"shariff-link\" style=\"; background-color:#126567; color:#fff\" target=\"_blank\"><span class=\"shariff-icon\" style=\"\"><svg width=\"32px\" height=\"20px\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" viewBox=\"0 0 25 32\"><path fill=\"#126567\" d=\"M10.7 11.9q-0.2 0.3-4.6 8.2-0.5 0.8-1.2 0.8h-4.3q-0.4 0-0.5-0.3t0-0.6l4.5-8q0 0 0 0l-2.9-5q-0.2-0.4 0-0.7 0.2-0.3 0.5-0.3h4.3q0.7 0 1.2 0.8zM25.1 0.4q0.2 0.3 0 0.7l-9.4 16.7 6 11q0.2 0.4 0 0.6-0.2 0.3-0.6 0.3h-4.3q-0.7 0-1.2-0.8l-6-11.1q0.3-0.6 9.5-16.8 0.4-0.8 1.2-0.8h4.3q0.4 0 0.5 0.3z\"\/><\/svg><\/span><span class=\"shariff-text\">teilen<\/span>&nbsp;<\/a><\/li><li class=\"shariff-button facebook shariff-nocustomcolor\" style=\"background-color:#b32317\"><a href=\"https:\/\/www.facebook.com\/sharer\/sharer.php?u=https%3A%2F%2Fwordpress.boc.de%2Fwatchguard-info-portal%2F2019%2F04%2Ffireware-v12-4-csp1-tls-probleme-behoben%2F\" title=\"Bei Facebook teilen\" aria-label=\"Bei Facebook teilen\" role=\"button\" rel=\"nofollow\" class=\"shariff-link\" style=\"; background-color:#3b5998; color:#fff\" target=\"_blank\"><span class=\"shariff-icon\" style=\"\"><svg width=\"32px\" height=\"20px\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" viewBox=\"0 0 18 32\"><path fill=\"#3b5998\" d=\"M17.1 0.2v4.7h-2.8q-1.5 0-2.1 0.6t-0.5 1.9v3.4h5.2l-0.7 5.3h-4.5v13.6h-5.5v-13.6h-4.5v-5.3h4.5v-3.9q0-3.3 1.9-5.2t5-1.8q2.6 0 4.1 0.2z\"\/><\/svg><\/span><span class=\"shariff-text\">teilen<\/span>&nbsp;<\/a><\/li><li class=\"shariff-button twitter shariff-nocustomcolor\" style=\"background-color:#b32317\"><a href=\"https:\/\/twitter.com\/share?url=https%3A%2F%2Fwordpress.boc.de%2Fwatchguard-info-portal%2F2019%2F04%2Ffireware-v12-4-csp1-tls-probleme-behoben%2F&text=Fireware%2012.4%20CSP1%20%E2%80%93%20TLS-Probleme%20behoben\" title=\"Bei X teilen\" aria-label=\"Bei X teilen\" role=\"button\" rel=\"noopener nofollow\" class=\"shariff-link\" style=\"; background-color:#000; color:#fff\" target=\"_blank\"><span class=\"shariff-icon\" style=\"\"><svg width=\"32px\" height=\"20px\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" viewBox=\"0 0 24 24\"><path fill=\"#000\" d=\"M14.258 10.152L23.176 0h-2.113l-7.747 8.813L7.133 0H0l9.352 13.328L0 23.973h2.113l8.176-9.309 6.531 9.309h7.133zm-2.895 3.293l-.949-1.328L2.875 1.56h3.246l6.086 8.523.945 1.328 7.91 11.078h-3.246zm0 0\"\/><\/svg><\/span><span class=\"shariff-text\">teilen<\/span>&nbsp;<\/a><\/li><\/ul><\/div>","protected":false},"author":3,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[122],"tags":[556,554,526,301,555,426,148],"class_list":["post-6743","post","type-post","status-publish","format-standard","hentry","category-watchguard-software-release-news","tag-cipher","tag-csp","tag-fireware-12-4","tag-https","tag-https-proxy","tag-smtp-proxy","tag-tls"],"_links":{"self":[{"href":"https:\/\/wordpress.boc.de\/watchguard-info-portal\/wp-json\/wp\/v2\/posts\/6743","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/wordpress.boc.de\/watchguard-info-portal\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/wordpress.boc.de\/watchguard-info-portal\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/wordpress.boc.de\/watchguard-info-portal\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/wordpress.boc.de\/watchguard-info-portal\/wp-json\/wp\/v2\/comments?post=6743"}],"version-history":[{"count":1,"href":"https:\/\/wordpress.boc.de\/watchguard-info-portal\/wp-json\/wp\/v2\/posts\/6743\/revisions"}],"predecessor-version":[{"id":6744,"href":"https:\/\/wordpress.boc.de\/watchguard-info-portal\/wp-json\/wp\/v2\/posts\/6743\/revisions\/6744"}],"wp:attachment":[{"href":"https:\/\/wordpress.boc.de\/watchguard-info-portal\/wp-json\/wp\/v2\/media?parent=6743"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/wordpress.boc.de\/watchguard-info-portal\/wp-json\/wp\/v2\/categories?post=6743"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/wordpress.boc.de\/watchguard-info-portal\/wp-json\/wp\/v2\/tags?post=6743"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}