{"id":6743,"date":"2019-04-25T13:40:52","date_gmt":"2019-04-25T11:40:52","guid":{"rendered":"https:\/\/www.boc.de\/watchguard-info-portal\/?p=6743"},"modified":"2019-04-25T13:40:52","modified_gmt":"2019-04-25T11:40:52","slug":"fireware-v12-4-csp1-tls-probleme-behoben","status":"publish","type":"post","link":"https:\/\/wordpress.boc.de\/watchguard-info-portal\/2019\/04\/fireware-v12-4-csp1-tls-probleme-behoben\/","title":{"rendered":"Fireware 12.4 CSP1 &#8211; TLS-Probleme behoben"},"content":{"rendered":"<p>Im Release Fireware 12.4 kann es zu Problemen bei Zugriffen auf vereinzelte Websites geben. Die Ursache hierf\u00fcr liegt in der neu hinzugekommene Unterst\u00fctzung von TLS 1.3 im Release 12.4. Leider wurden hier wohl noch nicht alle m\u00f6glichen TLS-Cipher-Varianten unterst\u00fctzt, wodurch es vereinzelt Abbr\u00fcche geben kann &#8211; genau dann, wenn die Website eines der nicht unterst\u00fctzten Ciphers verwendet.<\/p>\n<p>Das Problem kann auch bei eingehenen TLS-Verbindungen \u00fcber SMTP auftreten, da hier die gleichen TLS-Profile verwendet werden.<\/p>\n<p>Abhilfe schafft ein Upgrade auf die Version 12.4 CSP1. Diese ist auf Anfrage \u00fcber einen Case bei WatchGuard erh\u00e4ltlich.<\/p>\n<p>Details:<\/p>\n<p><!--more--><\/p>\n<hr \/>\n<p><strong>Fireware v12.4 CSP 1 Release Notes<\/strong><\/p>\n<p><strong>Supported Devices Firebox:<\/strong> T10, T15, T30, T35, T50, T55, T70, M200, M270, M300, M370,\u00a0M400, M440, M470, M500, M570, M670, M4600, M5600 FireboxV, Firebox Cloud, WatchGuard AP<br \/>\n<strong>Release Date:<\/strong> 23 April 2019<br \/>\n<strong>Fireware OS Build:<\/strong> 592447<br \/>\n<strong>WatchGuard System\u00a0Manager Build:\u00a0<\/strong>592565<br \/>\n<strong>WatchGuard AP Device Firmware:<\/strong><br \/>\nAP100, AP102, AP200: 1.2.9.16<br \/>\nAP300: 2.0.0.11<br \/>\nAP125: 8.6.0-644.3<br \/>\nAP120, AP320, AP322, AP325, AP420: 8.6.0-646<\/p>\n<p><strong>Resolved Issues in Fireware v12.4 CSP 1 (Fireware Build 592447, WSM Build 592565)<\/strong><\/p>\n<ul>\n<li>This release resolves an issue that caused websites to fail to load through the\u00a0HTTPS Proxy when messages are split over multiple TLS records. [FBX-16195]<\/li>\n<li>The pxyassist process no longer crashes when PDF files are analyzed. [FBX16197]<\/li>\n<li>This release adds additional PFS grade ciphers for better compatibility with HTTPS webservers when using content inspection in the HTTPS Proxy. [FBX16227]<\/li>\n<li>The Inspect when a URL is uncategorized option in the HTTPS Proxy now works when you also use an On-Premise WebBlocker server. [FBX-15847]<\/li>\n<li>Proxy traffic for 1-to-1 NAT hosts now use the correct NAT Base IP address. [FBX16234]<\/li>\n<li>The Fireware Web UI Front Panel now loads correctly for all users. [FBX-15555]<\/li>\n<li>This release resolves several issues that caused websites fail to load through the\u00a0HTTPS Proxy with content inspection disabled. [FBX-16143, FBX-16203]<\/li>\n<li>When content inspection is disabled, the HTTPS Proxy can now correctly handle Client Authentication during the SSL handshake. [FBX-15916]<\/li>\n<li>An appliance kernel lockup issue was resolved. [FBX-15247]<\/li>\n<li>Policy Manager now correctly handles the configuration of BOVPN Virtual Interface settings in pre-Fireware v12.0 configurations. [FBX-16291]<\/li>\n<li>In Policy Manager, the default route for a VLAN External interface is now\u00a0correctly added to the Firebox routing table. [FBX-16358]<\/li>\n<li>This release resolves an issue that prevented Management Server Policy Templates from saving to a Firebox when they included FQDNs. [FBX-16237]<\/li>\n<\/ul>\n<p>&nbsp;<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Im Release Fireware 12.4 kann es zu Problemen bei Zugriffen auf vereinzelte Websites geben. Die Ursache hierf\u00fcr liegt in der neu hinzugekommene Unterst\u00fctzung von TLS 1.3 im Release 12.4. Leider wurden hier wohl noch nicht alle m\u00f6glichen TLS-Cipher-Varianten unterst\u00fctzt, wodurch es vereinzelt Abbr\u00fcche geben kann &#8211; genau dann, wenn die Website eines der nicht unterst\u00fctzten Ciphers verwendet. Das Problem kann auch bei eingehenen TLS-Verbindungen \u00fcber &hellip; <a href=\"https:\/\/wordpress.boc.de\/watchguard-info-portal\/2019\/04\/fireware-v12-4-csp1-tls-probleme-behoben\/\" class=\"more-link\">Weiterlesen <span class=\"screen-reader-text\">Fireware 12.4 CSP1 &#8211; TLS-Probleme behoben<\/span> <span class=\"meta-nav\">&raquo;<\/span><\/a><\/p>\n","protected":false},"author":3,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[122],"tags":[556,554,526,301,555,426,148],"class_list":["post-6743","post","type-post","status-publish","format-standard","hentry","category-watchguard-software-release-news","tag-cipher","tag-csp","tag-fireware-12-4","tag-https","tag-https-proxy","tag-smtp-proxy","tag-tls"],"_links":{"self":[{"href":"https:\/\/wordpress.boc.de\/watchguard-info-portal\/wp-json\/wp\/v2\/posts\/6743"}],"collection":[{"href":"https:\/\/wordpress.boc.de\/watchguard-info-portal\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/wordpress.boc.de\/watchguard-info-portal\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/wordpress.boc.de\/watchguard-info-portal\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/wordpress.boc.de\/watchguard-info-portal\/wp-json\/wp\/v2\/comments?post=6743"}],"version-history":[{"count":1,"href":"https:\/\/wordpress.boc.de\/watchguard-info-portal\/wp-json\/wp\/v2\/posts\/6743\/revisions"}],"predecessor-version":[{"id":6744,"href":"https:\/\/wordpress.boc.de\/watchguard-info-portal\/wp-json\/wp\/v2\/posts\/6743\/revisions\/6744"}],"wp:attachment":[{"href":"https:\/\/wordpress.boc.de\/watchguard-info-portal\/wp-json\/wp\/v2\/media?parent=6743"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/wordpress.boc.de\/watchguard-info-portal\/wp-json\/wp\/v2\/categories?post=6743"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/wordpress.boc.de\/watchguard-info-portal\/wp-json\/wp\/v2\/tags?post=6743"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}