John Willemse February 25 2012 12:39:41 AM
ASG V8 Appliance Upgrade Date Link The following Firmware Up2Date package has been successfully downloaded and is now available for installation: 8.300
For more information about this package please see the attached information.
System Uptime : 35 days 1 hour 0 minutes
System Load : 0.42
System Version : Astaro Security Gateway 8.203
Up2Date 8.300 package description:
Remarks: System will be rebooted
Configuration will be upgraded
Connected Wifi APs will perform firmware upgrade
Connected RED devices may perform firmware upgrade
News: Added: BGP4 support
Added: RED ASG-to-ASG tunel
Added: Amazon VPC support
Added: Wifi AP50 support
Fixed: VLAN and PPPoE over bridge are subject to packet filter now
Bugfixes: Fix [16884]: Confd: reject IP addresses with leading zeros
Fix [17199]: RAS addresses are never removed from backend group network objects
Fix [18581]: QoS limits maximum packet size to 2047
Fix [18600]: Websec reporting: scheduled reports are always empty
Fix [18728]: SMTP Proxy can't send any email when special characters in BATV secret
Fix [19887]: Using Interface bound ANY Object (e.g. Internet IPv4) in network list will cause other entries not to match
Feature Overview of V8.300 ASG 8.3 provides the following new features. We've also spent significant effort on stability enhancements and quashing outstanding issues.
Major New Things Amazon Machine Images (AMI) for ASG (and ACC) As mentioned in our earlier technical preview, you can now launch and run Astaro Security Gateway inside Amazon's Elastic Computing Cloud (EC2). Already we are seeing creative uses of this deployment method with partners using their cloud-based ASG to connect our RED product, and then extending their branches further by adding our Access Points to those devices - all managed centrally from their Amazon ASG. Let us know via a post at our UBB at
www.astaro.org how it works for you, and how you are (or plan) to use it for your business - we are always interested in use cases! To locate the ASG AMI's, go to the community AMIs tab and search for "ASG". (A full deployment tutorial will be available at GA)
Amazon Virtual Private Cloud (VPC) connector The Amazon VPC service allows you to host and run your server infrastructure in a secure, scalable cloud. Our VPC connector gives you a permanent, encrypted connection to your VPC resources right from ASG. The back end for this uses our new BGP routing to redundant Amazon gateways, and is done automatically without you needing to know anything about BGP or the Amazon technical parameters for doing it manually (or with more complex products). A guide will be available at GA release to assist you in connecting to your VPC.
Support for Astaro Wireless AP50 Our new Wireless AP50 product is finished production and will be available very soon. You will need to be at ASG V8.300+ to use this product. With 5Ghz and 2.4Ghz bands, dual high-gain antennas, and Gigabit ethernet, this is our biggest and most capable wireless product, perfect for bigger environments or locations where the 2.4Ghz band is cluttered with interference. You can get more info at Astaro Access Points
Site-to-Site VPN using RED Protocol We have added the ability to make tunnels between ASG devices using our much-heralded RED tunnel technology*. This operates similarly to how site-site over SSL works, you setup one ASG as the "Main" office (Server) and connect to them from other ASG sites as the "Client". Some quick steps to begin:
At the Main Site:
Go to "WebAdmin-->RED Management-->[Server]Client Management Tab".
Add a RED, enter a name and pick type "ASG". Click Apply.
Download the .red provisioning file which is created.
On the Remote ASG you wish to connect:
Go to "WebAdmin-->RED Management-->[Client]Tunnel Management"
Add a tunnel, create (or select) a definition for the Hostname of the Main ASG and supply the provisioning file you downloaded from the Main ASG.
The tunnel will now be created.
Now that you have a tunnel, you must to setup things manually. You will find hardware interfaces you can use to create a Network Interface in the ASG's, select IP ranges to be used, and otherwise manually configure the connectivity. This was originally designed for a special use case; you have however surprised us with your interest in this feature. So, we plan to have a more guided setup within WebAdmin for using RED for a site-site VPN with ASG's in a future Up2Date.
*This will NOT turn your remote ASG into a RED terminal. It will still have a GUI and work like a normal Site-Site VPN does.
**This new site-site functionality will likely be merged into the VPN section in future V8.3 Up2Date.
BGP4 Routing Support ASG now has the ability to do Border Gateway Protocol Routing (BGP). You will find the configuration for this in WebAdmin at "Interfaces & Routing-->Border Gateway Protocol". A specialized routing protocol with specific applications, you should make use of this feature only if you know what you are doing.
Minor Adjustments The Astaro Authentication Agent (AAA) has by popular request been made available as an MSI package as well as an EXE. You will find both on the Client Authentication section in WebAdmin. Thanks to everyone who asked for this feature, YOU made it happen. Enjoy those mass roll-outs!
Saved Web Reports have been to school and now remember how info was sorted when you saved them
The printable configuration engine has also been educated on how to properly display big blocks of text without going outside the lines and now looks much better
You can now see and sort application rules by the groups you create
Notifications have had "select-all" boxes added, saving you from having to click dozens of times to select what you want
You can now create Web Security Reports from Pre-8.2 Logs, see Support-->Advanced-->Weblog Import
The Wireless Access Points Grouping section now has an apply button like the rest of WebAdmin, and no longer resets your selections between clicks as a result.
Running:
Astaro Security Gateway 8.300 
The Badkey Team
http://nl.linkedin.com/in/willemsej Comments Disabled
