Release Notes. Dell SonicWALL Security firmware is supported on the following appliances: Dell SonicWALL Security 200

Transcription

1 Release Ntes Security Dell SnicWALL Security SnicOS Cntents System Cmpatibility... 1 Enhancements in Security Reslved Issues... 3 Upgrading t Security Related Technical Dcumentatin... 7 System Cmpatibility Fr Appliances Dell SnicWALL Security firmware is supprted n the fllwing appliances: Dell SnicWALL Security 200 Dell SnicWALL Security 300 Dell SnicWALL Security 400 Dell SnicWALL Security 500 Dell SnicWALL Security 3300 Dell SnicWALL Security 4300 Dell SnicWALL Security 6000 Dell SnicWALL Security 8000 Dell SnicWALL Security 8300 Fr Sftware When installed as sftware, Dell SnicWALL Security is supprted n systems that meet the fllwing requirements: Operating Systems: Windws Server 2008 Windws Server 2008, R2 (64-bit) Windws Server 2012 (64-bit) SBS 2011 (64-bit) Nte: Dell SnicWALL Security Sftware is nt supprted n Windws running n VMware. Use the Security Virtual Appliance n VMware platfrms. Hardware Requirements: Intel Pentium: P4 r cmpatible CPU 4 GB f RAM strngly recmmended Hard Disk: Additinal 80 GB minimum. Recmmended installatin n a separate drive. Yur strage needs are based n yur mail vlume, quarantine size, archived data, and auditing settings.

2 Fr Virtual Appliances Release Ntes When installed as a Virtual Appliance, Dell SnicWALL Security is supprted n systems that meet the fllwing requirements: VMware Platfrms: ESXi 4.0 Update 1 (Build and newer) ESX 4.0 Update 1 (Build and newer) ESX 5.1 Hardware Resurce Requirements: 160 GB thick prvisined hard disk space Nte: The OVA image fr the Dell SnicWALL Security Appliance specifically allcates 160 GB n the virtual disk and cannt be altered. 4 GB RAM 1 CPU Enhancements in Security The fllwing is a list f new enhancements made t features in the Dell SnicWALL Security release: Address Bk Imprt The Anti-Spam, Anti-Phishing > Address Bks page nw allws users t imprt an address bk with multiple addresses. The imprted file must fllw specific frmatting requirements in rder t successfully imprt int the Security slutin. Dmain Keys Identified Mail (DKIM) Dell SnicWALL Security nw supprts DKIM verificatin f inbund messages. DKIM uses a secure digital signature t verify that the sender f a message is wh it claims t be and that the cntents f the message have nt been altered in transit. A valid DKIM signature is a strng indicatr f a message s authenticity, while an invalid DKIM signature is a strng indicatr that the sender is attempting t fake his identity. HTML Supprt fr Outbund Reprts Security allws yu t ptinally dwnlad data reprts in CSV r HTML frmat. Custm reprts can als be created by specifying a time perid fr the data. User Lckut Feature Administratrs have the ptin t enable a user lckut feature, which lcks ut user accunts if the number f unsuccessful attempts t lgin is reached. Maria DB Supprt Maria DB nw supprts all Security platfrms (including Windws 32 and 64-bit), replacing MySQL services. 2

3 Release Ntes Reslved Issues The fllwing are reslved issues in the Dell SnicWALL Security release. Symptm Cnditin TLS is nt enfrced when the Require the destinatin server t supprt StartTLS checkbx is enabled Security resets the utbund cnnectin with 20+ recipients Special characters in the Username (fr example, the German Umlaut) are nt recgnized and prevent user frm lgging in The OU Admin is unable t view r unlck a crrespnding OU User that has been lcked ut f Security after unsuccessful lgin attempts Help Desk Users are unable t view the Auditing Page t manage Auditing Data Users are unable t lg in if the name attribute is set t CN and the lgin name includes a space (i.e. Jhn De ) The SMTP lg des nt recrd the surce IP f a spam message if it is an IPv6 address, and results in a Permanent Errr message A user is nt inheriting Grup Junk Summary Delivery settings. Occurs when the Require the destinatin server t supprt StartTLS feature is enabled and the path is cnfigured t rute s using MX ruting r MX ruting with exceptins. TLS is nt enfrced and is allwing messages. With this feature enabled, TLS shuld be rejecting r buncing messages. Occurs due t an bscure cmbinatin f cnditins, including a large number f recipients in a message. The Security Gateway fails t deliver a message, and the sender receives an SMTP errr respnse ( Service unavailable, errr interacting with dwnstream server ) and a lg recrd warning ( Dwnstream respnse des nt appear t be SMTP ). Occurs when using special characters frm languages ther than English in the Username. Fr example, lgging in with the name Stöckmann results in an incrrect username, but Steckmann results in a successful lgin. Occurs when a user enters the wrng lgin credentials five times and, as a result, is lcked ut f Security. The crrespnding OU Admin is unable t view the lcked ut user, nr is the Admin able t unlck the user. Occurs when a user assigned with a Help Desk Rle attempts t view Auditing Data. In rder fr the Help Desk Rle t be able t view Auditing data, the Glbal Administratr must enable the Allw audit view t Help Desk Users checkbx. Occurs when upgrading t Security If the lgin name attribute is set t CN and users attempt t lg in with a name that includes a space, the user receives an Invalid Username r Passwrd errr; hwever, the WebUI lg des nt display the errr. Wrkarund: Change the user lgin name attribute t UID and lgin with a username that des nt cntain a space. Occurs when there are IPv6 terms in the SPF recrd. Instead f recrding the ccurrence in the SMTP lg, the SPF judgment renders a Permanent Errr message. Occurs when disabling glbal settings and enabling Junk Summary Delivery nly fr a grup. The specified members f the grup are unable t receive the Junk Bx Summary. 3

4 Release Ntes Upgrading t Security The fllwing prcedures are fr upgrading an existing Security appliance r sftware installatin, r fr installing the Security Virtual Appliance. Backing Up Yur Existing Envirnment n an Security Appliance... 4 Upgrading Yur Existing Dell SnicWALL Security Firmware... 5 Upgrading Yur Existing Dell SnicWALL Security Sftware... 5 Installing the Dell SnicWALL Security Virtual Appliance... 6 Backing Up Yur Existing Envirnment n an Security Appliance Befre yu upgrade yur appliance firmware, yu shuld back up yur existing envirnment. This will enable yu t restre it if yu decide t change back fr sme reasn. Yur backup shuld include the settings files, including the per user settings. T back up yur existing envirnment: 1. Lgin t Security interface using the admin accunt 2. In the left navigatin pane under System, chse Backup/Restre. Yu will see the Backup/Restre page: 3. In the Manage Backups sectin, select Settings. 4. Click Take Snapsht Nw t create a snapsht. 5. Click Dwnlad Snapsht t save the snapsht t yur lcal file system 4

5 Release Ntes Upgrading Yur Existing Dell SnicWALL Security Firmware Fllw this prcedure t upgrade yur existing Security firmware n Security appliances. 1. Navigate t the System > Advanced page and scrll dwn t the Uplad Patch sectin. 2. Click Chse File t lcate the Security Firmware file n yur lcal file system, and then click Apply Patch. 3. As part f the upgrade prcess, the Security appliance will rebt. The upgrade prcess culd take between minutes. All the settings and data will be preserved. NOTE fr ES8300 Yur ES8300 is equipped with a battery backup unit n the RAID Cntrller Card, which allws the appliance t write vlatile memry t disk in the event f a lss f pwer. This battery backup unit must be charged fr 24 hurs. When deplying yur ES8300 appliance, fllw the startup and registratin instructins detailed in the Getting Started Guide, and then allw the battery backup in the unit t charge fr 24 hurs. If the battery is nt fully charged, sme RAID features are turned ff, and the appliance perfrmance is temprarily impaired until the battery is fully charged. Upgrading Yur Existing Dell SnicWALL Security Sftware Fllw this prcedure t upgrade yur existing Security installatin. The Full Installer includes installatin f Apache Tmcat, the Java Runtime Envirnment (JRE), Firebird, and MySQL as well as the base Security sftware. 1. On the server running Security, duble-click the Security installatin file. Click Run in the dialg bx. If yu d nt have direct access t the server, use a remte desktp cnnectin t cnnect t the server and run the installatin file n the server. Nte: Administratrs must cpy the installatin file t the Security Server in rder t run the installatin file. Administratrs will nt be able t upgrade thrugh the Web UI n Windws. 2. In the Welcme page f the installatin wizard, click Next. 3. Read the License Agreement and then click Next t accept the agreement. 4. Dell SnicWALL recmmends that Asian language packs be installed, and an alert is displayed if they are missing. T prceed with the Security installatin and install Asian language packs later, click Next. T install Asian language packs prir t prceeding, click Cancel. Nte: Installing Asian language packs is ptinal; hwever, the spam preventin capabilities f Dell SnicWALL Security may be diminished withut them. Asian language packs can be installed befre r after Security Sftware installatin. 5. On the Destinatin Flder page, click Brwse t select an alternate flder, r click Next t accept the default lcatin. Nte: It is imprtant that this flder is nt scanned by an anti-virus engine. 5

6 Release Ntes 6. On the Chse Data Flder page, click Brwse t select an alternate flder, r click Next t accept the default lcatin. If the data flder is n a different disk drive than the install directry, ensure that it has fast read/write access with less than 10 millisecnd latency. Yu can test latency with the ping cmmand. 7. On the Start Installatin page, click Next. 8. If requested, allw the installatin f Tmcat, Firebird, and the Java Runtime Envirnment (J2RE). If Tmcat is installed in this step, it prmpts fr the Apache Tmcat Web server prt number. The default prt is 80. If yu are already running a Web server n prt 80, yu must change the prt setting. Dell SnicWALL recmmends prt Click Next t cntinue. Nte: Yu can change the prt number and cnfigure HTTPS access after installatin by using the Server Cnfiguratin > User View Setup page f the Security appliance. 9. After the installatin finishes, click Finish in the Installatin Cmplete wizard. A brwser windw is displayed with links t the Security user interface and dcumentatin. Installing the Dell SnicWALL Security Virtual Appliance Fr infrmatin abut installing Dell SnicWALL Security as a Virtual Appliance, see the Security Virtual Appliance Getting Started Guide, available at: 6

7 Related Technical Dcumentatin Release Ntes Fr basic and advanced deplyment examples, Dell SnicWALL dcumentatin is available in the Dell SnicWALL Technical Dcumentatin Online Library: Last updated: 12/6/2013 7