Release Notes. Dell SonicWALL Security firmware is supported on the following appliances: Dell SonicWALL Security 200

Transcription

1 Release Ntes Security Dell SnicWALL Security SnicOS Cntents System Cmpatibility... 1 Enhancements in Security Knwn Issues... 3 Upgrading t Security Related Technical Dcumentatin... 7 System Cmpatibility Fr Appliances Dell SnicWALL Security firmware is supprted n the fllwing appliances: Dell SnicWALL Security 200 Dell SnicWALL Security 300 Dell SnicWALL Security 400 Dell SnicWALL Security 500 Dell SnicWALL Security 3300 Dell SnicWALL Security 4300 Dell SnicWALL Security 6000 Dell SnicWALL Security 8000 Dell SnicWALL Security 8300 Fr Sftware When installed as sftware, Dell SnicWALL Security is supprted n systems that meet the fllwing requirements: Operating Systems: Windws Server 2008 Windws Server 2008, R2 (64-bit) Windws Server 2012 (64-bit) SBS 2011 (64-bit) Nte: Dell SnicWALL Security Sftware is nt supprted n Windws running n VMware. Use the Security Virtual Appliance n VMware platfrms. Hardware Requirements: Intel Pentium: P4 r cmpatible CPU 4 GB f RAM strngly recmmended (2 GB additinal RAM minimum) Hard Disk: Additinal 80 GB minimum. Recmmended installatin n a separate drive. Yur strage needs are based n yur mail vlume, quarantine size, archived data, and auditing settings.

2 Fr Virtual Appliances Release Ntes When installed as a Virtual Appliance, Dell SnicWALL Security is supprted n systems that meet the fllwing requirements: VMware Platfrms: ESXi 4.0 Update 1 (Build and newer) ESX 4.0 Update 1 (Build and newer) ESX 5.1 Hardware Resurce Requirements: 160 GB thick prvisined hard disk space Nte: The OVA image fr the Dell SnicWALL Security Appliance specifically allcates 160 GB n the virtual disk and cannt be altered. 4 GB RAM 1 CPU Enhancements in Security The fllwing is a list f new enhancements made t features in the Dell SnicWALL Security release: Address Bk Imprt The Anti-Spam, Anti-Phishing > Address Bks page nw allws users t imprt an address bk with multiple addresses. The imprted file must fllw specific frmatting requirements in rder t successfully imprt int the Security slutin. Dmain Keys Identified Mail (DKIM) Dell SnicWALL Security nw supprts DKIM verificatin f inbund messages. DKIM uses a secure digital signature t verify that the sender f a message is wh it claims t be and that the cntents f the message have nt been altered in transit. A valid DKIM signature is a strng indicatr f a message s authenticity, while an invalid DKIM signature is a strng indicatr that the sender is attempting t fake his identity. HTML Supprt fr Outbund Reprts Security allws yu t ptinally dwnlad data reprts in CSV r HTML frmat. Custm reprts can als be created by specifying a time perid fr the data. User Lckut Feature Administratrs have the ptin t enable a user lckut feature, which lcks ut user accunts if the number f unsuccessful attempts t lgin is reached. JRE Versin Upgrade Hsted Security 2.0 nw supprts JRE Versin 1.7.0_13. Open SSL Versin Upgrade Hsted Security 2.0 nw supprts Open SSL Versin 1.0.0k. 2

3 Release Ntes Knwn Issues The fllwing are knwn issues in the Dell SnicWALL Security release. Symptm Cnditin Dwngrading frm Security t Security des nt successfully wrk when the Redirect access frm HTTP t HTTPS setting is enabled SMTP TLS cmmunicatin des nt wrk if the path is mdified in Security befre dwngrading t Security Users that have enabled HTTPS n their Remte Analyzers (RAs) with Security need t recnfigure HTTPS after upgrading t Security Mail messages d nt display in the Auditing r Junk Bx screens f a new Organizatinal Unit (OU) after upgrading t Security Upgrading frm Security t Security des nt autmatically migrate User Rights infrmatin. Occurs when Redirect access frm HTTP t HTTPS setting is enabled and certificates are migrated frm the System > Certificates > Cnfigure page. Once certificate changes are made, dwngrading t Security des nt successfully wrk, and the Web UI is inaccessible. This is due t new tags that have been added in tmcat/cnf/server.xml fr supprting PKCS12 keystre. Wrkarund: T fix this issue after the dwngrade, cpy server.xml frm the /data/upgrade_cnfig_backup/tmcat directry t the /pt/ security/tmcat/cnf/ directry. Then, restart Tmcat. Occurs when a TLS SMTP path added in Security is mdified in Security after the upgrade. When the Security system is dwngraded t 7.3.5, the mail flw stps. Wrkarund: Manually cpy server.xml frm <datadir>/upgrade_cnfig_backup/server.xml t <datadir>/server.xml t restre the settings that existed in a pre-7.4 upgrade envirnment. Occurs when HTTPS is enabled n Security RAs and users attempt t use HTTPS after upgrading t Security n their RAs. The lgin screen des nt display and HTTPS des nt wrk. Wrkarund: Users that have enabled HTTPS n their RAs with Security need t recnfigure HTTPS after upgrading t Security Occurs when creating a new OU and cnfiguring the LDAP n an Security system that has been upgraded frm Security t Upn navigating t the Auditing r Junk Bx page, the mail messages d nt display. Wrkarund: Rebuild frm the Dialg page. Fr example, the Glbal Administratr needs t invke the cmmand rebuildsearchdb frm the Dialg page. (Diag.html > Administratin Tls) Occurs when Security is upgraded frm t 7.4.3, and a new Organizatinal Unit (OU) is created after the upgrade. Wrkarund: Since Grup Rles and Users Rights cnfigured in at the Glbal Administratr level are nt autmatically migrated t the newly created rganizatin unit, the OU Admin needs t recnfigure the Grup Rles and Users Rights in the newly created OU. 3

4 Release Ntes Upgrading t Security The fllwing prcedures are fr upgrading an existing Security appliance r sftware installatin, r fr installing the Security Virtual Appliance. Backing Up Yur Existing Envirnment n an Security Appliance... 4 Upgrading Yur Existing Dell SnicWALL Security Firmware... 5 Upgrading Yur Existing Dell SnicWALL Security Sftware... 5 Installing the Dell SnicWALL Security Virtual Appliance... 6 Backing Up Yur Existing Envirnment n an Security Appliance Befre yu upgrade yur appliance firmware, yu shuld back up yur existing envirnment. This will enable yu t restre it if yu decide t change back fr sme reasn. Yur backup shuld include the settings files, including the per user settings. T back up yur existing envirnment: 1. Lgin t Security interface using the admin accunt 2. In the left navigatin pane under System, chse Backup/Restre. Yu will see the Backup/Restre page: 3. In the Manage Backups sectin, select Settings. 4. Click Take Snapsht Nw t create a snapsht. 5. Click Dwnlad Snapsht t save the snapsht t yur lcal file system 4

5 Release Ntes Upgrading Yur Existing Dell SnicWALL Security Firmware Fllw this prcedure t upgrade yur existing Security firmware n Security appliances. 1. Navigate t the System > Advanced page and scrll dwn t the Uplad Patch sectin. 2. Click Brwse t lcate the Security Firmware file n yur lcal file system, and then click Apply Patch. 3. As part f the upgrade prcess, the Security appliance will rebt. The upgrade prcess culd take between minutes. All the settings and data will be preserved. NOTE fr ES8300 Yur ES8300 is equipped with a battery backup unit n the RAID Cntrller Card, which allws the appliance t write vlatile memry t disk in the event f a lss f pwer. This battery backup unit must be charged fr 24 hurs. When deplying yur ES8300 appliance, fllw the startup and registratin instructins detailed in the Getting Started Guide, and then allw the battery backup in the unit t charge fr 24 hurs. If the battery is nt fully charged, sme RAID features are turned ff, and the appliance perfrmance is temprarily impaired until the battery is fully charged. Upgrading Yur Existing Dell SnicWALL Security Sftware Fllw this prcedure t upgrade yur existing Security installatin. The Full Installer includes installatin f Apache Tmcat, the Java Runtime Envirnment (JRE), Firebird, and MySQL as well as the base Security sftware. 1. On the server running Security, duble-click the Security installatin file. Click Run in the dialg bx. If yu d nt have direct access t the server, use a remte desktp cnnectin t cnnect t the server and run the installatin file n the server. Nte: Administratrs must cpy the installatin file t the Security Server in rder t run the installatin file. Administratrs will nt be able t upgrade thrugh the Web UI n Windws. 2. In the Welcme page f the installatin wizard, click Next. 3. Read the License Agreement and then click Next t accept the agreement. 4. Dell SnicWALL recmmends that Asian language packs be installed, and an alert is displayed if they are missing. T prceed with the Security installatin and install Asian language packs later, click Next. T install Asian language packs prir t prceeding, click Cancel. Nte: Installing Asian language packs is ptinal; hwever, the spam preventin capabilities f Dell SnicWALL Security may be diminished withut them. Asian language packs can be installed befre r after Security Sftware installatin. 5. On the Destinatin Flder page, click Brwse t select an alternate flder, r click Next t accept the default lcatin. Nte: It is imprtant that this flder is nt scanned by an anti-virus engine. 6. On the Chse Data Flder page, click Brwse t select an alternate flder, r click Next t accept the default lcatin. If the data flder is n a different disk drive than the install directry, ensure that it has fast read/write access with less than 10 millisecnd latency. Yu can test latency with the ping cmmand. 7. On the Start Installatin page, click Next. 5

6 Release Ntes 8. If requested, allw the installatin f Tmcat, Firebird, and the Java Runtime Envirnment (J2RE). If Tmcat is installed in this step, it prmpts fr the Apache Tmcat Web server prt number. The default prt is 80. If yu are already running a Web server n prt 80, yu must change the prt setting. Dell SnicWALL recmmends prt Click Next t cntinue. Nte: Yu can change the prt number and cnfigure HTTPS access after installatin by using the Server Cnfiguratin > User View Setup page f the Security appliance. 9. After the installatin finishes, click Finish in the Installatin Cmplete wizard. A brwser windw is displayed with links t the Security user interface and dcumentatin. Installing the Dell SnicWALL Security Virtual Appliance Fr infrmatin abut installing Dell SnicWALL Security as a Virtual Appliance, see the Security Virtual Appliance Getting Started Guide, available at: 6

7 Related Technical Dcumentatin Release Ntes Fr basic and advanced deplyment examples, Dell SnicWALL dcumentatin is available in the Dell SnicWALL Technical Dcumentatin Online Library: Last updated: 5/24/2013 7