Product Release Information

Transcription

1 Product Release Information Product: Cyberoam Release Number: build 0 Compatible versions: build 2 Release Date: February 7, 2006 Customer Support: For more information or support, please visit our website or at support@cyberoam.com

2 /02/ Contents Introduction...3 Features...3 Enhancements...5 Bug Fixes...6 How to Report Problems...8

3 /02/ Introduction This document contains the release notes for Cyberoam version build 0. The following sections describe the release in detail and provide other information that supplements the main documentation. This is a maintenance release in response to several bug reports and requirements that improves quality, reliability, and performance by adding few new features with some significant user usability enhancements. Features 1. ARP Flood Protection Cyberoam now protects against one more type of DoS attack - ARP flooding - by dropping invalid requests. In this type of attack, Server receives ARP requests at a very high rate. Because of this, server is overloaded with requests and will not be able to respond to the valid requests. Cyberoam protects by dropping such invalid ARP requests. For the further analysis, Cyberoam also displays number of invalid packets dropped. 2. Supports creation of custom RBL list to detect/filter spam mails With the introduction of this feature, Administrator has flexibility to define and use custom RBL list for spam mail detection along with the default RBL list provided with Cyberoam. 3. Supports multiple spam detection methods Create Anti Spam policy for Sender address or IP address Message subject Message Header Message size Custom RBL list 4. Search option added in Quarantine mails Management Quarantined mails can now be searched based on sender address, recipient address, and message subject within the specified period. This will also reduce the need of locating the particular mail for deletion from multiple pages when too many mails are quarantined. 5. ALL category added in Block File Types With this feature, Cyberoam has added ability to prevent users from sending/receiving messages with any type of file attachment in a single step. This allows filtering of mails with attachments in a single step. 6. Organization wise Mail distribution report Cyberoam now provides full reporting functionality of distributing mails through out the organization including Mails by Sender, Mails by Receiver, Spam by Sender, Spam by Receiver, Virus by Sender, and Virus by Receiver.

4 /02/ Drop action for SMTP mails added in Anti Spam policy Cyberoam has added the ability to drop SPAM mails without sending any notification message to the mail sender. In Reject action, Cyberoam sends notification message to the sender of the each SPAM mail; this will utilize too much of bandwidth if large numbers of mails are detected as SPAM. In case of Drop action, Cyberoam will simply drop the SPAM mails which results in saving of bandwidth. 8. Added Global Spam policy which is by default applicable to all the users and can be customized as per the requirements.

5 /02/ Enhancements 1. In case of ARP flooding, by increasing the system values for ARP entries increased the availability of Network communication. This also reduced the probability of Network Neighbor Overflow error. 2. TCP protocol connection parameters are tuned at Kernel level, for faster and reliable communication. 3. Packet queuing algorithm has been optimized for Strict Bandwidth policy for better performance. The optimized algorithm will ensure delivery of at least one packet per second. 4. Anti Spam scanning rules can be created for IP address group and custom RBL group 5. Anti Virus and Anti Spam logs are available from Telnet Console for troubleshooting and analysis purpose 6. Cyberoam Web Console displays Anti Spam signature database version information and the status of last auto upgrade. 7. Anti Virus and Anti Spam rules can be ordered according to the priority. In case of multiple rules, ordering is important as rules are processed from top downwards. 8. For Virus scanning rule, now it is not compulsory to give recipient address 9. virus scanning rule accepts * as a valid recipient address 10. Internet Access rule can be created for None web category. This category includes all the uncategorized web traffic and offers protection against the sites that are not included in any web category. This will help in blocking all the uncategorized web traffic. 11. In case of POP3 and IMAP, Virus Mail notification text includes Cyberoam Anti Virus. This will help in informing users that the message was filtered by Cyberoam. 12. Report Notification page has a new look. Now it is possible to update the notification frequency and administrator address for all the proactive reports in a single step. 13. Webcat engine is now upgraded automatically twice in a day - 4 AM and 11AM. This will help especially to Educational institutes where Cyberoam is shut down at night. 14. Cyberoam client exe will now support long usernames up to 60 characters 15. Now Report date will display the year of the report also instead of date and month. For example, Jan 16, Jan 17, 2006 instead of Jan 16 Jan To help in debugging categorization and access issues, IP address specific HTTP Surfing logs can be generated from Telnet Console. To view the log for a particular IP address, use the following command: show cache log all byipaddress <ipaddress> For example, show cache log all byipaddress will display cache log for only 17. Set different actions for the SMTP and POP3/IMAP spam mails. For POP3/IMAP spam mails, Accept and Prefix Subject can be defined while for SMTP spam mails, Reject, Drop, Accept, Change Recipient and Prefix Subject action can be defined.

6 /02/ Bug Fixes Module Firewall Details For applying Port forward rule, one additional Accept rule was required Module IDP Details Local traffic was also displayed in the IDP reports on Dashboard ( ) Module Firewall Details Not able to delete firewall rule after changing the rule order Module Anti Virus/Anti Spam Details Cyberoam was not able to apply Anti Virus and Anti Spam rules if log size exceeded 2 GB as system logs generated by IMAP and POP proxy were not rotated regularly. Module Console Details Not able to exit from Bandwidth monitor application Module Cache Details Zero Size Reply or Unable to determine IP Address error was displayed when DNS was not able to resolve the domain name after changing the DNS entries Module Categorization Details Users were not able to access websites after creation or deletion of custom web categories Module Diagnostic Tool (DG) Details DG always displayed gateway status as Critical if Multiple Gateway module was enabled Module Backup / Restore and Multiple Gateway Details Gateway failover rules were not restored properly hence always displayed gateway status displayed as Alive Module Surfing quota policy Details Not able to renew cycle quota for Cyclic surfing quota policy and data transfer policy on year change e.g to 2006 Module User My Account Details When user tried to log on to User My Account site and if LDAP authentication was implemented, authentication was wrongly done using local username and password, instead of LDAP username and password Module Anti Virus / Anti SPAM Details Mail scanning rule order was not maintained after restarting management services Module Cyberoam DHCP Client Details Cyberoam DHCP client was not able to renew the leased IP address as DHCP protocol was not implemented as per the specification Module User My Account Details Help and About Cyberoam options removed from User My Account page Module Internet Access policy Details Wrong access denied message displayed when access to any site was blocked based on file type using Block file type in Internet Access policy. Instead of file type, message displayed internal parameter as shown below:

7 /02/ Dear John, This is a message from the IT Department. The file you are trying to access: {ext} is listed within the category WebBased Current Internet Access Configuration does not allow you to visit sites within this category at this time. Module System Details Permanent routes were not deleted on resetting Cyberoam to factory defaults. Module Mail Services Details Users received quota warning even after the user mail quota limit was increased from Web Console Module User Management Details Not able to create users with username starting with 0 (zero). Due to this, Educational institutes were not able to create users by roll number and/or by batch. Module Anti Virus / Anti SPAM Reports Details Not able to generate and export reports in CSV file for the dates other then current date Module Firewall DoS attacks Details Cyberoam was wrongly detected as an Attacker and was blocked Module Firewall Details Cyberoam wrongly allowed applying SNAT action to the firewall rule for ICMP protocol and all network protocols when port number was specified Module WebCat Details Incorrect status of more than 100 % displayed at the time of WebCat auto-upgrade from Telnet Console Module System Details Incorrect CPU usage graphs displayed for Multiple CPU appliances

8 /02/ How to Report Problems If you have problems with your system, contact customer support using one of the following methods: id: support@cyberoam.com Telephone number : Please have the following information available prior to contacting support. This helps to ensure that our support staff can best assist you in resolving problems: Description of the problem, including the situation where the problem occurs and its impact on your operation Product version, including any patches and other software that might be affecting the problem Detailed steps on the methods you have used to reproduce the problem Any error logs or dumps

9 /02/ IMPORTANT NOTICE Elitecore has supplied this Information believing it to be accurate and reliable at the time of printing, but is presented without warranty of any kind, expressed or implied. Users must take full responsibility for their application of any products. Elitecore assumes no responsibility for any errors that may appear in this document. Elitecore reserves the right, without notice to make changes in product design or specifications. Information is subject to change without notice. SOFTWARE LICENSE The software described in this document is furnished under the terms of Elitecore s software license agreement. Please read these terms and conditions carefully before using the software. By using this software, you agree to be bound by the terms and conditions of this license. If you do not agree with the terms of this license, promptly return the unused software and manual (with proof of payment) to the place of purchase for a full refund. LIMITED WARRANTY Software: Elitecore warrants for a period of ninety (90) days from the date of shipment from Elitecore: (1) the media on which the Software is furnished will be free of defects in materials and workmanship under normal use; and (2) the Software substantially conforms to its published specifications except for the foregoing, the software is provided AS IS. This limited warranty extends only to the customer as the original licenses. Customers exclusive remedy and the entire liability of Elitecore and its suppliers under this warranty will be, at Elitecore or its service center s option, repair, replacement, or refund of the software if reported (or, upon, request, returned) to the party supplying the software to the customer. In no event does Elitecore warrant that the Software is error free, or that the customer will be able to operate the software without problems or interruptions. DISCLAIMER OF WARRANTY Except as specified in this warranty, all expressed or implied conditions, representations, and warranties including, without limitation, any implied warranty or merchantability, fitness for a particular purpose, non-infringement or arising from a course of dealing, usage, or trade practice, and hereby excluded to the extent allowed by applicable law. In no event will Elitecore or its supplier be liable for any lost revenue, profit, or data, or for special, indirect, consequential, incidental, or punitive damages however caused and regardless of the theory of liability arising out of the use of or inability to use the product even if Elitecore or its suppliers have been advised of the possibility of such damages. In the event shall Elitecore s or its supplier s liability to the customer, whether in contract, tort (including negligence) or otherwise, exceed the price paid by the customer. The foregoing limitations shall apply even if the above stated warranty fails of its essential purpose. In no event shall Elitecore or its supplier be liable for any indirect, special, consequential, or incidental damages, including, without limitation, lost profits or loss or damage to data arising out of the use or inability to use this manual, even if Elitecore or its suppliers have been advised of the possibility of such damages. RESTRICTED RIGHTS Copyright 2000 Elitecore Technologies Ltd. All rights reserved. Cyberoam, Cyberoam logo are trademark of Elitecore Technologies Ltd. Information supplies by Elitecore Technologies Ltd. Is believed to be accurate and reliable at the time of printing, but Elitecore Technologies assumes no responsibility for any errors that may appear in this documents. Elitecore Technologies reserves the right, without notice, to make changes in product design or specifications. Information is subject to change without notice Corporate Headquarters Elitecore Technologies Ltd. 904 Silicon Tower, Off. C.G. Road, Ahmedabad , INDIA

10 /02/ Elitecore Technologies Ltd. Corporate Office 904 Silicon Tower, B/h Pariseema Building, Off. C.G. Road, Ahmedabad INDIA Telephone: Fax: Bangalore Office 3 rd floor, 19/1 Infantry Road Cross Behind Medinova Diagnostic Centre Bangalore INDIA Telephone: /81 Fax: Delhi Office U.S.A Office 600 Meadowland Parkway, Suite 270, Secaucus, New Jersey U.S.A. Telephone: Fax: Australia Office 12 Peppercress Place, Unit 33/1 Talavera Road Macquire Business Park North Ryde NSW 2113 Australia Telephone: Fax: Mahatta Tower, B Block Community Centre, Janakpuri, New Delhi INDIA Telephone: /62 Fax: Mumbai Office Office 4, B/65, Stanford Plaza, Off. New Link Road, Andheri (W) Mumbai INDIA Telephone: /380 Fax: