Release Dates. Release Information. Release Date: Release Notes. 25 th Nov, 2014

Transcription

1 Release Notes Release Date: 25 th Nov, 2014 Release Dates SOHO Appliance C0101B NG11VO 25th Nov, 2014 HOME Appliance B0101B NG11VH 25th Nov, 2014 Release Information Release Type: General Availability Download Link: Applicable Versions: SOHO Appliance C NG11VO C NG11VO Home Appliance B NG11VH Document version /11/2014 1

2 Revision History: Sr. No Old Revision Number New Revision Number Reference Section Revision Details Document version /11/2014 2

3 Contents Introduction... 4 Features NGSense TR-069 Support Admin Activity logs for Auditing purposes Road Warrior VPN (Applicable to SOHO appliances only) User-MAC Address Binding Vendor Company-MAC Address Binding Default Internet Controls Increased Limit of Whitelisted Devices Increased Limit of Number of Firewall Rules Increased Limit of Number of IPSec VPN Tunnels and Preshared Key Characters (Applicable to SOHO appliances only) Password Change Disallow Provision for non-administrator users G Pin Mode Support xdsl Diagnostics Support DNS Servers Support Enhanced Language Support for Admin User Interface Port Forwarding Enhancement NCMS Support Static DHCP Lease/DHCP Reservations G - LTE Internet Connectivity and Diagnostics Support Support of Remote NDIS based 3G/4G USB Modems Enhanced Website Exceptions List Support of Multiple Remote Subnets for an IPSec VPN Tunnel IGMP Relay and Snooping Support Fullcone NAT Support Disable NAT MAC Cloning Support Safe Search Support Connected Users Page Enhancements GUI Enhancements Miscellaneous Bugs Solved Known behavior General Information Document version /11/2014 3

4 Introduction This document contains the release notes for Cyberoam NetGenie SOHO (C0101B NG11VO) and HOME (B0101B NG11VH) appliances. This release comes with several new features to improve quality, reliability and performance. Features 1. NGSense With this version NetGenie has introduced NGSense for NetGenie VDSL appliances. NGSense is a DNS based Web and Application filtering mechanism which enables URL filtering for encrypted-traffic and non-web traffic using DNS interception. NGSense offers following benefits to the administrator: Removes overheads of protocol based Application Filtering Removes need of updating Web and Application Filtering signatures Removes limitation on number of filtered applications By default NGSense is enabled for all new users but the administrator can change this setting from Internet Controls > User > Website Categories List. Please note that if NGSense is disabled then NetGenie will perform HTTP and signature based scanning only, which means HTTPS filtering will not be available. 2. TR-069 Support With this version, NetGenie supports TR-069. TR069 is an application layer protocol for remote management of end-user appliances like routers, modems and VoIP phones. With this release the ISPs can access and manage NetGenie appliances through TR069 along with NCMS. To configure TR069 in NetGenie go to Remote Mgt > TR-069 Client. 3. Admin Activity logs for Auditing purposes From this version onwards, an Administrator can view logs for various admin activities. This feature helps the Administrator in auditing purposes, by providing consolidated logs of key admin activities performed via the Web User Interface. Following are some of the key admin activities for which logs are displayed on the Admin Activity page: Wireless is enabled or disabled A Firewall rule is created or deleted Any Interface is created or updated Any device is whitelisted Document version /11/2014 4

5 Signatures upgraded on an appliance Any user is created, updated, deactivated or deleted Any VPN tunnel is created, establised, disconnected or deleted To view the Admin Activity logs, go to Logs and Reports > Admin Activity. 4. Road Warrior VPN (Applicable to SOHO appliances only) With this version, NetGenie supports configuration of Road Warrior VPN in NetGenie. Road Warriors are the people who travel most of the time and often require connecting to office network. This feature enables travelling employees of an organization connecting to organization s network through VPN. Prior to this version, the administrator was allowed to establish site-to-site VPN connection to ensure remote and branch office connectivity. Please note that the Cyberoam VPN client can be used to establish a road warrior VPN connection. To configure Road Warrior VPN in NetGenie go to Network Settings > VPN IPSec. 5. User-MAC Address Binding With this version NetGenie allows the administrator to bind User with Device MAC Address (es). User-MAC address binding enables transparent Internet browsing for the users from different devices without forcing them to login from the User Login page. The usefulness of this feature can be explained with the help of following example: To run Internet Explorer on Xbox the user has to connect to Xbox Live and for that the user has to authenticate through NetGenie, but in absence of Internet connectivity the authentication page will not be displayed and hence the user will not be able to connect to Xbox Live. User-MAC Address binding resolves this deadlock by allowing the user to connect to Internet transparently. The administrator just needs to bind the User and MAC Address of the device (Laptop, ipad, Smart Phone) and then the user can connect to internet using that device without authenticating to NetGenie. This feature removes need of authentication page without whitelisting the device and hence all the user policies remain applicable to the User. To bind the User with Device MAC address, go to Internet Controls > Device Whitelist. Document version /11/2014 5

6 6. Vendor Company-MAC Address Binding With this version NetGenie offers mapping of connected devices with the vendor company name; given that the Internet connectivity is available. For example if you are connected to NetGenie with an ipad then the name of the device vendor i.e. Apple will be displayed under Description field. This feature maps MAC address of the connected devices to vendor company name. It gives increased level of granular control over Internet controls. To view the details of vendor, go to Internet Controls > Device Whitelist. 7. Default Internet Controls With this version NetGenie has introduced concept of Default Internet Controls for those devices which are not part of any defined Internet controls such as Guest SSID-User Binding, User-MAC Binding and Device Whitelisting. In this feature, NetGenie considers * or 00:00:00:00:00:00 (or ) as Default MAC address and the user can either whitelist the MAC address or bind user with it. Any device which does not fall under any specific Internet control will be part of the default Internet controls. To define Default Internet Controls in NetGenie, go to Internet Controls > Device Whitelist. 8. Increased Limit of Whitelisted Devices With this version, number of allowed whitelisted devices in NetGenie has been increased to 40 (Forty). Prior to this version, the administrator was allowed to whitelist maximum of 10 (Ten) devices. To whitelist a device like smart phones, smart TVs, PDAs etc. go to Internet Controls > Device Whitelist. 9. Increased Limit of Number of Firewall Rules With this version, number of Firewall rules which can be created on NetGenie has been increased to 25 (Twenty Five) for SOHO and 10 (Ten) for HOME. Prior to this version, the limit was 10 and 5 respectively. To create a firewall rule, go to Security > Firewall. 10. Increased Limit of Number of IPSec VPN Tunnels and Preshared Key Characters (Applicable to SOHO appliances only) With this version, NetGenie firmware has been optimized to support upto 6 (Six) IPSec VPN tunnels. Also, the number of characters allowed in preshared key has been increased to 30 (Thirty). Prior to this version, the limit was 3 and15 respectively. To create a VPN tunnel, go to Network Settings > VPN IPSec. Document version /11/2014 6

7 11. Password Change Disallow Provision for non-administrator users With this version NetGenie allows administrator to configure whether a non-administrator user is allowed to change the password or not. This feature is helpful in the scenarios where multiple users use single password to login. In that case change in password by one user can lead to inconvenience of others. To disallow a non-administrator user to change the password, go to Internet Controls > Add User and uncheck the option Allow user to change password. By default this option is enabled G Pin Mode Support With this version, NetGenie supports Internet access using PIN protected USB modems, which means now the user can go to Internet by providing PIN of attached USB modem. Once given, NetGenie stores the PIN of USB modem for future use. The user does not need to provide password PIN every time. To configure Internet access through USB modem, go to Network Settings > Internet > 3G. 13. xdsl Diagnostics Support With this version, NetGenie supports xdsl diagnostics feature to test internet Connectivity like connection to server, authentication, link status etc. To use xdsl diagnostics functionality, go to Network Settings > Diagnostics DNS Servers Support With this release, NetGenie supports configuration of static DNS server(s) to lease them to LAN devices. The maximum number of such DNS servers which can be configured is 3 (three). With this configuration in place, devices will get IP address of configured DNS server(s) as primary DNS server and NetGenie's IP address as secondary DNS server. Please note that by default, NetGenie acts as a DNS server for LAN devices. To configure comma separated DNS servers for LAN devices, go to Network Settings > Local Network. 15. Enhanced Language Support for Admin User Interface With this release, NetGenie supports display of Admin User Interface in Dutch language. Please note that NetGenie Admin User Interface already supports following languages: English French Spanish Portuguese Italian Document version /11/2014 7

8 Turkish German Arabic Chinese Simplified Czech 16. Port Forwarding Enhancement With this release, NetGenie s Admin User Interface has been revamped for Port Forwarding functionality. As the part of this revamp, Apply button has been removed and each Port Forwarding grid has given option to delete individual Port Forwarding rule. To view the revamped page go to Security > Port Forwarding. 17. NCMS Support With this version, the administrator can manage NetGenie appliance(s) using a cloud based management service offered by Cyberoam. NCMS (NetGenie on-cloud Management Service) is a cloud based appliance management service for NetGenie product line. As an NCMS subscriber you can view all registered NetGenie appliance(s) register new NetGenie appliance(s) access and manage all registered NetGenie appliance(s) remotely monitor Web / Application activity / current activity for registered NetGenie appliance(s). view various logs and reports for Web and Application usage Keep a tab on create and manage Watch-lists to control inappropriate Internet behavior of your kids or employees with Internet Watch List and many more. To enable NCMS, 1. Logon to NetGenie appliance with administrator credentials and go to Remote Mgt tab. 2. Click Enable and Apply Changes under NCMS. You can also enable NCMS at the time of registration of your NetGenie appliance at the NCMS portal. 18. Static DHCP Lease/DHCP Reservations With this version, the Administrator can configure NetGenie DHCP Server to reserve one or more IP Address(es) for certain dedicated DHCP clients. This ensures that the same IP Address is leased to certain mission-critical computers, whenever they make a DHCP request to NetGenie. To make DHCP Reservations, the Client MAC Address needs to be known. Document version /11/2014 8

9 To make DHCP reservation for a client, go to Network Settings > Local Network G - LTE Internet Connectivity and Diagnostics Support With this version, NetGenie supports Internet connectivity through 4G-LTE modems. 4G is the fourth generation of mobile telecommunications technology, succeeding 3G. A 4G System provides wireless Internet access to the user through mobile phone towers. To configure 4G-LTE settings in NetGenie, go to Network Settings > Internet. To check the status of the configured 4G Internet link go to Network Settings > Diagnostics page. 20. Support of Remote NDIS based 3G/4G USB Modems With this version, NetGenie extends its support for compatible 3G/4G USB Modems to include the Remote NDIS based 3G/4G USB Modems. For complete list of compatible 3G/4G USB Modems, click here. 21. Enhanced Website Exceptions List With this release, an administrator can add a maximum of 1000 (thousand) websites under Website Exceptions page under Internet Controls. Website Exceptions page consists of two lists, Block Websites and Allow Websites. Prior to this version, the administrator was allowed to add a maximum of 100 (Hundred) websites under the list of Block Websites and Allow Websites. The Website Exceptions page now allows you to add multiple keywords in the Block/Allow Websites list. The user can use the Browser Search feature to locate a Website in the Allow/ Block list for which separate Apply buttons are provided. Go to Internet Controls > Website Exceptions page to configure global list of allowed/blocked websites. 22. Support of Multiple Remote Subnets for an IPSec VPN Tunnel With this release, NetGenie allows the Administrator to configure multiple Remote Subnets (at most three) for an IPSec VPN tunnel. Prior to this version, the Administrator was allowed to configure only One (1) Remote Subnet per IPSec VPN tunnel. This feature is essential when a tunnel is established between a Branch Office and Head office of a Company and the Head office is segregated into multiple subnets. Note that NetGenie allows addition of a maximum of 6 (six) IPSec VPN Tunnels and addition of each Remote Subnet in a particular VPN tunnel will be calculated as an individual tunnel. For example, while configuring the first VPN tunnel, if you add 2 (two) Remote Subnets for the tunnel, the total number of IPSec VPN tunnels will become 2 (two). Go to Network Settings > VPN IPSec page to add/remove Remote Subnet(s). Document version /11/2014 9

10 23. IGMP Relay and Snooping Support With this version, NetGenie supports IGMP Relay on its network. The Internet Group Management Protocol (IGMP) is a communications protocol used by hosts and adjacent routers on IP networks to establish multicast group memberships. IGMP is an integral part of IP multicast. IGMP can be used for one-to-many networking applications such as online streaming video and gaming, and allows more efficient use of resources when supporting these types of applications. With IGMP Relay and Snooping support, NetGenie can redirect IP multicast traffic to an underlying network only when one or more host in that network wants to listen to it. The rest of the network is quarantined from this multicast traffic to prevent flooding. With the help of Snooping Support, NetGenie is able to keep track of multicast traffic that is tunneled within the network. To enable IGMP Relay and Snooping Support for your configured Internet connection type, go to Network Settings > Internet and select the checkbox against 'Enable IGMP'. 24. Fullcone NAT Support With this version, NetGenie supports Fullcone NAT functionality. This type of NATing allows a device having a Port and IP (Non-routable/Private) Address to be mapped with the NetGenie Port and Routable IP Address. Once this device-router path is mapped, all internal requests and external responses traverse through this configured path, i.e. the device behind NetGenie can be accessed by an external server, only (and only) through the configured port. Fullcone NAT will only support UDP protocol not TCP. To enable Full Cone NAT on your Network, go to Network Settings > Internet and select the Enable Fullcone NAT option for your configured connection. 25. Disable NAT With this version, NetGenie allows disabling of NAT for the traffic passing through NetGenie. Previously the entire traffic was masqueraded by default. On disabling NAT, your Internet connectivity may go down. Also, the Port forwarding rules do not work when NAT is disabled. By default, NATing is enabled in NetGenie. To disable NAT on NetGenie appliance, go to Network Settings > Internet. 26. MAC Cloning Support With this version, NetGenie supports MAC Address cloning your switch/router connected to it. This is essential as certain ISP s tie the MAC address (attached to the NIC of your switch/router) to their DHCP/PPPoE server for authentication purpose. Thus, Internet connectivity is often lost on change of Router configuration due to MAC Address mismatch. Document version /11/

11 MAC cloning ensures that the MAC Address of the device that authenticates to the DHCP / PPPoE server of the ISP, remains in the same recognizable format and the ISP does not terminate the Internet services when device configurations are altered. To clone the MAC address of your device, go to the NetGenie Advanced Configuration page by accessing this link and enable the MAC address clone option. Note - The mentioned link contains the default IP Address assigned to your device. Modify the IP Address in the link if case you have changed the default IP Address. 27. Safe Search Support With this version, NetGenie supports Safe Search, a feature that allows you to enforce safe searching into your search engines (Google and YouTube), thus prohibiting users to search for websites containing explicit adult content. To enable Safe Search for a user, go to Add User / Select any User > Website Categories List and enable the checkbox against Apply Safe Search. 28. Connected Users Page Enhancements With this version, the Logs and Reports > Connected Users page comes with the following enhancements. A Logout button is added next to each Live User under 'Logged in Users' sub-section of Live Users page. This allows the Administrator to disconnect/logout a Live User that is displayed in this list. Columns Last Accessed and Bytes Transferred are added which diplays the last accessed timestamp and the amount of data transferred (in Bytes) for the respective Username. 29. GUI Enhancements With this version, NetGenie comes with the following GUI enhancements. 'Subscription Status' details are displayed on the System > Overview page. Appliance Registration link Register Now is added at the end of the 'Network Configuration Wizard'. Splash Page is no longer displayed at the time of login. The terms Port Forwarding Service and Routing Service are renamed to Port Forwarding Rule and Routing Rule. This is reflected on the Security > Port Forwarding and Network Settings > Routing pages respectively. The Enable Remote Logging option on the Remote Mgt > Configuration page is enabled and the default logging option is selected as NCMS. Miscellaneous NetGenie has the following miscellaneous changes: Auto Refresh interval on the USB Modem configuration page of Network Settings > Internet is increased to Ten (10) seconds for ease of configuration. Updated the Country list on the USB modem configuration page of Network Settings > Internet to include the entire list of countries that fall under the United Document version /11/

12 Kingdom. Internet Controls option for a Whitelisted Device on the Internet Controls > Device Whitelist page can now be edited to attach a user to a whitelisted device. Description for a Whitelisted Device on the Internet Controls > Device Whitelist page can now be edited. The DHCP Clients Tab on Live Users page of Logs and Reports > Connected Users is enhanced to enlist only those users that have a non zero expiry time for their leased IP Address. Bugs Solved Bug ID 3609 Description 3G Dongle ZTE MF 112 is unable to connect with NetGenie. Bug ID 4248 Description Website Exceptions Logs are not generated due to jason error. Bug ID 3791 Description A 3G USB modem fails to connect to the Internet if the User Name Username field contains more than 32 characters. Bug ID 3396 Description The Network Settings > VPN IPSec page does not display Local Subnet IP Address and the user is unable to create a VPN tunnel. Also, Preshared Key is not displayed when check box against Show Password field is enabled. Bug ID 3309 Description User MAC binding is not available for gaming devices like Xbox and Wii Connect. Bug ID 3159 Description NetGenie drops traffic passing through it, after 10 days of device uptime. Known behavior NetGenie, by default select the highest connection Network speed supported by your wireless dongle. In case you are using a data plan that is lower than the highest device connectivity speed, please configure the suitable Network speed for your device from the Network Settings > Internet page. NetGenie WAN interface does not support Internet connectivity links that transmit data at speeds of 100 Mbps. INET LED remains in steady ON state even when traffic is passing through NetGenie. The checkbox against the Log field is not selected by default, while adding a Firewall Rule. Document version /11/

13 General Information Technical Assistance If you have problems with your system, contact customer support at Please have the following information available prior to contacting support. This helps to ensure that our support staff can best assist you in resolving problems: Appliance Serial number Firmware version Description of the problem, including the situation where the problem occurs and its impact on your operation Detailed steps on the methods you have used to reproduce the problem Document version /11/

14 Important Notice Cyberoam Technologies Pvt. Ltd. has supplied this Information believing it to be accurate and reliable at the time of printing, but is presented without warranty of any kind, expressed or implied. Users must take full responsibility for their application of any products. Cyberoam Technologies Pvt. Ltd. assumes no responsibility for any errors that may appear in this document. Cyberoam Technologies Pvt. Ltd. reserves the right, without notice to make changes in product design or specifications. Information is subject to change without notice. USER S LICENSE Use of this product and document is subject to acceptance of the terms and conditions of NetGenie End User License Agreement (EULA) and Warranty Policy for NetGenie Appliances. You will find the copy of the EULA on and the Warranty Policy for NetGenie Appliances can be found in RESTRICTED RIGHTS Copyright Cyberoam Technologies Private Ltd. All rights reserved. Cyberoam, NetGenie logo are trademark of Cyberoam Technologies Pvt. Ltd. Corporate Headquarters Cyberoam House, Saigulshan Complex, Opp. Sanskruti, Beside White House, Panchwati Cross Road, Ahmedabad , GUJARAT, INDIA. Tel: Fax: Web site: Document version /11/