Download Client...1. Introduction...3. Release 4.10 build Bugs Solved...3

Transcription

1 Version: 4.10 build 003 Date: August, 2007 Download Client Operating Systems supported Win 2000, Win XP,Win Server 2003, Win Vista Contents Download Client...1 Introduction...3 Release 4.10 build Release 4.10 build Features Release 4.04 build Release 4.04 build Release 4.04 build Release 4.04 build Release 4.04 build Release 4.03 build Feature Release 4.03 build Feature

2 Release 4.02 build Feature...6 Bug fixes...6 Release 4.01 build Release 4.00 build Bug fixes...6 Release 4.00 build Features Bug fixes...7 General Information...9 Technical Assistance...9 Technical Support Documents...9

3 Introduction This document contains the release notes for Cyberoam IPSec VPN Client version 4.10 build 003. Document includes all the features, improvement, and bug fixes since release 3.12 Release 4.10 build 003 Bug fixes since release The VPN Configuration is correctly kept during an upgrade (Vista only) The command line option of the software are correctly managed (Vista only) Import and export functions open a correct User Folder rather than a "system" folder (Vista only) Release 4.10 build 001 Feature, enhancement, and bug fixes since release Features Cyberoam IPSec VPN Client 4.1 is Vista compatible (32 bits only) A new systray popup window appears when a tunnel is opening or closing. This systray popup window shows the tunnel opening progress, and the warnings on tunnel opening errors A whole VPN Configuration can be added to the current VPN Configuration, via either a drag & drop operation, or the Import File menu within the Configuration Panel A tunnel can be opened and closed through new command lines (option "/open", "/close") A VPN Configuration can be added to the current VPN Configuration through a new command line (option "/add"). In the contextual menu associated with the "Configuration" item of the VPN tree, a menu enables to clear the VPN Configuration Tunnels can be imported and exported separately. This feature enables to configure several tunnels (Phase1/Phase2) in a single VPN Configuration, then to export (and deploy) each tunnel separately to the relevant user or user group. More USB Tokens and Smartcards are supported: Aladdin etoken PRO, Safenet ikey1000, ActivCard, etc... Optional management of ASN1 teletext description of the Certificates subjects The Phase 2 tree icon shows whether the tunnel will open on traffic detection or not. Standard Vista User (non powered) can use Cyberoam IPSec Client. The Hotkeys are modified in Ctrl+Enter (switch back and forth between the Configuration Panel and the Connection Panel), Ctrl+S (Save and Apply) and Ctrl+D (Open the Console Window) The VPN Console is simplified with a unique log level to make easier VPN connection error debugging

4 Script commands on opening/closing tunnels now accept parameters Automatically disable Microsoft IKE and AuthIP IPSec Keying Modules service Redundant Gateway assumes infinite switch between gateway and redundant gateway The license number remains during a software upgrade DNS and WINS server addresses are restored on hibernate The log files use a system hour and date for time stamping IKE "floating point" crashes due to log dump are fixed Crashes on Xauth popup are fixed BSOD with Intel Wireless 3945 chipsets are fixed BSOD with Realtek 8139 chipsets fixed Release 4.04 build 011 Bug fixes since release No crash on X-Auth Popup Release 4.04 build 010 Bug fixes since release During an upgrade, the product version is correctly managed and the VPN Configuration is automatically backuped Release 4.04 build 009 and bug fixes since release Generic SmartCard support Improvment SmartCard ActivCard now supported SmartCard ikey 1000 correctly managed

5 Release 4.04 build 005 and bug fixes since release The hotkeys used by the software are more compliant with the Windows standards: 'Ctrl+S' for save, 'Ctrl+Enter' for toggling between the Configuration Panel and the Connection Panel, and 'Ctrl+D' for the console The system time is used for log files Release 4.04 build 002 since release itoken Pro smartcard supported ikey 1000 smartcard supported Release 4.03 build 101 Feature, enhancement, and bug fixes since release Feature Parameters are allowed in the scripts run when tunnel opens or closes The hotkeys used by the software are more compliant with the Windows standards: 'Ctrl+S' for save, 'Ctrl+Enter' for toggling between the Configuration Panel and the Connection Panel, and 'Ctrl+D' for the console The DNS/WINS addresses are restored on hibernate The License number is correctly backuped and restored during an upgrade Release 4.03 build 100 Feature and since release

6 Feature Gemplus smartcard support available ASN 1 Certificate description The concept of Active/Inactive Phase (which is the same as 'automatically open a tunnel on trafic detection') is shown in the GUI by a new Phase2 icon rather by the old Phase1 'checked' icon ConfigMode traces improvement Release 4.02 build 001 Feature and Bug fixes since release Feature Scripts can be run when a tunnel just opened, before it is closed and after it is closed Bug fixes No IKE crash due to change of IP address The License number is correctly backuped and restored during an upgrade Release 4.01 build 000 since release Fragmented IP packets management Release 4.00 build 007 and bug fixes since release Standard portuguese finalized Bug fixes GUI crashed in some circumstances when closing tunnel

7 Release 4.00 build 006 Features, enhancement, and bug fixes since release 3.12 Features A new Connection Panel makes the GUI even easier for users. Switches between the Configuration Panel and the Connection Panel is easy as the shortcut key "Ctrl+P", but can be easily restricted by IT managers (the users are only allowed to use the Connection Panel, in order to avoid misusing of the software). The Connection Panel shows in realtime a tunnel while it opens. It even identifies the IKE/IPSec steps with a "fragmented" progress bar. Most of all, the Connection Panel implements a popup help for troubles, which dramatically improves the accuracy of diagnostic A tunnel can be opened via a double-click on a VPN configuration (e.g. shortcut icon on the desktop) VPN configuration file drag and drop onto the Configuration Panel or Connection Panel automatically imports the configuration and enables it Scripts or applications can be configured before and after opening or closing a tunnel. The Configuration Panel may be protected with password, to avoid misuse of VPN configuration by end-users IT Managers can pre-configure the access control to the Configuration Panel via a new set of Setup Options Shortcut keys to access main features (Save&Apply, Console, toggle Configuration/Connection Panel) Certificates can be imported from several media: USB Stick, SmartCards, Tokens Import of PKCS#12 Certificates from Configuration Panel. This feature obsoletes the use of the conversion tool from PKCS#12 to PEM format The 'Import Certificates...' window now displays the subjects of the imported Certificates, even if they are on a Token (e.g. Smart Card) Certificate subject is automatically selected for 'Local ID' in Phase 1 Support of Aladdin tokens i.e. new ATR supported The Hybrid-Mode is fully supported (RFC: draft-ietf-ipsec-isakmp-hybrid-auth-05.txt) The Config-Mode is fully supported Better usability in the 'Import certificates...' window Messages are displayed in default language i.e. English, if not available in the language dll, this is especially useful for local version Better management of the Console Window, for background/foreground display More Kaspersky product release supported Bug fixes Correct custom bitmap loaded on light user Interface Retrieving configuration when updating to Custom client version Compatibility of X-Auth parameters with old IPSec VPN Client software release DNS IP server not always removed when closing a tunnel In some conditions, when Phase 2 fails, IKE service crash No answer to an IKE CERT_REQ message in Aggressive and Main modes

8 Management of DPD (retries and crash in some conditions) Improvement of the certificate management during the IKE Service Initialization phase GUI memory leak Crash due to ActiveSync

9 General Information Technical Assistance If you have problems with your system, contact customer support using one of the following methods: id: Telephonic support Asia Pacific, Australia & New Zealand: , USA & Other Countries: /7581, CYBR (toll free) Please have the following information available prior to contacting support. This helps to ensure that our support staff can best assist you in resolving problems: Description of the problem, including the situation where the problem occurs and its impact on your operation Product version, including any patches and other software that might be affecting the problem Detailed steps on the methods you have used to reproduce the problem Any error logs or dumps Technical Support Documents Knowledgebase: Documentation set:

10 Important Notice Elitecore has supplied this Information believing it to be accurate and reliable at the time of printing, but is presented without warranty of any kind, expressed or implied. Users must take full responsibility for their application of any products. Elitecore assumes no responsibility for any errors that may appear in this document. Elitecore reserves the right, without notice to make changes in product design or specifications. Information is subject to change without notice. USER S LICENSE The Appliance described in this document is furnished under the terms of Elitecore s End User license agreement. Please read these terms and conditions carefully before using the Appliance. By using this Appliance, you agree to be bound by the terms and conditions of this license. If you do not agree with the terms of this license, promptly return the unused Appliance and manual (with proof of payment) to the place of purchase for a full refund. LIMITED WARRANTY Software: Elitecore warrants for a period of ninety (90) days from the date of shipment from Elitecore: (1) the media on which the Software is furnished will be free of defects in materials and workmanship under normal use; and (2) the Software substantially conforms to its published specifications except for the foregoing, the software is provided AS IS. This limited warranty extends only to the customer as the original licenses. Customers exclusive remedy and the entire liability of Elitecore and its suppliers under this warranty will be, at Elitecore or its service center s option, repair, replacement, or refund of the software if reported (or, upon, request, returned) to the party supplying the software to the customer. In no event does Elitecore warrant that the Software is error free, or that the customer will be able to operate the software without problems or interruptions. Elitecore hereby declares that the anti virus and anti spam modules are powered by Kaspersky Labs and the performance thereof is under warranty provided by Kaspersky Labs. It is specified that Kaspersky Lab does not warrant that the Software identifies all known viruses, nor that the Software will not occasionally erroneously report a virus in a title not infected by that virus. Hardware: Elitecore warrants that the Hardware portion of the Elitecore Products excluding power supplies, fans and electrical components will be free from material defects in workmanship and materials for a period of One (1) year. Elitecore's sole obligation shall be to repair or replace the defective Hardware at no charge to the original owner. The replacement Hardware need not be new or of an identical make, model or part; Elitecore may, in its discretion, replace the defective Hardware (or any part thereof) with any reconditioned product that Elitecore reasonably determines is substantially equivalent (or superior) in all material respects to the defective Hardware. DISCLAIMER OF WARRANTY Except as specified in this warranty, all expressed or implied conditions, representations, and warranties including, without limitation, any implied warranty or merchantability, fitness for a particular purpose, non-infringement or arising from a course of dealing, usage, or trade practice, and hereby excluded to the extent allowed by applicable law. In no event will Elitecore or its supplier be liable for any lost revenue, profit, or data, or for special, indirect, consequential, incidental, or punitive damages however caused and regardless of the theory of liability arising out of the use of or inability to use the product even if Elitecore or its suppliers have been advised of the possibility of such damages. In the event shall Elitecore s or its supplier s liability to the customer, whether in contract, tort (including negligence) or otherwise, exceed the price paid by the customer. The foregoing limitations shall apply even if the above stated warranty fails of its essential purpose. In no event shall Elitecore or its supplier be liable for any indirect, special, consequential, or incidental damages, including, without limitation, lost profits or loss or damage to data arising out of the use or inability to use this manual, even if Elitecore or its suppliers have been advised of the possibility of such damages. RESTRICTED RIGHTS Copyright 2000 Elitecore Technologies Ltd. All rights reserved. Cyberoam, Cyberoam logo are trademark of Elitecore Technologies Ltd. Information supplies by Elitecore Technologies Ltd. Is believed to be accurate and reliable at the time of printing, but Elitecore Technologies assumes no responsibility for any errors that may appear in this documents. Elitecore Technologies reserves the right, without notice, to make changes in product design or specifications. Information is subject to change without notice CORPORATE HEADQUARTERS Elitecore Technologies Ltd. 904 Silicon Tower, Off. C.G. Road, Ahmedabad , INDIA Phone: Fax: Web site: