Release Notes CSG 7.0.6

Collax Security Gateway
31.05.2017

Installation Notes

Update Instructions

To install this update please follow the following steps:

Procedure

  1. It is highly recommended to backup of all server data with the Collax backup system before proceeding. Check that the backup was successful before proceeding with the update (this can be done within the backup information email).
  2. In the administration interface go to System → System Operation → Software → System Update and press Get Package List. This will download the listed update packages. If successful the message Done! will be displayed on the screen.
  3. Click Get Packages to download the update packages.
  4. Click Install. This installs the update. The end of this process is indicated by the message Done!.
  5. A new kernel will now be installed. The system will reboot automatically after installing the update. An appropriate note will be shown if the update process is completed.

New in this Version

GUI: Extended System information

The dialog “Hardware -> System Devices and Components” display the system’s hardware resources. With this release the view is extended and additional information is beeing displayed. Virtual machines running on Collax V-Server hardware are displayed with the Name of the vm and on which Node (name and productversion) it is running. Servers from other vendors show additional dmi-data (desktop management interface) like manufacturer, product name, serial number and more information about the BIOS and the system.

GUI: Clone objects

With this release a framework to clone objects is introduced. It enables the user to generate a clone method. This method copies the given object. Thereby the user can clone external mailboxes or header filters and a bunch of other objects. You can use the right mouse and the action “clone” to make a copy of the object.

GUI: Clone objects

With this release a framework to clone objects is introduced. It enables the user to generate a clone method. This method copies the given object. Thereby the user can clone external mailboxes or header filters and a bunch of other objects. You can use the right mouse and the action “clone” to make a copy of the object.

GUI: Improved reason info in mail hold queue

E-Mail identified by a filter (virus filter, etc.) is put on hold. Such e-mail will not be delivered. The e-mail will be in a state of quarantine, and the administrator must decide what to do with them. He can release or delete the e-mail. With this release, we improved the reason info in mail hold queue.

Misc: Important System Components

This update will also install/update the following important system components:

  • kernel 4.4.68
  • mariadb 10.0.30
  • strongswan 5.5.2
  • squid 3.5.25
  • apache 2.2.32
  • mongodb 3.4.4
  • postfix 3.1.4

Hardware: Display support for ICO Network Appliances

This update implements support for controlling the display of the ICO Network Appliances. The dispaly is controlled using the serial port and must be configured under “Menu -> Hardware -> System Devices and Components”.

Hardware: Open VM Tools für Betrieb auf VMWare ESXi

The Open-vm-tools package open-vm-tools provides a set of services and modules that enable several features in VMware products for better management of, and seamless user interactions with, guests. From this update the package is available within the Collax update repository and can be installed with apt-get.

Issues Fixed in this Version

GUI: Configuration Report

Collax Server offer the generation of a report about the current server configuration file. The report is generated in the selected language and made available as PDF document.

The generated report contains various details about the server configuration. For instance, the report shows the relation between permissions and the individual elements of permission groups.

Within this release the report is beeing extended and customized to fit the new C-Server release.

E-Mail: Train Spam Filter

Because of an error it was not possible to learn from spam/ham folders with SSL. The e-mail remained in the spam/ham folders. With this update learning works solid.

Net: Wrong Sender IP Address

The Sender-IP can be configured explicitely for routes. If there has been more than one route configured on a device used for connections, this could result in the wrong Sender-IP being used for said connections. This is going to be fixed with this update.

Certificates: Display new certificates

Under “Usage Policy -> Certificates -> X.509 Certificates” you can either generate new certificates or import certificates from the local host via upload. Due to an error in a method for merging arrays, new certificates didn’t show up in the user interface. This issue has been corrected with this update.

Misc: system message notification

Important system messages will be sent to the system administrator. The system message of the logfile rotation “gzip: stdin: file size changed while zipping” occured sometimes and worried the system administrator. We fixed the message using a delaycompress option for the logfile rotation process.