Astaro Up2Date Announcements http://up2date.astaro.com/ Notifications, advisories, and prescriptive guidance for Astaro administrators. en Copyright 2009 Fri, 26 Jun 2009 13:50:18 +0100 http://www.sixapart.com/movabletype/?v=3.36 http://blogs.law.harvard.edu/tech/rss As Slowloris HTTP DoS Rises, Astaro is Ready Recently the Slowloris Denial of Service attack has jumped in popularity. This attack is similar to SYN flood, but uses HTTP instead, basically consuming sockets on the Web Server vs. trying to saturate all the bandwidth. This is an interesting attack, particularly because it does not require a lot of bandwidth by the attacker. Indeed it is possible to DoS even large sites simply using a common residential Internet connection, and using Slowloris to eat-up the Web Server's ability to respond to other HTTP requests, by sending partial ones itself and thus holding the sockets open. You can read more about this DoS technique here.

While the approach is not new, the working implementation of it "for the masses" is starting to appear more commonly.

As we have already received dozens of queries about how to stop this attack, we'd like to inform you that Astaro installations with current/updated Intrusion Protection Patterns will be protected against this, so neither admins or their Web Servers need to fear. The ID for this new rule is #1000023, and is located in the HTTP Servers Group under the Apache category. If your ASG installation is showing pattern revision 9857 or better, you are protected.

]]> http://up2date.astaro.com/2009/06/as_slowloris_http_dos_rises_as.html http://up2date.astaro.com/2009/06/as_slowloris_http_dos_rises_as.html Misc Fri, 26 Jun 2009 13:50:18 +0100 AxG Beta 7.460 Released Greetings! We have issued another Beta Version of our not-yet-released 7.500, for those who are testing or wish to test the new features and functionality of our next major Up2Date release. For more information on the 7.500 Beta, please see our initial launch announcement.

For more information on this new Beta version release, please read on.

]]> http://up2date.astaro.com/2009/06/axg_beta_7460_released.html http://up2date.astaro.com/2009/06/axg_beta_7460_released.html Astaro Gateways Thu, 18 Jun 2009 22:24:21 +0100 AxG 7.403 Up2Date Released Up2Date 7.403 has just been published to the Astaro Up2Date infrastructure. This is a stability release which enhances the core and operation of your Astaro product. Please read on for the details around this Up2date package.

]]> http://up2date.astaro.com/2009/06/axg_7403_up2date_released.html http://up2date.astaro.com/2009/06/axg_7403_up2date_released.html Mon, 08 Jun 2009 16:30:21 +0100 ASG Beta 7.500 Launched I am pleased to announce that the Beta for the next big release of Astaro Gateways (7.500) is now available. While this release will be finalized for all versions of AxG, the Beta phase is only for the Astaro Security Gateway. This release includes exiting new things that were posted, submitted, and/or reviewed by you, our partners and end users via our new feature request portal at feature.astaro.com. This version's Beta will last approximately four weeks, with the GA version roadmapped for the beginning of July. Your participation in the Beta is greatly appreciated, as it allows us to tune and strengthen the final version based on your testing and comments. Please read on for more details about the Beta; what it contains, how to get it, and other information!

]]> http://up2date.astaro.com/2009/05/asg_beta_7500_launched.html http://up2date.astaro.com/2009/05/asg_beta_7500_launched.html Astaro Security Gateway V7 Tue, 26 May 2009 15:21:13 +0100 New Astaro Feature Request Site Astaro has long been quite vocal about how our products are developed. We want to build products that solve problems. Products that people want to buy. One of the projects we've been working on is a new, openly visible community where your ideas, feature requests, tweaks, and other changes can be posted, viewed, commented on, and given weight by others. We are pleased to announce that http://feature.astaro.com is now live.

Whether you are an Astaro home user, customer, partner, distributor, or have yet to upgrade to Astaro from another product and improved your company with our solution, we welcome your feedback and ideas!

]]> http://up2date.astaro.com/2009/05/new_astaro_feature_request_sit.html http://up2date.astaro.com/2009/05/new_astaro_feature_request_sit.html Misc Fri, 08 May 2009 15:32:01 +0100 Up2date 7.402 Launched Hello! Astaro has released Up2Date 7.402, which is a stability release. This update adds support for newer Intel ethernet driver versions, adds to the amount of multipath rules that can be created, and optimizes some database tasks further. In addition, this release fixes some bugs and increases ACC integration/performance.

]]> http://up2date.astaro.com/2009/04/up2date_7402_launched.html http://up2date.astaro.com/2009/04/up2date_7402_launched.html Astaro Gateways Thu, 23 Apr 2009 03:07:15 +0100 Astaro Patterns: Controlling Conficker Worm With the recent attention in the media to the Conficker Worm, many customers have general questions regarding this threat. For the short version, Astaro installations with HTTP Virus protection via the Web Security package have been protected against the HTTP download distribution (such as variant C) of this worm since January.

However, with this Worm's ability to spread multiple ways, such as the TCP and UDP transfer of the payload, Virus scanning at the gateway should be bolstered by Intrusion Protection to offer a more complete security defense against Conficker. Read on for details as to how Astaro can aid you in fighting this worm!

]]> http://up2date.astaro.com/2009/04/astaro_patterns_controlling_co.html http://up2date.astaro.com/2009/04/astaro_patterns_controlling_co.html Astaro Gateways Mon, 06 Apr 2009 15:39:46 +0100 Astaro Secure Client V9.1 released This new release adds a budget manager, multi-certificate configuration, additional GUI languages, WISPr support and many additional minor enhancements.

]]> http://up2date.astaro.com/2009/03/astaro_secure_client_v91_relea.html http://up2date.astaro.com/2009/03/astaro_secure_client_v91_relea.html Thu, 19 Mar 2009 12:00:05 +0100 Astaro Comand Center 2.0 Released We are pleased to announce the General Availability of the Astaro Command Center Version 2.0. This new version introduces the major new ability to configure and manage IPSEC tunnels entirely within ACC itself. By providing a centralized location from which to work with and deploy VPN tunnels between Astaro installations, administrators can save management time and automate many of the tasks involved in successfully linking sites together with encrypted links.

The Astaro Command Center is an entirely free product that allows you to centrally monitor and maintain multiple Astaro installations & devices. If you currently are responsible for more than one Astaro Gateway product, ACC is designed for you! Read on for more information.

]]> http://up2date.astaro.com/2009/03/astaro_comand_center_20_releas.html http://up2date.astaro.com/2009/03/astaro_comand_center_20_releas.html Astaro Command Center Tue, 17 Mar 2009 15:25:04 +0100 7.400 Up2Date Re-Released The official GA Up2Date Package for 7.400 has now been made available. We'd like to thank you for your patience as we ensured the quality of the Up2Date experience for all our customers. We know many of you are eagerly waiting for the new features in this version! Read on for the relevant details.

]]> http://up2date.astaro.com/2009/03/7400_up2date_relaunched.html http://up2date.astaro.com/2009/03/7400_up2date_relaunched.html Astaro Gateways Thu, 12 Mar 2009 15:32:45 +0100 ACC BETA Up2date 1.980 Released We just made available a new ACC BETA release 1.980 based on our Beta tester feedback and our own testing so far during this beta. Read on for a short announcement.

This release keeps us on track for ACC 2.000 being generally available during the 3rd week of March if the schedule proceeds as planned. You can see our previous announcement for all the BETA details.

This Up2Date 1.980 is a bug fix and progression release based on the feedback of our testing community which enhances the stability and performance of the Astaro Command Center BETA.

]]> http://up2date.astaro.com/2009/03/acc_beta_up2date_1980_released.html http://up2date.astaro.com/2009/03/acc_beta_up2date_1980_released.html Astaro Command Center Wed, 11 Mar 2009 18:41:56 +0100 Up2Date 7.400 Status Report Thank you for your patience regarding our 7.400 Up2Date release.

During the 3-day window where the Up2Date was available we had a small number of cases where the upgrade process took longer than was acceptable. To spare other users from experiencing this issue, we decided to withdraw the Up2Date. We have identified the cause of the problem and, assuming testing goes according to expectations, we'll re-release 7.400 in the course of next week.

We will keep you informed via this blog with any other news or developments.

]]> http://up2date.astaro.com/2009/03/up2date_7400_status_report.html http://up2date.astaro.com/2009/03/up2date_7400_status_report.html Astaro Gateways Thu, 05 Mar 2009 17:08:27 +0100 Up2Date ASG 7.400 Delayed/Re-Issue We have replaced any downloaded 7.400's (not yet installed) with a "placeholder" Up2Date which has new text/tooltip indicating it is not a valid package and cannot be installed. We will reissue 7.400 again shortly, with 2 issues resolved regarding the installation process, at which point the "placeholder" up2date will be replaced with the valid 7.400 again. If you need more information which up2date your unit has downloaded, please check the tooltip of the 7.400 Up2date Package. I've posted a screenshot of what it looks like here.

If you have already downloaded and successfully installed 7.400, there is no need for any action/re-install on your part.

]]> http://up2date.astaro.com/2009/03/up2date_asg_7400_delayed.html http://up2date.astaro.com/2009/03/up2date_asg_7400_delayed.html Astaro Security Gateway V7 Sun, 01 Mar 2009 20:13:25 +0100 Known Issue - Initial bootup after 7.400 installation may take longer than expected Dear Customers and Partners,

after the release of 7.400 we have receive lots of positive feedback from customers who love the new functionality.

Besides all the good news our support teams have identified a potential issue on bigger installations.

After the successful installation of 7.400, the system needs to upgrade the reporting database during the next boot up. This process can take from few minutes up to two hours, during this process the system is not fully operational.

]]> http://up2date.astaro.com/2009/02/known_issue_bootup_after_7400.html http://up2date.astaro.com/2009/02/known_issue_bootup_after_7400.html Astaro Security Gateway V7 Fri, 27 Feb 2009 13:59:51 +0100 Announcing 7.400 General Availability Release! After a hugely successful BETA program spanning several months and including thousands of comments and feedback, Astaro is proud to today release our Version 7.400, making it Generally Available for all Astaro Security, Mail, and Web Gateway Products. This release brings new features which will enhance the functionality and capabilities of your AxG installation. Most notably are the introduction of full WAN Link Balancing, HTTPS Filtering, Site-to-Site SSL VPN, and Cisco IPSec Client Support, along with dozens of other exciting new features.

*A special thanks to our many BETA testers for your feedback! It allows us to deliver you the best possible product. We will shortly announce the winners and resulting BETA program giveways.

For the details of this release, along with links to download and documentation, please read further...

]]> http://up2date.astaro.com/2009/02/version_7400_ga_release.html http://up2date.astaro.com/2009/02/version_7400_ga_release.html Astaro Security Gateway V7 Thu, 26 Feb 2009 15:30:26 +0100