SofaWare - News and Updates

We are pleased to announce the release of Embedded NGX 8.0.x under the Early Availability Program.
This release is packed with many new features, including:

* VStream Antispam
* Firewall Monitor
* Enhanced Policy Editors
* Built-in 802.1x and WPA Authenticator
* Built-in RS-232 Terminal Server
* Built-in DNS Server
* BGP Dynamic Routing
* Enhanced SNMP MIB
* New Status Dashboard

And more...

Regards
Sofaware technical support team

Issues resolved

Firewall and Smart Defense
• Resolved issue: In certain cases, the appliance may restart when processing SIP IP
telephony packets.
Vstream Anti-Virus
• Resolved issue: Specific EXE files are scanned slowly.
Management and settings
• Resolved issue: When upgrading from firmware, 7.0 VPN sites and SNMP settings
revert to disabled.
• Resolved issue: A potential security vulnerability corrected in the SNMP server.

You must have a valid software subscription to be eligible to receive the update.

Please click the title for the release notes.

Embedded NGX 7.5 incorporates a host of new and improved features, including:

- Internet Connection Load Balancing
- Advanced Firewall Rules
- Advanced NAT Rules
- Reusable Network Service Objects
- Service-Based Routing
- Web Rules
- Enhanced SIP VoIP Support

You must have a valid software subscription to be eligible to receive the update.

Safe@Office v7.5 User Guide


Secure wireless router Z100G v7.5 User Guide


Check Point Embedded NGX CLI Reference Guide


For more information, view the Embedded NGX 7.5 Early Availability Release Notes
Here


To join the Embedded NGx 7.5 Early Availability program, contact SofaWare support,
with your appliance MAC address. You must have a valid software subscription.

We are pleased to announce the release of Embedded NGX 7.0.48 (GA).

New Features

·New SmartDefense Protection: Checksum VerificationWhen this protection is enabled, SmartDefense will identify and drop IP, TCP, or UDP packets with incorrect checksums.

·New SmartDefense Protection: Urgent Flag Clearing The URG flag is used to indicate that urgent data exists in a TCP stream, and that the data should be delivered with high priority. Since handling of the URG flag is inconsistent between different operating systems, allowing the URG flag may enable an attacker to conceal certain attacks.
By default, SmartDefense automatically clears the URG flag to ensure security. To allow the URG flag, in the SmartDefense tree's TCP > Flags node, set the URG Flag field to Allow. To prevent the URG flag from being used, set the URG Flag field to Clear.

Issues resolved

ADSL

·Resolved issue: In certain rare cases, ADSL appliances may reboot unexpectedly, and may revert to their backup ADSL firmware.

Wireless

·Resolved issue: In certain rare cases, the wireless access point may cease to respond following a wireless configuration change or an appliance reboot.

Firewall and SmartDefense

·Resolved issue: Hotspot authentication does not function as expected for networks with Hide-NAT disabled.

·Resolved issue: OfficeMode VPN clients may be unreachable from certain networks unless the client initiate traffic towards this network.

We are pleased to announce the release of Embedded NGX 7.5.x under the Early Availability Program. This release is packed with many new features, including:
* Internet Connection Load Balancing
* Advanced Firewall Rules
* Advanced NAT Rules
* Reusable Network Service Objects
* Service-Based Routing* Web Rules
And more...
For more information, view the Embedded NGX 7.5.x EA Release Notes
To join the Embedded NGx 7.5.x Early Availability program, contact SofaWare support, with your appliance MAC address. You must have a valid software subscription.

We are pleased to announce the release of Embedded NGX 7.0.45 (GA).

New Features

• Support Added for EAP-FAST user authentication over RADIUS
• Support Added for disabling the WAN hide NAT when using the ADSL port as the WAN connection.
• A new CLI command was added in order to configure a delay from the moment the primary Internet connection disconnects until the secondary dial-up connection attempts to connect. The command syntax is: “set net wan demand-connect delay ”

Issues resolved

Firewall and SmartDefense

• Resolved issue: A compatibility issue between ZoneAlarm Security Suite 3rd party cookie protection and Embedded NGX diagnostics tools.
• Resolved issue: Remote desktop feature does not work when the appliance is behind a NAT device.
• Resolved issue: Cross site request forgery may be possible when browsing https://my.firewall and a malicious site simultaneously within a single browser.
  
  

VPN

• Resolved issue: SecuRemote / SecureClient connecting to the appliance VPN server fails to connect if the site name in the client side includes a space character.
• Resolved issue: Tunnel test packets are sent from the appliance LAN IP address, even if this address is not included in the encryption domain of the appliance.

GUI

• Resolved issue: "Unknown Sites" checkbox in the URL filtering categories page is not changeable using the GUI.