Upgrades

Release notice for Ingate Firewall® 5.0.5 and Ingate SIParator® 5.0.5

The new version can be found here

Release notes for Ingate Firewall(R) 5.0.5 and Ingate SIParator(R) 5.0.5

Release name: Ingate Firewall(R) 5.0.5
              Ingate SIParator(R) 5.0.5

Release date: February 12, 2015

The new version and User Manuals can be found at:
http://www.ingate.com/Upgrades.php


This is a replacement of 5.0.4 to allow larger future upgrades. Compared with 5.0.3, this is a minor release with stability and security improvements.
Users of 5.0.4 MUST upgrade to this 5.0.5 to allow future upgrades!
We recommend everybody using earlier versions to upgrade.

(No release of the Ingate software contains the version of OpenSSL that is
 vulnerable to the widely reported Heartbleed bug.)


* General changes *****************************************************

*** Prepared for future larger size upgrades. The below notes are the 
    same as for 5.0.4, that this version replaces.

*** Updated OpenSSL.

*** Disable SSLv3 for HTTPS configuration to improve security.
    Only TLS1.0/1.1/1.2 are now supported.
    [Tracking ID: 5153]

*** Disable SSLv3 for decryption relays.
    There are now two relay decryption methods:
    TLSv1.x decryption (default)
    TLSv1.x/SSLv3.0 decryption. Users can switch back to this older
    less secure behavior by using TLSv1.x/SSLv3.0.
    [Tracking ID: 5153]

*** Updated timezone database.


* SIP related issues **************************************************

*** Add support for Generic Header Manipulation (GHM) of responses.
    Same as GHM for requests but prefix the header with
    an exclamation mark '!'.
    [Tracking ID: 4617]

*** Add support for enhanced variable substitution
    Now supports conditions and regular expressions.
    [Tracking ID: 4928]

*** Allow 5 emergency numbers and show an error if more are entered.
    [Tracking ID: 5103]

*** Fixed issue with an ever growing registration database on
    machines with heavy registration usage.
    [Tracking ID: 5117]

*** Add support for using Any TLS1.x without SSLv3 for
    SIP signaling encryption.
    Currently TLSv1.0/1.1/1.2 are supported.
    [Tracking ID: 5158]

*** Fixed resource limit issue when using many IP aliases and
    additional SIP ports.
    [Tracking ID: 5160]

*** Fixed issue when SIP blacklist interval is zero (0).
    This value is used for both blacklist and monitoring.
    If the interval is set to zero neither blacklisting nor monitoring
    will be done.
    [Tracking ID: 5148]

* Other issues *******************************************************

*** Fixed issue when resolving certain domain names in the GUI.
    [Tracking ID: 4866]

*** Fix sporadic lock file issues when applying the configuration.
    [Tracking ID: 5091]

*** Add support for querying the CPU utilization via SNMP.
    OID: 1.3.6.1.4.1.13465.5.10
    [Tracking ID: 5095]

*** Fix sporadic slow page loads.
    Most often seen when accessing by HTTPS.