Upgrades

Release notice for Ingate Firewall® 5.0.8 and Ingate SIParator® 5.0.8

The new version can be found here

Release notes for Ingate Firewall(R) 5.0.8 and Ingate SIParator(R) 5.0.8

Release name: Ingate Firewall(R) 5.0.8
              Ingate SIParator(R) 5.0.8

Release date: January 27, 2016

The new version and User Manuals can be found at:
http://www.ingate.com/Upgrades.php

This is a minor release with stability, security and some functional improvements.
It replaces 5.0.7 that displayed wrong number of RUS licenses and adds some more
improvements listed in the release notes.
We recommend everybody to upgrade. Note that versions older than 5.0.5 cannot
be upgraded to 5.0.8. Users of 5.0.1, 5.0.2, 5.0.3 and 5.0.4 MUST first upgrade to 5.0.5.

When upgrading to 5.0.8 the following models will be given an additional
short name and increased (or same) recommended maximum sessions
(visible on the About page in the admin GUI).

Firewall 1210 / Ingate SIParator 21: S21, max 400 sessions  
Firewall 1510 / Ingate SIParator 51: S51, max 1000 sessions  
Firewall 1560 / Ingate SIParator 56: S51, max 1000 sessions  
Firewall 1660 / Ingate SIParator 66: S51, max 1000 sessions  
Firewall 1520 / Ingate SIParator 52: S52, max 2000 sessions  
Firewall 1570 / Ingate SIParator 57: S52, max 2000 sessions  
Firewall 1670 / Ingate SIParator 67: S52, max 2000 sessions
Firewall 1950 / Ingate SIParator 95: S95, max 4000 sessions
Firewall 1960 / Ingate SIParator 96: S95, max 4000 sessions
Firewall 1970 / Ingate SIParator 97: S97, max 8000 sessions
Firewall 1980 / Ingate SIParator 98: S98, max 20000 sessions

And the Software Firewall/SIParator XXs will all be
Software SIParator/Firewall, max 2000 sessions. 

Additional Concurrent Calls SIP Trunk Session licenses (CCS)
can be purchased via sales. A CC Sessions license can be applied
to an existing or one new SIP trunk group without additional
Trunk Group licenses as before.

As from the 5.0.6 release, licenses for SIP Remote User Sessions (RUS),
can be purchased per number of users
(rather than as a Remote SIP Connectivity Module license)
and the same applies to SIP Registrar User licenses (SRU)
that also is purchased per number of users.

5.0.6 introduced a default IP address 192.168.1.1/24
on eth0 before the unit is configured. In this default state, the unit can
be reached at this IP address or still be configured via "magic ping"
as before. (Further below.)


* General changes *****************************************************

*** Updated Linux Kernel.

*** Updated OpenSSL.

*** Updated ntp.


* SIP related issues **************************************************

*** Occasional lock-ups when using media encryption removed.
    [Tracking ID: 5356]

*** B2BUA now only uses configured crypto suites.
    [Tracking ID: 5361]

*** Do not add a Path header for REGISTERs without Contact.
    [Tracking ID: 5229]

*** Improved SIP logging:
    Showing also at which local IP address the SIP message was
    sent or received (thus some log messages clarifying how transceived).
    [Tracking ID: 5231, 5282, 5334]

*** Limit Max-Forwards to 255.
    [Tracking ID: 5259]

*** B2BUA: Support BYE in early dialogs.
    [Tracking ID: 5304]

*** B2BUA: Fix call replacement during pending re-INVITE.
    [Tracking ID: 5332]

*** Media Encryption: Old key was used in two way hold scenario.

*** Allow ixnc (source class) to have an ip address.
    Now possible to write ;ixnc=10.20.30.40
    [Tracking ID: 5087]

*** Allow variable substitution before ? on the SIP Trunk page.
    It is now possible to expand strings like $(from.user)
    in the following SIP Trunk page columns:
    Forward To
    Display Name
    User Name


* Software SIParator/Firewall *****************************************

*** Show MAC in Network GUI on Software Ingates.
    [Tracking ID: 5303]

*** Inhibit captured cursor from aborting the installer.
    [Tracking ID: 5338]


* Other issues ********************************************************

*** Fix admin password synchronization in failover pair.
    User was required to set an admin password after failover.

*** Escape the output of two GUI input fields.
    Prevents Reflected (non-persistent) Cross-Site Scripting.
    [Tracking ID: 5283]

*** QoS: TOS and DSCP bit modification in admin GUI improved
    by preventing users from selecting a class under
    Quality of Service > TOS Modification
    that has TOS or DSCP bits defined under
    Quality of Service > QoS Classes.
    To e.g. change SIP Signaling DSCP bits, then define a
    (new) SIP: Signaling class, having no DSCP defined and then
    modify that new class by entering the wanted DSCP setting under
    Quality of Service > TOS Modification.
    [Tracking ID: 5300]

*** Mitigate corrupt support reports.
    [Tracking ID: 5333]

*** Check that PBX transport is set when port is set on SIP Trunk page.
    Required for PBX port to be used.
    [Tracking ID: 5336]

*** Added example shell script for backing up configuration.
    Administration > Save/Load Configuration > Backup (Help)
    [Tracking ID: 5340]

*** admin: Show MAC addresses of all network cards in About menu.

*** Improved about page with clarified display of installed
    licenses and modules.

*** Correction so that Remote User SIP Sessions (RUS) do not require
    Concurrent Calls SIP Session Licenses.
    [Tracking ID: 5341]

*** Remote User SIP Sessions Licenses (RUS) displayed incorrect value
    on the About page.