User manual 3COM SUPERSTACK 3 WEBSITE FILTER

[. . . ] A new VPN Routing feature allows easy setup of secure traffic in a "hub and spoke" configuration between remote offices. A new High Availability feature eliminates network downtime by enabling the use of a backup Firewall for failover. It is now possible to perform one touch VPN client configuration file creation using the GroupVPN export function. The Firewall is shipped with 56-bit encryption for wider distribution; this can be web-upgraded to 168-bit. [. . . ] Multiple subnets can now be accessed through VPN tunnels. Individual rules can now be edited and disabled. Rules can also be enforced by time of day. A restart is no longer required after adding, deleting or changing rules. s The Syslog Individual Event Rate feature enables control over the time period between similar events being reported to the Syslog. The current status of DHCP leases are now shown on the DHCP/Status page. s s s s s Known Problems with this Release VPN Operation s s s You may need to reconfigure VPN clients to use the new GroupVPN feature. The GroupVPN security association must be used for multiple VPN clients. When configuring a VPN security association, the encryption method must be specified. The "AH-MD5" encryption method does not function correctly when interoperating with version 5. 0. 7 of SuperStack 3 Firewall or version 5. 0. 8 of OfficeConnect Firewall. Note the following if you have configured the Firewall to be a PPPoE client and wish to establish a VPN tunnel through the firewall using PPTP protocol. When using Microsoft Dial up Networking V1. 3 on Windows 95/98, the client PC must have the IP packet size set to "medium" in Dial up Networking. Windows 2000 is not affected as it automatically adjusts the packet size. s s s s s Fragmented IPSEC and PPTP packets can now pass through the Firewall. WINS server addresses can now be assigned to LAN clients by the Firewall DHCP Server. Hyperlinks displayed in the log now provide definitions of attacks. A PPPoE inactivity time-out has been added. The date can now be displayed in an International format (DD/MM/YYYY). s s s s 4 SUPERSTACK® 3 FIREWALL FIRMWARE VERSION 6. 0. 2 RELEASE NOTES NETBIOS Pass Through Facility The NETBIOS pass through facility does not function correctly, so it is not possible to find computers on the DMZ port from the LAN using Network Neighborhood or Find Computer. s A bug that caused VPN tunnels using IKE to remain disabled until the Firewall was restarted has been fixed. A bug that caused the re-negotiate button to intermittently stop functioning until the Firewall was restarted has been fixed. A bug which caused a delay in loading the management login screen when using Microsoft Internet Explorer was resolved. To avoid this delay, check the new "Manage using IE" box on the Access/Management page. H. 323/NetMeeting support has been enhanced to allow full audio and video between a SuperStack 3 and non-SuperStack 3 endpoint. A bug which caused automatically created rules to be lost upon a restore to factory defaults has been fixed. A bug which caused IP Spoof alerts to be generated when using NetBIOS between the LAN and the DMZ has been fixed. A bug which caused PPPoE sessions to be disconnected has been fixed. [. . . ] Select your Ethernet adapter if you have a dedicated Cable, ISDN, or DSL line. 5 Click File, then Save Changes to save the settings to the security policy. Chapter 10 - Configuring High Availability This chapter states that serial numbers are used for configuring High Availability. This is incorrect - MAC Addresses are used. Where "serial number" is stated in the instructions, use "MAC Address" instead. 6 SUPERSTACK® 3 FIREWALL FIRMWARE VERSION 6. 0. 2 RELEASE NOTES Copyright © 2001, 3Com Technologies. [. . . ]