Web Gateway 7.6.2.4 Release Notes - Knowledge Center

Web Gateway 7.6.2.4 Release Notes - Knowledge Center
Release Notes
Revision A
McAfee Web Gateway 7.6.2.4
Contents
About this release
Enhancement
Resolved issues
Installation instructions
Known issues
Find product documentation
About this release
This document contains information about the current release. We strongly recommend that you read
the entire document.
®
McAfee Web Gateway (Web Gateway) 7.6.2.4 is provided as a main release. It is a maintenance
version that includes an enhancement and resolves issues present in previous versions.
If you have implemented a bonding configuration, which was available as an unsupported
feature before the release of Web Gateway 7.5.2, remove any settings of this configuration
before upgrading to this new version. Otherwise you risk creating an unstable state on the
appliance.
After the upgrade, you can again implement network interface bonding as described in the
System configuration chapter of the McAfee Web Gateway Product Guide.
1
Enhancement
This release of the product includes the following enhancement.
The Open SSL 1.0.2j library is now used for processing SSL-secured traffic.
Resolved issues
These issues are resolved in this release of the product. Bugzilla reference numbers are in
parentheses.
Network communication
•
When Web Gateway was configured to filter traffic in the FTP over WCCP mode with spoofing
enabled for client IP addresses, synchronization requests sent by the active FTP server were
ignored on Web Gateway. (1151584)
•
When media type filtering was enabled on Web Gateway, processing HTTP traffic led to an internal
server error, as Web Gateway deleted some scripts of an unknown script type sent with this traffic.
(1152454)
•
Static routes that had been configured on Web Gateway were ignored under the Routing
Information Protocol and eventually deleted, which was due to a buffer overflow caused by the
large number of routes. (1153204)
Authentication and web filtering
•
When updates for the Anti-Malware engine were performed on Web Gateway, reinitializing took
unusually long, which had an impact on processing requests that required an evaluation of the
Antivirus.IsInfected property. (1145537)
•
When Web Gateway was configured to filter SOCKS traffic, user authentication failed and Web
Gateway closed the connection. (1152258)
•
Using a block page to block several requests for web access incorrectly led to an alert call.
(1158404)
Vulnerabilities
2
•
Web Gateway was affected by the CVE-2016-6515 vulnerability, which allowed the use of
passwords with an unrestricted length when OpenSSH was involved. After a fix has been
implemented, Web Gateway is not affected anymore. (1156225)
•
Web Gateway was affected by the CVE-2016-1762 and several later vulnerabilities, which exposed
the libxml2 library. After a fix has been implemented, Web Gateway is not affected anymore.
(1159511)
Installation instructions
The requirements for installing this new product version depend on the version that you are currently
running.
•
7.3.x to 7.6.x — You can upgrade to the new version immediately. See Perform an upgrade.
•
7.0.x to 7.2.x — Complete the following steps to upgrade:
1
Create a configuration backup.
Use the options provided under Troubleshooting | Backup/Restore on the user interface to create the
backup.
2
Upgrade to the new version. See Perform an upgrade.
The upgrade process includes a major upgrade of the operating system. It takes several steps and
more time than usual.
If the upgrade process fails or is interrupted, you can re-image the appliance using an image of the
new version and install the configuration backup.
Alternatively, you can proceed as follows when upgrading from a 7.2.x or an earlier 7.x version:
•
1
Create a configuration backup.
2
Re-image the appliance using an image of the new version and install the configuration backup.
6.8.x or 6.9.x — You must re-image the appliance using an image of the new version.
Download an image of the new version from the download page of the McAfee Content & Cloud
Security Portal at https://contentsecurity.mcafee.com/software_mwg7_download.
For more information about re-imaging, see the McAfee Web Gateway Installation Guide.
Perform an upgrade
You can upgrade to the new version on the user interface or from a system console.
Upgrade on the user interface
You can work with the options of the user interface to perform the upgrade.
Task
1
Select Configuration | Appliances.
2
On the appliances tree, select the appliance you want to perform the upgrade on.
The appliance toolbar appears on the upper right of the tab.
3
Click Update Appliance Software.
The upgrade to the new version is performed. The upgrade process also logs you off from the user
interface.
3
4
Proceed in one of the following ways to complete the installation.
•
When upgrading from a 7.3.x or any later version:
1
Wait until a message informs you that the upgrade has completed and a logon button
appears.
2
Log on to the user interface again.
3
Select Configuration | Appliances, then select your appliance.
4
On the appliance toolbar, click Reboot.
When the restart has completed, a logon button appears. You can now log on to the user
interface again and start working with the new version.
•
When upgrading from a 7.2.x or any earlier 7.x version:
The appliance restarts automatically after each of the two upgrade phases that are performed.
When the second restart has completed, a logon button appears. You can now log on to the user
interface again and start working with the new version.
Upgrade from a system console
You can upgrade from a local system console or remotely using SSH.
Task
1
Log on to the appliance you want to perform the upgrade on.
2
Run the following commands:
yum upgrade yum yumconf\*
yum upgrade
The upgrade to the new version is performed.
4
3
Proceed in one of the following ways to complete the installation:
•
When upgrading from a 7.3.x or any later version:
Wait until a message informs you that the upgrade has completed, then run the following
command:
reboot
When the restart has completed, a logon prompt appears. You can now log on to the user
interface and start working with the new version.
•
When upgrading from a 7.2.x or any earlier 7.x version:
The appliance restarts automatically after each of the two upgrade phases that are performed.
•
If you are using a local system console:
When the second restart has completed, a logon prompt appears. You can now log on to the
user interface and start working with the new version.
•
If you are using SSH:
When the appliance restarts after the first upgrade phase, you are disconnected and the
second upgrade phase begins.
After this phase has completed, including the automatic restart, you can log on to the user
interface and start working with the new version.
The following command lets you view messages about the upgrade progress:
tail -F /opt/mwg/log/update/mlos2.upgrade.log
When you see that the upgrade has completed, press Ctrl+C to stop the process. You can
now log on to the user interface and start working with the new version.
Known issues
For known issues in this product release, see this Knowledge Center article: KB85705.
Find product documentation
On the ServicePortal, you can find information about a released product, including product
documentation, technical articles, and more.
Task
1
Go to the ServicePortal at https://support.mcafee.com and click the Knowledge Center tab.
2
In the Knowledge Base pane under Content Source, click Product Documentation.
3
Select a product and version, then click Search to display a list of documents.
5
Product documentation
Every McAfee product has a comprehensive set of documentation. For Web Gateway, this includes the
following:
•
McAfee Web Gateway Product Guide — Describes the features and capabilities of Web Gateway,
providing an overview of the product, as well as detailed instructions on how to configure and
maintain it
•
McAfee Web Gateway Installation Guide — Describes how to set up Web Gateway, as well as
several devices that can be run with the product
•
McAfee Web Gateway Reference Guide - Rule Sets Change Log — Provides a list of changes to
existing rule sets and additions of new rule sets for policy configuration on Web Gateway
•
McAfee Web Gateway Technical Note - SSO Catalog — Provides a list of the cloud applications and
services that are supported by Web Gateway with preconfigured connectors or connector templates
© 2016 Intel Corporation
Intel and the Intel logo are trademarks/registered trademarks of Intel Corporation. McAfee and the McAfee logo are trademarks/
registered trademarks of McAfee, Inc. Other names and brands may be claimed as the property of others.
0A00
Was this manual useful for you? yes no
Thank you for your participation!

* Your assessment is very important for improving the work of artificial intelligence, which forms the content of this project

Download PDF

advertisement