 Re: R60_HFA05
Resolved Issues in R60_HFA_05:
R60_05-1:
HTTP client authentication fails on port 900 with long headers (more than 512 characters).
Install On: Gateway
R60_05-2:
NAT Stability issues.
Install On: Gateway
R60_05-3:
Hide NAT rule fails to redirect traffic to a gateway’s own IP address when that gateway is a member of group object.
Install On: Gateway
R60_05-4:
ARP response for VLAN interface does not include VLAN tag.
Install On: Gateway
R60_05-5:
The following error message errorneously appears on diskless Nokia platforms: “The log repository quota has been exceeded. No file could be deleted.”
Install On: Gateway
R60_05-6:
Nokia 3rd party cluster joins non-existent IGMP groups.
Install On: Gateway
R60_05-7:
Instability issues with VRRP on Nokia platforms.
Install On: Gateway
R60_05-8:
Updated NIC support
Install On: Gateway and/or SmartCenter server as appropriate.
R60_05-9:
Updated NIC support
Install On: Gateway and/or SmartCenter server as appropriate.
R60_05-10:
Kernel Instability
Install On: Gateway
R60_05-11:
Improper user authentication via a group to which the user does not belong.
Install On: SmartCenter server and Gateway
R60_05-12:
Stability issues during wrap-around on check_retransmission.
Install On: SmartCenter Server
R60_05-13:
Cluster member fails to maintain connection via its Virtual IP address following disconnection, failover and reconnection.
Install On: All cluster members
R60_05-14:
Solaris 10 gateway with a BGE Interface returns an incorrect MAC address (00-00-00).
Install On: Gateway
R60_05-15:
Policy installation does not require verification for NAT for DNS traffic when the DNS verification option is disabled.
Install On: SmartCenter Server
R60_05-16:
Enforcement issues when Packet Sanity is disabled or in the Monitor Only mode.
Install On: Gateway
R60_05-17:
Email address enclosed in quotes are erroneously rejected.
Install On: Gateway
R60_05-18:
Attachments with MIME header names are inappropriately stripped from email messages.
Install On: Gateway
R60_05-19:
MIME attachments are inappropriately stripped from valid email messages.
Install On: Gateway
R60_05-20:
Debug error causes system instability when using strip tags.
Install On: Gateway
R60_05-21:
Non-RFC reply received in response to CONNECT request when connecting to the security server as a Proxy (URI resource).
Install On: Gateway
R60_05-22:
System instability may occur during policy installation if a user has deleted the service with the highest service ID AND there is an open connection to that service.
Install On: Gateway
R60_05-23:
DHCP traffic is dropped when the DHCP server or DHCP relay is reactivated on a SecurePlatform machine.
Install On: Gateway and SmartCenter Server
R60_05-24:
Cannot globally allow out-of-state packets for a specific gateway.
Install On: Gateway
R60_05-25:
RTSP data connection is not properly recorded when two setup messages are used.
Install On: SmartCenter Server
R60_05-26:
Connectivity issues while SYN Defender is enabled.
Install On: Gateway
R60_05-27:
NAT support for MGCP phones
Install On: Gateway
R60_05-28:
NAT support for SIP phones
Install On: Gateway
R60_05-29:
Allowed UDP packets are incorrectly recorded as "Unknown SIP message type" in the log.
Install On: Gateway
R60_05-30:
FireWall rejects MGCP call IDs with a length of 32 characters.
Install On: Gateway
R60_05-31:
Packets dropped when the HTTP response contains both contentlength and transfer-encoding headers.
Install On: Gateway
R60_05-32:
VPN stability issues.
Install On: Gateway
R60_05-33:
Intermittent gateway stability issues following installation of R60 HFA_02 when using a traditional mode policy.
Install On: Gateway
R60_05-34:
IP pool not properly initialized in cluster environment
Install On: Gateway
R60_05-35:
Connectivity issues in Office Mode cluster environments.
Install On: SmartCenter Server
R60_05-36:
Office Mode from Radius server does not function properly with SNX.
Install On: Gateway
R60_05-37:
OpenSSL fails to properly verify RSA signatures.
Install On: Gateway and SmartCenter server
R60_05-38:
OCSP signing key purpose ID is not supported in the ExtendedKeyUsage field.
Install On: Gateway
R60_05-39:
Stability issue when the CRL expiration date exceeds 24 days.
Install On: SmartCenter server
R60_05-40:
OCSP update interval greater than 2 hours is not supported.
Install On: Gateway
R60_05-41:
Self-signed certificate not supported for OCSP.
Install On: Gateway
R60_05-42:
Connectivity issues when SecureClient attempts to access a gateway connected to multiple ISPs via multiple interfaces.
Install On: Gateway
R60_05-43:
Connectivity Issues after policy installation on a gateway.
Install On: Gateway
R60_05-44:
Installing Security Policy to a VPN-1 gateway disrupts existing connections of remote users. Remote Access users might experience temporary packet loss when a new security policy is installed on the gateway to which they are connected.
Install On: SmartCenter Server
R60_05-45:
Performance degradation with many users connected.
Install On: Gateway
R60_05-46:
Temporary gate performance issues after updating Corporate Office.
Install On: Gateway
R60_05-47:
VPN performance issues when permanent tunnels with ROBO peers are enabled.
Install On: Gateway
R60_05-48:
Connectivity issues during policy installation in an environment where many ROBOs are managed by a Large Scale Manager (LSM).
Install On: Gateway
R60_05-49:
Cannot download policy from Load Sharing cluster.
Install On: Gateway
R60_05-50:
Setting FireWall group permissions for a group other then the root group will not allow a user of this group to execute FireWall commands.
Install On: SmartCenter Server
R60_05-51:
Stability issues with SmartDashboard on Solaris.
Install On: SmartCenter Server
R60_05-52:
Synchronization between the active primary and secondary SmartCenter severs fails when performed via the SmartDashboard Synchronize Me option.
Install On: SmartCenter Server
R60_05-53:
Web Intelligence ASCII-Only protection incorrectly requires a Web Intelligence license.
Install On: SmartCenter Server
R60_05-54:
Anti-Spoofing verification installs successfully on a standalone gateway when the the internal interface definition is set to "Not Defined" and the "Perform Anti-Spoofing based on interface topology" option is selected for the external interface. This combination should produce an error message and policy installation should fail.
Install On: SmartCenter Server (Standalone Mode)
R60_05-55:
Fw local logging does not work on IP clustering and VRRP, with no option to configure it on SmartCenter servers.
Install On: SmartCenter server and gateway (Requires IPSO 4.1 build 22 or above).
R60_05-56:
Instability during HFA installation on Secure Platform.
Install On: SmartCenter Server
R60_05-57:
Connectivity problems during policy installation in ClusterXL LS.
Install On: Gateway cluster members
R60_05-58:
Cluster interface defined as disconnected, incorrectly answers 250 ARP requests.
Install On: Cluster gateway members
R60_05-59:
Connectivity issues in third party cluster configurations with multiple VLANS sharing one interface.
Install On: Cluster gateway members
R60_05-60:
QoS does not enforce a rule if the Install On field contains any selection other than Any in the ClusterXL High Availability mode.
Install On: Cluster members
R60_05-61:
When installing a QoS Policy, the message “Error - No Valid FloodGate- 1 License” appears in error.
Install On: SmartCenter Server
R60_05-62:
Cannot define an SNX Integrity Clientless Server (ICS) policy for each individual user group.
Install On: SmartCenter Server and VPN-1 gateway
R60_05-63:
Cannot define an encryption domain for each individual user group.
Install On: VPN-1 Gateway
R60_05-64:
Cannot disable the proxy PAC file script.
Install On: SmartCenter Server
R60_05-65:
Manual proxy configuration is ignored when using SNX with proxy replacement. This may allow direct access to some sites that should not accessed through a proxy.
Install On: SmartCenter server and Gateway
R60_05-66:
When SNX is used together with a proxy, system instability may occur if the host name of the site is not resolvable.
Install On: SmartCenter server and Gateway
R60_05-67:
Performance issues when uploading from CIFS.
Install On: Gateway
R60_05-68:
Latency and performance issues when using Syn Defender in the Active mode and with Static NAT LS (asymmetric routing).
Install On: Gateway
R60_05-69:
HFA package installation on SecurePlatform via Web UI upgrade fails.
Install On: SecurePlatform Gateway or SmartCenter server. This feature is available only if R60_HFA_04 is already installed on the SecurePlatform machine.  |