NGX R62 HFA's

[alias_maya]

Hi,

does anyone know if and when HFA's will be released for NGX R62 ?

Best regards,
Peter

[RayPesek]

The only one I know of is R62 HFA01 for SmartConsole that fixes some problems with SmartDefense updating.

R61 and R62 feel like the stepchildren to me, the R55P & W of NGX if you would. I'd look at moving to R65 myself if you're having an issue that cannot be fixed.

Ray

[ngxadmin]

What problems are you experiencing on R62? Ive been on SPLAT R62 since March 2007. I did have the smartconsole issue, but that was resolved as previously mentioned. Outside of that issue, R62 has been the most reliable and trouble free version in my personal experience. My interpretation is there have not been any HFA's because theres not much code to fix.? R65 has already had 2 HFA's.

[RayPesek]

Since R62's big change was to add SmartDefense profiles, one would think that any gateway or non-SD-profile NGX issues would apply to it as well.

Additionally, that "local administrator privilege escalation" issue with the command line utilities must apply to R62 as well. The most recent HFA for all of the other versions included this fix and a few others, but R62 did not get this fix. I was expecting to see the first R62 HFA with this fix.

Kind of odd, actually.

Ray

[ngxadmin]

Ray,
I read about the admin escalataion issue:sk33639. Could you elaborate on the Smartdefense profiles? Thanks.

[ngxadmin]

Ray,

Disregard, I dont think this is applicable to my environment.
Solution ID: sk32246

[Tan Da Boss]

HFA 01 is now available for NGX R62!!! At last!!! ;)

[chillyjim]

What fix did you need in it?

[Tan Da Boss]

Several of our customers had some issues with H323.

Category: VoIP
Problem: Legitimate H.323 packets may be incorrectly identified as Malformed Packets
and dropped.
Resolution: Enhanced H.323 decoding ensures correct identification and passing of
legitimate H.323 traffic.
Install On: Gateway

Few customers also have the following issue:

Platform: IPSO
Problem: When SecureXL is enabled, IP fragments may incorrectly be allowed.
Resolution: SecureXL on IPSO has been improved to ensure that the SmartDefense option
Forbid IP Fragments operates correctly.
Install On: Gateway

Some issues were reported by my colleagues and the fix should be included in this HFA. Sorry but I don't remember what the issue was.