SonicOS 6.1.1.4 Release Notes for NSA 3600/4600 ... - SonicWALL

More documents

Recommendations

Info

Known IssuesRelease NotesThis section contains a list of known issues in the SonicOS 6.1.1.4 release.CertificatesSymptom Condition / Workaround IssueAuto-import CRL via http does not work forrevoking certificates.Occurs when you add a certificate, then on theimport CRL popup page, select Periodically autoimportCRL via HTTP, enter a valid HTTP URL forCRL download, and click the Apply button.129379DPI-SSLSymptom Condition / Workaround IssueThe CFS block page is not displayed for ablocked HTTPS website, although the site iscorrectly blocked and the attempt is logged.DPI-SSL does not take effect for a wirelessguest user. The certificate from the remoteserver is not rewritten using the designatedcertificate.Occurs when Enable SSL Client Inspection andContent Filter are selected on the DPI-SSL >Client SSL page, and a Content Filter policy isconfigured to block a site category that usesHTTPS, such as for online banking. When a useraccesses a banking website, it is blocked and theattempt is logged, but the CFS block page does notappear.Occurs when guest services are enabled on theWLAN zone and a guest user logs in and attemptsto access a website using HTTPS, such ashttps://mail.google.com.123676123097High AvailabilitySymptom Condition / Workaround IssueThe Active firewall in a Stateful HA pair doesnot synchronize all VPN connections to theStandby firewall.Occurs when many VPN tunnels are up, all boundto a certain interface, and fully synchronized, thenthe interface goes down on the Primary firewall.The Primary firewall begins deleting the tunnelsand also synchronizing with the Secondary, then afailover occurs before all tunnels are deleted andthe Stateful Sync finishes. The Primary continuesdeleting the rest of the tunnels, but cannot syncwith the Secondary because it is no longer theActive firewall. The Secondary is left with a numberof active VPN tunnels, but does not sync them tothe Primary unless the tunnel configuration ischanged.131211SonicOS 6.1.1.4 NSA 3600/4600/5600/6600 Release NotesP/N 232-002453-00 Rev A2
LogRelease NotesSymptom Condition / Workaround IssueThe first two pages of log events are notdisplayed in the Log View table.Occurs when the Items count above the Log Viewtable indicates that many items exist, such as ahundred or more, and Items per Page is set toshow 50 at a time. The appliance is configured withan imported OCSP certificate, WANGroupVPNenabled, and third party with OCSP enabled.132048NetworkingSymptom Condition / Workaround IssueThe firewall cannot connect with the PPTPserver.FTP connections fail after a Stateful HAfailover when using Wire Mode over LinkAggregation.The FTP session will time out or can beflushed from the Dashboard > ConnectionsMonitor page, then a new FTP session can beestablished.A test virus is logged, but not blocked whenusing Wire Mode over Link Aggregation.Occurs when configuring a WAN zone interface inPPTP mode, and a wrong password is enteredalong with other correct settings. After correctingthe password, the PPTP connection still fails.Occurs when Wire Mode over Link Aggregation(such as X6(X7) to X10(X11)) is configured on aStateful HA pair, and a failover occurs while FTPtraffic is running. One switch is connected toX6(X7) and another switch is connected toX10(X11), with PC’s connected to both switchesand FTP traffic running between the PC’s. After thefailover, the FTP session hangs when anycommand is entered.Occurs when an anchor port is down, in Securemode. Wire Mode is configured from LAN to LAN,X2 and X8. Link Aggregation (LAG) configurationis: X2: X3,X6,X7 and X8: X9,X10,X11, with staticLAG between two switches connected to theseports. Initially, a virus sent from a PC on one switchto a PC on the other switch is blocked. After X2 isshut down administratively, the next virus transferis logged, but not blocked.134038132278129955SystemSymptom Condition / Workaround IssueCertain buttons on the AppFlow > Dashboardand System > Diagnostics screens do notfunction correctly.A 3 rd party certificate cannot be selected, andthe VPN tunnel that uses the 3 rd partycertificate for authentication cannot come up.Occurs when viewing Intrusions on AppFlow >Dashboard and clicking the IPS signature fordetails. The details are blank. On the System >Diagnostics screen with Connections Monitorselected, clicking the button to display theconnections also displays a blank area.Occurs when the VPN Policy is configured andthen the appliance is upgraded to 6.1.1.4. Afterupgrading, the Local Certificate drop-down list isempty in the VPN Policy screen, preventing thelocal certificate from being selected.133816133697SonicOS 6.1.1.4 NSA 3600/4600/5600/6600 Release NotesP/N 232-002453-00 Rev A3
Page 1: Release NotesSonicOSSonicOS 6.1.1.4
Page 5 and 6: VPNRelease NotesSymptom Condition /
Page 7: UsersRelease NotesSymptom Condition

SonicOS 6.1.1.4 Release Notes for NSA 3600/4600 ... - SonicWALL

You also want an ePaper? Increase the reach of your titles

Delete template?

Save as template?