These new releases for our Firebox X Core, Peak, and Edge UTM appliances include extensive enhancements to the appliance and management software, providing you broader security, greater flexibility and interoperability, and better visibility into the network.
Here’s what’s in version 10 for you:
New solutions for Remote Access, Monitoring, Authentication, and Voice
- Integrated SSL VPN on the appliance. Secure remote access via an SSL VPN thin client
- SNMPv3 support. Secures device communications, with fallback to SNMPv2
- Single sign-on. Transparent Firebox Authentication via Active Directory
- Protocol support for VoIP and video conferencing. One of the most-requested new features
Improvements to proxy-based security subscriptions
- New virus outbreak detection in spamBlocker. Adds another powerful layer of malware protection for the network
- Enhanced IPS signature set and engine. Technology behind a Gateway AV/IPS subscription gets faster and stronger
- HTTPS in WebBlocker, and 54 category support. More specific surfing restrictions increase productivity and protection
- Expanded quarantine to include AV. Email caught by antivirus engine can be quarantined for later administrator review
These new releases for our Firebox X Core, Peak, and Edge UTM appliances include extensive enhancements to the appliance and management software, providing you broader security, greater flexibility and interoperability, and better visibility into the network.
Here’s what’s in version 10 for you:
New solutions for Remote Access, Monitoring, Authentication, and Voice
- Integrated SSL VPN on the appliance. Secure remote access via an SSL VPN thin client
- SNMPv3 support. Secures device communications, with fallback to SNMPv2
- Single sign-on. Transparent Firebox Authentication via Active Directory
- Protocol support for VoIP and video conferencing. One of the most-requested new features
Improvements to proxy-based security subscriptions
- New virus outbreak detection in spamBlocker. Adds another powerful layer of malware protection for the network
- Enhanced IPS signature set and engine. Technology behind a Gateway AV/IPS subscription gets faster and stronger
- HTTPS in WebBlocker, and 54 category support. More specific surfing restrictions increase productivity and protection
- Expanded quarantine to include AV. Email caught by antivirus engine can be quarantined for later administrator review
More robust logging and reporting
- New reporting. Faster and more flexible, with a great new look and feel
Bug fixes
Fireware version 10 includes numerous bug fixes, resolved issues, and stability enhancements. Of particular interest to users, Fireware version 10 also fixes a defect in our implementation of PPTP support in Fireware. WatchGuard’s authentication service for PPTP returned one type of error when a login attempt failed due to a bad user name, and returned another type of error when a login failed due to a bad password. This opened up the possibility of a user name guessing attack against the PPTP server. We have changed the server so that login failures due to bad user names and bad passwords can no longer be distinguished from one another. We thank Luke Jennings of MWRInfosec for bringing this to our attention.
If you have further questions about this bug or security concerns about any of WatchGuard’s products, please contact:
Steve Fallin
Director, Rapid Response Team
Product Manager, LiveSecurity
+1 206.521.8373
Does this release pertain to me?
There are important things to understand before you get started using version 10, especially related to WebBlocker, the new logging and reporting server, and our support for VoIP protocols. Refer to the Release Notes and the FAQ before you upgrade.
Fireware and Firebox Edge e-Series users
Fireware and Edge users benefit from the many enhancements described above. Follow the upgrade instructions in the Release Notes to complete the upgrade.
WatchGuard Firebox System users
If you are running WFS appliance software on your Firebox X Core or Firebox III, you can install WFS 7.5 using this package. If you previously installed WFS 7.5, there is no need to upgrade with this release. There are no changes to WFS since the previous release in April, 2007. If you are running a version older than 7.5 and wish to upgrade, please follow the upgrade instructions in the Release Notes.
For legacy WFS users with Firebox III and Firebox X Core devices who want to maintain use of VPN Manager and Basic DVCP, a stand-alone package (WSM 7.5) has also been posted for download.
How do I get the release?
Firebox X Peak, Core, and Firebox III owners who have a current LiveSecurity Service subscription can obtain this update without additional charge by downloading the applicable packages from the Software Center web page, which also includes clear installation instructions. As always, if you need support, please enter a support incident online or call our support staff directly. (When you contact Technical Support, please have your registered Product Serial Number, LiveSecurity Key, or Partner ID available.)