What’s New in Fireware XTM v11.7.4

What’s New in Fireware XTM What’s New in Fireware XTM v11.7.4v11.7.4

WatchGuard Training

New & Updated Features in Fireware XTM & WSM New & Updated Features in Fireware XTM & WSM v11.7.4v11.7.4 DHCP Options• DHCP option 66 (TFTP Server Name) support [70439]

• DHCP options on VLAN, Link Aggregation, and Bridge interfaces [71444]

3G/4G modem failover• Added support for Sierra Wireless AirCard 313U [72833]

• Added support for Verizon Wireless LTI USB551L [72829]

• Support 3G/4G modems on XTM 330 and 5 Series devices [73047]

spamBlocker —now uses anti-spam technology from Commtouch [74811]

Mobile VPN with SSL — OVPN profile for mobile devices [72237]

WatchGuard AP — Changed Channel HT mode to 20Mhz [72764]

Hotspot — Session timeout and idle timeout enhancement for hotspot external guest authentication [73338]

WatchGuard Training 2

DHCP OptionsDHCP Options

DHCP options are now configurable for VLAN, LinkAggregation, and Bridgeinterface types.

DHCP options now include support for TFTP Server Name (Option 66).

WatchGuard Training 3

3G/4G Modem Failover3G/4G Modem Failover

XTM 330 and 5 Series devices now support 3G/4G modem failover. Added support for additional 3G/4G USB modems:• Sierra Wireless AirCard 313U

• Verizon Wireless LTE USB551L

WatchGuard Training 4

spamBlocker Now Uses CommtouchspamBlocker Now Uses Commtouch

In Fireware XTM 11.7.4, spamBlocker uses Commtouch for email content scanning.

Most existing spamBlocker configuration settings do not change.• Spam threshold settings no longer appear in Policy Manager or the

Web UI.

• Settings for Proactive Patterns, Virus Outbreak Detection, and Bulk apply only to Fireware XTM OS versions that use Commtouch.

In WSM 11.7.4, Policy Manager cannot configure the spam threshold settings for devices that use Mailshell.• WSM 11.7.4 can manage devices that use Fireware XTM OS versions

that use Mailshell, but cannot configure spam threshold settings.

• To configure the spam threshold settings, you must use WSM v11.7.2, v11.7.3, or the Fireware XTM Web UI.

WatchGuard Training 5

Mobile VPN with SSL — OVPN Client ProfileMobile VPN with SSL — OVPN Client Profile

The Mobile VPN with SSLdownload page now provides a Mobile VPN with SSL client profile as a .ovpn file.

Use this file to enable a Mobile VPN with SSLconnection from any SSL VPN client that supports.ovpn configuration files.• Android OpenVPN Connect

• iOS OpenVPN Connect

• Other OpenVPN applications

WatchGuard Training 6

Access Point Default Radio SettingsAccess Point Default Radio Settings

In the Gateway Wireless Controller, the default access point radio setting for Channel HT Mode has been changed from 20/40 MHz to 20 MHz.

WatchGuard Training 7

Session & Idle Timeout for Hotspot External Session & Idle Timeout for Hotspot External AuthenticationAuthentication When you configure the web server for hotspot external guest

authentication, you can specify the session timeout and idle timeout values for user hotspot sessions.

Specify the values for the session timeout (sess_timeout) and idle timeout (idle_timeout) parameters in the access decision URL.

Example:<a href="http://10.0.3.1:4106/wgcgi.cgi?action=hotspot_auth

&ts=1344238620&success=1&sess_timeout=1200&idle_timeout=600&sig=a05d352951986e5fbf939920b260a6be3a9fffd3&redirect=http://www.google.com/">Connect</a>

WatchGuard Training 8

Thank You!Thank You!

WatchGuard Training 9