Kerio VPN Client Changelog

What's new in Kerio VPN Client 8.1.1 Build 1212 Patch 3

Oct 30, 2013
  • Backup configuration to Samepage.io:
  • Loosing configuration of your Kerio Control may equal a natural disaster. To prevent you, we've implemented automatic backups of your server configuration to Samepage.io, Kerio´s business collaboration platform. Register for free or use your existing Samepage.io account and your Kerio Control configuration backups will be automatically saved every day. In the event of a failure admins can now remotely access the configuration backups for a quick restore.
  • VPN tunnel failover:
  • The more internet lines, the fewer outages of internet connectivity. With Kerio Control 8.1, VPN tunnels are not bound to a single internet line anymore. VPN tunnel failover enables admins to specify more hostnames or IP addresses of the remote endpoint. Your VPN tunnel, regardless of Kerio VPN or IPsec, will always look up and use an available internet connection.
  • IP Tools:
  • Making everyday life easier, Kerio Control now offers easy tools enabling admins to check status of their network. No need to log into a SSH console. The most widely used IP tools such as ping, traceroute, nslookup or whois are now available directly from the web administration interface.
  • SNMP:
  • Kerio Control now supports Simple Network Management Protocol so any of the firewall´s essential state information can be accessed over the standardized interface of SNMP protocol. Admins and Managed Service Providers can now remotely monitor multiple Kerio Control installations from any free or commercial SNMP compatible remote monitoring tool.
  • Password guessing protection:
  • Kerio Control is now protected against dangerous password guessing and vocabulary attacks. Any IP address, that suspiciously keeps logging into the system with no success, gets denied.
  • Regular expressions in URL rules:
  • To create groups of unwanted URLs, administrators sometimes tend to manually create lists of concrete servers. These, however, use different host names thus the groups become inaccurate. Regular expressions in URL conditions, a new feature of Kerio Control 8.1, allows admins to more precisely specify URLs in order to reduce the amount of necessary entries in URL groups and ensure better exactness.
  • Other Changes:
  • Discontinuation of Parallels virtual appliance support

New in Kerio VPN Client 8.0.1 Build 609 (Jun 7, 2013)

  • Kerio Control Administration: password inputs behavior unified
  • Local ID of IPsec tunnel is now editable
  • Fixed: IPsec clients was disconnected after 3 hours
  • Fixed: HTTP header "Referer" was incorrectly removed under specific circumstances
  • Fixed: It was not possible to establish IPsec tunnel with more than 5 authorities in certificate store
  • Fixed: Remote ID of IPsec tunnel was incorrectly determined if the certificate was not in certificate store
  • Fixed: "Unable to check whether the VPN server's security certificate has or has not been revoked" warning was incorrectly displayed.

New in Kerio VPN Client 8.0.0 (Jun 7, 2013)

  • Added IPsec VPN server
  • Added IPsec VPN tunnel support
  • Added certificate store for easier certificate management
  • Added support for IPv6-only servers to non-transparent HTTP proxy
  • SSL and TLS encryption can now be used in communication with SMTP relay
  • WebFilter now filter HTTPS traffic over HTTP proxy
  • Kerio Control Administration: Load time of dashboard was reduced
  • Kerio Control Administration: Firefox and Chrome browsers on Android mobile devices are now supported
  • Administration and web interface is now available on port 80 (HTTP) and 443 (HTTPS)
  • Passwords can be stored in MS-CHAP v2 compatible format in local user database
  • Mac OS X VPN client now successfully verifies certificate signed by intermediate certificate authority
  • Dropped support for all Windows platforms
  • Build-in pluins for external antivirus removed
  • Hardware Appliance: LAN switch interface without Ethernet link now keeps it's IP address
  • Original URL instead of file name is now matched against antivirus URL rules
  • Kerio Control Administration: Application menu and automatic refresh was redesigned
  • SSL key size increased to 2048b
  • Fixed: Control now honor TTL values in DNS
  • Fixed: Dropped incoming packets are now accounted in Bandwidth management
  • Fixed: Statistics contained "Unknown" user
  • Fixed: BOOTP message now contains IP address of DHCP server
  • Fixed: DHCP server assigns wrong addresses in case of multiple subnets on one interface
  • Fixed: HTTP cache didn't re-validate document if HTTP header "max-age=0" was present
  • Fixed: Kerio Control Administration: System uptime was shown as NaN:NaN:NaN
  • Fixed: TCP RST packet was not allowed during 3-way handshake
  • Fixed: Stability issue in HTTP keywords filtering
  • Fixed: ICMP packet replay protection
  • Fixed: HTTPS URL filtering now blocks reused sessions
  • Fixed: HTTP cache had negative impact on throughput
  • Fixed: Week User and Traffic statistics were lost during restart

New in Kerio VPN Client 7.3.2 Build 4445 (Jun 13, 2012)

  • Updated list of supported linux distributions
  • Fixed: Kerio VPN Client service was not properly started after Kerio VPN Client upgrade - machine reboot was required
  • Fixed: Potential crash in NTLM authentication
  • Fixed: Potential crash in Dynamic DNS client