WinGate Changelog

What's new in WinGate 9.4.5 Build 6015

Oct 28, 2022
  • Fix: IMAP: additional parameter validation for AUTHENTICATE, SELECT, SUBSCRIBE, UNSUBSCRIBE, STATUS, APPEND, EXPUNGE, STORE, UID functions.
  • Fix: IMAP: fixed returned sequence numbers for SEARCH command
  • Fix: IMAP: fixed returned sequence numbers for SORT command
  • Fix: Pattern matching: Fixed locale dependency for case-insensitive string comparisons in pattern matching.
  • Fix: HTTP: fixed write access to Version member in Request object
  • Fix: Policy Map lookup item: fixed crash in map lookup item when clicking sort header
  • Fix: Policy Map lookup item: store edit control value when dialog closed if currently editing. Previously lost edit.
  • New: HTTP: Added UpdateURL function to HTTPRequestMessage object, so you can specify a new destination URL for requests with a single URL string.
  • New: Policy: Added a second logical output to the Map Lookup item, which allows you to define different behaviour for when the searched value isn't found in the map.
  • Fix: SSL Inspection: Fixed an issue with certificate generation for SSL inspection affecting Chrome users.
  • Fix: SSL: deprecated MD5 and SHA1 hash algorithms for use in signatures in certificate generation.

New in WinGate 9.4.1 Build 5998 (Feb 1, 2020)

  • Fix: HTTP Caching: Fixed creation of temp folders in the case where the parent folder didn't exist.
  • Fix: DNS: fixed crash on creation of over-sized response packets
  • Fix: Flow-chart Policy: Fixed scrolling issue on log entry item log content field.
  • Fix: SSL Inspection: Fixed control updated when enabling / disabling items
  • Fix: Flow-chart policy: Fixed vertical offset issue for output label
  • Fix: SSL: Fixed blocking of SSL client-initiated renegotiation.
  • New: HTTP Divert: added support for temp vs permanent redirect for divert results in HTTP policy events

New in WinGate 9.4.0 Build 5993 (Feb 20, 2019)

  • Fix: Categories: Optimised saving changes of category definitions
  • Fix: Block pages: changed double click behaviour to edit block page
  • Fix: Active Directory: Fixed group membership enumeration.
  • Fix: Kerberos: Fixed buffer too small issue in kerberos authentication
  • Fix: Web Serving: Fixed Last-Modified header (appended NULL) when WinGate is web server.
  • New: HiDPI support: support for DPI scaling of hi-res monitors

New in WinGate 9.4.0 Build 5992 (Feb 20, 2019)

  • Fix: Categories: Optimised saving changes of category definitions
  • Fix: Block pages: changed double click behaviour to edit block page
  • Fix: Active Directory: Fixed group membership enumeration
  • Fix: Kerberos: Fixed buffer too small issue in kerberos authentication
  • Fix: Web Serving: Fixed Last-Modified header (appended NULL) when WinGate is web server
  • New: HiDPI support: support for DPI scaling of hi-res monitors

New in WinGate 9.3.0 Build 5981 (Jan 21, 2019)

  • Fix: Policy: Fixed auto-reported crash on F1 help for event items in policy editor.
  • Fix: Web Proxy: Fixed HTML escaping of event names and error messages when reporting errors in event handlers.
  • Fix: Web Admin: Fixed HTML escaping of event names and error messages when reporting errors in event handlers.
  • Fix: Auth client: Fixed handling of OK button / default action to not close dialog.
  • Fix: IP to country: Fixed access to CountryForIp function via script runtimes.
  • New: Web Proxy: Now supports WebSockets for forward and reverse proxy.
  • New: Web Proxy: Added list to check for sites not to inspect for SSL inspection
  • New: Auth Client: Added 32 bit QbikAuth32.exe for authenticating from 32 bit windows clients.
  • New: Schema: Added SetString call to allow setting values for global data strings
  • New: SSL/TLS: block client-initiated SSL renegotiation to prevent denial of service.

New in WinGate 9.2.0 Build 5975 (Jun 27, 2018)

  • Fix: Policy: Property dialogs for some types of item would open non-modally
  • Fix: Timeline: Fix divide-by-zero problem if the pane size reduced to 0 width.
  • Fix: Logging: fixed auto-reported crash relating to searching in log files
  • Fix: WinGate Management: Fix auto-reported crash relating to initialisation of User Interface Framework.
  • Fix: Data Lists: Fix auto-reported crash relating to access safety issue around refreshing contents of file-based lists.
  • Fix: User Database: Fixed auto-repoorted crash relating to safety checking of user object handles in WinGate users and groups.
  • Fix: Uninstall: Fixed issue with missing lua script file on uninstall
  • Fix: WinGate NAT: Fix auto-reported crash caused by race-condition on shutdown
  • Fix: Email Panel: Fix auto-reported crash relating to tooltips when attaching users to mailboxes.
  • Fix: Jscript: Fix auto-reported crash with string length attribute when used with string literals.
  • New: Server Core: Now supports Windows Server Core, you must install and run WinGate Management on another computer. WinGate makes the Remote Control Service available from install.
  • New: Firewall: Added default options to port security, so you can specify whether to log, use SYN cookies, or cloak connection failures on a per-table basis.
  • New: DNS client: Published schema member functions for the DNSClient global object: EnableServer, DisableServer, and IsServerEnabled - to allow script to enable or disable DNS servers used by the DNS client
  • New: WWW proxy: Added support to specify the SNI option used by the reverse proxy when connecting to a back end server with https.
  • New: TCP Mapping: Added new event PreConnect to enable policy to dictate the destination of the upstream connection. Enterprise license required.
  • New: Activity: Added option to discard credentials from machine record, to enable changes to credential rules to be more easily applied.
  • New: Schema: Published schema to make several more member values accessible from event handling. ClientSNIValue, ServerName.
  • New: Mail list: Added some additional list-related headers, and now rewrite From: header in order to satisfy DMARC-checking receivers.
  • New: Uninstall: Added uninstall survey.

New in WinGate 9.1.5 Build 5965 (Apr 30, 2018)

  • 1. Fix: JScript Item: Fix crash if script longer than 2k characters.
  • 2. Fix: JScript Item: Fix problems with String.Tokenize, including destruction of source string, and improper handling of empty first token.
  • 3. Fix: SOCKS: Properly report and display SOCKS4a if that is being used by the client (was reporting as SOCKS4)
  • 4. New: Session Schema: Added Session.LogEvent function to schema so you can log to the session log from script
  • 5. New: SOCKS Schema: Added Session.ServerName to allow policy control on destination of SOCKS connection requests where the proxy is resolving the target. Can be overwritten.

New in WinGate 9.1.4 Build 5962 (Apr 10, 2018)

  • Fix: Notifications: Fix crash if reporting notifications to a disabled notification plan, introduced in 9.1.3.
  • Fix: Telemetry: Remove upload timeout (was 1min) for uploading telemetry and crash dumps.

New in WinGate 9.1.3 Build 5958 (Mar 22, 2018)

  • Fix: HTTP Error responses: Fix XML encoding of embedded data in web access control block pages.
  • Fix: HTTP Error responses: Fix XML encoding of embedded data in Web Admin service internal block pages.
  • Fix: SIP Proxy: Fix broken debug logging for some messages.
  • Fix: HTTP Events: Fixed Headers.Clear function for runtimes.
  • Fix: HTTP Cache: Fix automatically reported crash in user interface in some cases directly after login
  • Fix: WinGate Users and Groups: Fix automatically reported crash relating to configuration errors in authentication.
  • New: Block pages: Added {ACCOUNT} to custom responses and block page templates to report logged in user account.
  • New: Web Admin Service: added support for custom response pages similar to the WWW proxy custom responses.
  • New: Telemetry: Added several more attributes to gather information about the types of service being used

New in WinGate 9.1.2 Build 5956 (Dec 18, 2017)

  • Fix: HTTP Error responses: Fix XML encoding of embedded data in response pages, prevents XSS attacks via WinGate block pages
  • Fix: Directory browsing: Fix issues with links to icon files for directory browsing with https
  • Fix: AD Connector: Fix auto-reported crash relating to enumeration of inter-trusted domains missing certain DNS information
  • Fix: AD Connector: Fix occasional encoding problem for some arguments in LDAP queries
  • Fix: Help system: Fix auto-reported crash if hhctrlocx fails to load
  • Fix: Schema script: Fix auto-reported crash if script does not include enough operands for various operators
  • Fix: HTTP Basic Auth: Added charset auth param to challenge to indicate preference to receive user/pass in UTF-8
  • Fix: Route Table checking: Fix auto-reported crash when route table contains no routes via a gateway
  • Fix: Service Bindings: Fix race condition causing crash when viewing bindings while they change (auto-reported)
  • Fix: Dashboards: Fix race condition causing crash when a dashboard is deleted and receives an update (auto-reported)

New in WinGate 9.1.1 Build 5951 (Oct 9, 2017)

  • Fix: WINS: Fixed rare automatically-reported crash on receiving certain WINS broadcast packets
  • Fix: Activity: Copy URL to clipboard was not working for CONNECT server:port requests
  • Fix: WinGate: Fixed rare automatically-reported crash relating to checking interface table for changes
  • Fix: WinGate Management: Fixed rare automatically-reported crash relating to dialog showing progress of synchronising modules
  • Fix: Web Access Rules: Fix context menu for report header
  • Fix: Send/Recv: Report correct error code if pended completion called with error
  • Fix: Shutdown: Fix crash on shutdown relating to Logging updating shared data values
  • Fix: Minidumps: Fix crash in minidump generation in some cases when shutting down
  • New: Web Access Rules: Added ${USER} and ${IP} options to block pages

New in WinGate 9.1.0 Build 5945 (Sep 27, 2017)

  • New: Active Directory: Now works with multiple trusted forests / domains (Enterprise only).
  • New: Credential rules: New setting to prevent inheritance of Domain Computer credentials, means no longer need to battle with system services that auth when restricting user access to web sites.
  • New: Reverse Proxy: Can now set whether client cert is required on a per site basis for reverse proxy with SSL/TLS
  • New: User interface: Updated to latest version of Codejock user interface framework.
  • New: WinGate Updates: overhauled user interface.
  • New: Logos: new product icons / logos for WinGate, Kaspersky AV, Lumen, and the SMS connector.
  • Fix: Web Proxy: Fixed automatically-reported crash occuring when using the wrong number of arguments for some functions in script.
  • Fix: Web Activity: Fix logging of web activity items to timeline on first run when it's disabled.
  • Fix: Licensing: Crash in licensing panel if licenses changed while not showing panel.
  • Fix: Services: Automatically-reported crash in call to LookupPrivilege in some cases relating to checking for port conflicts when starting services.
  • Fix: DNS client: Automatically-reported crash in call to GetNetworkParams, now use DnsQueryConfig to enumerate system-known DNS servers.
  • Fix: Localization: Resolve issue localizing modules that are installed in different folders (not child folder of WinGate).
  • Fix: Localization: Resolve issue with writing missing resources to file

New in WinGate 9.0.8 Build 5935 (Aug 21, 2017)

  • Fix: Various: Fixed several automatically-reported crashes in WinGate Management and WinGate engine.
  • Fix: Flow-chart policy: Fixed problem with list lookup relating to localised interface where the method sort order changes.
  • Fix: Notifications: Fixed automatically-reported crash relating to logging notification reports.

New in WinGate 9.0.7 Build 5933 (Jul 14, 2017)

  • Fix: AD connector: Crash in SOCKS authentication related to testing for available auth methods
  • Fix: Various: various localization issues with some strings

New in WinGate 9.0.6 Build 5929 (Jun 7, 2017)

  • Fix: Services: Fixed problem with high rate of incoming connections.
  • Fix: WinGate Engine: fixed intermittent crash on engine shutdown.
  • Fix: Localization: Made numerous hard-coded strings available for localization.
  • Fix: Email UI: fixed display of email address handler restrictions.
  • Fix: WWW proxy: Fixed issue in web server when serving files with % in filename
  • New: Licenses: Now report notification incident when license count is exceeded

New in WinGate 9.0.5 Build 5926 (Apr 5, 2017)

  • Fix: Locking: Reverted to FIFO lock acquisition strategy to resolve issues with stablity due to thread starvation on highly contended locks under load
  • Fix: WWW proxy: Fixed parser problem if response headers contain mixed CR and CRLF line endings
  • Fix: Credential Rules: fixed lookup failure when multiple IP-matching sub-ranges defined
  • Fix: Web Access Rules: Fixed display problem in rules if username contained XML special characters (such as ampersand)
  • Fix: Web Access Rules: Fixed a problem if registry merging resulted in multiple conflicting rule entries
  • Fix: WinGate Engine: Fixed a crash on shutdown whilst deleting services
  • Fix: WinGate Management: Fixed an automatically-reported crash issue when accessing context menus from some panels when the task panel is hidden
  • Change: String handling: Performance improvements in several places where strings are copied
  • Change: Web Access: Refactored locking to reduce contention and increase performance
  • Change: Minidump reporting: collect more data on crashes, submit minidumps zipped

New in WinGate 9.0.4 Build 5915 (Feb 13, 2017)

  • Fix: TLS in services: fixed allowed cipher suite issue relating to deprecation of RC4 and 3-DES, causing older clients to fail to connect with TLS.
  • Fix: WinGate Engine: Fixed an automatically reported crash on shut down of WinGate engine
  • Fix: Categories: Fixed an automatically reported crash in the user interface when you add a category and clear the name,
  • Fix: Permissions: Fixed an automatically reported crash in the user interface which occured occasionally when changing selection
  • Fix: WinGate Management: Fixed an automatically reported crash in the user interface relating to requesting credentials from the user.
  • Fix: Telemetry: several fixes relating to missing prefixes.

New in WinGate 9.0.3 Build 5911 (Jan 25, 2017)

  • Fix: WinGate Management: Fixed display issue with categories containing special characters
  • Fix: DHCP: fix issue where client changing networks requests old IP was given it instead of rejected.
  • Fix: Localization: Fixed a problem on Windows 7 with WinGate localization causing WinGate management to fail to start.
  • Change: TLS client certs: setting to request a client cert now requires it
  • Chenge: Telemetry: Various fixes, and added start timestamp to record duration covered by report

New in WinGate 9.0.2 Build 5909 (Jan 13, 2017)

  • Fix: WinGate Management: Fixed crash when creating a new service if the dialog OK button is clicked prior to the service showing in the dialog
  • Fix: Activation: fix crash where user deactivates a license where the product is not loaded (e.g. old PureSight license)
  • Fix: Installer: check for existence of KB2533623 on Windows 7, this is required for WinGate to load modules (normally installed by Windows update)
  • Fix: WinGate Updates: Fixed notification of new updates, now always notify on new updates.
  • Fix: Minidump generation: Fixed an problem relating to generation of minidumps without exception information.
  • Fix: Application Experience: Fixed an issue where in some cases install instance ID not available

New in WinGate 9.0.1 build 5906 (Dec 29, 2016)

  • This is an early maintenance release, fixing bugs reported by the Application Experience feature in WinGate 9.
  • Fix: WinGate Engine: Fixed engine crash when WinGate Management connects where there are no packages installed (can happen if you delete packages registry key after installing WinGate).
  • Fix: WinGate Management: fix crash where user hits F1 key on login, or language setting dialog box if they had previously connected to WinGate
  • Fix: DNS server: Fix crash on race condition if sessions were set to time out too shortNow timeouts aren't set in the proxy (they are a function of the DNS client).
  • Fix: WinGate Engine: Fixed crash in some cases in checking for changes to the system route table
  • Fix: Updates: Fixed an occasional crash where a status for a product is updated

New in WinGate 9.0.0 build 5902 (Dec 20, 2016)

  • Platform-related:
  • New: moved to native 64 bit only, dropped support for 32 bit windows
  • New: no longer support XP or 2003 server, minimum recommended OS is Windows 7 x64 / 2008 R2 server
  • Change: moved build environment to Visual Studio 2015, which requires deployment of VS2015 runtime
  • Performance-related:
  • Change: HTTP Proxy: streamlined parsing for improved parsing performance and reduced memory heap access
  • Change: HTTP Proxy: increased buffer size to reduce number of system calls
  • Change: HTTP Proxy: streamlined buffer manager to use fewer allocations and reduce contention around buffer pool
  • Change: HTTP Proxy: streamlined code path for serving files to reduce parsing workload
  • Change: HTTP Cache: various performance improvements
  • Change: Events: various optimizations to event processing, including reduction of lock contention on processing events
  • Change: Network IO: moved to overlapped sending to reduce system calls when sending data
  • Change: Service: use IO completion ports to accept connections
  • Change: Performance: Improved pattern matching algorithm performance, affects data list lookups
  • Change: Performance: improved performance of unicode UTF-8/ANSI conversion which is in widespread use throughout WinGate
  • Change: Locking: improve lock acquisition cost improves performance overall
  • Change: String formatting: improved string formatting code to reduce memory allocations
  • Change: String encoding: improved speed of various string encoding functions
  • Change: Performance: Various other changes to reduce memory heap access and copies
  • Change: Data: reduced contention / locking around counters to improve performance of monitored data
  • Change: TCP Mapping proxy: increased throughput performance of proxy
  • Change: SMTP delivery: increased send buffer size for improved delivery performance
  • Change: Timeline: various performance improvements to reduce load of large timeline databases
  • Web-related:
  • New: HTTP Proxy: Now supports SNI on incoming connections Useful for supporting multiple reverse proxy sites with different certificates
  • New: HTTP Proxy: Now inspects initial packet checking for TLS record and SNI This supports SNI for intercepted connections, and also allows https for diverted connections to the proxy (sometimes called SSL peek and bump)
  • New: Cache: Now supports caching partial responses 25: Change: HTTP Proxy: numerous performance improvements as above
  • Change: HTTP Proxy: Now allow explicit control over whether to allow GET / HEAD requests to contain a message body
  • Fix: Cache: better error reporting on cache volume problems (part of adding support for Ramdisk cache)
  • Fix: Web Access Rules: fix web access rule creation wizard navigation
  • Miscellaneous:
  • New: SIP Proxy: allows you to track calls in timeline, and block calls made using SIP phones
  • New: TCP Mapping: Added controls over TCP keepalive settings for client and server-side connections
  • New: WinGate Management: Added filtering of activity view Can now set lists of IPs to display or hide traffic from
  • New: Application Experience: Now collects information about usage of WinGate in order to assist us to prioritise features for development
  • New: Application Experience: Automatically uploads any crash dump / minidump files and information to our servers for analysis and bug-fixing
  • New: Logging: new log migration wizard allows moving log folders
  • New: SQL statement: item can now copy database record field data from results into event data for use in event handlers
  • New: SQL statement: item can now be added directly onto event processing
  • New: SQL statement: policy item can now check whether rows were affected in INSERT/UPDATE/DELETE queries
  • New: Policy: Send Email item can now attach a file
  • New: Policy: New Log Entry item, can log to current service log file from within policy or event (pro or enterprise only)
  • New: Scheduler: added option to randomize the minutes value for when the event will next run Used for update checker, IP to country updates (on new installs) Useful for load spreading of access to remote servers
  • New: Config Utility: added -nomap option to allow exporting unmapped file paths
  • New: IPtoCountry: added logging and use of notifications to log update issues
  • New: IPtoCountry: added IpToCountry as a globally accessible object from script, added "CountryForIp" function
  • > New: POP3 Server: Added SessionComplete event to POP3 server Now can see how many messages remain in a folder and/or were deleted after a POP3 client disconnects
  • Change: WinGate Management: WinGate management connection no longer inherits credentials from any previous-established cached credentials for the IP it connects from
  • Change: WinGate Management: Additional logging around login / logout and auth failure
  • Change: WinGate Management: migrated to new version of Codejock user interface library
  • Change: WinGate Management: User interface tweaks, to make tabs and quick access buttons more visible, and to distinguish it visually from WG8
  • Change: Notifications Panel: Can now close out multiple incidents at once
  • Change: Email: Mail file processing now binary safe There was a problem with some embedded non-ASCII-based character sets being corrupted
  • Change: Logging: session creation and termination is now logged at info level instead of debug
  • Change: Resources Panel: removed the resources panel for various reasons, mainly due to performance cost, and lack of utility At least we're honest
  • Change: OpenSSL: updated to version 102j
  • Change: Scilexer: new scilexer for context-highlighting of code (script) windows
  • Change: Licensing: Changed the way WinGate notifies the user about accessing license-restricted features in trial mode to reduce confusion about the purpose of the notification
  • Change: Installer: migrate mail spool, web admin, certs, resources, custom responses folders to ProgramData
  • Fix: Authentication: some cases where auth failed were not being properly reported / auth failed event processed
  • Fix: IpToCountry: better file validation of downloaded files
  • Fix: Various: numerous other fixes

New in WinGate 8.5.9 build 4883 (May 16, 2016)

  • Fix: Socket notifications: performance improvement from fixed callback window creation.
  • Fix: WinGate Engine: Fixed memory leak in thread naming if policy is used to terminate connections from within ClientConnect event
  • Fix: Reverse Proxy: Fixed memory leak relating to extension to EXE mappings when web serving.
  • Fix: Email Panel: Fixed crash relating to tooltip.
  • Fix: JScript Item: Fixed bug relating to strings from schema objects being treated as booleans when compared.
  • Fix: JScript Item: Fixed bug in less than and greater than operators
  • Change: Pattern Matching: Performance improvement in pattern matching, affects data list content checking.
  • Change: WWW Proxy: now recognises the relatively new PATCH command (so doesn't block it by default)

New in WinGate 8.5.8 build 4881 (Apr 23, 2016)

  • Fix: Proxy: Serious load problem with many connections to proxy (log entry shows exception in TCPSession::InitInstance) caused by issue in MFC introduced in 8.4.0 (#22).
  • Fix: Web Activity: Parallelized callout to web classifiers (such as manual classifier) which were being serialized, causing performance bottleneck if classification is too expenive (e.g. very large lists of wild-card entries).
  • Fix: Remote Control: Problem with communications from WinGate Management becoming overloaded and unresponsive if too many packets being sent in the other direction. Could cause settings from WinGate Management to not be applied for example when loading large numbers of timeline records.
  • New: Data Lists: Added RemoveAll and ExportToFile functions to List object schema.

New in WinGate 8.5.7 build 4879 (Apr 11, 2016)

  • Fix: Installer: Problem with SHA256 signatures on installer prevented signature validation on XP
  • Fix: Installer: Setupfactory extension RegistryEx.lmd not loading on XP due to missing dependency
  • Change: Installer: Now uses dual signatures on installers to support new requirements for SHA256 and retain previous SHA1 support

New in WinGate 8.5.6 build 4877 (Mar 29, 2016)

  • Fix: DNS Client: Memory leak when DNS requests cancelled prior to completion.
  • Fix: FTP Proxy: Problem logging some non-UTF-8 filenames etc in debug logging.
  • Fix: FTP Proxy: Problem with some UTF-8 filenames being corrupted, preventing download or change directory.
  • Fix: FTP Proxy: Fixed logging of multi-line responses such as FEAT responses.
  • Fix: Timeline: not showing name for Web Activity option on settings > general tab
  • Fix: File-based Data lists: file reading issue when final line not new-line terminated
  • Change: HTTPS inspection: Can now inspect on non-standard ports (use policy if you want finer control)
  • Change: Timeline: Manifest no longer dependent on SQLite ODBC driver file (which is no longer installed to packages folder)
  • Change: Installer: Check CRC on existing driver binary and skip driver upgrade if the binary is the same. Saves a reboot and interface cycling.
  • Change: Installer: Now restart WinGate service (if installer stopped it) and Engine Monitor (in all cases) where reboot is not required.
  • Change: Installer: Installer now signed using SHA256 hash algorithm.

New in WinGate 8.5.5 build 4858 (Jan 28, 2016)

  • Fix: DNS Client: Fixed case-sensitivity bug in hosts file entries
  • Fix: DNS Client: hosts file now supports multiple names per line, and multiple addresses per name.
  • Fix: Service Editing: Fix ignored ESC key in editing service when description field is selected.
  • New: DNS client: Add support for adding domain suffix to unqualified requests.
  • New: Active Directory: Result filtering can now select Organization Units as well as domains.
  • New: Upstream connections: proxies can now connect upstream using SOCKS4a, thereby avoiding DNS lookups.

New in WinGate 8.5.4 build 4852 (Nov 18, 2015)

  • Fix: WWW Proxy: Fixed issue with stripping of empty Basic auth request header.
  • Fix: TLS: Fix issue with superfluous initialisation of TLS algorithms when generating certificates
  • Fix: Events: Fix problem with editing event processors from events panel - was blocking communications with engine.
  • Fix: Schema: Fix schema / script-based access to Session.ServerIp, broken in 8.5.0
  • Fix: Schema: Fix parameter checking in various built-in functions which could crash WinGate if function called incorrectly.
  • Fix: FTP Proxy: Fix broken PORT command parsing, broken in version 8.5.2
  • New: WinGate Users and Groups: can now change own password via Web Admin service.

New in WinGate 8.5.3 Build 4846 (Oct 13, 2015)

  • Fix: WWW Proxy: Fixed broken (in 8.5.0) authentication for server requests / reverse proxy / intercepted connections where the proxy is doing the authentication.

New in WinGate 8.5.2 Build 4845 (Oct 9, 2015)

  • Fix: WinGate: Crash on startup of WinGate service if plugins were not upgraded as well. Now shows error and doesn't load module.
  • Fix: HTTP Cache: Crash in serving cached files if stored response headers > 16kB
  • Fix: FTP Proxy: Problem with non-ANSI / non-UTF-8 character set used in file names.
  • Fix: Web Access Rules: Crash in WinGate Management when double-clicking report header in "What" pane when editing a rule if no entry selected.
  • Fix: Policy: fix colour for text for policies which are enabled, but not attached to any event. Was showing as greyed.
  • Change: WWW proxy: now ignore and strip (instead of failing auth on) Proxy-Authorization headers which contain empty Basic credentials, which are sent by some non-compliant clients on all requests
  • Change: Plugin interface: changed SDK version relating to fix #1 above.

New in WinGate 8.5.1 Build 4840 (Sep 25, 2015)

  • Fix: Installer: Problem installing WinGate network driver on Windows 10 introduced in 8.4.1 due to change in installer version.
  • Fix: Services: Fixed socket creation problem on XP, Vista and Windows 7 pre SP1 introduced in 8.5.0.

New in WinGate 8.5.0 Build 4837 (Sep 24, 2015)

  • Fix: Installer: Problem installing VS2010 runtime and WinGate network driver on Windows 10 introduced in 8.4.1 due to change in installer version.
  • Fix: WWW Proxy: Fixed socket handle leak if connection to server failed but client connection re-used.
  • Fix: WWW Proxy: Fixed validation of Expects header
  • Fix: WinGate Management: Improved startup time
  • Fix: SMTP Server: issue deleting SMTP service
  • Fix: WinGate engine: issue stopping WinGate.
  • Fix: Policy: Fixed case-sensitivity issue when attaching policies to events if the event source name changed case.
  • Fix: Policy: Fixed deadlock in flow-chart policy UI.
  • Fix: Web Access Control: Fixed issue when you create and rename a new block page it would set the new content to the initial name of the block page not the new one.
  • Fix: JScript: several fixes and performance improvement in JScript policy item and event handler
  • Fix: Updater: Manifest update installer to run elevated since it needs to stop and start services even when run from WinGate Management in non-elevated login.
  • Fix: Proxy auth settings: when AD UDB provider fails to initialise on first try, IMAP, POP3, SMTP services and WWW proxy would not get list of available auth methods.
  • Fix: Service: Prevent creation of services whose names differ only by case.
  • Add: WWW Proxy: added support for custom error response pages (in WinGate\HTTPCustomResponses folder).
  • Add: Services: services attempt connections to all IP addresses for a hostname instead of just the first (this can also provide failover for reverse proxying).
  • Add: Bindings: added TLS minimum version setting for Binding policies
  • Add: Remote Control: Added Login event to Remote Control Service
  • Add: TLS: Added explicit control for minimum TLS version (SSLv3, TLS 1.0, TLS 1.1 or TLS 1.2) for bindings and outbound connections.
  • Add: TLS: Added support for ECDHE encryption to TLS, so browsers connecting to TLS-secured WinGate services no longer report obsolete encryption
  • Add: Schema: Added string member functions to base class for strings (Text).
  • Add: Resource Tracking: added support for tracking memory use (disabled by default)
  • Change: Web Access Rules: Don't block SSL tunnel creation if using https inspection, instead block tunnelled https requests. This allows display of block pages for https if using https inspection.
  • Change: WinGate engine: remove dependency on RasDlg.dll
  • Change: Packages: Various changes to packaging system.
  • Change: TLS: Deprecated support for SSLv2 connections.
  • Change: IPtoCountry: now retrieves registrar files by HTTP instead of FTP.
  • Change: IpToCountry: improved parsing to minimise memory heap access.
  • Change: MACInfo: improved parsing to minimise memory heap access.
  • Change: Unicode: Removed double buffering in unicode to ANSI conversion to improve performance
  • Change: WWW Proxy: improved memory performance of http header processing
  • Change: Services Panel: use colour to highlight problem conditions and stopped services
  • Change: WinGate API: incremented API version due to changes in Logging, Services, and Events APIs.
  • Change: Driver: Installer now sets driver max buffers setting to 4096 if it was less.

New in WinGate 8.4.2 Build 4814 (Jul 23, 2015)

  • Fix: IMAP: case-sensitivity bug in SEARCH tokens introduced in 8.4

New in WinGate 8.4.1 Build 4813 (Jul 21, 2015)

  • Fix: SSL / TLS: Increase timeout for SSL/TLS handshake to cover for slow clients and certificate revokation checks.
  • Fix: Localization: Was not loading localized strings for package modules
  • Fix: Installer: Problem setting permissions on ProgramData\Qbik folder could take too long if the HTTP cache volume was in there. Problem introduced in 8.4
  • Fix: WinGate Updates: crash in WinGateUpdates.exe relating to logging settings in registry
  • Change: Installer: Updated to SetupFactory 9.5

New in WinGate 8.4.0 Build 4807 (Jul 15, 2015)

  • Fix: Credential Rules: Problem looking up rules if there were mixed rules in the set (match on IP vs Computername etc) meant some rules would stop working
  • Fix: Certificates: Problem importing certificates from pfx or PEM which contain a certificate chain.
  • Fix: Certificates: Problem with certificate generation (lack of keyUsage attribute) preventing recent versions of Firefox from accepting signer certificate in HTTPS inspection
  • Fix: Installer: Set permissions on program data folder to allow non-elevated users of WinGate Management to synchronise modules with a remote WinGate engine
  • Fix: TLS/SSL: Enforce timeouts during TLS negotiation.
  • Fix: HTTP Caching: Fix logging
  • Fix: Config utility: manifest application to require elevation so it can write to necessary registry locations.
  • Fix: IMAP server: improper quoting in mailbox name in untagged STATUS response caused some mail clients to view some folders as empty
  • Fix: IMAP server: was incorrectly setting \Seen flag on a message when UID FETCH also asked for UID in response data.
  • Fix: IMAP server: incorrect handling of nested OR search specifications which didn't use parentheses
  • Fix: IMAP server: RENAME on folder which has child folders was not adjusting path of child folders or their subscriptions
  • Fix: Licensing: Crash bug activating a license for a product that was not loaded / installed.
  • Add: WinGate Login: Now deploy WinGate Login client (QbikAuth.exe) to utilities folder, can use this to log into WinGate Remote Control Service.
  • Add: Remote Control: Added feature for what to do to credentials upon WinGate Login client disconnecting.
  • Add: WinGate Updates: Added minidump generation to WinGateUpdates.exe to generate debug information if it crashes.
  • Add: IMAP server: Added support for SORT and ESORT extensions (including DisplayFrom and DisplayTo sort extensions)
  • Add: IMAP server: Added support for XLIST extension
  • Add: IMAP server: Added support for METADATA extension including /private/specialuse to set special use attributes on a folder
  • Add: IMAP server: Added support for CREATE-SPECIAL-USE extension to enable setting of folder use on creation as per RFC 6154
  • Add: IMAP Server: report folder special use on LIST command response as per RFC 6154
  • Change: Remote Control: added support to distinguish WinGate Management from WinGate Login client.
  • Change: Socket notifications: Internal change to improve performance of notifications on socket connections
  • Change: WWW Proxy: Add support for pass-through authentication to upstream proxy
  • Change: OpenSSL: update OpenSSL library to latest version (1.0.2a)
  • Change: SSL/TLS: support session resumption for client peers with TLS tickets (TLS-based services only)
  • Change: ZLib: update ZLib library to latest version (1.2.8)
  • Change: SDK: several changes to WinGate SDK/API
  • Change: Licensing: Added support for SDK licensing.
  • Change: Activity: Changed layout of machine properties dialog to allow copy to clipboard.
  • Change: Certificates: changes to certification generation wizard, can now set basicConstraints, and keyUsage attributes on generation. Encryption of private key now mandatory.
  • Change: IMAP Server: now automatically subscribe to new folders. This allows folders created by clients which do not use subscriptions to be visible to clients that do.

New in WinGate 8.3.4 Build 4786 (May 19, 2015)

  • Fix: WWW Proxy: Problem with some requests being hung relating to Web Access Control blocking of requests.
  • Fix: Credential rules: Prevent service starting prior to credential rule loading, was causing some rules to not apply on startup.
  • Added: WinGate Management: added option to control whether to navigate to the last location on new connection to a server or not.

New in WinGate 8.3.3 Build 4784 (May 7, 2015)

  • Fix: WWW Proxy: residual problem suppressing count of intermediate auth challenge handshake requests for session request limiting
  • Fix: WWW Proxy: When operating as a reverse proxy filters were being notified twice on receipt of request. This for example would result in double evaluation of web access rules
  • Fix: Help File: was not launching help file on F1 or help links. Problem introduced in version 8.2.2
  • Fix: Credential rules: Was not re-evaluating credential rules when a machine was reactivated. This could cause assumed users credentials to stop working.
  • Fix: MAC Info: problem parsing new OUI file format meant no records.
  • Change: DNS Client: Added information about the query in log warnings about server responses to assist in identifying upstream DNS issues.
  • Change: HTTPS Inspection: added support for SNI extension fixes problems with multi-hosted SSL sites using different certs based on server name indication.
  • Change: Certificates: changed signing algorithm to SHA256
  • Change: WWW Session Schema: Added access to LimitRequestsPerConnection and MaxRequestsPerConnection so these can be set in policy.

New in WinGate 8.3.2 Build 4773 (Apr 8, 2015)

  • Fix: Logging: not persisting changes to logged fields in W3C usage logging introduced in 8.3.0
  • Fix: Policy: Bug introduced in 8.3.0: crash in WinGate management when closing the call policy item in a flow-chart policy
  • Fix: Dashboard: Bug introduced in 8.3.0: WinGate Management would become unresponsive if you delete a dashboard item.
  • Fix: HTTP Filters: occasional crash when a filter returns its own content to a request (e.g. block pages etc)
  • Fix: Web Access Control Rules: crash when dragging and dropping rules if you drop one below default rule
  • Fix: Web Access Control Rules: UI glitch when adding category or site to a rule would not show until dialog was reopened.
  • Fix: Web Access Control Rules: no longer do implicit auth (if user unknown and not matching) on re-authentication rules, only explicit (where it matches the Who tab).
  • Fix: Web Access Control Rules: fixed hit count on auth rules.
  • Fix: Schema script: crash when trying to use uninitialised variables as a result in some scripts or policy items.
  • Fix: Email UI: crash in WinGate Management caused by race condition between creation of email panel, and unsolicited queue updates
  • Fix: WinGate users and groups: NTLM 1 byte buffer overrun problem when logging at debug level
  • Change: Web Access Rules: Performance improvements to rule evaluation.
  • Change: Web Access Rules: Added performance tracking (time spent in each rule for hit and miss cases) so cost of a rule becomes visible.
  • Change: WWW Proxy: Diagnostic Logging now logs requests associated with auth handshaking.
  • Change: WWW Proxy: no longer count intermediate auth challenge handshake requests for session request limiting (limiting to 1 would break NTLM).
  • Change: Notifications: Added Last Change column to notifications panel, changed the way UI updates are handled.

New in WinGate 8.3.1 Build 4769 (Mar 12, 2015)

  • Fix: SSL: Problem with changed start order of modules revealed a problem with initialisation of OpenSSL that could cause mail delivery to fail when using STARTTLS
  • Fix: POP3 Collection: Fixed issue causing problems connecting to pop3s servers on upgrade.
  • Fix: POP3 Collection: Was not honouring setting for SSL/TLS version in the case of STLS-negotiated SSL/TLS layer
  • Fix: SMTP Delivery: Was not honouring setting for SSL/TLS version in the case of STARTTLS-negotiated SSL/TLS layer
  • Fix: Uninstaller: would hang forever waiting for WinGate service to stop on a WinGate Management only installation
  • Change: Certificate Importing: Prevent importing certificates that do not have a private key.
  • Change: SSL/TLS: Added logging for diagnosing issues with SSL/TLS negotiation and certificates

New in WinGate 8.3.0 Build 4764 (Mar 5, 2015)

  • Fix: DHCP: Fixed issue where permissions were not registered if User Database started late (e.g AD server not available on WinGate start), so DHCP panel not displayed.
  • Fix: User database: Fixed issue where permissions were not registered if User Database started late (e.g AD server not available on WinGate start), so Users and Groups panel not displayed.
  • Fix: Web Proxy: Fixed occasional buffer leak
  • Fix: Logging: Fixed crash in output buffering when writing very large fields
  • Fix: VPN: Fixed crash when using User object in event handler for VPN connection event.
  • Fix: IMAP: Fixed issue when command contains empty string literal.
  • Fix: Config utility: Problem with utility reporting that WinGate was not installed.
  • Fix: VPN: problem exporting and importing VPN config files. Was reported fixed in 8.0.2, but still had an issue on some OSes.
  • Fix: Policy: fixed a parse error in a default (sample) policy
  • Fix: Engine: Fix issue preventing windows from reporting correct windows version on Windows 8.1 and Windows 10
  • Fix: SSL: now loads entire chain of certificates (if included) from certificate PEM files
  • Fix: IP to Country: update to new format and URLs for access to IP assignment record data.
  • Fix: IMAP: Crash if length information in index file different to file length on disk.
  • Fix: File Copying: deprecated OS CopyFile calls as they are not reliable on 2k12. Now copy file by reading and writing file content. Affects mainly mail (local delivery and mailbox moving).
  • Fix: Mailboxes: bug with tooltips when working with more than 1 mail volume would hang WinGate Management.
  • Fix: Mailboxes: fixed issue where merging mailboxes would fail if a source file did not exist (now skips).
  • Fix: Web Admin: Fixed issue preventing Email tab from displaying
  • Fix: HTTP Cache: Couldn't save rule with only "do not cache" option selected
  • Fix: Web Access Control: Checkbox values in "what" tab of rule were not honoured (always checked).
  • Fix: Users and Groups: Allow access in event processing to Full Name, and Account Name of User object, when authenticated user is a domain computer account.
  • Fix: WinGate Update: issues relating to certificate revocation check failing which prevented update checks.
  • Fix: DHCP Panel: fixed occasional crash when updating lease information
  • Fix: Manual Classifier: improved speed of lookups.
  • Fix: POP3 Proxy and SMTP receiver: buffer overwrite problem when receiving large buffers from client.
  • Fix: Timeline: Crash when changing timeline settings if Database failed to initialise
  • Added: SSL/TLS: can now specify allowable SSL/TLS versions for back-end connections in reverse proxy, and/or client connections (mail delivery and POP3 collection).
  • Change: Mailboxes: now show number of folders and messages in mailbox panel
  • Change: SDK: changed interface registration to auto-binding
  • Change: Permissions: Added default administrative group to root object so that by default administrators can see everything regardless of who created it (e.g. policies/dashboards etc).
  • Change: Permissions: Added proper display handling for checking / unchecking full control option.
  • Change: IMAP: performance improvements in mailbox indices particularly for network-based mail volumes. Greatly speeds up expunges (mail filtering).
  • Change: Policy: Expression evaluator item dialog now resizable and uses larger courier font to assist editing script.

New in WinGate 8.2.5 Build 4733 (Sep 5, 2014)

  • Fix: Permissions: Fixed issue which prevented display of permissions panel in WinGate Management, introduced in 8.2.2.
  • Fix: User database: memory leak relating to user objects.
  • Fix: Settings utility: incorrectly reported that WinGate was not installed
  • Fix: SQLite ODBC driver: fixed issue with converting floating point numbers using current locale.
  • Change: User database: changed indexing for object handles to make it safe to test for handle validity.

New in WinGate 8.2.4 Build 4727 (Aug 26, 2014)

  • Fix: Manual Classifier: Fixed issue where button didn't work selecting categories, introduced in 8.2.2.
  • New: WinGate Management: Added option to enable/disable reverse DNS lookups when clients connect to WinGate.

New in WinGate 8.2.3 Build 4725 (Aug 25, 2014)

  • Fix: WinGate Management: Fixed license checking issue affecting access to Some policy items (DNS decision and connection control), and Command Shell introduced in 8.2.4.

New in WinGate 8.2.2 Build 4724 (Aug 25, 2014)

  • Fix: WinGate Management: Fixed issue where AD user database starts late (AD controller not available when WinGate starts). Some panels were not showing properly in WinGate Management, and didn't have permissions registered properly.
  • Fix: WinGate: Fixed another issue relating to late start of AD user database - machines started with no credentials (not even unknown) will now disappear immediately when all traffic is disconnected. Also will keep trying to update credentials until the AD provider has started.
  • Fix: Web Access Control: Display of option for where column was incorrectly showing All IPs except even when the logic was for specified IPs.
  • Change: FTP proxy: now binds to same interface as control connection is on when making data connections. Allows for case when multiple IPs on an interface.
  • Fix: WinGate Installer: properly sets file attributes on HTML block pages.
  • Fix: WinGate: fixed problem when stopping WinGate service while Kaspersky AV was starting up.
  • Fix: Policy: Fixed problem with drag and drop incorrectly moving rather than copying items between WinGate Management instances or different policies.
  • Fix: HTTP Cache: fixed problem cleaning up folders in deleted volumes.
  • Fix: Web Access Control: fixed problem with remembering selection of block page.
  • Fix: Web Access Control: fixed problem where default block page was installed read only.
  • Fix: VPN: fixed problem where exporting a VPN config file could cause WinGate Management to crash.
  • Fix: Update Checking: prevent proxy auto-detect for update checking when specified to not use a proxy.
  • Change: Licensing: added developer mode flag option to licenses to support people developing plugins using WinGate SDK
  • New: Sessions: Added GetData and SetData schema so event handlers / policy can store and retrieve user data between events, and log it in usage logging.
  • New: TCP Mappings: Added filtering interface

New in WinGate 8.2.1 Build 4711 (Apr 28, 2014)

  • Fix: Logging: crash when logging some strings containing mixed ANSI and unicode strings, e.g. embedded Japanese.
  • Fix: Logging: fix timer-based flushing of outstanding buffered log data.
  • Fix: FTP proxy: FTP commands are now treated correctly as case-insensitive.

New in WinGate 8.2.0 Build 4707 (Apr 23, 2014)

  • Fix: WinGate Management: crash when closing WinGate management during failed connection attempt
  • Change: Web Access Rules: can now drag / drop to re-order web access rules
  • Change: Web Access Rules: can now specify a block page per rule
  • Change: Web Access Rules: block pages now stored under AppData folder instead of under Program Files
  • Change: Web Access Rules: now uses combo box to choose between All, All below, or all except below in each of "Who", "where" and "What" tabs
  • Change: Web Access Rules: "where" and "what" can now check against global data lists
  • Change: DNS: new strategy when dealing with SRVFAIL results from DNS servers. Now tries one other server if there is one.
  • Change: Mail delivery: new special case handling for SRVFAIL responses to MX lookups, now fails over to A record processing.
  • Change: Logging: Major performance improvements to logging, including reduction in data conversion, double-buffering, and file IO.
  • Change: Logging: Added feature to allow buffering of log data before writing it to disk to further reduce file IO. Greatly improves performance of logging to a SAN
  • Change: Logging: Added data counters to track lines logged and bytes logged.
  • Change: Module loading: changed package manager logging to log module load failures
  • Change: Module loading: explicitly report version problems with packages in UI
  • Change: Module loading: overhauled synching dialog. Now wraps text, shows errors more clearly.
  • Change: BGP Service: Added BGP server. This should be considered experimental.
  • Change: Framework: updated to Codejock v 16.3.1 UI framework

New in WinGate 8.1.0 Build 4655 (Feb 28, 2014)

  • Fix: POP3 Server: debug logging of POP3 commands could cause crash if command contained certain characters.
  • Fix: WWW proxy: issue with reverse proxy checking for path exploits effectively blocking access to back-end URLs containing certain character sequences
  • Fix: AD User Database: crash problem when authing to accounts where AD object is missing required fields. Now logs missing fields and fails auth.
  • Fix: Timeline: Deadlock could occur in some cases when multiple WinGate Management accessing Timeline using MDB or Database concurrency set to 1.
  • Fix: Manual classifier: was not honoring permission for modification of manual classifications.
  • Fix: SMTP Delivery: occasional crash due to race condition when timing out SMTP delivery sessions.
  • Fix: Web Admin: occasional crash when accessing email tab when using AD user database
  • Change: Timeline: changed default database to SQLite from MDB. MDB just not up to the task for medium - large sites.
  • Change: Web Activity: rules can now specify which proxies the rule applies to
  • Change: HTTP Cache: rules can now specify which proxies the rule applies to
  • Change: Dashboards: no longer limit number of dashboards by license.
  • Change: import/export utility: can now import configuration from command line.
  • Change: Data lists: selection dialog now shows current selection
  • Change: Code Signing Cert: new (updated) Qbik Code Signing cert used for WinGate modules.

New in WinGate 8.0.5 Build 4634 (Dec 5, 2013)

  • Fix: HTTP proxy: malformed request reported when POST request challenged for authentication.
  • Fix: DNS client: crash relating to timing out delegated requests
  • Fix: Timeline: was not showing all activity blocks in some cases.

New in WinGate 8.0.4 Build 4629 (Nov 5, 2013)

  • Fix: HTTP proxy: problem with tunneled requests (https) when processing pended data on closing connection.
  • Fix: Web Activity: fixed crash when trying to log database initialisation failure
  • Fix: Notifications: fixed WinGate Management crash when notifications occur with notifications panel not visible.
  • Fix: Timeline: Fix issue where UI would not update value of "enable activity tracking" properly
  • Change: Data monitoring: Added option to reset derived values
  • New: Configuration utility: Added utility to export / import configuration (handles 32/64 bit issues as well).

New in WinGate 8.0.3 Build 4625 (Oct 18, 2013)

  • Fix: Mail delivery: problem with retrying if mail rejected temporarily after DATA command
  • Fix: Mail delivery: problem with bounce messages.
  • Fix: POP3 Server: buffer overflow vulnerability fixed.
  • Fix: SMTP Client: Fixed crash which occured if session was timed out whilst negotiating SSL connection with STARTTLS.
  • Fix: HTTP proxy: problem with SSL inspection if connecting through upstream proxy
  • Fix: DNS client: fixed problem for delegate requests to different domains.
  • Fix: Activity Screen: crash when right-clicking user icon on multiple user machine.
  • Change: Licensing: connections to SMTP server no longer consume a license
  • Change: Schema: Added InRange member function to IP Address object

New in WinGate 8.0.2 Build 4614 (Sep 23, 2013)

  • Fix: WWW proxy: problem with chunked POST requests.
  • Fix: WWW proxy: problem with FTP URLs.
  • Fix: POP3 Proxy: crash problem when using Kaspersky AV for WinGate and client issues STLS command.
  • Fix: Updates Installer: Fixed issue with improper handling of silent installs in some upgrade scenarios
  • Fix: WINS service: crash when parsing NetBIOS broadcast packets containing no IP address records
  • Fix: SMTP Client and POP3 client: issue when talking to older servers that don't support TLS
  • Fix: VPN: problem exporting and importing VPN config files
  • Fix: Notifications: memory leak when closing an incident that wasn't currently open.
  • Fix: Dashboards: dialog resize bug in dialog for choosing data source for dashboard items.

New in WinGate 8.0.1 Build 4608 (Aug 20, 2013)

  • Fix: HTTPS inspection: Crash when signer certificate created without encrypted private key
  • Fix: HTTPS inspection: Problem selecting correct signing certificate (due to sorting in combo box).
  • Fix: Timeline: Problem initialising timeline for some versions of MySQL ODBC driver
  • Fix: Timeline: Problem saving new config if database not initialised.
  • Fix: Timeline: problem in user interface causing WinGate Management to crash on exit.
  • Fix: FTP Proxy: Debug logging problem with server responses
  • Fix: Updates Installer: Updated to fixed WinGate 8 installer.

New in WinGate 8.0.0 Build 4601 (Jul 31, 2013)

  • Web-related:
  • New: HTTPS inspection support added (Enterprise licenses only)
  • New: HTTP cache: now uses in-memory / file-backed indexes - no more SQL. Result is much faster cache.
  • New: Web Access Control: added rule result of "re-authenticate". This can be used to force change of user.
  • New: Web Access control: added option to track different categories for same site separately or not
  • New: can now intercept port 443 to proxy (normal non-https binding). If SSL inspection is enabled, it can be inspected, else it is tunneled.
  • New: now reads mime types for file extensions from OS when serving.
  • Change: buffer handling, removing double-buffering resulting in much improved throughput
  • Change: now maintains connection to upstream proxy for SOCKS as well as Tunneled upstream connections.
  • Change: usage logs time taken now in milliseconds
  • Change: added option to disconnect in reject policy response
  • Fix: fixed issue with occasional site hangs, and broken images
  • Fix: Web serving: fixed problem improperly blocking URLs containing ':' character - affects reverse proxy as well.
  • Fix: Web proxy: X-Forwarded-For was not being added for upstream connections via proxy, even if selected
  • New: Web proxy: Added support for adding X-Forwarded-For for reverse proxy requests
  • Email services:
  • New: Added support for client certificates and SASL EXTERNAL auth mechanism throughout services and clients.
  • New: Added support to check user database for incoming email addresses to see whether to accept mail or not. Allows integration with Active directory email addresses.
  • New: SMTP Delivery: can now override FQDN in known server
  • New: pushes a notification if a mailbox is over quota when delivering or accepting mail.
  • New: can now install multiple SMTP servers.
  • New: SMTP Server: Added option to require authentication.
  • New: SMTP Server: Added option to override default FQDN
  • Change: Now Checks volume access, writability etc etc. Useful for network shared volumes
  • Change: can now create volumes regardless of license. Whether you can use anything other than default volume is a matter of license. This allows you to create a new volume to migrate to without having an enterprise license.
  • Change: now checks storage type of mail volumes disallowing invalid media, such as CDROM or RAMDisk
  • Change: can now create a volume in a non-empty folder (which allows attaching a volume to a previous volume)
  • Change: SMTP Delivery: now supports MX which resolves to multiple A records.
  • Change: SMTP Server: extended schema of SMTP Session to allow setting of FQDN and whether to require auth in policy.
  • Change: SMTP delivery: no longer (invalidly) tries backup MX servers if a recipient is permanently rejected
  • Change: IMAP: now better handles temporarily unavailable mailboxes (e.g. those on network shares)
  • Fix: resolved some issues with migration of ORDB servers from WG6
  • Fix: fixed bug in POP3 Server when client using SSL / STLS in some cases session would hang
  • Fix: fixed bug in IMAP search when no search sequence specified.
  • Fix: Fixed bug saving mailbox settings.
  • Miscellaneous:
  • New: TCP mapping proxy: supports client certificates on incoming and outbound connections
  • New: Certificates: can now import certificates from pfx file.
  • New: Certificates: WinGate-generated self-signed certs now add Basic constraints and subject Key ID, necessary for signing other certs.
  • New: Credential rules, now UI validates entering IP or MAC address - makes entering MAC addresses more lenient.
  • New: Activity: added expand / collapse all
  • New: Activity: pause activity updates now shuts off updates from server, thereby saving bandwidth.
  • New: WinGate NAT: Added Disconnect event
  • New: Notifications: added logging support. Now logs reports and events to file.
  • Change: changed development environment to MS Visual Studio 2010
  • Change: AD Connector: now control cache lifetime of objects retrieved from active directory. Objects will now be re-fetched after 1min, to reflect changes in account settings etc.
  • Change: AD Connector: now displays email address of users and groups.
  • Change: AD Connector: better handling if AD controller is unavailable when WinGate starts (reports errors to UI, retries initialisation).
  • Change: DNS Client: Can now specify order of servers.
  • Change: DNS Client: Changed deprecation strategy when servers unavailable, now just demote the server, rather than ceasing use of it altogether.
  • Change: Credential rules: Now check for conflicts when creating a new rule.
  • : Change: SSL Support: updated OpenSSL to latest 0.9.8y version
  • Change: Post-mortem logging now uses DebugHelp.dll to create minidump files, rather than our old custom post mortem log files. These are also now generated always instead of off by default.
  • Change: Logging: changed log level for various informational events from debug to Info (e.g. proxy requests, and traffic). Means you no longer need to log all debug messages to get requests and traffic.
  • Change: Dashboards: now supports undo/redo and Save / Cancel for editing.
  • Change: Data lists: speed improvements to shared data list lookups used by Policy, and Manual classifier.
  • Fix: Credential rules, fixed locking issue on updating credential rules.
  • Fix: Timeline: now warns on MDB over size, and enforces auto-purging.
  • Fix: Timeline: now deals with temporary inaccessibility of database.
  • Fix: Data: fixed several locking issues
  • Fix: Engine startup: problem on some systems with disabled Ras Manager service where WinGate would crash on startup after reboot.
  • Fix: Lua Scripts: fixed issue when calling function with no parameters.
  • Fix: Policy: fixed problem with imported policies relating to 32 bit values imported as signed vs unsigned data.
  • Fix: AD UDB: issue where empty search results would return incorrect error to client code.
  • Fix: Web Activity: deadlock editing web access control rules while under load.
  • Fix: Timeline: fixed deadlock in timeline when using MDB and retrieving large datasets.
  • Fix: Network Driver: fixed deadlock when disabling / enabling USB-based adapters.

New in WinGate 7.3.1 Build 3535 (May 16, 2013)

  • Change: Debugging: now generates minidump files for better analysis of top level exceptions.
  • Change: Updates: added support for hyperlinks to launch browser (e.g. for links to release notes)
  • Change: Installer: Now adds rule to windows firewall for WinGate service.
  • Fix: IMAP: Search without range or UID range specifier would fail
  • Fix: Dialer: Failure to start RasMan service in time could cause WinGate engine to crash on startup.
  • Fix: WWW proxy: problem downloading resources greater than 2GB
  • Fix: Logging: Support for logging 64bit values to usage logs, changed log types for HTTP download size, mail message size etc to 64 bit capable
  • Fix: HTTP Cache: problem relating to parsing of ETag could cause some server responses to not be correctly processed.
  • Fix: WinGate Management: Help panel should no longer require adding site to Internet Explorer trusted sites.
  • Fix: Data global lists: WinGate crash where lists linked to a file couldn't access the file

New in WinGate 7.3.0 Build 3506 (Mar 7, 2013)

  • New: Reverse proxy: can now specify to make back-end connection with SSL and/or client certificate
  • New: in web serving sites matching host-names can now specify to match on SSL or not.
  • New: Service events: Added Binding object to events for TCP-based services (WWW, FTP, SMTP, POP3, IMAP, Remote Control etc). This allows setting local SSL settings per connection
  • New: server requests, reverse proxy etc can now make SSL connections, with client certificates. These settings can also be changed in policy per request.
  • New: Users and Groups. Now supports filtering by domain.
  • New: TCP mapping proxy, published more members for session object, to specify connection control, (e.g. client cert, use SSL, bypass proxy etc).
  • Change: Policy: policy flow-chart now shows icon of type of item in the worksheet.
  • Change: POP3 collection and SMTP delivery now avoid DNS lookup if connecting through upstream proxy that connects by servername.
  • Change: POP3 collection and SMTP delivery now support use of client certificates when connecting to a server
  • Change: Connections: moved processing of ClientConnect event prior to establishment of SSL, based on binding, so policy can override this (e.g. choose cert per client IP etc)
  • Change: Network connections: Added adapter ID to network adapter dialog in Network connections panel. Also ability to copy data to clipboard. This is useful so you can compare adapter ID with Binding member in policy.
  • Fix: Persistence: Fixed buffer overflow bug in persistence classes.
  • Fix: Notifications: Fixed deadlock in Notification component if logging fails due to access issues to log folder.
  • Fix: Scripting: LuaScript and JScript policy items now verify that the function prototype matches the event data. This was necessary due to addition of Binding object to event data.
  • Fix: fixed problem with reverse proxy for https sites where back-end connection was not SSL.
  • Fix: fixed occasional deadlock when using Kaspersky AntiVirus for WinGate
  • Fix: SSL Support: fixed issue closing SSL sockets.

New in WinGate 7.2.10 Build 3486 (Feb 5, 2013)

  • Fix: WWW proxy. Now supports HTTP messages with content length > 4GB
  • Fix: WWW proxy. Improved performance of WWW proxy as a web server, no longer sends headers and response line in separate packet to initial payload.
  • Fix: TCP Mapping proxy. Fixed problem introduced in 7.2.9 where intercepted connections matched specific mappings, would cause connection to fail.
  • Fix: HTTP Cache. Fixed problem with improper removal of cache entries when a server re-uses same ETag for multiple resources.
  • Change: Browse for Folder dialog - usability improvements, can now select the folder you're viewing, rather than only sub-folders.
  • Change: Activity: Pausing activity updates now stops updates at source, thereby reducing load and bandwidth requirements.
  • Change: Activity: efficiency improvements when no WinGate Management is connected.

New in WinGate 7.2.9 Build 3480 (Jan 11, 2013)

  • New: TCP Mapping proxy - now pushes an event on connection failure so you can notify / retry a failover server.
  • Fix: Data Lists - problem inserting new string items would cause WinGate Management crash.
  • Fix: Data items - problem with sample Restricted Sites list prevented editing.

New in WinGate 7.2.8 Build 3469 (Nov 27, 2012)

  • New: DHCP, added WPAD option, so can do WPAD without enterprise license.
  • New: SOCKS server now supports SOCKS 4a.
  • Fix: POP3 proxy, issue with passwords containing % symbol
  • Fix: WWW Proxy: issue with lost buffered client data when tunneling FTP through WWW proxy.
  • Fix: Categories: issue with categories containing non-text characters (caused problems when trying to create web access rules with PureSight categories such as "Children's").
  • Fix: Schema script runtime, fixed parsing problem with certain script constructs.
  • Fix: WinGate Management, fixed issue relating to trying to update help pane topic when the help pane wasn't created.
  • Fix: Permissions, buffer alignment problem when storing and reading permissions objects to registry
  • Fix: WinGate Management, fixed lockup on services panel when changing service status

New in WinGate 7.2.7 Build 3453 (Aug 17, 2012)

  • Fix: TCP/UDP mapping proxies. Broken storage of default mapping configuration introduced in 7.2.4

New in WinGate 7.2.6 Build 3449 (Aug 2, 2012)

  • Fix: Log detail pane, was not scrolling to selected / searched item
  • Fix: User interface: problems related to new CodeJock UI framework, some property grid items would not notify on changed values - this affected settings in Dashboard, web server (in WWW proxy), and in Kaspersky AV scanning settings.
  • Fix: WinGate Update: issues relating to certificate revocation check failing which prevented update checks.

New in WinGate 7.2.5 Build 3447 (Jul 31, 2012)

  • Fix: WinGate UDB, issue when host computer is renamed (causes Administrator to lose group membership and password)
  • Fix: WinGate Management: issue where WinGate management would crash if the WinGate service was disconnected while WinGate management had the tasks, navigation, or help panels undocked.
  • Fix: WinGate Management: issue where services panel would lock up on service control (start/stop). Issue was introduced by changes to UI framework DLL in 7.2.4.
  • Fix: Mail out of office reply, now honours X-Auto-Response-Suppress, which will prevent looping auto-replies to WinGate, Exchange server and other compliant servers.
  • Change: SMTPMessage object now has access to other headers than just to, from and subject in script.
  • Change: WinGate Management: added info column to services panel showing port numbers for services.

New in WinGate 7.2.4 Build 3445 (Jul 26, 2012)

  • Fix: Service migration, several issues migrating TCP and UDP mapping services from WinGate 6.
  • Fix: Service migration, issues migrating binding information from pre WinGate 6 versions.
  • Fix: Licensing panel, issue with flashing red light not stopping when resolving certain license issues.

New in WinGate 7.2.3 Build 3441 (Jul 23, 2012)

  • Fix: DNS Client, under heavy load some DNS requests would never complete.
  • Fix: SOCKS fix to UDP associate where forwarded UDP buffers specify destination by name (rather than IP). Affected Bloomberg client.
  • Fix: Mail, issue where could not move mailbox from one volume to another where both volumes were on different local disks.
  • Fix: POP3 retrieval: crash on retrieval of some messages where received command response contained nagled message content.
  • Fix: HTTP: issue with policy access setting request header block.
  • Fix: HTTP Caching, fix to table creation code affecting some databases.
  • Change: Packages manager. Now stores synchronised packages in Application data folder. Avoids issues with access to program files folder.
  • Change: Languages files are now also in application data folder
  • Change: Updated CodeJock library
  • Change: MAIL, now handles messages over 4GB for IMAP, POP3 and SMTP

New in WinGate 7.2.2 Build 3416 (May 31, 2012)

  • New: Categories: Added support for selecting multiple categories at once when creating web access rules.
  • New: Credentials: Change default credentials downgrade option to do nothing rather than downgrade to assumed
  • New: Credentials: Added option to credentials rule for assumed user to be deemed authenticated.
  • New: Data: Added support in Data file lists for unicode files with BOMs.
  • New: VPN: Added User object to events for Hosted VPNs
  • NeW: VPN: Show username on VPN panel for Nodes connected to hosted VPN
  • New: WinGate Management: Added progress dialog and error reporting for synchronisation of packages from engine
  • New: WinGate Management: Modules panel now prompts to restart WinGate if module startup settings are changed
  • New: API: Extended Network Service API for component-based network services.
  • New: IMAP: Increased maximum command buffer size for IMAP server.
  • New: Users and Groups: Added support for user database searches to search for multiple users at once, to reduce search load for Web access rules panel, Permissions, and Policy User/Group Check items.
  • New: Web Access Control: Added classification result to Session schema, so it is now available in policy / event processors
  • New: Web Access Control: Optimisation of rule evaluation if "who" contains the "Everyone" security principal.
  • New: Policy: Added Event type column to show compatibility of policy
  • New: Policy: Now shows policy as enabled if it is enabled regardless of whether it is connected to an event or not.
  • New: FTP Proxy: now supports authentication to proxy, using USER/PASS. Can access settings also in ClientConnect policy to vary by client.
  • New: FTP Proxy: now supports OPEN command for FTP client to specify which site to connect to
  • New: FTP Proxy: Added ConnectToServer event for access control to servers.
  • New: Data: File-backed lists now optimised for entries which do not contain wild-card characters. Improves lookup speed immensely.
  • New: RIP: changed default setting for RIP listener to off. Saves surprises when there are routers on your LAN broadcasting RIP and you aren't using VPN.
  • Fix: Web Access Control: issue where auth challenge would not be sent if user was assumed.
  • Fix: Web Access Control: issue in web access control rule creation wizard when back button pressed.
  • Fix: WinGate Management: issue when stored layout gets corrupted, causing WinGate Management to crash
  • Fix: WinGate Management: Fixed bug relating to closing of task panel
  • Fix: WinGate Management: Removed Help button from Service dialog (uses F1 help instead)
  • Fix: WinGate Management: wired up help topics for service dialogs
  • Fix: Mail: removed embedded tab characters in debug logging for SMTP delivery and POP3 collection services
  • Fix: Logging: skip embedded tabs when searching in last column
  • Fix: Licensing: fixed issue in license information panel when license name contained invalid XML characters (e.g. ampersands)
  • Fix: Timeline: Fixed bug in timeline relating to closing of blocks when using a filtered view.
  • Fix: Policy: Fixed missing resources in context menu for column headers.
  • Fix: Policy: SQL Item now returns an error on use if license does not permit use of it (rather than returning true).
  • Fix: Licensing: invalid license feature aggregation when trial Standard WinGate selected and VPN trial activated.
  • Fix: Licensing: not showing expiry dates for subscription licenses in report control (only info pane).

New in WinGate 7.2.0 Build 3409 (May 3, 2012)

  • New: Supports new free license, equivalent to WinGate Standard 3 concurrent users + WinGate VPN Single user license.
  • New: Web access rules, now can match on client IP address.
  • New: Credential rules now can assume computer accounts
  • New: Email, added GSSAPI auth option for IMAP, POP3 and SMTP
  • New: IMAP, support for COMPRESS method, provides significant speed improvements for mobile users
  • New: IMAP, support for buffered output provides better server network performance.
  • New: IMAP, optimised search ALL.
  • New: IMAP, support for IR-SASL to save round trip on login for supporting clients.
  • New: Prevents connections to the Remote Control Service from non-local IPs when there is no user database available
  • New: Component Services API extensions
  • Change: Categories, paths now case-insensitive
  • New: Active Directory Connector, added ability to use registry to override domain name and domain object GUID.
  • Fix: VPN identity dialog, fixed nags on invalid node name or data port.
  • Fix: Management: Crash bug in modules panel when selecting a group row, if grouped by a column.
  • Fix: Email, problem when moving mailboxes between 2 different UNC-path-based mail volumes.
  • Fix: POP3 server, pipelining fix.
  • Fix: Web access rules, stability fix.

New in WinGate 7.1.2 Build 3397 (Apr 2, 2012)

  • New: Web Access Control: Added support for rule matching on websites as well as categories.
  • New: TCP Mapping proxy: Added support for client certificates
  • New: Sessions: Added schema access for ExpiryTime - allows policy to set an expiry time on a session
  • New: Policy: Added support for Expression evaluator to not resolve to boolean result.
  • New: Schema: Added support for Time value to convert to / from string.
  • New: IMAP: Added ESEARCH extension
  • New: IMAP: Added WITHIN extension
  • New: IMAP: Added optional Parameters and disposition information to BODYSTRUCTURE
  • New: IMAP: Extended ID response to include WinGate version
  • New: Services: Added support for component-based network services.
  • New: WinGate Management: Added support for scaling of image on online options and login dialog for different font sizes
  • Fix: Updates: history view entries were empty
  • Fix: SMTP Queue: WinGate mail list processing was broken
  • Fix: IMAP: issue with changes to MODSEQ when MOVE is used
  • Fix: IMAP: issue with ENVELOPE for group addresses
  • Fix: POP3 Proxy: Fixed issue with UIDL responses containing certain characters.

New in WinGate 7.1.0 Build 3389 (Feb 28, 2012)

  • New: support for localization. WinGate can now be translated into any language by anyone using our resource editor, or even notepad.
  • New: added support for multiple selections when choosing user database objects. Eases management of group membership, user/group policy checks, permissions and access control.
  • New: reinstated support for importing users from text file with WinGate users and groups.
  • New: added subject option for auto responder for mail settings, can refer to original subject line.
  • New: Added multiple select in users and groups panel for WinGate users and groups (allows deletion of multiple items at once)
  • Fix: WinGate users and groups: Stability issue with NTLM support.
  • Fix: WinGate users and groups: WinGate Management stability issue displaying group membership when there were a large number of members.
  • Fix: WinGate users and groups: deadlock issue in searches when there were nested groups.
  • Fix: WinGate users and groups: issue relating to conflicting user accounts. Now disable conflicting account and log warning.
  • Fix: WinGate users and groups: In PreAuth event, accessing the Agent value caused an unhandled exception.
  • Fix: Mail auto-responder supports unicode now.
  • Fix: Policy editor toolbox scroll-bar flickering issue. Was preventing editing of some policies, dependent on screen size / layout.
  • Fix: mail queue processing issue when mail was looping, would leave msg file in incoming when rcp moved to dead
  • Fix: SOCKS server issue when SOCKS5 connection request made using IPv4 address type.
  • Fix: issue relating to selection of a tab when opening the edit user dialog (e.g. when editing a user from mailboxes in email).
  • Fix: SMTP Server, issue relating to STARTTLS command when secure connection already established.
  • Fix: set connection backlog for incoming connections to max supported for OS.
  • Fix: VPN panel, issue relating to showing multiple nodes (some would be not shown).
  • Fix: WinGate advanced options issue relating to network buffers and hash entries settings.
  • Fix: IMAP server issue with non-recursive LIST command
  • Fix: IMAP and SMTP servers AUTH empty challenge issue, only affected some clients.
  • Fix: Various fixes to IMAP, including bodystructure with nested RFC822 messages, FETCH partial responses, and ENVELOPE.
  • Fix: Performance improvement to IMAP when fetching a message using multiple FETCH commands.

New in WinGate 7.0.8 Build 3364 (Jan 12, 2012)

  • Fix: license issue with VPN for single user licenses accessing ENS.
  • Fix: layout issue with VPN nodes in VPN panel.
  • Fix: migration issue with legacy VPNs from WinGate 6.
  • Fix: No response sent to browser if auth required but no methods enabled in the proxy.
  • Fix: Unable to edit UDP broadcast relay port settings.
  • Fix: not properly displaying warnings about trying to access license-restricted features.
  • Change: Updated to latest CodeJock user interface framework 15.2.1

New in WinGate 7.0.7 Build 3360 (Jan 6, 2012)

  • Fix: POP3 proxy issue when accessing servers that don't support AUTH command.
  • Fix: Problem with SMTP Received header timestamp timezone information resulting in invalid Received date in Outlook.
  • Fix: Problem forwarding undeliverable mail to gateway.

New in WinGate 7.0.6 Build 3357 (Dec 23, 2011)

  • Fix: HTTP cache volume sizes over 2GB would break cache database initialization.

New in WinGate 7.0.5 Build 3355 (Dec 21, 2011)

  • Fix: various issues using MDB database for cache and timeline.
  • Fix: unicode issues in timeline.

New in WinGate 7.0.4 Build 3352 (Dec 20, 2011)

  • Fix: Stability problem in timeline.
  • Fix: Problem in UNC path handling in cache and email volumes.
  • Fix: Problem using SQL Native client for timeline and cache when regionalisation turned on.
  • Fix: Problem using MS SQL Driver for timeline.
  • Change: Better support for HTTP Cache function when database unavailable.

New in WinGate 7.0.3 Build 3344 (Dec 12, 2011)

  • Fix: Problem with POP3 server when clients retrieve files containing non-standard characters.
  • Fix: Problem in the WWW proxy where it would accept disabled authentication methods.
  • Fix: Changes to command buffer handling in SOCKS service to make it more robust.
  • Change: Added support for GSS-API authentication to SOCKS service. Allows supporting clients to use kerberos authentication when using Active Directory Connector.

New in WinGate 7.0.2 Build 3340 (Dec 5, 2011)

  • Fix: Problem after migrating from old version WinGate users and groups. Caused subsequent new users and groups to have wrong SIDs.
  • Fix: Problem introduced in 7.0.1 relating to launching CGI processes from WWW proxy as a web server.

New in WinGate 7.0.1 Build 3338 (Dec 5, 2011)

  • Fix: IMAP index problem relating to POP3 access causing performance issue
  • Fix: DNS client issue relating to local sites associated with disabled DNS servers
  • Change: to user database selection wizard to improve user experience
  • Change: updated certificate on driver catalog.

New in WinGate 7.0.0 Build 3332 (Dec 5, 2011)

  • Fix: memory and handle leak in manual classifier relating to rules that check data lists
  • Fix: to driver installer, solving occasional problem updating driver on 2k8 server and Windows 7.
  • Fix: to Windows Users and Groups on non-English OSes.
  • Fix: to Log viewer relating to unicode data.
  • Fix: to timeline relating to storage of unicode data
  • Fix: to installer to get around warnings about driver installation from untrusted vendor.
  • Fix: to Data schema relating to use of data strings and data counters within scripts.
  • Fix: to DNS client relating to definition of local sites
  • Fix: to WinGate Management relating to navigation tree not working on some occasions.
  • Fix: to WinGate Management relating to automatically logging into last used WinGate.
  • Fix: to policy relating to exporting of policies containing a colon in the name.
  • Fix: to web activity allowing it to function properly on MS SQL Server
  • Fix: to web activity relating to closing out activity blocks
  • Fix: event schema for session object in IMAP events now shows as correct type.
  • Fix: Issue where trial options were still showing if purchased license and expired trial were installed.
  • Fix: HTTP Cache now prompts for restart of WinGate when the cache index database is changed
  • Fix: Resolved issue where help collection files were becoming corrupted.
  • Added: Support for UNC paths in browse for folder dialog, allows UNC paths to be used for Logging, caching, email etc.
  • Added: New MACInfo module, that provides access to vendor information for MAC addresses.
  • Added: WinGate management shows warning for modules that fail to load.
  • Added: Now remove trials of matching products when a purchased license is installed. Prevents surprises when trials expire.
  • Added: New indices added to timeline database tables to improve query performance.
  • Added: Changes to Active Directory connector to enforce licensing policy for Standard licenses.
  • Change: New event context data (symbol browser) dialog.
  • Change: Changed the way HTTP Cache volumes are removed on deletion (rename first to avoid conflicts with new volumes of the same name that may be created while the first is being removed)
  • Change: removed ability to suppress warning when deleting a VPN.

New in WinGate 7.0.0 Build 3317 RC 1 (Dec 5, 2011)

  • Added new classification and access control framework for web content and URL classification. Includes a manual classifier to categorize sites / URLs. Access rules allow blocking / allowing of site by category / requestor / time of day.
  • Upgraded Codejock UI library to latest version. Includes a change of UI theme from Office 2007 to Office 2010.
  • Re-structured POP3 proxy, including new protocol filtering interface allowing scanning.
  • Added recording of category to timeline database
  • Added support for filtering tunneled requests in HTTP proxy.
  • Fixed stability bug in DNS client.
  • Fixed deadlock in Notification system.
  • Fixed issue with aggregating licenses.
  • Fixed issue with non-ANSI characters in HTTP headers
  • Updates to license system.
  • Fixed CRAM-MD5 in SMTP delivery.
  • Fixed problem editing POP3 collection jobs.
  • Fixed pattern matching problem in SMTP trust policy.
  • Fixed crash problem in ORDB.
  • Fixed building and sending of proxy auto-config file.
  • Added support for computer security accounts to the Active Directory connector.
  • Fixed issue with SSL / TLS connections if no certificate had been created in WinGate.
  • Fixed reporting of peer IP in timeline for VPN.
  • Now allow VPN manager to run (host VPN without participation) if no ENS installed.
  • Now allow W3C logging for Professional licenses and greater, rather than just Enterprise licenses
  • Added method variable to user database events.
  • Added GetData and SetData functions to the Event object, to allow local data to be shared amongst event processors, and within policy.
  • Fixed issue in DHCP server relating to addresses in use by other known DHCP clients.
  • Added support for PIPELINING to POP3 server, and also for POP3 proxy.
  • Fixed deadlock in user database providers.
  • Fixed bug in Active Directory connector enumerating users where domain contains contact objects.
  • Added capability to use Web admin to set user passwords for WinGate user database provider.
  • New Welcome screen.

New in WinGate 7.0.0 Build 3259 Beta 3 (Jul 15, 2011)

  • Fixed issue with email send item from policy taking down WinGate on some bad (default for installer) email addresses (could cause WinGate to become unusable if there was a notification on startup, such as for a port conflict on a service).
  • Fixed issue with WinGate taking a long time to start up after reboot (waiting for Remote Access Connection Manager to start)
  • Fixed issue with windows event log for WinGate (unregistered event source) causing all WinGate log messages to show an error.
  • Fixed issue with Winsock Redirector Service which prevented Application Control item from working to prevent application network access.
  • Fixed lockup issue with right-clicking menu options on users and groups panel
  • Fixed problem with HTTP cache purge on full setting.
  • Added c-dns field to WWW usage logging to log reverse DNS of client.

New in WinGate 7.0.0 Build 3254 Beta 2 (Jul 15, 2011)

  • Fix to the installer to improve installation duration which was long on some computers
  • Added off-line activation.
  • Fixed loop issue with certain DNS requests
  • Fixed an issue with Gatekeeper crashing on disconnect
  • Fixed an issue with unknown not being a member of Everyone.
  • Fixes to POP3 collection, and moving POP3 collection into its own panel
  • Added API to support scanning of the mail delivery queue. Latest Kaspersky AV for WinGate scans this queue, and therefore scans messages retrieved by POP3 collection.
  • Simplified mail queue management (no more PostIn folder)
  • Fixed NAT through dialup on Vista
  • Fixed service control policy item
  • Relaxed license restriction on nested lists in Data, so these are available for all licenses
  • Fixed an issue in the WWW proxy relating to auth with 0 length POST requests.
  • Fixed an issue with FTP directory listings through the WWW proxy
  • Fixed a problem in the IMAP server relating to locking whilst opening mailboxes
  • Fixed an issue in the DHCP service relating to lease updates
  • Added the ability to revoke DHCP leases
  • Fixed issues in POP3 collection and Mail delivery relating to secure connections to end server where connecting via a proxy
  • Added events relating to POP3 collection
  • Numerous minor UI tweaks

New in WinGate 7.0.0 Build 3239 Beta 1 (Jul 15, 2011)

  • New interactive flow-chart policy system.
  • New HTTP caching system, multi-volume with SQL-based index.
  • New event processing system
  • New customizable dashboards for viewing data and controlling features.
  • New Active Directory connector makes dealing with multi-domain forests a breeze.
  • Scripting support (Lua and JScript) for events.
  • SQL policy integration
  • Data monitoring and threshold checking
  • Notification system with escalation plans to enact response plans.
  • SMS connector. Send notification texts to your phone, and trigger WinGate functions by SMS.
  • New DHCP, DNS, and mail services.

New in WinGate 6.6.4 Build 1338 (Oct 15, 2009)

  • Fixed an issue with the DHCP server where if an old lease referred to a scope that had been deleted, WinGate would not make an offer.
  • Signed the Wgengmon and wgvpnmon applications so they can be loaded in 2k8 server without disabling UAC.
  • Added full minidump capability for troubleshooting.
  • Fixed an issue in the WWW proxy where serving files from disk with a space in the URL.
  • Fixed an issue in the WWW proxy where accessing FTP servers which use UTF-8 filenames would cause problems.
  • Fixed an issue in the WWW proxy with Basic authentication causing some sessions to hang.
  • Fixed an issue in the WWW proxy relating to policy that checked server ip address.
  • Fixed an issue in SMTP delivery - no longer try A record when MX record lookup times out.

New in WinGate 6.6.3 Build 1321 (Aug 12, 2009)

  • Fixed an issue with the WWW proxy server where certain boundary conditions with chunked responses would cause WinGate to crash if data scanning plugins were installed
  • Fixed an issue with the WWW proxy server in reverse-proxy mode where it would break URLs with a space in them
  • Added a registry option to enable all unknown HTTP commands in the WWW proxy
  • Changed the WWW proxy to strip invalid headers from HTTP responses unless a registry value is set (off by default)
  • Fixed an issue relating to SSL connections where a buffer was improperly deleted
  • Fixed an event handle leak in sockets class
  • Fixed several buffer overwrites in SSL certificate generation code
  • Fixed a potential buffer issue in the DHCP server
  • Updated WinGate Advanced options applet to handle watchdog thread

New in WinGate 6.6.2 Build 1315 (Jul 23, 2009)

  • Added filtered packet capturing facility. Captures packets in pcap format on all interfaces.
  • Fixed an issue relating to HTTP 1.0 requests which did not contain a Host header
  • Fixed an issue in the WWW proxy relating to certain sites using chunked transfers in some boundary cases which caused premature termination of the connection.
  • Fixed an issue in the WWW proxy relating to the CONNECT command where some clients sent a CONNECT method with a message body.
  • Fixed an issue in the WWW proxy where some sites don't send properly chunked data which was causing the session to hang.
  • Fixed an issue in the WWW proxy relating to connecting through an upstream proxy for CONNECT and FTP requests.
  • Fixed an issue in the WWW proxy relating to connecting through an upstream proxy - no longer requires DNS.
  • Fixed an issue in the WWW proxy where serving files from a UNC base path would result in a 404 file not found error
  • Fixed an issue in the WWW proxy where reverse proxying to a server that required authentication would fail.
  • Fixed an issue in the WWW proxy with auto-dialing.
  • Fixed an issue in the WWW proxy relating to unhandled HTTP methods used by Outlook Web Access
  • Fixed an issue in the WWW proxy relating to authenticated access to FTP sites with user/pass in the URL.
  • A couple of minor tweaks to HTTP caching - now properly honours no-store directive, and allows revalidation with no-cache directive.
  • Fixed an issue where changes to a service configuration or network interfaces could cause port range settings to be lost until WinGate was restarted.
  • Fixed a problem with saving VPN settings which caused a VPN only install to no longer be a VPN only install.
  • Fixed a problem in the SMTP server where RCP files may get stuck in the PostIn folder.
  • Added code to cycle DNS resolver socket to satisfy some misguided DNS servers that start ignoring requests otherwise.
  • Fixed a problem with the installer on Vista, where the driver was not being properly updated.

New in WinGate 6.6.1 Build 1278 (May 28, 2009)

  • Fix ARP problem introduced in 6.6.0 which prevented some gateway routers from communicating with WinGate.

New in WinGate 6.6.0 Build 1277 (May 27, 2009)

  • New WWW proxy, including changes relating to auth, scanning, caching, pipelining, and HTTP/11 support
  • Fixed an issue relating to FIN/RST handling and timeout behaviour in Extended networking
  • Resolved dialup issues on 2k3 server
  • Fixed a bug in the IMAP server where it was case-sensitive to certain commands
  • Fixed a problem with ARP cache timeouts and refreshing
  • Reworked the VPN control connection mechanism to harden it against attack
  • Added tunnel keep-alive packets to keep tunnels active through NAT devices
  • Fixed a problem with editing schedule item actions in VPN-only UI
  • Fixed a problem editing access rights on hosted VPNs from a remote GateKeeper in VPN-only UI
  • Deprecated cache freshness overrides (number of days before checking) in WWW cache
  • Added schedule option to resynch NT user database

New in WinGate 6.5.2 Build 1217 (May 27, 2009)

  • Added support for Vista 64 bit
  • Added support for Windows Server 2008 (32 and 64 bit)
  • Fixed a problem with the dialer on Vista
  • Fixed a problem with FTP downloads timing out through the FTP proxy
  • Fixed a problem with using policies in extended networking
  • Performance improvement for DNS traffic to servers on the WinGate computer
  • Fixed timeout issue in the following services introduced in 651: POP3 Proxy, SMTP Proxy, TCP Mappings, IMAP Service, POP3 Service, SMTP receiving
  • changed the target IP for tracert-style gateway monitoring Now checks against agtld-serversnet instead of 1234 (which is blocked by some routers)
  • Fixed a problem with multiple concurrent SSL connections which could cause WinGate to become unresponsive
  • Made a change to the WinGate Client installer to prevent it being installed on Vista

New in WinGate 6.5.1 Build 1203 (Dec 22, 2008)

  • Adds support for Windows Vista, and Windows XP64, removes support for Windows 95, 98, ME and NT4. Resolves a number of bugs.

New in WinGate 6.5.0 Build 1197 (Dec 15, 2008)

  • Adds support for Windows Vista, and Windows XP64, removes support for Windows 95, 98, ME and NT4. Resolves a number of bugs.

New in WinGate 6.5.0 Build 1175 (Oct 14, 2008)

  • Added support for Windows Vista 32 bit
  • Added support for Windows XP 64 bit
  • Dropped support for Windows 95, Windows 98, Windows Millenium Edition (ME), Windows NT 4.
  • Fixed recursion depth issue in DNS resolver which would fail DNS requests returning alias chains longer than 5 levels of indirection (affected download.microsoft.com).
  • Fixed issue with NTLM login in various WinGate services due to token length issues, occasionally seen on ADs with Vista and 2003 server.
  • Changed type for DHCP time offset option from unsigned to signed integer to allow for negative time offsets.
  • Fixed an issue with persistence of website settings in WWW proxy (was not removing deleted host headers).
  • Fixed an issue in the DHCP server that was causing lease information to be incorrectly stored. This caused clients to be forced to obtain new IP addresses if the WinGate server was rebooted.
  • Added diagnostic watchdog thread.
  • Fixed issue where a system message on startup could create deadlock when starting up with large NT User database.
  • Fixed locking and memory leak issue in RIP manager.
  • Added rebuilding of IMAP mailbox index if index file is deleted.

New in WinGate 6.2.1 Build 1133 (Mar 26, 2007)

  • Added user configurable CGI time out option for the Web Server configuration. Originally hard coded to 120 seconds, the configuration allows for a longer time to be set for script execution if necessary.
  • Fixed a bug in the SMTP delivery to local mail boxes where file handles were not being closed properly and so would return an error (Error code 32).
  • Added an error message for the License activation client for cases where the Activation clients disk is full.
  • Fixed a problem where clients using Internet Explorer would receive an error when attempting to use NTLM authentication to an external server through the WWW Proxy.