What's new in SafeSquid SWG Conceptual Edition 2015.0302.0130.2
Mar 24, 2015
- Updated documentation in SafeSquid 2015.0302.0130.2 release.
New in SafeSquid SWG Conceptual Edition 2015.0209.2303.2 (Feb 26, 2015)
- Enhancements:
- Added new upload file page on interface for uploading files to SafeSquid server.
- SafeSquid will use RSA 1024 bit asymmetric encryption (earlier symmetric encryption was used) to encrypt passwords.
- SafeSquid provides backward compatibility for earlier encryption technology. This will help users to use earlier config.xml.
- SafeSquid requires old activation key in place to decrypt earlier passwords.
- Modified About page on interface to display subscription details.
- Modified LDAP and SSL inspection sections to handle passwords encrypted ith new technology.
- Implemented facility to use profiles in combination with Access restrictions. This feature allows you to bypass authentication for specific sites.
- Extended log parameters separated uniquely with tab (\t). This helps log parsers to generate reports using extended logs without any parsing issues.
- Implemented authentication fail over. If NTLM/Negotiate authentication fails when SafeSquid challenges clients with basic authentication.
- Performace improvements.
- Increased Tolerance:
- SafeSquid now uses SHA2 hash algorithm to sign SSL certificates.
- SafeSquid was using SHA1 hash algorithm to sign SSL certificates.
- Some applications disabled SHA1 hash algorithm due to collision attacks, which causes problems. The problem manifests on Google chrome browser.
- Bug fixes:
- Bug Fix for matching of requests based on protocol.
- Fixed SSCORE and SVSCAN stats messages display.
- Critical bug fix in SSL inspection Section.
- A bug was discovered that caused SafeSquid to simply crash when user try to access sites which do not have registered domain names.
New in SafeSquid SWG Conceptual Edition 3.4.7.2 (Jun 12, 2013)
- Critical Security BugFix:
- The HTTP response header lines are in the usual text header format, which is: one line per header, of the form "Header-Name: value", ending with CRLF.
- SafeSquid failed to correctly parse headers when the number of spaces or tabs between the ":" and the value was more than one.
- One of the immediate mal-effects of this was non-detection of "Transfer-Encoding: chunked" headers.
- This was largely witnessed with Microsoft IIS/6.0 webservers.
- The result was failure in detection of end of response body leading to large latencies particularly if content was being buffered for inspection.
- This has now been fixed.
New in SafeSquid SWG Conceptual Edition 3.4.7.1 (Jun 12, 2013)
- Reduced CPU utilization.
- Faster loading of dynamic pages.
New in SafeSquid SWG Conceptual Edition 3.4.7.0 (Jul 9, 2012)
- SafeSquid now offers better support for FTP over HTTP. A new built-in template handles user authentication for FTP sites that require user authentication.
- Reduced latency and overall response times.Security Bugfix to prevent faulty bypassing of content analysis of requests.
- Improved tolerance to slow response from heavily loaded, slow responding web-sites.
- Major improvements in ICAP, now allows use of multiple ICAP services. SafeSquid connects to each ICAP server in the list, until one modifies the request or response. SafeSquid's ICAP fully ready for use with ICAP services for Data Leak Prevention, in conjunction with ICAP services for Virus Detection.
New in SafeSquid SWG Conceptual Edition 3.4.6.6 (Jul 9, 2012)
- Security Bugfix for a vulnerability that caused SafeSquid to terminate abnormally, when a remote client abruptly cancelled an incomplete Windows Integrated Authentication process.
New in SafeSquid SWG Conceptual Edition 3.4.6.5 (Jul 9, 2012)
- Bugfix for all errors reported since release of 3.4.6.4, aggregated in this release.
- Known issue: Accesing some web-sites can cause NTLM authentication failures
New in SafeSquid SWG Conceptual Edition 3.4.6.4 (Jan 9, 2012)
- Bugfix for broken https transactions.
New in SafeSquid SWG Conceptual Edition 3.4.6.1 (Jan 9, 2012)
- Loss or rejection of Activation Key fixed. Logfiles compression fixed. Enhancements in TCP_TUNING, Caching, and Pornographic Image Filter Module
New in SafeSquid SWG Conceptual Edition 3.4.0.4 (May 12, 2010)
- Improved caching of web-sites for cProfiles.
- Bug fixed that caused URL Filter to incorrectly match entries, when LDAP Profiles was used to create policies.
New in SafeSquid SWG Conceptual Edition 3.1.2 (Oct 29, 2009)
- Comptibility issues with Vista / Win2Kx fixed.
- Critical bugfixes made that affected overall performance.
- Process Instrumentation (Performance) Logging has been introduced.