background image

4

S

UPER

S

TACK

®

 3 F

IREWALL

 F

IRMWARE

 V

ERSION

 6.0.2 R

ELEASE

 N

OTES

NETBIOS Pass Through Facility

The NETBIOS pass through facility does not function 
correctly, so it is not possible to find computers on the 
DMZ port from the LAN using 

Network 

Neighborhood

 or 

Find Computer

.

Policy Creation

If you create a policy that allows traffic into specific IP 
addresses on the LAN, the Firewall should show a "!" 
in the Network Policy Rules screen to indicate a 
potential security hole. The Firewall does not display 
the "!".

Using Microsoft Exchange Server

For users of Microsoft Exchange Server, 3Com 
recommends that Exchange Server is deployed on the 
LAN and not the DMZ.

Bugs Fixed in this Release

This section lists the major bug fixes between 
firmware version 5.0.7 and firmware version 6.02.

A bug that caused VPN problems when 100 SA's 
were entered has been fixed. 

An interoperability issue with the Lucent Brick has 
been addressed.

In rare instances, flash corruption occurred and 
caused the unit to resort to factory default 
settings. This bug has been fixed.

A bug which caused cache full errors was fixed.

TFTP traffic now passes correctly from the WAN to 
the LAN.

A bug that caused VPN tunnels using IKE to remain 
disabled until the Firewall was restarted has been 
fixed.

A bug that caused the re-negotiate button to 
intermittently stop functioning until the Firewall 
was restarted has been fixed.

A bug which caused a delay in loading the 
management login screen when using Microsoft 
Internet Explorer was resolved. To avoid this delay, 
check the new "Manage using IE" box on the 
Access/Management page.

H.323/NetMeeting support has been enhanced to 
allow full audio and video between a SuperStack 3 
and non-SuperStack 3 endpoint.

Multicast packets are no longer cached.

A bug which caused automatically created rules to 
be lost upon a restore to factory defaults has been 
fixed.

A bug which caused IP Spoof alerts to be 
generated when using NetBIOS between the LAN 
and the DMZ has been fixed.

A bug which caused PPPoE sessions to be 
disconnected has been fixed.

A bug which caused the DHCP server to assign 
invalid leases to LAN users has been fixed.

Problems which caused fragmented PPTP and 
IPSec packets to break the VPN tunnel have been 
resolved.

A bug which prevented Stealth mode from 
working in standard mode has been fixed.

DNA1611-0AAA01.fm  Page 4  Tuesday, September 4, 2001  10:10 AM

Summary of Contents for SUPERSTACK 3CR16110-95

Page 1: ...current configuration before upgrading To upgrade the firmware to version 6 0 2 do the following 1 Access the Management Interface as described in the User Guide 2 Click Tools and then select the Upgrade tab 3 Click Upload Firmware Now 4 Click Yes if you have saved the settings 5 Click Browse and select the software file you have downloaded from the 3Com ftp site to a local hard drive or server on...

Page 2: ...tack 3 Firewall Web Site Filter 3C16111 This section lists new features and enhancements between firmware version 5 0 7 and firmware version 6 0 2 A new Installation Wizard can be used to set up the Firewall quickly A Group VPN feature for simplified VPN client deployment has been added A new VPN Routing feature allows easy setup of secure traffic in a hub and spoke configuration between remote of...

Page 3: ...ns of attacks A PPPoE inactivity time out has been added The date can now be displayed in an International format DD MM YYYY The Syslog Individual Event Rate feature enables control over the time period between similar events being reported to the Syslog Napster is now a pre defined service The current status of DHCP leases are now shown on the DHCP Status page Known Problems with this Release VPN...

Page 4: ...ixed TFTP traffic now passes correctly from the WAN to the LAN A bug that caused VPN tunnels using IKE to remain disabled until the Firewall was restarted has been fixed A bug that caused the re negotiate button to intermittently stop functioning until the Firewall was restarted has been fixed A bug which caused a delay in loading the management login screen when using Microsoft Internet Explorer ...

Page 5: ... File then Save Changes to save the settings to the security policy Chapter 10 Configuring High Availability This chapter states that serial numbers are used for configuring High Availability This is incorrect MAC Addresses are used Where serial number is stated in the instructions use MAC Address instead The MAC Address of the Firewall is printed on its base Do not include dashes or spaces when e...

Page 6: ...s and may or may not be registered in other countries 3Com and SuperStack are registered trademarks of 3Com Corporation The 3Com logo and CoreBuilder are trademarks of 3Com Corporation Windows is a registered trademark of Microsoft Corporation Other brand and product names may be registered trademarks or trademarks of their respective holders DNA1611 0AAA01 fm Page 6 Tuesday September 4 2001 10 10...

Reviews: