Andrisoft wanguard 6.2, Руководство пользователя

Страница: 128 / 131

Wanguard 6.2 User Guide Appendix 5 – Software Changelog
Wanguard 6.1
Release date: December 3 2015
➢
Administrators can create custom decoders that identify flows or packets sharing a certain pattern (e.g. to
differentiate and classify the underlying protocols) in Configuration » General Settings » Custom Decoders.
➢
New Filter mitigation options in Configuration » General Settings » Mitigation Options:
◦
TCP SYN Proxy
◦
invalid TCP flags
◦
invalid DNS packets
◦
private/reserved IPs
◦
connection-oriented or connection-less traffic rate-limiting
◦
blacklisting by IP reputation services
➢
Filter can apply new filtering rules for: specific packet payloads, countries, DNS transaction IDs.
➢
Filtering rules can be disabled, re-ordered and fine-tuned for each decoder.
➢
A tighter integration between Filter and the software firewall (Netfilter framework) and Chelsio hardware
filters. Newly generated anomaly reports contain pass/drop graphs for mitigated attacks.
➢
Console users can create custom firewall rules in Reports » Tools » Firewall Rules.
➢
New Software Firewall options in the Filter Configuration window. A new “FW Policy” field on Whitelist rules
that explicitly permits traffic through the Software Firewall.
➢
Configuration » General Settings » Anomaly Detection contains a new option for deduplicating anomalies
that indicate the same attack matched by different decoders.
➢
Filter Clusters can be associated with other Filter Clusters.
➢
BGP Connectors can be configured to allow BGP announcement withdrawals to be done after business
hours.
➢
Sensor graphs now use RRDCached when it is defined in Configuration » General Settings » Graphs & Storage
Configuration.
➢
Enhanced user authentication methods. New RADIUS options and a new HTTP authentication option.
➢
A new TCP-ALL decoder.
➢
The Latest Events tab from the South Region contains selectors for severity and components.
➢
User role renamed Guest. Administrators can allow Guest access to Reports » Tools with greater granularity.
➢
Configuration » General Settings » Anomalies renamed Anomaly Detection. Reports » Alerts & Tools
renamed Tools.
➢
Unattended installation when the following shell environment variables are set:
WANGUARD_INSTALL_DB_USER, WANGUARD_INSTALL_DB_PASS, WANGUARD_CONSOLE_IP,
WANGUARD_CONSOLE_DB_PASS.
➢
User Guide updated. Contains new Appendixes describing advanced BGP configurations.
- 128 -