[Solved] F-Secure Internet Gatekeeper 5.22 - BEST Antivirus KBS : Largest Anti-Malware Knowlegde Base and Support

Version 5.22.14 RTM

General

This document contains important information regarding changes and new features in F-Secure Internet Gatekeeper. We strongly recommend that you read the entire document.

What’s in this file

System Requirements
Product Contents
New Features
Known Issues
Installation
Contact Information and Feedback
Third party software used in the product

System requirements

To use F-Secure Internet Gatekeeper 5.22, the computer must meet the following requirements:

x86 compatible (2Ghz or faster recommended)
at least 512 MB of RAM (1 GB or more recommended)
at least 5 GB of free disk space (20 GB recommended)
Installed files need at least 1 GB of free disk space and the running system needs significantly more space for temporary files, logs, and other similar files.
The following Linux distributions are supported:
- 32-bit:
  - CentOS 5.10, 5.11, 6.4, 6.5, 6.6
  - Debian 7.4, 7.6, 7.7
  - Red Hat Enterprise Linux 5.10, 5.11, 6.4, 6.5, 6.6
  - Ubuntu 12.04.4
- 64-bit:
  - CentOS 5.10, 5.11, 6.4, 6.5, 6.6, 7.0
  - Debian 7.4, 7.6, 7.7
  - Red Hat Enterprise Linux 5.10, 5.11, 6.4, 6.5, 6.6, 7.0
  - Ubuntu 12.04.4
The following software must be available in the operating system:
- Linux kernel 2.6 or later
- Perl 5.8 or later
- Make
- 32-bit C and C++ runtime environment. Consult your OS documentation for installing the compatibility libraries in 64-bit environment:
  - glibc
  - libstdc++
  - libgcc1
Support for any other Linux distributions or newer versions will be announced in future releases and on our web site.
The Web UI is compatible with the following web browsers:
- Firefox (Version 38 ESR)
- Chrome (Version 43)
- IE (Versions 9, 11)

For up-to-date information about supported platforms, please see our Knowledge Base:

http://www.f-secure.com/en_EMEA/support/business/

Product contents

F-Secure Internet Gatekeeper is a gateway product that acts as a virus scanning proxy for HTTP, SMTP, POP, and FTP protocols.

The product uses F-Secure’s scanning technologies to scan for malware that provides an outstanding protection level and fast, automatic updates to the scanning engines and anti-virus databases. With F-Secure’s Security Cloud, the product can react to new threats rapidly, which keeps the users protected and enhances the protection even further.

The product can be integrated with third-party HTTP proxies with the standard ICAP protocol. The content that is submitted to the ICAP service is scanned with F-Secure’s malware scanning technologies.

New features

This release contains the following new features, bug fixes and other changes that have been added since the 5.21.18 release:

Fixed CSLP-371: Proxy services are not started on system boot.
Fixed CSLP-703: Truncate long URLs to 3 KB when writing access/detect log entries.
Added a list of supported web browsers to the system requirements.

5.20.646 => 5.21.18

Fixed security vulnerability FSC-2015-2
Fixed CSLP-467: Increase the maximum size of HTTP request

5.10.12 => 5.20.646

Added support for Japanese localization in Web UI.
Added various missing settings in Web UI.
Fixed CSLP-331: fsupdated is still running after turning off automatic updates.
Fixed CSLP-344: LANG=C locale causes installer to fail.
Fixed CTS-91677: “pass_type” and pass_type_list” options not working accurately.
Fixed CTS-94558: Database update with fsdbupdate9.run leaves fsaua and fsupdated running when services are disabled
Fixed CTS-95383: LAN access settings not migrated during product upgrade.
Fixed CTS-95301: IGK leaves unexpectedly restarted proxy processes marked as busy, causing “Maximum connections” issue.
Fixed CTS-95267: E-mail addresses of Admin notification settings cannot be set properly.
Fixed CTS-95168: Add missing log files to logrotate.conf.
Fixed CTS-95547: getaddrinfo_randomize expert option not working
Removed the quick start guide and merged its contents to the admin guide.

5.00.5 => 5.10.12

ICAP service supports scanning emails for malware and spam.
New and improved web user interface added.
New quick start guide added for easy installation and usage instructions.
Fixed CTS-82476: fsaua now restart automatically when customer changes virus database download proxy settings from web user interface.
Fixed CTS-84901: FmLib library version is not visible in the web user interface.
Fixed CTS-86302: Added documentation for configuring HTTP proxy for anti-spam daemon (fsasd) in the administrator guide.
Fixed CTS-91777: Fixed detecting malicious javascript and html files.
Fixed CTS-91852: Added missing information for ICAP detections templates in administrator guide.
Fixed CTS-91867: Improved documentation for transparent proxy bridge mode using subnet in administrator guide.
Fixed CTS-92431: Improved detection rate for policy-based blocking for javascripts and ActiveX scripts.
Fixed CTS-92216: Fix timeout_inactive for web servers that take more time than keepalive_timeout to start sending the reponse to IGK.
Fixed CTS-92759: Fixed log size specification of logconv tool in administrator guide.
Fixed CTS-92797: Fixed information for scanning daemon (fsavd) process management in administrator guide.
Fixed CTS-92814: Parsing very large email header can lead to false detection or other unexpected result.
Fixed CTS-92861: IGK fails to detect too long HTTP request URL.
Fixed CTS-93579: Fixed information about connection error messages in administrator guide.
Fixed CTS-94390: Added missing system requirements and dependencies in IGK release notes.
Fixed CTS-94834: Added information about orsp_file_check for HTTP proxy in administrator guide.

4.10.17 => 5.00.5

Support for F-Secure Real Time Protection Network was added to the HTTP proxy. When enabled, common files are identified by rapidly updating black and white lists. This saves system resources and improves the protection.
The malware scanning capabilities are now available by a standard ICAP interface. This enables integration with third party proxies that support ICAP.
The list of supported distributions was reworked to focus on the most popular, current and actively supported distributions.
Removed dependency to Java, which is a common source of security vulnerabilities. Java runtime environment is no longer distributed with the product. As a consequence, this release does not contain a web UI, but is also significantly smaller and lighter. Configuration is done by editing the configuration files directly.
Improved quality of RPM packages.
Improved the output from IGK init scripts.
Fixed CTS-91383: Added an option to control whether to transparently re-establish keepalive upstream HTTP connections.

If you are upgrading from a version earlier than 4.10.17 ,4.11.8 or 4.12.5, see the release notes of version 4.12.5 for a list of earlier changes.

Known issues

Upgrading from any 2.X or 3.X version is not supported. Uninstall the old version completely before installing the latest version.
Upgrading from 4.X Japanese version of the product(virusgw) to international version(fsigk) is not supported. Follow the instruction in the Administrator’s guide of the product to migrate settings from old(virusgw) installation to F-Secure Internet Gatekeeper 5.10(fsigk) installation.
Only the following printable ASCII characters are allowed in the credentials for accessing services using HTTP proxy (http_proxyauth_user and http_proxyauth_pass in fsigk.ini): letters, digits and the following special characters: -._~!$&'()*+,;=
If you use rpm to upgrade the product to the latest release, the product configuration files are reset to the factory defaults. The upgrade process renames the old configuration files by attaching an .rpmorig extension to the file name. This does not affect the main configuration file, fsigk.ini. As a workaround, you can rename the backup files back to their original names.
Web UI is incompatible with Internet Explorer 8 and below.
Using High security level in Internet Explorer security settings may prevent login to Web UI due to javascript restrictions.

See our Knowledge Base for up-to-date information about known issues and possible workarounds: http://www.f-secure.com/en_EMEA/support/business/

Installation

The product can be installed from an RPM package, or a tar package.

RPM installation or upgrade: Download the rpm package and run the following command as root user:
# rpm -Uvh fsigk-5.22.14-0.i386.rpmAfter the installation, open http://<HOSTNAME>:9012/ with your web browser and use the default username and password to log in and configure the product. See the Administrator’s guide for information on how to configure the product with the web user interface.
Installing using a tar package: Download the tar package and run the following commands as root user:
# tar zxf fsigk-5.22.14.tar.gz# cd fsigk-5.22.14# make installAfter the installation, open http://<HOSTNAME>:9012/ with your web browser and use the default username and password to log in and configure the product. See the Administrator’s guide for information on how to configure the product with the web user interface.

Contact information and feedback

To provide feedback or report any issues, go to:

http://support.f-secure.com/

Please include the product version and Linux distribution you are using to your support request when contacting us.

Third party software used in the product

Commtouch 7.03.0049

Berkeley DB 1.85

JSON-C 0.9

Libevent 2.0.21

Linux PAM userdb module 1.1.1.1

libaes 0.03

MD5 message-digest algorithm

TCP wrapper utilities 7.6

SQlite3 3.8.1

The author disclaims copyright to this source code (Public Domain).[http://www.sqlite.org/]

Transparent Proxying patches for Linux kernel 2.6

Civetweb 1.4

Source : Official F-Secure Brand
Editor by : BEST Antivirus KBS Team

(Visited 9 times, 1 visits today)

F-Secure Internet Gatekeeper 5.22

Source : Official F-Secure Brand
Editor by : BEST Antivirus KBS Team

About

Partners

Resources

Source : Official F-Secure Brand Editor by : BEST Antivirus KBS Team

Related Articles

All about F-Secure

Security description (F-Secure)

Use case: track assets coming from a custom source (for example Active Directory) (F-Secure)

Use case: search discovered hosts (F-Secure)

Use case: export web scan findings (F-Secure)

Use case: export system scan findings (F-Secure)

About

Partners

Resources

Source : Official F-Secure Brand
Editor by : BEST Antivirus KBS Team