ExOS 7.4.4 Update 1 Release Notes
Release Date: December 6, 2016
Software Update:
Download the software update Ð v7.4.4u1 ExOS- Size: 676,134,904 bytes
- MD5 Hash: 3686a834f2d53a17b7c50a008d7c3c1a
Supported upgrade versions:
- 7.0.0, 7.0.1, 7.0.1u1, 7.0.2, 7.0.2u1, 7.0.3, 7.0.3u1 and 7.4.1, 7.4.2, 7.4.3, 7.4.4
- 6.4.6, 6.4.7
Supported Platforms:
- Should have a minimum 8Gb of RAM (see note below)
- 3062, 4061r2 (with 8 Gb upgrade), 4061r3, 4062, 6060, 6062, 8060, 8062, 8063, 10060, 10062, 10063, 12063, all Virtual Appliances
- NOTE: 2061, 4010 and 4061 (r1 and r2 with 2 and 4Gb configurations) are not supported with ExOS 7.x.x due to lack of adequate RAM. For conditions under which these devices can be upgraded to v7.x.x please refer to KB Article number 1896
Upgrade Path:
- Upgrading from a previous version of 7.x, is a direct update to 7.4.4u1
- Upgrading from a version prior to 6.4.3:
- Upgrade from appliance version to 6.4.3, and reboot.
- Upgrade from 6.4.3 to 6.4.6 or 6.4.7, and reboot.
- Upgrade from 6.4.6/6.4.7 to 7.4.4u1, and reboot.
- Upgrading from a 6.x version after 6.4.3:
- Upgrade from appliance version to 6.4.6 or 6.4.7, and reboot.
- Upgrade from 6.4.6 / 6.4.7 to 7.4.4u1, and reboot.
- The upgrade from 6.4.3 may take longer than normal due to the database upgrade that takes place.
- v7.x will only accelerate with peers running 6.4.3 and later due to a change to the Exinda internal protocols. If you are installing v7.x into an x800 estate, the best approach is to upgrade your core box to 6.4.3 and then install v7 on one or more branch offices.
- This allows all the existing appliances to accelerate to the core appliance and allows the v7 appliance(s) to accelerate to the core box running 6.4.3
Product Updates
New Software Features
This release addresses a number of field related issues. For a list of issues addressed, please consult the Bug Fixes: Addressed Issues section below:
New L7 Signatures
None
New Signatures added in 7.4.4
OpenFlow | Slack | Good for Enterprise Business |
Amazon Prime Video | Pokemon Go | OutlookMobile |
Upptalk | Niantic Labs | New Relic |
Viber video | OCSP | Huddle |
OPC UA | Modbus | ZenDesk |
2channel | retune | iTunesU |
Prisma | BackBlaze | PopCap |
Anghami | DeNA | Survey Monkey |
Path of Exile | Ingtagram application attributes | Fasttrack |
PCoIP | Betternet | Icecast |
FASP | DocuSign | musical.ly |
EA Games |
Improved L7 Signatures
NoneSignatures updated in 7.4.4
Spotify | Good (on Android) | Citrix |
iTunesU | Skype file-transfer | YouPorn |
Office365 | Snapchat | FTP |
Second Life | Android OS update | |
WinMX | IMO Messenger | Google for HTTP |
IPSec | VNC | MapMyRun |
Teamviewer | CtiTV | QUIC to support protocol version Q030 |
Supercell | TVU Player | SugarSync |
Boom Beach | ClubPenguin | Vippie |
Hay Day | Classification | DCE_RPC |
Clash of Clans | Hike Messenger | Telnet |
Sina Weibo | Telegram browser | XMPP |
Skype | QQLive | Filetopia |
Oovoo | Viber audio | fastpath usage for MSN, UltraSurf and TOR on SSL traffic |
Deprecated L7 Signatures
NoneRemoved Signatures in 7.4.4
Yuiop (use Upptalk instead)
Lovefilm (use Amazon Prime Video instead)
Filefont.com
Protocol media attribute (use PACE2_HTTP_CONTENT_TYPE instead)
Usenet (use nntp instead)
Bug Fixes
Addressed IssuesThe following issues have been addressed as part of work completed in this release:
New in 7.4.4 Update 1
- D-06338 - Cluster failure for 8k and greater devices
- D-06174 - High WAN memory usage issue (increase in file descriptors to stabilize WMD)
- D-06380 - Check For Latest Updates shows new version available (although it shouldn't)
- D-06250 - Systemize fix for CVE-2003-1418 - Apache Server vulnerability
- D-05502 - Prepopulation doesn't work in 7.4.1
- D-06026 - FTP acceleration not working when cluster enabled in 7.4.1. For workaround refer to Knowledge Base Article: 1667
- D-06291 - Prepopulation SMB fails when servername is used and depth of path greater than one gives error "Failure, Invalid argument"
- D-06211 - No reduction or acceleration when client side Cluster Slave controls the SMB connection
- B-07024 - SMB - extracting archive over accelerated connection is slow
- D-04189 Ð Slow File Transfers with SMB Acceleration Turned On. For workaround refer to Knowledge Base Article: 1667
- D-06064 - SMB - Windows 10 Sometimes Can't Connect to Windows Server 2008R2 /2012 due to SMBv3 related settings
- D-05750 - Clustering performance degradation after upgrading from v6.4.3u12 to v7.4.0
- D-05105 - Cluster - showing only local traffic on realtime
- D-06162 - Exinda crashes when IPv6 traffic passes through
- D-06167 - Debugging Left On and affecting internal logging
- D-06157 - Repeated diagnosticsd warnings after upgrade to 7.4.3 (workaround fix)
- D-05969 - Sending command Ôimage installÕ from SDP not working
- D-03355 - Setting custom range end time on web UI monitoring graphs is off by 1 hour
- D-04779 - Skype is not classified correctly
- D-04781 - small portion of Netflix traffic is being misclassified as HTTPS
- D-04780 - Facebook Video and Voice classified as RTP
- D-06168 - ea-games not correctly classified
- D-05072 - EA Sports Multiplayer Traffic Classification
- D-06285 - Game Path of Exile is Classified as Warcraft 3
- D-05065 - Betternet VPN Doesn't have Application
- D-06131 - Can't add applications that use arbitrary strings as subtypes from CLI
- D-06169 - WebUI on Exinda slow during initial configuration without internet access
- D-06363 - Edge Cache Crashing with "Swapfile Header Inconsistent" (requires additional steps, please see KB article for information)
- B-05743 - Let SMBv3 traffic pass natively - do not downgrade to SMBv1 or SMBv2
Known Issues
The following is a list of known issues reported by customers that may still affect this release:- D-05029 Ð Unexpected shutdowns (due to squid)
- D-03974 Ð Squid process crashing
- D-06143 Ð Reduced permissions for TACACS Administrator accounts on web UI
- D-06210 Ð Dynamic Virtual Circuits not limiting per-user bandwidth
- D-06053 Ð RTP G711/722 Classification Fails
- D-05870 Ð Report Legend on ÔControl Discard GraphÕ Incorrect
- D-05990 Ð Appliance will crash if blank application group is used in a VC
- D-06270 Ð Firefox generation ÒSEC_ERROR_EXPIRED_ISSUER_CERTIFICATEÓ when using HTTPS Edge Cache
For a complete list of all known issues, please check Knowledge Base Article: 1884.