UTM25S/UTM9S Firmware Version 3.6.0-32

Note: This release is available through both online and offline firmware update mechanisms. Refer to the Installation Guide and User Manual for update methods and how to retrieve the package.

New Features since the last release:

1. Added support for VLAN tagging on VDSL WAN port to support Deustche Telecom triple play service.
2. Added the ability for the UTM to scan and filter encrypted emails in the following protocols: SMTPS, IMAPS, POP3S.
3. Memory utilization improvement.
4. Integrate cloud based anti-virus solution to replace existing anti-virus engine. Adds benefits of using less system resources and increases virus signature library from 6 million to 45 million.

Notes:

1. Steps to configure IPTVISP(considering VLAN 7 and VLAN 8 are supported by ISP for DSL connection):-
   
   • Configure the dedicated wan to slot-1/slot-2 (depending on the position of DB module) in wan mode page.
   • Go toxDSL Settings configure DSL settings.
   • Enable VLAN by selecting the "Enable VLAN On DSL" check box.
   • Configure VLAN ID 7 for PPPoE and enter username/password.
   • Configure VLAN ID 8 for DHCP and enable "Enable Classless Static Routes" checkbox and then select "Add Alternate Networks" option.
   • Observe that both WANs come up in the status page.
   • Enable IGMP proxy and select VLAN ID8 in the "Bind Upstream interface to:" drop down.
   • Add the entry below in "alternate networks" on the IGMP page. 193.158.34.0/255.255.254.0
   • If you are using load balancing mode then the steps below need to be taken.
   • • Write down the IPTV IP address from the DHCP leases page (Or from the LAN Groups page if "Enable ARP Broadcast" is enabled in LAN -> Advanced page).
     • Go to the protocol binding page and add protocol binding with the options below:-
       Service - "Any"
       Local Gateway - SLOT-1 VLANID:7 Or SLOT-2 VLANID:7 (depending on DSL DB Card position in SLOT-1 Or SLOT-2).
       Secondary Local Gateway - Select any other interface.
       Source Network - Single Address and configure it with the IP which we wrote down in 9a
       Destination Network -"Any".
   • Observe that IPTV functionality is working fine.
2. When upgrading from a version older than V3.5.0-60,by either on-line or off-line upgrade, the user will need to upgrade to V3.5.0-60 first , then upgrade to V3.6.0-32.
3. For Deutsche Telecom triple play service , UTM9S/UTM25S only supports one HD program.
   

Issue(s) are resolved since last Release:

• Fixed the issue of when changingfrom backup interface to primary interface, the IGMP bindinginterface is changed in auto-rollover mode.
• Changing the position of firewall rules and rebooting the device could lead to firewall outbound rule editing error.
• In Load Balance mode, PPPoE isnot stable when using ICMP as the failure detection method.
• The UTM will reboot after changingWAN mode from Load Balanceto single WAN1 when configuring IPSEC VPN.
• In Load Balance mode, Deustche Telecom triple play is not working.
• UTM can't send mail logs after upgrade to v3.5.0-60.
• Fixed issue where a SNMP MIB browser cannot get node response from the UTM.
• User is unable to open task request sent via outlook.
• Fixed issue where the URL misclassification link page does not display.
• If a VPNtunnel gets dropped and re-established on the UTM , ReadyNASintegration over VPN doesn't re-establish.
• Fixed issue where the DHCP leases page shows a blank page.
• In UTM9S,3G Services does not stay disabled after a reboot.
• In load balancing mode,Secondary WAN IP disappeared after restarting WAN.
• In systemlog, DNS name cannot be logged.
• Protocol name HTTPS is showing duplicated in malware outbreak mail alert.
• Fixed issue where the UTM9S was unable to release some Quarantined spam emails.
• UTM return message is not suitable for SMTPS service.
• Fixed issue where disabling exceptions rules for HTTPS Smart Block from the GUI, doesn't actually stop HTTPS smart block services in the backend.

Known Issues and Limitations:

• An SSL VPNtunnel will fail to establish when the SSL VPN connection is scanned by the UTM HTTPS scanning service.
• The metering profile page shows wrong statistic values when changing the Application control mode from profile to global.
• TeamViewer cannot update when the HTTPS scanning service is enabled.
• VLAN on DSL information cannotbe displayed on the network status and detailed status pages.
• UTM doesn't support the control of Set-Top-Box through iPhone.

Caveats:

When installing SSLvpn, if there is a failure, a cache clean-up of the SSL-VPN adaptor is necessary. Use one of the following URLs to initiate the cleanup:

• For 32-bit PCs, select the following url:
  https://<device IP>scgi-bin/users_portal/removeactivex?launch=true&is32bit=true
• For 64-bit PCs, selectthe following url:
  https://<device IP>/scgi-bin/users_portal/removeactivex?launch=true&is32bit=false

To Install

Firmware upgrade from update server:
================================

• Installed firmware versions older than 1.3.7:
  
  If your firmware is older than 1.3.7 (<1.3.7) it cannot be updated directly to firmware newer than 1.3.7. Only firmware images older than 1.3.7 will be displayed when you query the update server (Application=>System Update=>Firmware). To upgrade to firmware newer than 1.3.7 you must first upgrade your system to 1.3.7. You can then perform the firmware update query again to display the newer firmware images (Application=>System Update=>Firmware).
  
• Installed firmware versions 1.3.7 and above:
  If your firmware is version 1.3.7 or above, when you query the update server all firmware versions will be displayed.

1. Download the file, unzip it and follow the instructions provided in the user manual to upload the firmware.

This product includes software code developed by third parties, including software code subject to the GNU General Public License ("GPL") or GNU Lesser General Public License ("LGPL"). As applicable, the terms of the GPL and LGPL, and information on obtaining access to the GPL Code and LGPL Code used in this product, are available to you at NETGEAR's Open Source Code Web page