SGOS 6.7.4.107 is an Early Availability (EA) release with new/advanced functionality. 

Previously, Symantec released new features in Limited Availability (LA) releases to specific customers to access new functionality. This meant other customers were not able to access these new capabilities until the release was General Availability (GA). With Early Availability releases, starting with 6.7.4.105, all customers under valid support entitlement can gain access to this new functionality. 

Customers running this release should be considered early adopters of  6.7.4 to access new and advanced functionality. Early Availability releases are supported like any other current  release. Once the Early Availability release achieves broader adoption and quality metrics, it will transition to LTR status. 

Upgrade Notes:

  • SGOS 6.7.4 is not compatible with SSLV versions prior to 4.2.4.1. To use TLS offload with SGOS 6.7.4, upgrade to SSLV 4.2.4.1.
  • The SSLV appliance does not support SSL session re-use when using SGOS 6.7.4 with SSLV 4.2.4.1.

SGOS 6.7.4.107 introduces the following new features. In addition to the documentation mentioned below, refer to the SGOS Release Notes for information.

Multiple Local Content Filtering Databases

Numerous updates and changes have been made to support multiple local databases on the appliance. In addition to the existing local content filtering database, you can now create up to seven more local databases. For details, refer to the SGOS Administration Guide and the Command Line Interface Reference.

Content Filtering Categories Report

The Management Console has a new Categories report (Statistics > Categories), which includes data on requests to URLs with categories in enabled provider databases. For details, refer to the SGOS Administration Guide.

FTPS Proxy Support

The ProxySG appliance can now intercept FTPS connections in both explicit and implicit mode. For details, refer to the SGOS Administration Guide and the Command Line Interface Reference.

EDNS Support in DNS Proxy

This release introduces extension mechanisms for DNS (EDNS), which allows DNS requesters to receive DNS UDP messages longer than the default 512 bytes. For details, refer to the SGOS Administration Guide and the Command Line Interface Reference.

ADN Support for MAPI/HTTP Protocol

This release adds ADN support for MAPI/HTTP protocol. In an ADN deployment, the branch peer intercepts and compresses Office 365 traffic before sending it to the concentrator peer. The concentrator then decompresses the traffic before forwarding it.For details, refer to the SGOS Administration Guide.

Reverse Proxy SNI Support

This release supports server name indication (SNI) in reverse proxy mode. Previously, SNI was supported for forward proxy only. Proxy chaining and ADN deployments are also supported. For details, refer to the SGOS Administration Guide, the Content Policy Language Reference, and the Command Line Interface Reference.

Customizable Anti-CSRF Token Name

This release allows you to customize the anti-CSRF token name using the new CPL property: http.csrf.token.name(string)

For details, refer to the Content Policy Language Reference and the Web Application Firewall Solutions Guide.

Authenticate SCP Uploads Using SSH Client Key

You can create and store SSH client keys on the appliance. These SSH client keys can be used for authentication, as an alternative to using a password, when uploading access logs via SCP. For details, refer to the Command Line Interface Reference.

More Secure SSH and SSL Private Key Display in show config Output

To improve security, new CLI was added for specifying how show config output displays SSH and SSL private keys. For details, refer to the Command Line Interface Reference.

Session ID and Certificate Size Log Fields

Access log fields have been added to help track session ID and certificate size. For details, refer to the SGOS Administration Guide.

Enable/Disable Site Awareness

This release introduces a new CLI command to enable or disable AD site awareness: #(config security windows-domains)site-aware [enable|disable]

For details, refer to the Command Line Interface Reference.

IPv6 Support for IWA Direct

IWA Direct authentication is now supported over IPv4 and IPv6 connections.

View All SSH Client Information

The following CLI was added: #(config ssh-client)view {SUBCOMMANDS}

For details, refer to the Command Line Interface Reference.

Clear WebPulse Cache

This release introduces the ability to clear the WebPulse cache using the new CLI command: #(config bluecoat)service clear-cache
Clearing the WebPulse cache takes effect whether WebFilter or Intelligence Services is the data source.

For details, refer to the SGOS Administration Guide and the Command Line Interface Reference.

Increased Number of Categories Per URL

The appliance now supports policy that includes up to 1000 categories per URL without a significant impact on performance.

Removed Application Attribute Groups CLI

The application attributes groups CLI was introduced in version 6.7.2.1 but has been non-functional. The CLI is now removed from the appliance.

Improved Application Attribute Lookup Times

Application Attributes lookup performance is improved.

JavaScript Policy Enhancements

The following policy definitions have been enhanced in this release.

Specify <script> attributes in a JavaScript transformer:

define javascript transformer_id
  javascript-statement ::= section-type [tag_attributes='attributes'] replacement
end

Use a regular expression replacement to rewrite JavaScript:

define url_rewrite transformer_id
  rewrite_script_regex "client_substring_with_back_ref" "server_regex_substring"
end

For details, refer to the SGOS Administration Guide, the Content Policy Language Reference.

Thanks for your feedback. Let us know if you have additional comments below. (requires login)

    © 1995-2019 Broadcom. All Rights Reserved. The term “Broadcom” refers to Broadcom Inc. and/or its subsidiaries.