Kerio Control — Release History

(formerly Kerio WinRoute Firewall)

Legend:
+ Added feature
* Improved/changed feature
- Bug fixed
! Known issue / missing feature


Version 8.0.1 April 2, 2013

* Kerio Control Administration: password inputs behavior unified
* Local ID of IPsec tunnel is now editable
- Fixed: IPsec clients was disconnected after 3 hours
- Fixed: HTTP header "Referer" was incorrectly removed under specific circumstances
- Fixed: It was not possible to establish IPsec tunnel with more than 5 authorities in certificate store
- Fixed: Remote ID of IPsec tunnel was incorrectly determined if the certificate was not in certificate store
- Fixed: "Unable to check whether the VPN server's security certificate has or has not been revoked" warning was incorrectly displayed.

Version 8.0.0 March 12, 2013

+ Added IPsec VPN server
+ Added IPsec VPN tunnel support
+ Added certificate store for easier certificate management
+ Added support for IPv6-only servers to non-transparent HTTP proxy
+ SSL and TLS encryption can now be used in communication with SMTP relay
+ WebFilter now filter HTTPS traffic over HTTP proxy
+ Kerio Control Administration: Load time of dashboard was reduced
+ Kerio Control Administration: Firefox and Chrome browsers on Android mobile devices are now supported
+ Administration and web interface is now available on port 80 (HTTP) and 443 (HTTPS)
+ Passwords can be stored in MS-CHAP v2 compatible format in local user database
+ Mac OS X VPN client now successfully verifies certificate signed by intermediate certificate authority
* Dropped support for all Windows platforms
* Build-in pluins for external antivirus removed
* Hardware Appliance: LAN switch interface without Ethernet link now keeps it's IP address
* Original URL instead of file name is now matched against antivirus URL rules
* Kerio Control Administration: Application menu and automatic refresh was redesigned
* SSL key size increased to 2048b
- Fixed: Control now honor TTL values in DNS
- Fixed: Dropped incoming packets are now accounted in Bandwidth management
- Fixed: Statistics contained "Unknown" user
- Fixed: BOOTP message now contains IP address of DHCP server
- Fixed: DHCP server assigns wrong addresses in case of multiple subnets on one interface
- Fixed: HTTP cache didn't re-validate document if HTTP header "max-age=0" was present
- Fixed: Kerio Control Administration: System uptime was shown as NaN:NaN:NaN
- Fixed: TCP RST packet was not allowed during 3-way handshake
- Fixed: Stability issue in HTTP keywords filtering
- Fixed: ICMP packet replay protection
- Fixed: HTTPS URL filtering now blocks reused sessions
- Fixed: HTTP cache had negative impact on throughput
- Fixed: Week User and Traffic statistics were lost during restart

View older releases...

"Kerio Winroute Firewall is far more flexible than using a SOHO hardware router and allows for much finer control of inbound and outbound Internet access. Many of my clients use Kerio WinRoute Firewall not only to properly secure their network, but also to restrict their employee's web browsing."

Brian Westfall
Westfall Computing Solutions