Released: February 2016
What's new?
New ability to specify IP session timeout for KeyShield.
Communication between WebTitan and KeyShield can now use HTTPS.
What has been fixed?
A security vulnerability that would allow UI clickjacking attacks.
Page headers could be corrupt on PDF reports.
Issue closing the certificate information dialog.
Adding static routes having issues when accessing the UI over HTTPS.
The incorrect network interface may be selected when the appliance is configured in transparent mode.
History table not always displaying.
Importing of a backup failing.
Possible timeout issues when the categorization database is updating.
Resolved potential security vulnerability by disabling weak ciphers as well as SSLv2 and SSLv3 in UI.
Improved policy engine performance.
SSL inspection and certificate issues.
Memory management issues in the proxy.
A block page not displaying in certain circumstances if running in transparent mode.
Patched OpenSSL library to address security vulnerability CVE-2015-5600.
Other bug fixes.