GeNUBox 3.1 Release Notes - GeNUA

GeNUBox 3.1 Release Notes
Information on the GeNUBox 3.1 product family is available in these release notes.
Please read this document carefully! You are advised to install this upgrade, as this release
both resolves various problems, and provides new features.
Changeover To GeNUCenter Management Server Version 2.2
Please note that GeNUBox 3.1 is centrally managed exclusively by the current GeNU-
Center Management Server version 2.2 .
Older versions of GeNUCenter (e.g. 2.1) can not display and manage GeNUBox 3.1
correctly.
Contents
1 Scope of Delivery 2
2 Before Upgrading 2
3 New Features in GeNUBox 3.1 2
3.1 New features . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2
3.2 Bug Fixes . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3
4 Upgrade Installation 3
4.1 Central Upgrade . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3
4.2 Upgrading A Standalone GeNUBox To Version 3.1 . . . . . . . . . . . . . . 4
4.2.1 Software . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4
4.2.2 Backup the configuration . . . . . . . . . . . . . . . . . . . . . . . . 4
4.2.3 Apply the release file . . . . . . . . . . . . . . . . . . . . . . . . . . . 4
5 How to Contact Us 4

Page 2 GeNUBox 3.1 – Release Notes
1 Scope of Delivery
With the current GeNUBox version 3.1 you have received:
• these release notes
• An ISO image of the installation CD-ROM.
The image is also available for download on the GeNUA webserver in the GeNUBox
customer area:
https://www.genua.de/k/customer/gb_support/release_download.html
2 Before Upgrading
• If an IPsec VPN has a phase 2 SHA2 setting greater than 256, then VPN connections
only are possible between GeNUA appliances running under the same
software version. Thus, a VPN connection between GeNUBox version 3.0 and
GeNUBox version 3.1 will fail.
3 New Features in GeNUBox 3.1
3.1 New features
• IPsec VPN throughput
IPsec VPN performance was significantly improved by optimizing the kernel and
drivers. A GeNUBox 100C revision 4 system now reaches 50MBit/s throughput.
Wirespeed is reached by GeNUBox 400 and 500s (revision 5 hardware), while
GeNUBox 700 revision 5 exceeds 2.5GBit/s.
• SSH VPNs with dynamic IPs
Dynamic IP addresses now can be used for one side of SSH VPN connections
via the Internet. Similar to IPsec, the VPN peer will passively wait for connection
initialization if the option ’NATted’ is selected.
• Address translation for SSH and IPsec VPNs
Both VPN implementations (SSH and IPsec) can perform IP address translation.
This assigns a so-called ’visible address’ to the real internal addres. The sending
system performs the address translation, thus enabling third party appliances to
initiate IPsec VPN connections to the ’visible address’.
• Unidirectional SSH VPNs
SSH VPNs now can initialize unidirectional connections. Thus, a branch office can
access all services on a central server as well as access the Internet, without requiring
an IP address range for the remote systems.

GeNUBox 3.1 – Release Notes Page 3
• Asymmetrical SSH VPNs
Opening services on a central server for access by remote systems sometimes
does not cover all needs. E.g., a central SAP system may need to access a remote
printer in a branch office.
This release permits the definition of VPNs that support the export of selected addresses
from the central server to a branch office.
• Compatability with new hardware
This release now supports the new hardware platforms GeNUBox 100C revision 4,
GeNUBox 100B revision 1 and GeNUBox 100IM revision 1.
• Hostname Transmission During Logging
Appliances now can optionally transmit their hostnames during logging per syslog.
• Rendezvous Operator LDAP Authentication
Operators configured on GeNUCenter can be centrally authenticated by LDAP.
Thus, a rendezvous operator does not require additional passwords on the
systems to administer remote maintenance setups.
• Two Factor Rendezvous Maintainer Authentication
Rendezvous maintainers configured on GeNUCenter can be assigned the permission
to actively open a remote maintenance connection by themselves. Maintainers
now can use cryptocards for the required additional authentication.
3.2 Bug Fixes
• Improved logging
The performance of the extended logging was improved.
4 Upgrade Installation
GeNUBox can be updated either via the central GeNUCenter management server or as
a standalone appliance.
Version 3.0 with any patch level is a prerequisite for the upgrade to GeNUBox 3.1. If
you are upgrading from an older version (e.g. 2.1), please first follow the migration steps
described in the GeNUBox 3.0 release notes.
4.1 Central Upgrade
• Upgrade GeNUCenter 2.2 Management Server
Please follow the upgrade instructions of the current GeNUCenter 2.2 release. This
upgrade also includes the current software for centrally managed GeNUBoxes.

Page 4 GeNUBox 3.1 – Release Notes
• Upgrade GeNUBox
After updating the management server, the appliances can be updated using the
GeNUCenter GUI. To do so, follow the instructions for updating appliances in the
GeNUCenter manual.
4.2 Upgrading A Standalone GeNUBox To Version 3.1
4.2.1 Software
You can obtain the file for the upgrade in different ways:
• Obtaining the release from the CD The release file B310 000.cpt is located in
the root directory of the release CD.
• Obtaining the relase from the GeNUA website You can also download the release
manually from the GeNUAs HTTPs server. All files are named using the
scheme BNNN MMM.cpt. NNN is the current release, MMM is the patch level for
that release. Please perform the following setp to update release 3.0 patch 1 to
release 3.1:
1. In a browser, go to https://www.genua.de/k/customer/gb_support/
release_download.en.html
Alternatively, go to http://www.genua.de and click on Customer Service
-> Internal Customers Area -> GeNUBox Support
2. Enter your license key, the old version number and patch level. Confirm by
clicking ”download“
3. Download the file B310 000.cpt
4.2.2 Backup the configuration
Choose SYSTEM → MAINTENANCE in the GeNUBox GUI. Click on EXPORT CONFIGURA-
TION and save the listed file.
4.2.3 Apply the release file
Choose SYSTEM → MAINTENANCE in the GeNUBox GUI. Specify the file B310 000.cpt
in the UPLOAD PATCH FROM FILE TO SYSTEM form field and press the upload button. The
GUI will guide you through the rest of the process.
5 How to Contact Us
GeNUA Gesellschaft fuer Netzwerk– und Unix–Administration mbH
Domagkstrasse 7, 85551 Kirchheim near Munich, Germany

GeNUBox 3.1 – Release Notes Page 5
Phone: +49 89 99 19 50-0, Fax: +49 89 99 19 50-999
E-Mail: info@genua.de, WWW: http://www.genua.de/
© 2011 GeNUA mbH, Kirchheim, all rights reserved. GeNUA, GeNUGate, GeNUCen-
ter, GeNUScreen, GeNUCrypt, GeNUBox and GeNUCard are registered trademarks
of GeNUA mbH.