Available for All XTM Appliances (Except XTM 21/22/23)
WatchGuard is pleased to announce the release of Fireware XTM v11.7.2 and WatchGuard System Manager v11.7.2, which includes support for the new WatchGuard AP family of wireless access points. Using the latest generation of wireless hardware, the WatchGuard AP extends best in class UTM security to your wireless network and provides seamless roaming for up to 16 SSIDs. Best of all, you can set up and manage your WatchGuard AP devices from a single console, using your current Fireware XTM management tools (Policy Manager or the Fireware XTM Web UI). We recommend that you review the new WatchGuard AP Deployment Guide, or the Fireware XTM Help, for information on how to get started with a new WatchGuard AP100 or AP200 wireless access point.
In addition to this major product enhancement, we are pleased to release a large number of bug fixes and smaller enhancements, including hotspot support for wired networks, and a significant update to the spam detection engine used in our spamBlocker service. This release also corrects a few security vulnerabilities in our Quarantine Portal. We’d like to thank Wayne Murphy and Ben Burns of Sec-1 for helping us improve the security of our product.
For more information about enhancements and the issues fixed in Fireware XTM v11.7.2, see the Release Notes or What’s New in Fireware XTM v11.7.2 [PPT file].
Does This Release Pertain to Me?
Along with support for the wireless access points, Fireware XTM 11.7.2 also includes many other improvements and fixes. If you have a XTM 25/25-W/26/26-W, 3 Series, 5 Series, 8 Series, 800 Series, 1500 Series, 2500 Series, 1050 or 2050 device and wish to add new wireless access points or take advantage of the updates mentioned in the Release Notes, you should consider upgrading to version 11.7.2. Please read the Release Notes before you upgrade, to understand what’s involved.
Note: This update does not apply to XTM 21/22/23 appliance owners, or Firebox X e-Series owners. However, we will release new versions of 11.6.x and 11.3.x shortly for those devices as well.
How Do I Get the Release?
XTM appliances owners who have a current LiveSecurity Service subscription can obtain this update without additional charge by downloading the applicable packages from the Articles & Support section of WatchGuard’s Support Center. To make it easier to find the relevant software, be sure to uncheck the “Article” and “Known Issue” search options, and press the Go button.
You can install Fireware XTM 11.7.2 on XTM 25/25-W/26/26-W, 3 Series, 5 Series, 8 Series, 800 Series, 1500 Series, 2500 Series, 1050 and 2050 devices. It does not support the wired or wireless versions of XTM 21/22/23. An 11.6.5 maintenance update for these products will follow shortly. If you need support, please enter a support incident online or call our support staff directly. (When you contact Technical Support, please have your registered Product Serial Number, LiveSecurity Key, or Partner ID available.)
- U.S. End Users: 877.232.3531
- International End Users: +1.206.613.0456
- Authorized WatchGuard Resellers: +1.206.521.8375
Don’t have an active LiveSecurity subscription for your XTM appliance? It’s easy to renew. Contact your WatchGuard reseller today. Find a reseller »
Does this version help the stability of websense?
Corey Nachreiner says
To be honest, I’m not sure. I’m mostly the messenger in this case. I hadn’t realize there were stability issues (though we did make a big improvement to WebBlocker in our last release). I hadn’t encountered any particular issues in my small test environment.
If you check out the Resolved Issues section of the release notes, you can learn more about what this release fixes. I just did a quick search and saw this:
“An issue that caused web browsing to slow or fail when you use WebBlocker with Websense server has been resolved. [71057, 71557]”
If that is what you are talking about, then yes it is fixed in 11.7.2
Alexander Kushnarev (Rainbow Security) says
Besides ability to completely support WatchGuard Access Points (AP 100 and AP 200), it will be interesting to estimate the spamBlocker functionality after changing “cloud-core” from CommTouch to Mailshell. As far as I know – many leading vendors are in OEM partnership with Mailshell: McAfee, Eset, NetGear and others.
Corey Nachreiner says
Yes. Mailshell gets rated pretty well in some 3rd party shootouts, so we expect it to do well. However, I do also know that we will be releasing an update soon that has their improved SDK… so it should get even better.
Kelly Mathenia says
Mailshell is killing me! After applying 11.3.6 on my X750e I was unknowingly “upgraded” from Commtouch to Mailshell. I’t been a nightmare ever since. Spam flowing in by the hundreds. Commtouch was working great. Wish I would of had the choice. Support just kind of gave up, said to forward them samples. No word in weeks. Just closed my case. I’ve been deploying Watchguard systems for 15 yrs. Really disappointing.
Corey Nachreiner says
Well then good news, Kelly. We have actually been following customer feedback on this, and as a result we have moved back to Commtouch for SpamBlocker. Our 11.7.4 release, which came out a few weeks back, brings Commtouch back to XTM appliances.
As I understand, we will also do a 11.3.x release soon, to do the same for legacy e-Series customers. We took our customers feedback seriously, and chose to switch to what they preferred. Not sure why support closed your case, but look out for the next 11.3.x release.
Rodrigo Avila Soto says
I have issues either with the websense or surfcontrol in http-proxy in one of two XTM505 and one XTM510 that is still works fine after the upgrade
why? I don’t know why, but meanwhile the support ticket still open, I had to rollback to 11.6.3 that works fine for now.
Mailshell is no good solution.. I was forced to downgrade from 11.7.2 to 11.7 because it was too false positives… Please tested your product better because in my company we have lost a lot of emails…