ExOS 7.4.4 Update 2 Release Notes

Software Update:

• Size: 679,030,168 bytes
• MD5 Hash: 94eba11be38ef5c867e323c7505f9bf7

Supported upgrade versions:

• 7.0.0, 7.0.1, 7.0.1u1, 7.0.2, 7.0.2u1, 7.0.3, 7.0.3u1 and 7.4.1, 7.4.2, 7.4.3, 7.4.4, 7.4.4u1
• 6.4.6, 6.4.7
   

Supported Platforms:

• 2061, 3062, 4010, 4061,4062, 6060, 6062, 8060, 8062, 8063, 10060, 10062, 10063, 12063, all Virtual Appliances
• NOTE: Some older systems with 4GB of RAM (specifically the 2061, 4010, 4061r1 and 4061r2) may experience memory-related issues upon upgrade. If this issue occurs in your system, please contact TAC about a potential memory upgrade for your unit. 

Upgrade Path:

• Upgrading from a previous version of 7.x, is a direct update to 7.4.4u2
• Upgrading from a version prior to 6.4.3:
  • Upgrade from appliance version to 6.4.3, and reboot.
  • Upgrade from 6.4.3 to 6.4.6 or 6.4.7, and reboot.
  • Upgrade from 6.4.6/6.4.7 to 7.4.4u2, and reboot.
• Upgrading from a 6.x version after 6.4.3:
  • Upgrade from appliance version to 6.4.6 or 6.4.7, and reboot.
  • Upgrade from 6.4.6 / 6.4.7 to 7.4.4u2, and reboot.
• The upgrade from 6.4.3 may take longer than normal due to the database upgrade that takes place.
• v7.x will only accelerate with peers running 6.4.3 and later due to a change to the Exinda internal protocols. If you are installing v7.x into an x800 estate, the best approach is to upgrade your core box to 6.4.3 and then install v7 on one or more branch offices.
  • This allows all the existing appliances to accelerate to the core appliance and allows the v7 appliance(s) to accelerate to the core box running 6.4.3

Product Updates

New Software Features

Improved L7 Signatures

Deprecated L7 Signatures

Bug Fixes

• D-05029 - Unexpected device shutdowns (due to squid)
• D-05118 - IOS/Apple Apps not being cached
• D-05813 - SMB Acceleration Process Dies
• D-05877 - ultrasurf traffic classified as https in 7.4.2
• D-05889 - High Memory utilization on 4010 with x800 license on version 7
• D-05903 - Secure traffic being blocked
• D-06042 - VC Graph doesn't display data for last 7 days
• D-06143 - Reduced permissions for TACACS or RADIUS administrator account on web UI
• D-06159 - iTunesU not correctly classified
• D-06173 - Control graphs and VC different for same subnet
• D-06210 - Dynamic Virtual Circuit not limiting per-user bandwidth
• D-06245 - Google Playstore traffic is classified as YouTube
• D-06332 - SMBAD: DiskManager thread locking issue.
• D-06365 - Facebook Mobile App Classified As HTTPS
• D-06380 - Check For Latest Updates shows new version available (but it shouldn't)
• D-06385 - Google Apps being Classified as "HTTPS and UDP Ports 443->xxxxx (random port number)"
• D-06400 - Dirty Cow Vulnerability Patched
• D-06444 - Traffic of "Skype for Business" is being misclassified as "RTP[dynamic/115]" in firmware 7.4.4
• B-07710 - Enable sub-classifications of Facebook traffic available in Appliance Applications

• D-06174 - High WAN memory usage issue (increase in file descriptors to stabilize WMD)
• D-06338 - Cluster failure for 8k and greater devices 
• D-06380 - Check For Latest Updates shows new version available (although it shouldn't)

• D-03355 - Setting custom range end time on web UI monitoring graphs is off by 1 hour
• D-04189 – Slow File Transfers with SMB Acceleration Turned On. For workaround refer to Knowledge Base Article: 1667
• D-04779 - Skype is not classified correctly
• D-04780 - Facebook Video and Voice classified as RTP
• D-04781 - small portion of Netflix traffic is being misclassified as HTTPS
• D-05065 - Betternet VPN Doesn't have Application
• D-05072 - EA Sports Multiplayer Traffic Classification
• D-05105 - Cluster - showing only local traffic on realtime
• D-05502 - Prepopulation doesn't work in 7.4.1
• D-05750 - Clustering performance degradation after upgrading from v6.4.3u12 to v7.4.0
• D-05969 - Sending command ‘image install’ from SDP not working
• D-06026 - FTP acceleration not working when cluster enabled in 7.4.1. For workaround refer to Knowledge Base Article: 1667
• D-06064 - SMB - Windows 10 Sometimes Can't Connect to Windows Server 2008R2 /2012 due to SMBv3 related settings
• D-06131 - Can't add applications that use arbitrary strings as subtypes from CLI
• D-06157 - Repeated diagnosticsd warnings after upgrade to 7.4.3 (workaround fix)
• D-06162 - Exinda crashes when IPv6 traffic passes through
• D-06167 - Debugging Left On and affecting internal logging
• D-06168 - ea-games not correctly classified
• D-06169 - WebUI on Exinda slow during initial configuration without internet access
• D-06211 - No reduction or acceleration when client side Cluster Slave controls the SMB connection
• D-06250 - Systemize fix for CVE-2003-1418 - Apache Server vulnerability
• D-06285 - Game Path of Exile is Classified as Warcraft 3
• D-06291 - Prepopulation SMB fails when servername is used and depth of path greater than one gives error "Failure, Invalid argument"
• D-06363 - Edge Cache Crashing with "Swapfile Header Inconsistent" (requires additional steps, please see KB article for information)
• B-05743 - Let SMBv3 traffic pass natively - do not downgrade to SMBv1 or SMBv2
• B-07024 - SMB - extracting archive over accelerated connection is slow

Known Issues

• D-03974 – Squid process crashing
• D-05870 – Report Legend on ‘Control Discard Graph’ Incorrect
• D-05990 – Appliance will crash if blank application group is used in a VC
• D-06053 – RTP G711/722 Classification Fails
• D-06270 – Firefox generation “SEC_ERROR_EXPIRED_ISSUER_CERTIFICATE” when using HTTPS Edge Cache
• D-06477 - Facebook Audio traffic is classified as Facebook Video