Downloads and Upgrades:
For product downloads and information about upgrading Kerio Control, visit the GFI Upgrade Center.
If you have additional queries about these changes, please do not hesitate to contact us or an authorized GFI Partner directly.
Version 9.2.9
Released: January, 31 2019
Release notes
New:
Fixes:
- Kerio VPN - Disabled insecure and vulnerable protocol Blowfish
- Change snort nice value to -4 to improve traffic
- IRQ improvements for snort process to improve traffic
- HW NG500 crash
Note: Older Kerio VPN Clients are not able to connect using this build. To allow please follow the following steps.
Open ssh connection or from console
Go to /opt/kerio/winroute folder
Run ./tinydbclient "Update VPN set AllowBlowfishCipher=1"
Version 9.2.8
Released: November 27, 2018
Release notes
New:
- Limit Bandwidth Per Host
- Optimize Application Awareness memory footprint
- Reconfigure Kerio AV to optimize memory usage
- Kerio VPN new encryption protocol AES
- Kerio VPN Client supports the new protocol
- Force hostname for VPN clients
Fixes:
- Accessing User and Groups crashes WebAdmin on IE11
- User Statistics not getting updated
- Installation of VPN Client fails on Ubuntu 18.04 LTS 64-bit Desktop version
- No traffic over VPN after enabling 2FA on iPhone running iOS 11.4.1
- Kerio VPN 2-Step Verification Unable to resolve hostname
- Filtering Web Content by word occurrence returns broken HTML
- User details not getting updated in Active hosts
Note: Kerio Control VPN Client does not work with previous versions of Kerio Control (version 9.2.7 and earlier)
Version 9.2.7
Released: September 4, 2018
Release notes
New:
- 2-Step verification UI improvements
- DHCP leases column added in DHCP
- DST notification added to time zone settings page
- IPv6 anti-spoofing functionality added
- Linux VPN client now supports systemd
- Unify approach to entering URL in rules
- Upgraded Firefox install CA walkthrough screenshots
Fixes:
- Categories are not getting merged one when testing the miscategorized URLs in Content filter
- Changing description for multiple users changes only those who have separate configuration
- Crash with error handling during domain joining/leaving
- Disable view user statistic when multiple users are selected
- Entries with multiple members in Service list not getting searched
- HTTP Cache dump should works without selected cache any message type
- Interface group ordering disabled
- IPSec connection is dropped every 3 hours
- IPsec: Some fields are cleared when Cipher configuration dialog is closed
- P2P suspicious connection detection
- Preventing license usage when there is spoofing IPv6 connection
- Show details while joining AD fails because of time skew
- Technical support button on dashboard redirects to GFI support now
- Tunnel reset when cipher config dialog is closed
- User right column sort by rendered value
- SafeSearch blocking Google Cloud Messaging
- View Guest users in Kerio Control Statistics opens stats of "Not logged in" user
Version 9.2.6
Released: May 16, 2018
Kerio Control 9.2.6 includes security enhancements to allow encryption of personal and sensitive data collected and stored by the product.
Release notes
New:
- Added support for Encrypting personal/sensitive data stored on the disk
Fix:
- Crash in some occasions due to empty HTTP header name
Version 9.2.5
Released: March 22, 2018
Kerio Control 9.2.5 provides security improvements with an upgrade to the IPSEC VPN encryption key and complete removal of PHP code in the server code base. This release also includes over 20 customer reported fixes.
Release notes
New:
- Removal of PHP server-side scripting from Web Interface
- Upgrade of strongSwan 5.5.1
- Improved starting/stopping of VPN Client on Debian 8
- VPN Client now supports macOS High Sierra
Fixes:
- Translation issues
- User preferences automatic language set to detected language
- Installation of VPN Client fails on Windows 7, 8
- The WiFi driver has been updated for better compatibility and stability
- Dashboard Traffic Chart Tile does not show relevant units
- Changing description for multiple users changes only those who have separate configuration
- Empty exclusions for connection limit corrupts config
- View Guest users in Kerio Control Statistics opens stats of "Not logged in" user
- WebAdmin error during configuration import
- Install CA screenshots are from old FireFox
- Menu bar icon not optimized for Mac with retina
- Remote Services: Data are not reloaded when changes are discarded on screen reload
- Bandwidth management traffic dialog: wrong info text
- Crash in ThreadCpuTime, when gdata.start_error = 1
- Assert in DhcpLeaseTab::save()
- W10 Edge cannot login and access web interface if IPv6 is enabled
- Missing limiter of AV check failed alert
- Russian Business Network blacklist is missing in IPS update
- Remove unsecure DES-CBC3-SHA from cipherlist
- Wi-Fi should be WiFi (legal requirement)
- Kerio VPN tunnels are using local networks defined in IPsec section (as Remote networks)
- Exported cfg. backup is corrupted
- Sending notifications from Kerio Control - InCorrect Format of notification
- On Groups page, "Rights" column is not sorted in correct order
9.2.5 Patch 1
- Crash every hour when sending email for invalid user after antivirus scanning
9.2.5 Patch 2
- NTLM Authentication issue
- 2 Step Authentication issue
- Recompilation of WIFI driver with different flags for more compatibility
9.2.5 Patch 3
- Crash when SNAT missing target interface
9.2.5 Patch 4
- Crash when multiple pages denied occur while first deny is delayed
- Crash when internal page requests using same "lang" parameter
- UPnP not listening on all interfaces
9.2.5 Patch 5
- 2 Step Verification for user does not show QR Code
Version 9.2.4
Released: October 26, 2017
Kerio Control 9.2.4 provides a WiFi security update to the WPA2 protocol for the NG100W and NG300W hardware appliances.
Release notes
New:
- Updated hostapd for enhanced WiFi security
Version 9.2.3
Released: August 21, 2017
Kerio Control 9.2.3 brings fixes for customer reported issues including a Security Settings error and fixes a possible loop that resulted in the CPU locking.
Release notes
New:
- OpenSSL upgraded from 1.0.1u to 1.0.2j
- Updated country list used in SSL Certificate definition
Fix:
- CPU lock due to winroute loop
Version 9.2.2
Kerio Control 9.2.1 brings you significant performance improvements in all Kerio Control's security and inspection methods and filters. For example:
- Kerio Control now supports 64-bit hardware, which can improve performance by 15-20%
- Large segment offload (LSO)
Kerio Antivirus
Kerio Control 9.2.2 introduces Kerio Antivirus. Kerio Antivirus is powered by the Bitdefender antivirus engine and replaces the current Sophos Anti-Virus.
When upgrading to Kerio Control 9.2.2 from earlier versions, Kerio Antivirus automatically replaces the Sophos Anti-Virus.
Read more in our Knowledge Base: Configuring antivirus protection.
Kerio Control hardware devices support Wi-Fi
Kerio Technologies launches Kerio Control NG100W and Kerio Control NG300W hardware devices with embedded WiFi access point which provide connectivity for wireless devices such as cell phones, tablets, and laptops.
The Kerio Control WiFi module supports:
- Dual-band antenna, which provides 2.4 or 5 GHz
- Wireless standards 802.11a, b, g, n, and ac
- Authentication: none, WPA, WPA2 (PSK or Enterprise)
- Up to eight wireless networks (SSIDs)
Read more in our Knowledge Base:
Optimizing performance with LSO
Kerio Control includes large segment offload, also referred to as generic segmentation offload. LSO allows the network interface controller to process the segmentation of a data transfer and significantly improves performance. However, these improvements are noticeable only during large data transfers, such as file downloads, or video streams.
The throughput gain depends on the particular deployment. For example, you can expect up to 400 Mbps on the Kerio Control NG100 hardware appliance.
Read more in our Knowledge Base: Optimizing performance with large segment offload.
Blocking incoming connections from specified countries
Kerio Control allows you to filter incoming traffic by country (GeoIP). Kerio Control then blocks all IP addresses that belong to the countries specified in the filter.
Read more in our Knowledge Base: Blocking all incoming connections from specified countries.
IPsec VPN tunnel configuration update
Kerio Control 9.2 adds a detailed configuration for IKE and ESP ciphers used in IPsec VPN tunnels. With this detailed configuration you can easily create IPsec VPN tunnels with third-party firewalls.
Read more in our Knowledge Base: Configuring IPsec VPN tunnel.
Changes in system requirements
Added support
- Kerio Control supports 64-bit hardware.
- Hyper-V on Windows Server 2016.
Discontinued support
For more details, see Kerio Control technical specifications.
Upgrading
- Kerio Control 9.2 and newer supports 64-bit hardware.
- Upgrade from Kerio Control 8.0 and newer.
Kerio Control does not permit upgrades from versions older than 8.0.
