SANGFOR - IAM - v12.0.44 - VersionRelease Notes

IAM
IAM 12.0.44 New Version Release Notes

Version 12.0.44
Change Log
Date Change Description
Jan 14, 2021 Version 12.0.44 document release note

CONTENT
Chapter 1 What is New ............................................................................................................................ 1
Chapter 3 Upgrade Instruction............................................................................................................... 1
3.1 Confirmation before upgrade ........................................................................................................................... 1
3.2 Upgrade Limitations ............................................................................................................................................ 2
3.3 Upgrade Recommendations............................................................................................................................... 3
3.4 Upgrade Procedure .............................................................................................................................................. 3
3.5 Handling of Upgrade Failure ............................................................................................................................. 4
Chapter 4 Precaution ................................................................................................................................ 5
IAM 12.0.44 Verison Release Document
Chapter 1 What is New

1. A high-quality version that solves the existing problems of the product and optimizes some
functions.
2. Improve the quality of IAM products, improve product stability, and improve product safety.
Chapter 2 Resolved Issues

1. Fixed 17 online problems.
2. Fixed 58 serious and high-risk security issues.
3. Fixed 11 crash issues.
Chapter 3 Upgrade Instruction

3.1 Confirmation before upgrade
1. Whether the software upgrade license is within the validity period
2. Check whether the current version meets the upgrade conditions.
Support upgrade to IAM12.0.44 version from the following versions, with the update package
IAM12.0.44(20201201).ssu)IAM11.0 official version, IAM11.0R2 beta version, IAM11.0R2 official version,
IAM11.2 beta version, IAM11.2 official version, IAM11.2R1 beta version, IAM11.2R1 official version,
IAM11.6 beta version, IAM11.6 official version, IAM11.9 beta version, IAM11.9 official version, IAM12.0.7
official version, IAM12.0.8 beta version, IAM12.0.8 official version, IAM12.0.12 beta version, IAM12.0.12
official version, IAM12.0.13 beta version, IAM12.0.13 official version, IAM12.0.14 beta version,
IAM12.0.14 official version, IAM12.0.17 beta version and IAM12.0.17 official version, IAM12.0.18 beta
version, IAM12.0.18 official version, IAM12.0.23 beta version, IAM12.0.23 official version, IAM12.0.25
beta version, IAM12.0.25 official version, IAM12.0.26 beta version, IAM12.0.26 official version,
IAM12.0.27 beta version, IAM12.0.27 official version, IAM12.0.40 beta version, IAM12.0.40 official
version, IAM12.0.41 beta version, IAM12.0.41 official Version, IAM 12.0.42 beta version, IAM 12.0.42
official Version.
3. For External Report Center:

Separated BI update package (BusinessIntelligenceSetup_3.0.12_BI(20191010)_eng.zip) for English
Version is able to be installed on:
DC11.0 official version
DC11.0R2 official version
DC11.9R1 official version
DC12.0.2 beta version
DC12.0.3 official version
BI3.0.1 12.0.8 beta version
W.: www.sangfor.com | W.: community.sangfor.com | E.: tech.support@sangfor.com 1

BI3.0.1 12.0.8 official version

3.2 Upgrade Limitations

Limitations Solutions Impacts on Functions
After Upgrade
It is not supported to Disable HA mode. For new version of IAM
upgrade the IAM unit unit deployed in Bridge
which is deployed in mode, HA active-standby
Bridge mode and has HA mode is not supported.
mode enabled with active-
standby mode.
Upgrade is not supported Log in to the back end of The new version does not
when Wireless access IAM support wireless access
control license is device and execute a control.
activated. command and then
perform upgrade again.
Upgrade cannot be Contact Sangfor developer None
performed on customized for migration.
version.
Upgrade is not supported Simply delete the related After upgrade of VPN
if there are mobile VPN mobile VPN user module, mobile VPN users
users configured. configuration. cannot get connected.
Upgrade is not supported Simply delete the related After upgrade of VPN
if there is virtual IP mobile VPN user module, mobile VPN users
address pool configured configuration. cannot get connected.
for mobile VPN users.
If VPN is not configured Enable multiple line policy None
multiple line policy, and perform upgrade
upgrade is not allowed if again.
there is IPSec VPN
connection established via
Line 2.
Upgrade is not allowed if Force upgrade after None
antivirus is enabled. tagging it at the
backstage.

VPN configurations have Simply delete the related None

default user enabled and mobile VPN user
apply local authentication. configuration.
For devices that have been Upgrade is not allowed. Upgrade is not allowed.
in use for more than 5
years, upgrading to newly
released versions is no
longer allowed.
Specifically: License
activation time is used as
start time of using device.
End time is generated
according to release date
of update package. If the
period between start time
and end time is longer than
66 months (5.5 years),
upgrade to the current
package is not allowed.
For IAM unit deployed in If that port is not open any The 9998 port for device
Route mode, if WAN more, upgrade is allowed correlation is used for
interface has port 9998 then. internal programming
enabled, upgrade to IAM only.
12.0.27 is not allowed.
After upgrade to IAM Log in to console and Port 51111 is disabled by
12.0.42, port 51111 is enable Firmware Updater. default.
disabled by default, and
SANGFOR Firmware
Updater cannot connect to
device for upgrade.
After upgrade to IAM For security concerned， Disable the Device
12.0.44 version, the auto-negotiation is not Correlation Auto-
Device Correlation supported on this version negotiation feature
Auto-negotiation has ，please turn it off and and continue upgrade.
been removed update again
3.3 Upgrade Recommendations

1. Device will restart automatically upon upgrade completion.
2. As device will restart automatically upon upgrade completion, network will get interrupted if it is
connected to customer's network.
3. Do not reboot device manually nor cut off power during upgrade.
4. Upgrade process may take about 20-30 minutes.
5. During upgrade process, network connection will be interrupted for 3 to 5 minutes.
3.4 Upgrade Procedure

Before upgrade, do the following:
1. Obtain the update package of this version from
http://community.sangfor.com/plugin.php?id=service:download&action=view&fid=9#/6/all

2. Launch Sangfor Firmware Updater 6.0, connect it to IAM unit, and load that update package to start
upgrade.
The upgrade procedure for other means of upgrade is similar to that for IAM12.0.27 official version.
For more guidance, please refer to:
http://community.sangfor.com/plugin.php?id=sangfor_databases:index&mod=viewdatabase&tid=2054
3. The download path for BI is:
http://community.sangfor.com/plugin.php?id=service:download&action=view&fid=9#/14/all
4. BI deployment guide:
http://community.sangfor.com/plugin.php?id=sangfor_databases:index&mod=viewdatabase&tid=831
3.5 Handling of Upgrade Failure

Upgrade Failure Prompt on Firmware Updater Solution
High availability mode is not "MODE_BRIDGE and HA_CLU 1. Visit the web admin
supported by the new version. not support!" console, disable high
availability and then
perform upgrade again.
Wireless access control is "wireless sn is valid, not allow to Please contact TAC
enabled, which is not supported upgrade" team in this issue.
by the new version of IAM unit.
Devices with mobile VPN users There are mobile users exist. Remove the mobile
configured are not supported to Please delete the mobile users users before upgrade.
upgrade. before trying again
Devices with virtual IP pool There are virtual IP addresses for Remove the virtual IP
available for mobile users are mobile users being assigned. before upgrade.
not supported to upgrade. Please remove them before
Please remove them before trying again
upgrade.
Upgrade is not supported when There are IPSEC connections Enable Multiline and
multiline is not enabled but IPsec based on line two on condition add line 2 before
connection is established that the multiline feature is not upgrade.
through line 2. enabled. Please enable the
feature or change to the line one
before upgrading.

Chapter 4 Precaution
1. Internal database version will impact features but not upgrade. Please keep internal database up to
date.
2. Central management: Support central management via Sangfor BBC; Not support central
management via Sangfor CMC.
3. Support pass-through, turning on pass-through does not require the device to restart.
4. Support HA.
5. Authorization change: For IAM trial license, testing is performed on site after trial license is
activated; for paid license, no additional operation is needed, because authorization is granted
together with delivered hardware.
6. Downgrade is not supported.
7. Custom webpage based on 11.x to 12.0.23 old template will be replaced by the new template after
update to 12.0.25 and later.
8. SSL content root cert used in decryption man in the middle required to be reimport to endpoint’s
web browser after update to 12.0.42 version and above
9. If the device configured with “Use SSL to encrypt username and password” and is using Windows
XP with IE6/IE7, do not upgrade to IAM 12.0.42 version and above, it will affect the password
authentication redirection.
10. BBC mail easy deployment feature has been removed from IAM 12.0.44 version.
11. Device Correlation Auto-negotiation has been removed from IAM 12.0.44 version.


SANGFOR - IAM - v12.0.44 - VersionRelease Notes

Uploaded by

Copyright:

Available Formats

SANGFOR - IAM - v12.0.44 - VersionRelease Notes

Uploaded by

Document Information

Original Title

Copyright

Available Formats

Share this document

Share or Embed Document

Sharing Options

Did you find this document useful?

Is this content inappropriate?

Copyright:

Available Formats

SANGFOR - IAM - v12.0.44 - VersionRelease Notes

Uploaded by

Copyright:

Available Formats

IAM

IAM 12.0.44 New Version Release Notes

Jan 14, 2021 Version 12.0.44 document release note

Chapter 1 What is New

Chapter 2 Resolved Issues

Chapter 3 Upgrade Instruction

3. For External Report Center:

W.: www.sangfor.com | W.: community.sangfor.com | E.: tech.support@sangfor.com 1

BI3.0.1 12.0.8 official version

3.2 Upgrade Limitations

W.: www.sangfor.com | W.: community.sangfor.com | E.: tech.support@sangfor.com 2

VPN configurations have Simply delete the related None

3.3 Upgrade Recommendations

3.4 Upgrade Procedure

W.: www.sangfor.com | W.: community.sangfor.com | E.: tech.support@sangfor.com 3

3.5 Handling of Upgrade Failure

W.: www.sangfor.com | W.: community.sangfor.com | E.: tech.support@sangfor.com 4

W.: www.sangfor.com | W.: community.sangfor.com | E.: tech.support@sangfor.com 5

W.: www.sangfor.com | W.: community.sangfor.com | E.: tech.support@sangfor.com 6

You might also like