SoftHub

Devices:

 - LM-2400, LM-3000, LM-3600, LM-4000, LM-5000, LM-5300, LM-5400, LM-8000

NOTE:

As of 7.1.34.1, the VMware vCenter Operations (vCOPs) v5 LoadMaster plugin is no longer being maintained because VMware have ended their support of vCOPs v.5.8.1.

Upgrading an existing LoadMaster for Amazon Web Services (AWS) from a pre-7.1.34 firmware version to 7.1.34 and above will not work. This issue is caused by AWS de-emphasizing and eventually deprecating support for Para Virtual (PV) images. Therefore, all new LoadMaster versions will now support Hardware Virtual Machine (HVM) AMIs only. For help upgrading please contact KEMP Technical Support.

New Features:

- Improvements made to the home page of the LoadMaster Web User Interface (WUI)

Additions have been made to the WUI home page, including health widgets for the system and Web Application Firewall (WAF).

- Template creation capabilities have been added

It is now possible to export Virtual Services as templates which can then be uploaded and reused.

- Domain Name System Security Extensions (DNSSEC) client support has been added

The LoadMaster is now capable of performing DNSSEC queries.

- Microsoft Azure Resource Manager (ARM) deployment is now supported

It is now possible to deploy the LoadMaster in ARM mode.

- The LoadMaster for Amazon Web Services (AWS) now supports Bring Your Own License (BYOL)

It is now possible to download a Free Edition of the LoadMaster for AWS, and then update it with a different license.

- Support has been added for RADIUS challenge/response

The LoadMaster now supports RADIUS challenge/response authentication.

Feature Enhancements

- Enhanced the “Permitted Groups” functionality in the Edge Security Pack (ESP) to work with client certificates.

- RSA-SecurID and LDAP dual factor authentication is now supported.

- Two Virtual Service application configuration templates have been published:

a) Dell Wyse vWorkspace

b) Adobe Connect

- CIt is now possible to configure “non-standard” web server responses as healthy.

- CImprovements made to Common Access Card (CAC) WUI authentication.

- CCentral SSL cipher set management has been added to the WUI and API.

- CIt is now possible to delete custom GEO locations.

- CCCImproved Virtual Service WAF statistics to better reflect WAF health.

- CWhen SSOMGR debug traces are enabled, the SSOMGR log file now gets compressed at midnight, as long as the file is not empty.

- It is now possible to license the LoadMaster via a HTTP(S) proxy during installation.C

- Added support for virtIO disksC for KVM LoadMasters.

- CCExtended region support has been added for LoadMasters in AWS.

- Added a new L7 configuration option which allows empty headers.

- Added a PowerShell API command to add a SubVS.

- Added a parameter for Subnet Originating Requests to the Virtual Service API commands.

- Added PowerShell API commands relating to health check aggregation and configurable health thresholds.C

- PowerShell and Java API commands have been added for adding custom locations to FQDNsC.

- Improvements made to the PowerShell API in relation to Virtual Services and SubVSs.

- RCeplaced the API parameters tcpfailover and cookieupdate with hal4update and hal7update, respectively.

- Updated OpenSSL to version 1.0.2h to mitigate against the CVE-2016-2107 vulnerability.

- Mitigated against CVE-2015-5621 vulnerability.

Issues Resolved

PD-7035

Increased the length of the redirect URL field.

PD-6644

Changed the VLAN interface ID to the actual VLAN number.

PD-6921

LDAPS is now capable of running in FIPS mode.

PD-6570

Improved WAF stability.

PD-7083

Improved RADIUS health checks.

PD-7064

Fixed an issue relating to content rule removal.

PD-6950