Network Security

Good morning TDR Users, 

On 11 March 2020, a pen testing company, RedTeam PenTesting GMBH, disclosed a credential disclosure vulnerability in the AD Helper to exploit-db.com (link below). The disclosure states that by accessing the AD Helper web interface, a call to an API endpoint is made which responds with plaintext credentials to all configured domain controllers.

On 9 March 2020, WatchGuard released a fix for this vulnerability in AD Helper 5.8.5.10317. In this version, the offending REST endpoint no longer returns plaintext passwords. In addition, the service running the configuration UI...

Good morning TDR Users,

WatchGuard has released an AD Helper update, to be deployed immediately. This update resolves an issue found by RedTeam Pentesting GmbH and improves the security of the AD Helper. WatchGuard thanks RedTeam Pentesting GmbH for reporting this issue so that we could resolve it quickly. 

In AD Helper version 5.8.5.10317 and higher, the service that runs the AD Helper Configuration UI will only be available locally through the loopback IP address (localhost/127.0.0.1). This means that users must now log in to the computer locally to access the AD Helper Configuration UI. 

Pl...

We are excited to announce that Threat Detection and Response has a new feature to Beta test!

Ransomware authors are getting smarter and bolder. Every day they find new ways to avoid detection and steal data. TDR already protects your endpoints from devastating ransomware attacks. As ransomware attacks evolve, we must improve our ability to stop them with faster detection through machine learning.

Machine Learning for Host Ransomware Prevention

In 2018, we enhanced TDR's Detection and Response (D&R) engine with machine learning. This significantly increased our general indicator detection rate...

We are pleased to announce the availability of WatchGuard Dimension 2.1.2 Update 3. This maintenance release is now available from the Software Download Center, together with release notes and update instructions. WatchGuard Dimension 2.1.2 Update 3 provides the following fixes:

General

• Dimension now supports PostgreSQL versions up to v10.8.
• This release resolves a PCI compliance failure due to behavior of HTTP redirect to HTTPS connection feature.
• Quick Setup Wizard no longer stalls on administrator passphrase step on Hyper-V.
• This release improves performance with multiple connected devices....

WatchGuard has posted Fireware 12.5.2 Update 1 in the Software Download Center. This update introduces several key bug fixes, as well as initial support for management of Firebox system tasks directly from WatchGuard Cloud. Full details are provided in the Release Notes, which are available here.  Update 1 was released on December 23 to address an issue in environments with asymmetric routing. More details are about the issue are available in our knowledge base article.

Key Updates of This Release:

    - Updated versions of SSL and IPSec VPN clients, SSO client support for macOS Catalina

    -...

We are excited to announce that Threat Detection and Response (TDR) has some new capabilities! By popular demand, WatchGuard has made pre-configured Antivirus Exclusions a reality! Gone are the days of copying and pasting directory paths one by one into the Exclusions page.  These predefined exclusion sets make it easy to add exclusions for the most common antivirus vendors. 

To see these changes in the TDR Web UI, select Configuration > Exclusions. The Exclusion page now includes two tabs: 

• Custom Exclusions - Shows the exclusions you configured manually before version 5.8.0. Any custom...

Fireware 12.5.1 Update 1       
WatchGuard has posted Fireware 12.5.1 Update 1 at the Software Download Center. There is no corresponding update to WSM. This maintenance update provides resolution to issues that have been reported by customers. Based on feedback from our partners, we plan to make more bug fix update releases generally available instead of providing just customer speciific patches or hotfixes. Full details are provided in the Release Notes, which are updated since the 12.5.1 GA release. 

Does this release pertain to me?
Fireware 12.5 Update 1 is available for all Firebox T and...

WatchGuard Cloud Visibility Updates
We launched WatchGuard Cloud Visibility back in April of this year, and since then WatchGuard customers have enthusiastically adopted the new platform. Our product development team has continued to add new features and enhancements over the past few months. We capture the updates each week in our WatchGuard Cloud Release Notes. Understanding that everyone is busy and won’t find time to review these closely, we will also publish regular updates here on the product blog. Some of the major highlights since we first announced General Availability are listed...

WatchGuard’s Threat Detection and Response (TDR) has been protecting your assets for more than two years. We continue to improve stability and performance while improving our detection and remediation of threats before they can cause a problem in your network. 

To take full advantage of the threat detection capabilities available in TDR, we recommend that you enable the Host Sensor Kernel Driver features on all desktop and mobile devices. After extensive testing, we have determined that you will experience faster and more thorough detection and remediation for both our traditional detection...

New Firebox T35-R Is a Ruggedized Appliance Built for Harsh Conditions
It’s an exciting time for product launches at WatchGuard, with the release of DNSWatchGO and Passport last week! Today I am excited to announce the release of our release of our newest Unified Threat Management (UTM) appliance. Firebox T35-R is a compact security appliance that features an industrial enclosure that is both dust- and splash-proof, and capable of operating in extreme temperatures. The ruggedized construction of Firebox T35-R means you can deploy the appliance in harsh environments without needing to build a...