Skip to content

AXS Guard UTM Release Notes

The release notes provide information on new product features, improvements, known issues, and bug fixes for each AXS Guard version.

Individual software components are documented in the product manuals section. Carefully review this document to avoid configuration difficulties.

Version 11.1.1 - Latest

Lock down your admin account with free 2FA:

We're pleased to offer a free OATH license (1 token) in this release, which can be used to secure your administrator account. This enables you to activate 2FA for logging in to the web-based administration tool.

Web-based Configuration Tool:

Changes made in configuration pages with an Edit as list button will now be saved automatically, eliminating the need to save the field separately before saving the entire page.

OpenVPN & PAX:

Improve network stability for VPN connections by increasing the default Dead Pear Detection values. This leads to less unneeded reconnections when ping packets are accidentally dropped. The new default values are shown below.

Web Access:

Include timing information in Web Access logs for every request processed by the AXS Guard proxy. This feature assists in troubleshooting slow proxy issues.

Version 11.1.0

Increased SSL/TLS security:

Support for legacy protocols such as SSLv3, TLS 1.0, and TLS 1.1 has been removed. Only TLS 1.2 and 1.3 are now supported, along with HIGH-type ciphers. This may affect AXS Guard configurations where old Windows versions and clients are still being used (Windows Vista/Server 2008 and older). Navigate to System -> Security -> TLS for details.

Extended root partition:

The AXS Guard root partition size has been increased from 10GB to 15GB, to mitigate disk space issues and warnings.

Updated Base System:

Various software packages have been updated to their latest versions for improved security, performance, and stability.

Package Removals:

The following legacy features have been removed and are no longer supported:

  • SSL Web Portal (Adito)
  • SSL VPN (SSL explorer)
  • Sumo Logic SIEM

Reverse Proxy:

The following backends are deprecated and have been removed:

  • OWA2003
  • OWA2007
  • OWA2010