EFW 3.2.1 issues?

[Guest]

[peel70]

Hello,
I've some issues with the 3.2.1 Community EFW release.
I've actually 1 lan, 4 wan, 1 dmz ports.
I've configured transparent proxy on lan and proxy disabled on dmz.

If I try to configure some network static routes from lan to wan, these routes does not work if the ip or mac address of the source device is not free from proxy rules.

Creating HOST does not work without firewall reboot, accessing the firewall via ssh and ping that new host work fine.
On the Lan the firewall act as DHCP server and in the configuration of the DHCP server the firewall is the only DNS address provided.

On the DMZ, where the proxy is disabled, on the Windows PC's I've to disable the internet explorer's connection lan settings "automatically detect settings" checkbox in order to navigate to the internet; it seems that the firewall send the automatic proxy configuration requirements

On the old Pc I've 2.2 Community version that does not have this issues.

Is there something wrong in some settings?

regards
Enrico

[dda]

Don't think 3.21 is quite finished, i had plenty issues and I had to go back to 3.0.  You can submit issues on jira.endian.com but because it is paid users of course are given priority.

[peel70]

Hi,
thank you for your reply

[peel70]

sorry dda,
the 3.0 is a development release, what version do you think is the best for a production envinronment?

Best regards
Enrico

[dda]

it says development but I have been using Endian since V2 and this is stable with the best balance of features.  My problems are related to authentication with LDAP elsewhere others have mention problems with NTLM.  If you don't need either of these you can probably try your luck with the newer versions.

[peel70]

Hi,
I've tried LDAP with 3.2.1 and it works fine (I'm using openLDAP con linux server no Windows AD), but for a small network that I have (about 25 PC on the LAN) I prefer transparent proxy and put rules in Access Policy for LAN Servers to bypass content filtering.

[dda]

Interesting... I am using Microsoft ADAM i think its called and it is not working.