Datto Networking Appliance (DNA): Release notes

Description

Index

Previous years

Releases

Firmware release - 2024-09-30

Version 1.21.6

Security updates

  • Update of OpenSSH library to address security vulnerabilities.

Firmware release - 2024-05-22

Version 1.21.5

Bug fixes

  • Previously, it was possible for site-to-site VPN connections to fail if the selected Hash Algorithm was SHA384 or SHA512. Now, site-to-site VPN connections will behave as expected in all supported cryptographic modes.
  • We've fixed an issue that could prevent LTE modems in an in_error state from properly recovering.
  • This release resolves an issue that caused site-to-site VPN tunnel creation to fail due to missing IPSEC routes.

Server release - 2024-04-22

Version 2024.4.1

Improvements

  • This release introduces device check-in service optimizations and bug fixes.

Server release - 2024-01-31

Bug fix

  • We fixed an issue that could cause the Test Failover function to report test failures when there were no underlying problems.

Firmware release - 2024-01-17

Version 1.21.4

New Features

  • Introduced new DNA model for UK, EU and Australia

Bug Fixes

  • Fixed an issue where DNA would connect to 2G or 3G but not 4G backup internet services in Europe

Security updates

  • Updates to OpenSSL to address security issues

Server release - 2024-01-17

New feature

  • We've introduced new DNA models for UK, EU and Australia.

Bug fix

  • Previously, it was possible that the DNA would connect to 2G or 3G failover services in Europe but not 4G. Now, the DNA will leverage 4G failover whenever it is available.

Security

  • This release contains updates to OpenSSL to address potential security issues.

Server release - 2023-07-05

Bug fix

  • We've resolved an issue that could cause the Auto channel setting to use the wrong channel in 2.4 GHz mode.

Server release - 2023-06-28

Improvements

  • Auto Channel is no longer an option for channel selection, as it caused problems with DFS channels in the United Kingdom and Australia.

Security

  • This release introduces various security improvements to protect against malicious payloads.

Bug fixes

  • We've resolved an issue that could cause unauthenticated OpenVPN clients to be displayed as "connected."
  • The field input validation for Source IP/Subnet has been updated to prevent bad firewall rule creation.
  • DNAs will now correctly delete themselves from VPN topologies when being removed from customer accounts.
  • This release resolves an issue that could cause Network Usage and VPN details information to be blank.
  • We've resolved an issue that prevented web filters from being enabled.
  • Previously, it was possible for the VPN client to receive DNS server information from disallowed LANs. The client will no longer exhibit this errant behavior.
  • OpenVPN clients of version 2.6.0 and up will now pass traffic when connected.
  • We corrected an issue that could cause the DNA management interface to prevent configuration of the first channel of the 2.4 GHz and 5 GHz DNA WiFi frequencies.

Server release 2022-11-14

Improvements

  • Added D200 vendor type preset to DNA site-to-site VPN config
  • Allow site-to-site VPNs using the Meraki preset to use IKEv2 on DNAs

Bug fix

  • Corrected an issue that prevented dna.datto.com from properly loading

Version 2022-10-19

Version 1.21.3

Improvements

  • Enabled kdump utility for Datto Support troubleshooting.

Release 2022-07-14

Version 1.21.2

Improvements

  • OpenWRT update from 17.01.4 to 19.07.08 (includes many security and bug fixes).
  • Updated Linux kernel version from 4.4.92 to 4.14.24.1 (to address kernel panic reboots).
  • LTE updates to account for 3G network sunsets in North America and additional modem support (NL-SW-LTE-TC4NAG for VZW, AT&T, and Rogers [CA]).

Bug Fixes

  • Resolved an issue that caused DNA to not regenerate certificates.
  • Fixed a problem where LAN clients were not being reported correctly in the status page.
  • Resolved an issue that caused a modem reboot command to fail when issued by Datto Support.
  • Fixed a problem that could cause openVPN not to function after firmware upgrade.
  • Resolved OS instability issue that caused Datto support to recommend disabling Intrusion Detection and Prevention. Reenable Intrusion Detection and Prevention after upgrading.

Security

  • Various security vulnerability fixes.

Hotfix 2022-02-07

Tasks

  • Updating of Ublox DNA-ATT Modem Manager for 3G Sunset.

Release 2020-09-23

Server release

Improvement

  • Strengthened ipsec cipher requirements.
  • Removed the High LTE Usage alert from the Device GUI.

Bug fixes

  • Fixed an issue causing openvpn to enable/disable incorrectly.

Release 2020-09-21

Version 1.20.4

Bug Fix

  • Fixed an issue where the DNA required a reboot after failing back to primary ISP connection to continue passing traffic.

Release 2020-08-18

Server release

Improvement

  • Newly created users are now shown by name in the GUI, instead of by auth UUI.

Bug Fix

  • Fixed an issue which could cause text boxes in the Traffic Policy card to change position if a user enters invalid information.

Release 2020-04-01

Version 1.20.2

Bug Fix

  • Fixed an issue where some LTE sim cards have trouble connecting to the AT&T network.

Release 2020-03-12

Version 1.20.1

Bug Fix

  • Resolved a bug where an internal packet buffer could be freed while in use, resulting in system instability.

Release 2020-02-10

Improvements

  • Added a new UI option that lets users increase single-stream throughput by controlling IDPS scan mode.

Release 2020-02-03

Server release

Improvements

  • Renamed Incoming Port(s) to Source Port(s) on the Traffic Policy card.

Bug fixes

Release 2020-02-03

Version 1.20.0

Improvements

  • Implemented SNAT/DNAT, which can be managed from the Advanced NAT card in the DNA GUI.
  • Improved LTE Modem Manager stability.
  • Added functionality to send an email alert if a device cannot perform a failover to LTE within 15 minutes.

Bug fixes

  • Fixed an issue where ICMP responses from the router would be dropped if the rate exceeded 1 per second.

Release 2020-01-13

Server release

Improvements

Release 2020-01-13

Version 1.19.8

Improvements

  • Added additional internal diagnostic capabilities
  • Datto Support's internal 'vclient' tool now uses LAN DNS
  • Added the ability for Datto Support to use lspci for troubleshooting
  • Added functionality for Datto Support to collect diagnostics after an unexpected system crash

Release 2019-12-09

Server release

Improvements

  • Added the 255.255.255.254 (/31) subnet mask as a selectable option on the DNA WAN card
  • Increased the number of additional WAN IP addresses on the DNA from 5 to 16

Vulnerability fixes

  • Various security-related improvements

Release 2019-11-18

Server release

Bug fixes

  • Resolved an error where the Copy Configuration tool displays an unspecified error when trying to copy the configuration

Release 2019-10-14

Version 1.19.7

Improvements

  • Improved LTE failover/failback reliability
  • Improved reliability of VoIP call delivery while in LTE failover

Bug fixes

  • Resolved an issue where conditional DNS does not work over IPSec

Release 2019-09-30

Version 1.19.6

  • Improved LTE failback reliability

Bug fixes

  • Various bug fixes and enhancements

Release 2019-09-16

Version 1.19.4

  • Various bug fixes and enhancements

Release 2019-09-11

Server release

Improvements

  • Users can now specify which local subnets, static routes, and network objects are accessible in IPSec topologies.
  • Users can now specify a second DNS server for option 6 in DHCP Advanced Options.
  • DHCP Advanced Options 43 and 66 now allow for string-typed sub-options.
  • Global DNS now sets both the search domain and DNS suffix, so most legacy clients are still able to resolve by name.

Release 2019-09-04

Server release

Improvements

  • Various bug fixes and enhancements

Release 2019-08-12

Version 1.19.3

Improvements

  • Resolved an issue which could cause all in-progress TCP/UDP streams to stop functioning on firewall reload due to an erroneous signal from an inactive interface

Release 2019-07-30

Version 1.19.2

Improvements

  • UI now indicates if the modem cannot find cellular service
  • Added functionality to DNA diagnostics tools to run ifconfig and dig commands.
  • Disabled TCP SACK due to vulnerability
  • Added multiple improvements to cellular failover handling
  • Improved navigation within the partner shell

Bug fixes

  • Fixed an issue where Ublox-based DNAs are not connecting to the LTE network
  • Fixed an issue where DHCP would not start if another DHCP server is on the network
  • Fixed an issue where UDP traffic does not adhere properly to Failover Policy Control

Release 2019-07-10

Bug fixes

  • Fixed an issue where making changes to the WAN card configuration failed with the error message, "Sorry, applying your changes did not go as expected. Please contact support"

Release 2019-07-09

Server release

Improvements

Release 2019-07-01

Version 1.18.4

Bug Fixes

  • Resolved an issue where the Site to Site VPN service would restart every 5 seconds, rendering site to site VPNs nonfunctional

Release 2019-06-17

Version 1.18.3

Improvements

  • Updated the mechanism for Datto Technical Support to gather logs on the DNA

Release 2019-06-10

Version 1.18.2

Improvements

  • Improvements to intrusion detection and prevention

Release 2019-06-06

Server release

<p"> Improvements

      <li"> Partners can now configure /17, /19, /25, /26, /27, /28, and /29 subnet sizes through the

subnet

    drop-down menu.

Release 2019-04-29

Version 1.18.1

Improvements

  • Partners can now view and execute ping commands when connected to the DNA diagnostic shell.
  • Partners can now view and execute traceroute commands when connected to the DNA diagnostic shell.
  • The DNA device UI now displays a graph of network usage across WAN ports.
  • IdP is now enhanced to more aggressively classify and drop bad traffic.

Bug Fixes

  • Resolved an issue preventing partners from creating IKEv1/v2 site-to-site VPNs with multiple subnets on each end
  • Resolved an issue that caused VPN connections to a DNA with multiple subnets to break after the device reboots
  • Fixed a problem where the DNA sends false alerts and emails indicating that primary connectivity is nonfunctional

Release 2019-04-25

Server release

Bug Fixes

  • Fixed an issue where the Search Domain setting did not work when using OpenVPN for Client VPN with the WAN configured for static IP

Release 2019-04-02

Server release

Bug Fixes

  • Resolved an issue in which clicking the Create New LAN button could cause a screen refresh, deleting all changes on the screen

Release 2019-03-21

Version 1.17.3

Improvements

  • The DHCP server will start, even if it detects another DHCP server on the network.

Bug fixes

  • Resolved an issue where LANs disabled under the Allow Access To interface were still accessible via ClientVPN
  • Fixed an issue in which newly-enabled siteVPNs generate an email stating the tunnel is down, then create a second email stating the tunnel is up

Release 2019-03-13

Server release

Improvements

  • Added a Fleet Management tab to the device UI, allowing admins to copy a DNA device's configuration and assign it to other devices
  • Added functionality to use custom VPN profiles with Cisco ASA, Google Cloud Platform, and some Azure configurations

Bug fixes

  • Resolved an issue where automatic firmware updates were not installing
  • Resolved an issue in which adding ten or more traffic policy rules breaks rule ordering

Release 2019-02-04

Version 1.16.2

Improvements

  • Added functionality to the Connected Devices card that displays approximately when a device was last seen on a network
  • Added functionality that only triggers the device offline alert for service-linked DNA devices
  • Added functionality that consolidates custom DNS search domain settings for WAN ports & LTE into one setting in the new Global DNS card, simplifying the process for an operator
  • Added functionality that allows an operator to select Atlantic Standard Time (AST) as a time zone for a DNA
  • Added functionality that improves DNA alert processing time from 10 minutes to less than 1 minute

Bug fixes

  • Resolved an issue where a DNA could not check-in over LTE
  • Resolved an issue where triggered alerts displayed a timestamp five hours ahead of the local time of a DNA

Release 2019-01-11

Server release

Improvements

  • This release improves the readability and presentation of IdP logging.
    • While this functionality does not require a firmware upgrade, we've also added minor code enhancements to improve device functionality as part of 1.16.1. We recommend upgrading to the latest firmware release.

Bug Fixes

    • Resolved an issue that caused false positive LTE failover alerts