Datto Networking Appliance (DNA): Release notes

Description

Index

Previous years

Releases

Server release - 2024-04-22

Version 2024.4.1

Improvements

This release introduces device check-in service optimizations and bug fixes.

Server release - 2024-01-31

Bug fix

We fixed an issue that could cause the Test Failover function to report test failures when there were no underlying problems.

Server release - 2024-01-17

New feature

We've introduced new DNA models for UK, EU and Australia.

Bug fix

Previously, it was possible that the DNA would connect to 2G or 3G failover services in Europe but not 4G. Now, the DNA will leverage 4G failover whenever it is available.

Security

This release contains updates to OpenSSL to address potential security issues.

2023

Server release - 2023-07-05

Bug fix

We've resolved an issue that could cause the Auto channel setting to use the wrong channel in 2.4 GHz mode.

Server release - 2023-06-28

Improvements

  • Auto Channel is no longer an option for channel selection, as it caused problems with DFS channels in the United Kingdom and Australia.

Security

  • This release introduces various security improvements to protect against malicious payloads.

Bug fixes

  • We've resolved an issue that could cause unauthenticated OpenVPN clients to be displayed as "connected."

  • The field input validation for Source IP/Subnet has been updated to prevent bad firewall rule creation.

  • DNAs will now correctly delete themselves from VPN topologies when being removed from customer accounts.

  • This release resolves an issue that could cause Network Usage and VPN details information to be blank.

  • We've resolved an issue that prevented web filters from being enabled.

  • Previously, it was possible for the VPN client to receive DNS server information from disallowed LANs. The client will no longer exhibit this errant behavior.

  • OpenVPN clients of version 2.6.0 and up will now pass traffic when connected.

  • We corrected an issue that could cause the DNA management interface to prevent configuration of the first channel of the 2.4 GHz and 5 GHz DNA WiFi frequencies.

2022

Server release 2022-11-14

Improvements

  • Added D200 vendor type preset to DNA site-to-site VPN config
  • Allow site-to-site VPNs using the Meraki preset to use IKEv2 on DNAs

Bug fix

  • Corrected an issue that prevented dna.datto.com from properly loading

Version 2022-10-19

Version 1.21.3

Improvements

  • Enabled kdump utility for Datto Support troubleshooting.

Release 2022-07-14

Version 1.21.2

Improvements

  • OpenWRT update from 17.01.4 to 19.07.08 (includes many security and bug fixes).
  • Updated Linux kernel version from 4.4.92 to 4.14.24.1 (to address kernel panic reboots).
  • LTE updates to account for 3G network sunsets in North America and additional modem support (NL-SW-LTE-TC4NAG for VZW, AT&T, and Rogers [CA]).

Bug Fixes

  • Resolved an issue that caused DNA to not regenerate certificates.
  • Fixed a problem where LAN clients were not being reported correctly in the status page.
  • Resolved an issue that caused a modem reboot command to fail when issued by Datto Support.
  • Fixed a problem that could cause openVPN not to function after firmware upgrade.
  • Resolved OS instability issue that caused Datto support to recommend disabling Intrusion Detection and Prevention. Reenable Intrusion Detection and Prevention after upgrading.

Security

  • Various security vulnerability fixes.

Hotfix 2022-02-07

Tasks

  • Updating of Ublox DNA-ATT Modem Manager for 3G Sunset.

2020

Release 2020-09-23

Server release

Improvement

  • Strengthened ipsec cipher requirements.
  • Removed the High LTE Usage alert from the Device GUI.

Bug fixes

  • Fixed an issue causing openvpn to enable/disable incorrectly.

Release 2020-09-21

Version 1.20.4

Bug Fix

  • Fixed an issue where the DNA required a reboot after failing back to primary ISP connection to continue passing traffic.

Release 2020-08-18

Server release

Improvement

  • Newly created users are now shown by name in the GUI, instead of by auth UUI.

Bug Fix

  • Fixed an issue which could cause text boxes in the Traffic Policy card to change position if a user enters invalid information.

Release 2020-04-01

Version 1.20.2

Bug Fix

  • Fixed an issue where some LTE sim cards have trouble connecting to the AT&T network.

Release 2020-03-12

Version 1.20.1

Bug Fix

  • Resolved a bug where an internal packet buffer could be freed while in use, resulting in system instability.

Release 2020-02-10

Improvements

  • Added a new UI option that lets users increase single-stream throughput by controlling IDPS scan mode.

Release 2020-02-03

Server release

Improvements

  • Renamed Incoming Port(s) to Source Port(s) on the Traffic Policy card.

Bug fixes

Release 2020-02-03

Version 1.20.0

Improvements

  • Implemented SNAT/DNAT, which can be managed from the Advanced NAT card in the DNA GUI.
  • Improved LTE Modem Manager stability.
  • Added functionality to send an email alert if a device cannot perform a failover to LTE within 15 minutes.

Bug fixes

  • Fixed an issue where ICMP responses from the router would be dropped if the rate exceeded 1 per second.

Release 2020-01-13

Server release

Improvements

Release 2020-01-13

Version 1.19.8

Improvements

  • Added additional internal diagnostic capabilities
  • Datto Support's internal 'vclient' tool now uses LAN DNS
  • Added the ability for Datto Support to use lspci for troubleshooting
  • Added functionality for Datto Support to collect diagnostics after an unexpected system crash

2019

Release 2019-12-09

Server release

Improvements

  • Added the 255.255.255.254 (/31) subnet mask as a selectable option on the DNA WAN card
  • Increased the number of additional WAN IP addresses on the DNA from 5 to 16

Vulnerability fixes

  • Various security-related improvements

Release 2019-11-18

Server release

Bug fixes

  • Resolved an error where the Copy Configuration tool displays an unspecified error when trying to copy the configuration

Release 2019-10-14

Version 1.19.7

Improvements

  • Improved LTE failover/failback reliability
  • Improved reliability of VoIP call delivery while in LTE failover

Bug fixes

  • Resolved an issue where conditional DNS does not work over IPSec

Release 2019-09-30

Version 1.19.6

  • Improved LTE failback reliability

Bug fixes

  • Various bug fixes and enhancements

Release 2019-09-16

Version 1.19.4

  • Various bug fixes and enhancements

Release 2019-09-11

Server release

Improvements

  • Users can now specify which local subnets, static routes, and network objects are accessible in IPSec topologies.
  • Users can now specify a second DNS server for option 6 in DHCP Advanced Options.
  • DHCP Advanced Options 43 and 66 now allow for string-typed sub-options.
  • Global DNS now sets both the search domain and DNS suffix, so most legacy clients are still able to resolve by name.

Release 2019-09-04

Server release

Improvements

  • Various bug fixes and enhancements

Release 2019-08-12

Version 1.19.3

Improvements

  • Resolved an issue which could cause all in-progress TCP/UDP streams to stop functioning on firewall reload due to an erroneous signal from an inactive interface

Release 2019-07-30

Version 1.19.2

Improvements

  • UI now indicates if the modem cannot find cellular service
  • Added functionality to DNA diagnostics tools to run ifconfig and dig commands.
  • Disabled TCP SACK due to vulnerability
  • Added multiple improvements to cellular failover handling
  • Improved navigation within the partner shell

Bug fixes

  • Fixed an issue where Ublox-based DNAs are not connecting to the LTE network
  • Fixed an issue where DHCP would not start if another DHCP server is on the network
  • Fixed an issue where UDP traffic does not adhere properly to Failover Policy Control

Release 2019-07-10

Bug fixes

  • Fixed an issue where making changes to the WAN card configuration failed with the error message, "Sorry, applying your changes did not go as expected. Please contact support"

Release 2019-07-09

Server release

Improvements

Release 2019-07-01

Version 1.18.4

Bug Fixes

  • Resolved an issue where the Site to Site VPN service would restart every 5 seconds, rendering site to site VPNs nonfunctional

Release 2019-06-17

Version 1.18.3

Improvements

  • Updated the mechanism for Datto Technical Support to gather logs on the DNA

Release 2019-06-10

Version 1.18.2

Improvements

  • Improvements to intrusion detection and prevention

Release 2019-06-06

Server release

<p"> Improvements

      <li"> Partners can now configure /17, /19, /25, /26, /27, /28, and /29 subnet sizes through the

subnet

    drop-down menu.

Release 2019-04-29

Version 1.18.1

Improvements

  • Partners can now view and execute ping commands when connected to the DNA diagnostic shell.
  • Partners can now view and execute traceroute commands when connected to the DNA diagnostic shell.
  • The DNA device UI now displays a graph of network usage across WAN ports.
  • IDP is now enhanced to more aggressively classify and drop bad traffic.

Bug Fixes

  • Resolved an issue preventing partners from creating IKEv1/v2 site-to-site VPNs with multiple subnets on each end
  • Resolved an issue that caused VPN connections to a DNA with multiple subnets to break after the device reboots
  • Fixed a problem where the DNA sends false alerts and emails indicating that primary connectivity is nonfunctional

Release 2019-04-25

Server release

Bug Fixes

  • Fixed an issue where the Search Domain setting did not work when using OpenVPN for Client VPN with the WAN configured for static IP

Release 2019-04-02

Server release

Bug Fixes

  • Resolved an issue in which clicking the Create New LAN button could cause a screen refresh, deleting all changes on the screen

Release 2019-03-21

Version 1.17.3

Improvements

  • The DHCP server will start, even if it detects another DHCP server on the network.

Bug fixes

  • Resolved an issue where LANs disabled under the Allow Access To interface were still accessible via ClientVPN
  • Fixed an issue in which newly-enabled siteVPNs generate an email stating the tunnel is down, then create a second email stating the tunnel is up

Release 2019-03-13

Server release

Improvements

  • Added a Fleet Management tab to the device UI, allowing admins to copy a DNA device's configuration and assign it to other devices
  • Added functionality to use custom VPN profiles with Cisco ASA, Google Cloud Platform, and some Azure configurations

Bug fixes

  • Resolved an issue where automatic firmware updates were not installing
  • Resolved an issue in which adding ten or more traffic policy rules breaks rule ordering

Release 2019-02-04

Version 1.16.2

Improvements

  • Added functionality to the Connected Devices card that displays approximately when a device was last seen on a network
  • Added functionality that only triggers the device offline alert for service-linked DNA devices
  • Added functionality that consolidates custom DNS search domain settings for WAN ports & LTE into one setting in the new Global DNS card, simplifying the process for an operator
  • Added functionality that allows an operator to select Atlantic Standard Time (AST) as a time zone for a DNA
  • Added functionality that improves DNA alert processing time from 10 minutes to less than 1 minute

Bug fixes

  • Resolved an issue where a DNA could not check-in over LTE
  • Resolved an issue where triggered alerts displayed a timestamp five hours ahead of the local time of a DNA

Release 2019-01-11

Server release

Improvements

  • This release improves the readability and presentation of IDP logging.
    • While this functionality does not require a firmware upgrade, we've also added minor code enhancements to improve device functionality as part of 1.16.1. We recommend upgrading to the latest firmware release.

Bug Fixes

    • Resolved an issue that caused false positive LTE failover alerts