1. What’s New in Fireware v11.12.1

2. What’s New in Fireware v11.12.1
Firebox Cloud for AWS
FireboxV
AP Wireless Enhancements
Other Enhancements
WatchGuard Threat Detection and Response Policy on the Firebox
Enhanced BOVPN menus
Fireware OS upgrade option on FireCluster
Traffic Monitor Enhancements

3. Virtual Fireboxes to protect virtual networks
Firebox Cloud and FireboxV
Virtual Fireboxes to protect virtual networks

4. Firebox Cloud
Firebox Cloud is a Firebox for the Amazon Web Services (AWS) computing platform
Uses Fireware v
Features and services tailored to the AWS environment
Manage with Fireware Web UI or CLI only
Available in the AWS Marketplace
From Networking/Interface page add a custom DHCP Option

5. Firebox Cloud Features and benefits:
Protects an AWS Virtual Private Cloud (VPC) from attacks such as botnets, cross-site scripting, SQL injection attempts, and other intrusion vectors
Streamlined Web UI built for AWS
Enables secure VPN connections to an AWS VPC
Branch Office VPN
Mobile VPN
Compatible with Dimension for monitoring and reporting
For more information, see the Introduction to Firebox Cloud presentation
From Networking/Interface page add a custom DHCP Option

6. FireboxV
FireboxV is a new family of virtual Fireboxes for VMware and Hyper-V
FireboxV for VMware supports:
VMware ESXi 5.5, 6.0, 6.5
FireboxV for Microsoft Hyper-V supports:
Windows Server 2008 R2 and Hyper-V Server 2008 R2
Windows Server 2012 R2 and Hyper-V Server 2012 R2
Windows Server 2016 and Hyper-V Server 2016
FireboxV offers updated feature specs that are more consistent with current hardware models than XTMv
Supports all Fireware features and services

7. FireboxV Four FireboxV models FireboxV resource requirements
Small, Medium, Large, Extra Large
FireboxV resource requirements
5 GB storage
CPU and memory requirements vary by model
FireboxV Model
vCPUs (Maximum)
Memory (Recommended)
Small 2
1024 MB
Medium 4
2048 MB
Large 8
4096 MB
Extra Large 16

8. AP Wireless Enhancements
Enhancements for Gateway Wireless Controller with locally managed AP devices

9. Wireless Client Location
Wireless client information for the Gateway Wireless Controller now includes a column for the client location

10. Wireless Client Location
In Fireware Web UI, the location information appears in the Wireless Clients tab in the Gateway Wireless Controller Dashboard
Select a client to display the client details

11. Wireless Client Location
The location is derived from the description of the AP device to which the wireless client is connected

12. Wireless Enhancements
AP devices that cannot be contacted by the Gateway Wireless Controller are now displayed with the status of Unreachable instead of Offline

13. Wireless Enhancements
AP devices connecting and authenticating to the Gateway Wireless Controller now have the status of Authenticating instead of Passphrase mismatch
If the status of an AP device does not change from Authenticating to Online after several minutes, this can indicate a passphrase mismatch between the AP device and the Gateway Wireless Controller

14. Wireless Enhancements
SSIDs that are not currently in an active SSID schedule interval no longer appear in wireless monitoring pages
For AP100, AP102, AP200, AP300 devices that have the preferred channel set to Auto, you must restart the wireless interfaces to perform optimized auto channel selection
A reboot of the AP device is not sufficient. You must perform a wireless restart to select the best channel for optimized deployment
You can restart wireless from the Gateway Wireless Controller > Access Points page in Fireware Web UI and Firebox System Manager
You can schedule automatic wireless restarts from the Gateway Wireless Controller configuration

15. Wireless Enhancements
Added support for the upcoming AP322 outdoor access point
Updated AP device firmware with stability enhancements
AP100, AP102, and AP200 —
AP300 —
AP120 and AP320 —

16. Minor updates to existing features and services
Other Enhancements
Minor updates to existing features and services

17. TDR Policy on the Firebox
When you enable TDR on a Firebox, the WatchGuard Threat Detection and Response policy is now automatically added
This policy allows connections from TDR Host Sensors on the trusted network to TDR FQDNs on TCP port 443

18. Enhanced BOVPN Menus
The BOVPN gateway columns are reordered for consistency and ease of use
Affects BOVPN and BOVPN virtual interface menus in the Web UI and Policy Manager
From Networking/Interface page add a custom DHCP Option

19. Enhanced BOVPN Menu: General Settings (Web UI)

20. Enhanced BOVPN Menu: General Settings (Policy Manager)
From Networking/Interface page add a custom DHCP Option

21. Enhanced BOVPN Menu: Local Gateway (Web UI)

22. Enhanced BOVPN Menu: Local Gateway Settings (Policy Manager)

23. Fireware OS Upgrade on FireCluster
For a Fireware OS upgrade on a FireCluster, the option to upgrade both FireCluster members is now the only choice
This helps you to avoid FireCluster issues, such as mismatched appliance software, that can occur when you upgrade only one FireCluster member

24. Traffic Monitor Search Enhancements
The search input field in Traffic Monitor is resized to display a wider width of characters
Easier to read if you enter large regular expressions
The filter history popup now contains up to 30 of the last filter searches
Horizontal scrollbar to view long entries

25. Thank You!