Jump to content
RESET Forums (homeservershow.com)
  • The folks at Untangle have released version 9.3 with some exciting changes. They have added a few features that I have been waiting for.  First on the list is full tunneling.  Something I have been looking for quite some time.  The second big feature for me is the new SSD support.  It does not support trim but they have optimize the way they write data to minimize write I/O’s making it suitable for an SSD.  Below is a list of all the new features.  If you are an existing user you will be upgraded but if you were on the fence, this may be worth looking at.  Look for a future review on some of these features.

     

    Download Software from here:  http://www.untangle.com/

     


     

    Overview

    9.3 contains many platform and application improvements. It also has infrastructal changes to simplify settings and improve performance.

     

     

     

    User Interface

    • Upgraded to ExtJS 4.0 (from ExtJS 2.2)
    • Added Session graphs to faceplates
    • Added more metrics to faceplate metrics list
    • Improved session viewer with filtering, grouping, and additional fields
    • Removed "Block page" skin settings - it now uses the main skin setting.

     

     

    Policy Manager

    • New UI.
    • Policy Manager rules now use rule builder.

     

     

    OpenVPN

    • Full tunnel now supported. Simply enable "Full Tunnel" in the address pool of the clients/sites you wish to use full tunnel mode.
    • You can now export any and all IPs (including WAN IPs)
    • "Full tunnel" traffic will be scanned by the other apps as it traverses untangle so those users will get Web Filtering etc.

     

     

    Reports

    • Intermediate "events" schema removed
    • Incremental reports process removed
    • Event log queries now have no delay
    • Removed "Full Refresh" button in event logs (Refresh is a full refresh now)

     

     

    Kaspersky Virus Blocker

    • Officially End-of-Life.
    • On upgrade it will be removed.
    • "Virus Blocker" replaces it.

     

     

    Functionality changes

     

     

    HTTPS/HTTP configuration

    The "Administration" regarding HTTPS/HTTP access settings have been simplified. HTTPS is no longer open/closed based on other settings, there is simply a setting that controls whether it is open or closed. The HTTPS port settings are now global. Previously when the HTTPS port setting was changed it only changed it on certain interfaces and kept it at 443 on other interfaces. This was not intuitive behavior and it interfered with port forwards. Be aware if you have changed the HTTPS port you will only be able to administer untangle through the HTTPS port you specified - not 443!

     

     

     

    Limiting Administration to IP range

    This functionality has been removed from config->administration because it is redundant. All it did was add packet filter rules to limit 443 access on WAN interfaces to the specified IP range. You can now accomplish the same thing by just adding those rules directly to config->networking->advanced->packet filter. Add one rule to block port 443 (or your admin port) access on the WAN interface(s). Then add one rule above that allowing access to port 443 on your WAN interface(s) from the desired IP range.

     

     

     

    Report generation

    The settings for which reports to generate on which day have been simplified. The daily, weekly, and monthly schedules are now just checkboxes and you can check the days you want each generated. These settings are not 1:1 with the old settings so the conversion will keep your settings as close as possible to the original.

     

     

     

    Reporting users

    In reports, you can add users that do not have administration privileges but do have access to reports. Depending on when you setup these accounts you may need to re-enter the password for these users on upgrade.

     

     

     

    Architectural Changes

     

     

    Settings files

    All settings are now stored in files in /usr/share/untangle/settings/* instead of the database. This is part of an ongoing effort to simplify Untangle and also paves the way for more centralized management of Untangle settings for those users with many Untangle instances under management.

     

    For power users settings can easily be copied or edited in /usr/share/untangle/settings/.

     

    This also allows us to remove the database dependency from all of Untangle except the Reports application. This paves the way for having the database stored on an alternate server or a server in the cloud. This scenario can be better for large sites with large storage needs for events or for small sites with tiny boxes with no hard drive.

     

     

     

    Hibernate and Events schema

    The intermediate "events" schema has been removed. Events are now written directly to de-normalized tables in the "reports" schema. This means there is no incremental reports process that runs every few minutes to shuffle events out of the intermediate schema. This should significantly reduce the disk i/o requirements on large sites and also remove the delay from event logs.

     

    Hibernate (the java persistence library) has also been removed. Events are now written using SQL directly to the reports schema. Event logs are now queried using SQL. This simplifies the code.

     Share


    User Feedback

    Recommended Comments

    I'm using pfSense now and like it. I tried unTangle and attempted to install a package and it hosed up the whole install. Re-installed it and ran just the bare bones and it just stopped working sometime that evening. That really turned me off of it. I put my pfSense drive back in and booted it back up. I may have to give unT one more shot.
    Link to comment
    Share on other sites

    pfsense 2.0.1 already supports tunneling among other things. I use both pfsense's OpenVPN and SSH tunnel features reliably. Haven't seen any compelling reason to risk fixing something that isn't broken with pfSense.
    Link to comment
    Share on other sites



    Create an account or sign in to comment

    You need to be a member in order to leave a comment

    Create an account

    Sign up for a new account in our community. It's easy!

    Register a new account

    Sign in

    Already have an account? Sign in here.

    Sign In Now

  • Our picks

    • I throw this out every once in a while.  Is anyone interested in writing up "semi-formal" reviews here on the forums?  I say semi-formal because they don't have to be pro level, just a good attempt at telling the story about the gear.  Something you have purchased lately.  You don't have to go buy stuff, just incorporate what you have already have purchased.  Hit me up with any questions.  You never know where it will lead!
        • Like
      • 3 replies
    • D-Link has dropped a couple of new products and additions to their lineup of smart home gear.  Hold on because there is a lot of gear!
      Let's start with cameras.  D-Link has new Wi-Fi cameras, the Full HD Pan and Tilt Pro Wi-Fi Camera (DCS-8302LH) and Full HD Indoor and Outdoor Pro Wi-Fi Camera (DCS-8526LH).  These are not just new, and good looking cams, they can now perform people detection and glass break detection.  The new cameras also feature expanded ways for customers to save video, including ONVIF Profile S, which enables custom storage and streaming options to personal NAS devices, built-in storage microSD capacity up to 256 GB, as well as free and paid cloud storage options. 
       

       
      This year's camera models include both an indoor and an outdoor model. The outdoor model features a spotlight and siren that can be triggered when motion is detected, deterring potential intruders. The indoor model pans around to give a full 360-degree view of any room and tracks motion. Both include two-way audio. 
      Full HD Pan and Tilt Pro Wi-Fi Camera is the model (DCS-8302LH), available in Q2, 2020, and retail pricing will be $99.99.
      Full HD Indoor and Outdoor Pro Wi-Fi Camera is the model (DCS-8526LH), available in Q3, 2020, and retail pricing will be $119.99.
      One of my favorite products is Wi-Fi.  D-Link has a whole lot of new products coming including Wi-Fi 6, Mesh, Alexa and Google Assistant integration, IFTTT, Parental Controls, and more!
       

       
      There are so many new SKU's that I can't make heads or tails of them!  I'm going to be speaking with D-Link more this week and will sort all of these out. I do want you to see all they are offering and what the release date and projected retail pricing will be.

      AC1900 Scalable Mesh Wi-Fi Router (COVR-1900-US), Q1 2020, $119.99
      AC1750 Mesh Wi-Fi Router (DIR-1750-US), Q1 2020, $99.99
      AC1900 Mesh Wi-Fi Router (DIR-1950-US), Q1 2020, $119.99
      AC1750 Mesh Wi-Fi Range Extender (DAP-1755-US), Q1 2020, $99.99
      AC1950 Mesh Wi-Fi Range Extender (DAP-1955-US), Q1 2020, $109.99
      Smart AX1500 Mesh Wi-Fi 6 Router (DIR-X1560-US), Q1 2020, $119.99
      Smart AX1800 Mesh Wi-Fi 6 Router (DIR-X1870-US), Q2 2020, $139.99
      Smart AX2400 Mesh Wi-Fi 6 Router (DIR-X2460-US), Q3 2020, $159.99
      Smart AX5400 Mesh Wi-Fi 6 Router (DIR-X5460-US), Q1 2020, $279.99
      AX1800 Mesh Wi-Fi 6 Range Extender (DAP-X1870-US), Q2 2020, $129.99
      AX1800 Whole Home Mesh System (COVR-X1872-US), QX22020, $269.99
        • Like
      • 0 replies
    • RESET Merch Shop
      Get ya Merch here!  I've created a T-Shirt shop with the famous RESET paperclip. I've pasted that clip on just about everything so you can wear it around town!  Cable bags, Coffee Mugs, T-Shirts, and more. 
       
      https://reset.threadless.com/
       
      or you can get it it via
       
      https://reset.fm/store
       
      Here is the main design.
       

       
      Below is a part of the order that I put in!  
       
       

       
      The Heather Grey above is the Extra Soft version and it is awesome.  I highly recommend the softness!    The "Chili Red" is the Tri-Blend and probably my favorite feel and color.

       
      This is the Zip-Up Hoody, Heather Indigo, Sponge Fleece, Men's, Large.  In my podcast I couldn't remember what style it was but it is Sponge Fleece. It's REALLY soft on the inside. Soft outside as well. The only problem is with the zip up hoody the logo is on the back. Regular hoody, it will be on the front.
       
      https://reset.threadless.com/
       
      or you can get it it via
       
      https://reset.fm/store
       
      Thank you for supporting this community. Everything you purchase will help keep the lights on the hard drives spinning.
       
      • 0 replies
    • OneDrive Personal Vault and expandable storage
      Microsoft's OneDrive has a few new features and options worth pointing out.  Personal Vault and Expandable Storage.
       
      Personal Vault is a protected area in OneDrive that can only be accessed with a strong authentication method or a second step of identity verification, such as your fingerprint, face, PIN, or a code sent to you via email or SMS. 
       
      Personal Vault gives you an added layer of protection for your most important files, photos, and videos—for example, copies of documents such as your passport, driver’s license, or insurance information—should someone gain access to your account or device.
      Plus, this added security won’t slow you down. You can quickly access your important documents, photos, and files with confidence wherever you are, on your PC, OneDrive.com, or your mobile device.

       
      Beyond a second layer of identity verification, Personal Vault also includes the following security measures:
       
      Scan and shoot—Using the OneDrive app, you can scan documents or shoot photos directly into your Personal Vault, keeping them off less secure areas of your device, like your camera roll.
      Automatic locking—No need to worry about whether you left your Personal Vault or your files open—both will close and lock automatically after a period of inactivity.
      BitLocker encryption—On Windows 10 PCs, OneDrive automatically syncs your Personal Vault files to a BitLocker-encrypted area of your local hard drive.
      Restricted sharing—To prevent accidental sharing, files in Personal Vault and shared items moved into Personal Vault cannot be shared.
       
      Taken together, these security measures help ensure that Personal Vault files are not stored unprotected on your PC, and your files have additional protection, even if your Windows 10 PC or mobile device is lost, stolen, or someone gains access to it or to your account.
       
      Expandable Storage
       
      If you are and Office 365 Subscriber you get 1 TB of OneDrive storage space with all the other Office goodies like Word, Excel, etc.  I know personally that I have gone over the 1TB limit and have always wanted to be able to add additional storage to my account.  Now you can!

       
      Pick and option and keep on hoarding, errr, I mean saving! Cancel anytime, upgrade at any moment.
      • 1 reply
    • Ubiquiti adds new items to the Unifi Line including UAP Flex HD and the Unifi Dream machine
      Ubiquiti has been busy.  There area ton of new items to recently released and I'm going to share two of my favorites.
       
      The UAP Flex HD and the Unifi Dream machine. The Flex HD is a mouthful of descriptors like most of UI gear is.  It's a 2Ghz 2x2 MIMO, 5GHz 4x4 MU-MIMO, POE, Indoor/Outdoor, multi mount, mesh point that is no bigger than a can of Coke.

       
      You will still need the Unifi controller although you can configure it with basic functionality with the Unifi App.  I've always found it's best to configure with your controller and then use the app as an add-on.  There are several mounting options that include sitting it on a shelf! That is something that Unifi has not had before unless you count the ceiling AP I have awkwardly mounted placed on top of a few books.  It can be found on the Unifi store for $179.
       
      https://store.ui.com/collections/wireless/products/unifi-flexhd
       
      The Dream Machine is an altogether different beast that I hope lives up to its naming.  This is the gateway drug, for lack of a better term, to the Unifi world.  The starter kit.  It is an Access Point, Gigabit Switch, Security Gateway, and the Cloud Key all in one package.  The latter being the most significant as this is something that has deterred new users from getting started with Unifi.  Requiring new users to purchase a $100 item just to run the AP's has been somewhat of a roadblock in the past.  Granted, that is improving every year with the ability to run it in the cloud, on a NAS, a Pi, Docker, MacOS, and of course Windows, it is still a barricade to getting up and running when manufacturers such as Eero offer simplicity in an app.
       

       
      The switch includes 4 LAN Ports and 1 WAN port.  All of which are Gigabit and security services such as IPS are rated at Gigabit speed. It's $299 in the Unifi store but I'm unsure how nicely it will play with other Unifi gear.  This may be a nice "first AP" with its built in Cloud Key if you can add additional units or other Unifi access points.
       
      https://store.ui.com/collections/routing-switching/products/unifi-dream-machine
      • 4 replies
×
×
  • Create New...