SDP Gateway

SDP Gateway 1.6.13 - May 20, 2025

New features:
- Support exporting logs to SYSLOG server.
Bugs fixed:
- Handle big log files gracefully by improving the log rotating mechanism.
Known issues:
- Upgrade feature may not work. A workaround is to download a new OVA/XVA and redeploy.

Bugs fixed:
- High disk usage.
Known issues:
- Upgrade feature may not work. A workaround is to download a new OVA/XVA and redeploy.

Bugs fixed:
- CPU soft lockup.
Known issues:
- Upgrade feature may not work. A workaround is to download a new OVA/XVA and redeploy.

Enhancements:
- Replace AWS IAM user with IAM roles anywhere.
Bugs fixed:
- Update SSH dependency with critical CVE.
Known issues:
- Upgrade feature may not work. A workaround is to download a new OVA/XVA and redeploy.

Enhancements:
- Product rebranding from "OPSWAT MetaAccess SDP" to "OPSWAT MetaDefender IT Access"

Enhancements:
- MA API endpoint to export gateway session's network traffic (bytes sent, bytes received) to csv file
- MA API endpoint to update list SDP gateway session bandwidth
Bugs fixed:
- Increase timeout before the client and GW drop connections

Bugs fixed:
- Login screen issue on GW 1.6.5
- Gateways being detected as 'out-of-date' when they are the most recent released version

Bugs fixed:
- Gateways being detected as 'out-of-date' when they are the most recent released version

Bugs fixed:
- The debug logs are still persistent without enabling the debug flag
- Build SDP gateway failed

Enhancements:
- Improve performance during client connections
Bugs fixed:
- Mac SDP OWC integration needs updating for how to get gateway pools
- Live access updates fail if gateway lookup fails

Enhancements:
- Allow administrators to push software updates to SDP Gateways
- SDP Gateways can self-update to newer software versions
- New event logs for SDP Gateway update

Bugs fixed:
- VPN | Ping retries exceed 15 seconds
- Gateway should not send DNS updates when there is no delta
- Implement buffered debug logging for gateways
- Spike | Connection samples reported from gateways can sometimes have the connIpTableState field missing

Enhancements:
- Gateways still using impulse.com domains
Bugs fixed:
- Spike | Private Gateway fails to log in if done so quickly after boot

Enhancements:
- Private gateway iptables server is failing to respect large payloads, need to increase limit
Bugs fixed:
- Private Gateway fails to read userData correctly-- fails deployment across all stages
- Gateways still using impulse.com domains

Enhancements:
- Use standard ec2-user account for AWS Private Gateways
Bugs fixed:
- Host logs from PG deployed to AWS are not being published to CloudWatch

Bugs fixed:
- Cloud gateways don't register against their local region controller
- Connections that transition from established to closed state quickly have a high probability of not being tracked

New features:
- Display the log stream ID easily for helping troubleshoot Gateway
- Allow admins to select which stage (US vs EU) to register a Gateway
Enhancements:
- Updates to consolidate logging to CloudWatch
- Expand LogRotate
Bugs fixed:
- Update ssh2 dependency with critical CVE
- Update morgan dependency with critical CVE
- Update cryptiles dependency with critical CVE
- Correctly disallow SSH to Private Gateways
- Fix bug possibly pulling the wrong container versions at gateway boot
- Fix docker container restart issue in initialization

Enhancements:
- Improve performance during client connections
Bugs fixed:
- Detect “0.0.0.0” as an invalid DNS server configuration and ignore it
- Fix bug allowing gateways to pull unexpected docker image version

Enhancements:
- Disconnect all users on the account when “Enable SDP Gateways” is changed to false
- Disconnect any connected SDP session when a client device is reassigned to a different group, when a different SDP Gateway Pool is used on the new group
Bugs fixed:
- Fix bug to disconnect SDP sessions when the “default” gateway pool is changed resulting in a new gateway assigned to devices
- Fix a bug tracking network usage on the Gateway

Admins can now deploy a SDP private gateway from the Microsoft Azure marketplace to protect applications/resources via SDP.
Enhancements
- Performance improvement for terminating multiple sessions on a gateway
- Improve IP discovery through load-balanced networks to improve changes of hole-punching success
Bugs fixed:
- An input was duplicated when a user tried the second time

Last updated on

Was this page helpful?