Importante: eseguire l’aggiornamento Kerio Control 9.2.8

03/12/18 gatti Update

Riportiamo di seguito l’avviso inoltrato a tutti Partner da GFI.

--------------------------------------------------------------

Dear Valued GFI Partner,

On October 16, 2018 GFI was alerted by Sec Consul on a serious vulnerability in Kerio Control VPN. This vulnerability allows an attacker to replace any content of the VPN traffic. Such vulnerability discloses how one can actually perform such action. This is due to weak cryptography that has been there since the initial release of Kerio Control VPN.

Our Engineering teams have upgraded Kerio Control VPN encryption to a later standard from BlowFish to AES 128.

For this reason we suggest everybody to upgrade their Kerio Control software to the latest version 9.2.8. This new version apart from having a secure VPN without the disclosed vulnerability also has an increased performance of 40% in VPN traffic.

Please note that even the Kerio Control VPN client needs to be updated. This new client will trigger the new encryption channel. The new Kerio Control VPN client will not work with older Kerio Control software.

For further assistance, please open a support ticket with GFI Support by accessing the GFI Support portal on accounts.gfi.com.

Please make sure you refer to the below guidance when speaking to resellers:

How to Identify if vulnerable VPN Clients are connecting to Kerio Control

• Open Kerio Control administrative console
• Click Status from left sidebar
• Click VPN Clients
• Here you have displayed the list of VPN Clients (if the version column is not visible right-click on the header, click Columns and click Version)
• Vulnerable clients are version 9.2.7 or earlier

Updating Kerio Control VPN

• Download the latest version of Kerio Control VPN software for the OS of choice (Download Page)
• Make sure it's version 9.2.8 or higher
• Run the installer (Instructions Page)

How to create alerts in case a client is still using the old Kerio control client

1. Go to Logs (left tab)
2. Select Debug log
3. Right click on log text and select Messages
4. In the Messages dropdown scroll down to Kerio VPN
5. Select VPN clients
6. Click on OK
7. Now go to Settings (left tab)
8. Select Accounting and Monitoring
9. Select tab Alert Settings
10. Click on Add
11. Enter email address to receive the alert
12. Click Log Message
13. In Name enter: BlowFish VPN Client Connect
14. Log select Debug
15. Condition type in: .*?Cipher configured. Cipher Type:BLF User:.*
16. Tick Use Regular Expression
17. Click OK
    
    
    
    
18. Click OK in Edit Alerts dialog

This week we will send out communications to GFI resellers and Kerio Control customers globally.

For detailed information please read our knowledgebase article (https://go.gfi.com/?pageid=KCL_vpnvul)

If you have any questions, please reach out to your Distribution Account Manager.

GFI Software, Aurea SMB Solutions