Release Notes for Wanguard 8.4

December 20, 2024 - https://www.andrisoft.com - Andrisoft, a world leader in traffic monitoring and DDoS mitigation solutions, announces a new release of the award-winning Wanguard software platformai.

Wanguard 8.4 introduces significant new features and enhancements, including:

• A new GoBGP Connector that can send routing updates and Flowspec rules to GoBGP, a faster and easier to use alternative to ExaBGP
• A new method of mitigating carpet-bombing attacks without requiring thresholds for large subnets. By leveraging a newly introduced Response action, you can dynamically adjust filtering rule parameters, such as the attacker’s or victim’s CIDR mask
• A new Response action that permits sending push notifications to mobile devices or desktops, via Pushover, Telegram or Slack
• A new Response action that permits changing the description of the anomaly, the expiration time or the comments
• Support for Two Factor Authentication with Time-Based One-Time Password (TOTP) has been added, and user accounts can now have expiration dates
• Add support for API Key authentication for the REST API. User accounts can be configured for exclusive access to the REST API
• Speed optimizations for large IP Zones in both the Console and Sensor now allow thousands of subnets or hosts to be managed without any noticeable slowdown. IP Zone subnets can be automatically split into smaller segments for an easier management
• Flow Sensor performance has been improved so that anomalies are detected within about one second of receiving relevant flows, regardless of the Granularity setting. Flow Sensors with tens or hundreds of interfaces also benefit from enhanced speed
• New dynamic parameters (now called tokens): {json_anomaly_tokens}, {json_filtering_rule_tokens}, {ip_version}, {ip_asn}, {filtering_rule_ip_asn}, {ipzone_parent_prefix}, {*-firewalled}, {firewall_drop_percent}, {filtering_rule_first_time}, {filtering_rule_last_time} and new System-wide tokens
• GRE tunnels can now be decoded in sFlow datagrams
• The Geo Distribution tab has moved from Reports » Firewall to Reports » Anomalies, and a new System Information widget has been added to the dashboard
• The Traffic Diversion parameter has moved from the Filter Configuration window to the Response action that activates the Filter
• Ubuntu 24.04 LTS is supported, while support for CentOS 7 (EOL) and Ubuntu 16 has been removed
• Added support for PHP 8.3. Dropped support for PHP versions older than 7.2
• Added support for DPDK 24.11 and Mellanox OFED drivers 24.10
• Added support for PF_RING 8.8.0 and the latest Netmap (December 2024 git version)
• Updated the AS Number database and the GeoIP data
• Numerous small enhancements and bug fixes
• Updated User Guide

To upgrade from any previous version, please follow the instructions listed here.

For more information on Andrisoft Wanguard and its features, please visit https://www.andrisoft.com/software/wanguard.

About Andrisoft