NG Firewall 17 Beta now available for preview

[jcoffin]

Closing thread since the release candidate as been released and available on the web site.

[dlsolo]

I'm guessing Untangle v17 will be released in the coming months but will NOT be using Debian 12. If Arista bothers to keep releasing versions of Untangle, for use on our own hardware, yeah.... Untangle v18 -MIGHT- be using Debian 12 as its' base but nobody has a crystal ball.

I LOVE the interface and features of Untangle but I fear it might be left to die on the vine so Arista can concentrate on pushing their own hardware but who knows..... maybe it's minimal to no effort in keeping Untangle viable on personal hardware and it generates enough money to justify its' continued existence?!

Went back to using my Asus router as the gateway for my home network and waiting on v17 to drop. I continue testing OPNsense but I just prefer the UI of Untangle.

Well, if anything, I'm sticking around for another year. Just re-upped my subscription. Thanks for hearing a dumb question out.

[road hazard]

Probably a dumb question, but hey, what's life without dumb questions? Now that Debian 12 is out, will 17.0 delay release to rebase on 12.0 or drive on as is, and NGFW 18.0 will be rebased on Debian 12.0?

I'm guessing Untangle v17 will be released in the coming months but will NOT be using Debian 12. If Arista bothers to keep releasing versions of Untangle, for use on our own hardware, yeah.... Untangle v18 -MIGHT- be using Debian 12 as its' base but nobody has a crystal ball.

I LOVE the interface and features of Untangle but I fear it might be left to die on the vine so Arista can concentrate on pushing their own hardware but who knows..... maybe it's minimal to no effort in keeping Untangle viable on personal hardware and it generates enough money to justify its' continued existence?!

Went back to using my Asus router as the gateway for my home network and waiting on v17 to drop. I continue testing OPNsense but I just prefer the UI of Untangle.

[dlsolo]

Probably a dumb question, but hey, what's life without dumb questions? Now that Debian 12 is out, will 17.0 delay release to rebase on 12.0 or drive on as is, and NGFW 18.0 will be rebased on Debian 12.0?

[flynhawaiian]

The reason is simple. They want you to buy their hardware and not use your own.

[sky-knight]

For those in the cheap seats not paying attention...

NGFW has never in its history as a product done driver updates. The only time we get updated drivers is when we get an updated kernel. So you will not see any changes in hardware support until the product moves to Debian 12.

For those also in the cheap seats, be aware that Debian 12 released TODAY June 10th, 2023. Since each release has a 3 year lifecycle (Debian 11 released on April 14th, 2021), you can expect NGFW to move to the new OS sometime before April of next year since support for the current platform is dying.

Then and only then will you get the Intel driver updates you want for current hardware, and then and only then will you realize you want MORE hardware support you don't have and you'll be stuck waiting for yet another kernel upgrade. But remember today's date, because the Intel drivers of TODAY will be what's supported in that future version of NGFW.

In the meantime... I too will continue to wonder why NGFW doesn't officially support upgraded Intel driver modules for improved hardware support, security, and performance reasons. Doubly so since Arista took down the wiki page that let us compile our own drivers.

[donhwyo]

There are no updates to the Debian core or any driver packages in 17.

That is a shame.

[gravenscroft]

Will the base Debian be updated so 17.0 supports i226 NICs?

There are no updates to the Debian core or any driver packages in 17.

[rnatalli]

Excellent, thanks. Now hopefully Intel’s i226 NICs work in 17.0 and all is good.

[donhwyo]

[root @ homeuntangle] ~ # dpkg -l |grep  libcharon-extauth-plugins
ii  libcharon-extauth-plugins               5.9.1-1+deb11u3                                                  amd64        strongSwan charon library (extended authentication plugins)
[root @ homeuntangle] ~ #​

 [TABLE="class: x-grid-item, cellpadding: 0, cellspacing: 0, width: 0"]
  [TR="class: x-grid-row"]
  [TD="class: x-grid-cell x-grid-td x-grid-cell-gridcolumn-1529 x-grid-cell-first x-grid-item-focused x-grid-cell-selected"]
Build[/TD]
  [TD="class: x-grid-cell x-grid-td x-grid-cell-gridcolumn-1530 x-grid-cell-last"]
17.0.0.20230511T091022.f44d0b1d7f-1bullseye[/TD]
  [/TR]
  [/TABLE]
  [TABLE="class: x-grid-item x-grid-item-over, cellpadding: 0, cellspacing: 0, width: 0"]
  [TR="class: x-grid-row"]
  [TD="class: x-grid-cell x-grid-td x-grid-cell-gridcolumn-1529 x-grid-cell-first"]
Kernel[/TD]
  [TD="class: x-grid-cell x-grid-td x-grid-cell-gridcolumn-1530 x-grid-cell-last"]
5.10.0-14-untangle-amd64[/TD]
  [/TR]
  [/TABLE]
 ​

For what that is worth. Copied and pasted from the web page. lol

BTW beta seems to be working fine.

[rnatalli]

Doesn't look like there is an eap package in 17.

[root @ homeuntangle] ~ # dpkg -l |grep eap
[root @ homeuntangle] ~​

If you only need that package you could wget it and install it that way. At your own risk of coarse. Don't know what that package does but you might also have to do some settings or dependencies at the cli. Then they might get lost at an update.

Thanks. Would you check if libcharon-extauth-plugins is installed on 17?

[donhwyo]

Doesn't look like there is an eap package in 17.

[root @ homeuntangle] ~ # dpkg -l |grep eap
[root @ homeuntangle] ~​

If you only need that package you could wget it and install it that way. At your own risk of coarse. Don't know what that package does but you might also have to do some settings or dependencies at the cli. Then they might get lost at an update.

[rnatalli]

Just a couple of questions related to v 17.0 if I may:

1. Will the base Debian be updated so 17.0 supports i226 NICs?
2. Will the EAP Debian package be compiled this time so IKEv2 authenticates properly?

Thank you.

[dlsolo]

NSTR. 17.0 has been running for 37 days with no issues. I look forward to a final release.

[hd908]

It is a similar issue since any changes to the settings structure will not necessarily be updated if it is already the same version. Convertors only change previous version settings. I would use the previous 16.6.2 backup to restore on newer betas or the final release.

I haven't fully setup 16.6.2 because of the interface issue. I've just been waiting for 17.