In Barracuda Firewall Admin, the size of the terminal window now correctly reflects the window dimensions on initial connect and reconnect. [BNNGF-76293]
In Firewall Admin, filtering the firewall rule list by Source, Destination, or Service now works reliably, matching the text you enter against those columns. [BNNGF-94201]
Configuration Workspaces are available again in Firewall Admin, letting you organize the configuration tree into focused workspaces — including creating, locking, switching, and activating them — for easier day-to-day operations. [BNNGF-94212]
The list entries in Firewall Admin at FIREWALL > Shaping are now displayed correctly. [BNNGF-94330]
The licenses for secondary HA partners now show up on the CC > Licensing > Single Licenses page as expected. [BNNGF-94422]
If no encryption is selected for the parameter Encryption in the GTI configuration window for TINA tunnels, the value None is now displayed instead of Null. [BNNGF-94430]
Importing comments from a CSV file in Firewall Admin are now processed correctly if references are contained in the file. [BNNGF-95156]
In Firewall Admin, the configured number of addresses in a named network object is no longer reset to 1 when you use Send Changes again after editing. [BNNGF-96038]
In Firewall Admin, firewall rule statistics whose name contains "server" are now shown under the correct statistics node instead of appearing under Assigned Services. Rule statistics now display consistently and correctly for both standalone and CC-managed units. [BNNGF-96212]
If multiple hotfixes are displayed in the update window of Firewall Admin, only one hotfix can be selected for update at a time. [BNNGF-96438]
It is now possible to filter, search, and sort the lists for Dynamic Rules and Redirect Availability at Firewall > Dynamic > Dynamic Rules. [BNNGF-97056]
Firewall Admin now shows a confirmation dialog when entering a network address where host bits would be silently cleared (e.g. entering 10.0.0.5/24 is stored as 10.0.0.0/24). The dialog shows both the entered and the normalized address and lets the user accept or reject the change. For CSV network object imports, a summary of all normalized entries is shown before confirming the import. [BNNGF-97157]
In Firewall Admin, you can once again use the Tab key to move between filter fields in the Object Viewer. [BNNGF-98005]
A password-change attempt now results in an error message instructing users to change passwords directly in the external authentication system. [BNNGF-98450]
Firewall Admin 10 now shows the expiry date for intermediate and root cert correctly in the Control Center. [BNNGF-99472]
After creating Client-to-Site VPN external CA in Firewall Admin, it no longer disappears and now remains in the list. [BNNGF-99563]
It is now possible to add multiple IPs or entire networks for remote gateways in the IKEv2 tunnel config. [BNNGF-99696]
Firewall Admin now stays stable when switching between live and history view or displaying VPN graphs. [BNNGF-99837]
The Emergency Override now works on network nodes where references/objects are used. [BNNGF-99971]
The firewall's log calendar navigation now works as expected and timelines no longer jump when clicking the month navigation buttons. [BNNGF-100047]
Empty RCS diffs may be possible and indicate that there was a dummy change which did not change anything effectively. [BNNGF-100270]
Renaming firewall objects directly in the object list now works reliably again, even when the '(manual)' origin label is shown. [BNNGF-100328]
Firewall Admin now stays stable when navigating the BGP, PIM, and VRF views under Control > Network. [BNNGF-100414]
Firewall Admin now prevents invalid ChaCha20/Poly1305 combinations for IKEv2 tunnels, so only working encryption settings can be configured. [BNNGF-100481]
IPS version history is now correctly linked to the new Barracuda Campus URL. [BNNGF-100499]
Firewall Admin no longer crashes when rules inside of a ruleset cascade are deleted or when switching between network objects and rule editing. [BNNGF-100586]
The character limit for the BCMC rule propagation list has been increased from 64 to 256 characters. [BNNGF-100750]
In the Firewall Admin ruleset editor, sections can again be renamed and deleted, and deleted sections now stay removed after sending changes. [BNNGF-100752]
Firewall Admin now preserves the complete IKEv2 VPN tunnel configuration when managing boxes on older cluster or firmware versions, so site-to-site VPN tunnels keep working after configuration changes. [BNNGF-100765]
The IKEv2 'Restart SA on close' option is available again in Barracuda Firewall Admin and can be configured for VPN tunnels on managed firewalls running earlier firmware versions. [BNNGF-100789]
In Firewall Admin, the Activation button now appears immediately after removing the secondary box of an HA pair, without requiring an additional configuration change. [BNNGF-100882]
In the Firewall Admin ruleset editor, firewall rules can again be moved from one section to another. [BNNGF-101069]
Building the configuration tree in Firewall Admin is now faster on large Control Center deployments. [BNNGF-101077]
Unlike before, when any Firewall Admin version could be used, measures have been taken to ensure that CGF administration is only possible with validated Firewall Admin versions. [BNNGF-101081]
The tool-tip for VPN High Performance Settings has been updated to and to covers the two states No and Auto. [BNNGF-101104]
Firewall Admin no longer crashes when you type in a ruleset that contains sections — such as a distributed firewall's local or special ruleset — without first locking the configuration node or opening a rule. [BNNGF-101178]
Duplicate log entries in multi-log view no longer occur. [BNNGF-101465]
Barracuda Firewall Admin no longer crashes in specific situations caused by Intel driver issues. [BNNGF-101543]
Firewall Admin now correctly recognizes when a repository-linked configuration has overrides, including after an undo or discard. [BNNGF-101580]
Firewall Admin no longer crashes when the filter is changed in the Firewall LIVE window. [BNNGF-101584]
When adding a distributed Firewall to a box with Firewall Admin, the Special(cfirewall) set now is displayed as expected in the Assigned Services list. [BNNGF-101634]
In Barracuda Firewall Admin, Send Changes now completes significantly faster for large firewall rulesets — in one measured case, about 6 seconds instead of 19. [BNNGF-101662]
Barracuda Firewall Admin now shows the correct Perfect Forward Secrecy (PFS) state for IKEv1 IPSec Site‑to‑Site tunnels — tunnels with PFS disabled are displayed accurately instead of incorrectly appearing as PFS‑enabled with DH Group 1. [BNNGF-101690]
Killing a non-running URLcatd Handler no longer causes all processes to be terminated. [BNNGF-101696]
Removing entries from the ACL persistently in Firewall Admin for a personal license now works as expected. [BNNGF-101721]
Renaming a global firewall object that is referenced by firewall rules — such as a URL Filter (URL category policy) object — no longer resets its reference count or breaks the rule's reference. The references are now updated to the new name, so the rules keep matching. [BNNGF-101852]
Firewall Admin no longer crashes during high load conditions. [BNNGF-101857]
Shutting down or restarting the firewall's packet-filtering engine no longer crashes Firewall Admin in specific situations. [BNNGF-101914]
distd2 sessions are now closed and boxes now receive config updates as expected. [BNNGF-94218]
The link for Translated HA IP is now also established during automatic HA pairing process on standalone HA boxes for later monitoring purposes. [BNNGF-94482]
The soft activation feature now also considers correctly VLANs created via the CLI. [BNNGF-94564]
A soft network activation no longer deletes source-based throw routes, and consequently routing failures no longer occur. [BNNGF-95077]
CC Events from the CC box layer for port 811 now show the proper source IP. [BNNGF-95151]
When migrating an F600 Rev. D C10 to an F800 Rev. C CCC, the port in the Shared IP configuration are migrated correctly according to the new naming scheme. [BNNGF-95373]
Sending events to the Apple Push Notification Service now works again correctly. [BNNGF-96167]
A system time change during a configuration activation — for example, from an NTP synchronization — no longer interrupts the activation or terminates the active session, so the configuration is applied consistently. [BNNGF-96253]
A network soft activation no longer causes traffic interruptions in combination with source-based routes. [BNNGF-96515]
The dashboard now displays correct information for fan and power supplies. [BNNGF-98284]
Failsafe activation no longer leaves wild routes in the table. [BNNGF-98387]
You can now import certificates into the Certificate Store from a PEM file whose private key is in PKCS8 format; previously the key in the file had to be in PKCS1 format. [BNNGF-98484]
Using non-ASCII UTF-8 characters in configuration no longer causes issues during firmware update. [BNNGF-98494]
SNMP has been extended by a new OID which reports the serial of an appliance. [BNNGF-99074]
As of firmware versions > 10.0.1, 10.5.0, the size of the /art partition will be preset to 6,144 GB for all fresh installed boxes. [BNNGF-99111]
Segment faults no longer occur in specific situations. [BNNGF-99112]
Crashes in the VPN statistics service (vpnstat3) no longer occurs in specific situations. [BNNGF-99113]
Box IPs in the Additional Local IPs are now reflected correctly in a dynamic network object, and ConfUnits now set appropriate default values to ensure dynamic objects to work correctly. [BNNGF-99188]
Update packages containing an update and one or more hotfixes are now longer displayed in the update tab after their installation. [BNNGF-99233]
The dynamic routing service no longer crashes in specific situation and now stays functional. [BNNGF-99436]
Updating appliances to firmware version 10.0 now works as expected if /boot is not the first partition. [BNNGF-99659]
In a High Availability setup, the Lock Failover command in Firewall Admin now always applies to the correct appliance, even if the status display has not yet refreshed after a failover. [BNNGF-99703]
The startup time has been reduced for cases where NTP servers were not reachable during startup. [BNNGF-99813]
The dashboard now shows the correct network interfaces and their link state when multiple DHCP connections are configured on the same physical interface, including when one of them is disabled. [BNNGF-99966]
The SNMP version setting was moved to the SNMP Settings group, and the configuration was updated to enable or disable
Access Groups and SNMPv3 Users accordingly. [BNNGF-99972]
Event Notifications can now be deleted reliably — removed entries stay deleted after activating the configuration ('Send Changes'). [BNNGF-100049]
PPPoE connections now reconnect automatically after going down, without requiring a manual configuration change. [BNNGF-100149]
Disabling logging in a firewall rule now also disables it in syslog streaming. [BNNGF-100350]
Mounting CIFS shares now works as expected. [BNNGF-100371]
The cooldown period for SSH login is now handled as expected. [BNNGF-100387]
VLANs are now displayed as expected in the network configuration drop-down menus and can be selected via the GUI. [BNNGF-100408]
Restoring backup daemon backups on managed boxes and secondary HA boxes is now supported via REST with Emergency Override.
Warning: Restoring a backup on a CC managed box can lead to inconsistent configuration states; after the restore, a full config sync needs to be manually triggered for the box to ensure system consistency. [BNNGF-100473]
Network activations now work as expected. [BNNGF-100477]
Filesystem checks after updating now work as expected without user interaction. [BNNGF-100500]
Using the management interface for direct Internet access no longer causes a consistency error and now works as expected. [BNNGF-100601]
Automatic HA pairing on SecureEdge now works as expected. [BNNGF-100720]
The DASHBOARD now accounts buffer/cache memory available for use and no longer displays misleading memory usage values. [BNNGF-100732]
IKEv2 (Charon) statistics files are now generated and displayed in VPN statistics as expected. [BNNGF-100753]
Firewalls using pool licenses now boot reliably after installing or upgrading to 10.5.0, instead of running out of memory during startup. [BNNGF-100772]
Firewall rules with logging disabled no longer cause Detect entries in the firewall activity log. [BNNGF-100795]
The HA pairing daemon no longer causes crashes in specific situations. [BNNGF-100873]
Fixed an issue where Web log (webmsg) for HTTP traffic was not generated under some circumstances. [BNNGF-100971]
Development hotfixes are now shown in the system report as expected. [BNNGF-100995]
Firewall Insights now keeps reporting correctly after upgrading to firmware 10.5.0. [BNNGF-101102]
You can once again use hyphens in the names of shared networks and IPs, including additional IPv4 and IPv6 addresses. [BNNGF-101107]
The Firewall Insights subscription status now shows whether the license is in use. [BNNGF-101135]
The SNMP service memory statistics now include the memory usage of the snmpd sub-process, providing accurate visibility into total SNMP service memory consumption. [BNNGF-101156]
After updating the Control Center, the list of appliances in the Firmware Update tab is filled as expected. [BNNGF-101353]
Cloud firewalls originally deployed on firmware 9.0.x or earlier now retain network connectivity after upgrading to 10.5.x. [BNNGF-101573]
Calltraces introduced in a former firmware version will no longer spam the klogd.log on updated firewalls. [BNNGF-101590]
The firewall now supports ED25519 SSH keys for its SSH identity (host) key, providing a modern elliptic-curve option that is not based on NIST curves. [BNNGF-101649]
The configuration integrity check now detects when the same shared IP address is assigned to more than one interface. [BNNGF-101656]
Applying changes on the CC Admins tab are now logged into RCS/history/changle-log for auditing. [BNNGF-46245]
Box model migrations no longer enable or disable Automatic HA Pairing, DHCP, and WWAN. [BNNGF-82157]
An IPS profile can now be linked from a Repository or newly created 9.0 distributed firewall as expected. [BNNGF-96448]
For importing a pool license, a cluster and range column has been added to the Select Pool License dialog. [BNNGF-97048]
The handling of large configlog.db files has been improved and nodes in the Control Center no longer become locked because of too large database files. [BNNGF-98143]
The full history for RCS report entries is now displayed correctly. [BNNGF-98424]
Service settings for VPN now accept Listening IPs in the related ConfUnit. [BNNGF-98978]
Importing .tld files in the ConfTemplate Editor now works as expected. [BNNGF-99010]
Configuration templates now only require activation when they are actually changed. [BNNGF-99101]
On firewalls running 10.5.0 or later, the duplicate/overlap check for Custom Application host entries has been fully disabled — the firewall itself handles these cases correctly at runtime. On earlier firewall versions the check remains but now reports all conflicts in a single message and distinguishes exact duplicates from wildcard overlaps. [BNNGF-99281]
When deploying boxes via Control Center configuration templates, the recursive DNS lookup setting is now applied. [BNNGF-99312]
Remote execution has been made audit-proof. [BNNGF-99614]
Global Admins are now able to assign Range pool licenses as expected [BNNGF-99838]
Segmentation faults no longer occur in the context of the CCDB, and the CC no longer reboots itself. [BNNGF-100031]
For the F400c/F600d, the parameter Filemax is now set to 65536 when creating a box on the Control Center at Config > Create new Box. [BNNGF-100332]
The root partition is no longer filled up with RCS session files which could cause the CC to be rendered unusable. [BNNGF-100472]
Certificates from the Control Center certificate store can now be assigned to the VPN service and are applied to the VPN configuration as expected. [BNNGF-100766]
ConfTemplate managed SCs now contain all required parameter in the box.dbconf when it is regenerated. [BNNGF-100808]
Inappropriate authentication warnings for read-only admins no longer occur, and only justified authorization issues trigger a warning. [BNNGF-100874]
The configuration tree in Firewall Admin now loads quickly again on large Control Center deployments, matching the performance of earlier firmware versions. [BNNGF-100994]
Adding or removing instances to configuration templates after updating from 9.0.5 to 10.0.x now works as expected. [BNNGF-101347]
SC Templates aren’t listed anymore in the Firmware Update view as boxes. [BNNGF-101407]
When importing a PAR file from a virtual box into Control Center, the default rules within the firewall ruleset are removed correctly. [BNNGF-101463]
Customer admin accounts no longer can see Edge Computing nodes in clusters without appropriate permissions. [BNNGF-101599]
The Control Center now displays all managed boxes as expected. [BNNGF-101610]
The Parameter Origin feature no longer slows down VPN tunnel config writes. [BNNGF-101623]
Duplicate SecureEdge integration nodes no longer shop up in specific production units. [BNNGF-101679]
