topic Re: R80.20.35 Advanced Settings changes in Spark Firewall (SMB)

R80.20.35 Advanced Settings changes

G_W_Albrecht — Fri, 19 Nov 2021 10:23:50 GMT

R80.20.35 Advanced Settings bring a handfull of new parameters compared to R80.20.25:

Attribute Name	Type	Value	Description
Cluster - Restart the routed process upon failover	bool	true	Indicates if the main routing process is restarted upon cluster failover, this is more stable behavior but it prevents some features like graceful-restart for BGP and OSPF. Cluster has to be re-configured for this setting to take effect. After re-configuring the cluster, all local cluster settings will be reset to their defaults.
OS advanced settings - Cellular Backoff Algorithm Mode	options	Auto	Set cellular backoff algorithm mode (auto, force-disable or force-enable). When in auto mode, backoff algorithm will only work for Rogers cellular carrier.
OS advanced settings - Use unique ICMP ID	bool	false	Use unique ICMP ID per destination in connection monitoring
Privacy settings - Share device information with IoT cloud	bool	false	Share device information with IoT cloud in order to enforce policy based on IoT profiles
UserCheck Portal - Redirect Address	string		Configure this parameter only when locally managed GW is configured in bridge mode and tag based VLAN traffic is passing through it. Use local address which isn't under the bridge
VPN Site to Site global settings - Bypass PSL inspection for VPN traffic	bool	false	Indicates if PSL inspection (Application Control, URLF, IPS, Anti-Virtus, Anti-Bot, Threat-Prevention, Threat-Emulation) is bypassed for VPN traffic

One setting has been removed:

Attribute Name	Type	Value	Description
Reach My Device - Allow open permanent tunnel	bool	true	Use permanent tunnel when running Reach My Device

Re: R80.20.35 Advanced Settings changes

the_rock — Fri, 19 Nov 2021 13:09:28 GMT

Hey G, do you recommend this version? If you are running it, does it appear to be stable? Is there an official sk with that table you pasted? I tried searching for it, but cant find it on support site.

Andy

Re: R80.20.35 Advanced Settings changes

G_W_Albrecht — Fri, 19 Nov 2021 17:00:27 GMT

As my older posts about Advanced Settings this is all based on my own research - an official SK would make these posts superfluous 8):

SMB GWs Advanced Settings

R80.20.10 Advanced Settings

R80.20.15 Locally Managed Advanced Settings

R80.20.25 Locally Managed New Advanced Settings

Concerning R80.20.35 firmware i only installed it yesterday, so i have not had enough time to recommend or not recommend it 😉 I was really very happy with R80.20.30 and only did this change yesterday to try if a bug is resolved (he is not resolved).

Re: R80.20.35 Advanced Settings changes

the_rock — Fri, 19 Nov 2021 14:56:17 GMT

You the man G, thanks brother!!

Re: R80.20.35 Advanced Settings changes

G_W_Albrecht — Fri, 19 Nov 2021 17:08:53 GMT

Own research - call me the great pretender 8) I just copy the Advanced Settings from WebGUI (not so hard, takes 5 - 7 copy actions) and paste it into a spreadsheet to be able to compare them between versions. Find all historical data attached. I found out which SQL file contains the IPS protections but up to now was unable to find the source of the Advanced Settings.

Re: R80.20.35 Advanced Settings changes

the_rock — Fri, 19 Nov 2021 17:11:07 GMT

Well, in my english, thats more of hard worker, regardless if its copy+paste. Its still requires effort, so thank you!

Nice weekend!

Andy

Re: R80.20.35 Advanced Settings changes

G_W_Albrecht — Fri, 19 Nov 2021 22:04:10 GMT

Everything of worth requires effort - that is at least my thinking. It may even turn out be something i am proud of, but that is not the goal, just a zen-like thrive for beauty in doing.