Download
Abstract
This is a General Availability (GA) patch containing all the fixes since the release of IBM Security Access Manager for Web 7.0.0 (Gateway Appliance)
Download Description
1.0 ABOUT THIS PATCH
--------------------
This patch package contains fixes for problems in the IBM Security Access
Manager Web Gateway Appliance firmware. This patch requires that Security
Access Manager Web Gateway Appliance Version 7.0 is already installed and
configured successfully.
1.1 Patch contents
This patch package contains:
- This README file.
- Updated firmware file for the Security Access Manager Web Gateway
Appliance.
1.2 Patches superseded
Patches superseded by this patch:
None.
2.0 APARS AND DEFECTS FIXED
---------------------------
Because patches are cumulative, this patch corrects all the problems
outlined in the following sections.
2.1 Problems fixed by Patch 7.0.0-ISS-WGA-FP0001
APAR IV39028:
Symptom: A couple of the 'help' links that can be accessed from the
local management interface do not reference valid HTML pages.
APAR IV39030:
Symptom: If you attempt to start the packet tracing functionality on the
appliance you currently get an error.
APAR IV39032:
Symptom: If you create a junction using the pdadmin utility and then
attempt to view the junction using the local management interface,
the 'Junction cookie javascript block' value is not loaded
correctly.
APAR IV39033:
Symptom: If you attempt to use an unsupported hypervisor to install the
virtual appliance, the installation fails to start, but
the reason for this failure is not obvious. A change is included
in the patch so that an appropriate error message is displayed to
the user.
APAR IV39074:
Symptom: Audit style events that are detected by the Web Application
Firewall functionality cannot have their default actions
overridden. The Web Reverse Proxy currently ignores any
configured actions for these types of events.
APAR IV39036:
Symptom: There are some missing translated strings for some of the Asian
languages, which means that error messages are displayed in
certain panels of the local management interface.
APAR IV39083:
Symptom: The management and application interfaces can currently be
incorrectly configured so that they share the same IP address.
APAR IV39084:
Symptom: Static routes cannot currently be set for the application
interfaces.
APAR IV39029:
Symptom: Due to the way in which the local management interface has been
implemented, only a single administrator can manage the
appliance at a single time. However, there is currently no
protection from multiple administrators logging into the appliance
at the same time. A change is included in this patch so
that only a single administrator can be logged into the local
management interface at a time.
APAR IV39035:
Symptom: The appliance is unable to act as a front-end load balancer to
Web Reverse Proxy instances that reside in the same appliance.
This limitation is now fixed and the updated documentation
provides clear direction on how to configure a Highly Available
environment with as few as two appliances.
APAR IV39080:
Symptom: The local management interface does not currently provide
a mechanism to configure the Kerberos environment for the
appliance. Due to this limitation, the Web Reverse Proxy is not
able to support 'Windows Desktop SSO' style authentication. The
local management interface is now extended so that you can
configure the Kerberos environment.
This patch also provides a fix for the problems that are corrected by
IBM Security Access Manager for Web Patch 7.0.0-ISS-WGA-FP0001.
Installation Instructions
3.0 BEFORE YOU INSTALL THIS PATCH
--------------------------------
Before you install this patch, review the following prerequisites and
dependencies.
3.1 Create a snapshot of the existing appliance configuration
Before you apply the firmware update to the appliance, it is best to take a
snapshot of the current configuration. Perform the following steps in the
local management interface to create a snapshot:
1. Log on to the local management interface.
2. Select Manage System Settings -> Snapshots from the menu.
3. Select New to create the snapshot and give the snapshot an
appropriate name.
4. Select the newly created snapshot, click Download, and save
the snapshot on a local drive.
4.0 INSTALLING THIS PATCH
-------------------------
NOTE: Before you install this patch, be sure that you have completed the
backup procedure in section 3.0, "BEFORE YOU INSTALL THIS PATCH".
4.1 Installing this patch using the online update server
Please note that the method of using the online update server to install
the patch is not currently available. It will be made available in the
near future. For the time being the package file should be downloaded
from FixCentral and then applied to the appliance using the method which
is described in section 4.2 of this document (Installing this patch from
a local copy of the update).
To use the online update server, ensure that the following two
pre-conditions are met:
1. A valid license is installed on the appliance;
2. The appliance has network connectivity to the online update
server (xpu.iss.net)
Using the local management interface:
1. Go to the updates screen by selecting
Management System Settings -> Available Updates.
2. Refresh the list of available updates by clicking Refresh
. The table is updated to show the available updates. It
is important to note that only newer versions of the firmware are
displayed in this table.
3. Download and apply the update by selecting the firmware update in
the table and then clicking Install. The firmware update
can take a long time to complete, depending on the
bandwidth that is available to the appliance. After the update
is successfully applied to the system, the appliance reboots
automatically.
4.2 Installing this patch from a local copy of the update
Using the local management interface:
1. Go to the updates screen by selecting
Manage System Settings -> Available Updates.
2. Upload the firmware update file by selecting Upload and then
supplying the firmware package file name. The upload process might
take several minutes, and the table that shows the updates can take
a little while to update after the upload is complete.
3. Apply the update by selecting the firmware update in the table and
then clicking Install. The firmware takes a few minutes to complete
the update and then the appliance automatically reboots.
Using a USB drive (hardware appliance only):
1. Copy the firmware update onto a USB flash drive. The flash drive should
be formatted with a FAT file system.
2. Insert the USB flash drive into the hardware appliance.
3. Log onto the appliance console, or ssh into the appliance, as the 'admin'
user.
4. Go to the 'updates' menu by typing 'updates', and then press Enter.
5. Install the update by typing 'install', and then press Enter. The
following options should then be selected:
'1' : For a firmware update;
'1' : To install the update from a USB drive;
'YES' : To confirm that the USB drive is plugged into the appliance;
<index> : Select the appliance firmware from the list;
'YES' : to confirm the update and start the update process;
Note: The firmware update takes a few minutes to complete and then
the appliance automatically reboots.
Problems (APARS) fixed
Problems (APARS) fixed
Was this topic helpful?
Document Information
Modified date:
15 June 2018
UID
swg24034695