Release Notes for SSH Tectia Client 6.0.1 ----------------------------------------- 1 April 2008 (C) 2008 SSH Communications Security Corp. This software is protected by international copyright laws. All Rights Reserved. Table of Contents 1. About This Release 2. New Features 3. Bug Fixes and Minor Features 4. Known Issues 5. Further Information 1. About This Release ---------------------- The SSH Tectia client/server solution 6.0 is an end-to-end communications security solution for multi-platform environments. It is based on the Secure Shell technology from the original developers. The SSH Tectia client/server solution consists of four base products: * SSH Tectia Client * SSH Tectia ConnectSecure * SSH Tectia Server * SSH Tectia Server for IBM z/OS SSH Tectia Client provides a conventional and powerful secure terminal and secure file transfer client to be used in conjunction with SSH Tectia Server or other Secure Shell servers to enable secure connectivity and file transfers in heterogeneous enterprise environments. SSH Tectia ConnectSecure provides additional powerful features to transparently secure FTP file transfers and server connectivity. SSH Tectia ConnectSecure is designed especially for server-to-server file transfer security and it introduces new features enabling enhanced, high-performance file transfers in conjunction with SSH Tectia Servers, third-party or OpenSSH servers in heterogeneous enterprise environments. SSH Tectia ConnectSecure replaces the EFT expansion packs for SSH Tectia Client and Server that were available in SSH Tectia version 5.x. We recommend uninstalling any SSH Secure Shell and SSH Tectia 4.x products, before installing SSH Tectia Client 6.0. 2. New Features ----------------- The following list includes the new features implemented in SSH Tectia Client. In 6.0.0: --------- - New platform support: o HP-UX 11i v3 (PA-RISC, IA64) o SUSE Linux Enterprise Server 10 (x86, x86-64) o SUSE Linux Enterprise Desktop 10 (x86, x86-64) o Red Hat Enterprise Linux 5.1 (x86, x86-64) - Windows: NEW Transparent TCP Tunneling functionality. SSH Tectia Client and ConnectSecure on Windows can transparently secure several essential software applications used by administrators for remote administration of business-critical hosts running on Windows, Unix, Linux and IBM mainframe systems. This includes remote desktop software such as VNC and RDP. SSH Tectia Client can also be used to secure any existing Telnet-based terminal connections to enterprise applications, as well as remote access to business email or corporate intranet. This feature is supported on Windows XP and 2000 by SSH Tectia Client and also on Windows Server 2003 by SSH Tectia ConnectSecure. - Windows: SSH Tectia Client and SSH Tectia ConnectSecure can also be used on a Windows machine to transparently secure essential application connections with automatic secure connection setup. SSH Tectia Client and ConnectSecure can automatically open and secure the connection based on the information provided by the software that needs to be secured, thus eliminating the need to generate complicated configurations for connecting to a large amount of different servers. - All platforms: Added '-K' option to 'sshg3' to select a specific key for authentication. - All platforms: Added option '--identity' for SSH Tectia Client and SSH Tectia ConnectSecure so that it is possible to specify a key from the key store to use (identified either by the key ID or public key hash). Syntax: sshg3: [OPTION]... PROFILE|[USER@]HOST[#PORT] [COMMAND] --identity= Use private key 'id' as user identification. The 'id' can be either key id, key hash or a key file name. --identity-key-id= Use key id as a user identification. --identity-key-hash= Use key hash as a user identification. - All platforms: The ssh '-c' command-line option in SSH Tectia Client 4.x, where you used to supply the name of the cipher that you were using is now recognized in 6.0. Syntax: -c, --ciphers= Allow only selected ciphers to be used. Giving value 'help' lists available ciphers. -m, --macs= Allow only selected MACs to be used. Giving value 'help' lists available MACs. - All platforms: Added option '-K' to 'sshg3' to select a specific key for authentication. Syntax: sshg3 -K, --identity-key-file= Use key file as a user identification. - All platforms: In SSH Tectia Client 4.x, the ssh-add2 command has option '-p' that makes the agent read the passphrase from stdin. This functionality is now available in the Connection Broker in SSH Tectia 6.0. - All platforms: Added time stamps to debug the output of SSH Tectia Client/Server/ConnectSecure 6.0. - All platforms: Support for shell command ! added into sftpg3. Syntax: sftp> help ! ! [ []] Invoke an interactive shell on the local machine. If is given, it is used as the command to be executed. Optional are used as arguments to the command. - All platforms: Added option '-i' to use selected private keys with the sshg3 command line tool. Syntax: sshg3 -i Use private keys defined in the identification file to authenticate with the public-key method. - All platforms: A new command-line tool 'ssh-broker-ctl' is available for managing and monitoring the Connection Broker. The Connection Broker is part of SSH Tectia Client and SSH Tectia ConnectSecure and is responsible for managing all connections (including authentication). The ssh-broker-ctl command-line parsing is separated to specific commands, such as status or list-keys. Most command-line options are command-specific although there are generic options which work on all or on multiple commands. Syntax: ssh-broker-ctl [options] Examples of available commands: status Print status and statistics for running Broker. list-connections List of open connections. list-channels List of open connection channels. (for a full list, enter: ssh-broker-ctl --help) - Windows: SSH Tectia Client / ConnectSecure Broker GUI improvements: - Fallback and pseudo IP options are disabled for direct and block filter - Filter rule editing has been improved in the SSH Tectia Configurator for: 1. Any ports 2. Single Port