New FWCloud patch releases available
We are pleased to announce the availability of new patch releases for the main components of the FWCloud platform.The new versions are:
- FWCloud API: 2.5.6
- FWCloud UI: 2.5.5
- FWCloud Agent: 2.2.2
- FWCloud Websrv: 2.0.6
- FWCloud Updater: 2.0.5
What's new
OpenVPN Status Sampling
The OpenVPN monitoring subsystem has been significantly enhanced with:- Configurable status sampling, including sampling interval, maximum request lines, and cache size per server.
- Validation and persistence of sampling parameters together with the existing server configuration.
- Independent storage and validation of sampling settings for each OpenVPN status file in FWCloud Agent.
- Support for OpenVPN status file formats 1, 2 and 3 across both FWCloud and FWCloud Agent.
Suricata Cluster
- The Suricata Cluster installation wizard now provides a single interface selector containing all cluster interfaces.
- Proofpoint ET license activation now supports selecting the target cluster nodes during installation.
Improvements
- Improved policy loading by determining the system boot state only once, preventing unnecessary routing reapplication and delaying the Fail2Ban restart until the system has completed booting.
- Updated runtime and development dependencies, including Angular, TypeORM, Axios, MySQL2, Tailwind CSS, ESLint, Prettier, Rust packages, and many other libraries.
- Resolved all known npm dependency vulnerabilities and removed deprecated packages from the build process.
- FWCloud Websrv and FWCloud Updater have also been updated with package upgrades and security fixes.
Bug fixes
- Consistent normalization of OpenVPN status file paths across the UI, API, Agent, and background workers.
- Improved parsing of OpenVPN client and routing information for status formats 1, 2 and 3.
- OpenVPN status-version values are now restricted to supported versions only.
- Normalized OpenVPN status cache records to prevent stale or duplicated session data.
- OpenVPN client 2FA status is now correctly reset when cloning client configurations.
- Fail2Ban compilation improvements, including generation of compilation code during policy compilation instead of storing it in policy rules, corrected indentation, and automatic cleanup of legacy stored code through data migration.
- Removed redundant debug logging related to OpenVPN status sampling.
- Improved Fail2Ban compatibility messages.
- Updated Rust dependencies to their latest versions.
Update procedure
For DEB/RPM package-based Linux distributions, simply update the FWCloud packages using your distribution package manager.For Docker installations, follow the update instructions available in the official documentation.
If your installation was deployed using the FWCloud Installer, the web interface will automatically notify you when the new packages are available. Accept the update and the installer will upgrade your installation automatically.