TaskSmart W2200 1.03 Release Notes

The following enhancements / fixes apply to v1.03 of the TaskSmart W2200 appliance software.

Security Enhancements

Kernel Upgrade: Kernel has been upgraded to 2.2.19.  System is no longer vulnerable to the root exploit through the execve() system call.  NFS system programs have been upgraded to support the new kernel.

SNMP Read-only Community String: If the SNMP Read-only Community String was set to the default setting of "public", the upgrade process changed it to "cpqPublic" for enhanced security.  If the default setting had been changed from "public" before the upgrade, the custom string is retained.
RAPIDLAUNCH USABILITY NOTE:  UID light functionality is unaffected when using RapidLaunch v2.3 or higher.  If using an older version of RapidLaunch the "SNMP Read" field must be changed to cpqPublic before the UID light will function properly.  Simply click the "Authentication" field for the device and change the "SNMP Read" field to cpqPublic.

Apache Module "mod_status": The Apache module, mod_status, which presents an HTML page with the current server statistics is now disabled by default for enhanced security.  The system administrator may choose to turn mod_status back on by enabling it in the Web Server Configuration Application.

IP Port Restrictions: Added ability to disallow incoming traffic to any system service IP port by Ethernet interface through the Web Server Configuration Application (* indicates new port selections in this release):

Service Port(s)
HTTP *80
HTTPS *443
Anonymous FTP 21
Telnet 23
SSH 22
SMTP 25
POP3 110
IMAP 143, 220, 993
SNMP 161
Who/Login *513
Auth / Ident 113
ICMP (ping, timestamp) * ICMP protocol
NFS *111, *113, *1024, *1025, 2049
Compaq Insight Web Management Agent *2301
Compaq Configurator 3201

Web Server Configuration Application

System Upgrade Utility:  System can now be upgraded by browsing and uploading the upgrade rpm from a local workstation.

Configuration Replication:  When restoring a system, you may select to either perform a "Full Restore" or "Replicate Configuration".  A full restore will restore all data to the system.  A replicated configuration will allow you to set the Hostname, and IP addresses to unique values on the target system.

Unit Identification Light:  The Unit Identification Light LED may be enabled or disabled from the menu to help you identify a W2200 in a rack.  This replaces the CD eject function.  Service on IP port 3203, used for the CD eject function, has been removed.

Additional IP Port Restrictions: Added ability to disallow incoming traffic on various additional ports and services (see Security Enhancements above).

Virtual Site Admin: Fixed security issue limiting virtual site administrators from looking at other sites.

Disk Quotas :  Fixed disk quota initialization after a system restore.

Networking

Outbound port restrictions : Fixed ipchains issue limiting outbound traffic on various ports.  Fixed ipchains "no defined interface" issue.

Management

Compaq Insight Manager : Updated Insight agents to version 5.20.  Updated Health driver to 2.2.0.