Ref.: #35401
Details:
After upgrading to firmware version 8.5.3, the customer reported that the Firewall and Outbound Policy using a combination of Grouped Networks together with a domain-based criterion will no longer take effect.
Example #1 - Outbound Policy: (Source = Grouped Networks | Destination = Domain Name)
Example #2 - Firewall Policy: (Source = Grouped Networks | Destination = Domain Name)
Example #3 - Grouped Networks with Domain Name classification (which will be applied to Outbound Policy or Firewall Policy)
The above are example policies that no longer take effect after upgrading to version 8.5.3. As long as the configuration involves the use of Grouped Networks together with a domain-based criterion, it will be affected by this issue.
We have prepared a special firmware (8.5.3s093) to mitigate the issue. The fix will be included in the next GA release.
Affected firmware version:
8.5.3 GA
Affected models:
All models, excluded FusionHub.
Fixed in firmware version:
8.5.3s093
| Download Link | Product | Hardware Revision |
|---|---|---|
| Download | B One Series | HW1/HW1-2 |
| MAX BR1 Pro CAT-20 | HW7 | |
| MAX BR1 Pro 5G | HW1 | |
| MAX BR2 Pro | HW4 | |
| MAX Dome Pro LR | HW1 | |
| MAX HD1 Dome Pro | HW1-2 | |
| MAX Transit Duo Pro | HW1 | |
| Download | Balance 5000 EC | HW1 |
| Balance 2500 EC | HW1 | |
| Balance 1350 EC | HW1 | |
| Balance 310 5G | HW1-2 | |
| Balance 310 Fiber 5G | HW1-2 | |
| Balance 310X | HW1-4 | |
| Balance 380X | HW1 | |
| Balance 580X | HW1 | |
| Balance Two | HW1 | |
| EPX | HW1 | |
| MAX HD2 MBX | HW1-4 | |
| MAX HD4 MBX | HW1-4 | |
| MAX MBX Mini | HW1 | |
| PDX | HW1-2 | |
| SDX | HW1-3 | |
| SDX Pro | HW1-2 | |
| Download | Balance 20X | HW1-3 |
| MAX BR1 IP55 | HW4 | |
| UBR Plus | HW1 | |
| Download | Balance 210 | HW4-5 |
| Balance 30 LTE | HW3 | |
| Balance 30 Pro | HW1 | |
| Balance 310 | HW4 | |
| Balance One | HW1-3 | |
| Balance One Core | HW1 | |
| MAX 700 | HW3-4 | |
| MAX BR1 ENT | HW1-2 | |
| MAX HD1 Dome | HW1 | |
| MAX HD2 | HW5-6 | |
| MAX HD2 Dome | HW1 | |
| MAX HD2 IP67 | HW2-5 | |
| MAX HD2 Mini | HW1-4 | |
| MAX HD2 with MediaFast | HW1-4 | |
| MAX HD4 | HW1-5 | |
| MAX HD4 IP67 | HW1 | |
| MAX HD4 with MediaFast | HW1-4 | |
| MAX Transit | HW1-3 | |
| MAX Transit 5G | HW2-3 | |
| MAX Transit Core | HW1 | |
| MAX Transit Duo | HW1-3 | |
| MAX Transit Duo Pro E | HW1 | |
| MediaFast 200 | HW1,3 | |
| SpeedFusion Engine Cam | HW1 | |
| Download | Balance 1350 | HW2 |
| Balance 2500 | HW1 | |
| Balance 305 | HW2 | |
| Balance 380 | HW6 | |
| Balance 580 | HW2-3 | |
| Balance 710 | HW3 | |
| MediaFast 500 | HW1-2 | |
| MediaFast 750 | HW1 | |
| Download | MAX BR1 Mini | HW3 |
| MAX BR1 Mini 5G | HW1-3 | |
| MAX BR1 Mini Core | HW3 | |
| MAX BR1 Mini M2M | HW1 | |
| MAX BR2 LTE | HW4 | |
| MAX BR2 Micro | HW1 |
Workaround:
Optionally, you can downgrade to the previous firmware version, eg. 8.5.2 or earlier.