<<

Application Signature Version: 4.12.30 Application Signature Database Release Notes Version 4.12.30 th ------Database Release------Notes Date: 8 May, 2015

Release Information

Upgrade Applicable on

Application Signature Release Version 4.12.29 CR200i, CR250i, CR300i, CR500i-4P, CR500i-6P, CR500i-8P, CR500ia, CR500ia-RP, CR500ia1F, CR500ia10F, CR750ia, CR750ia1F, CR750ia10F, CR1000i-11P, CR1000i-12P, CR1000ia, CR1000ia10F, CR1500i-11P, CR1500i-12P, CR1500ia, CR1500ia10F Cyberoam Appliance Models CR25iNG, CR25iNG-6P, CR35iNG, CR50iNG, CR100iNG, CR200iNG/XP, CR300iNG/XP, CR500iNG-XP, CR750iNG-XP, CR2500iNG, CR25wiNG, CR25wiNG-6P, CR35wiNG

CRiV1C, CRiV2C, CRiV4C, CRiV8C, CRiV12C

Upgrade Information Upgrade type: Automatic

Compatibility Annotations: None

Introduction

The Release Note document for Application Filter Database version 4.12.30 includes support for both, the new and the updated Application Signatures. The following sections describe the release in detail.

New Application Signatures

The Cyberoam Application Filter controls the application traffic depending on the policy configured, by matching them with the Application Signatures. Application Signatures optimize the detection performance and reduces the false alarms.

Report false positives at [email protected], along with the application details.

The table below provides details of signatures included in this release.

Page 1 of 6 Document Version – 1.0- 08/05/2015

Application Signature Database Release Notes Version 4.12.30 ------

This Application Filter Release includes seventeen (17) Application Signatures to address two (2) Application Categories. Also, a total of seventy hundred seventy one (771) Application Signatures are updated for thirteen (13) Application Categories. New signatures are added for the following Application Categories:

Rev Applicable from Application Name Risk Category No. Version Chat 5.3 2 Instant 10.04.0 Build 214 Messenger

Manual Proxy Surfing 5.4 4 Proxy and 10.04.0 Build 214 Tunnel

TeamViewer 5.5 3 Conferencing 10.04.0 Build 214 Conferencing

DCERPC 3.2 1 Infrastructure 10.04.0 Build 214

Skype 8.1 4 Instant 10.04.0 Build 214 Messenger

Skype Services 7.9 5 General 10.04.0 Build 214

Torrent Clients P2P 33.0 5 P2P 10.04.0 Build 214

Freegate Proxy 30.9 5 Proxy and 10.04.0 Build 214 Tunnel

Ultrasurf Proxy 7.3 5 Proxy and 10.04.0 Build 214 Tunnel

TOR Proxy 7.7 5 Proxy and 10.04.0 Build 214 Tunnel

Psiphon Proxy 4.7 5 Proxy and 10.04.0 Build 214 Tunnel

Secure Socket Layer 3.1 1 Infrastructure 10.04.0 Build 214 Protocol Orkut Android 2.7 4 Mobile 10.04.0 Build 214 Applications

Page 2 of 6 Document Version – 1.0- 08/05/2015

Application Signature Database Release Notes Version 4.12.30 ------

Orkut Website 2.7 4 Social 10.04.0 Build 214 Networking

Hotspotshield Proxy 2.0 5 Proxy and 10.04.0 Build 214 Tunnel

Flixster Website 1.1 3 Streaming 10.04.0 Build 214 Media

Amazon AWS 1.4 1 General 10.04.5 Build 007 Business

MQTT 1.4 3 Infrastructure 10.04.5 Build 007

Clash Of Clans 1.1 1 Gaming 10.04.5 Build 007 Lightshot 1.1 4 Storage and 10.04.5 Build 007 Backup

Vevo 1.0 1 Streaming 10.06.1 Build 631 Media ZeeTV App 1.0 1 Streaming 10.06.1 Build 631 Media Pandora Music 1.0 1 Streaming 10.06.1 Build 631 Streaming (Mobile Media application) Cricbuzz 1.0 1 General 10.06.1 Build 631 Internet STAR Sports 1.0 1 Streaming 10.06.1 Build 631 Media Litzscore API 1.0 1 General 10.06.1 Build 631 Internet iFood 1.0 1 Streaming 10.06.1 Build 631 Media Cricking 1.0 1 General 10.06.1 Build 631 Internet Music Tube 1.0 1 Streaming 10.06.1 Build 631 Media PLUS7 Yahoo 1.0 1 Streaming 10.06.1 Build 631 Media Brazzers 1.0 1 Streaming 10.06.1 Build 631 Media Guvera 1.0 1 Streaming 10.06.1 Build 631 Media RaidoFM 1.0 1 Streaming 10.06.1 Build 631 Media

Page 3 of 6 Document Version – 1.0- 08/05/2015

Application Signature Database Release Notes Version 4.12.30 ------

Vidmate 1.0 1 Streaming 10.06.1 Build 631 Media

Page 4 of 6 Document Version – 1.0- 08/05/2015

Application Signature Database Release Notes Version 4.12.30 ------

 Application Name & Version: Name and version number of the Application that can be identified by Cyberoam Application Filter.

These Application Filtering signatures support prior versions of respective application.

 Rev No.: Threat signature revision number.

 Risk: Describes the level of risk for the application. The levels of risks are described in the table below: Risk Level Risk Criteria 1 Very Low 2 Low 3 Medium 4 High 5 Very High

 Category: Identifies the category of the Application.

 Applicable from Version: Application filters are available in a specified Cyberoam Firmware Version and above.

Page 5 of 6 Document Version – 1.0- 08/05/2015

Application Signature Database Release Notes Version 4.12.30 ------

Important Notice Cyberoam Technologies Pvt. Ltd. has supplied this Information believing it to be accurate and reliable at the time of printing, but is presented without warranty of any kind, expressed or implied. Users must take full responsibility for their application of any products. Cyberoam Technologies Pvt. Ltd. assumes no responsibility for any errors that may appear in this document. Cyberoam Technologies Pvt. Ltd. reserves the right, without notice to make changes in product design or specifications. Information is subject to change without notice.

USER’S LICENSE Use of this product and document is subject to acceptance of the terms and conditions of Cyberoam End User License Agreement (EULA) and Warranty Policy for Cyberoam UTM Appliances.

You will find the copy of the EULA at http://www.cyberoam.com/documents/EULA.html and the Warranty Policy for Cyberoam UTM Appliances at http://kb.cyberoam.com.

RESTRICTED RIGHTS Copyright 1999 - 2015 Cyberoam Technologies Pvt. Ltd. All rights reserved. Cyberoam, Cyberoam logo are trademark of Cyberoam Technologies Pvt. Ltd.

Corporate Headquarters Cyberoam Technologies Pvt. Ltd. 901, Silicon Tower, Off. C.G. Road, Ahmedabad – 380006, Phone: +91-79-66065606 Fax: +91-79-26407640 Web site: www.cyberoam.com

Page 6 of 6 Document Version – 1.0- 08/05/2015