INTRODUCTION

WatchGuard has just released Fireware v12.11.1, bringing important updates that will enhance security, networking capabilities and overall performance. If you rely on WatchGuard Fireboxes for network protection, here’s what you need to know about this firmware update and why it matters to you.

Key Enhancements in Fireware v12.11.1

Stronger VPN Capabilities

• IKEv2 Support for Windows IPSec Mobile VPN Client – You can now import IKEv2 VPN profiles, allowing for improved security and compatibility.
• Updated macOS VPN Client (v4.73) – Includes minor enhancements and bug fixes to ensure smoother VPN performance on Apple devices.

Improved Security Measures

• RADIUS Authentication Enhancements – Support for the Message-Authenticator attribute helps protect against spoofing attacks like Blast-RADIUS (CVE-2024-3596).
• Patching of Key Vulnerabilities:
  – XSS vulnerabilities in spamBlocker and the Blocked Sites list.
  – Host header injection vulnerability in the Web UI.
  – Additional security headers added to Firebox web server responses.

Enhanced Networking and Device Performance

• IPv6 Support for T45-CW 5G Modem – Enables IPv4/IPv6 dual-stack connections, allowing for greater flexibility with mobile network providers.
• Firebox Management Fixes – Resolves high CPU load issues and failures in policy deployment.
• HTTPS-Proxy Performance Improvements – Fixes an issue where content inspection slowed down over time.

Why should you upgrade?

Keeping your Fireware up to date is crucial for maintaining a secure and efficient network. This update addresses key vulnerabilities, improves VPN functionality and enhances overall system performance. If your organisation relies on WatchGuard’s solutions, upgrading to v12.11.1 will help ensure your network remains resilient against evolving cyber threats.

How to upgrade

You can upgrade your Firebox using:

• WatchGuard Cloud – Recommended for remote management.
• Fireware Web UI – Accessible from your Firebox settings.
• Policy Manager – If you prefer manual control over updates.

Before upgrading, remember to back up your Firebox configuration to avoid any potential issues.

Final thoughts

This release strengthens security, enhances VPN support, and resolves critical vulnerabilities. If you have any questions or need help with the update, get in touch with the Purdicom team—we’re here to support you!

For full release notes, visit WatchGuard’s official documentation.