This upgrade file is applicable to all models of NSFOCUS WAF P Series (WAF V6.0.5.1).

[Source Version]
6.0.5.1.33056

[Updates]
Optimizations:
1. A new protection rule is added against the CVE-2016-3714 vulnerability.
2. OpenSSL is upgraded to 1.0.1t.
3. A new protection rule is added against the WordPress 4.2.0-4.5.1 flashmediaelement.swf reflection XSS vulnerability.
4. A new protection rule is added against the CVE-2016-5118 imageMagicK popen_utf8 command injection vulnerability.
5. A new protection rule is added against the CVE-2015-4000 SSL/TLS server instant Diffie-Hellman weak public key vulnerability during WAF/RSAS scan.
6. A new protection rule is added: CVE-2016-0800 DROWN vulnerability protection.
7. Protection rules are added: CVE-2015-7547 and CVE-2015-0235 Glibc vulnerability protection.
8. The SNMP RFC1213-MIB library is supported.

Fixed bugs:
1. No log alerts are generated in mirroring mode.
2. IP addressed blocked during low-and-slow attacks cannot be unlocked manually from the web-based manager.
3. In reverse proxy mode, the state transition of a VRRP instance causes service interruption.
4. There are 302 redirect failures in certain special scenarios.



[Upgrade Notes]
1. Check whether the source version is V6.0.5.1.33056 or later. If the source version is earlier than V6.0.5.1.33056, upgrade it to V6.0.5.1.33056 before installing the upgrade package.
2. The installation will take some time.
3. If the system shows a message indicating that the upgrade package format is incorrect, make sure that the source version is V6.0.5.1.33056 or later.