R16.6 Now Available

The latest release of our complete product set, R16.6, is now available for customers and evaluators. In this blog post we look at some of the key changes, you can find a complete list on the Isode website.

New Product: Harrier Email Client

Harrier is a web-based secure email client with capabilities that make it ideal for use in support of military messaging deployments (including ACP127). Harrier includes support for security labels, time-related controls (reply by, expire on, deliver by) and Subject Indicator Codes (SICs).

Harrier can also operate as a general purpose client, providing a high performance, easy to use web interface to an IMAP/SMTP service.

New Messaging Server Capabilities

R16.6 sees a substantial extension of ACP127 support in M-Switch to provide a comprehensive ACP127 gateway and relay service. We’ve also added a range of capabilities in support of NATO BRASS (Broadcast And Ship to Shore) including support for BRE1TA (BRASS Enhancement One Technical Architecture).

New management capabilities include views in our MConsole management GUI to support management of ACP127 features, message history and operator alerts. A new web interface is provided for message correction, especially useful in military deployments where errors are handled by central operators and not returned to the sender.

M-Store X.400 has been enhanced to significantly improve performance and scaling, with message indexes now handled directly by M-Store (in previous versions this was held in M-Vault). M-Store R16.6 can store 100 million messages in a server, with mailboxes holding up to 100,000 messages.

Instant Messaging Enhancements

R16.6 sees a number of improvements to our M-Link XMPP server/gateway product including enhanced clustering to improve performance and simplify administration, control of messages based on maximum message body size and improved account provisioning for user information held in our M-Vault directory.

Download Today

R16.6 is available for download now from the Customer and Evaluator sections of the Isode website, both of which require you to enter your Isode login and password. If you have misplaced your login details (or wish to obtain a login in order to evaluate this release) please contact your Account Manager or reply to this email.

Documentation for this release is available from documentation page, which does not require a password.

R16.3v10: An Important Security Change

Today we’ve released the latest version of R16.3, R16.3v10.

This release, and all subsequent updates include OpenSSL 1.0.1s or later in order to address the OpenSSL Security Advisory described here.

This version of OpenSSL removes the availability of all unrestricted cipher suites. This means all ciphers of 56 bits or less have been removed from this release. In practice this means that if you wish to use TLS, you will need an export-controlled High Grade Encryption (HGE) license from Isode. These licenses are subject to export control.

Please read the page on Transport Layer Security for a further description of HGE.

If you wish to continue using TLS and your license does not currently include HGE, or if you are unsure, please contact license@isode.com for further details. You should obtain the new license file prior to installing the new version.

An update has been issued for the R16.2 branch (R16.2v21) to address this security advisory, releases for all other supported branches will be issued over the next week and announced on our twitter feed using #release.

R16.4 Preview Release

We’re pleased to announce that a preview release, R16.4, is now available.

This preview release will be mostly of interest to military users. It will enable the evaluation of a number of new ACP127 and BRASS capabilities.

The following BRASS features are in R16.4.

  • ACP127 Broadcast. Including operation over serial and non-ARQ COSS, ship and shore sides, and NATO and Italian RECAP messages, automatic retransmission requests/retransmission, and two minute messages.
  • Ship to Shore. Configuration of separate ship to shore circuits is added.
  • Off The Air Monitoring (OTAM). The OTAM process can compare the transmit and receive data streams. If they vary by more than a configurable amount (i.e., corresponding to a bit error rate on the received stream) then the OTAM process will flag this to a management process.
  • Serial Line support. Support for serial hubs such as Digi Portserver TS. The ACP127 data can be sent direct to modem allowing broadcast with or without the use of a 5066 server.
  • Support for Recap messages and retransmission allowing lost messages to be sent successfully.

The new ACP127 management features are:

  • Mconsole has a new Circuit Monitoring View, that enables useful monitoring of ACP127 traffic. This also provides the ability to take over the stream manually.
  • Mconsole has a new ACP127 Message Transfer View allowing the operator to view ACP127 messages currently queued for transfer out
  • Mconsole has a new OTAM monitoring GUI.

Support for the following ACP127 Variants has been added.

  • ACP128 support.
  • ACP126 support.
  • DOI-103 support.
  • DOI-103s support.
  • ACP 126 support.
  • Janap 128 support.
  • BSG support.

R16.4 is currently available on Red Hat Enterprise Linux 6, 7 (64 bit) including CentOS equivalents, Windows Server 2008 R2 (64 bit), Windows 2012 and Windows 2012 R2. Debian Linux 8 64-bit will be added in a subsequent update to R16.4.

R16.4 will be supported until the release of our next major release (R17.0) and is for test and demonstration systems only, we will not support running R16.4 in a production environment.

If you wish to obtain a copy of the R16.4 preview release contact us at customer-service@isode.com.

R16.3: Multi-Master Directory, XMPP Archive/Search & ACP127 support

We’re pleased to announce the availability of Isode’s latest release, R16.3, which can be downloaded now from our website. R16.3 is a major Isode release which adds new capabilities across the entire Isode product range, including:

M-Vault

We’ve introduced a multi-master capability to M-Vault, complementing the single-master approach to replication defined in the X.500 protocols around which M-Vault was developed. M-Vault is the first directory to offer both multi-master and X.500.

M-Link

M-Link gains a new Archive Server for archive of all messages (including 1:1 chat, MUC and PubSub). XMPP clients can access archives using Message Archive Management (MAM) as defined in XEP-0313. M-Link also gains three new web applications:

  1. Message Archive Management, allowing browser-based access to information in the archive.
  2. Statistics, a lightweight monitoring alternative to the M-Link Console GUI.
  3. Forms Discovery and Publishing, for end-user publishing and display of FDP forms.
M-Link Statistics Web App
M-Link Statistics Web App

M-Switch

We’ve added gateway support for text based organisational message protocols, which we’re collectively describing as “ACP127”. The first release of this capability supports ACP127 and DOI 103S, a popular US variant, and enables conversion with STANAG 4406 (compliant to STANAG 4406 Annex D) and SMTP (following the MMHS over SMTP extensions).

In addition we’ve made extensive improvements to MConsole and M-Link Console to support the new M-Switch and M-Link family capabilities. For a full run-down of new capabilities in R16.3, please see the Product Release page. We’ll be publishing further blog posts over the coming weeks focusing on some of the new R16.3 capabilities.

R16.2 update to address OpenSSL Vulnerabilities

Last Thursday OpenSSL issued a security advisory.

Today we announce a new release which addresses these recently identified OpenSSL vulnerabilities. All packages and accompanying release notes are available from both the Customer and the Evaluation sections of the Isode website. You will need your login and password details to access these area, please contact us if you need reminding of these.

We provide full support for Major and Minor releases of our server products, management GUIs and APIs for 5 years from the date of release. If you are currently using R14.6, please note that full support for this release will end in April 2015, if you need assistance planning your upgrade from R14.6 to a more recent release, please contact us using the link above.