Alle Beiträge von Mag. Jochen Reckzigel (Redaktion)

[2023 October Tips & Tricks] Why deprecate L2TP over IPSec in the USG FLEX H Series?

Quelle: Link

Why deprecate L2TP over IPSec in the USG FLEX H Series?

L2TP over IPSec was a popular VPN protocol in the past, but it has become less common and is often deprecated and discouraged for several reasons:

Security Concerns: It does NOT provide encryption or confidentiality to traffic passing through it. It relies on other protocols like IPsec for encryption and security.

Limited Platforms: Not all platforms and devices support L2TP/IPSec. For example, some mobile devices and operating systems have moved away from supporting this protocol in favor of more modern and secure alternatives. Android has removed L2TP VPN in its version 12 onward so that consumers can enjoy better security, performance, and interoperability with other systems.

Performance: L2TP over IPSec can be less efficient in terms of performance compared to newer VPN protocols. The additional overhead introduced by the combination of L2TP and IPSec can result in reduced throughput, which may be a concern in high-speed or high-bandwidth scenarios.

Zyxel is determined to deprecate the L2TP over IPSec in favor of a more modern and secure VPN protocol like IKEv2 in our USG FLEX H series, while keeping L2TP over IPSec in the ZLD-based product lines USG FLEX series and ATP series. IKEv2 is a VPN protocol known for its security, reliability, and efficiency. The best part is it’s widely adopted and provides outstanding interoperability, working with different types of VPN clients, OS, and VPN gateway.

To help our customers migrate to IKEv2, we provide Remote VPN Wizard in every product (ZLD, uOS, Nebula firewall, and future SCR), which generates a VPN script for use with free OS native- IKEv2 VPN clients e.g., Windows, macOS, iOS, Android (StrongSwan) in just a few clicks. As a result, our customers can enjoy the benefits of IKEv2 without the additional cost of purchasing IKEv2 client software.

With the subscription-based Zyxel SecuExtender VPN client, we take a step further allowing customers to enjoy auto-provisioning by simply retrieving the VPN settings right from our firewalls.

 

Office versions and connectivity to Microsoft 365 services

Quelle: Link

Office versions and connectivity to Microsoft 365 services

  • Article

The following table lists the Office versions that are supported for connecting to Microsoft 365 services. For example, connecting to Exchange Online, SharePoint Online, or OneDrive for Business.

Office version Supported for connecting until this date
Microsoft 365 Apps Supported as long as you’re using a supported version.
Office LTSC 2021 October 13, 2026
Office 2019 October 10, 2023
Office 2016 October 10, 2023

 Note

As stated in a April 2017 blog post, only perpetual Office versions in mainstream support are supported for connecting to Microsoft 365 services. Office 2016 is no longer in mainstream support, but we made an exception for it until October 2023, as stated in a September 2018 blog post.

Older Office versions not supported for connecting to Microsoft 365 services

Older Office versions might still be able to connect to Microsoft 365 services, but that connectivity isn’t supported.

In practical terms, what this means is that these older Office versions might not be able to use all the latest functionality and features of Microsoft 365 services. In addition, over time, these older versions might encounter other unexpected performance or reliability issues while using Microsoft 365 services. That’s because as we make improvements to Microsoft 365 services, we’re not taking into account or testing with these older Office versions.

We won’t take any active measures to block older Office versions from connecting to Microsoft 365 services if they’re in extended support and are kept up to date. This includes Office 2019 and Office 2016 after October 10, 2023. Both of these versions are in extended support until October 14, 2025.

Therefore, to provide the best experience with using Microsoft 365 services, we strongly recommend that you move off older Office versions to versions supported for connecting to Microsoft 365 services.

 

Windows 11 Home and Pro – Modern Lifecycle Policy.

Quelle: Link

Windows 11 Home and Pro

Windows 11 Home and Pro follows the Modern Lifecycle Policy.

This applies to the following editions: Home, Pro, Pro Education, Pro for Workstations, SE

Support dates are shown in the Pacific Time Zone (PT) – Redmond, WA, USA.

Support Dates

Listing Start Date Retirement Date
Windows 11 Home and Pro Oct 4, 2021 In Support

Releases

Version Start Date End Date
Version 22H2 Sep 20, 2022 Oct 8, 2024
Version 21H2 Oct 4, 2021 Oct 10, 2023

Microsoft announces changes to Microsoft 365 and Office 365 to address European competition concerns

https://www.zdnet.de/88411505/eu-kartellverfahren-microsoft-entfernt-teams-aus-office-paket/

 

EU-Kartellverfahren: Microsoft entfernt Teams aus Office-Paket

Die Änderung gilt ab 1. Oktober. Betroffen sind Office 365 und Microsoft 365 für Geschäftskunden im Europäischen Wirtschaftsraum und der Schweiz.

 

xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx

 

https://blogs.microsoft.com/eupolicy/2023/08/31/european-competition-teams-office-microsoft-365/

https://www.microsoft.com/en-us/licensing/news/Microsoft365-Teams-EEA

 

Microsoft announces changes to Microsoft 365 and Office 365 to address European competition concerns

New subscription structure for Microsoft 365 in Europe

 

xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx

 

Changes to Microsoft 365 Business suites:

Microsoft 365 Business suites will coexist with the new lineup. Customers in the EEA and Switzerland will be able to choose between the existing Microsoft 365 Business Basic,

Microsoft 365 Business Standard, and Microsoft 365 Business Premium suites with Teams or the new EEA-specific versions of those suites without Teams.

 

 

xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx

USG FLEX vs. USG FLEX H-Serie – Vorteile

Quelle: Link

1) Überblick

1.1 Highlight-Übersicht (USG FLEX H-Serie)

1. Multi-G, PoE-Unterstützung

– Unterstützt die Geschwindigkeiten 10 Mbit/s, 100 Mbit/s, 1 Gbit/s und 2,5 Gbit/s

2. Brandneues uOS für bessere Benutzerfreundlichkeit

3. Hoher Leistungsdurchsatz (einschließlich UTM und VPN)

– Bis zu 3-facher Firewall-Durchsatz

4.Alles-in-einem-VPN-Client

5. Erhöhte Sicherheit

 

1.2 Überblick über die USG FLEX H-Serie

Hinweis: PoE+-Funktion mit Ports : USG FLEX 200HP P2; USG FLEX 500H P3, P4; USG FLEX 700H P3, P4.

 

2) Leistung der USG FLEX-Serie im Vergleich zur USG FLEX H-Serie

2.1 USG FLEX-Reihe

Merkmal USG FLEX 100(W) USG FLEX 200 USG FLEX 500 USG FLEX 700
SPI-Firewall-Durchsatz 900Mbps 1.8Gbps 2.3Mbps 5.4Gbps
VPN-Durchsatz 270Mbps 450Mbit/s 810Mbps 1.1Gbps
UTM-Durchsatz (AV & IPS) 360Mbps 550 Mbit/s 800Mbit/s 1.35Gbps
Max. TCP gleichzeitige Sitzungen 300,000 600,000 1,000,000 1,600,000
Max. gleichzeitige IPSec VPN 40 100 300 500
Gleichzeitige SSL VPN-Benutzer 30 60 150 150
Max. VLAN-Schnittstellen 8 16 64 128
Max.gleichzeitige Geräteanmeldungen 64 200 300 800

2.2 USG FLEX H-Serie

Merkmal USG FLEX 100H USG FLEX 200H/HP USG FLEX 500H USG FLEX 700H
SPI-Firewall-Durchsatz 3Gbps 5Gbps 10Gbps 15Gbps
VPN-Durchsatz 750Mbps 1,2 Gbit/s 2 Gbit/s 3 Gbps
UTM-Durchsatz (AV & IPS) 750Mbps 1,5 Gbit/s 2,5 Gbit/s 4Gbps
Max. TCP gleichzeitige Sitzungen 300,000 600,000 1,000,000 2,000,000
Max. gleichzeitige IPSec VPN 50 100 300 1,000
Gleichzeitige SSL VPN-Benutzer 25 50 150 500
Maximale VLAN-Schnittstellen 16 32 64 128
Max.gleichzeitige Geräteanmeldungen 64 200 300 4,000

 

2.3 Andere Vorteile

Funktion USG FLEX 200 USG FLEX 200H
Systemstartzeit 4 Minuten Innerhalb von 3 Minuten*
Lokale Firmware-Uploads – Schneller
Konfigurations-Uploads – Schneller

 

Worry-Free Business Security (On-Premises) and Worry-Free Business Security Services (WFBS-SVC) minimal Windows requirements for ACS (Azure Code Signing)

Quelle: Link

 

Worry-Free Business Security (On-Premises) and Worry-Free Business Security Services (WFBS-SVC) minimal Windows requirements for ACS (Azure Code Signing)
Product/Version includes:Worry-Free Business Security Advanced , Worry-Free Business Security Standard , Worry-Free Business Security Services , View More
Update Date: 2023/05/29
Article Number: 000291908
Category: Install, Update

Microsoft requires security vendors to sign binaries using ACS. WFBS (On-Premises) and WFBS-SVC will be changing to this new certificate accordingly. However, a minimal update of the Microsoft KB will be required to support this new certificate.

Impact

Customers who do not have the minimum OS build/patch of Microsoft Windows after February 18, 2023 may encounter the following errors:

  • Agent Program and Services may not work properly.
  • There will be a reporting issue between the Windows Security Center (WSC) and the Trend Micro Security Agent which could result to the agent co-existing with Windows Defender. This could possibly lead to slow login, application lockup, or machine unresponsiveness.

To prevent this situation, Trend Micro will add a mechanism to the products to check whether ACS is already supported on the machine. If minimum OS build/patch of Microsoft Windows is not applied, it will prevent security agent fresh installation and agent hot fix after February 18, 2023.

 
Agent Program Upgrade blocking on non-ACS machines is a best effort implementation to prevent accidental deployment of new build on non-ACS compliant system. The ACS complaint detection logic however may not work correctly on some environment. Customers are strongly advised to apply appropriate MS KB to enable ACS support before deploying WFBS Patch 2472 or later.

Check Mechanism Release Schedule

  • Worry-Free Business Security Services (WFBS-SVC): January 9, 2022 Hot fix Maintenance
  • Worry-Free Business Security (On-Premises): To be included in all patches released after Patch 2459.

Customers who will be performing an update or install newer builds released after February 18, 2023 must have applied a minimum Microsoft Windows patch depending on the version of Windows you have deployed mentioned on the article, IMPORTANT BULLETIN: Trend Micro Server and Endpoint Protection Agent Minimum Windows Version Requirements for Updated Binaries After Mid-February 2023.

 
For machines that do not allow “trusted root CA auto update” or are in air-gapped or otherwise locked down environments, please make sure to apply Microsoft Identity Verification Root Certificate Authority 2020. A tool can be utilized for this by following the steps mentioned in this KB article. You may use the command EasyFixSysCerts.exe A1 .

Customers who have questions are encouraged to contact Trend Micro Technical Support for further assistance.

Windows 10 Home und Pro – Version 22H2 – Supportende 14. Oktober 2025

Quelle: Roadmap

Windows 10 support lifecycle

As documented on the Windows 10 Enterprise and Education and Windows 10 Home and Pro lifecycle pages, Windows 10 will reach end of support on October 14, 2025. The current version, 22H2, will be the final version of Windows 10, and all editions will remain in support with monthly security update releases through that date. Existing LTSC releases will continue to receive updates beyond that date based on their specific lifecycles.

Recommendation

  • We highly encourage you to transition to Windows 11 now as there won’t be any additional Windows 10 feature updates.
  • If you and/or your organization must remain on Windows 10 for now, please update to Windows 10, version 22H2 to continue receiving monthly security update releases through October 14, 2025. See how you can quickly do this via a servicing enablement package in How to get the Windows 10 2022 Update.

The final end of support date for Windows 10 does not change with this announcement; these dates can be found on the Windows 10 Lifecycle page.

 

Quelle: Link

Windows 10 Home und Pro

Windows 10 Home und Pro folgen der Modern-Lifecycle-Richtlinie.

Dies gilt für die folgenden Editionen: Home, Pro, Pro Education, Pro for Workstations

 Wichtig

Ab Windows 10, Version 21H2 (das Windows 10 November 2021 Update), werden Funktionsupdates jährlich in der zweiten Hälfte des Jahres über den Kanal für allgemeine Verfügbarkeit veröffentlicht. Weitere Informationen finden Sie hier. Microsoft wird bis zum 14. Oktober 2025 weiterhin mindestens einen Windows 10-Kanal unterstützen.

Die Supportzeiträume werden in Pacific Time (PT) für Redmond (Washington, USA) angegeben.

Supportzeiträume

Auflistung Startdatum Deaktivierungsdatum
Windows 10 Home und Pro 29. Juli 2015 14. Okt. 2025

Releases

Version Startdatum Enddatum
Version 22H2 18. Okt. 2022 14. Okt. 2025
Version 21H2 16. Nov. 2021 13. Juni 2023
Version 21H1 18. Mai 2021 13. Dez. 2022
Version 20H2 20. Okt. 2020 10. Mai 2022
Version 2004 27. Mai 2020 14. Dez. 2021
Version 1909 12. Nov. 2019 11. Mai 2021
Version 1903 21. Mai 2019 8. Dez. 2020
Version 1809 13. Nov. 2018 10. Nov. 2020
Version 1803 30. Apr. 2018 12. Nov. 2019
Version 1709 17. Okt. 2017 9. Apr. 2019
Version 1703 11. Apr. 2017 9. Okt. 2018
Version 1607 2. Aug. 2016 10. Apr. 2018
Version 1511 10. Nov. 2015 10. Okt. 2017
Version 1507 29. Juli 2015 9. Mai 2017