Untangle 10 is officially released

YeOldeStonecat

Well-Known Member
Reaction score
6,737
Location
Englewood Florida
Totally new platform...mega improvements.
Many new features, but the big ones include httpS scanning, IP6, and the big one for me....tagged VLAN support.

Since it's a ground up new platform...there is no upgrade path for existing version 9 installs, you have to pave and rebuild and reconfigure. I don't think it can "restore/import" previous backups...so if you're upgrading existing clients, pretty much gotta take notes of their current setup, and manually set them on the new v10 rig. I need to confirm that.
 
Have you played with it yet? I got the notice the other day and was planning on building a demo this weekend.

Just downloaded the ISO's....I know the BETAs have been around for months, but now it's official release...gonna burn to something shortly. Maybe. Kinda slammed work wise..and have to head to BNI training thing this afternoon (gonna be chapter prez this year. :D ) And then work in NYC tomorrow and over next week or so. Yuck.

LOL so to answer yer question..."no" haven't played with it yet..but hopefully soon. Maybe today as I'm dabbling around at the office.

I have a small school that I'm upgrading their network at...just installed some Procurve 48 port switches and wanna crank up that VLAN support now...they have an NG-100 at the edge.
 
I know that feeling. I typically don't mess with betas. Almost always a waste of time. I was surprised at the official announcement the other day. I figured it would be January.
 
Good to know but I found them a bit expensive compared to others like fortigate who also supply the hardware.

I might have a play with it next week though.
 
Good to know but I found them a bit expensive compared to others like fortigate who also supply the hardware.

For home users...yeah it's not very effective (but then again neither is Fortigate).

For business users....you have several approaches.

Here's a suggestion that I will tell everyone in the IT field who takes care of business clients...and especially when you have business clients that you put on an MSP program...meaning fixed monthly costs. Many of us offer some form or unlimited or all you can eat plan when it comes to MSP packages. So if a client gets malware on a computer...they don't pay you extra, the cleaning of this computer is included in your fixed monthly MSP contract. So it's your time that gets used. How long does it take you to fully clean up a computer from malware? At least 1 hour. How many times per year does a biz client call to have you clean malware from a system? At least twice? There's a minimum of 2 hours.

Suggestion..spend an hour...or two if you're slow...build an Untangle box out of a small form factor computer with 2x NICs...using the Free LITE version of their distro. Go replace that Linksys or DLink or Netgear or Sonicwall or <insert whatever brand edge device you use for your biz clients> firewall and put the Untangle box in place. It becomes their new firewall. How many businesses have an old unused computer sitting around waiting to be thrown out? Or...your office itself...if it's like mine, I have stacks of old biz grade computers we keep for donations/special purpose/spare parts. Grab an old Pentium D or whatever...with at least 1 gig of RAM, 2x NICs (we have boxes of NICs we can slap in one to add to the built in one)...and a known good HDD..and there ya go, instant Untangle platform!

Now you can sit back and enjoy LESS time spent maintaining this client. Less calls to clean malware. Or if malware slips through and nips a users computer...it's generally easier to clean up if behind an Untangle box cuz Untangle may block the rest of the payload.

End result...this "monthly client" becomes more profitable for you, since you're spending less time supporting them. ;)

Yes I try to sell the full packages to clients. But for some other clients that won't spend...I'll easily invest the time to build/install this little "Lite" Untangle setup and enjoy less time spent cleaning malware.

Compared to Fortinet....(which I have at a few clients)...I find more malware slips through Fortinet (and spam).

Of all the FREE *nix UTM distros out there...(and believe me...I've played with pretty much all of them)...Untangle does the best malware protection when considering the free versions...and pretty much the paid versions too.

Also you can put it in VMWare if you want to cut the cost of hardware.
 
Untangle 10 not up to par.

I just spent the past month fraking around with a Untangle 10.0-10.1 box that would NOT forward PPTP packets to my clients Windows server.

Tried posting on there forums about it. Got told to open a ticket. Opened a ticket and got no response, which isn't a total surprise as it is the FREE version and when I complained about the lack of the response got trolled by other end users for not paying for the product. They may give it out as free software but they don't encourage that atmosphere over there. I only use the free stuff on it and never had a problem till 10.

Anyway long story short. I never got 10 to work right and I rolled it back to 9.4.2. Which allowed my VPN to connect immediately.

Version 10 sucks IMO. There are several posts on the forum that point out that PPTP port forwarding don't work and I've yet to see a solution. Many have it work fine, many don't, and I can't see any reason for either. Needs to go back to beta IMO.
 
We're about 50% complete rolling our existing clients over to V10....the list of new features really is good.

What rules/settings do you have for your PPTP? Mind posting them? I haven't done PPTP hosting behind Untangle since...oh...version 6 maybe..(quite honestly I'd be not wanting to expose that service to the internet from a Windows box..I stopped exposing that service from Windows servers when Server 2K was out, used to do it back in the NT 4 days a lot)..but anyways..what's the rules you have?
 
Last edited:
You should have GRE in the protocol rule forwarding in addition to port 1723 when doing PPTP VPN. Most biz grade routers have a rule for this, it's IP type 47, (not port..just type) but more often just called GRE. Untangle has a rule for this...should do it in addition to TCP 1723.
 
You should have GRE in the protocol rule forwarding in addition to port 1723 when doing PPTP VPN. Most biz grade routers have a rule for this, it's IP type 47, (not port..just type) but more often just called GRE. Untangle has a rule for this...should do it in addition to TCP 1723.

We tried that. Tried adding bypass rules for NAT for both. Nothing worked.
 
Wow I just got an email SIX WEEKS after I opened my support ticket for Untangle 10. Seriously? Yes this is a free version but 6 weeks to respond to a ticket. Doesn't matter as I blew away that crap 10 install and rolled back to a 9.4. Can't say such a response really makes me want to BUY a support package from them.
 
I'll say that their support is good, fast. I've called quite a few times over various clients, usually get a live body right away, they have you open up remote access..they drill in...do their thing, done, fixed.

I haven't tried e-mail support for other "free open source distros"....like pfsense, ipcop, whatever...so I have nothing to compare their e-mail support to when it comes to the free products. But when I e-mail with a licensed paid product...(shown by serial number in subject line)...get a fast response.
 
I'll say that their support is good, fast. I've called quite a few times over various clients, usually get a live body right away, they have you open up remote access..they drill in...do their thing, done, fixed.

I haven't tried e-mail support for other "free open source distros"....like pfsense, ipcop, whatever...so I have nothing to compare their e-mail support to when it comes to the free products. But when I e-mail with a licensed paid product...(shown by serial number in subject line)...get a fast response.

Well that is good to know. But honestly for what I use untangle for the free product has served me well and with this one exception has been plug and play and 100% trouble free.
 
Think of the recurring revenue of yearly subscriptions....start building a list of clients that use the paid/pro versions of the product.
Average price of around 1,000.00 a year.....get about 20-30 clients using it....move up in the reseller ranks and you get 20 or 30% discount...starts adding up as a nice recurring profit come renewal time each year. We have some of our clients on monthly with it..we tack it onto their other monthly MSP services.
 
Back
Top