March 24, 2021

To:         Symantec Secure Web Gateway Customers

From:     SGOS and Advanced Secure Gateway Product Teams

Subject:     General Availability Announcement for SGOS and Advanced Secure Gateway 6.7.5.10

On behalf of Broadcom, we appreciate your business and the opportunity to provide you with high-quality, innovative software and services.  As part of our ongoing commitment to customer success, we regularly release updated versions of our products. Today, we are pleased to announce that SGOS and Advanced Secure Gateway version 6.7.5.10 are now available, including a number of fixes and the following changes: 

Updated ABRCA Root CA Certificate (Advanced Secure Gateway only)

Advanced Secure Gateway 6.7.5.10 includes an updated Appliance Birth Registration Certificate Authority (ABRCA) root CA certificate.

The ABRCA root CA certificate is the ultimate root of trust for all appliance certificates that Symantec products use. The ABRCA certificates installed on Advanced Secure Gateway appliances running releases prior to 6.7.5.10 will expire in November, 2021. If you are running a 6.7.x release, you must upgrade to version 6.7.5.10 as soon as possible to ensure the
uninterrupted operation of your appliances.

The new certificate has an expiration date of December 31, 2037. Upgrading to version 6.7.5.10 installs the new certificate. See KB 207153 for additional information.

Integrated Secure Gateway Enterprise Secure Web Gateway Virtual Appliance (SGOS only)

A new Integrated Secure Gateway (ISG) Enterprise Secure Web Gateway Virtual Appliance (SWG VA) license is supported
for ProxySG VAs running on VMware’s vSphere Hypervisor. The ISG Enterprise SWG VA facilitates server consolidation by
co-existing with other virtual machines on a single hardware platform, including Symantec Content Analysis. With the ISG
SWG VA providing security, the other virtual machines can provide branch office services (such as Domain Controller, print,
DNS, and DHCP), as well as any VMware-certified software applications.

For more information, refer to the Integrated Secure Gateway Enterprise Secure Web Gateway Virtual Appliance Deployment Guide.

Heartbeat Reports Enhancement (SGOS only)

Heartbeat reports sent to Support now include environment information for physical and virtual appliances. In addition, the heartbeats for applications running on Integrated Secure Gateway report the serial number.

New HTTP Dwell Time Statistics 

The following counters have been added for dwell time statistics: 

• Transactions performing static and dynamic categorization 
• Transactions performing authentication and authorization, and server authentication 
• Transactions performing various upstream, downstream, and reverse proxy handshakes 
• Transactions determining object disposition 
• Transactions performing DNS lookup for clients and servers 

User Agent Match VPM Object

A new User Agent Match object has been added for the existing request.header.User-Agent= CPL condition. Use the object to test the User-Agent request header: select a browser from a list and optionally specify a regular expression for the type and version. 

To download this release and review Release Notes, visit the Symantec Enterprise Security portal at https://support.broadcom.com/security. A MyBroadcom login is required. See https://knowledge.broadcom.com/external/article/151364/download-the-latest-version-of-symantec.html for details.

If you have any questions or require assistance, please contact Broadcom Customer Care online at https://www.broadcom.com/support/software/contact where you can submit an online request using the Customer Care web form: https://ca-broadcom.wolkenservicedesk.com/web-form?_ga=2.205828371.1432263889.1590607313-713014253.1588711301 .  You can also call Broadcom Customer Care at +1-800-225-5224 in North America or see https://www.broadcom.com/support/software/contact for the local number in your country. 

Should you need any assistance, our Broadcom Services experts can help.  For more information on Broadcom Services and how you can leverage our experience, please visit https://www.broadcom.com/support/ca/services-support/ca-services.

Your success is very important to us, and we look forward to continuing our successful partnership with you.

To review Broadcom Support lifecycle policies, please review the Broadcom Support Policy and Terms located at: https://support.broadcom.com/.  

Thank you again for your business.