Release Notes สำหรับ VPN Plus Server

Important Note

The update will be available for selected regions within the following weeks, although the release time in each region may vary slightly.

Compatibility and Installation

1. Support for Synology SSL VPN Client 1.4.8-0688.

Important Note

The update will be available for selected regions within the following weeks, although the release time in each region may vary slightly.

Compatibility and Installation

1. Support for Synology SSL VPN Client 1.4.7-0687.

Important Note

The update will be available for selected regions within the following weeks, although the release time in each region may vary slightly.

Fixed Issues

1. Fixed a security vulnerability (Synology-SA-23:04).

Compatibility & Installation

1. VPN Plus Server 1.4.5-0684 requires SRM 1.3.1 or above.

What's New

1. Updated to support VLAN-related functions.
2. Added support for DH groups 19/20/21 to Site-to-Site VPN encryption.
3. Supports adjusting the security mode used for Remote Desktop (RDP) connections.
4. Updated WebVPN to support encrypted connections using TLS1.3.
5. Updated SoftEther to version 4.38-9760.
6. Updated OpenVPN to support Authenticate Server CN (common name).

Fixed Issues

1. Fixed an issue where certificate parsing might fail if the root certificate contained special characters.
2. Fixed an issue where users would be unable to connect with OpenVPN if a root certificate was used as an intermediate certificate.
3. Fixed an issue where L2TP/PPTP VPN connection might fail when multiple DHCP servers exist in a local network environment.
4. Fixed an issue where SSL VPN clients using macOS would not use the SRM specified DNS server after connecting to Synology Router.
5. Fixed an issue where a Remote Desktop (RDP) connection with Firefox may result in connection failure.
6. Fixed an issue where an exported OpenVPN configuration file might contain the wrong certificate chain when using Let's Encrypt, preventing the client from connecting to VPN.
7. Fixed an issue where the WebVPN portal could not normally redirect users to the login page after a session expired.
8. Fixed an issue where the session timeout may not be triggered correctly when the VPN Plus portal was launched.
9. Fixed an issue where the status of deactivated domain users was not displayed correctly.
10. Fixed an issue where SSL VPN connections with account names containing diaeresis (e.g., ä, ë, or ï) would not be visible in logs and current connections.
11. Fixed multiple security vulnerabilities (CVE-2021-3711,CVE-2021-3712,CVE-2019-6462,CVE-2020-28194, and CVE-2020-11997, CVE-2022-24704, CVE-2022-24705, CVE-2021-41767, CVE-2021-41160, CVE-2021-41159: FreeRDP).

Fixed Issues

1. Fixed an issue where Remote Desktop (RDP) might malfunction.
2. Fixed a security vulnerability (Synology-SA-22:26).

Fixed Issues

1. Fixed multiple security vulnerabilities regarding OpenSSL (Synology-SA-21:24).

Important Note

1.The current DST Root CA X3 root certificate used by Let's Encrypt will expire at the end of September. To ensure continued connectivity, please update the package and re-export the configuration file to your OpenVPN client as soon as possible.

Fixed Issues

1.Fixed an issue where the exported OpenVPN configuration file might contain the wrong certificate chain when using Let's Encrypt, preventing the client from connecting.

Important Note

1. As of this update, setting up an SSL VPN server no longer requires configuring Security Level and Authentication. The new default option "Auto" will automatically select the best security level based on client connections. There is also an option to allow only TLS 1.3 encrypted connections.

What's New

1. Added TLS 1.3 encryption to SSL VPN to enhance connection security.
2. Added ChaCha20-Poly1305 cipher suites support to SSL VPN for enhanced security.
3. Removed 3DES cipher suites support from L2TP VPN service to ensure connection security.
4. Added a field for modifying the mssfix parameter of OpenVPN.

Fixed Issues

1. Removed TLS 1.0/TLS 1.1 encryption and updated available cipher suites for WebVPN to ensure connection security.
2. Fixed an issue where clients might incorrectly be assigned a gateway IP address when connecting via L2TP VPN, resulting in connection failure.
3. Fixed an issue where local network could not be selected as a local site's private subnet in the Site-to-Site VPN settings when the DHCP server was disabled.
4. Fixed an issue where removing a single user from a block list might result in the removal of other users from the list as well.
5. Fixed an issue where OpenVPN clients might fail to connect to Synology Router's LAN when in Wireless AP (bridge) mode.
6. Fixed an issue where clients' PPTP VPN reconnections might fail after being disconnected from the server-side.
7. Fixed an issue where Jumpcloud LDAP users might not be able to establish connections via some VPN protocols.
8. Fixed an issue where clearing the connection history could result in an error message.
9. Fixed multiple security vulnerabilities (CVE-2018-20023, CVE-2018-20022, CVE-2018-20024, CVE-2019-17185, CVE-2019-13456, CVE-2021-3450, CVE-2021-3449, CVE-2020-15103, CVE-2020-9497, CVE-2020-9498, CVE-2020-11095, CVE-2020-11096, CVE-2020-11097, CVE-2020-11098, CVE-2020-11099, CVE-2020-4030, CVE-2020-4032, CVE-2020-4033, CVE-2019-20788, CVE-2019-20839, CVE-2020-14396, CVE-2020-14398, CVE-2020-14399, CVE-2020-14405, CVE-2018-21247, CVE-2020-11019, CVE-2020-11041, CVE-2020-11040, CVE-2020-11043, CVE-2020-11085, CVE-2020-11086, CVE-2020-11087, CVE-2020-11088, CVE-2020-11089, CVE-2020-13396, CVE-2020-13398, CVE-2020-13397, CVE-2020-11525, CVE-2020-11524, CVE-2020-11523, CVE-2020-11522, CVE-2020-11521, CVE-2020-11048, CVE-2020-11046, CVE-2020-11045, CVE-2019-11868, CVE-2018-20021, CVE-2018-20020, and CVE-2018-20019).
10. Minor bug fixes.

Important Note

1. This is the last version that supports SSL VPN on Ubuntu 14.04.
2. For users of VPN Plus Server 1.3.9, Synology SSL VPN Client 1.3.9 for macOS is only compatible with Big Sur or later. If your operating system is macOS 10.15 or earlier, please use Synology SSL VPN Client 1.3.7.
3. The update will be available for all regions within the following days, while the release time in each region may vary slightly.

What's New

1. Updated SoftEther to version 4.34-9745.

Bug fixed

1. Minor bug fixes.

Important Note

1. The update will be available for all regions within the following days, while the release time in each region may vary slightly.

Fixed Issues

1. Fixed the issue where VPN connections might be interrupted by the traffic control settings configured in Network Center.
2. Fixed the issue where websites with redirection mechanism might not be redirected normally during WebVPN connections.
3. Fixed the issue where the local network on one site during a Site-to-Site VPN connection might not be accessed normally by clients on the other site, as packets could be blocked by the firewall.
4. Fixed the issue where Site-to-Site VPN connections might be interrupted when SRM is accessed via QuickConnect.
5. Updated the built-in OpenSSL of Synology SSL VPN Client for Windows to address the issue of VPN connection failure.
6. Fixed the issue where the VPN Plus web portal could not be signed in using an account with 2-step verification enabled when the verification code starts with 0.
7. Fixed multiple security vulnerabilities regarding VPN Plus Server (CVE-2018-20748 and CVE-2019-15690).
8. Minor bug fixes.

What's New

1. Supports automatic setup of outbound IP addresses for the Site-to-Site VPN to failover/failback between primary and secondary network interfaces.

Fixed Issues

1. Fixed the issue where SSL VPN cannot work properly on macOS 10.15.

2. Fixed the issue where the DNS server settings on macOS will be switched from automatic to manual after the computer is disconnected from an SSL VPN.

3. Fixed the issue where Site-to-Site VPN connection through DDNS might fail after the restart of Synology Router when on the PPPoE mode.

4. Minor bug fixes.

Compatibility & Installation

1. VPN Plus Server 1.3.6-0454 supports SRM 1.2.3 or later.

What's New

1. DDNS supports the use of Let's Encrypt certificate.

Fixed Issues

1. Fixed an issue where WebVPN might not work properly.

2. Fixed an issue regarding memory usage.

3. Fixed an issue where Site-to-Site VPN might not work properly when firewall default settings deny WAN-to-LAN rules.

4. Fixed an issue where Remote Desktop might fail to connect when the username involves the "." character.

5. Fixed an issue where SSL VPN might not work properly if the guaranteed bandwidth of all connected devices and SRM services exceed the ISP limitation.

6. Fixed an issue where the Shift key might not work properly in Remote Desktop.

7. Fixed an issue where the system boot might slow down when packages are activated.

Compatibility & Installation

1. VPN Plus Server 1.3.5-0442 is compatible with SRM 1.2.1 and above.

Fixed Issues

1. Fixed an issue where Site-to-Site VPN connection might not work properly when using the DDNS to resolve a hostname into an IPv6 address.
2. Fixed an issue where permission settings might not be available when connecting the WebVPN portal from a designated site.
3. Fixed an issue where Site-to-Site VPN might not be reconnected after disconnection.
4. Fixed an issue where the WebVPN portal might not be redirected properly after VPN Plus Server was restarted.
5. Fixed an issue where the Site-to-Site VPN page might be disabled when the router was restarted.
6. Fixed an issue where licenses might not be removed after logging out of the Synology account.
7. Fixed an issue where Site-to-Site VPN might not be connected automatically via PPPoE after being rebooted.
8. Fixed an issue where VPN Plus Server might not work properly when the bandwidth setting was low in traffic control.
9. Fixed an issue where the number of automatic blocking might increase when Synology VPN login failed.
10. Fixed an issue where the SRM traffic control might not work properly when the number of connections was huge.
11. Improved the stability of Site-to-Site VPN.
12. Fixed multiple security vulnerabilities regarding VNC (CVE-2018-20019, CVE-2018-20020, CVE-2018-20021).

Fixed Issues

1. Fixed an issue where logging in SSL VPN with IP or domain name without WebVPN prefix might fail when SSL VPN and WebVPN are both enabled.

Fixed Issues

1. Fixed an issue where Report might not work properly after upgrading to 1.3.2.

Fixed Issues

1. Fixed an issue where the VPN speed limit function might not work properly.
2. Fixed an issue where the Standard VPN page might not work properly in an IPv6 environment.

Compatibility & Installation

1. VPN Plus Sever 1.3.1-420 is only compatible with SRM 1.2 and above.

What's New

1. Added support for detailed permission information.
2. Added support for of Local ID and Remote ID in Site-to-Site VPN.
3. Added support for password memory in Remote Desktop connection.
4. Added support for whitelist mechanisms in SSL VPN.
5. WebVPN supports websites that use WebSockets.

Fixed Issues

1. Fixed an issue where VPN and DHCP are able to set overlapping subnets.
2. Adjusted the cipher suite used by SSL VPN.
3. Fixed an issue where Site-to-Site VPN licenses might be deactivated after a system reboot.
4. Fixed an issue where Remote Desktop might automatically disconnect when the audio function is enabled.
5. Fixed an issue where L2TP might not work properly when using 3G LTE.
6. Fixed an issue where Cookie might not be cleared wen the web portal is closed.
7. Fixed an issue where the Site-to-Site VPN license page might not work properly.
8. Fixed an issue where the Remote Desktop and Tight VNC connections might not work properly.
9. Fixed an issue where configurations might not work properly with Chinese names.
10. Fixed an issue where Site-to-Site VPN might not work properly after an IP change.
11. Fixed an issue where the license page might not be updated immediately after a trial or license is purchased.
12. Fixed an issue where multiple VNC connections cannot be established properly.
13. Fixed an issue where OpenVPN configurations might not work properly after being exported.
14. Fixed an issue where OpenVPN might not work properly when disconnected and reconnected frequently during short periods of time.
15. Fixed an issue where special symbols can be filled into the PSK box of L2TP server.
16. Fixed an issue where WebVPN might fail to connect to a default portal after the IP is changed.

Limitation and Known Issues

1. Objects cannot be given names the same as system the default objects.