 Time here for more systems. We're going to talk about untangle 16. They finally added a couple really solid features There's lots of tuning enhancement but the big feature changes are WireGuard has been added for a lot of people asking about WireGuard VPN Especially for a site-to-site solution because it's being very fast and simple that is now integrated into untangle 16 Also, they have TLS 1.3 support for the SSL inspector So if you need to do that full SSL inspection now it will work properly with TLS 1.3. Now before we dive into all these details in a changelog, let's first If you'd like to learn more about me and my company head over to laurancesystem.com If you'd like to hire a short project, there's a hires button right at the top If you'd like to help keep this channel sponsor-free and thank you to everyone who already has There is a join button here for youtube and a patreon page. Your support is greatly appreciated If you're looking for deals or discounts on products and services we offer on this channel Check out the affiliate links down below. They're in the description of all of our videos Including a link to our shirt store. We have a wide variety of shirts that we sell and new designs come out. Well, randomly So check back frequently and finally our forums forums.laurancesystems.com is where you can have a more in-depth discussion about this video and other tech topics You've seen on this channel now back to our content We'll start right here with the untangled dashboard. Good news is Looks the same pretty much the same untangled dashboard So you don't have to learn a new interface. They went from 15 to 16 and we are currently running version 16.01 and I didn't have any trouble. We did the in-place upgrade with this particular system You go to the upgrade and there's no upgrades available. So I'm on the latest one It didn't have any issues. No drama. That's important We've updated a handful of these and so far they've all went really well We had one we had to call on because it seemed to be stuck But after a little while it just went so that's as much as I can complain about the upgrade process Now they have their whole announcement about their VPN alternatives and updates and one thing I want to get out of the way right away This is going to upset some users. Uh, I would disagree with this as well They've decided and on the ng firewall home pro and this is interesting They've decided wire guard vpn Is not going to be part of it. I bring this up because yes untangled is and I'll leave links to my other reviews A licensed product for all the enhanced features And I think the home pro license at $50 a year is a great deal for home users that want a lot of the features The filtering and some of the content control and application control that untangle integrates But they decided that wire guard vpn was only going to be part of their paid version and they're Basically ng firewall complete the commercial solution for businesses I think this is short-sighted. So do many people in the forums. There's probably some reason behind it Maybe they'll answer in a concise way. Maybe they think too many people were Buying the home license and using it for a business when they shouldn't have I'm not sure But I'll at least mention that sorry home pro users as of the recording of this video november 10th 2020 It is not available for you Yeah, someone may get mad and stop right there anyways want to get it out of the way now back to what does it look like in here Yes, adding the wire guard is pretty slick. By the way, I'll note that their wire guard if you Initially tried it in 16.0 the 16.01 Aversion is a minor release that fixed some bugs with wire guard But we're going to talk about the larger change log right here And this is what wire guard actually looks like when you're inside of it. So let's go over here We go to apps and we're going to go over here to wire guard vpn I set up a couple different devices one is a debian system one is a phone my phone specifically And I use the standard wire guard app and the native built in to debian wire guard No problem setting it up. No problem getting traffic across matter of fact, they make things really easy So when I set it up for my phone here, we can go here to remote client click on it And we have a qr code So I just scan the qr code my phone and my phone connected just done really easy Or you can copy and paste the configuration file And this is how I got the debian system setup was I went over here and then we just popped Whoops not that one this one here for remote client click on it Change it to config file and well you can click the copy button Copy the clipboard paste it into the wg1 or wg0.com f however you're configuring your wire guard Run the command line and away you go. It was that easy to set up So I'm impressed with their implementation and of note because this is not how wire guard works No, there's not like a username password You just pop those settings in and it connects which makes it very ideal for setting up very quick in site to site systems They still have all the other integrations to the other vpns open vpn and ipsec are in there So this is in addition to downside is that they say it's paid now on to the ssl inspector And this is where I like the fact that they've upgraded this and we'll go over here Make over your configuration and we have it Set up for tls 1.3 came just turning it on by default has that then you download the certificate and Head over to and they have a couple instructions on how to do this for setting up this certificate How to add it to the root store or deploying it via group policy Whichever methodology works for you depending on how your network is configured and this allows that full ssl inspection Now the only thing Of note and I do like the way they have this by default and look back over here to the ssl inspector And you head over rules And they do have certain ones disabled and when you do these deployments This is something that's really important is you will want to ignore certain certificates and let me show you why This is an example of my windows 10 machine that is sitting behind untangle And of note right here authenticated using tls 1.3. So that part's working But right here it is a public key pinning bypass And this is something that's important that you have to bypass public key pinning on some things because some things require it And what that means is they don't like any man in the middle trying to inspect that ssl This actually goes towards the way some security products work in some devices But they've made it relatively easy by going over to here and creating bypasses certain Microsoft updates citrix dropbox are a couple examples. They come enabled by default But it's easy enough to add a rule that bypasses based on conditions You meet or maybe a certain machine that you need to bypass this So I thought that was pretty slick back over here going over some of the other orata now that we got the big things out of the way They did fix this right here, which is kind of an annoyance If you and it's not often I have to do this But when you're re-engineering a network and you have to start changing internal lan ip addresses Those interfaces have to be pushed across the open vpn or wire guard You have to set what networks you're going to push Well, it did not previously if you change the ip address for lantern face This change will now propagate to wire guard open vpn nip sick tunnels. That's pretty cool. They added a Threat prevention lookup now shows the results from client and server Reputation values priors release lookup only returns server reputation. So this is kind of nice A custom block actions you can now redirect to an external block page If you choose to block a connection without redirecting and then there's a bunch of other minor stuff that's in here Admin UI now operates on applicable interfaces and numerous performance improvements have been made for reporting to ht Processing traffic now. I actually made a bunch of noise just so I could get some reports in there I feel as though it looks a little faster. It pulls up the reports faster actually web filtering web usage summary It seems a little snappier I don't know. I don't know that I felt though it was slow, but i'm generally running this on pretty fast system So it wasn't too big of a deal now a few other things on here Some other minor things such as enforcement of strong cryptography to a sha 512 for credentials Now overall, I like this version of untangle. It's auto upgrades like I had mentioned before So if you're just have automatic updates turn on turns on my only problem Really is going to be for the home pro users, which I know will have their keyboards fingers mashing Complaining complaining forums, maybe they'll listen to us and say hey, you should do it Maybe they'll listen to some guy on youtube, but I really doubt it They have their reasons for doing it But maybe there could be a change and maybe we'll see that integrated either way It's still welcome to see where guard is as it adopts more widespread usage It's going to be you know more inspected more vetted and hopefully becoming more popular solution for doing things like, you know high speed vpn The other features though so far. I haven't had any problems using it and things like that I just wanted to mention that those are available because in other videos where I have and I'll leave links to when I've reviewed Untangle I'd probably mentioned some of those things not being there. So these are welcome additions So I'll probably have to do an updated video to cover all of them and for those wondering and those been asking Yes, I'm working on some updated wire guard videos. All right I'll leave a link to the changelog and my other untangle videos that I've done and thanks And thank you for making it to the end of the video If you like this video, please give it a thumbs up If you'd like to see more content from the channel hit the subscribe button and hit the bell icon If you like youtube to notify you when new videos come out If you'd like to hire us head over to laurancesystems.com fill out our contact page And let us know what we can help you with and what projects you'd like us to work together on If you want to carry on the discussion head over to forums.laurancesystems.com Where we can carry on the discussion about this video other videos or other tech topics in general Even suggestions for new videos. They're accepted right there on our forums, which are free Also, if you'd like to help the channel in other ways head over to our affiliate page We have a lot of great tech offers for you and once again Thanks for watching and see you next time