topic Re: XIQ OnPrem / IQVA New Release in ExtremeCloud IQ

XIQ OnPrem / IQVA New Release

daniel1 — Thu, 01 Sep 2022 11:17:10 GMT

Hi,

can anyone from Extreme tell me, when you plan to release a new feature version of XIQ OnPrem?

This is getting ridiculous, no big feature update for one and half year, we still have to use 21.1.x, so January 2021 version according to your scheme.

Re: XIQ OnPrem / IQVA New Release

juergen_dannewi — Thu, 01 Sep 2022 11:29:59 GMT

Hi Daniel,

we get the information from our support that IQ VA is
End of Sale at 1st Dec 2022,
End of Major Support 1st Dec 2023 and
End of Support 1st Dec 2025.
I personally doesn´t expect any software releases anymore.

We are also using the On-Prem version and are checking our options now.
Upgrade or developer change until 2025.

Re: XIQ OnPrem / IQVA New Release

BillL — Wed, 14 Sep 2022 15:36:33 GMT

While IQVA has been announced EOS, we are planning on a release of IQVA in the Dec/January timeframe. It will feature several bug fixes, updated features, support for DTLS 1.2, and new AP support for the new "-1" SKU's (no bluetooth).

Re: XIQ OnPrem / IQVA New Release

daniel1 — Mon, 12 Sep 2022 13:51:29 GMT

It's unfortunate to hear that Extreme presents their OnPrem customers a "Go to Cloud or die" choice.

Re: XIQ OnPrem / IQVA New Release

daniel1 — Thu, 20 Oct 2022 12:47:59 GMT

Hi @BillL ,
are you guys serious with this? Security Advisory: SA-2022-010 – OpenSSL (CVE-2022-1292) | Extreme Portal (force.com)
"IQVA – Will not be fixed. Please upgrade to XIQ."

I'm guessing that your "Dec/Jan release" was just a joke?

Re: XIQ OnPrem / IQVA New Release

BillL — Fri, 21 Oct 2022 13:13:49 GMT

Hello,

Allow me to simplify. As the bulletin says, "In certain configurations, an attacker could execute arbitrary commands with the privileges of the script." In IQVA, yes, c_rehash is present. However, IQVA does not use it in any process, the configurations required for exploit are non-existent, and access to the OS in any capacity to expose it is not exposed. Several other CVE's are being tackled in the January release, specifically CVE-2021-4034. And no, the January release is not a joke, and is currently tracking as follows:

Dev Start: (after 22r7 in cloud). on or about 11/15
Dev Complete: 12/15 (4w development time)
QA Test: 3w beginning in early January
GA Available: end of January

Re: XIQ OnPrem / IQVA New Release

daniel1 — Mon, 24 Oct 2022 11:58:55 GMT

Well this information would have been great to see in the KB-article and not here, as it creates (at least for me) a lot of confusion, especially in terms of a new IQVA release.
But I don't get why you can't simply patch the OpenSSL version with the new release? As per your support policy the major support for IQVA runs until December 2023.

But thanks for the clarification.

Re: XIQ OnPrem / IQVA New Release

daniel1 — Thu, 23 Feb 2023 13:42:10 GMT

@BillL It's end of February already, do you have an update for the release date?

Re: XIQ OnPrem / IQVA New Release

BillL — Thu, 23 Feb 2023 15:02:32 GMT

@daniel1 I just spoke to the team that's doing it and you should see it in the next week or so. QA testing is complete, the final build approved, and release notes should be finalized today (2/23). Then we just have to work to get it posed.

Re: XIQ OnPrem / IQVA New Release

juergen_dannewi — Mon, 17 Apr 2023 12:18:28 GMT

The update is available now
Download: hivemanager-ng-upgrade-pack-21.1.23.4-IQVA-2023-02-16.tar.signed | Extreme Portal (force.com)

Re: XIQ OnPrem / IQVA New Release

DeVoID — Tue, 18 Apr 2023 17:25:01 GMT

@daniel1 wow am i glad that we went to the cloud right off the bat! looks like a total frigging nightmare... then its going to be End Of life pretty soon.... again so grateful, because we have two ZoneDirectors from Ruckus and i LOVED it.. I didnt have to push configs (that reboot the AP for full config) to AP's one by one to get an ACL to work., i could block MAC's to my hearts content, and block content, and a ton more.. heart breaking to lose it... it was easy and awesome (not like cloud or on-prem of this XIA).. it was great, but it outlived its purpose and we had to go with something newer...i could have gotten screwed if id pushed for an on-prem solution instead of cloud based reading the issues you are having and the total lack of updates and patches. sorry mate. Jason

Re: XIQ OnPrem / IQVA New Release

daniel1 — Wed, 19 Apr 2023 06:08:33 GMT

@DeVoID We didn't know it in the first place, that it's getting a nightmare, because we got fooled by their sales team, promising that OnPrem is "just" half a year behind the cloud version, when it actually became 1.5 to 2 years.

Now we're forced to move to cloud, because Extreme is unable to provide an awesome appliance like VMware does with its vCenter.

But thanks for your words.