McAfee Network DLP 8.5 Release Notes. July 22, 2009

Size: px

Start display at page:

Download "McAfee Network DLP 8.5 Release Notes. July 22, 2009"

August McDowell
5 years ago
Views:

1 McAfee Network DLP 8.5 Release Notes July 22, 2009

2 NEW FEATURES The table below provides information about new features added into this release of McAfee Network DLP 8.5 software since the previous release of Reconnex software. Feature Description and Benefit Integration with McAfee epolicy Orchestrator Integration with McAfee Network Data Loss Prevention Discover Remediation Rule Throttling LDAP over SSL Encryption Internationalization framework Improved Incident Wiping The Network DLP Extension reports McAfee Network DLP incidents to the epo dashboard. The Host DLP Extension reports epo desktop incidents to the McAfee DLP dashboard. Incidents found by Discover can now be deleted, encrypted, copied or moved automatically. Users can now control the number of incidents reported. This release enables security for Lightweight Directory Access Protocol (LDAP) using Secure Sockets Layer (SSL) encryption. The user interface has been reconfigured to support multiple languages. After the limit of 150,000 incidents is reached, 30,000 of the oldest incidents are wiped. Page 2 of 5 McAfee Network DLP 8.5 Release Notes

3 KNOWN NEW PROBLEMS The list below contains new issues found in the 8.5 release of McAfee Network DLP software. Manager/Monitor Although more than one LDAP server can be added from the user interface, multiple LDAP servers are not supported Systems with search results incidents in the millions may take two hours or more to complete an upgrade Encrypted chat sessions (e.g., AIM 6 (AOL Instant Messenger 6)) are not captured When notification is set up using dynamic variables, some values may not be reported when notification is received Hyphenated host names are not supported If multiple documents are registered with multiple rules, the match string is not displayed for all of the rules After upgrade from to 8.5, the local user password resets to mcafee. Discover The File Owner parameter is not recognized when used in a scan operation If a system component goes down while a Discover scan task is being saved and rules have not yet been updated, the configuration does not get activated and must be republished If you want to get complete scan results instead of incremental changes after modifying the filters of an active task, rescan to re-fetch all original files plus those resulting from the filter modification When a large crawl is run, Internet Explorer may launch an empty Statistics page Because of the time it takes to decouple polices and rules from deleted scans, a new Discover task can appear to be stuck in a NOT_ACTIVE state if the system is processing many files and tasks at once. Workaround: Wait for 30 minutes. If the task does not reactivate, select it and Activate from the Actions menu. If these measures fail, clone the task and save as a new one, then delete the old task PowerPoint 2003 documents are not indexed by the classification engine, so they cannot be extracted during an ad hoc search or a Discover scan If Discover reboots or Stingray restarts while a task is being saved, it cannot be activated. McAfee Network DLP 8.5 Release Notes Page 3 of 5

4 KNOWN PROBLEMS FROM The list below contains existing issues reported in that are still in the 8.5 release of McAfee Network DLP software. Prevent Files over 50 MB will not be blocked by Prevent Duplicate incidents are displayed on the dashboard when MS Outlook HTML messages are processed by Prevent The userid and date/time attributes of a rule may not update as expected when using Prevent because the Blue Coat device serves cached copies By design, ICAP Prevent does not index the file names from GET requests, so file names are not included in search results. Manager/Monitor Use of init 0 is not supported on the 3650 platform Exported CSV files cannot be opened in Excel 2003 if there are over 65,536 rows. To view large CSV files, use Excel If the Incidents tab is not visible, check to see that the View Dashboards permission is enabled. Execute permission is also required to process incidents When using the 50,000 or All Results options in the Basic Search window, the search term is not highlighted in search results A keyword search targeting Microsoft Office 2007 files embedded in Office 2003 files will not produce any hits AOL Oscar IM protocol cannot be captured on TCP port Scheduled PDF reports occasionally format data in MatchString columns incorrectly USB devices, including flash drives and keyboards, are not supported on NDLP systems A login error may result if the time is incorrect on the system When a concept is created using the Upload Expressions function, only text files are supported By design, only one value is supported n some Filter by fields (e.g., SourceLocation, DestinationLocation, UserManager and UserGroups). Discover Workaround: Use the like condition and type in a portion of the filter value to retrieve related results Discover cannot crawl an NFS share that has a space as the last character By design, document registration results display match strings only if the MatchString column is added to the dashboard configuration After a standalone Discover is registered to a McAfee DLP Manager, the number of incidents displayed on the dashboard and Statistics page will differ, because the latter includes both standalone and managed incidents If root (/) is more than 80% full on Discover, tasks will fail to run. Page 4 of 5 McAfee Network DLP 8.5 Release Notes

5 HARDWARE AND SOFTWARE REQUIREMENTS The McAfee Network DLP 8.5 software is supported on all current, 64-bit DLP appliances, including the 1650, 2600, 3600, and The appliance must be utilizing a 64-bit architecture for the software to function. For current customers with 32-bit systems, these systems must first be upgraded or replaced as per your maintenance and support contract with Reconnex prior to being able to upgrade to and utilize McAfee Network DLP 8.5. UPGRADING TO THIS VERSION Software upgrades from are supported from the user interface. Please consult the documentation, or work with your account team and McAfee Professional Services to upgrade your existing environment. DOCUMENTATION NOTES The User Guide that accompanies this version of the product is identical to the online help accessible throughout the application. SUPPORT The McAfee Network DLP support portal is available at mysupport.mcafee.com. It requires a login, password, and grant number. Contact McAfee Customer Service at if you need help accessing the portal. McAfee support can be contacted directly by telephone or . (800) or (408) McAfee Network DLP 8.5 Release Notes Page 5 of 5

McAfee Network Data Loss Prevention Administration

McAfee Network Data Loss Prevention Administration Education Services administration course The McAfee Data Loss Prevention Administration course enables attendees to receive in-depth training on the benefits