McAfee Data Loss Prevention 9.3.3

Transcription

1 Release Notes Revision A McAfee Data Loss Prevention Contents About this release Enhancements Resolved issues Installation instructions Known issues Find product documentation About this release Thank you for choosing McAfee Data Loss Prevention (McAfee DLP). This document contains important information about the current release. We strongly recommend that you read the entire document. McAfee DLP version introduces feature enhancements and resolves issues present in the previous release. You must have version or later installed on your target system before installing version Version does not support coexistence with previous versions; therefore, in a managed environment, all appliances must be upgraded to version at the same time. For virtual appliance installation instructions, see the McAfee Data Loss Prevention Virtual Appliance Installation Guide. Supported McAfee DLP products This release supports these McAfee DLP product versions: McAfee DLP Manager McAfee DLP Monitor McAfee DLP Discover

2 McAfee DLP Prevent McAfee DLP Endpoint Agent These host extensions are supported: For use with a unified McAfee DLP policy For use only with incident management in McAfee epolicy Orchestrator Supported systems The following platform versions and operating systems are supported: McAfee DLP 4400/5500 appliances McAfee Linux Operating System (McafeeNDLPmlos x86_64.rpm) McAfee DLP 1650/3650 appliances Fedora-3 Linux Operating System Virtual appliances VMware vsphere ESX 4.x, ESXi 5.x Compatible McAfee products The following McAfee product versions were tested for compatibility with McAfee DLP software: epolicy Orchestrator 4.6, 5.0, 5.1.0, McAfee Web Gateway 6.x, 7.x McAfee Gateway 7.x McAfee Logon Collector 2.0, 2.1, 2.2 Supported repositories McAfee DLP Discover supports the following. Database repositories DB2 5x iseries, 6.1 iseries, 7.x 9.x Microsoft SQL Server 2000, 2005, 2008, 7.0, MSDE 2000, 2012 MySQL (Enterprise) 5.0.x, 5.1 Oracle 8i, 9i, 10g, 11g File systems and servers EMC Celerra 5.6 EMC Documentum 5.3, 6.0, 6.5 Microsoft SharePoint 2007, 2010, 2013 FTP HTTP/HTTPS NFS (Network File System) CIFS (Common Internet File System) Microsoft Windows Server 2003, 2008, 2008 R2 cluster Microsoft Windows XP Professional SP3 or later (32-bit) Microsoft Windows Vista SP1 or later Enterprise and Business editions (32-bit) Microsoft Windows 7 SP1 or later (32- and 64-bit) NetApp 7.2, 7.3 Supported browsers McAfee DLP supports the following third-party browsers. These versions were tested for compatibility with the software: 2

3 Microsoft Internet Explorer 7, 8, 9, 10 Mozilla Firefox 17, 33 Supported languages In scanned content, McAfee DLP supports the following languages: English Italian Chinese (Traditional) Japanese Chinese (Simplified) Korean Hebrew Russian Arabic Dutch French Greek German Hungarian Spanish Czech Portuguese Turkish Enhancements This release includes these enhancements. Concepts Updates these concepts: CREDIT-CARD-NUMBER CREDIT-CARD-NUMBER-GENERAL CREDIT-CARD-NUMBER-THRESHOLD Content types Adds content type MSOfficeEncryptedDoc for Microsoft Office 2007 encrypted documents Resolved issues These issues are resolved in this release of the product. For a list of issues fixed in earlier releases, see the release notes for the specific release. Backup and restore Resolves an issue where a backup could not be configured if the selected share contained an accent mark in the folder name, such as "é" (965736) Resolves an issue where a scan task timeout error resulted in a failed backup (977682) 3

4 Concepts Resolves an issue where an algorithm in a custom concept might not function correctly if any concept was deleted and re-added (961985) Resolves an issue where validating a test string containing a space would result in no match, even if the string matched the concept (972158) Resolves an issue where concepts using hexadecimal strings did not correctly match scanned content after upgrading to version ( ) Incidents and cases Adds a Publish Configuration link to the device System Utilities page to resolve an issue where incident attachments could not be opened due to an "unknown task" error (938146) Resolves an issue where filtering incidents using "UserID = domain\username" did not display the correct results (962362) Resolves an issue where Korean characters in a file name were not correctly displayed in the incident (966184) Resolves an issue where McAfee DLP reported the wrong sender address when SMTP traffic contained an anti-spam X-Header (984653) Resolves an issue where selecting filters on multiple rules did not display any Data in Use incidents ( ) McAfee DLP Discover Resolves a memory leak when scanning a CIFS share of 1 terabyte or larger (953870) Resolves an issue where a scheduled scan ran several hours beyond the scheduled end time (955410) Resolves an issue where scanning an Oracle Database with Oracle Advanced Security enabled would fail (963020) Scanned content Resolves an issue where encrypted Microsoft Word and Excel files were incorrectly classified as PowerPoint files (956585) Resolves a system process failure when scanning corrupt XLSX files (958264, , ) Searches Resolves an issue where a search limited to specified devices displayed results from all managed devices (984036, ) Resolves an issue where search results were not processed when selecting all appliance types ( ) 4

5 Vulnerabilities Common Vulnerabilities and Exposures (CVE) Addresses these OpenSSH vunerabilities (961926): Resolves an issue with forwarded X connections (CVE ) Resolves an issue with using a block cipher algorithm in Cipher Block Chaining mode (CVE ) Removes the fixed time limit between establishing a TCP connection and completing a logon (CVE ) Resolves an issue where sendmail did not correctly handle a '\0' character in the Common Name field of an X.509 certificate (963587, CVE ) Resolves an issue where OpenSSL did not properly restrict ChangeCipherSpec message processing (976967, CVE ) Addresses the Shellshock vulnerability ( , CVE , CVE , CVE , CVE ) Addresses the POODLE vulnerability ( , CVE ) Other Resolves a system process failure due to a memory leak, causing the appliance to core dump (940644, ) Resolves an issue where setting the syslog server entry to localhost by removing the existing entry would fail (982324) Resolves a sendmail TLS issue after installing hotfix _47171 ( ) Installation instructions For installation and upgrade instructions, see the McAfee Data Loss Prevention Product Guide, version The installation procedure for version is the same as version If your product is at version or later, you can upgrade directly to Known issues For known issues in this product release, refer to KnowledgeBase article KB

6 Find product documentation After a product is released, information about the product is entered into the McAfee online Knowledge Center. Task 1 Go to the Knowledge Center tab of the McAfee ServicePortal at 2 In the Knowledge Base pane, click a content source: Product Documentation to find user documentation Technical Articles to find KnowledgeBase articles 3 Select Do not clear my filters. 4 Enter a product, select a version, then click Search to display a list of documents. Copyright 2015 McAfee, Inc. Intel and the Intel logo are trademarks/registered trademarks of Intel Corporation. McAfee and the McAfee logo are trademarks/ registered trademarks of McAfee, Inc. Other names and brands may be claimed as the property of others. A00