Workshare Protect 7.0 FP1

Transcription

1 GUIDE Workshare Protect 7.0 FP1 Release Notes

2 Table of Contents Introduction...3 What s New in Workshare Protect 7 FP1...4 System Requirements...4 Important Information...5 Important Installation Information...6 Known Issues...6 Change Requests Addressed...12 Contact Info

3 Introduction Workshare Protect is seamlessly integrated with Microsoft Office and automatically enforces company security policy at end-user workstations. Rather than simply block information flow, Workshare Protect warns and educates users in real-time about sensitive information and, if authorized, lets users decide how to treat the content. Workshare Protect provides: Hidden Data/Metadata Removal Policy driven content risk management Discovery and removal of hidden data and visible content leaks Complete metadata protection for Microsoft Office and PDF documents Tamper-Proof PDF Creation Converting any document to Workshare s secure PDF from any application Ensuring flexible publishing and complete PDF security options Enforcing automatic conversion of documents to secure PDF before they can be ed Stopping of Violations in Real Time Enabling users to fix potential problems with manual redaction options Password-protecting documents or restricting them from being sent externally, or at all. Content Protection and Control Content analysis and data leak prevention Automatically stopping leaks of intellectual property at their origin Keeping data safe and secure from embarrassing public disclosures Monitoring all communications at the client level Providing alerts for data in use, at rest, and in motion even when disconnected from the network Note: Workshare Protect can be installed without Microsoft Office integration. In this case, the metadata removal functionality is only available when sending s and PDF creation is available through the right-click menu. For users who have Workshare Device Protector (powered by Safend) or Safend Encryptor installed, Workshare Protect provides the following: Monitoring and blocking content on USB and other removable media Safend policies define which files downloaded to external storage devices should be inspected and these files are then sent to the Workshare Protect client for inspection, where Workshare policy determines whether the files are blocked or the user alerted to sensitive information. Refer to Safend Protector documentation for further details. Full disk encryption Safend Encryptor provides a hard disk encryption solution that leverages the security of full-disk encryption and the flexibility of file-based encryption to protect sensitive data residing on desktops and laptops. Refer to Safend Encryptor documentation for further details. 3

4 What s New in Workshare Protect 7 FP1 Workshare Protect 7 FP1 is a product quality release with improvements as well as the following new feature: Workshare Configuration Manager Administrator user can hide locked parameters so that users cannot see them in User Mode. System Requirements The certified environments for Workshare Protect are as follows: Minimum System Requirements Intel Pentium 4 2.8GHz processor (XP) or Intel Pentium 4 3.2GHz processor (Vista/7) 1GB RAM (XP) or 1.5GB RAM (Vista/7) 1GB free disk space Recommended System Requirements Intel Core 2 2.2GHz AMD Athlon 64 X GB RAM 2GB free disk space Operating System: Microsoft Windows XP SP3 Microsoft Windows Vista SP2 (32 bit and 64 bit) - UAC disabled Microsoft Windows 7 (32 bit and 64 bit) default UAC Microsoft Windows 7 SP1 (32 bit and 64 bit) default UAC Citrix: The following Citrix environments are supported: Citrix Presentation Server 4.5 Citrix XenDesktop 5 Citrix XenDesktop 5.5 Citrix XenApp 5 Citrix XenApp 6 Citrix XenApp 6.5 They are supported when running on the following: Microsoft Windows 2003 Server (32 and 64 bit) Microsoft Windows 2003 R2 Server (32 and 64 bit) Microsoft Windows 2008 Server (64 bit) Microsoft Windows 2008 R2 Server (64 bit) 4

5 Note: Check with your Citrix vendor about which Windows operating system supports your version of Citrix. Microsoft Office System: Microsoft Office 2010 (32-bit) Microsoft Office 2010 SP1 (32-bit) Microsoft Office 2007 SP2 Microsoft Office 2003 SP3 System: Microsoft Outlook 2010 (32-bit) Microsoft Outlook 2010 SP1 (32-bit) Microsoft Outlook 2007 SP2 Microsoft Outlook 2003 SP3 IBM Lotus Notes 8.x Other: Microsoft.NET Framework 4.0 Windows Installer (x86), version SharePoint: Microsoft Office SharePoint 2010 Microsoft Office SharePoint Server 2007 Workshare will endeavor to support future service packs of certified environments. Important Information Secure PDFs Workshare Protect is unable to convert secure PDFs to DOC format. Secure PDFs are PDF files with security settings configured. Licensing If the product is licensed on subscription basis, one month before your subscription license expires, you can choose to receive a popup Expiry Notice on a daily basis. You can configure Workshare Protect so that the Expiry Notice is displayed/not displayed as required. For further information, refer to the Licensing Workshare section in the Workshare Installation Guide. Policies Not Triggered When ing password-protected.docx documents, default policies are not being triggered. This is due to the Microsoft Word Security Update KB

6 Important Installation Information Workshare Protect installs program files to a sub-folder within the Workshare folder named Modules. Install: A user is unable to install Workshare Protect if Microsoft Windows Installer 3.1 is not installed. This can be downloaded from the following location downloads/details.aspx?familyid=889482fc-5f56-4a38-b838-de776fd4138c&displaylang=en. Windows Vista: For MSI installs the user must have administrative privileges for the Default Mail Client. Internet Explorer: You must ensure that your application is set as the default mail program in Internet Explorer. In Internet Explorer, select Internet Options from the Tools menu. In the Programs tab, select your program (Microsoft Outlook) from the dropdown list. If this is not done, you will not be able to send a document for review. Windows 7: When UAC is set to Default, running the Workshare Protect install displays the UAC prompt. You must approve the prompt and Workshare Protect will be installed. Running the Workshare Protect MSI silently will fail when UAC is set to Default because the user is not given the opportunity to approve the UAC prompt. Therefore for silent installs, disable UAC. If you have installed any Alpha or Beta builds of Workshare Protect, we strongly recommend that you first uninstall them before installing Workshare Protect 7. Known Issues The following are known issues in the Workshare Protect 7 FP1 release - for more information, please contact Customer Support. TFS ID Details 2016 Ink Annotations Windows XP SP3/Office 2003 SP3 and 2007 SP2 When discovering content risk and cleaning open documents, ink annotations are being cleaned, when selecting to clean comments Digital Signatures Office 2007 An error message is displayed when sending digitally signed Word documents externally Converting to PDF - DeskSite 8.0 An error message is displayed when converting a server document to PDF and selecting to save as a related document ing Templates Office 2007/2010 When the Display Send with Protect button configuration parameter is selected (Protection>Administration), the Security dialog is not displayed when sending Office 2007/2010 templates (dotx/potx/xltx) internally or externally Password Protected Excel File When clicking Content Risk in a password-protected Excel file, the Document Risk report fails to generate. 6

7 TFS ID Details 3418 Zip Action When a zip action is triggered, the attachments to an are zipped individually instead of being zipped into a single zip file Licensing with Proxy Server It is not possible to license Workshare Professional using proxy server settings Text With Same Color in Risk Report There are issues in the Risk report where text is the same colour as the background Confidential Classification An Alert action is not triggered when sending a document classified as Confidential using the Default Profile EML Attachments The Workshare Protect Profile dialog or Security dialog is not displayed while sending EML attachments Converting Large PDF Documents to PDF It may take Workshare a long time to convert very large PPT and PPTX files Discovering Content Risk in XML Files When discovering content risk in an open XML document, the Content Risk page of the Workshare Panel is displayed blank SharePoint and the Workshare Configuration Assistant When SharePoint is set as the default document provider, a Workshare dialog asking for the paths to SharePoint sites is displayed while running the Workshare Configuration Assistant in Normal user Zipping Attachments When Workshare Protect is configured to zip files that are over a file size limit, sending multiple files of over and below the limit set will result in Workshare Protect not zipping any of the attachments Workshare Protect When Workshare Protect is installed (without Professional or Compare) a few configuration options which are related to Compare and Professional are displayed in User Mode of the Workshare Configuration Manager Alert and Compare 'Unknown' action is displayed for Alert & Compare in the Security dialog Locking Configuration Options When locking configuration options and applying to the current user, the configuration options are still locked for other users of the machine Alert and Compare The Ready Redline policy should not be triggered if 'Alert and Compare' is disabled. 7

8 TFS ID Details 4356 User Override Deselecting the Allow users to override option values parameter in Administrator Mode is not correctly disabling user abilities to modify parameters in User Mode Ink Annotations PPTX An error is displayed when sending PPTX files with ink annotations to external users Zipping Attachments - Lotus Notes The zip action is not working for more than one document when sending using Lotus Notes Apply Password to Zip An error message is displayed when sending s externally when the Apply password when creating zip files parameter is selected in the Workshare Configuration Manager (Protection > Compress as Zip category) Security Dialog When a user manually selects a file in the Security dialog and then selects an action, such as Convert to PDF, the action is not shown in the Select File list and it may not be applied to the selected file PDF Security Settings PDF security settings are lost after sending the document to external users Alert and Compare The Alert and Compare runtime policy is being installed during installation even though the 'Alert & Compare' option is disabled by default Dynamic Discovery An error is displayed when the Security dialog while discovering risk parameter is selected and Cancel is clicked during Dynamic Discovery Outlook Closed The Outlook process stays in the Task Manager and the appears to hang while sending an with Outlook closed Alert and Compare 'Ready Redline Document Tracking' is being displayed instead of 'Attachment(s) Alert & Compare' on the progress bar of the 'Default' profile while sending to an external recipient Dynamic Discovery When the Security dialog while discovering risk parameter is selected and Cancel is clicked during Dynamic Discovery, PDF attachments are not cleaned Workshare PDF Publisher When printing a PowerPoint file to Workshare PDF Publisher, the text - Microsoft PowerPoint - is added to filename Clean Before PDF When converting to PDF, the metadata elements under Advanced Options are unchecked by default even though the Clean before PDF parameter is selected in the Workshare Configuration Manager (Protection > Convert to PDF category). 8

9 TFS ID Details 4698 Installation The Workshare installation does not resume after rebooting during the install process when necessary Lightspeed Clean PPT Files If Workshare first performs a Lightspeed clean on a PPT attachment, a subsequent convert to PDF will fail Password-Protected Zip File When sending a password-protected zip file containing a Word or PDF file, the password is lost (not requested) at the recipient side Workshare Configuration Manager - Deployment Icon In Administrator Mode, when clicking the padlock icon to unlock/lock a parameter the green arrow deployment icon is not being created Headers/Footers Excel When cleaning headers and footers from an Excel file, the first page headers/footers and even page headers/footers are not cleaned Built-in Properties PowerPoint When cleaning built-in properties from a PowerPoint file, the Title property is set to the title of the first slide Hyperlinks in Endnotes/Footnotes Hyperlinks present in Endnotes and Footnotes are not detected in DOC and RTF files Links - Windows 7 SP1/Office 2010 SP1 OLE Links in XLSX files are discovered twice in the Content Risk report Smart Tags - Windows 7 SP1/Office 2010 SP1 Smart tags not cleaned from documents Viewing PDF after Conversion After converting a file to PDF and selecting to view the newly created PDF, if you don t have Adobe Reader installed, an error message is displayed. The error message is poorly worded - "Workshare Error HRESULT E_FAIL has been returned from a call to a COM component." On clicking OK, the process (Word/Excel/PowerPoint) remains running in the background Send Without Processing Clicking on the blank edges of the Send without processing button in the Protect Profile dialog has no effect. The user must click on the text within the button Lotus Notes -Island Mode A Lotus Notes error 'invalid recipient detected' is displayed when sending an to any contact present in the Local address book (or Personal address book) in Island mode Redemption DLL Installing Workshare Professional 7 over Workshare Professional 5.2 SR3 FP3 removes the Registry keys pointing to Redemption.dll (version 4.8). 9

10 TFS ID Details 5060 Delete White Text The Delete text with same color as background parameter in the Workshare Configuration Manager (Protection>Remove Metadata) is incorrectly named as Workshare actually will delete all white text (on white background) when this parameter is selected Upgrade - Workshare Protect After upgrading from previous versions of Workshare Protect to the latest Workshare Protect, configuration options are not retained Delete White Text An Error in Action error message is displayed when sending a DOC file with a colored background and a Table of Contents with white text (when the Delete text with same color as background parameter is selected in the Workshare Configuration Manager (Protection>Remove Metadata) Converting to PDF After saving a document to imanage with the Shared as property specified, if the document is then converted to PDF and saved as a related document, the resulting PDF does not keep the specified Shared as property Aflijnen Word Add-in The Aflijnen Word Add-in may slow down when Workshare is installed Lotus Notes Policy Settings Policy settings deployed via the Registry are not applied even after re-launching Lotus Notes multiple times Hyperlinks Hyperlinks are cleaned while performing PDF Combine or batch clean even though the Exclude field codes with hyperlinks parameter is selected in the Workshare Configuration Manager Classify SharePoint A Manage changes functionality is not supported for this document management system error is displayed when clicking Classify for SharePoint server documents Content Risk - Password-Protected PowerPoint Files Workshare cannot discover content risk in a password-protected PowerPoint presentation Skip Cleaning Excel An 'Error in Action' error is displayed when 'Skip' is selected when sending a password-protected XLS document to external recipients Office 2003 Environment with 2007 Compatibility Pack When ing an encrypted zipped password-protected XLSX file to an external user, a user is correctly prompted for the password to the zip and also to the XLSX file but is then additionally incorrectly prompted for a 3 rd password Citrix Professional Enable User Workshare functionality is NOT restored in Excel documents after running the "CitrixProfessionalEnableUser" Registry key. Workshare functionality is restored in Word and PowerPoint documents. 10

11 TFS ID Details 5494 Convert to PDF Create and View The Create and View button is always enabled even when no radio button is selected Workshare Configuration Manager - WSO File The When sending an with attachments show parameter setting does not get saved when saving the configuration as a WSO (Workshare Options) file and reloading into the Workshare Configuration Manager Content Risk - Encrypted Excel Files In Office 2003 environments (with 2007 Compatibility Pack), an error is displayed when selecting Content Risk for an encrypted XLSX file Convert to PDF SharePoint The file name is not populated by default when converting server documents to PDF SharePoint Unicode Documents When comparing server documents, the name of Unicode documents is not shown correctly in the title of the Compare window Cleaning Password-Protected Documents - Outlook 2010 When is created using either File > Save & Send > Send as Attachment or right-click > Send To > Mail Recipient and attachments include Office 2007 document + Office 2003 document + password-protected document (in that order), when the is sent to external recipients, the password-protected document is not cleaned Default Password to Apply PDF Security Parameter The Default password to apply PDF security parameter in the Workshare Configuration Manager (Protection > Convert to PDF category) is being written to HKEY_CURRENT_USER in error Save After Clean A user is not prompted to save an XLS/XLSX file when closing after cleaning content risk unless headers/footers were selected and cleaned PDF Anywhere When printing to the Workshare PDF Publisher and selecting Concatenate on a document with markups, Word becomes unresponsive Amyuni 450 Update The contents of the original PDF are not concatenated accurately after updating Amyuni Driver Use Custom Properties to Tag Messages Parameter The Use custom properties to tag messages parameter in the Workshare Configuration Manager (Review > Administration category) is not working as expected Security When the When sending an with attachments show parameter in the Workshare Configuration Manager (Protection > Administration category) is set to display the Security dialog, Outlook may crash when a user tries to close an message while the Workshare Protect Progress bar is in progress. 11

12 Change Requests Addressed The following Change Requests have been addressed in Workshare Protect 7 FP1 (Build ). Please note that some of these issues were specific to customer environments. For more information, please contact Customer Support. TFS ID CR Number Description Random loss of attachments when sending s Uitlijn Word add-in slows down with Workshare LightSpeed clean policy doesn't trigger for s sent to internal users X header is incorrectly added to an when selecting Yes on Error processing dialog Workshare Configuration Manager (WCM) will not open successfully Ability to rename or remove the default Protect policy profile Cleaning document of reviewers enables Word "Remove personal information from file properties on save" option Outlook crashes when processing certain PDFs with Protect After deploying policy settings via the Registry, Outlook must be restarted Unable to perform request: Unexpected exception using the Workshare Ribbon Workshare Outlook add-in is preventing Quest Archive Manager from archiving s Lotus Notes s processed by Protect unreadable on clients Ability to warn users when there is a discrepancy between the MAPI & DOM attachment tables SEMA file is not attached to sent and cleaned with Cryptzone Running the Workshare Configuration Assistant disables Outlook integration Clean before PDF option not functioning correctly Office 2003 specific - "Home" and "Back" buttons are disabled for different options in Workshare Panel "Skip Cleaning" option is not applied to PDF attachments "Remove Comments" and "Remove Track Changes" disabled when ing with LightSpeed on and Protect Profile dialog off Ability to force lock the "Hide Options I cannot change" option Request that 'PDF Security Options' to be applied in the Advanced Security Options dialog Missing spaces between words of Convert to PDF dialog 12

13 TFS ID CR Number Description Embedded s that have previously been used via Alert and Compare cannot be opened from Sent items folder. PDFs created by Workshare seem to get Security Password added when you add any type of PDF security other than a password. Skip Cleaning' option is disabled on Advanced Security Options dialog for PDF Clean and LightSpeed clean. Unable to modify comments via Reviewing Pane when Workshare add-in is present. Could not complete the operation because the service provider does not support it when sending to a hidden distribution list stored in the user's.nk2 file Function cannot be performed because the object has been deleted Load Defaults' is not working as expected when options in WCM are locked Saving ADM file over itself from WCM appends options Unable to Reply to All to s with multiple recipients after applying Fast Track dlls Options are not being un-deployed by clicking on the deployment icon ADM template for Workshare in the Group Policy Management Console does not create the setting "IgnoredUserOverrides" for all sub categories within the WCM. ADM settings saved as registry target 'HKCU' with '32 bit Workshare on 64 bit OS' are not retained in x64 environments in user mode of WCM. Alert and Compare policy and tagging added when using Default profile with Alert and Compare off. Catastrophic failure 0x8000FFFF (E_UNEXPECTED) when sending with signature image Unable to browse to sites within Virtual Directories in SharePoint Saving custom paths to REG file via WCM not functioning correctly Instance options are being saved to the deployment script regardless of the deployment icon state Admin only options are present in IgnoredUserOverrides folder When upgrading from previous releases certain configuration options are not being upgraded. Error 'Unable to Open Document' when right-clicking.txt file and selecting Convert to PDF. "Discard Changes" confirmation dialog is shown when closing WCM even though no changes were made WCA Help gives reference to ini files Failed to open a stream on a file - OnWriteComplete error. 13

14 TFS ID CR Number Description 5177 Password encrypted zip file with a.ppt,.pptx,.docx,.doc,.xls,.xlsx when sending Protect keeps prompting for the password Protect hangs sending certain ZIP files Returning a review document using 'Reply To All' only includes originating sender Workshare Configuration Manager hover tooltip "Default Value" does not reflect out of the box Default Value Issues related to Registry options migration after upgrading to 7.0 builds WCM Crash is observed while loading a.wso file PDF saved to LFS on selecting PDF option is deleted when related Word/PowerPoint/Excel document is closed. Contact Info For feedback on Workshare products, including ideas for new features and improvements, please contact us on: feedback@workshare.com. For more information, please contact Workshare: sales@workshare.com Workshare Ltd. 20 Fashion Street London E1 6PX UK Workshare Inc. 208 Utah Street, Suite 350 San Francisco CA USA Workshare Ltd. Level 56, MLC Centre Martin Place Sydney 2000 Australia 14