Release Notes for Data Security v7.6.3 Policy Patch

Transcription

1 Release Notes for Data Security v7.6.3 Policy Patch Topic / Updated: 10-Feb-2012 Applies To: Websense Data Security v7.6.3 The February 2012 Policy Patch contains several important enhancements and fixes. The patch can be installed over Data Security version All the features of this patch will be included in versions released after v Release Highlights A Russia Federal Act policy was added to help regulate activities related to processing personal data in the Russian Federation. 5 new classifiers were added to detect Vehicle Identification Numbers, ActionScript source code, SAM files, and Encrypted Files of unknown formats. The Proximity Classifier was modified to support multiple words and regular expressions. See Installation, page 2 for instructions on obtaining and installing the patch. See Contents, page 3 for a detailed description of what the patch contains Websense, Inc.

2 Installation Topic / Updated: 10-Feb-2012 Applies To: Websense Data Security v7.6.3 Policy Patch February 2012 If you have Data Security v7.6.3, install the policy patch using the following instructions. If you have a version later than 7.6.3, no installation is required. 1. In TRITON - Data Security, navigate to Settings > General > Policy Updates. 2. Click Install Updates on the toolbar. 3. When prompted, browse to the zip file containing the patch. Obtain the patch on mywebsense.com. 4. Click Next. 5. Click Next again to install the updated policies and content classifiers. 6. The Update Process page shows you the progress of the update. This can take up to 10 minutes. 7. When the updates have installed successfully and you're ready to apply them, click Next. 8. A message confirms the update has completed successfully. 9. Click Finish. 10. Click Deploy to deploy the new and updated policies and classifiers. Policy Patch Release Notes 2

3 Contents Topic / Updated: 10-Feb-2012 Applies To: Websense Data Security v7.6.3 Policy Patch July 2011 New policies Russia Federal Act 152-FZ This Federal Law regulates activities related to the processing of personal data by federal, regional and other state agencies (hereinafter, "state agencies"), municipal and other local authorities (hereinafter, "municipal authorities"), legal entities and individuals, both automatically and manually, provided that manual data processing is by its nature similar to automatic data processing. The policy comprises the following rules: Russian Phone Numbers (Wide): Rule for detecting Russian phone numbers. This rule does not require support words or explicitly delimited notation. It is strict, detecting more matches yet possible false positives. Russian Phone Numbers (Default): Rule for detecting Russian phone numbers. This rule requires support words or explicitly delimited notation. It balances the number of false negatives and false positives that may be detected. Russian Phone Numbers (Narrow): Rule for detecting Russian phone numbers. This rule require support words and explicitly delimited notation. It is permissive, detecting fewer matches yet possible false negatives. Russian Classification on Objects of Administrative Division - OKATO (Default): Rule for detecting Russian Classification on Objects of Administrative Division. This rule requires proximity to support words. Russian Classification on Objects of Administrative Division - OKATO (Wide): Rule for detecting Russian Classification on Objects of Administrative Division. Russian Unified Classifier of Enterprises and Organizations - OKPO: Rule for detecting Russian Unified Classifier of Enterprises and Organizations. This rule requires proximity to support words. Russian Taxpayer Identification Numbers (Wide): Rule for detecting RussianTaxpayer Identification Numbers. Russian Taxpayer Identification Numbers (Default): Rule for detecting RussianTaxpayer Identification Numbers. This rule requires proximity to support words. Russian Taxpayer Identification Numbers (12 digits) near Russian name: Rule for detecting RussianTaxpayer Identification Numbers in proximity to Russian names. Policy Patch Release Notes 3

4 Russian Primary State Registration Numbers (Wide): Rule for detecting Russian Primary State Registration Numbers. Russian Primary State Registration Numbers (Default): Rule for detecting Russian Primary State Registration Numbers. This rule requires proximity to support words. Russian Primary State Registration Numbers (15 digits) near Russian name: Rule for detecting Russian Primary State Registration Numbers in proximity to Russian names. Russian Individual Personal Account Insurance Numbers (Wide): Rule for detecting Russian Individual Personal Account Insurance Numbers Russian Individual Personal Account Insurance Numbers (Default): Rule for detecting Russian Individual Personal Account Insurance Numbers. This rule requires proximity to support words. Russian Individual Personal Account Insurance Number near Russian name: Rule for detecting Russian Individual Personal Account Insurance Numbers in proximity to Russian names. Moscow Social Card Numbers (Wide): Rule for detecting Russian Moscow Social Card numbers Moscow Social Card Numbers (Default): Rule for detecting Russian Moscow Social Card numbers. This rule requires proximity to support words. Moscow Social Card Serial Numbers (Wide): Rule for detecting Russian Moscow Social Card serial numbers Moscow Social Card Serial Numbers (Default): Rule for detecting Russian Moscow Social Card serial numbers. This rule requires proximity to support words. Moscow Social Card Numbers near Serial Number: Rule for detecting Russian Individual Personal Account Insurance Numbers in proximity to serial number. New classifiers VIN Code (Wide) Detection of VIN (Vehicle Identification Number) code. VIN Code (Default) Detection of VIN (Vehicle Identification Number) code when found in proximity to related terms such as 'VIN', 'Vehicle Identification Number' ActionScript Source Code Detection of source code content written in ActionScript, using lexical analysis of terms, patterns and structures for optimal accuracy. Policy Patch Release Notes 4

5 Security Accounts Manager (SAM) Detection of Security Accounts Manager (SAM) files Encrypted Files (Unknown Format) Detection of Encrypted files (unknown format). Modified classifiers Proximity Classifier The Proximity classifier has been enhanced. Previously it looked for 2 words in proximity with one another. Now, it can look for multiple words and regular expressions as well. Custom File Types The Custom File Types classifier now turns on the Security Accounts Manager (SAM) and Encrypted Files (Unknown Format) file types. Policy Patch Release Notes 5

6 Policy Patch Release Notes 6