McAfee Network DLP 8.5 Release Notes July 22, 2009
NEW FEATURES The table below provides information about new features added into this release of McAfee Network DLP 8.5 software since the previous release of Reconnex 8.0.2 software. Feature Description and Benefit Integration with McAfee epolicy Orchestrator Integration with McAfee Network Data Loss Prevention Discover Remediation Rule Throttling LDAP over SSL Encryption Internationalization framework Improved Incident Wiping The Network DLP Extension reports McAfee Network DLP incidents to the epo dashboard. The Host DLP Extension reports epo desktop incidents to the McAfee DLP dashboard. Incidents found by Discover can now be deleted, encrypted, copied or moved automatically. Users can now control the number of incidents reported. This release enables security for Lightweight Directory Access Protocol (LDAP) using Secure Sockets Layer (SSL) encryption. The user interface has been reconfigured to support multiple languages. After the limit of 150,000 incidents is reached, 30,000 of the oldest incidents are wiped. Page 2 of 5 McAfee Network DLP 8.5 Release Notes
KNOWN NEW PROBLEMS The list below contains new issues found in the 8.5 release of McAfee Network DLP software. Manager/Monitor 463270 Although more than one LDAP server can be added from the user interface, multiple LDAP servers are not supported. 469825 Systems with search results incidents in the millions may take two hours or more to complete an upgrade. 454072 Encrypted chat sessions (e.g., AIM 6 (AOL Instant Messenger 6)) are not captured. 474282 When email notification is set up using dynamic variables, some values may not be reported when notification is received. 480198 Hyphenated host names are not supported. 480833 If multiple documents are registered with multiple rules, the match string is not displayed for all of the rules. 489800 After upgrade from 8.0.2 to 8.5, the local user password resets to mcafee. Discover 475474 The File Owner parameter is not recognized when used in a scan operation. 477607 If a system component goes down while a Discover scan task is being saved and rules have not yet been updated, the configuration does not get activated and must be republished. 478594 If you want to get complete scan results instead of incremental changes after modifying the filters of an active task, rescan to re-fetch all original files plus those resulting from the filter modification. 479256 When a large crawl is run, Internet Explorer may launch an empty Statistics page. 479847 Because of the time it takes to decouple polices and rules from deleted scans, a new Discover task can appear to be stuck in a NOT_ACTIVE state if the system is processing many files and tasks at once. Workaround: Wait for 30 minutes. If the task does not reactivate, select it and Activate from the Actions menu. If these measures fail, clone the task and save as a new one, then delete the old task. 490464 PowerPoint 2003 documents are not indexed by the classification engine, so they cannot be extracted during an ad hoc search or a Discover scan. 477607 If Discover reboots or Stingray restarts while a task is being saved, it cannot be activated. McAfee Network DLP 8.5 Release Notes Page 3 of 5
KNOWN PROBLEMS FROM 8.0.2 The list below contains existing issues reported in 8.0.2 that are still in the 8.5 release of McAfee Network DLP software. Prevent 453587 Files over 50 MB will not be blocked by Prevent. 453588 Duplicate incidents are displayed on the dashboard when MS Outlook HTML email messages are processed by Prevent. 453601 The userid and date/time attributes of a rule may not update as expected when using Prevent because the Blue Coat device serves cached copies. 453602 By design, ICAP Prevent does not index the file names from GET requests, so file names are not included in search results. Manager/Monitor 453627 Use of init 0 is not supported on the 3650 platform. 453647 Exported CSV files cannot be opened in Excel 2003 if there are over 65,536 rows. To view large CSV files, use Excel 2007. 453654 If the Incidents tab is not visible, check to see that the View Dashboards permission is enabled. Execute permission is also required to process incidents. 453826 When using the 50,000 or All Results options in the Basic Search window, the search term is not highlighted in search results. 453833 A keyword search targeting Microsoft Office 2007 files embedded in Office 2003 files will not produce any hits. 453887 AOL Oscar IM protocol cannot be captured on TCP port 1. 453944 Scheduled PDF reports occasionally format data in MatchString columns incorrectly. 453961 USB devices, including flash drives and keyboards, are not supported on NDLP systems. 453995 A login error may result if the time is incorrect on the system. 466422 When a concept is created using the Upload Expressions function, only text files are supported. 477605 By design, only one value is supported n some Filter by fields (e.g., SourceLocation, DestinationLocation, UserManager and UserGroups). Discover Workaround: Use the like condition and type in a portion of the filter value to retrieve related results. 453678 Discover cannot crawl an NFS share that has a space as the last character. 453692 By design, document registration results display match strings only if the MatchString column is added to the dashboard configuration. 453694 After a standalone Discover is registered to a McAfee DLP Manager, the number of incidents displayed on the dashboard and Statistics page will differ, because the latter includes both standalone and managed incidents. 453714 If root (/) is more than 80% full on Discover, tasks will fail to run. Page 4 of 5 McAfee Network DLP 8.5 Release Notes
HARDWARE AND SOFTWARE REQUIREMENTS The McAfee Network DLP 8.5 software is supported on all current, 64-bit DLP appliances, including the 1650, 2600, 3600, and 3650. The appliance must be utilizing a 64-bit architecture for the software to function. For current customers with 32-bit systems, these systems must first be upgraded or replaced as per your maintenance and support contract with Reconnex prior to being able to upgrade to and utilize McAfee Network DLP 8.5. UPGRADING TO THIS VERSION Software upgrades from 8.0.2 are supported from the user interface. Please consult the documentation, or work with your account team and McAfee Professional Services to upgrade your existing environment. DOCUMENTATION NOTES The User Guide that accompanies this version of the product is identical to the online help accessible throughout the application. SUPPORT The McAfee Network DLP support portal is available at mysupport.mcafee.com. It requires a login, password, and grant number. Contact McAfee Customer Service at http://service.mcafee.com if you need help accessing the portal. McAfee support can be contacted directly by telephone or email. (800) 937-2237 or (408) 988-3832 http://www.mcafee.com/us/about/contact/index.html McAfee Network DLP 8.5 Release Notes Page 5 of 5