CA DLP NBA Release Notes Release 14.0
This Documentation, which includes embedded help systems and electronically distributed materials, (hereinafter referred to as the Documentation ) is for your informational purposes only and is subject to change or withdrawal by CA at any time. This Documentation may not be copied, transferred, reproduced, disclosed, modified or duplicated, in whole or in part, without the prior written consent of CA. This Documentation is confidential and proprietary information of CA and may not be disclosed by you or used for any purpose other than as may be permitted in (i) a separate agreement between you and CA governing your use of the CA software to which the Documentation relates; or (ii) a separate confidentiality agreement between you and CA. Notwithstanding the foregoing, if you are a licensed user of the software product(s) addressed in the Documentation, you may print or otherwise make available a reasonable number of copies of the Documentation for internal use by you and your employees in connection with that software, provided that all CA copyright notices and legends are affixed to each reproduced copy. The right to print or otherwise make available copies of the Documentation is limited to the period during which the applicable license for such software remains in full force and effect. Should the license terminate for any reason, it is your responsibility to certify in writing to CA that all copies and partial copies of the Documentation have been returned to CA or destroyed. TO THE EXTENT PERMITTED BY APPLICABLE LAW, CA PROVIDES THIS DOCUMENTATION AS IS WITHOUT WARRANTY OF ANY KIND, INCLUDING WITHOUT LIMITATION, ANY IMPLIED WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, OR NONINFRINGEMENT. IN NO EVENT WILL CA BE LIABLE TO YOU OR ANY THIRD PARTY FOR ANY LOSS OR DAMAGE, DIRECT OR INDIRECT, FROM THE USE OF THIS DOCUMENTATION, INCLUDING WITHOUT LIMITATION, LOST PROFITS, LOST INVESTMENT, BUSINESS INTERRUPTION, GOODWILL, OR LOST DATA, EVEN IF CA IS EXPRESSLY ADVISED IN ADVANCE OF THE POSSIBILITY OF SUCH LOSS OR DAMAGE. The use of any software product referenced in the Documentation is governed by the applicable license agreement and such license agreement is not modified in any way by the terms of this notice. The manufacturer of this Documentation is CA. Provided with Restricted Rights. Use, duplication or disclosure by the United States Government is subject to the restrictions set forth in FAR Sections 12.212, 52.227-14, and 52.227-19(c)(1) - (2) and DFARS Section 252.227-7014(b)(3), as applicable, or their successors. Copyright 2012 CA. All rights reserved. All trademarks, trade names, service marks, and logos referenced herein belong to their respective companies.
CA Technologies Product References This document references the following CA Technologies products: CA DLP Contact CA Technologies Contact CA Support For your convenience, CA Technologies provides one site where you can access the information that you need for your Home Office, Small Business, and Enterprise CA Technologies products. At http://ca.com/support, you can access the following resources: Online and telephone contact information for technical assistance and customer services Information about user communities and forums Product and documentation downloads CA Support policies and guidelines Other helpful resources appropriate for your product Providing Feedback About Product Documentation If you have comments or questions about CA Technologies product documentation, you can send a message to techpubs@ca.com. To provide feedback about CA Technologies product documentation, complete our short customer survey which is available on the CA Support website at http://ca.com/docs.
Contents Chapter 1: Introduction CA DLP Network operates at the boundary between your organization and the Internet. It reconstructs complete objects, including emails, files and IM conversations, from individual data packets transmitted across your corporate network to or from the Internet. The supported versions are CA DLP Network r12.5 and 14.0. CA DLP Network 14.0 is only supported on Linux servers. CA DLP Network r12.5 is only supported on Bivio 2000 and Bivio 7000 appliances. These release notes cover new announcements, new features, and distribution package details for both versions of CA DLP Network. The 14.0 Network Implementation Guide contains instructions for getting the latest NBA software packages from CA Support Online and installing the packages onto your CA DLP Network appliance or Linux server. This guide is available to view or download from CA Support Online: http://ca.com/support Note: CA DLP documentation uses the terms CA DLP Network and Network Boundary Agent (NBA) interchangeably. In particular, the documentation uses the term NBA to refer to the CA DLP agent, the Bivio appliance, and the Linux Server platform. Chapter 2: Announcements This section lists important announcements for CA DLP Network r12.5 and 14.0. Upgrade Support CA DLP Network 14.0 is being released for the Linux Server Platform only. This is the first release for this platform, so no upgrade support is required. Upgrades from CA DLP Network r12.0 to r12.5 are supported. Install the r12.5 distribution package on your Bivio appliance and specify an Upgrade operation. This operatin automatically upgrades the existing package. For full details, see the CA DLP Network Implementation Guide. Contents 5
New Credentials for CA DLP Network Console User For CA DLP Network 14.0 on the Linux Server platform, the default user name and password are both webadmin. For CA DLP Network r12.5, the default credentials depend on the Bivio device: Bivio 2000 appliances: The default username and password are both 'admin'. Bivio 7000 appliances: The default username and password are both 'webadmin'. Small HTTP POST Text Files Are Embedded in Form Data If the NBA captures a plain text file submitted to a web site and the text file is smaller than 128 bytes, the file content is embedded with other form data in a captured file matching the upload URL. The file name is also contained within the form data. The NBA embeds small files to minimise the number of small events and their impact on processing overhead. Chapter 3: New Features The current CA DLP Network releases include the following enhancements: Support for Linux Server Platform CA DLP Network 14.0 runs on commodity rack servers running CentOS 6.0. Confirm that the server matches the documented Linux server hardware specification. Install the CentOS Operating System from the image that you download from the CA Support site. Full instructions for installing and configuring CA DLP Network 14.0 are included in the CA DLP Network Implementation Guide. Support for Bivio 7000 Appliances CA DLP Network r12.5 now runs on Bivio 7000 appliances. The hardware configuration for these appliances includes four pairs of data inspection ports. This lets you monitor traffic on up to four separate network segments using a single Bivio 7000 appliance. 6 NBA Release Notes
If Upgrading From Version r12.0 If you are upgrading from CA DLP Network 12.0, note the following new features: Set up Filters in CA DLP Network Console (Bivio 7000 appliances only) If upgrading from version 12.0, be aware that you can now configure network filters and application filters in the CA DLP Network Console. You no longer need to edit nbapolicy.xml directly. Use Direction to Filter SMTP Email Captures You can set up application filters to capture outbound or inbound SMTP emails. That is, you can separately target emails sent from or to specific computers: Use the SMTPSRC protocol to identify emails sent from specific IP addresses. Use the SMTPDEST protocol to identify emails sent to specific IP addresses. NNTP News Events Captured As Emails CA DLP can capture and apply policy to messages posted to or read from newsgroups. CA DLP applies Outgoing Email policy triggers to these NNTP news events. Attachments are now correctly captured and displayed. CPU Screen Shows Current Network Traffic Rates The CPU screen in the CA DLP Network Console has been enhanced to include a 'MBits/sec' column. This column shows rates of network traffic passing through each Application Processor CPU on the Bivio appliance. Chapter 4: Distribution Packages You can deploy CA DLP Network on a Bivio appliance or a Linux server. CA DLP Network 14.0 The CA DLP Network distribution packages contain the software needed to deploy CA DLP Network on a Linux Server Platform. The package includes the installation software, the Network console and an SNMP agent. To locate these packages fix: 1. Browse to the Download Center page of support.ca.com. 2. Search for CA DataMinder Network. The search returns the various product components. 3. Download the following components: CD - CentOS package: CDM04133922E.iso (411 MB) CD - CA DLP Network r14.0: CDM04133649E.iso (2.6 MB) Note: Package version numbers and download sizes may differ from those listed above. Chapter 4: Distribution Packages 7
CA DLP Network r12.5 The CA DLP Network distribution packages contain the software, the CA DLP Network console and an SNMP agent. There are separate distribution packages for CA DLP Network running on Bivio 2000 and Bivio 7000 appliances. Both packages, including any recent fixes, are available with fix #RO37161. To locate fix #RO37161 and download the distribution packages 1. Browse to the Download Center page of support.ca.com. 2. In the Quick Search section of the Download Center, type RO37161 in the Search By Fix/Patch Number field. The search returns the Multiple Issues With CA DataMinder Network Appliance solution. 3. Double-click the solution to view the release notes and see the fix contents. 4. Download the software appropriate to your Bivio appliance: Bivio 2000 package: nba.b2000-12.5.2620.0-1.ppc.zip (5.1 MB) Bivio 7000 package: nba.b7000-12.5.2620.0-1.ppc.zip (6.0 MB) Cavium package: cavium-3.00-2.ppc.zip (458.1 MB) (Bivio 7000 appliances only) If a Bivio 7000 appliance is fitted with Cavium CN1615 Security Processor cards, the NBA offloads the computationally expensive cryptographic operations to the Cavium device, freeing the Bivio CPUs from these operations and thereby maintaining high performance. Note: Package version numbers and download sizes may differ from those listed above. Chapter 1: Introduction 5 Chapter 2: Announcements 5 Chapter 3: New Features 6 Chapter 4: Distribution Packages 7 Chapter 5: Known Issues 11 Tracking ID 528-99: Boundary Agents Cannot Quarantine Outbound TNEF Emails... 11 Tracking ID 597-39: Entering XML formatting characters into filter settings on the CA DLP Network console causes policy corruption... 11 Tracking ID 534-00: NBA Cannot Block IMs Over SIP/UDP... 11 8 NBA Release Notes
Appendix A: Third Party Service Acknowledgements 13 Appendix B: Accessibility Features 15 Display... 15 Sound... 16 Keyboard... 16 Mouse... 17 Chapter 4: Distribution Packages 9
Chapter 5: Known Issues This section describes the known issues in the current release. This section contains the following topics: Tracking ID 528-99: Boundary Agents Cannot Quarantine Outbound TNEF Emails (see page 11) Tracking ID 597-39: Entering XML formatting characters into filter settings on the CA DLP Network console causes policy corruption (see page 11) Tracking ID 534-00: NBA Cannot Block IMs Over SIP/UDP (see page 11) Tracking ID 528-99: Boundary Agents Cannot Quarantine Outbound TNEF Emails Outgoing e-mails containing TNEF data cannot be quarantined if captured by the Milter MTA Agent, IIS SMTP Agent or the NBA. Specifically, this issue affects TNEF encoded e-mails sent to external recipients and which cause an e-mail control trigger to fire. Note: These CA DLP agents are typically used to detect messages entering or leaving an organization (that is, crossing the Internet boundary). This problem does not affect TNEF emails captured by the Exchange server agent or Outlook client agent. TNEF is an email format used by Microsoft Exchange and Outlook. Tracking ID 597-39: Entering XML formatting characters into filter settings on the CA DLP Network console causes policy corruption You cannot use the "<" and ">" characters in policy filter names because doing so causes policy corruption. To restore policy, edit the nbapolicy.xml file manually and re-upload it to the FTP server s config folder. Tracking ID 534-00: NBA Cannot Block IMs Over SIP/UDP The NBA cannot block instant messages sent using an IM application that uses the Session Initiation Protocol (SIP) if the IM application is configured to use UDP instead of TCP. Chapter 5: Known Issues 11
Appendix A: Third Party Service Acknowledgements CA DLP incorporates software from third party companies. License agreements are available in the \Bookshelf Files\TPSA folder in the CA DLP bookshelf. They are listed in the following file: third_party_service_acknowledgments.txt Appendix A: Third Party Service Acknowledgements 13
Appendix B: Accessibility Features CA Technologies is committed to ensuring that all customers, regardless of ability, can successfully use its products and supporting documentation to accomplish vital business tasks. This section outlines the accessibility features that are supported by CA DLP. Display To increase visibility on your computer display, you can adjust the following options: Font style, color, and size of items Defines font color, size, and other visual combinations. The CA DLP iconsole also supports a High Visibility mode. This increases the size of text and images in the iconsole screens. Screen resolution Defines the pixel count to enlarge objects on the screen. Cursor width and blink rate Defines the cursor width or blink rate, which makes the cursor easier to find or minimize its blinking. Icon size Defines the size of icons. You can make icons larger for visibility or smaller for increased screen space. High contrast schemes Defines color combinations. You can select colors that are easier to see. Appendix B: Accessibility Features 15
Sound Sound Use sound as a visual alternative or to make computer sounds easier to hear or distinguish by adjusting the following options: Volume Sets the computer sound up or down. Text-to-Speech Sets the computer's hear command options and text read aloud. Warnings Notices Defines visual warnings. Defines the aural or visual cues when accessibility features are turned on or off. Schemes Associates computer sounds with specific system events. Captions Displays captions for speech and sounds. Keyboard You can make the following keyboard adjustments: Repeat Rate Tones Defines how quickly a character repeats when a key is struck. Defines tones when pressing certain keys. Sticky Keys Defines the modifier key, such as Shift, Ctrl, Alt, or the Windows Logo key, for shortcut key combinations. Sticky keys remain active until another key is pressed. 16 NBA Release Notes
Mouse Mouse You can use the following options to make your mouse faster and easier to use: Click Speed Defines how fast to click the mouse button to make a selection. Click Lock Sets the mouse to highlight or drag without holding down the mouse button. Reverse Action Sets the reverse function controlled by the left and right mouse keys. Blink Rate Defines how fast the cursor blinks or if it blinks at all. Pointer Options Let you do the following: Hide the pointer while typing Show the location of the pointer Set the speed that the pointer moves on the screen Choose the pointer's size and color for increased visibility Move the pointer to a default location in a dialog box Appendix B: Accessibility Features 17