Release Notes Revision A McAfee Data Loss Prevention Endpoint 9.3.200 For use with epolicy Orchestrator 4.6-5.1 Software Contents About this release Enhancements Resolved issues Installation instructions Known issues Find product documentation About this release This document contains important information about the current release. We strongly recommend that you read the entire document. Release build McAfee Data Loss Prevention Endpoint (McAfee DLP Endpoint) Management tools software build 9.3.200.15 McAfee DLP Endpoint client software for Microsoft Windows build 9.3.200.23 McAfee DLP Endpoint Diagnostic Tool build 9.3.200.2 For Mac computers, the previously released McAfee DLP Endpoint client software build 9.3.150.1284 is compatible with this Management tools software release. Module compatibility This McAfee Data Loss Prevention (McAfee DLP) Management Tools build is not compatible with Unified McAfee DLP extensions for McAfee epolicy Orchestrator, such as versions 9.2.5 or 9.2.107. If you are using the Unified McAfee DLP extension, contact McAfee support to get a different release to update your software. 1
Supported systems The McAfee DLP Endpoint server software (DLP policy console, DLP Incident Manager, and DLP Operational Events) is installed in one of the following epolicy Orchestrator versions. epolicy Orchestrator 4.6.0 and later epolicy Orchestrator 5.0.0 and later epolicy Orchestrator 5.1.0 On 64-bit systems, run the policy console as an ActiveX control inside 32-bit Windows Internet Explorer. Due to a known User Account Control (UAC) / ActiveX issue, we strongly recommend turning off UAC when installing or running the console in Windows systems that support UAC. The Microsoft Windows client in this release was developed for use with the following Microsoft operating systems. Microsoft Windows XP Professional SP3 or later, 32-bit (no support for 64-bit) Windows Vista SP1 or later Enterprise and Business editions, 32-bit Windows 7 SP1 or later Enterprise and Business editions, 32- and 64-bit Windows 8 and 8.1 Enterprise and Professional, 32- and 64-bit Windows Server 2003 R2 SP2 or later, 32- and 64-bit Windows Server 2008 SP2 or later, 32- and 64-bit Windows Server 2012 and 2012 R2, 64-bit File System Discovery rules and Network Protection rules are not supported on servers. The OS X client in this release was developed for use with the following Apple operating systems. OS X Lion 10.7.5 or later OS X Mountain Lion 10.8.0 or later OS X Mavericks 10.9.0 Compatible McAfee managed products This release has been tested for compatibility with the following McAfee managed product versions. McAfee Agent 4.5 Patch 3, 4.6 Patch 3, and 4.8 McAfee Application Control (formerly Solidcore) 6.1.2 McAfee Endpoint Encryption for Files and Folders 3.2.2.10, 4.0.1, and 4.2 McAfee Endpoint Encryption for PC 6.2 and 7.0 McAfee Host Intrusion Prevention System 8.0 Patch 4 McAfee Network Access Control (McAfee NAC) 4.0 McAfee Policy Auditor 6.0 Patch 1 and 6.2 McAfee Risk Advisor 2.7 Patch 2 McAfee RSD Sensor 4.7.0.312 2
McAfee SiteAdvisor Enterprise 3.5 Patch 1 McAfee Virtual Technician 1.1.0 McAfee VirusScan Enterprise 8.7 Patch 5 and 8.8 Patch 3 Supported software This release has been tested for compatibility with the following third-party software versions. Adobe LiveCycle ES 2 Adobe Acrobat Pro, X and XI Adobe Reader 7 11 Citrix XenApp 6.0, 6.5 FP2 Citrix XenDesktop 5.5, 5.6, and 7.0 Lotus Notes client software 7.0, 8.0, 8.5.2, 8.5.3, and 9.0 Microsoft Active Directory Rights Management Services (AD RMS) 2003, 2008, and 2012 Microsoft Internet Explorer 6 11 Microsoft.NET 3.5 SP 1, 4.0, and 4.5 Microsoft Office 2003, 2007, 2010, 2013 Microsoft Outlook 2003, 2007, 2010, 2013 Email Storage Discovery Rule (ESDR) is not supported in Microsoft Outlook 2013. Microsoft Sharepoint 2007 and 2010 Mozilla Firefox 3.6 26.0 Seclore FileSecure Policy Server 2.29 and later Seclore Desktop Client 2.29 and later Titus Message Classification Titus Classification for Desktop TrueCrypt 7.1 VMware View 4.6, 5.0, 5.1, and 5.2 Enhancements This release of the product includes these enhancements. Enhanced support for Microsoft Windows platforms The Microsoft Windows client software in this release adds support for Windows 8.1 and Windows Server 2012 R2. Enhanced epolicy Orchestrator support This release supports epolicy Orchestrator 5.1 for both Microsoft Windows and OS X clients. 3
Changes in the DLP Incident Manager and DLP Operational Events displays To facilitate visual screening of events, color-coded icons now accompany the Severity ratings. Info is green, Minor and Warning are yellow, and Major and Critical are red. Numerical values, from 1 for Critical to 5 for Info, are also included. The default status of new incidents is now New rather than None. Resolved issues These issues are resolved in this release of the product. For a list of issues fixed in earlier releases, see the Release Notes for the specific release. Server software issues Labels assigned in DLP Incident Manager can now be viewed in epolicy Orchestrator queries. (911342) You can collate evidence files from multiple McAfee DLP Endpoint events and email them. (904501) Network definitions and email definitions are present when running the policy wizard for the first time. The user must set the license at the beginning of the initialization wizard. (903986) Client software issues Removable storage protection rules block files copied directly from mapped network drives to a USB drive. (930807, 930553) McAfee DLP Endpoint 9.3 works correctly with McAfee Host Intrusion Prevention. (919009) This issue was resolved in McAfee Host Intrusion Prevention with version 8.0 Patch 4. SAP application file (tx.sap) downloaded in Microsoft Internet Explorer 8 now starts automatically. (909661) Saving a Microsoft Excel or Microsoft PowerPoint file to a NAS share home drive no longer locks the file. (910906) Printer protection rules work with Epson Laser ESC/PageS Wide. The issue that was due to the printer having an empty hardware ID has been resolved. (904917, 903784) Excel can open files over the network when McAfee DLP Endpoint is in full protection mode. (909011) Microsoft Access can be set to compress on exit when McAfee DLP Endpoint is in full protection mode without locking files. (915475) Web post protection rules work with Microsoft Internet Explorer on corporate webforms. (911698) Web post protection rules work when McAfee VirusScan Enterprise is installed. The Internet Explorer plug-in does not scan the large TEMP file that makes Internet Explorer stop responding. (908725) 4
Web post protection rules work with Outlook Web Access (OWA). (920624) When sending web posts with multiple attachments, web post protection rules block only files that violate the protection rule. (907317) Some website/browser combinations fail to upload any attachments if one attachment is blocked. This behavior is due to the particular website/browser combination; it is not a McAfee DLP Endpoint malfunction. Installation instructions McAfee DLP Endpoint policy console is installed in epolicy Orchestrator. The McAfee DLP client is available in two versions, one for Microsoft Windows and one for OS X computers. There are two policy console installation options: HDLP_extension_9_3_200.xx Contains only the McAfee DLP software DLPE_Package_9_3_200.xx Contains HDLP_extension_9_3_200.xx bundled with McAfee Help Desk 2.0.0 and the epolicy Orchestrator Help systems for both products Recommended installation of the client software uses the epolicy Orchestrator infrastructure for deployment to the endpoint computers. For information about installing or upgrading McAfee DLP Endpoint, see the McAfee Data Loss Prevention Endpoint Product Guide, version 9.3.200. For specific instructions on deploying the client to OS X computers, see McAfee Data Loss Prevention Endpoint Release Notes, version 9.3.150. You can also deploy McAfee DLP Endpoint client software to your network using third-party enterprise deployment tools such as Microsoft Systems Management Server (SMS) for Microsoft Windows operating systems. For information about installing or upgrading with SMS, see KB59769. Known issues For a list of known issues in this product release, see this McAfee KnowledgeBase article: KB79942. Find product documentation McAfee provides the information you need during each phase of product implementation, from installation to daily use and troubleshooting. After a product is released, information about the product is entered into the McAfee online KnowledgeBase. Task 1 Go to the McAfee Technical Support ServicePortal at http://mysupport.mcafee.com. 2 Under Self Service, access the type of information you need: 5
To access... User documentation Do this... 1 Click Product Documentation. 2 Select a product, then select a version. 3 Select a product document. KnowledgeBase Click Search the KnowledgeBase for answers to your product questions. Click Browse the KnowledgeBase for articles listed by product and version. Product documentation Every McAfee product has a comprehensive set of documentation. See this documentation for your product version: McAfee Data Loss Prevention Endpoint Release Notes, version 9.3.200 McAfee Data Loss Prevention Endpoint Product Guide, version 9.3.200 Help modules are automatically included with the product installation. Copyright 2014 McAfee, Inc. Do not copy without permission. McAfee and the McAfee logo are trademarks or registered trademarks of McAfee, Inc. or its subsidiaries in the United States and other countries. Other names and brands may be claimed as the property of others. A00