SurfControl Enterprise Threat Shield 3.5.1 Readme

July 2006

Welcome

Welcome to SurfControl Enterprise Threat Shield 3.5.1. Version 3.5.1 provides a new security feature for portable media in addition to several bug fixes.

Installation Requirements


Enterprise Threat Shield requires the following to be installed:

 

·         Microsoft .net framework V1.1

·         Microsoft IIS V5.0 or higher (required for the Threat Shield Reporter and Stand Alone mode)

·         Microsoft SQL Server 2000 or higher for reporting. MSDE is available as a separate download from http://www.surfcontrol.com for companies without SQL

 

The only supported Web browser in this release is Microsoft Internet Explorer V5.5, which is required for Threat Shield Reporter functionality.

New Feature

 

Write Capability to USB Drives is Blocked - This means that users will not be able to write any type of file to a USB drive, but can still use the USB port to import data that does not trigger a rule. This is a handy tool in your compliance arsenal since it prevents users from transferring confidential information to a portable USB drive and removing it from the workplace.

Bug Fixes

 

Description

Issue Number

USB devices were not released even if they were disconnected properly.

20130

Deploy and Status windows lose the 'ticks' in the checkboxes when domain controller is down for a long time.

20587

User information password in Directory Services Settings is limited to 16 characters

20726

Known Issues

Description

Issue Number

Uninstall SETSAgent.msi when WS is disconnected from network - status of WS at SETS manager remains the same.


If you uninstall SETSAgent.msi from a workstation and the uninstall information does not reach the Threat Shield Manager, the status of the uninstalled workstation will be: "workstation stopped its connection" instead of "unregistered". No operation can be carried out on the workstation from Threat Shield Manager.

Workaround: Reinstall SETSAgent.msi and uninstall it again while connected to the server.

18289

Adding a stand alone option through the Add/Remove modify procedure will not work.

 

If you install Enterprise Threat Shield without the Stand Alone option selected then attempt to modify the installation via Add/Remove programs, the Stand Alone option will still not be available. Using the Repair option will not make it available either.

 

Workaround - Double-click the install file and choose Modify or Repair when you see this screen.

18778

A new database must be included in the Stand Alone.ini file in order to deploy in Stand Alone mode.

 

If you create a database outside the Threat Shield Manager (not the recommended procedure) and add this database to the Data folder, attempting to deploy the Agent to a client in Stand Alone mode will fail. This can also occur if you change the database name outside of the Manager.
 

A workaround is available - see Knowledge Base article #1894.

18862

A User defined database that is not in a rule will not appear in Stand Alone.ini after a software upgrade.

 

If you are upgrading Enterprise Threat Shield from a previous version to 3.5.0 and adding the stand alone functionality, a user-defined database that is not part of an active rule will not appear in the StandAlone.ini file. If this database is then added to a rule and the rule activated, you will be unable to deploy Agents in Stand Alone mode.

 

Workaround - Make sure that all user-defined databases are attached to active rules before you upgrade Enterprise Threat Shield.

19325

Enterprise Threat Shield and Novell Networks


Activation of the Threat Shield Agent can be erratic when installed on Novell Networks even if a log in script is used. This is usually the greatest issue with deployment.

 

Workaround - Define a Novell share on the server with read access for the Agent to the Enterprise Threat Shield folder.

18575

ThreatShieldService does not respond to a 'stop' command.


If you attempt to uninstall Enterprise Threat Shield and the service cannot stop, the Enterprise Threat Shield uninstall process will display an 'Uninstall completed successfully' dialog even though the service can still be seen as 'stopping'.
 

Workaround - Restart the machine.

18970

Threat Shield Manager crashes if blank information is entered in the Change Account Information dialog box.

 

If you try to change account information and leave the edit fields in the 'Change Account Information' dialog box blank, an unknown exception error message will be displayed. When you click OK, Enterprise Threat Shield Manager will close without warning.

Workaround - Do not enter blank information into the Change Account Information dialog box.                           

19537

Stand Alone Agent logging issue when server is disconnected from network and different users login to the client.


When a stand alone agent is connected to the server, it will send only the violation history of the current user and not other users who used the workstation during the period it was disconnected.

 

A workaround is available - see Threat Shield Knowledge Base article #1893.

18321

For more information, please refer to the SurfControl Knowledge Base. Contact SurfControl Technical Support for further assistance.

Upgrade Considerations

You can either install a full version of 3.5.1, or you can upgrade from the following versions of SurfControl Enterprise Threat Shield:

 

Licensing

SurfControl Enterprise Threat Shield will run as an evaluation version for 30 days. For this period, the product is fully functional and a maximum of 70 clients can be managed. 

 

To install or upgrade to SurfControl Enterprise Threat Shield, download the product file and follow the Setup Wizard instructions. For more information, see the SurfControl Enterprise Threat Shield Starter Guide.