SurfControl Web Filter 5.5 SP1 Readme (Build 5.5.1.32)

March 2007

 

Welcome

Welcome to SurfControl Web Filter 5.5 Service Pack 1. This release contains the enhancements and fixes listed below. SurfControl Technical Support can be contacted by phone or e-mail.

New Features in SurfControl Web Filter 5.5 SP1

 

Delete Users

The ability to delete monitored users has been added as a task to Web Filter Manager. This feature enables you to delete users and information that you do not wish to see in the Users tab. This helps to remove irrelevant information, which can clutter up the monitored data area, and prevent unwanted user data from taking up license counts.

 

If you have SurfControl Report Central version 2.5 or later installed on your Web Filter server, any existing Web reports will be automatically corrected to ignore data which belongs to deleted users. If you have exclusively installed this version of SurfControl Report Central on other servers, you must copy the registry file to each server and run it locally. The registry file and instructions can be found in the folder; C:\Program Files\SurfControl\Web Filter\SRC, after you have applied 5.5 SP1 to your Web Filter Server.

 

EUM Logon Agent for NetWare

The EUM Login Agent can now be deployed in a NetWare environment. This provides another means of obtaining NetWare user names, without the need to install NetWareEUM on your Directory Server(s). See the Installation Guide for further instruction on how to install and configure this feature.

 

EUM supported on 64 bit Windows Servers

Now you can install Enterprise User Monitoring (EUM) on 64 bit Windows 2000 and 2003 Servers. The EUM installation wizard automatically determines the architecture of your Domain Controller(s) for a seamless install or upgrade.

 

New Features in SurfControl Web Filter for ISA 5.5 SP1

 

AVA Upgrade

Applying 5.5 SP1 will upgrade the Anti-Virus Agent to use the latest version of the McAfee engine (5100). Support will end for the current McAfee 5000 engine by the end of March 2007.

 

AVA White List

It is now possible to add URLs to a white list. This allows you to prevent certain URLs from being scanned by the Anti Virus engine. This information is stored in the Windows Registry and requires the URLs to be entered manually. To add URLs to the white list:

 

1. Stop the Web Filter service.

2. Stop the Microsoft ISA firewall service.

3. Start Regedit.

4. Navigate to [HKEY_LOCAL_MACHINE\SOFTWARE\JSB\SurfControl Scout\Content\AVA]

5. Right-click the ‘WhiteList Sites’ key, and click Modify.

6. Enter the required URLs into the Value data field.

7. Click OK.

8. Start the Microsoft ISA firewall service.

9. Start the Web Filter service.

 

Entries in the white list inherit sub-domains automatically. For example, if the connections you want to ignore are for ‘windowsupdate.com’ (regardless of sub-domain), then the entry should be added as ‘windowsupdate.com’. To prevent connections to ‘www.windowsupdate.com’ from being scanned, then the entry should be added as ‘www.windowsupdate.com’, however this will only ignore connections to ‘www.windowsupdate.com’ and not ‘downloads.windowsupdate.com’.

 

Bug Fixes

Web Filter 5.5 SP1 contains the following bug fixes:

 

Description

Issue Number

Defects Fixed in 5.5 SP1

EUM is not supported on 64 bit architecture.

26472

Three forward slashes in the URL can allow blocking bypass.

26474

Unable to connect remotely to Rules Administrator and Client Administrator when using SQL 2005 Express.

26475

The Categorization Method is not defined for non-http traffic.

26477

Update the About box in the notification area to show Service Pack version number.

26480

Unable to delete users.

26481

Privacy edition password details are not remembered after upgrade.

26483

Blocking issue for URLs containing second HTTP link within the URL.

26484

Notification e-mail not sent for Override rule.

26485

Error sending reconstructed header to client.

26486

Intermittent blocking for disallowed Web and allowed Image content.

26488

License Count Information is not displayed.

26489

‘Block until categorized’ stops on refresh page.

26490

The ISA Firewall service stops.

26491

Web Filter service starts but does not perform any monitoring.

26492

Site access is not blocked when using the IP address and page level.

26493

Image search blocking can cause an excessive number of email notifications.

26494

Rule e-mail notification times are only correct if your time zone is GMT.

26495

Version 5.5 is unable to change Mobile Filter database connection details if using standard web filter.

26498

Subscription expiration prevents Manual Categorization from working.

26858

For more information, please refer to the SurfControl Knowledge Base. Contact SurfControl Technical Support for further assistance.

Known Issues

Web Filter 5.5 SP1 contains the following known issues:

 

Repairing Web Filter 5.5 SP1

If you perform a repair on your installation of Web Filter 5.5 SP1, the Web Filter service ‘Startup Type’ changes from Automatic to Manual and some Web Filter files are not replaced with their original 5.5 versions. To fix these issues, perform these steps after the repair:

 

1. Restart the Web Filter server.

2. Re-install service pack 1. 

3. Change the Startup Type of the Web Filter service to Automatic.

    To open Services, click Start, point to Settings, and then click Control Panel. Double-click Administrative Tools, and then double-click Services.

4. Start the Web Filter service.

 

AVA White List values overwritten

 

A hotfix was made available for Web Filter for ISA Server 5.5, which introduced white-listing to prevent specific URLs from being scanned by the anti-virus engine. If you previously applied the SWF_v5.5.0_ISA_HF003.exe hot fix, installing SurfControl Web Filter 5.5 SP1 will delete any manually entered URL values from the ‘Whitelist Sites’ registry key. To resolve this issue, perform a backup of the ‘Whitelist Sites’ registry key, before applying Service Pack 1. To perform a backup of the registry key:

 

1. Click Start and Run.

2. Type ‘Regedit’ and click OK.

3. Navigate to [HKEY_LOCAL_MACHINE\SOFTWARE\JSB\SurfControl Scout\Content\AVA]

4. Right-click the AVA registry key and click ‘Export’.

5. Select a destination and type in a file name for the registry file.

6. Click Save.

 

After installing Service Pack 1, double-click the saved registry file to restore the ‘Whitelist Sites’ registry entry.