SurfControl Web
Filter Version 5.5 SP3
ReadMe
March 2008
|
SP3 is a service pack for SurfControl Web Filter that preserves the system architecture from version 5.5 and offers important product corrections as well as a valuable set of minor new features requested by customers.
SP3 includes several additions to the user interface, support
for new ports and protocols, enhanced virus protection, new support tools, enhanced
logging, improved error reporting, a sample database, a new import/export
utility, and more.
Customer enhancement requests and product corrections were carefully evaluated and prioritized to ensure a high-quality release. For sites interested in any of the new features or corrections, this release simplifies installation by combining all of the previous service packs and all subsequent hot fixes. You do not have to apply SP1 or SP2 before applying SP3.
This Service
Pack applies to the following versions of SurfControl Web Filter:
·
SurfControl Web
Filter for Windows
·
SurfControl Web
Filter for ISA
·
SurfControl Web
Filter for Citrix
·
SurfControl
Mobile Filter
If you are a Mobile Filter or Citrix customer,
you must apply the service pack to your SurfControl server and then upgrade your
clients. The instructions for deploying clients are available in Knowledge Base
article 2371. Be sure to
install the SP3 client for use with the SP3 server. Having an SP2 version
of the client communicate with SWF 5.5 SP3 leads to unexpected results.
Note that Mobile Filter Client SP3 supports Windows Vista but not Vista
SP1.
If you are installing the service pack on a
Citrix server, be sure to restart the server when you finish the
installation. No Citrix connections
can be made to the server until the server has been restarted.
User
interface changes
There
are several changes to the user interface designed to increase your flexibility
and ease of use:
·
You
can now backup your database before performing a product/database upgrade. A new dialog displays the different
databases and their respective sizes.
·
A
Restart Web Filter option has been added to the Web Filter Service Settings > Start/Stop
Service tab.
·
There
is now a Restart option in the Web Filter icon in the system tray so you can
restart the Web Filter service.
Import
and export utility for manually categorized sites
There is now an
import and export utility for manually categorized sites. This allows you to export manually
categorized sites from your database so you can import them into a new, blank
database. It also allows you to
import sites from a previous database into Web Filter.
Note: after
manually importing categorized sites, you must restart the Web Filter
service.
Support
for new ports and protocols
SP3 supports several
new ports and protocols so you can monitor or block activity on these ports.
These include:
Protocol
Port
File transfer
FTPS (FTP-over-SSL)
989, 990
Games
EVE Online
26000
IM/Chat
IRC
6660-6669
IRCS (IRC-over-SSL)
994
Camfrog
2778, 6005
Eyeball Chat
5500, 5501, 5515
X-IM
5221
Newsgroup
NNTPS (NNTP-over-SSL)
563
New support tools
There is now a tool
in SP3 for capturing support files. You can access it from the Start menu and
provide these files to Customer Services should you require technical
support. Please request support
through our online support
form at www.websense.com/SupportPortal/Contact.aspx.
New diagnostic
performance counters can help diagnose any performance problems you may be
having.
Enhanced
logging
Several
enhancements have been made to Web Filter’s logging
mechanism:
·
All
error states are now logged.
·
Web
Filter now logs a "Received X of Y" message when filtering
fails.
·
Web
Filter now logs performance data.
·
Web
Filter now logs manual or VCA commit success and failure events.
·
There
are now logging modules for
SCFPConnector.dll and SCFPClient.dll.
Improved
error reporting
SP3 includes better
error reporting for database tools failures, and the Real Time Monitor now
displays a
rule for blocked sites so administrators know why their end user was
blocked
Enhanced
virus protection
The McAfee
Anti-Virus engine was updated to Version 5200 in
this release. This upgrades your
Anti-Virus protection to the latest McAfee version.
Live
white list updates
You
can now update
the AV white list without having to stop and start the ISA Firewall
service.
User
interface changes
There
are several changes to the user interface designed to increase your flexibility
and ease of use:
·
From
the MIME Types Restrictions dialog, you can now modify which MIME types the
Anti-Virus (AV) Engine should not scan.
The dialog now accepts wildcards, such as video/*, and up to 128
characters for the specified MIME type.
·
You
can now see what URLs the AV engine is not scanning, and you can add or modify
URLs from the UI.
Improved
performance
The
|
Description |
Issue
Number |
|
Nomad client could not coexist with Web Filter remote administrator installations. |
12828 |
|
Similar names in user-defined where object domains caused unexpected results. |
25237 |
|
When IP Addresses were unmonitored, Web Filter did not record traffic from client IPs, even when UserName resolution was enabled. |
25700 |
|
Web Filter registrations did not support the “+” character in phone numbers. This was passed in the Installation and Scheduler modules. |
25717 |
|
Users were unable to delete a user object from a rule when it had been deleted from AD. |
25795 |
|
Monitored workstations always used default values. Administrators were unable to configure them uniquely. |
26896 |
|
The Rules Administrator intermittently blocked flat file inserts. |
27084 |
|
Web Filter did not categorize all sports sites correctly. |
27481 |
|
FTP sites changed to “uncategorized” when users downloaded content from them. |
27696 |
|
When users simultaneously enabled Protocol Content Scan and BUC, they lost Internet access. |
27832 |
|
The Access denied page did not use “&” or “%” for the ampersand character. |
28618 |
|
The ScEumLoginAgent was unable to resolve the Web Filter Collector name when it exceeded 15 characters. |
28754 |
|
The Firewall service crashed in the ScAdmin.exe AD
object handler. |
28914 |
|
The |
28916 |
|
The ISA Firewall Service crashed due to the scCSFFramework. |
28945 |
|
Web Filter ISA’s Macro Analysis stopped pages with harmless macros. |
29179 |
|
When site names in the file “sbmtuncat-1.txt” contained spaces, VCA submit sites failed. |
29192 |
|
With AVA enabled, Web Filter ISA could not return large files (>64 MB) to the client until the ISA proxy timed out, and it did not log this in the database. |
29215 |
|
The scoutsvc service created memory problems. |
29282 |
|
Network Groups disappeared when users selected Change Groups and picked a specific group. |
29325 |
|
Web Filter was not resolving names when NetWare and Microsoft Name Resolution were enabled. |
29334 |
|
The system crashed randomly. |
29410 |
|
The connection between Web Filter and the ISA server was lost |
29459 |
|
The Subnets tab was not properly filtering all subnets. |
29460 |
|
The Firewall service crashed when attempting to read the AVA white list registry key. |
29461 |
|
The Deny Page sometimes caused Internet browsers to hang when users connected to the Internet through a G3 Data Card. |
29854 |
|
Filtering stopped after users restarted the Web Filter service. |
29917 |
|
BSOD
occurred with Standalone versions of SP2. |
30262 |
|
Skype was
not blocked by Standalone Web Filter. |
30304 |
|
Latest
version of CSF (SWF branch) was incorporated to fix
30232. |
30482 |
|
Avaya
Softphones had no dial tone. |
30819 |
|
Description |
Issue
Number |
|
Data quits
writing to database and Real-Time Monitor does not
connect. |
27226 |
|
Version
5.5 SP2 Web Filter service crashes after scCommit is
run. |
29377 |
|
The new
version of Yahoo Messenger, version 9.0.0.907beta, uses an encrypted
connection (HTTPS) during login. SWF is not able to block this new
version; however, it can still block previous versions such as 8.1.0.421.
Because version 9.0.0.907 is a beta release, this is subject to change in
the future. |
30711 |
|
Google
Talk version 1.0.0.104 uses an encrypted connection (HTTPS) during login.
For this reason, SWF is not able to block it. SWF reports Google Talk
traffic, however, because Google Talk first tries an unencrypted
connection which is blocked by SWF successfully. |
30712 |
|
AIM
6.5.9.1 uses an encrypted connection (HTTPS) during login. SWF is no
longer able to block it. |
30672 |
|
SWF for
Windows cannot block AIM 6.5.9.1.
Same reason as 30672. |
30673 |
|
Privacy
password details not remembered after upgrade. |
25885 |
|
Precise
Bandwidth Controls are not working properly on
ISA |
30473 |
|
Mobile
Filter server 5.5 and Mobile Filter client 5.5 SP3 don’t work
together |
30855 |
Technical
information about Websense products is available 24 hours a day,
including:
·
the latest
release information
·
a searchable
Knowledge Base
·
Show-Me
tutorials
·
product
documents
·
tips
·
answers to
frequently asked questions
·
in-depth
technical papers
Access the Web
site at:
www.websense.com/SupportPortal
For additional
questions, please fill out the online support form at:
www.websense.com/SupportPortal/Contact.aspx
©1996–2008, Websense, Inc. All rights
reserved.
Trademarks
Websense, SurfControl, and Web
Filter are registered trademarks of Websense, Inc., in the