Release Notes
Revision AMcAfee Data Loss Prevention Endpoint
9.3.416
For use with McAfee ePolicy Orchestrator
Contents
About this release Resolved issues
Installation instructions Known issues
Find product documentation
About this release
This document contains important information about the current release. We strongly recommend that you read the entire document.
This release fixes a set of security vulnerabilities found in the McAfee DLP Endpoint Management tools extension for McAfee ePO. The software package in this release replaces only the McAfee DLP Endpoint Management tools package 9.3.400.23. All other McAfee DLP Endpoint 9.3.400 components remain the same and should be downloaded from the McAfee DLP Endpoint 9.3.400 package. The list of vulnerabilities fixed in this software package can be found in security bulletin SB 10111.
We do not support the automatic upgrade of a pre-release software version. To upgrade to a production release of the software, you must first uninstall the existing version.
Release build — McAfee®
Data Loss Prevention Endpoint (McAfee DLP Endpoint) Management tools software build 9.3.416.4
Purpose
Supported systems
The McAfee DLP Endpoint Management tools extension in this release was developed for use with these McAfee ePO versions.
• McAfee ePO 4.6 or later • McAfee ePO 5.0.1 • McAfee ePO 5.1 or later
The McAfee DLP Endpoint Management tools extension in this release supports these McAfee DLP Endpoint client versions.
• McAfee DLP Endpoint client for Microsoft Windows build 9.3.400.60 • McAfee DLP Endpoint client for OS X build 9.3.400.12
It also supports McAfee DLP Endpoint Diagnostic Tool build 9.3.400.1
The McAfee DLP Endpoint client for Microsoft Windows supported in this release was developed for use with the following Microsoft operating systems.
• Microsoft Windows XP Professional SP3 or later, 32-bit (no support for 64-bit)
Microsoft announced the end of Extended Support for Windows XP SP3 on April 8, 2014. McAfee will continue standard support for McAfee DLP Endpoint 9.3.x on Windows XP until December 31, 2015.
• Windows Vista SP1 or later Enterprise and Business editions, 32-bit • Windows 7 SP1 or later Enterprise and Business editions, 32-bit and 64-bit • Windows 8 and 8.1 or later Enterprise and Professional, 32-bit and 64-bit • Windows Server 2003 R2 SP2 or later, 32-bit and 64-bit
• Windows Server 2008 SP2 or later, 32-bit and 64-bit • Windows Server 2012 and 2012 R2 or later, 64-bit
File System Discovery rules and Network Protection rules are not supported on servers.
Compatible McAfee managed products
This release has been tested for compatibility with the following McAfee managed product versions. • McAfee Agent for Windows 4.6 Patch 3, 4.8, and 5.0
• McAfee®
Application Control (formerly Solidcore) 6.1.3 • McAfee®
File and Removable Media Protection (FRP) (formerly McAfee Endpoint Encryption for Files and Folders) 4.0.1, 4.2, and 4.3
• McAfee®
Drive Encryption (formerly McAfee Endpoint Encryption for PC) 7.0 • McAfee®
Host Intrusion Prevention System 8.0 Patch 4 • McAfee®
Management of Native Encryption (MNE) 2.0 and 2.0.1 • McAfee®
Policy Auditor 6.0 Patch 1 and 6.2 • McAfee®
Risk Advisor 2.7 Patch 2 • McAfee®
Rogue System Detection (RSD) 4.7.0.312
• McAfee® SiteAdvisor® Enterprise 3.5 Patch 2 • McAfee® Virtual Technician 1.1.0 • McAfee® VirusScan®
Enterprise 8.7 Patch 5 and 8.8 Patch 4
Supported software
This release has been tested for compatibility with the following third-party software versions. • Adobe Acrobat Pro, X and XI
• Adobe LiveCycle ES 2 • Adobe Reader 7–11 • Box Sync 3.4.25–4.0.5693
• Citrix XenApp 6.0, 6.5 FP2, 7.5, and 7.6
• Citrix XenDesktop 5.5, 5.6, 7.0, 7.1, 7.5, and 7.6 • Dropbox 2.4.6–3.0.3.0
• Google Drive 1.12.5329.1187–1.3.25.11
• Lotus Notes client software 7.0, 8.0, 8.5.2, 8.5.3, 9.0, and 9.0.1
• Microsoft Active Directory Rights Management Service (AD RMS) 2003, 2008 • Microsoft Internet Explorer 6–11
• Microsoft .NET 3.5 SP 1, 4.0, and 4.5
• Microsoft Office 2003, 2007, 2010, and 2013 SP1 • Microsoft OneDrive 17.0.2015.0811–17.3.1229 • Microsoft Outlook 2003, 2007, 2010, 2013 SP1
Email Storage Discovery Rule (ESDR) is not supported in Microsoft Outlook 2013.
• Microsoft Sharepoint 2007, 2010, and 2013 • Mozilla Firefox 3.6–34.0
• Seclore FileSecure Policy Server 2.29 and later • Seclore Desktop Client 2.29 and later
• Syncplicity 3.4.5.6–3.4.20.19 • Titus Message Classification • Titus Classification for Desktop • TrueCrypt 7.1
Resolved issues
These issues are resolved in this release of the product. For a list of issues fixed in earlier releases, see the Release Notes for the specific release.
Several security vulnerabilities were resolved. (1045307)
The following enhancements were added to resolve these vulnerabilities:
• Access controls added to ensure that protected pages can only be seen by authorized users. • Sanitization of the DLP Policy Name before exporting the policy to HTML.
• Uses POST mode instead of GET to prevent unauthorized database transactions. • Added server-side validation for the activation key.
• Shows the error message in case of revision ID overflow.
Installation instructions
McAfee DLP Endpoint policy console is installed in McAfee ePO. The McAfee DLP Endpoint client is available in two versions, one for Microsoft Windows and one for OS X computers.
There are two policy console installation options:
• HDLP_extension_9_3_400_xx — Contains only the McAfee DLP Endpoint software
• DLPE_Package_9_3_400_xx_y — Contains HDLP_extension_9_3_400_xx bundled with McAfee®
Help Desk 2.0.0 and the McAfee ePO Help systems for both products
The recommended installation of the client software uses the McAfee ePO infrastructure for deployment to the endpoint computers.
For information about installing or upgrading McAfee DLP Endpoint for Windows, see the McAfee Data
Loss Prevention Endpoint Product Guide, version 9.3.400.
For information about installing or upgrading McAfee DLP Endpoint for Mac, see the McAfee Data Loss
Prevention Endpoint Product Guide, version 9.3.150.
You can also deploy McAfee DLP Endpoint client software to your network using third-party enterprise deployment tools such as Microsoft Systems Management Server (SMS) for Microsoft Windows operating systems. For information about installing or upgrading with SMS, see KB59769.
Known issues
For a list of known issues in this product release, see this McAfee KnowledgeBase article: KB83587.
Find product documentation
After a product is released, information about the product is entered into the McAfee online Knowledge Center.
Task
1 Go to the Knowledge Center tab of the McAfee ServicePortal at http://support.mcafee.com.
2 In the Knowledge Base pane, click a content source: • Product Documentation to find user documentation • Technical Articles to find KnowledgeBase articles
3 Select Do not clear my filters.
4 Enter a product, select a version, then click Search to display a list of documents.
Product documentation
Every McAfee product has a comprehensive set of documentation. See this documentation for your product version:
• McAfee Data Loss Prevention Endpoint Release Notes • McAfee Data Loss Prevention Endpoint Product Guide
Help modules are automatically included with the product installation.
Copyright © 2015 McAfee, Inc. www.intelsecurity.com
Intel and the Intel logo are trademarks/registered trademarks of Intel Corporation. McAfee and the McAfee logo are trademarks/ registered trademarks of McAfee, Inc. Other names and brands may be claimed as the property of others.