Symantec Endpoint Protection MP1a and MP1 Release Notes

Transcription

1 Symantec Endpoint Protection MP1a and MP1 Release Notes

2 Symantec Endpoint Protection Release Notes Product version: MP1a / MP1 Documentation version: 1 This document was last updated on: August 03, 2015 Legal Notice Copyright 2015 Symantec Corporation. All rights reserved. Symantec, the Symantec Logo, the Checkmark Logo, and LiveUpdate are trademarks or registered trademarks of Symantec Corporation or its affiliates in the U.S. and other countries. Other names may be trademarks of their respective owners. The product described in this document is distributed under licenses restricting its use, copying, distribution, and decompilation/reverse engineering. No part of this document may be reproduced in any form by any means without prior written authorization of Symantec Corporation and its licensors, if any. THE DOCUMENTATION IS PROVIDED "AS IS" AND ALL EXPRESS OR IMPLIED CONDITIONS, REPRESENTATIONS AND WARRANTIES, INCLUDING ANY IMPLIED WARRANTY OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE OR NON-INFRINGEMENT, ARE DISCLAIMED, EXCEPT TO THE EXTENT THAT SUCH DISCLAIMERS ARE HELD TO BE LEGALLY INVALID. SYMANTEC CORPORATION SHALL NOT BE LIABLE FOR INCIDENTAL OR CONSEQUENTIAL DAMAGES IN CONNECTION WITH THE FURNISHING, PERFORMANCE, OR USE OF THIS DOCUMENTATION. THE INFORMATION CONTAINED IN THIS DOCUMENTATION IS SUBJECT TO CHANGE WITHOUT NOTICE. Symantec Corporation 350 Ellis Street Mountain View, CA

3 Technical Support Contacting Technical Support Symantec Technical Support maintains support centers globally. Technical Support s primary role is to respond to specific queries about product features and functionality. The Technical Support group also creates content for our online Knowledge Base. The Technical Support group works collaboratively with the other functional areas within Symantec to answer your questions in a timely fashion. For example, the Technical Support group works with Product Engineering and Symantec Security Response to provide alerting services and virus definition updates. Symantec s support offerings include the following: A range of support options that give you the flexibility to select the right amount of service for any size organization Telephone and/or Web-based support that provides rapid response and up-to-the-minute information Upgrade assurance that delivers software upgrades Global support purchased on a regional business hours or 24 hours a day, 7 days a week basis Premium service offerings that include Account Management Services For information about Symantec s support offerings, you can visit our website at the following URL: All support services will be delivered in accordance with your support agreement and the then-current enterprise technical support policy. Customers with a current support agreement may access Technical Support information at the following URL: Before contacting Technical Support, make sure you have satisfied the system requirements that are listed in your product documentation. Also, you should be at the computer on which the problem occurred, in case it is necessary to replicate the problem. When you contact Technical Support, please have the following information available: Product release level Hardware information

4 Available memory, disk space, and NIC information Operating system Version and patch level Network topology Router, gateway, and IP address information Problem description: Error messages and log files Troubleshooting that was performed before contacting Symantec Recent software configuration changes and network changes Licensing and registration Customer service If your Symantec product requires registration or a license key, access our technical support Web page at the following URL: Customer service information is available at the following URL: Customer Service is available to assist with non-technical questions, such as the following types of issues: Questions regarding product licensing or serialization Product registration updates, such as address or name changes General product information (features, language availability, local dealers) Latest information about product updates and upgrades Information about upgrade assurance and support contracts Information about the Symantec Buying Programs Advice about Symantec's technical support options Nontechnical presales questions Issues that are related to CD-ROMs, DVDs, or manuals

5 Support agreement resources If you want to contact Symantec regarding an existing support agreement, please contact the support agreement administration team for your region as follows: Asia-Pacific and Japan Europe, Middle-East, and Africa North America and Latin America

6 This document includes the following topics: About this document What's new in Symantec Endpoint Protection MP1 Known issues and workarounds System requirements for Symantec Endpoint Protection Supported upgrade paths to Symantec Endpoint Protection Where to get more information About this document This document contains information for Symantec Endpoint Protection. All references to MP1 apply to MP1a. Review this document before you install the product or before you call Technical Support. The release notes describe known issues and their workarounds that are not included in the standard documentation or the context-sensitive Help. See Known issues and workarounds on page 7. See System requirements for Symantec Endpoint Protection on page 9. What's new in Symantec Endpoint Protection MP1 This version of Symantec Endpoint Protection includes new features in the following areas:

7 Known issues and workarounds 7 System requirements The Symantec Endpoint Protection client adds support for Windows 10. For support requirements and other details, see Endpoint Protection support for Windows 10. Symantec Endpoint Protection Manager adds database support for SQL Server 2012 SP2. Symantec Endpoint Protection Manager adds browser support for Google Chrome through , and for Firefox through Known issues and workarounds The issues in this section apply to Symantec Endpoint Protection MP1. See Symantec Endpoint Protection Manager issues on page 8. See Client issues on page 8. You can view a list of resolved issues for this release at the following location: New fixes in Symantec Endpoint Protection MP1 Installation, upgrade, and migration issues This section contains information about installation, upgrades, and migration. After an upgrade to MP1, an upgrade to Windows 10 prompts you to uninstall Symantec Endpoint Protection ( ) If you upgrade Symantec Endpoint Protection from or earlier to MP1 and then immediately begin an upgrade to Windows 10, you may see an error message that you must first uninstall Symantec Endpoint Protection. This issue occurs because additional Symantec Endpoint Protection upgrade processes have not completed. Therefore, the Windows upgrade detects product files from an earlier Symantec Endpoint Protection version that does not support Windows 10. To prevent this issue, do one of the following tasks before you upgrade the operating system to Windows 10: Uninstall the earlier version of Symantec Endpoint Protection. Upgrade to MP1 using the following command-line switches: setup /v"l*v c:\log.txt MIGRATIONDELAY=1 MAXMIGRATIONDELAY=1"

8 Known issues and workarounds 8 If you already upgraded to MP1, check the file roru.log to verify the completion of the upgrade. The last line in the log should display the date and time, and the word "Finished." You can locate this file by default in \ProgramData\Symantec\Symantec Endpoint Protection\CurrentVersion\Data\Install\Logs\ (for Windows XP: \Documents and Settings\All Users\Application Data\Symantec\Symantec Endpoint Protection\CurrentVersion\Data\Install\Logs\). If you encounter this message, do not uninstall Symantec Endpoint Protection as prompted. Instead, cancel the Windows 10 upgrade. Check the file roru.log as previously indicated, and when the upgrade processes complete, begin the Windows 10 upgrade again. Symantec Endpoint Protection Manager issues This section contains information about Symantec Endpoint Protection Manager. Web console access does not work with Microsoft Edge ( , , ) Web console access to Symantec Endpoint Protection Manager MP1 does not work with Microsoft Edge, which is a browser introduced with Windows 10. To work around this issue, use a supported browser, such as Internet Explorer. See System requirements for Symantec Endpoint Protection Manager on page 10. Client issues This section contains information about the Symantec Endpoint Protection client. IPS driver does not unload after a restart on Windows Embedded ( ) After you install and restart the Symantec Endpoint Protection client on a Windows Embedded-based device, you see a notification that indicates that intrusion prevention is restored. This event occurs on a device where the file-based write filter (FBWF) is enabled and on which you did not immediately run LiveUpdate. The Symantec Endpoint Protection System log indicates that the network intrusion prevention driver failed to load, but then was restored and fully enabled. When this event occurs, you do not need to take any further action.

9 System requirements for Symantec Endpoint Protection 9 Browser intrusion protection does not work with Microsoft Edge ( ) Browser intrusion protection in Symantec Endpoint Protection MP1 does not work with Microsoft Edge, which is a browser introduced with Windows 10. To work around this issue, use a supported browser, such as Internet Explorer. See Supported Browser versions for Browser Intrusion Prevention. System requirements for Symantec Endpoint Protection In general, the system requirements for Symantec Endpoint Protection Manager and the Symantec Endpoint Protection clients are the same as those of the operating systems on which they are supported. For the most current system requirements, see: Release Notes and System Requirements for all versions of Symantec Endpoint Protection and Symantec Network Access Control See System requirements for Symantec Endpoint Protection Manager on page 10. See System requirements for the Symantec Endpoint Protection client for Windows on page 11. See System requirements for the Symantec Endpoint Protection client for Windows Embedded on page 13. See System requirements for the Symantec Endpoint Protection client for Mac on page 14. See System requirements for the Symantec Endpoint Protection client for Linux on page 14. See Supported virtual installations and virtualization products on page 16.

10 System requirements for Symantec Endpoint Protection 10 System requirements for Symantec Endpoint Protection Manager Table 1-1 Symantec Endpoint Protection Manager system requirements Component Requirements Processor 32-bit processor: Intel Pentium 4 or equivalent (minimum dual core or hyper-threading recommended) 64-bit processor: Intel Pentium 4 with x86-64 support or equivalent (minimum dual core or hyper-threading recommended) Note: Intel Itanium IA-64 processors are not supported. Physical RAM 2 GB RAM available minimum; 4 GB or more available recommended. Note: Your Symantec Endpoint Protection Manager server may require additional RAM depending on the RAM requirements of other applications that are already installed. Hard drive 16 GB available minimum (100 GB recommended) for the management server. 40 GB available minimum (200 GB recommended) for the management server and a locally installed database. Display 1024 x 768 or larger Operating system (desktop) Windows XP (32-bit, SP3; 64-bit, all SPs; all editions except Starter and Home; all patches applied, including Internet Explorer) Windows 7 (32-bit, 64-bit; RTM and SP1; all editions except Starter and Home) Windows 8 (32-bit, 64-bit) Windows 8.1 (32-bit, 64-bit) Windows 8.1 update for April (2014) (32-bit, 64-bit) Windows 8.1 update for August (2014) (32-bit, 64-bit) Operating system (server) Windows Server 2003 (32-bit, 64-bit; R2, SP1 or later; all patches applied, including Internet Explorer) Windows Small Business Server 2003 (32-bit; all patches applied, including Internet Explorer) Windows Server 2008 (32-bit, 64-bit; R2, RTM, SP1 and SP2) Windows Small Business Server 2008 (64-bit) Windows Essential Business Server 2008 (64-bit) Windows Small Business Server 2011 (64-bit) Windows Server 2012 Windows Server 2012 R2 Windows Server 2012 R2 update for April (2014) Windows Server 2012 R2 update for August (2014)

11 System requirements for Symantec Endpoint Protection 11 Table 1-1 Symantec Endpoint Protection Manager system requirements (continued) Component Web browser Requirements Microsoft Internet Explorer 8, 9, 10, 11 Mozilla Firefox 5.x through 39.0 Google Chrome, through For a list of supported browsers for Browser Intrusion Prevention, see: Supported Browser versions for Browser Intrusion Prevention Note: This Symantec Endpoint Protection Manager version manages clients earlier than version 12.1, regardless of the client operating system. However, support for Symantec Endpoint Protection 11.0.x ended January 5, For more information, see: Symantec Endpoint Protection 11.0.x End of Support Life The Symantec Endpoint Protection Manager includes an embedded database. You may also choose to use one of the following versions of Microsoft SQL Server: SQL Server 2005, SP4 SQL Server 2008, through SP4 SQL Server 2008 R2, through SP3 SQL Server 2012, through SP2 SQL Server 2014 See Supported virtual installations and virtualization products on page 16. System requirements for the Symantec Endpoint Protection client for Windows Table 1-2 Symantec Endpoint Protection client for Windows system requirements Component Requirements Processor 32-bit processor: 1 GHz Intel Pentium III or equivalent minimum (Intel Pentium 4 or equivalent recommended) 64-bit processor: 2 GHz Pentium 4 with x86-64 support or equivalent minimum Note: Itanium processors are not supported.

12 System requirements for Symantec Endpoint Protection 12 Table 1-2 Symantec Endpoint Protection client for Windows system requirements (continued) Component Physical RAM Hard drive Display Requirements 512 MB (1 GB recommended), or higher if required by the operating system 1.8 GB of available hard disk space for the installation; additional space is required for content and logs Note: Space requirements are based on NTFS file systems. 800 x 600 or larger Operating system (desktop) Windows XP Home or Professional (32-bit, SP3; 64-bit, all SPs) Windows XP Embedded (SP3) Windows Vista (32-bit, 64-bit) Windows 7 (32-bit, 64-bit; RTM and SP1) Windows 7 Embedded Standard Windows 8 (32-bit, 64-bit) Windows 8 Embedded (32-bit) Windows 8.1 (32-bit, 64-bit), including Windows To Go Windows 8.1 update for April (2014) (32-bit, 64-bit) Windows 8.1 update for August (2014) (32-bit, 64-bit) Windows 8.1 Embedded (32-bit) Windows 10 (32-bit, 64-bit) See System requirements for the Symantec Endpoint Protection client for Windows Embedded on page 13. Operating system (server) Browser Intrusion Prevention Windows Server 2003 (32-bit, 64-bit; R2, SP1 or later) Windows Small Business Server 2003 (32-bit) Windows Server 2008 (32-bit, 64-bit; R2, SP1, and SP2) Windows Small Business Server 2008 (64-bit) Windows Essential Business Server 2008 (64-bit) Windows Small Business Server 2011 (64-bit) Windows Server 2012 Windows Server 2012 R2 Windows Server 2012 R2 update for April (2014) Windows Server 2012 R2 update for August (2014) Browser Intrusion Prevention support is based on the version of the Client Intrusion Detection System (CIDS) engine. For more information, see: Supported Browser versions for Browser Intrusion Prevention for Symantec Endpoint Protection 12.1.x

13 System requirements for Symantec Endpoint Protection 13 See Supported virtual installations and virtualization products on page 16. System requirements for the Symantec Endpoint Protection client for Windows Embedded Table 1-3 Symantec Endpoint Protection client for Windows Embedded system requirements Component Processor Physical RAM Hard drive Requirements 1 GHz Intel Pentium 256 MB 450 MB of available hard disk space Embedded operating system Required minimum components Templates Windows Embedded Standard (WES) 2009 (32-bit, SP3) Windows Embedded POSReady 2009 (32-bit, SP3) Windows Embedded Point of Service (WEPOS) (32-bit, SP3) Windows Embedded Standard 7 (32- and 64-bit) Windows Embedded POSReady 7 (32- and 64-bit) Windows Embedded Enterprise 7 (32- and 64-bit) Windows Embedded 8 Standard (32- and 64-bit) Windows Embedded 8.1 Industry Pro (32- and 64-bit) Windows Embedded 8.1 Industry Enterprise (32- and 64-bit) Windows Embedded 8.1 Pro (32- and 64-bit) Filter Manager (FltMgr.sys) Performance Data Helper (pdh.dll) Windows Installer Service FBA: Driver Signing (applies only to XP-based Embedded) WinLogon (applies only to XP-based Embedded) Application Compatibility (Default) Digital Signage Industrial Automation IE, Media Player, RDP Set Top Box Thin Client The Minimum Configuration template is not supported. The Enhanced Write Filter (EWF) and the Unified Write Filter (UWF) are not supported. The recommended write filter is the File Based Write Filter (FBWF) installed along with the Registry Filter.

14 System requirements for Symantec Endpoint Protection 14 For more information, see: Symantec Endpoint Protection support for Windows Embedded See Supported virtual installations and virtualization products on page 16. System requirements for the Symantec Endpoint Protection client for Mac Table 1-4 Symantec Endpoint Protection client for Mac system requirements Component Processor Physical RAM Hard drive Display Operating system Requirements 64-Bit Intel Core 2 Duo or later 2 GB of RAM 1 GB of available hard disk space for the installation 800 x 600 Mac OS X 10.8, 10.9, System requirements for the Symantec Endpoint Protection client for Linux Table 1-5 Symantec Endpoint Protection client for Linux system requirements Component Requirements Hardware Intel Pentium 4 (2 GHz) or higher processor 1 GB of RAM 7 GB of available hard disk space

15 System requirements for Symantec Endpoint Protection 15 Table 1-5 Symantec Endpoint Protection client for Linux system requirements (continued) Component Requirements Operating systems CentOS 6U4, 6U5; 32-bit and 64-bit Debian Squeeze; 32-bit and 64-bit Fedora 16, 17; 32-bit and 64-bit Novell Open Enterprise Server (OES) 2 SP2 and 2 SP3 running SUSE Linux Enterprise Server (SLES) 10 SP3; 32-bit and 64-bit Novell Open Enterprise Server (OES) 11 and 11 SP1 running SUSE Linux Enterprise Server (SLES) 11 SP1 and SP2; 64-bit Oracle Linux (OEL) 5U8, 5U9, 6U2, 6U4, 6U5; 64-bit Red Hat Enterprise Linux Server (RHEL) 5U7-5U11, 6U2-6U6, 7, 7.1; 32-bit and 64-bit SUSE Linux Enterprise Server (SLES) 10 SP3, 10 SP4, 11 SP1-11 SP3; 32-bit and 64-bit SUSE Linux Enterprise Desktop (SLED) 10 SP3, 10 SP4, 11 SP1-11 SP3; 32-bit and 64-bit Ubuntu Server 11.10, 12.04, , 13.04; 64-bit Ubuntu Desktop 11.10, 12.04, , 13.04; 64-bit For a list of supported operating system kernels, see: Supported Linux kernels for Symantec Endpoint Protection Graphical desktop environments You can use the following graphical desktop environments to view the Symantec Endpoint Protection client's graphical user interface: KDE Gnome

16 System requirements for Symantec Endpoint Protection 16 Table 1-5 Symantec Endpoint Protection client for Linux system requirements (continued) Component Requirements Other environmental requirements Oracle Java 1.5 or later; Java 7 or later recommended. This installation requires superuser privileges. Unlimited Strength Java Cryptography Extension (JCE) You must install the Unlimited Strength Java Cryptography Extension policy files to match your version of Java. This installation requires superuser privileges. You can download the installation files under Additional Resources from the following Oracle website: i686-based dependent packages on 64-bit computers Many of the executable files in the Symantec Endpoint Protection client for Linux are 32-bit programs. For 64-bit computers, you must install the i686-based dependent packages before you install the Symantec Endpoint Protection client for Linux. If you have not already installed the i686-based dependent packages, you can install them by command line. This installation requires superuser privileges, which the following commands demonstrate with sudo: For Red Hat-based distributions: sudo yum install glibc.i686 libgcc.i686 libx11.i686 For Debian-based distributions: sudo apt-get install ia32-libs For Ubuntu-based distributions: sudo apt-get install libx11-6:i386 libgcc1:i386 libc6:i386 See Supported virtual installations and virtualization products on page 16. Supported virtual installations and virtualization products You use the Symantec Endpoint Protection clients to protect the supported operating systems that run in the virtual environments. You can also install and manage Symantec Endpoint Protection Manager on the supported operating systems that run in virtual environments. You install Symantec Endpoint Protection on the guest operating system, not the host. Table 1-6 lists the supported virtualization products.

17 Supported upgrade paths to Symantec Endpoint Protection 17 Table 1-6 Supported virtualization products Symantec software Symantec Endpoint Protection Manager, console, and embedded database components Symantec Endpoint Protection client software for Windows and Linux Virtualization product Windows Azure Amazon WorkSpaces VMware WS 5.0 (workstation) or later VMware GSX 3.2 (enterprise) or later VMware ESX 2.5 (workstation) or later VMware ESXi Microsoft Virtual Server 2005 Microsoft Enterprise Desktop Virtualization (MED-V), which includes Windows XP mode Windows Server 2008 Hyper-V Windows Server 2012 Hyper-V Windows Server 2012 R2 Hyper-V Citrix XenServer 5.6 or later Virtual Box, supplied by Oracle Windows Azure Amazon WorkSpaces VMware WS 5.0 (workstation) or later VMware GSX 3.2 (enterprise) or later VMware ESX 2.5 (workstation) or later VMware ESXi Microsoft Virtual Server 2005 Microsoft Enterprise Desktop Virtualization (MED-V), which includes Windows XP mode Windows Server 2008 Hyper-V Windows Server 2012 Hyper-V Windows Server 2012 R2 Hyper-V Citrix XenServer 5.6 or later Virtual Box, supplied by Oracle Supported upgrade paths to Symantec Endpoint Protection Windows client and management server The following Symantec Endpoint Protection Manager versions and Symantec Endpoint Protection Windows client versions can upgrade directly to MP1: (RTM)

18 Supported upgrade paths to Symantec Endpoint Protection Release Update 1 (RU1) Release Update 1, Maintenance Patch 1 (RU1 MP1) Release Update 2 (RU2) Release Update 2, Maintenance Patch 1 (RU2 MP1) Release Update 3 (RU3) Release Update 4 (RU4) Release Update 4a (RU4a) Release Update 4, Maintenance Patch 1 (RU4 MP1) Release Update 4, Maintenance Patch 1a (RU4 MP1a) Release Update 4, Maintenance Patch 1b (RU4 MP1b) Release Update 5 (RU5) Release Update 6 (RU6) Note: Symantec Endpoint Protection no longer ships with Small Business Edition, which reached end of life (EOL) in May, Small Business Edition 12.1 customers can use a tool to migrate to the cloud-based Symantec Endpoint Protection Small Business Edition. For more information, see: Migrating to Symantec Endpoint Protection Small Business Edition Mac client The following Symantec Endpoint Protection client for Mac versions can upgrade directly to MP1: (RTM) Release Update 1 (RU1) Release Update 2 (RU2) Release Update 4 (RU4) Release Update 5 (RU5) Release Update 6 (RU6) Note: The Symantec Endpoint Protection client for Mac did not update for Release Update 3 (RU3).

19 Supported upgrade paths to Symantec Endpoint Protection 19 Linux client The following Symantec Endpoint Protection client for Linux version can upgrade directly to MP1: Release Update 5 (RU5) Release Update 6 (RU6) You can only migrate Symantec AntiVirus for Linux directly to Symantec Endpoint Protection for Linux. You must first uninstall all other versions of Symantec AntiVirus for Linux. You cannot migrate a managed client to an unmanaged client. Unsupported upgrade paths You cannot migrate to Symantec Endpoint Protection from all Symantec products. You must uninstall the following products before you install the Symantec Endpoint Protection MP1 client: The legacy Symantec products Symantec Endpoint Protection 11, Symantec Endpoint Protection Small Business Edition 12.0, Symantec AntiVirus, and Symantec Client Security All Symantec Norton products Symantec Endpoint Protection for Windows XP Embedded 5.1 Downgrade paths are not supported. For example, if you want to migrate from the latest version of Symantec Endpoint Protection to , you must first uninstall the latest version. Supported upgrades to Windows 10 with Symantec Endpoint Protection installed You can upgrade to Windows 10 with Symantec Endpoint Protection MP1 installed. However, you must first update Virus and Spyware Protection definitions to July 27, 2015, or later. Definitions as of this date include an update to the Eraser engine ( ) that is required for Windows 10 compatibility. You must uninstall earlier versions of Symantec Endpoint Protection. The operating system upgrade stops if it detects an earlier version of Symantec Endpoint Protection. The following operating system upgrade paths are supported with MP1 installed: Windows 8.1 to Windows 10 Windows 8 to Windows 10 Windows 7 to Windows 10

20 Where to get more information 20 Note: Windows 7 does not include Early Launch Antimalware (ELAM). Therefore, the Symantec Endpoint Protection ELAM component is not enabled, and does not enable after you upgrade to Windows 10 with Symantec Endpoint Protection installed. Your protection level is the same as it was with Windows 7. To allow Symantec Endpoint Protection to recognize ELAM and enable the Symantec Endpoint Protection ELAM component, you must uninstall and reinstall Symantec Endpoint Protection. Repairing the installation does not accomplish this task. Where to get more information Table 1-7 displays the websites where you can get best practices, troubleshooting information, and other resources to help you use the product. Table 1-7 Symantec websites Types of information Trial versions Web address Trialware Manuals and documentation updates Product guides for all versions of Symantec Endpoint Protection (English) Symantec Endpoint Protection (other languages) Technical Support Includes the public knowledge base, product release details, updates and patches, and contact options for support. Endpoint Protection Technical Support Virus and other threat information and updates Free online technical training Symantec Educational Services Symantec Connect forums Security Response SymantecTV Symantec Endpoint Security Training Courses Endpoint Protection (AntiVirus)