Symantec Encryption Satellite for Windows Version 3.3 Release

Transcription

1 Page 1 of 5 Symantec Encryption Satellite for Windows Version 3.3 Release Notes Thank you for using this Symantec Corporation product. These Release Notes contain important information regarding this release of Symantec Encryption Satellite for Windows. Symantec Corporation strongly recommends you read this entire document. Symantec Corporation welcomes your comments and suggestions. You can use the information in Getting Assistance to contact us. Product: Symantec Encryption Satellite for Windows Version: Warning: Export of this software may be restricted by the U.S. government. Note: To view the most recent version of this document, go to the Products section on the Symantec Corporation Support website. What's Included in This File About Symantec Encryption Satellite Changes in This Release System Requirements Additional Information Getting Assistance Copyright and Trademarks About Symantec Encryption Satellite for Windows Symantec Encryption Satellite for Windows, Powered by PGP Technology automatically encrypts and decrypts and enforces security policy on all messages sent to and from the Symantec Encryption Management Server. Symantec Encryption Satellite provides two-way policy enforcement, extending security to inbound messages originating from outside the organization. It contains virtually no user interface and allows for the centralized management of security policy. Symantec Encryption Satellite for Windows installs on your desktop or laptop computer. It proxies SMTP traffic when you send messages and it proxies POP and IMAP traffic when you retrieve messages from your mail server. Symantec Encryption Satellite for Windows also supports direct MAPI access to Microsoft Exchange Servers and Lotus Notes client access to Domino servers. Changes in This Release This section lists the changes in this release of Symantec Encryption Satellite. What's New in Symantec Encryption Satellite for Windows Version 3.3 Building on Symantec Corporation s proven technology, Symantec Encryption Satellite for Windows includes numerous improvements and the following new and resolved features: Compatibility with Microsoft Windows 8.1 This release supports the installation of Symantec Encryption Satellite on systems running Microsoft Windows 8.1 Pro and Microsoft Windows 8.1 Enterprise, both 32- and 64-bit versions. Note: Symantec Corporation plans to end-of-life the Symantec Encryption Satellite feature in the next major release of Symantec Encryption Management Server.

2 Page 2 of 5 System Requirements The following Microsoft Windows versions: Windows 8.1 Enterprise (32- and 64-bit editions) Windows 8.1 Pro (32- and 64-bit editions) Windows 8 Enterprise (32- and 64-bit editions) Windows 8 Pro (32- and 64-bit editions) Windows 7 (32- and 64-bit editions, including Service Pack 1) Windows Vista (32- and 64-bit editions, including Service Pack 2) Windows XP Professional 32-bit (Service Pack 3) Windows XP Professional 64-bit (Service Pack 2) 512 MB of RAM Note: In order to continue to improve our products and deliver more sophisticated features and performance, we have added support for Microsoft Windows 8.1 operating system in Symantec Encryption Satellite As a result, we are ending Symantec Encryption Satellite support for Microsoft Windows XP and Microsoft Windows Vista with Symantec Encryption Satellite Note: The above operating systems are supported only when all of the latest hot fixes and security patches from Microsoft have been applied. 64 MB hard disk space Internet Explorer 8 through 11 Mozilla Firefox 20 through 23 Functional Requirements Symantec Encryption Satellite requires interaction with a Symantec Encryption Management Server. You must be one of the following types of users for Symantec Encryption Satellite to function: A user internal to an organization that has deployed Symantec Encryption Management Server. You must have connectivity to the server on port 443 (https) and use one of the supported clients. A user external to an organization's Symantec Encryption Management Server. You must have connectivity to the server on port 443 (https). Compatible Client Software Note: In order to continue to improve our products and deliver more sophisticated features and performance, we have added support for Microsoft Exchange Server As a result, we are ending compatibility with Microsoft Outlook 2003 and Exchange Server 2003 with the release of Symantec Encryption Desktop and Symantec Encryption Management Server (including Symantec Gateway Encryption and Symantec Desktop Encryption products). Symantec Encryption Satellite for Windows will, in many cases, work with Internet-standards-based clients other than those listed here. Symantec Corporation, however, does not support the use of other clients. Symantec Encryption Satellite for Windows has been tested with the following clients: Microsoft Outlook 2013 (32- and 64-bit)/Exchange Server 2013 Cumulative Update 2 (CU 2) Microsoft Outlook 2013 (32- and 64-bit)/Exchange Server 2010 (on-premise only) Microsoft Outlook 2013 (32- and 64-bit)/Office 365 Cloud Server Microsoft Outlook 2010 (32- and 64-bit)/Exchange Server 2010 (on-premise only) Microsoft Outlook 2010 (32- and 64-bit)/Office 365 Cloud Server

3 Page 3 of 5 Microsoft Outlook 2007 SP2 (Outlook 12)/Exchange Server 2007 SP2 Microsoft Outlook 2007 SP2 (Outlook 12)/Office 365 Cloud Server Microsoft Outlook 2003 SP3/Exchange Server 2003 SP3 Microsoft Windows Mail Microsoft Outlook Express 6 SP1 Microsoft Windows Live Mail Mozilla Thunderbird 17 Lotus Notes/Domino Server FP2 Lotus Notes/Domino Server Lotus Notes/Domino Server Anti-Virus and other Protection Software Compatibility for Windows Symantec Encryption Satellite has been tested with the following anti-virus products and no issues have been identified: McAfee Host Intrusion Prevention (HIPS) McAfee VirusScan Enterprise 16.8 (McAfee AntiVirus Plus) AVG AntiVirus Trend Micro Titanium Antivirus + Sophos Endpoint Security and Control and Sophos Anti-Virus Symantec Norton Some incompatibilities have been identified with anti-virus products listed in the following sections. In all anti-virus programs, enabling real-time scanning detects any viruses as the or attachments are opened. Therefore, although it is recommended to disable scanning for some of the anti-virus products listed, your is still being scanned and you are still being protected by your anti-virus product from viruses spread via . McAfee VirusScan Enterprise, AntiSpyware Enterprise 8.8 An Access Protection Rule prevents Symantec Encryption Satellite from being installed or uninstalled (various error messages appear). To work around this issue, refer to the McAfee Knowledgebase article KB There is a known incompatibility with PGP NetShare and Microsoft Office 2010 when McAfee version 8.8 patch 2 is installed. For more information, go to the Symantec Knowledgebase and search for TECH202537, Incompatibility between Symantec File Share Encryption (previously PGP NetShare) and McAfee VirusScan Enterprise 8.8 patch 2. [ ] Symantec Norton AntiVirus 11.x through 12.x, Symantec Norton Internet Security 2005, Symantec Norton Internet Security 2006 No special configuration required for MAPI . When using POP , enable Auto-Protect and disable the Anti-Spam and Scanning options. Auto-Protect, which is enabled by default, provides protection against viruses in messages when the message is opened. Disable SSL/TLS in Server Settings in Symantec Encryption Desktop or Symantec Encryption Satellite. (In Symantec Encryption Desktop, select the PGP Messaging Control Box and then choose Messaging > Edit Server Settings. For SSL/TLS, select Do Not Attempt. In Symantec Encryption Satellite, on the Policies tab, select Ignore SSL/TLS.) These versions of Norton AntiVirus prevent all mail clients from using SSL/TLS, regardless of the use of Symantec Encryption software. Citrix Compatibility Symantec Encryption Satellite for Windows has been tested with the following Citrix software:

4 Page 4 of 5 Citrix Presentation Server 4.0 Additional Information Symantec Encryption Desktop Symantec Encryption Desktop Compatibility: Symantec Encryption Desktop includes full support for all Symantec Encryption Satellite features. Symantec Encryption Satellite provides a subset of the features of Symantec Encryption Desktop. If you attempt to install Symantec Encryption Desktop on a system where Symantec Encryption Satellite is installed, Symantec Encryption Desktop overwrites Symantec Encryption Satellite during installation; also, Symantec Encryption Satellite will not install over Symantec Encryption Desktop. Do not install both products on the same system. PGP Desktop version 8.x and earlier users must uninstall PGP Desktop before installing Symantec Encryption Satellite. [NBN] Messaging Outlook on Windows 8 Systems with Secure Boot enabled: account not detected when using Microsoft Outlook on Microsoft Windows 8 64-bit systems installed with Symantec Encryption Satellite. Symantec Encryption is not supported on Microsoft Windows 8 systems when Secure Boot is enabled. [ ] Citrix: To use Symantec Encryption Satellite in Citrix environments, download the installer from the Symantec Encryption Management Server, not through Web Protection. [17289] POP: Verizon POP accounts return an incorrect response when connecting to the POPS/SMTPS ports if you have not purchased Verizon s Silver/Gold services. In this situation you must set the ports manually to 110/25 in the Policy user interface for the account, respectively, to avoid connecting to the normal ports. [NBN] RC2 128-bit S/MIME Messages: PGP Messaging does not support the decryption of RC2 128-bit S/MIMEencrypted . [12140] Lotus Notes: When a user has been disabled, sent by the user is initially blocked. To work around this issue, send the again and is sent in the clear, as expected. [12234] Lotus Notes: When a user has been disabled, and then re-enabled, the user must restart Lotus Notes to send encrypted . [12236] SMTP: Activate SMTP AUTH in your client if it is not currently active. [NBN] S/MIME-signed messages: Symantec Encryption Satellite may not process S/MIME signed s if the signing X.509 certificate is not included in the . The certificate is almost always included with the unless the sender turns off this option. If the message is not processed by Symantec Encryption Satellite, it may still be processed by the mail client application. [9489, 9491] S/MIME and MAPI: S/MIME users who intend to use S/MIME with MAPI should ensure that they have an X.509 certificate attached to their keys; otherwise, it is possible that these messages when saved in the Sent Items folder cannot be processed by Symantec Encryption Satellite. [9858] MAPI/Exchange users and inline objects: If you are a MAPI/Exchange user, and you are sending messages containing embedded content in a proprietary format (inline objects), Symantec Encryption Satellite will secure the complete message. This will cause inline objects to be readable/viewable only by recipients in a MAPI/Exchange environment. [5530] Outlook MAPI: If you are using Outlook in a MAPI environment, use the Messaging Log to confirm the validity of PGP signature annotations in message bodies unless the message was decrypted by your Symantec Encryption Management Server, which will do this for you. [ ] Outlook 2000 MAPI: Composing messages while in offline mode when using Outlook 2000 with MAPI is not supported. [8165] Outlook Connector for Notes: The Outlook Connector for Notes that allows an Outlook client to emulate a Lotus Notes client is not supported. [7567] Policies Specifying the External Server: When specifying the Server for Symantec Encryption Management

5 Page 5 of 5 Server External policies, do not use non-ascii characters for the host name. Non-ASCII characters result in policy retrieval failures. Double-byte character (DBCS) server host names are not supported and appear garbled in the interface. Only ASCII server host names are supported. [ ] Getting Assistance Documentation and Technical Support Online Help is provided as part of Symantec Encryption Satellite for Windows. For more information about using Symantec Encryption Satellite for Windows, including support, contact your Symantec Encryption Management Server administrator. Copyright and Trademarks Copyright (c) 2014 Symantec Corporation. All rights reserved. Symantec, the Symantec Logo, the Checkmark Logo, Norton Zone, PGP, Pretty Good Privacy, and the PGP logo are trademarks or registered trademarks of Symantec Corporation or its affiliates in the U.S. and other countries. Java is a registered trademark of Oracle and/or its affiliates. Other names may be trademarks of their respective owners.