Release Notes Revision A McAfee Data Loss Prevention Endpoint 9.4.0 For use with McAfee epolicy Orchestrator Contents About this release New features Enhancements Installation instructions Known issues Find product documentation About this release This document contains important information about the current release. We strongly recommend that you read the entire document. We do not support the automatic upgrade of a pre-release software version. To upgrade to a production release of the software, you must first uninstall the existing version. This release includes the following: McAfee Data Loss Prevention extension for McAfee epolicy Orchestrator (McAfee epo ) 9.4.0.73 The McAfee DLP 9.4.0 extension can be installed in McAfee epo together with either McAfee DLP Endpoint extension 9.3.400 (9.3 Patch 4) or 9.3.500 (9.3 Patch 5). On McAfee epo 5.1.x, however, running McAfee DLP 9.4.0 side by side with McAfee DLP Endpoint 9.3.400 results in errors with queries and reports. In addition, the DLP Incident Manager and DLP Operational Events modules use the same names in both versions, which might cause confusion. For these reasons, upgrading to McAfee DLP Endpoint 9.3.500 extension is required when running extensions side by side in McAfee epo 5.1.x. Install the version 9.3.500 extension before installing the version 9.4.0 extension. Upgrading the endpoint client software to version 9.3.500 is not necessary. 1
McAfee Data Loss Prevention Endpoint (McAfee DLP Endpoint) client for Microsoft Windows build 9.4.0.532 McAfee DLP Endpoint client for OS X build 9.4.0.56 McAfee DLP Endpoint Diagnostic Tool for Windows 9.4.0.532 McAfee Help Desk 2.0.0.129 This release was developed for use with: McAfee epo 4.6.9 and 5.1.1 When running McAfee epo in Microsoft Internet Explorer, use IE version 10.0 or later. McAfee Agent for Windows 4.8 Patch 2 and 5.0 McAfee Agent for Mac 4.6 Patch 3, 4.8 Patch 2, and 5.0 OS X Yosemite 10.10 requires 4.8 Patch 2 or 5.0 only. Supported systems The McAfee DLP Endpoint client for Microsoft Windows in this release was developed for use with the following Microsoft operating systems. Windows 7 SP1 or later Enterprise and Professional editions, 32-bit and 64-bit Windows 8 and 8.1 or later Enterprise and Pro, 32-bit and 64-bit Windows Server 2008 R2 and 2008 SP2 or later, 32-bit and 64-bit Windows Server 2012 and 2012 R2 or later, 64-bit File System Discovery rules and Network Communication Protection rules are not supported on servers. Policy conversion and incident or operational event migration from McAfee DLP Endpoint 9.3.x to 9.4.0 are not currently supported. The McAfee DLP Endpoint client for OS X in this release was developed for use with the following Mac operating systems. OS X Mountain Lion 10.8.5 OS X Mavericks 10.9.5 OS X Yosemite 10.10 Compatible McAfee managed products The McAfee DLP Endpoint client for Windows in this release has been tested for compatibility with the following McAfee managed product versions. McAfee Application Control (formerly Solidcore) 6.1.3 McAfee Client Proxy 1.2 and 2.0 McAfee Data Exchange Layer (DXL) 1.0 and 1.1 McAfee Drive Encryption (formerly McAfee Endpoint Encryption for PC) 7.0 Patch 1 McAfee File and Removable Media Protection (FRP) (formerly McAfee Endpoint Encryption for Files and Folders) 4.3.1 HF 1062118 (4.3.1.138) 2
McAfee Host Intrusion Prevention System 8.0 Patch 5 McAfee Policy Auditor 6.2 McAfee Risk Advisor 2.7 Patch 2 McAfee Rogue System Detection (RSD) 4.7.0.312 McAfee SiteAdvisor Enterprise 3.5 Patch 2 McAfee Threat Intelligence Exchange (TIE) 1.0 McAfee Virtual Technician 1.1.0 McAfee VirusScan Enterprise 8.7 Patch 5 and 8.8 Patch 4 The McAfee DLP Endpoint client for Mac in this release has been tested for compatibility with the following McAfee managed product versions. McAfee Client Proxy 2.0 McAfee Endpoint Encryption for Mac 7.0 McAfee Endpoint Protection for Mac 2.2 McAfee Management of Native Encryption (MNE) 2.1 McAfee VirusScan for Mac 9.7 Supported software This release has been tested for compatibility with the following third-party software versions. Virtualization applications: Citrix XenApp 6.0, 6.5 FP2, 7.5, and 7.6 Citrix Device Rules are not supported when using a separate controller server with XenApp 7.5. Citrix XenDesktop 5.5, 5.6, 7.0, 7.1, 7.5, and 7.6 VMware View 4.6, 5.0, 5.1, 5.2, and 5.3 VMware Hyper-V 6.3.9600 Cloud applications: Box Sync 3.4.25 4.0.5693 Microsoft OneDrive 17.0.2015 17.3.1229 Dropbox 2.4.6 4.0.6073 Syncplicity 3.4.5.6 3.5.2.19 Google Drive 1.12.5329 1.19.8406.6504 Security and encryption applications: Boldon James Email Classifier 3.7.4 Microsoft Active Directory Rights Management Service (AD RMS) 2008, 2012 Seclore FileSecure Policy Server 2.41.0.0 Seclore Desktop Client 2.42.1.0 Titus Message Classification 3.5 3
Titus Classification for Desktop 3.1 Titus Classification Suite 4.3 HF 1 TrueCrypt 7.0.1 Office applications: Adobe Acrobat Pro, X and XI Adobe Reader 7 11 Google Chrome 31.0.1650.63 43.0.2357.81 Lotus Notes client software 8.5.2, 8.5.3, 9.0, and 9.0.1 Microsoft Internet Explorer 8 11 Microsoft Office 2007, 2010, and 2013 SP1 Microsoft Outlook 2007, 2010, 2013 SP1 Microsoft Sharepoint 2007, 2010, and 2013 Mozilla Firefox 34.0 38.0 New features This release of the product includes these new features. Native McAfee epo DLP Policy management tools The McAfee DLP Endpoint console is fully integrated in McAfee epo. It is easier to install and no longer relies on ActiveX. Two new console modules, Classifications and DLP Policy Manager, configure the tagging, classification criteria (formerly known as content category definitions), and rules. Multiple policies New DLP Policy Manager supports easy deployment of multiple McAfee DLP Endpoint policies across your organization. JAWS support The McAfee DLP Endpoint client console and notifications support Job Access With Speech (JAWS) computer screen readers for the visually impaired (Windows client only, English only). Enhancements This release of the product includes these enhancements. The following enhancements apply to the McAfee DLP Endpoint client for Windows only. Protection rules Support for: 4
Google Chrome browser in web post protection rules Block action in application file access protection rules (Skype, Nero, and so forth) Block action in cloud protection rules Advanced mode and V4 printers in printer protection rules; XPS/PDF is now part of the printer protection rule Block and charge with iphone 4 and later using Plug and Play Device rules with Block action Ability to exclude by application process name in removable storage device rules, for example, trusted backup software or malware removal tools Built-in rule sets and classifications To help facilitate first-time deployments, the DLP Policy Manager contains more than 20 built-in Rule Sets that demonstrate typical scenarios. These rule sets can be used as-is, or duplicated and customized as required for specific applications. The Rule Sets use built-in Classifications that can likewise be used as-is, or duplicated and customized as required. Improved connectivity support Rules now offer three connectivity options in place of the previous "online/offline" option. You can define different actions for when the endpoint computer is connected to or disconnected from the corporate network, or when connected using VPN. Different VPN actions apply only to Printer Protection, Network Communication Protection, and Plug and Play Device rules. Classification definitions Proximity between dictionaries, keywords, and advanced patterns (any two of the three) Advanced patterns can count a match string once or multiple times No limit for advanced pattern entries Notification and Business Justification Fully customizable: Button reactions Text Localization options Installation instructions The McAfee DLP extension is installed in McAfee epo. The McAfee DLP Endpoint client is available in two versions, one for Microsoft Windows and one for OS X computers. The recommended installation of the client software uses the McAfee epo infrastructure for deployment to the endpoint computers. You can also deploy McAfee DLP Endpoint client software to your network using third party enterprise deployment tools such as Microsoft Systems Management Server (SMS). 5
For information about installing McAfee DLP Endpoint, see the McAfee Data Loss Prevention Endpoint Product Guide, version 9.4.0. Known issues For a list of known issues in this product release, see this McAfee KnowledgeBase article: KB84509. Find product documentation After a product is released, information about the product is entered into the McAfee online Knowledge Center. Task 1 Go to the Knowledge Center tab of the McAfee ServicePortal at http://support.mcafee.com. 2 In the Knowledge Base pane, click a content source: Product Documentation to find user documentation Technical Articles to find KnowledgeBase articles 3 Select Do not clear my filters. 4 Enter a product, select a version, then click Search to display a list of documents. Product documentation Every McAfee product has a comprehensive set of documentation. See this documentation for your product version: McAfee Data Loss Prevention Endpoint Release Notes McAfee Data Loss Prevention Endpoint Product Guide Help modules are automatically included with the product installation. Copyright 2015 McAfee, Inc. www.intelsecurity.com Intel and the Intel logo are trademarks/registered trademarks of Intel Corporation. McAfee and the McAfee logo are trademarks/ registered trademarks of McAfee, Inc. Other names and brands may be claimed as the property of others. A00