Release Notes Revision A McAfee Data Loss Prevention Endpoint 9.3.416 For use with McAfee epolicy Orchestrator Contents About this release Resolved issues Installation instructions Known issues Find product documentation About this release This document contains important information about the current release. We strongly recommend that you read the entire document. This release fixes a set of security vulnerabilities found in the McAfee DLP Endpoint Management tools extension for McAfee epo. The software package in this release replaces only the McAfee DLP Endpoint Management tools package 9.3.400.23. All other McAfee DLP Endpoint 9.3.400 components remain the same and should be downloaded from the McAfee DLP Endpoint 9.3.400 package. The list of vulnerabilities fixed in this software package can be found in security bulletin SB 10111. We do not support the automatic upgrade of a pre-release software version. To upgrade to a production release of the software, you must first uninstall the existing version. Release build McAfee Data Loss Prevention Endpoint (McAfee DLP Endpoint) Management tools software build 9.3.416.4 Purpose This release resolves several vulnerabilities in the McAfee DLP Endpoint 9.3.4 release. 1
Supported systems The McAfee DLP Endpoint Management tools extension in this release was developed for use with these McAfee epo versions. McAfee epo 4.6 or later McAfee epo 5.0.1 McAfee epo 5.1 or later The McAfee DLP Endpoint Management tools extension in this release supports these McAfee DLP Endpoint client versions. McAfee DLP Endpoint client for Microsoft Windows build 9.3.400.60 McAfee DLP Endpoint client for OS X build 9.3.400.12 It also supports McAfee DLP Endpoint Diagnostic Tool build 9.3.400.1 The McAfee DLP Endpoint client for Microsoft Windows supported in this release was developed for use with the following Microsoft operating systems. Microsoft Windows XP Professional SP3 or later, 32-bit (no support for 64-bit) Microsoft announced the end of Extended Support for Windows XP SP3 on April 8, 2014. McAfee will continue standard support for McAfee DLP Endpoint 9.3.x on Windows XP until December 31, 2015. Windows Vista SP1 or later Enterprise and Business editions, 32-bit Windows 7 SP1 or later Enterprise and Business editions, 32-bit and 64-bit Windows 8 and 8.1 or later Enterprise and Professional, 32-bit and 64-bit Windows Server 2003 R2 SP2 or later, 32-bit and 64-bit Windows Server 2008 SP2 or later, 32-bit and 64-bit Windows Server 2012 and 2012 R2 or later, 64-bit File System Discovery rules and Network Protection rules are not supported on servers. Compatible McAfee managed products This release has been tested for compatibility with the following McAfee managed product versions. McAfee Agent for Windows 4.6 Patch 3, 4.8, and 5.0 McAfee Application Control (formerly Solidcore) 6.1.3 McAfee File and Removable Media Protection (FRP) (formerly McAfee Endpoint Encryption for Files and Folders) 4.0.1, 4.2, and 4.3 McAfee Drive Encryption (formerly McAfee Endpoint Encryption for PC) 7.0 McAfee Host Intrusion Prevention System 8.0 Patch 4 McAfee Management of Native Encryption (MNE) 2.0 and 2.0.1 McAfee Policy Auditor 6.0 Patch 1 and 6.2 McAfee Risk Advisor 2.7 Patch 2 McAfee Rogue System Detection (RSD) 4.7.0.312 2
McAfee SiteAdvisor Enterprise 3.5 Patch 2 McAfee Virtual Technician 1.1.0 McAfee VirusScan Enterprise 8.7 Patch 5 and 8.8 Patch 4 Supported software This release has been tested for compatibility with the following third-party software versions. Adobe Acrobat Pro, X and XI Adobe LiveCycle ES 2 Adobe Reader 7 11 Box Sync 3.4.25 4.0.5693 Citrix XenApp 6.0, 6.5 FP2, 7.5, and 7.6 Citrix XenDesktop 5.5, 5.6, 7.0, 7.1, 7.5, and 7.6 Dropbox 2.4.6 3.0.3.0 Google Drive 1.12.5329.1187 1.3.25.11 Lotus Notes client software 7.0, 8.0, 8.5.2, 8.5.3, 9.0, and 9.0.1 Microsoft Active Directory Rights Management Service (AD RMS) 2003, 2008 Microsoft Internet Explorer 6 11 Microsoft.NET 3.5 SP 1, 4.0, and 4.5 Microsoft Office 2003, 2007, 2010, and 2013 SP1 Microsoft OneDrive 17.0.2015.0811 17.3.1229 Microsoft Outlook 2003, 2007, 2010, 2013 SP1 Email Storage Discovery Rule (ESDR) is not supported in Microsoft Outlook 2013. Microsoft Sharepoint 2007, 2010, and 2013 Mozilla Firefox 3.6 34.0 Seclore FileSecure Policy Server 2.29 and later Seclore Desktop Client 2.29 and later Syncplicity 3.4.5.6 3.4.20.19 Titus Message Classification Titus Classification for Desktop TrueCrypt 7.1 VMware View 4.6, 5.0, 5.1, 5.2, and 5.3 3
Resolved issues These issues are resolved in this release of the product. For a list of issues fixed in earlier releases, see the Release Notes for the specific release. Several security vulnerabilities were resolved. (1045307) The following enhancements were added to resolve these vulnerabilities: Access controls added to ensure that protected pages can only be seen by authorized users. Sanitization of the DLP Policy Name before exporting the policy to HTML. Uses POST mode instead of GET to prevent unauthorized database transactions. Added server-side validation for the activation key. Shows the error message in case of revision ID overflow. Installation instructions McAfee DLP Endpoint policy console is installed in McAfee epo. The McAfee DLP Endpoint client is available in two versions, one for Microsoft Windows and one for OS X computers. There are two policy console installation options: HDLP_extension_9_3_400_xx Contains only the McAfee DLP Endpoint software DLPE_Package_9_3_400_xx_y Contains HDLP_extension_9_3_400_xx bundled with McAfee Help Desk 2.0.0 and the McAfee epo Help systems for both products The recommended installation of the client software uses the McAfee epo infrastructure for deployment to the endpoint computers. For information about installing or upgrading McAfee DLP Endpoint for Windows, see the McAfee Data Loss Prevention Endpoint Product Guide, version 9.3.400. For information about installing or upgrading McAfee DLP Endpoint for Mac, see the McAfee Data Loss Prevention Endpoint Product Guide, version 9.3.150. You can also deploy McAfee DLP Endpoint client software to your network using third-party enterprise deployment tools such as Microsoft Systems Management Server (SMS) for Microsoft Windows operating systems. For information about installing or upgrading with SMS, see KB59769. Known issues For a list of known issues in this product release, see this McAfee KnowledgeBase article: KB83587. 4
Find product documentation After a product is released, information about the product is entered into the McAfee online Knowledge Center. Task 1 Go to the Knowledge Center tab of the McAfee ServicePortal at http://support.mcafee.com. 2 In the Knowledge Base pane, click a content source: Product Documentation to find user documentation Technical Articles to find KnowledgeBase articles 3 Select Do not clear my filters. 4 Enter a product, select a version, then click Search to display a list of documents. Product documentation Every McAfee product has a comprehensive set of documentation. See this documentation for your product version: McAfee Data Loss Prevention Endpoint Release Notes McAfee Data Loss Prevention Endpoint Product Guide Help modules are automatically included with the product installation. Copyright 2015 McAfee, Inc. www.intelsecurity.com Intel and the Intel logo are trademarks/registered trademarks of Intel Corporation. McAfee and the McAfee logo are trademarks/ registered trademarks of McAfee, Inc. Other names and brands may be claimed as the property of others. A00