16-June-2015

Endpoint Protector 4 - Product Update

(Version 4.4.0.8)

Server Version: 4.4.0.8

Improvements:

• Event logs can now be externalized to SIEM hosts
• System Lockdown Actions will exclude - unless otherwise specified - the following device types: Wi-Fi, Keyboard, Bluetooth and USB Modem
• The External Storage option now permits administrators to select what files to externalize

Device Control

• Computers marked as Terminal Servers and all Users will present a new device type at their Rights sections: Thin Client Storage (RDP Storage)

Content Aware Protection

• Transfers that occur on Windows Terminal Servers to and from Thin Client Drives can now be monitored and/or restricted
• The CAP list of monitored applications has been extended to include: MEGA, Yandex Disk, Mail.Ru Agent
• HIPAA Content Aware policies offer full support for Regular Expression Filters
• CAP will now include a file type whitelist available through the submenu from Content Aware Type Whitelist
• E-mail body shadowing is available through File Tracing and Shadowing (*for Outlook and Mozilla Thunderbird)

Bug fixes:

• The option to "Re-read client devices for all computers" will no longer trigger the Logs Rotation feature to turn OFF
• Fixed “Back” button issues that lead to broken pages throughout the interface
• The Group column was not displayed inside the .CSV export for Computers, fixed

Device Control

• User Login and Logout events were not available inside the .CSV export from Logs Report, fixed

Content Aware Protection

• File Shadowing was not performed if the Agent "Mode" option was set to "Stealth Mode", fixed

Software update for downloadable EasyLock 2 application to version 2.0.80.1.

Windows Client Version: 4.4.4.0

Improvements:

• Overall resource usage improvements for Content Aware Protection scanning
• A new device type with "Allow Access" rights by default: Thin Client Storage (RDP Storage)
• Various features to support the Terminal Server and Thin Client Storage (RDP Storage) control functionalities
• CAP Shadowing will now occur if the body or subject of an email is recognized as a threat
• File shadowing will be performed coupled with File Tracing events on "Network Share" devices
• SCSI CD-ROMs device list and eSATA device list has been extended
• The iStorage datAshur USB devices will be recognized as TrustedDevice level 3
• The detection of CAP threats in Office XML documents has been improved

Bug fixes:

• When a user logged-in, two user login events were generated and displayed, fixed
• Notifications for clipboard events were not displayed, fixed
• An issue which prevented the correct IP Address of managed computer to be displayed was fixed
• CAP Shadowing for Outlook email attachments did not work as intended all the time, fixed
• Client Integrity Fail events were generated when client builds without Email Add-ons were installed, fixed
• File Shadowing was not performed after changes were made in a recently shadowed document, fixed

Mac Client Version: 1.4.4.0 (for MAC OS X: 10.5+)

Improvements:

• The notification messages and user interface translations have been improved for most supported languages
• The last ten (10) disconnected devices will be listed with a grey icon inside the client “Offline Device Authorization” section
• The list of devices recognized as "Android Phone" has been extended
• The list of filesystems on which Content Aware policies and File Tracing can be enforced now includes: afpfs, nfs and acfs

Bug fixes:

• Google Drive folder synchronizations caused false-positive CAP events, fixed
• File Shadowing was not performed after changes were made in a recently shadowed document, fixed
• CD/DVD could be burned with device rights set to "Deny Access", fixed