15-January-2018

Endpoint Protector – Product Update

Server Version 5.1.0.0
Windows Client: 4.7.9.6
Mac Client: 1.5.8.9
Linux Client: 1.3.1.4
EasyLock Client: 1.0.2.2

Server Version: 5.1.0.0

Due to the improvements included in this release, it is highly recommended that the Endpoint Protector Server and the Endpoint Protector Client versions are properly correlated!

Improvements:

• To give the Administrator a better overview on the users, additional information like Employee ID, Computer ID, Team, etc. can now be saved, displayed and used in search filters. These can be filled in either directly by each user through the Endpoint Protector Client or by the Administrator, from the Endpoint Protector UI.
• In addition to the standard Device Control Rights, the administrator can create fallback policies for Outside Network and Outside Hours circumstances.
• The Offline Temporary Password section has been improved and provides an enhanced experience for both the users and the Administrator. Changes range from more information in the automatic emails that provide a more seamless process to UI changes to both the Server and the Client. The section has been completely redesigned and additional changes also include:
  
  • The Universal Offline Temporary Password is now available and offers access rights in isolated networks or, in circumstances when quick access is required and the Administrator is not available.
  • The authorization of an Offline Temporary Password can now be restricted also to a specific user or to a user and computer combination, making it more restrictive (or permissive).
  • The Offline Temporary Password Duration offers a customized option, allowing the generation of time based OTP Codes, with a Start/End date and time.
• The Logs Report, File Tracing, File Shadowing, Content Aware Report and Content Aware File Shadowing sections have been improved. Changes are not simply cosmetic and also include multiple enhancements in the backend.
• The Serial Number of a device is now available also in the File Tracing section of Reports and Analysis, improving even further the visibility offered by logs.
• The option to enable Optical Character Recognition has been added and it can be turned on from the Settings section of each entity (Global, Groups, Computers, etc.).
• Admin Roles have been extended. The Administrators Groups section has been added, providing the direction towards an ACL (Access Control List).
• Improved protection for registry keys associated with our agent.
• The option to enable or disable metadata scanning during content inspection was added for ZIPs, PDFs and Office Files (docx, xlsx, pptx, doc, xls, ppt).
• Extended predefined content detection for Credit Cards with 2017 patterns. Additionally, MIR and China UnionPay card formats have been added.
• The option to define the number of scans for archives in archives is now available. This level of in-depth content inspection can now be set between 2 and 8 times.

Bug fixes:

• For networks with multiple time zones where larger time differences between Server Time, Client Time were detected, alert and logs discrepancies occurred. Fixed.
• Fixed access violation error that occurred on Windows 10 computers, running Outlook 2016 and using other MS products to send files (e.g. attaching an Excel spreadsheet to an e-mail by using the Share > Email option).
• Logs exported to SIEM solutions would sometimes not show information like MAC Address of the machine. Fixed.
• Several fixes have been made to Department detection.

Device Control

• Correlated with the above, the Computers & Edit Computer and Users & Edit User sections have been updated to the new UI and provide additional information.
• The Outside Network Policies are now available. They provide the option to apply a different device access policy when outside the defined network.
• The Outside Hours Policies are now available. They provide the option to apply a different device access policy when outside the normal working ours. The Outside Hours Policies can be used to define Time Based Device Control Rights.
• Devices like Realtek USB 2.0 Card Reader, USB Smart Card Readers that use Aladdin Knowledge Systems drivers, Rainbow USB tokens are now managed.

Content Aware Protection

• The module has been updated to the new UI, improving the user experience.
• The option to switch content inspection from all Storage Devices to only specific Custom Classes has been added.
• Improved data inspection for OLE compound documents
• Additional PIIs have been added, including Albania, Bulgaria, Croatia, Indonesia, Ireland, Italy, Latvia Lithuania, Norway and Peru IDs, Luxemburg SSN and VAT ID, Hungary SSN, Slovenia VAT ID, Peru TAX ID, etc.
• The list of supported file types has been extended and .CSR and. GO can now also be managed.
• Depending on the OS, where applicable, file transfers though AnyDesk, GoToAssist, VNC and WeTransfer are now managed.
• Improvements to the content detection mechanism mainly to reduce false positive detection events.

eDiscovery

• The Automatic Scanning feature has been added, providing the option to schedule a single scan or re-occurring scans (every week or every month).

Windows Client Version: 4.7.9.6

Improvements:

• A new UI was implemented, providing a better user experience and a more seamless Offline Temporary Password request and device authorization process.
• Additional User and Computer details like Employee ID and Computer ID have been added.
• A Justification box when making an OTP request has been added for the user, providing more information for the Admin or, simply offering visibility in case of later audits.
• The Universal Offline Temporary Password has been added.
• Support for Offline Temporary Passwords based also on users is now available.
• Services protection have been extended.
• Updated some of the libraries used.
• Improved detection for USB network devices such as Qualcom's Snapdragon X7 LTE modem.
• Added support for several card readers like Realtek USB 2.0 Card Reader.
• Improved detection of wired network connection present and subsequent device restrictions.
• Additional USB tokens are now supported.
• Extended Endpoint Protector Client translations/localizations.

Bug fixes:

• Depending on the OS distribution and Client version, the Notifier appeared twice in the System Tray. Fixed.
• Fixed incorrect user notification message displayed for Allowed TD1+ devices.
• The reported file size for items inside archives was not always accurate. Fixed.
• Fixed a bug that allowed uploading of files from a mapped network share drive via Chrome when Enable Advanced Printer and MTP Scanning setting was enabled.

Mac Client Version: 1.5.8.9

Improvements:

• A new UI was implemented, providing a better user experience and a more seamless Offline Temporary Password request and device authorization process.
• Additional User and Computer details like Employee ID and Computer ID have been added.
• A Justification box when making an OTP request has been added for the user, providing more information for the Admin or, simply offering visibility in case of later audits.
• The Universal Offline Temporary Password has been added.
• Support for Offline Temporary Passwords based also on users is now available.
• Services protection have been extended.
• Updated some of the libraries used.
• Improved detection for Thunderbolt connected storage devices.
• Support for .VMDK files was added.
• Improved content detection for files in Box Sync folders, reducing the amount of unwanted logs generated due to false positives.
• Extended Endpoint Protector Client translations/localizations.

Linux Client Version: 1.3.1.4

Improvements:

• A new UI was implemented, providing a better user experience and a more seamless Offline Temporary Password request and device authorization process.
• Additional User and Computer details like Employee ID and Computer ID have been added.
• A Justification box when making an OTP request has been added for the user, providing more information for the Admin or, simply offering visibility in case of later audits.
• The Universal Offline Temporary Password has been added.
• Support for Offline Temporary Passwords based also on users is now available.
• Services protection have been extended.
• Updated some of the libraries used.
• Extended Endpoint Protector Client translations/localizations.

EasyLock Enforced Encryption Client: 1.0.2.2

Improvements:

• Management of devices connected through hubs or containing multiple volumes was improved.
• The option to add and manage favorite folder paths is now available, providing quicker access to locations used regularly.
• Licenses valid for 3 or 4 years have been added.
• The file type is now also displayed when browsing within the EasyLock encrypted area.
• The login screen has been updated.
• Updated message boxes, offering an improved experience for the user.

Bug fixes:

• Due to core changes within the macOS 10.13 (High Sierra), dragging and dropping files within EasyLock using the finder no longer worked. Fixed.
• In some cases, when multiple USB devices were plugged in at the same time, it was possible to browse within EasyLock and see content from the blocked devices. Fixed.
• The folder tree displayed for browsing within EasyLock was not collapsing after use. Fixed.
• Various bug fixes and improvements for overall stability, addressing issues reported by users.