Release Notes: DynaComm PointGuard Release Number: 8.0.0.0 Release Date: November 31, 2008 ======================================================================== Please review this document carefully before installing or running DynaComm PointGuard. These notes contain last-minute product information that may affect your use of the product. ======================================================================== Contents This document contains the following sections: 1.0 What's New 2.0 System Requirements 3.0 Notes 4.0 Fixed 5.0 Technical Support ======================================================================== 1.0 What's New/Changed 1.1 Spyware plug-in has changed. Spyware plug-in has been renamed to AntiSpyware/AntiVirus to reflect the inclusion of anti-vius capabilities. Spyware and virus infection attempts are monitored and blocked in real-time through the establishment of a Spyware/Virus Protection policy item which is added to a system policy. Spyware/virus protection uses the Sunbelt Threat database to check changes to files, Windows registry, and processes against known spyware/virus components. When an infection attempt is detected the infection items can be cleaned and/or the user can be alerted of the threat. Spyware Scans has been renamed Spyware/Virus Protection. Scans search for both spyware and virus components. Scan management and use is unchanged. Anti-Spyware system-event window has been renamed to AntiSpyware/AntiVirus and includes server alerts from Spyware/Virus Protection scans and Spyware/Virus Protection policy items. See Note 3.9 for precautions on using other anti-virus packages with PointGuard Spyware/Virus Protection policy items. 1.2 Run Report in all system event windows creates the PointGuard System Events report. System Events report includes a summary table of all events by plug-in type, and detailed listings for each event. Data included in report reflects data displayed in window. 1.3 Report Manager (Spyware/Virus reports) Three report types are available to produce reports for spyware/virus scans, real-time spyware/virus alerts, or all displayed events. New reports/report properties can be saved, printed, or exported to a file. Saved reports can be re-run at any time, report properties modified, or removed through the DynaComm PointGuard Notification Reports dialog. ======================================================================== 2.0 System Requirements Important: All client and server systems must meet the following requirements or better. Certain DynaComm PointGuard functions will not perform or may produce unexpected results if lower standards are in effect. 2.1 Server Component * Microsoft Windows 2003 Server Standard Edition with SP2 (or higher) with IIS 6.0 (or higher) * Pentium 4 2GHz or faster processor * 2 GB total RAM * 50 GB free hard drive space 2.2 Client Component * Microsoft Windows 2000 with SP4 with v2 (9/13/2007) and Update Rollup 1 (or higher), or Microsoft Windows XP with SP2 (or higher), or Microsoft Windows 2003 Server with SP2 Microsoft Windows Vista Ultimate (32-bit) Microsoft Windows Vista Business (64-bit) * 1.0 GHz or faster processor * 512 MB total RAM * 500 MB free hard drive space Note: Only file scans can be run on NT client systems. Spyware and Active Protection is not supported on NT clients. Note: A Windows 2000 client system must have update Rollup 1 for SP4 v2 applied; otherwise, installation of the File Management plug-in produces errors and will not function. Refer to Microsoft Knowledge Base article KB891861 for more information. This update can be installed with Add/Remove from the Control Panel. ======================================================================== 3.0 Notes 3.1 Install/Setup/Uninstall Refer to the DynaComm PointGuard Admininstrator Guide for installation details and procedures. 3.1.1 Install: User Selector & Run As Dialogs During installation the Account Authorized to Access DynaComm PointGuard Console dialog is displayed. This dialog is informational only and alerts you to the fact that the current logon has been added to the user group that can access the DynaComm PointGuard console. However, you must log off and log on again to do so. The Listening Service Account dialog is displayed after the Account Authorized dialog. The user account entered through this dialog is the account that deploys the client service and runs file scans and system policy sessions. This account must have: 1) access to the machine(s) to be scanned/monitored, and 2) full administrator rights on every machine(s) to be scanned/monitored. 3.1.2 Install/Uninstall: Client Service Component Logging off/on is recommended when the install or maintenance program displays the option to do so. Logging off/on after installation ensures that all install or uninstall functions have been successfully completed. Logging off/on after removal ensures that the client service is removed from memory. 3.1.3 Installing on a Domain Controller The ASP.NET account is used to retrieve database updates from the FutureSoft web site. This account has limited rights and will fail to start a required process to perform the update when DynaComm PointGuard is installed on a domain controller. A separate account with the necessary rights must be created to work in a domain controller installation. See the following for more information: http://support.microsoft.com/?id=315158#appliesto http://msdn.microsoft.com/library/default.asp?url=/library/en-us/dnnetsec/html/ secnetht01.asp 3.1.4 Installing client service on XP Home Edition System The client service must be installed manually on an XP Home Edition system. Copy the \Program Files\Futuresoft\DynaComm iscan client\clientinstall.msi file to the client machine and run the file. Or, use Active Directory to install the file. See Appendix H Active Directory Deployment of the DynaComm PointGuard Client in the Administrator Guide for these steps. 3.1.5 Uninstall: Removing Scheduled Jobs. After removing DynaComm PointGuard, PointGuard scheduled jobs must be removed from the Windows SCHEDULED TASKS area. These jobs/tasks are identified by the naming convention, ndynacomm pointguard, where "n" is a numeric value (i.e., 1dynacomm pointguard). 3.1.6 Microsoft Windows Vista Clients Three power plans are available for the purpose of conserving energy on a Windows Vista system: Balanced, Power Saver, and High Performance. The default setting for High Performance is set to "Never." The remaining two power plans are set to place the system into Hibernate mode after 20 minutes. Hibernation shuts down the Internet card which stops communications between the client system and the DynaComm PointGuard server. Changing the power settings to "Never" for all power plans will allow successful communications between client and server systems to continue at all times. Power Plan settings are accessed through: Start > Control Panel > System Maintenance > Power Options. 3.2 Install Over DynaComm PointGuard 8.0.0.0 installs over DynaComm PointGuard 7.5.0.0. 3.2.1 Plug-in Installation All plug-ins are installed to all client systems. However, no predefined policies are available for the Eventlog Monitoring plug-in. Therefore the Event Log Monitor system windows is not available until an Eventlog Monitor policy item is added to a system policy and pushed to one or more client systems. 3.2.2 Client systems update Update of client systems may be lengthy depending on network speed. Update of clients includes uninstalling the client component, installing the new client component and all plug-ins, and updating the database. 3.2.3 Installing over DynaComm i:scan Do not use DynaComm PointGuard 8.0.0.0 to install over any version of DynaComm i:scan. 3.3 Exceeding Server I/O Resources Running multiple, concurrent file scans on a server system may result in the situation where the request to process network I/O items to the hard disk exceeds available system resources. The system typically presents one of several event messages and may automatically reboot. Resolution could include limiting the number of file scans and/or a variety of actions taken with the server operating system. If you should experience this situation, see Microsoft Knowledge Base article QQ317249 on the Microsoft Product Support Services website (http://support.microsoft.com/) for background information and troubleshooting procedures. 3.4 Scanning/Monitoring Windows NT 4.0/Windows NT 4.0 Server The server component cannot be installed on a Windows NT 4.0 or Windows 4.0 Server system. However, file scans can be performed on these systems by using remote scanning processes. Remote scanning processes for Adware/Spyware scans are not supported. All Adware/Spyware scans use distributed scanning processes. 3.5 Scanning a Windows XP Professional Machine When a Windows XP Professional Machine is not part of a domain, the simple file sharing model is fundamentally different than other versions of Windows. This means that an incoming connection, even if a user name and password is provided, is forced to use the Guest account and has only Guest level access to the share. To allow DynaComm PointGuard to connect and perform remote scanning (scanning is performed on the server/console) the shared drives on a Windows XP Professional machine that is not part of the domain, the following steps must be performed on each Windows XP machine: 1 Disable the "use simple file sharing" option by: a On the taskbar, right-click Start and select Explore. b On the Tools menu, select Folder Options. c In the Folder Options dialog, click the View tab. d Clear Use simple file sharing (Recommended). e In the Folder Options dialog, click OK. f Close Explorer. 2 Disable the Internet Connection Firewall by: a On the Start menu, select Control Panel. b In Control Panel, double-click Network Connections. c In Network Connections, select Local Area Connection. d In the Local Area Connection Status dialog on the General tab, click Properties. e In the Local Area Connection Properties dialog, select the Advanced tab. f Clear the "Protect my computer and network by limiting or preventing access to this computer from the Internet" option. g Click OK. h Close Local Area Connection Status dialog. i Close the Network Connections dialog. j Close Explorer. 3 Re-boot the machine. 3.6 Database Update Service The console must be closed before a scheduled task to update the database can be performed. This is also true when database options on the Settings tab of the Options dialog are enabled. 3.7 Viewing changed permissions on NT system File permissions can be changed through a file scan to all "ALLOWED", all "DENIED" or permissions can be mixed. If permissions are changed to either all ALLOWED or DENIED, permissions are displayed correctly in all operating systems. An error message appears when display of mixed permissions is requested on a Windows NT system. 3.8 Display of System Scan status Occasionally, scan status data does not display in the System Scan window for a system scan included in a scheduled job. This occurs when the scheduled job starts when the console is open. To correct, close and reopen the console. 3.9 Use of Spyware/Virus Protection policy item with other anti-virus products Remove all other antivirus products from a client system before applying a system policy that includes a spyware/virus protection policy item. Driver-level software used in antivirus packages conflict with one another and results in a tremendously slow system and/or other problems. 3.10 Documentation The DynaComm PointGuard reference library consists of electronic material that includes: * DyanComm PointGuard Readme (readme.txt file) * DynaComm PointGuard Administrator Guide (AG_PointGuard.pdf) * DynaComm PointGuard Online Reference (appshell.hlp and appshell.cnt) * DynaComm PointGuard Report Viewer Online Reference (isViewer.hlp) All above items are provided on the installation CD-ROM in the /Documentation folder. The most current copy of reference materials is available for download 24 hours a day, 7 days a week from the FutureSoft web site at: http://www.dciseries.com/products/iscan/document.asp. Send questions and comments about the documentation to: docs@futuresoft.com. ======================================================================== 4.0 Fixed 4.1 Specified folder path(s) incorrect in Admin Guide. Document has been updated (#10786) 4.2 Documentation addresses two possible PointGuard consoles to scan one client. Document has been updated (#10788) 4.3 Device management policy item rule continues to block users after rule has been changed to exclude users. Fixed. (#10804) 4.4 File management policy item set to block access to all files creates a 0KB file. File driver blocks file before it is opened. (#11350) 4.5 Event log policy icon background turns black when added to a system policy. Fixed. (#11368) 4.6 Text is cut off in Purge dialog. Fixed. (#11369) 4.7 Active protection policy item does not block IE toolbar when enabled on a Vista client. Fixed. (#11370) 4.8 Spyware scan reports indicates presence of infections but does not display supporting data detail. Fixed. (#11406) 4.9 RFE: New report to show all cleaned infections. New report available through Report Manager displays all infections removed from client systems. (#11413) 4.10 Use of Exceptions option in device management policy item is ignored. Fixed. (#11479) 4.11 Creating a P2P File Sharing system scan did not include the File Sharing category in scan configuration. Fixed. (#11496) 4.12 Settings tab option (Options dialog) does not work (Automatically push new instalation to clients). Fixed. Installing a new client through Client Management always pushes installation to client Installing a new client through inclusion in scan uses the option setting. (#11541) ======================================================================== 5.0 Technical Support When requesting support services, please provide your company name, address, phone number and product name and version number. 5.1 North America, South America, Asia and Pacific Rim * E-mail: support@futuresoft.com * Telephone: 1.281.588.6868 Monday through Friday between 08:00 and 17:00 Central Standard Time (CST) * FAX: 1.281.496.1090 * Ground Mail: Technical Support Services 12012 Wickchester Lane, Suite 600 Houston, Texas 77079-1222 5.2 Send files via FTP to ftp.futuresoft.com. ============================== END ==================================== Copyright 2008 FutureSoft, Inc. readme.txt DynaComm PointGuard 8000 November 31, 2008 sac