Release Notes: DynaComm i:filter Release Number: 6.0.0.0 Release Date: January 30, 2009 ======================================================================== Please review this document carefully before installing or running DynaComm i:filter. These notes contain last-minute product information that may affect your use of the product. ======================================================================== Contents This document contains the following sections: 1.0 New 2.0 System Requirements 3.0 Notes 4.0 Fixed/Updated 5.0 Technical Support ======================================================================== 1.0 New in DynaComm i:filter 6.0 * Logging option for both monitors New option enables logging of traffic only when rule evaluation is TRUE * Updated console interface Interface has been updated with new icons and "look" * Destinations database has 13+ million domains ======================================================================== 2.0 System Requirements * For installation of all three components on one system: - Software For a Network Monitor installation: * Microsoft Windows 2000 Professional with SP2 (or higher), or Microsoft Windows 2000 Server with SP2 (or higher), or Microsoft Windows XP with SP1, or Microsoft Windows Server 2003, or Microsoft Windows VISTA, or Microsoft Windows Server 2008 * Microsoft Internet Explorer 6.0 (or higher) For an ISA Server Monitor installation: * Microsoft Windows 2000 Server, or Microsoft Windows Server 2003, or Microsoft Windows Server 2008 * Microsoft ISA Server 2000, or Microsoft ISA Server 2004, or Microsoft ISA Server 2006 * Microsoft Internet Explorer 6.0 (or higher) - Hardware * 1.0 GHz or faster processor * CD-ROM drive * 12 GB free hard drive space * 512 MB total RAM NOTE: For individual component requirements refer to the DynaComm i:filter Administrator Guide. ======================================================================== 3.0 Notes 3.1 Using DynaComm i:filter on a Windows XP/Windows Server 2003/VISTA/ Windows Server 2008 system. When a Windows XP/2003 Server/VISTA/2008 Server system is not part of a domain, the file sharing model is fundamentally different than other versions of Windows. This means that an incoming connection, even if a user name and password is provided, is forced to use the Guest account and has only Guest level access to the share. To allow remote DynaComm i:filter components to connect to a Windows XP, Windows VISTA, Windows Server 2003, Windows 2008 system that is not part of the domain, the following steps must be performed on each client system: Windows XP A. Disable file sharing 1 On the taskbar, right-click Start and select Explore. 2 On the Tools menu, select Folder Options. 3 In the Folder Options dialog, click the View tab. 4 Clear "Use simple file sharing (Recommended)" and click OK. 5 Close explorer. B. Disable firewall 1 On the Start menu, select Control Panel. 2 In Control Panel, double-click Network Connections. 3 In Network Connections, select Local Area Connection. 4 In the Local Area Connection Status dialog on the General tab, click Properties and select the Advanced tab. 5 Clear "Protect my computer and network by limiting or preventing access to this computer from the Internet" and click OK. 6 Close Local Area Connection Status dialog. 7 Close the Network Connections dialog and then close explorer. C. Re-boot the system. Windows Server 2003 A. Disable Guest. 1 On the taskbar click Start, highlight Administrative Tools and then select Local Security Policy. 2 In the explorer pane, expand Local Policies and select Security Options. 3 In the contents pane, a Double-click "Accounts: Guest account status". b On the Local Security Settings tab, select "Disabled" and click OK. c Double-click "Network access: Sharing and security model for local accounts". d On the Local Security Settings tab, select "Classic - local users authenticate as themselves" and click OK. 4 Close the Local Security Settings dialog. B. Disable firewall. 1 On the taskbar,click Start, highlight Control Panel and select Windows Firewall. 2 On the General tab of the Windows Firewall dialog, select "Off" and click OK. C. Re-boot the system. Windows VISTA/Server 2008 A. Disable firewall. 1 On the taskbar, click Start and select Control Panel. 2 On the Control Panel, select Network and Internet. 3 In the Network and Internet dialog under Windows Firewall: a Select "Turn Windows Firewall on or off". b On the General tab of the Windows Firewall Settings dialog, select Off and click Apply. c Close the Windows Firewall Settings dialog. B. Disable file sharing 4 In the Network and Internet dialog under Network and Sharing Center,: a Select "Set up file sharing". b On the Network and Sharing Center dialog under Sharing and Discovery, expand File sharing and select "Turn off file sharing". 5 Click Apply and close the dialog. C. Re-boot the system. 3.2 Installation/Setup/Uninstallation Installation should be performed on the system that is to include the DynaComm i:filter component, i.e., do not use a remote login to perform installations. Refer to the DynaComm i:filter Administrator Guide for installation details and procedures. 3.2.1 Upgrade When performing an upgrade installation, changes must be saved to the Monitor Admin Database before restarting the Network Monitor. To maintain database integrity with the automated update process, upgrade of the Destinations database is recommended even though you may choose to not upgrade the DynaComm i:filter product. 3.2.2 Install Over - DynaComm i:filter 6.0 over DynaComm i:filter 5.1/5.0 Before installing Dynacomm i:filter release 6.0 over release 5.1, the following steps must be performed: 1 Stop the Monitor service. 2 Close the Management Console. 3 Close the Bloodhound console. 4 Contact Support Services to download the "uninstalldriver.exe" file. 5 Copy the "uninstalldriver.exe" file to the FutureSoft\DynaComm ifilter\ folder. 6 Run "uninstalldriver.exe". 7 Re-boot the system. 8 Install DynaComm i:filter release 6.0 over release 5.1. The above steps are only for install over of DynaComm i:filter release 6.0 over release 5.1. These steps must be performed as listed. Refer to the corresponding readme for install over procedures for other releases of DynaComm i:filter. 3.2.3 Removing DynaComm i:filter. The Network Monitor driver must be removed before removing the application and it must be removed through the Windows Control Panel. Removing or editing Registry entries rather than removing the driver through the Windows Control Panel may permanently disable future installations of the driver. See the DynaComm i:filter Administrator Guide for these steps. 3.2.4 Scheduled Jobs After removing DynaComm i:filter (or the Central Database component), DynaComm i:filter scheduled jobs must be removed from the Windows SCHEDULED TASKS area. These jobs/tasks are identified by the naming convention, n-ifschedule, where the "n" is a numeric value (i.e., 1-ifschedule). 3.2.5 Non-monitored HTTPS sites HTTPS sites can be included in the Non-monitored Sites category by doing the following: * For a Network Monitor, use the IP address of the HTTPS site. * For an ISA Server Monitor, include both the domain name and IP address of the HTTPS site. 3.3 Network Monitor Component 3.3.1 Message: "The i:filter Network Monitor service returned service specific error 1". This message is returned for several different errors. Use the Application Event Log to determine the error condition. See the Online Reference for descriptions of error messages. 3.3.2 Multiple Ethernet Adapters in the DynaComm i:filter Network Monitor Machine. The Ethernet adapter that is to perform monitoring functions must be identified to the Network Monitor. The adapter is selected through the Ethernet Adapter Selector that is accessed from the DynaComm i:filter program group. 3.4 Domain Controller Agent (DC Agent) 3.4.1 Ignoring Selected User Accounts To have the Network Monitor ignore (neither filter nor log) activity by selected user accounts, do the following: a Install the Domain Controller Agent on a domain controller system. b Configure the Domain Controller Agent through the DynaComm i:filter Console. c On the Domain Controller system that includes the Domain Controller Agent, set up the following registry key: HKEY_LOCAL_MACHINE\SOFTWARE\FutureSoft\DynaComm i:filter\ DCAgentIgnoredAccounts List each account to be ignored as an empty string value under this registry key with the name of the value being the account name in the form of "DOMAIN\USER", without the quotes. d Reboot the domain controller after modifying the Registry. 3.5 Management Console Component 3.5.1 "Warning: Changes cannot be made. The Central DB is in Read Only mode" is displayed in the Information bar on the Management Console. READ ONLY appears on the Configuration Topic identification bar when: * A second instance of the Management Console is opened, or * The Management Console is connected to another Central Database component. Solution: * Close the new instance and return to the first instance, or * Close the first connection. 3.5.2 "Cannot open Central Log Database. Make sure you have retrieved the Log from ifconsole" is displayed on the Management Console. This message displays when attempting to start Reporting before the first retrieve of the Monitor Log. Solution: Retrieve the Monitor Log and then access Reporting. 3.5.3 "The sniffer log database does not exist" is displayed on the Management Console. This message displays when an attempt to retrieve the Monitor Log is made before the Monitor Log is created. Solution: Start the Network Monitor to create the Monitor Log file and then retrieve the log with the Retrieve Log command. 3.6 Reporting 3.6.1 Moving a Monitored user to the Non-monitored Group. Moving a user into a non-monitored group stops any monitoring and logging of actions for that user. However, any actions prior to the change/move will be included in the reports. 3.6.2 Generating report results. The recommended format for report results is either PDF (portable document format) or RTF (rich text format) due to inconsistencies between the report viewer and certain versions of application programs. PDF and RTF formats most reliably support all viewing features. 3.7 Using Blocking Message with Image Links with Browse Quota When a blocking message that includes image links is used in a Block rule that includes a Browse Quota setting, the images in the Blocking Message will also be blocked when the Browse Quota time expires. As a work around, an Allow rule can be included immediately before the Block rule that accesses a webpage with the blocking message and associated images at an allowed site. 3.8 Scheduled Jobs Any scheduled job that includes a task that uses the Admin database (such as Retrieve Log) requires closing the Console for successful task execution. If the Console is not closed, the specific task fails. 3.9 Destinations Database 3.9.1 Install Version With this release of DynaComm i:filter the Destinations database is approximately 1.2GB in size. Sizing for disk storage will need to include this figure when determining storage requirements. 3.9.2 Evaluation Version The evaluation version of the Destinations database includes a few domains in each category. This database is intended for use with the download version of the DynaComm i:filter product from the FutureSoft web site. This database is updated only when Category changes are made in the product. In this version, the evaluation Destinations Database includes the following web sites: Adult playboy.com hustler.com freeporn.com Advertising Sources doubleclick.com marketbites.com All Business and Consumer Product/Service Information compaq.com hp.com Anonymous Browsing silentsurf.com proxysurf.addr.com Business Conferences, Online Training, Distance Education newseminars.com Charitable Organizations, Non-profit Organizations salvationarmy.org missingkids.org Chat Rooms/Forums airforce-tips.com chatsoccer.com starchats.com Complaint Sites allcritics.com badservices.com Education Organizations & Institutions utexas.edu tamu.edu E-mail hosts hot1.com emailspace.org Employment & Jobs monster.com jobfinder.com Entertainment cbs.com disney.com filmreviews.com Financial Services schwab.com smithbarney.com fidelity.com Gambling alllotto.com vegasusa.com Government nps.gov noaa.gov Hacker/Cracker cheatsource.com cyberarmy.com newworldhacker.org Health/Medical americanheart.org breastcancersupport.org nationaldentalplan.net Information Resources reunionregistries.com lifetips.com Internet Service Providers aol.com prodigy.com Law/Legal Services ameriacounsel.com texaslawyers.com News & Weather abcnews.com cnn.com weather.com Personals/Dating americansingles.com onlinedatingservice.com Political capitolhillblue.com hillnews.com pipebombnews.com Portals & Search Engines yahoo.com infoseek.com google.com Potentially Offensive whatajoke.com zoniehhh.org Professional Organizations apon.org chemheritage.org Recreational Drugs & Drug Paraphernalia paramountimports.com bong-hits.com Religion/Spirituality angelnews.com biblefiles.com Reproductive Health and Sexuality abstain.com allnaturalrx.com naral.com Shareware/Freeware absolutefreestuff.com passkeeper.com Shopping beallsstores.com bid-ebay.com paylessusa.com Sports & Hobbies abcsports.com foxsports.com Terrorism ganglandnews.com Travel & Tourism tourist.com travelco.com etravelnews.net Web Cams, Video-diary bennycam.com weathercamera.com Web Hosting Sites achost.com tripod.com 3.10 Documentation The DynaComm i:filter reference library includes: * Readme (readme.txt file) * Readme for Blocking Messages (rdme_blkmsgs.txt) * DynaComm i:filter Administrator Guide (AG_ifilter.pdf file) * DynaComm i:filter Online Reference (ifconsole.hlp and ifconsole.cnt files) * Bloodhound Utility Online Reference (ifbloodhound.hlp and ifbloodhound.cnt files) * Database Maintenance Tool Online Reference (ifdbtool.hlp and ifdbtool.cnt) * Database Conversion Guide (rdme_dbcnvrt.txt) These items are provided on the installation CD-ROM in the /docs folder. The DynaComm i:filter Online Reference is accessed through the Help Topics selection on the Help menu of the Management Console. Dialog level context-sensitive help is accessed with the F1 key. The Bloodhound and Database Maintenance Tool Online References are accessed with the F1 key. Documentation is updated as various issues are reported and resolved. Current versions of documentation are available for download 24 hours a day, 7 days a week from the FutureSoft web site at www.futuresoft.com/support. ======================================================================== 4.0 Fixed/Updated 4.1 Fixed - Active Directory: "During loading failed to read [report user group] table" error displayed when console is opened after deleting user groups. (RTI: 5974) 4.2 Fixed - Active Directory: Users are not being imported into multiple groups. (RTI: 6671) 4.3 Fixed - Blocked page notification is not sending email notification. (RTI: 7510) 4.4 Fixed - Rule is not triggered when uppercase characters are used in Destinations criteria for a Block/Allow rule. (RTI: 7797) 4.5 Fixed - Active Directory: Imported table structure appears but group members are not imported. (RTI: 7692) 4.6 Fixed - Users table in Monitor database is not merged into the CentralLog database. (RTI: 9602) 4.7 Fixed - Reporting: Limited format options are available through the Notify tab in the Report Properties dialog. (RTI: 9673) 4.8 Fixed - Selected database is not being archived. (RTI: 9759) 4.9 Fixed - Browse Quota is not resetting at the specified time. (RTI: 11631) 4.10 Fixed - Random crashing of Monitor system. (RTI: various) ======================================================================== 5.0 Technical Support For prompt and effective service, please be sure to include your company name, address, any applicable phone (or fax) numbers, name and version number of the product for which you need support. The following technical support options are available for DynaComm i:filter. 5.1 E-mail: support@futuresoft.com 5.2 Telephone: Monday through Friday between 08:00 and 17:00 Central Standard Time (CST) 1.281.588.6868 5.3 FAX: 1.281.496.1090 5.4 Ground Mail: Technical Support Services, 12012 Wickchester Lane, Suite 600, Houston, Texas 77079-1222 5.5 Send files via FTP to ftp.futuresoft.com. ================================== END ================================= Copyright 2009 FutureSoft, Inc. readme.txt DynaComm i:filter 6000 January 30, 2009 sac