Release Notes: DynaComm i:filter Release Number: 7.0.0.0 Release Date: September 15, 2009 ======================================================================== Please review this document carefully before installing or running DynaComm i:filter. These notes contain last-minute product information that may affect your use of the product. ======================================================================== Contents This document contains the following sections: 1.0 New 2.0 System Requirements 3.0 Notes 4.0 Fixed/Updated 5.0 Technical Support ======================================================================== 1.0 New in DynaComm i:filter 7.0 * Updated Console interface New interface replaces the 6.0 interface. See the Online Help System and the Administrator Guide for information and detailed steps for accessing functions. * New System Status topic provides - Charts of monitored and blocked traffic that can be viewed in real time, or by a selected hour, day, or date interval - Views of Windows system event log entries for DynaComm i:filter - Displays of all reports generated on demand or through a scheduled job * New Advanced topic includes Protocols, File Types, Time Intervals, URL Keywords, and Scheduling as subtopics. Functionality for these areas remains the same. * New Report History topic provides quick access to all reports generated on-demand or through a scheduled job. * New option for rules - Alert Suppression option allows for sending one alert message when an Internet request is denied rather than one message for each item on the requested page. * New options for rules - Override/Password allows display of blocked sites for selected users. - Override option allows display after clicking override selection. - Password option allows display after input of password. * New option for scheduled jobs - option allows for aborting scheduled job and leaving console open when a scheduled job starts with the console open. * Rule Sets has been renamed to "Access Policies" * User Management has been renamed to "Users" ======================================================================== 2.0 System Requirements * For installation of all three components on one system: - Software For a Network Monitor installation: * Microsoft Windows XP with SP2 (or higher), or Microsoft Windows Server 2003 with SP2 (or higher), or Microsoft Windows VISTA with SP2 (or higher), or Microsoft Windows Server 2008 * Microsoft Internet Explorer 6.0 (or higher) For an ISA Server Monitor installation: * Microsoft Windows 2000 Server, or Microsoft Windows Server 2003, or Microsoft Windows Server 2008 * Microsoft ISA Server 2000, or Microsoft ISA Server 2004, or Microsoft ISA Server 2006 * Microsoft Internet Explorer 6.0 (or higher) - Hardware * 2.0 GHz or faster processor * 12 GB free hard drive space * 2 GB total RAM NOTE: For individual component requirements refer to the DynaComm i:filter Administrator Guide. ======================================================================== 3.0 Notes 3.1 Using DynaComm i:filter on a Windows XP/Windows Server 2003/VISTA/ Windows Server 2008 system. When a Windows XP/2003 Server/VISTA/2008 Server system is not part of a domain, the file sharing model is fundamentally different than other versions of Windows. This means that an incoming connection, even if a user name and password is provided, is forced to use the Guest account and has only Guest level access to the share. To allow remote DynaComm i:filter components to connect to a Windows XP, Windows VISTA, Windows Server 2003, Windows 2008 system that is not part of the domain, the following steps must be performed on each client system: Windows XP A. Disable file sharing 1 On the taskbar, right-click Start and select Explore. 2 On the Tools menu, select Folder Options. 3 In the Folder Options dialog, click the View tab. 4 Clear "Use simple file sharing (Recommended)" and click OK. 5 Close explorer. B. Disable firewall 1 On the Start menu, select Control Panel. 2 In Control Panel, double-click Network Connections. 3 In Network Connections, select Local Area Connection. 4 In the Local Area Connection Status dialog on the General tab, click Properties and select the Advanced tab. 5 Clear "Protect my computer and network by limiting or preventing access to this computer from the Internet" and click OK. 6 Close Local Area Connection Status dialog. 7 Close the Network Connections dialog and then close explorer. C. Re-boot the system. Windows Server 2003 A. Disable Guest. 1 On the taskbar click Start, highlight Administrative Tools and then select Local Security Policy. 2 In the explorer pane, expand Local Policies and select Security Options. 3 In the contents pane, a Double-click "Accounts: Guest account status". b On the Local Security Settings tab, select "Disabled" and click OK. c Double-click "Network access: Sharing and security model for local accounts". d On the Local Security Settings tab, select "Classic - local users authenticate as themselves" and click OK. 4 Close the Local Security Settings dialog. B. Disable firewall. 1 On the taskbar,click Start, highlight Control Panel and select Windows Firewall. 2 On the General tab of the Windows Firewall dialog, select "Off" and click OK. C. Re-boot the system. Windows VISTA/Server 2008 A. Disable firewall. 1 On the taskbar, click Start and select Control Panel. 2 On the Control Panel, select Network and Internet. 3 In the Network and Internet dialog under Windows Firewall: a Select "Turn Windows Firewall on or off". b On the General tab of the Windows Firewall Settings dialog, select Off and click Apply. c Close the Windows Firewall Settings dialog. B. Disable file sharing 4 In the Network and Internet dialog under Network and Sharing Center,: a Select "Set up file sharing". b On the Network and Sharing Center dialog under Sharing and Discovery, expand File sharing and select "Turn off file sharing". 5 Click Apply and close the dialog. C. Re-boot the system. 3.2 Installation/Setup/Uninstallation Installation should be performed on the system that is to include the DynaComm i:filter component, i.e., do not use a remote login to perform installations. Refer to the DynaComm i:filter Administrator Guide for installation details and procedures. 3.2.1 Upgrade When performing an upgrade installation, changes must be saved to the Monitor Admin Database before restarting the Network Monitor. To maintain database integrity with the automated update process, upgrade of the Destinations database is recommended even though you may choose to not upgrade the DynaComm i:filter product. 3.2.2 Scheduled Jobs After removing DynaComm i:filter (or the Central Database component), DynaComm i:filter scheduled jobs must be removed from the Windows SCHEDULED TASKS area. These jobs/tasks are identified by the naming convention, n-ifschedule, where the "n" is a numeric value (i.e., 1-ifschedule). 3.3 Network Monitor Component 3.3.1 Message: "The i:filter Network Monitor service returned service specific error 1". This message is returned for several different errors. Use the Application Event Log to determine the error condition. See the Online Reference for descriptions of error messages. 3.3.2 Multiple Ethernet Adapters in the DynaComm i:filter Network Monitor Machine. The Ethernet adapter that is to perform monitoring functions must be identified to the Network Monitor. The adapter is selected through the Ethernet Adapter Selector that is accessed from the DynaComm i:filter program group. 3.3.3 Non-monitored HTTPS sites HTTPS sites can be included in the Non-monitored Sites category by doing the following: * For a Network Monitor, use the IP address of the HTTPS site. * For an ISA Server Monitor, include both the domain name and IP address of the HTTPS site. 3.4 Domain Controller Agent (DC Agent) 3.4.1 Ignoring Selected User Accounts To have the Network Monitor ignore (neither filter nor log) activity by selected user accounts, do the following: a Install the Domain Controller Agent on a domain controller system. b Configure the Domain Controller Agent through the DynaComm i:filter Console. c On the Domain Controller system that includes the Domain Controller Agent, set up the following registry key: HKEY_LOCAL_MACHINE\SOFTWARE\FutureSoft\DynaComm i:filter\ DCAgentIgnoredAccounts List each account to be ignored as an empty string value under this registry key with the name of the value being the account name in the form of "DOMAIN\USER", without the quotes. d Reboot the domain controller after modifying the Registry. 3.5 Management Console Component 3.5.1 "Read Only" is displayed on the status bar on the Management Console. READ ONLY appears when: * A second instance of the Management Console is opened, or * The Management Console is connected to another Central Database component. Solution: * Close the new instance and return to the first instance, or * Close the first connection. 3.5.2 "Cannot open Central Log Database. Make sure you have retrieved the Log from ifconsole" is displayed on the Management Console. This message displays when attempting to start Reporting before the first retrieve of the Monitor Log. Solution: Retrieve the Monitor Log and then access Reporting. 3.5.3 "The sniffer log database does not exist" is displayed on the Management Console. This message displays when an attempt to retrieve the Monitor Log is made before the Monitor Log is created. Solution: Start the Network Monitor to create the Monitor Log file and then retrieve the log with the Retrieve Log command. 3.6 Reporting 3.6.1 Moving a Monitored user to the Non-monitored Group. Moving a user into a non-monitored group stops any monitoring and logging of actions for that user. However, any actions prior to the change/move will be included in the reports. 3.6.2 Generating report results. The recommended format for report results is either PDF (portable document format) or RTF (rich text format) due to inconsistencies between the report viewer and certain versions of application programs. PDF and RTF formats most reliably support all viewing features. 3.7 Using Blocking Message with Image Links with Browse Quota When a blocking message that includes image links is used in a Block rule that includes a Browse Quota setting, the images in the Blocking Message will also be blocked when the Browse Quota time expires. As a work around, an Allow rule can be included immediately before the Block rule that accesses a webpage with the blocking message and associated images at an allowed site. 3.8 Scheduled Jobs Any scheduled job that includes a task that uses the Admin database (such as Retrieve Log) requires closing the Console for successful task execution. If the Console is open when a scheduled job executes the console is automatically closed and the scheduled job executes. To keep the console open and abort the scheduled job, select the "Prevent the scheduler from disconnecting console sessions" option on the Notifications tab in the Options dialog. 3.9 Destinations Database 3.9.1 Install Version With this release of DynaComm i:filter the Destinations database is approximately 1.2GB in size. Sizing for disk storage will need to include this figure when determining storage requirements. 3.9.2 Evaluation Version The evaluation version of the Destinations database includes a few domains in each category. This database is intended for use with the download version of the DynaComm i:filter product from the FutureSoft web site. This database is updated only when Category changes are made in the product. In this version, the evaluation Destinations Database includes the following web sites: Pornography playboy.com hustler.com freeporn.com Web Ads doubleclick.com marketbites.com General Business compaq.com hp.com Anonymizers silentsurf.com proxysurf.addr.com Education/Reference newseminars.com utexas.edu tamu.edu Non-proft/Advocacy/NGO salvationarmy.org missingkids.org Chat airforce-tips.com chatsoccer.com starchats.com Social Opinion allcritics.com badservices.com Web E-mail hot1.com emailspace.org Employment monster.com jobfinder.com General Entertainment cbs.com disney.com filmreviews.com Financial schwab.com smithbarney.com fidelity.com Gambling alllotto.com vegasusa.com Government/Military nps.gov noaa.gov Hacking/Computer Crime cheatsource.com cyberarmy.com newworldhacker.org Health americanheart.org breastcancersupport.org nationaldentalplan.net abstain.com allnaturalrx.com naral.com Public Information reunionregistries.com lifetips.com Internet Services aol.com prodigy.com Legal Services & Reference ameriacounsel.com texaslawyers.com News abcnews.com cnn.com weather.com Dating/Personals americansingles.com onlinedatingservice.com apon.org chemheritage.org Politics/Opinion capitolhillblue.com hillnews.com pipebombnews.com Portal Sites yahoo.com infoseek.com google.com Obscene/Tasteless whatajoke.com zoniehhh.org Illegal Drugs paramountimports.com bong-hits.com Religion/Ideology angelnews.com biblefiles.com Shareware/Freeware absolutefreestuff.com passkeeper.com Shopping beallsstores.com bid-ebay.com paylessusa.com Sports abcsports.com foxsports.com Criminal Activities ganglandnews.com Travel tourist.com travelco.com etravelnews.net Streaming Media bennycam.com weathercamera.com Free Hosting achost.com tripod.com 3.10 Documentation The DynaComm i:filter reference library includes: * Readme (readme.txt file) * Readme for Blocking Messages (rdme_blkmsgs.txt) * DynaComm i:filter Administrator Guide (AG_ifilter.pdf file) * DynaComm i:filter Online Reference (/ifilterhelp/*.*) * Bloodhound Utility Online Reference (ifbloodhound.chm) * Database Maintenance Tool Online Reference (ifdbtool.chm) * Database Conversion Guide (rdme_dbcnvrt.txt) These items are provided on the installation CD-ROM in the /documentation folder. The DynaComm i:filter Online Reference is accessed with Help in the lower topics pane in the Management Console window. The Bloodhound and Database Maintenance Tool Online References are accessed with the F1 key with the respective application window open. Documentation is updated as various issues are reported and resolved. Current versions of documentation are available for download 24 hours a day, 7 days a week from the FutureSoft web site at www.futuresoft.com/support. ======================================================================== 4.0 Technical Support For prompt and effective service, please be sure to include your company name, address, any applicable phone (or fax) numbers, name and version number of the product for which you need support. The following technical support options are available for DynaComm i:filter. 4.1 E-mail: support@futuresoft.com 4.2 Telephone: Monday through Friday between 08:00 and 17:00 Central Standard Time (CST) 1.281.588.6868 4.3 FAX: 1.281.496.1090 4.4 Ground Mail: Technical Support Services, 12012 Wickchester Lane, Suite 600, Houston, Texas 77079-1222 4.5 Send files via FTP to ftp.futuresoft.com. ================================== END ================================= Copyright 2009 FutureSoft, Inc. readme.txt DynaComm i:filter 7000 September 15, 2009 sac