|
|
> Release Notes for iPrism v5.0 (PDF)
St. Bernard Software® is pleased to announce the release of version 5.0 for the iPrism Internet Filtering Appliance. iPrism® v5.0 contains several new features and enhancements. Please read the following
Filtering
- Google® Thumbnail filtering – prevents thumbnails from being displayed in Google searches if images are from sites that violate policy
- Anonymizer Support - Detect proxy servers, UltraSurf™ client added (requires hotfix to enable)
Reporting
- Supports mERS - Managed ERS (requires hotfix to enable)
- Run reports in the background delivered via email or FTP – fire and forget reporting
- Progress status on scheduled reports – accurate status on reports as they are being built in the background
- Enhanced reporting performance - Faster maintenance, duration was cut from 3~8 hours to 3 minutes, allowing more reports to be scheduled.
Configuration
- Mobile Filtering - Enforce web access via external port
- Global policy viewer and validation tools
- Lock ACL – Enforcement of a top level policy that can not be overridden
- Delegated Administration – Rights, Roles, Responsibilities
- Delegate entire policy management to any user
- Delegate subsets of policy management to user by network or user groups ("Partitions")
- Delegate administration privileges by partition
Authentication
- Enhanced auto-login capability in Windows authentication
- Easy to deploy login scripts
- Policy and reporting based on username for IM/P2P traffic
- Enhanced integration with LDAP Tree
- Auto-login support for Novell environments
- Easier policy management with group mapping
- Administrative privileges for LDAP users
- Encrypted communications (SSL/TLS)
System
- Upgrades - Improved upgrade experience including health check and scheduled upgrades
- For clustered configurations, Central Management Synchronization will make sure that all iPrism appliances are synchronized throughout the upgrade process
Rating and Categories
- iARP™ - Automated Rating Protocol
- Automatically sends the most frequently accessed unrated URLs automatically to the iGuard™ team
- Allow users to exclude internal traffic easily
- Entirely automated – once enabled you will receive updates on sites auto submitted with their rating
- 9 New Categories – (note: be sure to check policies after upgrading to take advantage of these new categories)
- Society
- Recreation
- Web logs
- Social Networking
- Special Interest
- Internet
- Portals
- Image Host
- File Host
- Peer to Peer
- Education
- Extended Local Categories
- Added 10 new local categories
- Customizable descriptions
Configuration
- Bug:5499 Config restore incorrectly appends safesearch tag
- Bug:5500 Central Mgmt allows sync across different versions
- Bug:3067 confgen AUTH.pm doesn't generate defprofile entry correctly in ldap_client.conf
- Bug:934 Kansas/1013: Restore of iPrism backup can cause GUI and iPrism to hang.
- Bug:706 iPrism fails to save configuration when applet was opened twice in same browser
- Bug:943 kansas/1019: Report causes IE 6 parse/script error.
- Bug:967 KANSAS/1025: Cancelling iPrisms request to run config software may cause confusion
- Bug:1188 nevada/1181: Admin UI applet fails to load if Domain Controller is not online.
- Bug:5989 data deletion does not mark the session as dirty
- Bug:1627 iPrism will not import Tab delimited user databases
- Bug:1729 Install wizard does not pickup networks settings of iPrism after a default restore
- Bug:5900 Window Privilege list does not get updated when admin profile is deleted from another panel/dialog.
- Bug:6016 Web Start does not work with JRE6
- Bug:5999 DA: Authentication settings by super user not preserved among network partitions.
- Bug:5746 Able to enter a Filter Exception with no name
- Bug:5754 iPrism does not FTP to non Microsoft FTP servers
- Bug:1781 Outdated filter list can prevent gui upgrade
- Bug:4760 Detect and warn about incorrect IP address ranges
- Bug:5185 html viewer needed to read "Self-check Diagnostic" reports
- Bug:5501 Central Mgmt allows sync across different versions
- Bug:5636 4.200 Central Mgmt eventually locks up slave systems
- Bug:5767 TUNNEL watchdog triggers central management every 2-3 minutes
- Bug:5423 Central Mgmt timeout value 30 seconds is too short
- Bug:1742 granting multiple access request causes error
- Bug:5373 Filter manager import doesn't check for categories
- Bug:6117 Filter manager should take care of duplicate custom filters.
- Bug:5401 checkurl() rejects urls with % in the location path (% not in domain)
- Bug:5594 HTML Template Manager breaks long custom HTML
- Bug:1520 Clicking Java Applet Installer for iPrism Manager causes error in Opera
- Bug:1590 Nevada/1466 -- iPrism Manager cannot be uninstalled on Mac OSX platform
- Bug:453 Customer text on Override Request Page
- Bug:3522 Allow longer overrides as a substitute for lack of user based filtering
Filtering
- Bug:1375 Custom Filter Options Menu needs Error Correction
- Bug:1646 I am able to proxy to an iPrism from the external side but the external checkbox is not checked
- Bug:5763 tedtester buffer error, web access blocked
- Bug:5913 sredir log gets into reporting syslog
- Bug:5304 SafeSearch does not apply the correct filtering parameters in the URL string sent to the search server.
- Bug:5814 Erratic profile assignment if log in as the same username but different ip
- Bug:6035 Safesearch for msn no longer works
- Bug:5330 TED should handle P2P category from rating
- Bug:1114 Feature Request: Ability to rewrite URLs
- Bug:1070 grant access to the requesting user or IP address
- Bug:5840 LDAP filtering - ted
- Bug:6205 syd handle UNKNOWN traffic improperly
- Bug:5749 File descriptor leak in syd
- Bug:4845 nonauthenticatable https sometimes alters google talk blocking
- Bug:5433 ISA 2004 HTTP compression
- Bug:1785 iPrism IP address can be captured on webserver
- Bug:5599 the filter exception feature is disabled by noauth filter exception
- Bug:5740 Proxypac script doesn't read port correctly
Reporting
- Bug:5455 Database does not function after upgrade
- Bug:5552 Too many files in /slice2/events/rds breaks db_save.pl
- Bug:5420 db_nightly time very long on M3100
- Bug:5627 VACUUM speed slow (Maybe DROP INDEX/VACUUM/INDEX)
- Bug:5702 Need to handle DataBase VACUUM gracefully
- Bug:5685 Reporting system won't work if nader.bad and nader.core files exist
- Bug:4992 Database start/stop/start error
- Bug:5042 Reporting system does not make sure data is in the DB before a query
- Bug:4911 restore can fill disk and cause lockup
- Bug:4987 Restore aborts when bad data seen.
- Bug:5219 Failure to deliver reports via FTP with bogus chdir error
- Bug:5943 [Coverity] Reporting backend C++ code cleanup
- Bug:5997 Real Time Monitor not showing correct time after DST (2-456) hotfix
- Bug:5601 nader writes out errors to /slice2 instead of /var/log.
- Bug:5971 SQL_ASCII as encoding of reporting database can cause Exception
- Bug:6101 Powering off the box while Vacuum is in progress triggers "Slice2 Init"
- Bug:6275 event log export uploads only the first file
- Bug:5084 Changing the date backward will result is bogus data
- Bug:5213 Do not add new records to obsolete table "category_list"
- Bug:5275 Make summary generation faster
- Bug:5589 Internal test scripts need update
- Bug:5317 Stop sending reports after first failure
- Bug:5046 TopDomains code slow
- Bug:4765 In email alerts, replace fired with another word in the email notification.
- Bug:1571 Nevada/1454: 'Data Error: Offset is larger than number of entries.' if rows to show is increased during report processing.
- Bug:1636 discrepancy between Network Usage and Detailed reports
- Bug:5583 the word monitor is misspelled
- Bug:5121 Records are omitted from report with override options Current Workstation & Following Network
- Bug:5217 IMP2P Detailed Report truncates report data without warning
- Bug:5258 Web stat by user drill down by category have incorrect total count
- Bug:5268 Scheduled Reports: User cannot edit the FTP path (field is missing)
- Bug:4088 Column sorting when selecting a report not inituative / too complicated
- Bug:5757 reporting shouldn't through exception if there is an Invalid character in a table
- Bug:5020 Interactive Reports and RTM should handle non-standard URLs
- Bug:581 Multiple Sorting Options for Detailed Report
- Bug:4704 Add ability to run reports for multiple users
- Bug:740 Introduce quench for firing triggers
Authentication
- Bug:5742 Authd leaks sockets, causes eventual system lockup
- Bug:1296 Auto-Login incompatibility with Novell Client on Windows 2000
- Bug:4970 A few minutes after performing domain join profile and privilege mapping results in "group not found" notice.
- Bug:5730 iPrism does not support profile names with spaces
- Bug:753 NTLM : Allow low ASCII, non alpha-numeric characters in password
- Bug:592 LDAP subquery would benefit from profile names supporting spaces
System
- Bug:5451 Patch OpenSSL for CVE-2006-4339
- Bug:5452 Patch BIND for CVE-2006-4095, CVE-2006-4096
- Bug:4485 /binary partition close to capacity
- Bug:5683 No auth exceptions in squid.conf do not survive reboot
- Bug:5760 Missing variable (DESTROY) format in rc.sql
- Bug:5699 Release iPrism 4.210 to support new m3100-R inventory
- Bug:6083 System might not boot if fsck fails on /binary vnode
- Bug:5959 Report model revision number and ROHS flag over IUS
- Bug:5985 Add support to detect new m500 drive
- Bug:6194 Support TYAN Motherboard change for M500R
- Bug:5543 couldn't load HFDB message after installing HF2-438
- Bug:5537 Can't uninstall hotfix without communication to update servers.
- Bug:1658 hotfix initialization logic locks data too aggressively.
- Bug:5460 Enlarge hotfix size limit
- Bug:5629 Large HF installs causes startup to fail to mount /binary read only
- Bug:5617 Enhancement: Download Percentage in hotfix stats page
- Bug:6006 Confgen reconfigure with WWCP router same as default network gateway
- Bug:5961 SYD Core during PDB Overflow Copy to Userland
- Bug:5927 Tomahawk does not check for NULL return from mdup in 2 places
- Bug:5449 Upgrade Apache from 1.3.31 to 1.3.37
- Bug:5450 Upgrade mod_ssl package from 2.8.19 to 2.8.28
- Bug:5453 Upgrade PHP from 4.3.8 to 4.4.4
- Bug:5644 4.2 to 5.0 upgrade should clean up /sysp & /rootfs
- Bug:5630 Upgrade log files should include timestamp
- Bug:5534 provide fallback in IUSCLIENT in case iPrism cannot perform any DNS
- Bug:5612 IUSclient should evaluate HTTP response code for reqests
- Bug:5790 Updated time zones for daylight savings time change
- Bug:5578 Self-check in Diagnostics shows the same output for Interface Errors and Interface Utilization
- Bug:1051 rtlogger should not block when sending trigger emails to avoid DNS/SMTP related timeouts
Technical Support - USA, Canada, Pacific Rim and Latin America
Hours of Support - Pacific Time
7:00 am – 4:00 pm, Excluding Holidays
Tel: 1-858-676-5050
Fax: 1-858-676-5055
Email: iprism-support@stbernard.com
Technical Support - Europe, Middle East, Africa
Hours of Support - UTC
08:30 – 17:30, Excluding Holidays
Tel: +44-1276-401642
Fax: +44-1276-684479
Email: support@uk.stbernard.com
iPrism v5.0 Documentation
> Installation and Configuration Guide (PDF)
> M3100 Hardware Guide (PDF)
> M3000 Hardware Guide (PDF)
> M1200 Hardware Guide (PDF)
> M500 Hardware Guide (PDF)
> Admin Guide (PDF)
> Report Guide (PDF)
> Release Notes for iPrism v4.2 (PDF)
|
|
