Release Notes for 3Com X Family of Unified Security Platforms, Release 3.2 This document contains information about Release 3.2 of the 3Com X Family of Unified Security Platforms. This information is not available in the release documentation. Customer Support Go to http://csoweb4.3com.com/contactus/ for the list of support phone numbers by region and country. Documentation The new features included in the X Family 3.2 Release are documented in the online help accessible from the web interface (LSM).
Release Notes for 3Com X Family of Unified Security Platforms, Release 3.2 Page 2 New Features at Release 3.2 Release 3.2 of the 3Com X Family of Unified Security Platforms, comprising the X5 and the X506, provides new features for web security. WEB CONTENT FILTER SUBSCRIPTION SERVICE A new Web Content Filter Subscription service is available. This new service, delivered in partnership with McAfee® TrustedSource™, replaces the existing SurfControl content filter service.
Release Notes for 3Com X Family of Unified Security Platforms, Release 3.2 Page 3 The TrustedSource™ Web Filter master database, hosted on the internet and cached locally within the X family device, is updated constantly to ensure the very latest protection is available. Filtering policies can be applied on a per-user or group basis via the X-Family's LDAP directory integration, thus enabling fine-grained and automated control.
Release Notes for 3Com X Family of Unified Security Platforms, Release 3.2 • Page 4 Malicious. A web page contains malicious content or is not from a legitimate host server. For example, the web page may contain a virus, spyware, or phishing mechanism.
Release Notes for 3Com X Family of Unified Security Platforms, Release 3.2 Page 5 DHCP SERVER OPTION FOR RESILIENT VCX DEPLOYMENTS A new feature allows optional configuration of a backup VCX call processor to be defined in the X family DHCP server. In the VCX Secondary CP field, type the backup VCX network call processor (CP) IP address. Any Secondary IP address will be provided to phones as part of their IP address lease.
Release Notes for 3Com X Family of Unified Security Platforms, Release 3.2 Page 6 SMS SUPPORT SMS support is available for Release X2.5.2 features only, using the SMS 3.0 release or newer. New X family Release 3.0 features must be configured directly on each device through the LSM or CLI. It is not necessary to remove the device from SMS control when changing any new features. Notes on Using Release 3.
Release Notes for 3Com X Family of Unified Security Platforms, Release 3.2 Page 7 the night when network loads are normally lower. If this is not possible, use of two units in a High Availability pair can allow the standby unit to be updated while the primary unit continues to serve traffic. The primary unit can then be forced to transition to standby, and the same task performed again.
Release Notes for 3Com X Family of Unified Security Platforms, Release 3.2 Page 8 Workaround: Configure the client browser to trust the X family certificate, as documented in Appendix A of the LSM User’s Guide. Alternatively, go to http://3kb.3com.com for a technical note explaining how to remove these warnings across an Active Directory domain.
Release Notes for 3Com X Family of Unified Security Platforms, Release 3.2 Page 9 Custom Web Filter Lists When you enter URL patterns or regular expressions in the Custom Filter List (Web Filter > Custom Filter List), limit the URL pattern or expression to 64 characters or fewer. If you enter a pattern or expression longer than 64 characters, the device may drop the pattern without issuing an error.
Release Notes for 3Com X Family of Unified Security Platforms, Release 3.2 Page 10 Known Issues for Release 3.2 35030: ENABLE/DISABLE INTERFACE RESTARTS OSPF ON ALL INTERFACES Enabling or disabling any interface restarts OSPF on all of its interfaces. 36588: FLUSHING SUMMARY AREA RANGE LSAS OSPF and RIP do not automatically redirect routes if a physical port fails (InterfaceDown).
Release Notes for 3Com X Family of Unified Security Platforms, Release 3.2 Page 11 User, Account, and Product Registration Using eSupport To activate your Digital Vaccine, Digital Vaccine Gold, or Anti-Spam Service subscription, you must register the license and your X family hardware on the 3Com eSupport Web site for warranty purposes. You need both a user and an account registration.
Release Notes for 3Com X Family of Unified Security Platforms, Release 3.2 Page 12 PRODUCT REGISTRATION 1. Go to the eSupport Web site (http://eSupport.3com.com). The 3Com Login page opens. 2. Enter your user name and password and click Login. The eSupport Home page opens. (Note: You are leaving a secure page to go to an unsecure page; if you receive a Security Alert message, you can safely click Yes.) 3. Click Register A Product. The Select Product page opens. 4.
Release Notes for 3Com X Family of Unified Security Platforms, Release 3.2 Page 13 Documentation Errata Apart from the new features described in these release notes, the Release 3.0 documentation continues to apply to the X3.1 and newer releases. The following changes occurred too late to incorporate in the X family X3.0 documentation.
Release Notes for 3Com X Family of Unified Security Platforms, Release 3.2 Page 14 Appendix - Trusted Source Web Filter Category Definitions Users can check the categorization and web reputation of any URL at the Trusted Source web site http://www.TrustedSource.org. If a web site is not known or has the wrong category the same site can also be used to submit corrections. When submitting a correction usethe product name “McAfee Real Time Database”.
Release Notes for 3Com X Family of Unified Security Platforms, Release 3.2 Page 15 Category combinations Sites that offer both URL translation and text translation may be categorized as both Anonymizing Utilities and Text Translators. Example URLs • • • • • • • http://www.babelfish.yahoo.com http://www.babelfish.yahoo.com/translate_url http://www.archive.org http://web.archive.org/web/19961220001705/http://www1.playboy.com/ http://translate.google.com/translate http://translate.google.
Release Notes for 3Com X Family of Unified Security Platforms, Release 3.2 Page 16 BLOGS/WIKI Web pages containing dynamic content—content that changes frequently because users are allowed to post or edit content at any time. This category is designed to cover the risks associated with dynamic content that may range from harmless to offensive.
Release Notes for 3Com X Family of Unified Security Platforms, Release 3.2 Page 17 not have content posted or through-site navigation for web surfers. Content servers hosting images do not allow users to browse the photos. This category includes domain-level and sub-domain-level URLs that function as content servers.
Release Notes for 3Com X Family of Unified Security Platforms, Release 3.2 Page 18 Example URLs • • • • http://www.match.com http://www.eharmony.com http://www.dating.com http://www.loveme.com DATING/SOCIAL NETWORKING This category includes URLs that focus on social interaction such as online dating, friendship, school reunions, pen-pals, escort services, or introductions to potential spouses. Many of these sites facilitate social interaction among their members through real-time message posting.
Release Notes for 3Com X Family of Unified Security Platforms, Release 3.2 Page 19 Example URLs • • • http://www.hightimes.com http://www.hempfiles.com http://www.ganjakits.com EDUCATION/REFERENCE Web pages devoted to academic-related content such as academic subjects (math, history), school or university web pages, as well as education administration pages (school boards, teacher curriculum).
Release Notes for 3Com X Family of Unified Security Platforms, Release 3.2 Page 20 Example URLs • • • http://www.rotten.com http://www.footageworks.com http://www.americanpatrol.com FASHION/BEAUTY Web pages that market clothing, cosmetics, jewelry, and other fashion oriented products, accessories, or services. This also includes product reviews, comparisons, and general consumer information, as well as services such as hair salons, tanning salons, tattoo studios, and body piercing studios.
Release Notes for 3Com X Family of Unified Security Platforms, Release 3.2 Page 21 Category combinations This category also may be used as an exception to allow web pages that do not pose any risk to children or to access sites that have a primary educational or recreational focus for children, but belong to other categories such as Games, Humor/Comics, Recreation/Hobbies, or Entertainment. Example URLs • • • • http://www.askforkids.com http://disney.go.com http://www.nickjr.com http://www.
Release Notes for 3Com X Family of Unified Security Platforms, Release 3.2 Page 22 Example URLs • • • http://www.ncaa-college-basketball-picks.com http://www.tnlottery.com http://www.asianbookie.com GAME/CARTOON VIOLENCE Web pages providing fantasy or fictitious representations of violence within the context of games, comics, cartoons, or graphic novels.
Release Notes for 3Com X Family of Unified Security Platforms, Release 3.2 • Page 23 http://www.washingtonpost.com GOVERNMENT/MILITARY Web pages that contain content maintained by governmental or military organizations, such as government branches or agencies, police departments, fire departments, civil defense, counterterrorism organizations, or supranational organizations, such as the United Nations or the European Union. Military and veterans medical facilities are included in this category.
Release Notes for 3Com X Family of Unified Security Platforms, Release 3.2 Page 24 HATE/DISCRIMINATION Web pages that provide information that would encourage the oppression of a specific group of individuals. This includes promoting, explicitly or implicitly, an agenda against groups based on race, religion, nationality, gender, age, disability, or sexual orientation. Political parties with a specific hatebased agenda may be included.
Release Notes for 3Com X Family of Unified Security Platforms, Release 3.2 Page 25 HISTORY Web pages providing content about historical facts. This category is designed for content suitable for higher education, while the Education category is designed for primary education. For example, a site with Holocaust photos may be offensive, yet have academic value.
Release Notes for 3Com X Family of Unified Security Platforms, Release 3.2 Page 26 nudity. For example, use this category when you want to block access to nudity, but allow access when it is not the primary focus of a site, such as news sites or major portals. Category combinations If nudity or pornography content is present on corresponding pages, the Nudity and Pornography categories will also apply. Example URLs • • • • • http://www.thesun.co.uk http://www.bild.t-online.de http://www.stern.
Release Notes for 3Com X Family of Unified Security Platforms, Release 3.2 Page 27 INTERACTIVE WEB APPLICATIONS Web pages that provide access to live or interactive web applications, such as browser-based office suites and groupware. Sites categorized as Interactive Web Applications include those with business, academic, or individual focus. Sites providing access to interactive web applications that do not take critical user data or offer security risks are excluded, such as Google Maps.
Release Notes for 3Com X Family of Unified Security Platforms, Release 3.2 Page 28 JOB SEARCH Web pages related to a job search including sites concerned with resume writing, interviewing, changing careers, classified advertising, and large job databases. It also includes corporate web pages listing job openings, salary comparison sites, temporary employment, company job posting sites. Make money at home sites fall under the Business or Online Shopping categories.
Release Notes for 3Com X Family of Unified Security Platforms, Release 3.2 Page 29 Example URLs • • • http://www.weddingphotos4u.com http://www.goodyear.com http://raumausstattung-gilles.de MEDIA DOWNLOADS Web pages that provide audio or video files for download such as MP3, WAV, AVI, and MPEG formats. The files are saved to and played from the user’s computer. Audio or video files that are played directly through a browser window are not included in this category; see Streaming Media.
Release Notes for 3Com X Family of Unified Security Platforms, Release 3.2 Page 30 MOBILE PHONE Web pages that provide buyable media, software, or utilities for mobile phones that can be downloaded and delivered to mobile phones. Examples include ringtones, logos/skins, games, screen-savers, text-based tunes, and software for SMS, MMS, WAP, and other mobile phone protocols.
Release Notes for 3Com X Family of Unified Security Platforms, Release 3.2 • • • Page 31 http://www.chryslerllc.com http://www.cartervwsaab.com http://www.downtownhd.com NON-PROFIT/ADVOCACY/NGO Web pages for groups designed for charitable or educational purposes that fulfill a stated mission, benefiting the larger community, such as clubs, lobbies, communities, non-profit organizations, labor unions, and advocacy groups. Examples are Masons, Elks, Boy and Girl Scouts, or Big Brothers.
Release Notes for 3Com X Family of Unified Security Platforms, Release 3.2 Page 32 ONLINE SHOPPING Web pages that sell products or services online. Web pages selling a broad range of products may pose a risk to users by offering access to items that would normally be filtered under other categories such as Pornography, Weapons, Nudity, or Violence. Web pages selling such content exclusively are covered by their respective categories.
Release Notes for 3Com X Family of Unified Security Platforms, Release 3.2 Page 33 PARKED DOMAIN Web pages that once served content, but their domains have been sold or abandoned and are no longer registered. Parked domains do not host their own content, but usually redirect users to a generic page that states the domain name is for sale or redirect users to a generic search engine and portal page, some of which provide valid search engine results.
Release Notes for 3Com X Family of Unified Security Platforms, Release 3.2 Page 34 PHARMACY Web pages that provide reviews, descriptions, and market or sell prescription based drugs, over-the-counter drugs, birth control, or dietary supplements. Category combinations • • Some content may be health-related; therefore, the Health category would apply. The Pharmacy category implies shopping, but if the web page also offers non-Pharmaceutical products, it is covered under Online Shopping.
Release Notes for 3Com X Family of Unified Security Platforms, Release 3.2 Page 35 PORNOGRAPHY Web pages that contain materials intended to be sexually arousing or erotic. This includes fetish pages, animation, cartoons, stories, and illegal pornography. Category combinations Web pages that contain illegal pornography, zoophilia, necrophilia, and violent porn have some categorization combination of Pornography, Extreme, and/or Criminal Activities. Example URLs • • • http://www.hustler.com http://www.
Release Notes for 3Com X Family of Unified Security Platforms, Release 3.2 Page 36 Category combinations If the web page is specific to an education or health group, the Education/Reference or Health category also applies. Example URLs • • • • http://www.linkedin.com http://www.sermo.com http://www.myragan.com http://www.ziggs.
Release Notes for 3Com X Family of Unified Security Platforms, Release 3.2 Page 37 Category combinations None Example URLs • • • • • http://www.greatlandrealty.com http://www.coldwellbanker.com http://www.pigati.com http://www.wohnnet.at/wohnnet.htm http://www.kurskrealty.ru RECREATION/HOBBIES Web pages for recreational organizations and facilities that include content devoted to recreational activities and hobbies.
Release Notes for 3Com X Family of Unified Security Platforms, Release 3.2 Page 38 Category combinations None Example URLs • • • http://www.radmin.com http://www.tightvnc.com http://www.gotomypc.com RESOURCE SHARING Web pages used to harness idle or unused computer resources to focus on a common task. This can be on a company or an international basis. Well-known examples are the SETI program and the Human Genome Project, which use the downtime of thousands of volunteered computers to analyze data.
Release Notes for 3Com X Family of Unified Security Platforms, Release 3.2 Page 39 Example URLs • • • http://www.cheathouse.com http://www.academictermpapers.com http://www.essaydepot.com SEARCH ENGINES Web pages that provide search results that enable users to find information on the Internet based upon key words. Site-specific search features are not categorized as Search Engines since the search results are site-specific.
Release Notes for 3Com X Family of Unified Security Platforms, Release 3.2 • Page 40 http://www.dirfile.com/freeware/ SOCIAL NETWORKING This category includes web pages that enable social networking for a variety of purposes, such as friendship, dating, professional, or topics of interest. These sites provide personal or group profiles and facilitate interaction among their members through real-time communication, message posting, public bulletins, and media sharing.
Release Notes for 3Com X Family of Unified Security Platforms, Release 3.2 Page 41 Category combinations None Example URLs • • • http://aztxobzipyijon.com http://www.superoakuniverse.com http://www.gold17.net SPORTS Web pages related to professional or organized recreational sports. This includes sporting news, events, and information such as playing tips, strategies, game scores, or player trades.
Release Notes for 3Com X Family of Unified Security Platforms, Release 3.2 Page 42 STOCK TRADING Web pages that allow users to purchase, sell, or trade shares online. Tickertape information that enables viewing of real-time stock prices is also included as is financial spread betting in the stock market. Note: Other betting is covered in Gambling. Sites that offer information about stocks, but do not offer purchasing, selling, or trading of shares are not included; see Finance/Banking.
Release Notes for 3Com X Family of Unified Security Platforms, Release 3.2 • • Page 43 http://www.tek-tips.com http://www.expresscomputeronline.com/techforum.shtml TECHNICAL INFORMATION Web pages that provide computing information with an educational focus in areas such as Information Technology, computer programming, and certification. Examples include Linux user groups, UNIX commands, software tutorials, or technical terminology dictionaries.
Release Notes for 3Com X Family of Unified Security Platforms, Release 3.2 Page 44 Example URLs • • • • • • http://babelfish.yahoo.com http://translation.langenberg.com http://translate.google.com/translate_t http://www.worldlingo.com/en/products_services/worldlingo_translator.html http://dictionary.reference.com/translate/ http://www.appliedlanuage.com/free_translation.
Release Notes for 3Com X Family of Unified Security Platforms, Release 3.2 Page 45 Example URLs • • • http://www.iusenet.com/100ProofNews.com/index.php http://www.newsville.com http://groups.google.com VIOLENCE Web pages that contain real or lifelike images or text that portray, describe, or advocate physical assaults against humans, animals, or institutions (for example, depictions of war, suicide, mutilation, or dismemberment).
Release Notes for 3Com X Family of Unified Security Platforms, Release 3.2 Page 46 Category combinations None Example URLs • • • http://www.gunaccessories.com http://www.zmweapons.com http://www.galleryofguns.com WEB ADS Web pages that provide ad-hosting or programs that create advertisements. Examples include links, source code or applets for banners, popups, and other kinds of static or dynamically generated ads that appear on Web pages.
Release Notes for 3Com X Family of Unified Security Platforms, Release 3.2 Page 47 WEB MEETINGS This category includes web pages that host live meetings, video conferencing, and interactive presentations focused primarily on business users. Web meetings generally include streaming audio and video, and facilitate data transfer or office-oriented application sharing, such as online presentations.
Release Notes for 3Com X Family of Unified Security Platforms, Release 3.2 Copyright © 2010, 3Com Corporation. All Rights Reserved. Unless otherwise indicated, 3Com registered trademarks are registered in the United States and may be registered in other countries. 3Com, the 3Com logo, TippingPoint, the TippingPoint logo, and Digital Vaccine are registered trademarks of 3Com Corporation or one of its subsidiaries.
