Users Guide

● The Security Management Server Virtualdoes not currently allow Cryptographic Next Generation (CNG)-based certificates.
Any certificates within the PKI that are created with a CNG-based key result in an error. Currently when this error appears,
the cycle to import the unsupported certificate may loop. Select Cancel to revert to the Import Certificate screen.
● Currently, the Uncommitted Policy Changes notification displays to administrators whose roles do not have permission
to commit policy. If they try to commit the outstanding policies, these administrators are logged out of the Management
Console. [DDPS-9702]
● In the Management Console, MDM databases have been removed. Therefore, the Endpoints page lists an error: Exception
thrown in webservice controller java.lang.RuntimeException: NOT IMPLEMENTED: MDM_DEVICE.
Currently, this issue will not be fixed. [DDPS-9729]
New Features and Functionality v10.2.10
● 64-bit recovery bundles are now available in the Security Management Server Virtual.
● The Security Management Server Virtual is improved through various security fixes and enhancements. See Resolved
Security Advisories v10.2.10 for additional information.
● The Dell Security Server and Dell Compatibility Server's memory limits are increased to 2048 MB for improved performance.
● LDAP query responses are hardened in the Security Management Server Virtual.
● The Sync Users at PBA Activation policy is now enabled by default.
● The Security Management Server Virtual v10.2.10 now supports VMware Workstation 15.
● The Security Management Server Virtual v10.2.10 now supports VMware ESXi 6.7
● First Seen in System and Last Seen in System columns have been added to Populations > Endpoints > Details and
Actions for each disk in the selected endpoint.
● When communicating to the Cylance SaaS, delays in communication are presented with the following message:
Attempting to connect to Cylance at this time. Please Check back in a bit.
● On upgrade, all users are reconciled by the Security Management Server Virtual to ensure all groups and users are accurately
reflected in the Management Console.
● The Security Management Server Virtual now attempts to clean up the audit database by default and adheres to 80% of
the 2 GB assigned database size. This cleaning action prevents critical errors displaying in the Dashboard Notifications pane,
which previously detailed that the Audit Database exceeded its 95% size limitation.
The auditdb.size.NotificationPercentage property is now included inApplication.properties of the Security Server to
manage the size of the Advanced Threat Prevention Audit database.
The auditdb.size.percentage property is the cleanup threshold. When this percentage of the database is exceeded, after
the auditdb.clear.cron is activated, the percentage of total space is calculated. The auditdb.clear.cron default value is
every two hours.
If the auditdb.size.NotificationPercentage value is exceeded, a notification of the cleanup displays the Security
Management Server Virtual and the duration defined in auditdb.cleanup.delete.hours is used to clean up the data in
the ddp_audit database below the auditdb.size.percentage threshold.
● After upgrading the Security Management Server Virtual, the following fields display the current date rather than Null:
○ Shield Activation
○ PBA Authentication
○ WebUI Login
○ User Creation in WebUI
○ Policy Proxy Sync
● When moving from one page to another, the following prompt displays if policy changes have not been saved.
12
Dell Security Management Server Virtual Technical Advisories