System information

ManualsBrandsMcafee ManualsOtherVIRUSSCAN 5.1

Release Notes

McAfee ePolicy Orchestrator 5.1.1 Software

Contents

About this release

New features and enhancements

Resolved issues

Installation instructions

Known issues

Find product documentation

About this release

This document contains important information about the current release. We strongly recommend that

you read the entire document.

We do not support the automatic upgrade of a pre-release software version. To upgrade to a production

release of the software, you must first uninstall the existing version.

Release build — 5.1.1

This release is a supported upgrade from these McAfee

ePolicy Orchestrator

(McAfee ePO

™

) releases:

• McAfee ePO 4.5 Patch 7 • McAfee ePO 4.6.8

• McAfee ePO 4.6.4 • McAfee ePO 5.0.0

• McAfee ePO 4.6.6 • McAfee ePO 5.0.1

• McAfee ePO 4.6.7 • McAfee ePO 5.1.0

Purpose

This release of McAfee ePO fixes issues and provides support for features in upcoming managed

product releases.

Rating

Mandatory — McAfee requires this release for all environments. This update must be applied

immediately to avoid a potential security breach, and to maintain a viable and supported product.

For more information about patch ratings, see McAfee KnowledgeBase article KB51560.

Upgraded components

This release provides upgrades to these components.

Summary of content (8 pages)

PAGE 1
Release Notes McAfee ePolicy Orchestrator 5.1.1 Software Contents About this release New features and enhancements Resolved issues Installation instructions Known issues Find product documentation About this release This document contains important information about the current release. We strongly recommend that you read the entire document. We do not support the automatic upgrade of a pre-release software version.
PAGE 2
Component Version Apache 2.2.26 Apache Tomcat 7.0.53 Java Runtime 1.7.0_u55 OpenSSL 1.0.1h RSA Crypto-J 6.1.1.0.2 RSA SSL-J 6.1.1 TLS 1.2.0 New features and enhancements The release of the product includes these new features and enhancements. • Multi-product queries — One query displays the number of systems using McAfee products; for example, McAfee Host Intrusion Prevention, McAfee VirusScan Enterprise, and McAfee Agent.
PAGE 3
Authentication • When an Audit Log entry is created, it now contains the requested URL and the authenticated user's name. (953097) • When you try to remove an issue without the required permissions, the McAfee ePO console no longer stalls or displays the error "Please Wait." (928684) • The Certificate Revoked List (CRL) field now uploads only files that are valid and signed using certificate-based authentication.
PAGE 4
Dashboards • Previously, the Summary page was overwritten by a custom dashboard. Now, the Summary page can't be edited, so the page can't be overwritten. (954906) • You can no longer change a default dashboard. (921872) Deployment • Server tasks, such as the Agent Deployment server task, correctly expire when the McAfee ePO server cannot reach the client system. For more information, see McAfee KnowledgeBase article KB79875.
PAGE 5
Server tasks • The Active Directory Sync Computers server task now correctly completes from the McAfee ePO console. (936379) • In some cases, the server task queue engine gets into an invalid state, preventing scheduled server tasks from running, even though manual server tasks run as expected. This release implements additional fail-safe measures to improve the resiliency of the task queue engine. (963754) • A Server Task Log purge no longer produces an error if the purge runs as a task is ending.
PAGE 6
• The OS platform field no longer defaults to Server if it does not match the string Workstation, which was affecting how systems display in the System Tree or tag-based policies. (692169) • Previously, if you tried to remove a subgroup from the System Tree without first selecting the Remove agent from all systems checkbox, you wouldn't be able to click OK. Now, the button is active, and you can remove subgroups as needed.
PAGE 7
• Disaster Recovery failed in McAfee ePO 5.0.1 and later because there was a hardcoded "5.0" in the path to the Disaster Recovery files. Disaster Recovery no longer fails. (939098) • Help now appears for the Edit Scheduler Tasks page. (916805) • Query filters now display systems with blank properties. (938992) • The Policy Catalog page no longer takes 3–5 minutes to load if policies have multiple owners. (945716) • This release fixes policy sharing with earlier McAfee ePO servers.
PAGE 8
• Capitalization changes to policy settings are now correctly saved to the database. (956467) • This release addresses CVE-2014-0224. An attacker using a carefully crafted handshake could force the use of weak keying material in OpenSSL SSL/TLS clients and servers. This could be exploited by a man-in-the-middle (MITM) attack where the attacker could decrypt and modify traffic from the attacked client and server.