本帖最后由 Vincent丶007 于 2016-10-10 16:09 编辑
新版来来来来来啦啦啦
https://www.f-secure.com/zh_CN/w ... ent-security/latest
RELEASE NOTES
F-Secure® Client Security 12.20
F-Secure® Client Security Premium 12.20
© 1993-2016 F‑Secure Corporation. All rights reserved. 'F‑Secure' and F-logo are registered trademarks of F-Secure Corporation. F‑Secure product and technology names and F‑Secure logos are either trademarks or registered trademarks of F‑Secure Corporation. Other product names and logos referenced herein are trademarks or registered trademarks of their respective companies.
Portions Copyright © 2004 BackWeb Technologies Inc.
This product may be covered by one or more F-Secure patents, including the following: GB2353372, GB2366691, GB2366692, GB2366693, GB2367933, GB2368233, GB2374260
General
This document contains information about the F-Secure Client Security & F-Secure Client Security Premium 12.20 release. We strongly recommend that you read the entire document. Please refer to the online help for more information.
Product contents
F-Secure Client Security Standard and Client Security Premium have the following features that you can install:
Virus & spyware protection – protects your computer against viruses, trojans, spyware, rootkits and other malware.
DeepGuard™ – proactive, instant protection against unknown threats. It monitors application behavior and stops potentially harmful activities in real-time.
E-mail scanning – detects malicious content in e-mail traffic (IMAP4, POP3 and SMTP protocols) to protect you against e-mail malware.
Web traffic scanning – detects and blocks malicious content in web traffic (HTTP protocol) to provide additional protection against malware.
Internet Shield – consists of Firewall and Application Control.
Browsing protection – provides additional protection against unsafe web sites, with additional premium features:
Web Content Control – allows blocking of web sites that contain unsuitable content.
Connection Control – protects against harmful activity when accessing sensitive sites.
Device control – lets you control and disable hardware devices.
Software Updater -- keeps your system and applications up-to-date by automatically installing patches as they are released by vendors.
Microsoft NAP plug-in – integrates with Microsoft Network Access Protection (NAP).
Offload Scanning Agent – moves malware scanning operations to F-Secure Scanning and Reputation Server.
The table below shows which features are enabled with different product licenses.
Feature
F‑Secure Client Security Standard
F‑Secure Client Security Premium
Virus & spyware protection
● ●
DeepGuard™
● ●
E-mail scanning
● ●
Web traffic scanning
● ●
Internet Shield
● ●
Browsing protection
● ●
Device control
● ●
Microsoft NAP plug-in
● ●
Offload Scanning Agent
● ●
Software Updater
●
Connection control
●
Web content control
●
The supported languages are: English, Chinese (P.R.C, Taiwan, Hong Kong), Czech, Danish, Dutch, Estonian, Finnish, French, Canadian French, German, Greek, Hungarian, Italian, Japanese, Korean, Norwegian, Polish, Portuguese, Brazilian Portuguese, Romanian, Russian, Slovenian, Spanish, Latin American Spanish, Swedish, and Turkish.
What’s new
New features and improvements
Support to download software updates from Policy Manager
Starting from version 12.20, Policy Manager supports distributing software updates to managed endpoints. Hosts use Policy Manager as the primary source of updates and fall back to the vendor's side if necessary.
Password-protected uninstallation
Administrator can set an uninstallation password for managed hosts, which can be configured via polices from the Settings > Centralized management view.
Note: This Client Security version requires Policy Manager 12.20.
Installation and system requirements
Before you install the product, we recommend that you review the sections in this document to make sure that your network, hardware, software, and other system components meet the requirements for the F-Secure Client Security 12.20 release.
Import the product installation JAR package to Policy Manager Console and deploy the product remotely to selected hosts. With Policy Manager Console, you can also export an MSI package that you can deploy via other central management systems to install the product.
To run the installation locally, create the MSI package with the export tool in F-Secure Policy Manager Console. Note that the installation requires local administrator rights.
Installation instructions for virtual environments using F-Secure Offload Scanning Agent
If you want to deploy the product in a virtual environment, select the Offload Scanning Agent component during the installation or when you export the MSI package. Offload Scanning Agent minimizes the performance impact on the virtualization infrastructure.
For detailed installation instructions of this feature, refer to the F-Secure Security for Virtual and Cloud Environments deployment guide.
Note: You need to install Scanning and Reputation Server on your network for this functionality to work.
Supported platforms
This release can be installed on the following platforms:
Microsoft Windows Vista (all 32-bit and 64-bit editions)
Microsoft Windows 7 (all 32-bit and 64-bit editions)
Microsoft Windows 8 and 8.1 (all 32-bit and 64-bit editions)
Microsoft Windows 10
Note: You need to have the latest Service Pack installed for your operating system.
Recommended hardware requirements
Microsoft Windows 10, Windows 8, Windows 8.1, Windows 7 and Windows Vista
Processor: Intel Pentium 4 2GHz or higher
Memory: 1GB for 32-bit / 2 GB for 64-bit or more
Disk space: at least 1,5 GB
Internet connection: an Internet connection is required to receive updates and use cloud-based technology features
Centralized management requirements
F-Secure Policy Manager 12.20 is required to centrally manage F-Secure Client Security 12.20 product.
Known issues
Installation, upgrade, and uninstallation
Remote installation to Windows 8
To remotely install the product to a Windows 8 host from Policy Manager Console, set the following registry key on the host to enable access to the 'admin$' share:
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System]
"LocalAccountTokenFilterPolicy"=dword:00000001
Policies are not received immediately after reboot
In some cases, the installed client may not receive policies immediately after the reboot. Usually, the client receives the new policy after some time and recovers automatically. If this does not happen, restart the computer.
Unused databases are still visible after upgrade
When upgrading from a previous version, some database and engine updates that were used in the previous version may not be needed anymore. They are still visible in Settings > Other settings > Downloads and marked as Not Installed. This is normal and these entries will disappear automatically after 7 days.
System might be slow for several minutes after the first reboot while the installation finishes
The system may start up slowly during the initial restart after the installation. After the restart, the product downloads and installs various updates to finalize the installation in the background.
The effect is more noticeable after a fresh installation, as more updates need to be downloaded. The local user interface has a blue status indicator and a Completing Installation status until updates have been installed.
Subsequent restarts are not affected.
NAP Health Validator is not removed from configured health policies during uninstallation
During the uninstallation, references to F-Secure System Health Validator (SHV) are not automatically removed from health policies. Computers that use these policies are considered non-compliant with health policies and quarantined. To fix broken references to F-Secure SHV, open the health policies properties in the Network Policy Server console (nps.msc) and confirm the automatic update.
Installation of Client Security 12.00 removes McAfee Agents
During the installation, the product removes 3rd-party software that may be incompatible (including McAfee Agent and McAfee NAI ePolicy Orchestrator Agent). If you need 3rd-party software that would be removed, submit a support ticket to F-Secure customer support to request a special build that does not remove the software that you need.
Browsing protection and Web traffic scanning
Change in Browsing protection settings may look ineffective due to caching
Sometimes it may seem that new Browsing protection settings do not do anything, because the browser finds the page content from the browser cache. Use Ctrl-F5 to ignore the cache and reload the web page content.
Uninstalling only Browsing protection/Web traffic scanning does not immediately switch it off
After you uninstall the Browsing protection feature, it works until the GateKeeper service (FSGKHS) is restarted. The same applies to Web traffic scanning.
Uninstalling only Browsing protection/Web traffic scanning does report their installation status to Policy Manager (CSEP-1872)
If you install the whole Client Security, including Browsing protection and later uninstall only Browsing protection, it is still reported as installed in Policy Manager Console Status. The same applies to Web traffic scanning.
E-mail scanning
TLS and SSL-encrypted e-mail protocols not supported (44173, 44869, 54496, 55285, 89415)
E-mail scanning works only with unencrypted e-mails using protocols POP3, IMAP or SMTP.
Scanning e-mails that are encrypted with Transport Layer Security (TLS) and Secure Sockets Layer (SSL) protocols is not supported. When TLS and SSL protocols are used, e-mail scanning either cannot scan e-mails or may block them. Turn off e-mail scanning if you use either TLS or SSL protocols for secure e-mail transmissions.
If E-mail scanning is configured to listen to a port that is used by TLS or SSL-encrypted e-mail, the traffic is blocked completely even when e-mail scanning is turned off [89415]. To solve this issue, reconfigure E-mail scanning to listen to the standard unencrypted port (110) or to any unused port, if port 110 is used already.
Anti-Virus
Incorrect engine versions are shown in policy statistics
After a clean installation, the Status tab of Policy Manager Console (F-Secure Anti-Virus > Plug-ins table) and scanning reports show incorrect engine versions. To solve this issue, restart the FSGKHS service.
Software Updater
Software Updater does not automatically install updates not signed by trusted authority
Some updates, for example Notepad++, WinZip, and 7-Zip, are released unsigned. Software Updater does not automatically install unsigned updates and reports “There is no signature” as the installation status. The administrator can use the selective installation from Policy Manager Console to install these updates. Alternatively, the administrator can use the setting 1.3.6.1.4.1.2213.59.1.20.30 to ‘Allow unsigned updates automatic installation’. Note, that this may decrease the level of protection as it applies to all future updates, which are installed according to automatic installation rules, including missing updates of newly installed products.
Installation of some updates can hang
The installation of updates runs under the local system account without any user interaction. On rare occasions, the installation can hang because it waits for input or is handling an error. The installation is cancelled after the timeout period, which is 4 hours by default. After the timeout, the batch installation continues, skipping the problematic patch or update. Software Updater reports “Installation hung up” as the installation status.
To forcibly retry the installation of the problematic update, use the selective installation.
Skype Update requires reboot when distributed through SWUP (CSEP-631)
When Software Updater updates Skype, the Skype update (for example from version 6.3 to version 6.5) requests to restart the computer.
Contact information and feedback
We look forward to hearing your comments and feedback on the product functionality, usability and performance.
Please report any technical issues:
F-Secure support web site: http://support.f-secure.com/
F-Secure Community: http://community.f-secure.com/t5 ... /End-point_Security
Please attach the F-Secure system summary report when you report a technical problem. It contains basic information about hardware, operating system, network configuration, and installed F-Secure and third-party software. Follow these instructions to collect the system summary report:
In Windows Vista and Windows 7, select Start | All Programs | F-Secure Client Security Premium, right-click on “Support Tool”, and select Run as administrator.
In Windows 8, right-click on “Support Tool” application in Metro UI and use the Run as Administrator option.
Note: You need to have the administrator rights to collect the system summary report.
F-Secure license terms
F-Secure license terms are included in the software. You must read and accept them before you can install and use the software. |