Ivanti Device and Application Control Version History Since v2.6 Details NEW IN VERSION 5.1 Update 3 [18-Dec-2018] • File-Type Filtering for the Portable Device Class The Portable Device class now supports file-type filtering. File filters can be used to limit access to specific file types (e.g. pdf, doc, xls). Up to now, file-type filtering was only available for use with the Removable Storage Devices, Floppy Disk Drives, and DVD/CD Drives device classes. With 5.1 Update 3, file filters can also be used with the Portable Device class. This would enable customers to restrict file transfers to and from mobile phones but allow pictures to be transferred, for example. • Device Control event generated when encrypted media is unlocked Additional logging has been added in 5.1 Update 3 so that an event is generated when encrypted media (e.g. USB key) is unlocked. This log event could then be used to trigger additional actions on the endpoint, for example. • Windows Support Updates We’ve added support for Windows 10 version 1809 (OS build 17763) which was released by Microsoft on Nov 13th. Refer to the following community article for details of Windows 10 version support with Ivanti Device and Application Control https://community.ivanti.com/docs/DOC-62154. We’ve also added support for Windows Server 2019 which was released by Microsoft on Oct 2nd. • Citrix XenApp and XenDesktop Support We’ve added support for version 7.18 of Citrix XenApp and XenDesktop. Components in this Release Component Version SK version 5.1.494 SCOMC version 5.1.500 SXS version 5.1.500 DB version 5.1.500 SMC version 5.1.500 1 ISSUES RESOLVED IN VERSION 5.1 Update 3 [18-Dec-2018] Problem ID Title 51197 Endpoint UI (RTNotify) on crashes randomly with unhandled exception "phase 2 file" 53658 HES 5.0: select user filter and schedule report causes reporting to fail 64411 Card reader unusable after installing agent (Windows 10 1709). Smartcard reader integrated with Dell Laptops not detected correctly. 64491 Issue with Surface Pro 4, Windows 10 1703 and Ivanti Device & Application Control Client 5.1 Update 1 (Computer hangs for few seconds before becoming ready when USB devices plugged in) 65653 Bitlocker Protection doesn't work without CD/DVD class permission being applied 65978 Client upgrade issue - SK.sys not updating if initial installation was LES 4.6 Update 2 66077 Device Explorer on Ivanti Device & Application Management Console unresponsive when accessed 66704 Problem with generation of 'client status' report - max size reached (Report seems to 'hang' and not to fully generate) 66820 "Microsoft Usbccid Smartcard Reader (WUDF)" device not working properly on some Dell Latitude models with Windows 10 1709 (Status listed as 'This device is not working properly because Windows cannot load the drivers required for this device. (Code 31). 66926 SADEC (Standalone Decryption Tool) 5.1.1 & 5.1.2 disabling secondary SSD 66942 Device Explorer unresponsive when accessed (occurs if device devid = parent_devid) 67135 USB storage may have an identifier written with upper and lower case letters resulting in duplicate entries 67326 Cannot shutdown a computer after SADEC (Standalone Decryption Tool) version 5.1 Update 2 is installed 67349 Several Win10 1803 apps crash while starting when Ivanti Device & Application Control client agent is installed 67367 EMSS (DC) client cannot be uninstalled if "ProfileImagePath" Expendable String Value does not exist 67516 Log Explorer | Scheduled Reports | The email subject will show garbled characters (???) when Chinese characters are used 2 NEW IN VERSION 5.1 Update 2 [29-May-2018] • More granular control over device attached/detached notifications Additional controls have been added such that the IDAC Control system tray icon remains visible but notifications relating to 'device attached/detached' are now suppressed. For more information refer to https://community.ivanti.com/docs/DOC-67782. • Authorization Wizard now scans inside MSP files Most Windows 10 and Office 2016 updates are delivered as MSP files rather than MSIs. In previous IDAC versions, the Authorization Wizard could only scan inside MSIs making it very difficult to whitelist updates that were delivered as MSPs. We've changed this in 5.1U2 so that the Auth Wizard now scans inside MSPs in addition to MSIs. • Windows 10 version Support We've added support for Windows 10 version 1803 (OS build 17134) which was released by Microsoft on April 30th. Refer to the following community article for details of Windows version support with Ivanti Device and Application Control https://community.ivanti.com/docs/DOC-62154. • Citrix XenApp and XenDesktop Support We've added support for versions 7.15 and 7.17 of Citrix XenApp and XenDesktop. • 7zip library updated We've updated the 7zip library to version 18.01 to address vulnerability CVE-2018-5996. 7zip versions prior to 18.00 contain insufficient exception handling which can lead to multiple memory corruptions and allow remote attackers to cause a denial of service attack or execute arbitrary code. • SQL 2017 Support We've added support for Microsoft SQL 2017. • Xtraction connector Ivanti Xtraction is a selfservice, real-time reporting and dashboard solution that helps you meet your IT business intelligence needs with less effort. An Xtraction connector is now available for Ivanti Device and Application Control and is compatible with IDAC version 5.0 and later. For more information, refer to https://www.ivanti.com/products/xtraction. Issues Resolved: 3 Ivanti Device and Application Control Version History Since v 2.6 RM 255126 Permissions issue with audio CD DSI 230780 Authorization Wizard - Failed to scan path longer than 128 Char RM 252951 Ivanti Device Control 5.0 CD\DVD Burning BSOD DSI 284559 Windows 10 1703 - Ivanti DC 5.1.1 and FontDriverHost UMFD-0 DSI 269485 Win10 upgrade 1607/1706 to 1709 with IDAC 5.1.1 (See Note Above) DSI 233189 After agent upgrade, keyboards mice and graphical cards are intermittently blocked with HP docking station DSI 268900 SK.sys causing system crash with subsequent boot failure DSI 234795 Policy Not Updating on Windows 10 endpoints with large CCH/SKR files DSI 275749 Ivanti Device Control 5.1.1: Exclude function for queries not working DSI 287160 Cannot print anymore using Edge on Win10 (1709) DSI 234753 Ivanti Device Control 5.0 user certificates not showing in Media Authorizer with MS CA centralized RM 252825 Ivanti Device Control and Symantec EP conflict - when SEP monitors DLL loading, .NET 2.0 applications stop working DSI 345637 After Windows 10 where Client is installed updates to version 1709, Windows doesn't work properly. DSI 274861 TLS certificate name from FQDN to short computer name NEW IN VERSION 5.1 Update 1 [24-Oct-2017] This update includes a variety of fixes for issues reported in previous releases. Issues Resolved: • Fixed an issue that caused upgrades from 4.6 SR3 to 5.1 to fail when using Default Keys. • Fixed an issue where application of policies to x86 machines would fail. • Fixed a policy issue that allowed access to blocked removable storage devices if no permissions were applied. • Fixed an issue that caused network printing jobs to fail when users inserted USB Type C docking stations into their devices. • Fixed a blue screen error that would occur when attempting to burn a CD. • Fixed a blue screen error that would occur after connecting laptop devices to docking stations. • Fixed an issue that prevented third-party applications from starting when the device had both Ivanti Device and Application Control and Kaspersky Endpoint Security with AES Crypto Module installed. • Fixed an issue that blocked scripts assigned to an unauthorized file group when Macro and Script Protection were set to Disabled. • Fixed an issue that caused Windows 10 to crash when running reports. • Fixed an issue that disrupted access to CD and DVD drives on devices with TrendMicro OfficeScan installed. • Fixed an issue that prevented access to portable encrypted USB flash drives. This issue occurred after removing a USB flash drive without first ejecting it from Windows. 4 Ivanti Device and Application Control Version History Since v 2.6 • Fixed a logging issue that caused some recorded device events to disappear. • Fixed an issue that prevented users from saving policy export DAT files consistently Known Issues: • When using Secure Volume Browser to copy a file from an encrypted device to another location, the copy does not complete successfully. NEW IN VERSION 5.1 [25-Jul-2017] • We're Now Ivanti!If you haven't already heard, HEAT Software has merged with LANdesk to form a brand-new company,Ivanti! We've renamed HEAT Endpoint Security Suite to Ivanti Device and Application Control. HEAT and Lumension still appear in certain areas of the product e.g. install folders and signing certificates. • Data Loss PreventionUse Microsoft Window's Advanced Query Syntax to search the contents, properties, and tags (if supported) of MS Office (Word, Excel, PowerPoint) and PDF files for flagged keywords and phrases. • File Type Filtering Expanded to Include MP4 Files • Added Device Support for Thunderbolt 3A LaCie D2 Thunderbolt 3 6TB removable was tested and recognized as a USB and manageable accordingly. • Added Support for Citrix XenApp and XenDesktop 7.14.1 • Expanded Virtualization Support To Include Microsoft VDI (version 6.3.9600.18623)Limitations related to this feature:Only USB devices are supported and those devices are not connected as actual devices currently. No encryption or filtering supported. Due to limitations the following are not supported: • Windows Portable • DVD Burning • Shadowing • Printing The thin client requires the ESDI dll be added to the system32 folder and the reg key set to point to it.No encryption of devices is supported as these are not connected as USBDevice log events can be used to create special device permissions.