Ivanti Device and Application Control Version History Since v 2.6 Details NEW IN VERSION 5.1 Update 2 [29-May-2018] • More granular control over device attached/detached notifications Additional controls have been added such that the IDAC Control system tray icon remains visible but notifications relating to 'device attached/detached' are now suppressed. For more information refer to https://community.ivanti.com/docs/DOC-67782. • Authorization Wizard now scans inside MSP files Most Windows 10 and Office 2016 updates are delivered as MSP files rather than MSIs. In previous IDAC versions, the Authorization Wizard could only scan inside MSIs making it very difficult to whitelist updates that were delivered as MSPs. We've changed this in 5.1U2 so that the Auth Wizard now scans inside MSPs in addition to MSIs. • Windows 10 version Support We've added support for Windows 10 version 1803 (OS build 17134) which was released by Microsoft on April 30th. Refer to the following community article for details of Windows version support with Ivanti Device and Application Control https://community.ivanti.com/docs/DOC-62154. • Citrix XenApp and XenDesktop Support We've added support for versions 7.15 and 7.17 of Citrix XenApp and XenDesktop. • 7zip library updated We've updated the 7zip library to version 18.01 to address vulnerability CVE-2018-5996. 7zip versions prior to 18.00 contain insufficient exception handling which can lead to multiple memory corruptions and allow remote attackers to cause a denial of service attack or execute arbitrary code. • SQL 2017 Support We've added support for Microsoft SQL 2017. • Xtraction connector Ivanti Xtraction is a selfservice, real-time reporting and dashboard solution that helps you meet your IT business intelligence needs with less effort. An Xtraction connector is now available for Ivanti Device and Application Control and is compatible with IDAC version 5.0 and later. For more information, refer to https://www.ivanti.com/products/xtraction. Issues Resolved: Problem ID Title 1 Ivanti Device and Application Control Version History Since v 2.6 RM 255126 Permissions issue with audio CD DSI 230780 Authorization Wizard - Failed to scan path longer than 128 Char RM 252951 Ivanti Device Control 5.0 CD\DVD Burning BSOD DSI 284559 Windows 10 1703 - Ivanti DC 5.1.1 and FontDriverHost UMFD-0 DSI 269485 Win10 upgrade 1607/1706 to 1709 with IDAC 5.1.1 (See Note Above) DSI 233189 After agent upgrade, keyboards mice and graphical cards are intermittently blocked with HP docking station DSI 268900 SK.sys causing system crash with subsequent boot failure DSI 234795 Policy Not Updating on Windows 10 endpoints with large CCH/SKR files DSI 275749 Ivanti Device Control 5.1.1: Exclude function for queries not working DSI 287160 Cannot print anymore using Edge on Win10 (1709) DSI 234753 Ivanti Device Control 5.0 user certificates not showing in Media Authorizer with MS CA centralized RM 252825 Ivanti Device Control and Symantec EP conflict - when SEP monitors DLL loading, .NET 2.0 applications stop working DSI 345637 After Windows 10 where Client is installed updates to version 1709, Windows doesn't work properly. DSI 274861 TLS certificate name from FQDN to short computer name NEW IN VERSION 5.1 Update 1 [24-Oct-2017] This update includes a variety of fixes for issues reported in previous releases. Issues Resolved: • Fixed an issue that caused upgrades from 4.6 SR3 to 5.1 to fail when using Default Keys. • Fixed an issue where application of policies to x86 machines would fail. • Fixed a policy issue that allowed access to blocked removable storage devices if no permissions were applied. • Fixed an issue that caused network printing jobs to fail when users inserted USB Type C docking stations into their devices. • Fixed a blue screen error that would occur when attempting to burn a CD. • Fixed a blue screen error that would occur after connecting laptop devices to docking stations. • Fixed an issue that prevented third-party applications from starting when the device had both Ivanti Device and Application Control and Kaspersky Endpoint Security with AES Crypto Module installed. • Fixed an issue that blocked scripts assigned to an unauthorized file group when Macro and Script Protection were set to Disabled. • Fixed an issue that caused Windows 10 to crash when running reports. • Fixed an issue that disrupted access to CD and DVD drives on devices with TrendMicro OfficeScan installed. • Fixed an issue that prevented access to portable encrypted USB flash drives. This issue occurred after removing a USB flash drive without first ejecting it from Windows. 2 Ivanti Device and Application Control Version History Since v 2.6 • Fixed a logging issue that caused some recorded device events to disappear. • Fixed an issue that prevented users from saving policy export DAT files consistently Known Issues: • When using Secure Volume Browser to copy a file from an encrypted device to another location, the copy does not complete successfully. NEW IN VERSION 5.1 [25-Jul-2017] • We're Now Ivanti!If you haven't already heard, HEAT Software has merged with LANdesk to form a brand-new company,Ivanti! We've renamed HEAT Endpoint Security Suite to Ivanti Device and Application Control. HEAT and Lumension still appear in certain areas of the product e.g. install folders and signing certificates. • Data Loss PreventionUse Microsoft Window's Advanced Query Syntax to search the contents, properties, and tags (if supported) of MS Office (Word, Excel, PowerPoint) and PDF files for flagged keywords and phrases. • File Type Filtering Expanded to Include MP4 Files • Added Device Support for Thunderbolt 3A LaCie D2 Thunderbolt 3 6TB removable was tested and recognized as a USB and manageable accordingly. • Added Support for Citrix XenApp and XenDesktop 7.14.1 • Expanded Virtualization Support To Include Microsoft VDI (version 6.3.9600.18623)Limitations related to this feature:Only USB devices are supported and those devices are not connected as actual devices currently. No encryption or filtering supported. Due to limitations the following are not supported: • Windows Portable • DVD Burning • Shadowing • Printing The thin client requires the ESDI dll be added to the system32 folder and the reg key set to point to it.No encryption of devices is supported as these are not connected as USBDevice log events can be used to create special device permissions. The device is not connected so requesting from the machine a list of devices will not work.File shadowing is not supported as the devices are not in a mode that the files are intercepted as being copied off.Server 2012 R2 server X64 • Maximum File Size for File ShadowingYou can now specify a maximum file size limit for file shadowing so you can avoid shadowing very large files that can use up available disk space. When files exceed the max file size, only the file name is shadowed. • Removed support for Windows Vista and Windows Server 2008Windows Server 2008 R2 is still supported. 3 Ivanti Device and Application Control Version History Since v 2.6 • Removed Support for the Manual Import of a Signature File During InstallationThe option is still visible on the install pane but will not work if selected • Publicly Available Help Online You can now access the Ivanti Device and Application Control Help content (both PDFs and WebHelp) at https:// help.ivanti.com. We encourage you to use the WebHelp as it's updated frequently, and new content is added on a regular basis. Issues Resolved: • Fixed an issue that caused the SXS service to crash when building a large number of new clients. • Fixed the issue where the Macro and Script protection eventlog messages were controled by the DC device eventlog is on, when AC Execution eventlog should be the option to control it.\ • Fixed an issue that caused a black screen on reboot of a Lenovo Thinkpad Tablet 10 20E3 • Fixed an issue that caused only the C drive to be blocked on Citrix XenDesktop 4.x • Fixed an issue that prevented a portable encrypted stick from unlocking when using SVolBro. • Fixed an issue that caused a USB mouse to appear to be in use in VMWare and therefore could not be attached. • Fixed an issue that caused Device Control policies to not get enforced when Kaspersky Endpoint Security 10 was installed. • Fixed an issue that caused generic redirects to not work on the latest Citrix 7.11+ • Fixed an issue that caused Device Control to clash with Secure Islands IQ- Protector and Word to crash. • Fixed an issue with encryption pop-ups and Device Attached notifications. • Fixed a minor visual issue in the Client Deployment Tool. • Fixed a license verification issue that prevented Application Control options from enabling. • Fixed an issue where data could not be encrypted or stored if more than approxmately 4GB. • Fixed an issue where MSI files were not being extracted by the Filetool. • Fixed an issue that caused unexpected SXE service behaviors and errors when generating reports. • Fixed an issue that caused File Group Management to not function correctly • Fixed an issue where endpoints would hang when encrypting with BitLocker • Fixed an issue that prevented saving to a network share when using Microsoft Edge and Adobe Reader DC. • Fixed an issue that caused system conflicts with Bromium. 4 Ivanti Device and Application Control Version History Since v 2.6 • Fixed an issue that caused a stop code (unmountable boot volume error) when BitLocker and Unified Write Filter were enabled. • Fixed a burning issue with encrypted discs Known Issues: • "Failed to install the hcmon driver" error when installing VMWare View® Client on a client machine. See KB 1688 for more details on this issue.