Users Guide

Technical Advisories v9.4
● After Dell Enterprise Server and DDP Enterprise Server - Virtual Edition installation, the Remote Management Console
displays "1 Uncommitted Override," indicating a pending policy commit. The policy represents an internal setting. To work
around this issue, commit policies after installation. In the left pane, click Management > Commit, enter the description,
"Initial commit," and click Commit Policies. [DDPS-3163]
● If either the SQL database or SQL instance is configured with a non-default collation, installation fails. A non-default
collation must be case-insensitive. For a list of collations and case sensitivity, see https://msdn.microsoft.com/en-us/
library/ms144250(v=sql.105).aspx. [DDPS-3355]
● In order for Dell Data Protection SED and HCA v8.5.1 and earlier clients to communicate with Dell Enterprise Server and
Virtual Edition v9.4, the following settings must be configured on the Server:
1. On the Security Server, access <installation folder>\Enterprise Edition\Security Server\conf\spring-jetty.xml, and comment
out the excludeProtocols property:
<!--
<property name="excludeProtocols" value="SSL,SSLv2,SSLv3" />
-->
2. In the ..\Dell\Java Runtime\jre1.8\lib\security\java.security file, remove "SSLv3, " from the line below:
jdk.tls.disabledAlgorithms=SSLv3, RC4, DH keySize < 768
[DDPS-3371]
● Universal security groups are not supported due to the way they are created within Active Directory. [DDPS-3765]
New Features and Functionality v9.2
● Dell Enterprise Server now supports Advanced Threat Prevention. Advanced Threat Prevention provides real-time threat
detection by analyzing potential file executions for malware in both the operating system and memory layers to prevent the
delivery of malicious payloads. Control of execution at the endpoint allows for accurate and effective detection of malicious
threats - even those that have never been seen before. Advanced Threat Prevention uses machine learning techniques
that allow detection of new malware, viruses, bots and unknown future variants, where signatures and sandboxes fail.
Memory protection strengthens basic operating system protection features by providing an additional layer to detect and
deny certain behaviors that are commonly used by exploits.
● The Remote Management Console has a new look and feel, with a responsive HTML 5 design that can be viewed on virtually
any screen size. It no longer requires installation and is now accessed at this URL:
https://server.domain.com:8443/webui/
● The Remote Management Console now offers the following new features and capabilities:
○ Email alert notifications can be set for Threat Protection and Advanced Threat Prevention events.
○ When data is recovered on a computer with more than one self-encrypting drive, each drive can be individually selected
for recovery.
● Amended 07/2016 - The Console Web Service component is no longer used as of v9.2, with the removal of the Silverlight
Console.
Resolved Technical Advisories v9.2
● Further research into entitlement issues yielded testing improvements, resulting in the resolution of some open and
unresolved issues. [DDPMTR-1768, DDPS-1571, DDPS-1716/DDPSUS-235]
● A few items on Remote Management Console screens that were previously untranslated are now translated. [DDPS-846,
DDPS-1519, DDPS-1525, DDPS-1722, DDPS-1928]
● The Compliance Reporter Effective Policy Report now displays Gatekeeper connections and the correct value type for the
Policy Proxy Polling Interval policy. [DDPS-1233]
● When a non-domain computer is joined to the domain, duplicate endpoint entries no longer display in the Remote
Management Console, and the endpoint properly receives policies. [DDPS-1304]
● The Compliance Reporter Administrator List Report now includes the Group Name field. [DDPS-1720]
● In the Remote Management Console, when Client Firewall rules are added or edited, the executable Signed by field is now
validated. [DDPS-1794/DDPSTE-445]
Dell Security Management Server Technical Advisories
33