Web Security

URL Filtering & Web 2.0 Control

Data Leakage Prevention

Content Caching & Acceleration

Application Control

Management & Reporting

Technical News Flash

Dear Customer, Partner and Reseller,
Welcome to second issue of Finjan Technical News Flash, As an ongoing effort to improve our customer service, we will provide you with information, technical tips and helpful links on a regular basis. Please feel free to make suggestions or ask questions. We welcome all feedback.

Issue 2, March 2009

Thank you for your interest, Finjans Technical Team Any feedback?

CONTENTS
Software Version 9.2 Features and Other Information Version Chain Hardware Support Matrix / End of Support Notification Latest Vital Knowledge Articles and FAQ From the Field: A Case Study Finjan Support Center What Lies Ahead

Finjan respects your privacy. You are receiving this newsletter because you subscribed explicitly. In order to unsubscribe, please send an email to unsubscribe. Please make sure that you are using the same email address as this newsletter was sent to.

Web Security

URL Filtering & Web 2.0 Control

Data Leakage Prevention

Content Caching & Acceleration

Application Control

Management & Reporting

Technical News Flash

Software Version 9.2 Features and Other Information

Issue 2, March 2009

On February 9, Finjan announced the launch of its unified Secure Web Gateway (SWG) version 9.2.
Whats New in V.9.2?

Secure Caching SSL Enhancements WCCP Enhancements Limited Shell Enhancements Secured LDAP New Wizards for User and Log Management Dashboard Enhancements
Please see full release notes for details.

Password Synchronization Master Policy Radius Administrator Authentication Alert Enhancements Data Leakage Prevention / Protection Additional File Type Support Several bug fixes

Rollback from version 8.4 and above is supported.

USB Install

DISCLAIMER: The most recent Finjan USB Flash Drive Creator must be downloaded to ensure successful installation. Any USB Creator older than version 1.0.6 is not supported in Vital Security 9.2.
1. Create a bootable USB flash device. Should you encounter any difficulties creating a bootable USB, please contact your local System Engineer. 2. Download the file USB ROOT and extract it into the USB Flash device. 3. Download the 9.2 ISO Image (md5) (approx 940 MB) onto your computer, and copy it onto the USBkey as it is. 4. Install the image according to the procedures in the Release notes

Web Security

URL Filtering & Web 2.0 Control

Data Leakage Prevention

Content Caching & Acceleration

Application Control

Management & Reporting

Technical News Flash

Version Chain

Issue 2, March 2009

8.5-MO2

8.5 8.5

MO2 9.0-39 fup

9.0 9.0-M01 (build 28) (build 39)

9.0-MO2

9.2

MO2

9.0 DVD / USB

N/A

MO2

9.2 DVD / USB

N/A

June 08

Nov 08

Nov 08

Feb 09

Feb 09

Download Links:

Local update 8.5 > 9.0 build 39: fup-file Vital Security 9.0: ISO file MD5 sum Release Notes Vital Security 9.2: ISO file MD5 sum Release Notes

Upgrade RN

NOTE: fup stands for Finjan Update, which is only needed if an appliance should be updated
offline. Please be careful with local updates, as there is no version validation check. If in doubt, please contact Finjan Technical Support. If possible, use online updates from the Vital Security Updates section in the Finjan website.

Web Security

URL Filtering & Web 2.0 Control

Data Leakage Prevention

Content Caching & Acceleration

Application Control

Management & Reporting

Technical News Flash

Hardware Support Matrix / End of Support Notification

Issue 2, March 2009

According to Finjan Product Support Policy three major release are supported. With release of 9.2 there will be no support and security updates for 8.4.3 and previous versions.

Finjan Vital Security Hardware Support Matrix - February 2009 First Shipment Date
June 1, 2005 February 1, 2007 December 15, 2006 February 10, 2009 February 10, 2009 February 1, 2007 November 1, 2008 January 1, 2005 April 1, 2006 March 15, 2007 January 1, 2005 April 1, 2006 March 15, 2007 November 1, 2008

Product

Model
NG-1000 NG-1000-SP NG-5000

End of Sale Notice

End of Support

Current Supported Versions

9.0, 8.5.0 9.0, 8.5.0 9.2, 9.0, 8.5.0 9.2, 9.0, 8.5.0 9.2 9.2 9.2, 9.0, 8.5.0 9.2 9.2, 9.0, 8.5.0 9.2, 9.0, 8.5.0 9.2, 9.0, 8.5.0 9.2, 9.0, 8.5.0 9.2, 9.0, 8.5.0 9.2, 9.0, 8.5.0 9.2

Last Supported Version

9.0 9.0 9.2 N/A N/A N/A N/A N/A N/A N/A N/A N/A N/A N/A

Vital Security NG-1000 Vital Security NG-5000 Caching Kit Vital Security NG-6000 Caching Kit

February 18, 2008 February 17, 2009 February 18, 2008 February 17, 2009

December 1, 2004 February 18, 2008 February 17, 2011 February 15, 2009 February 14, 2012 N/A N/A N/A N/A N/A N/A N/A N/A N/A N/A N/A N/A N/A N/A N/A N/A N/A N/A N/A N/A N/A N/A

NG-5000-SP NG-5000-S1 SE - 5610-S1 NG-6000 SE - 6610-S NG-8100 HS20-8832 NG-8100 HS20-8843

Vital Security NG-8000

NG-8100 HS21-8853 NG-8080 HS20-8832 NG-8080HS20-8843 NG-8080HS21-8853

Caching Kit

SE 8610-S

Web Security

URL Filtering & Web 2.0 Control

Data Leakage Prevention

Content Caching & Acceleration

Application Control

Management & Reporting

Technical News Flash

Product Model
NG-5300 NG-8300 NG-5400 NG-8400 NG-5070

Issue 2, March 2009

First Shipment Date

June 1, 2005 June 1, 2005 April 1, 2006 January 11, 2006

End of Sale Notice

September 5, 2007 September 24, 2007 N/A N/A N/A N/A

End of Support
September 4, 2008 September 23, 2008 N/A N/A N/A N/A

Current Supported Versions

Last Supported Version

N/A N/A

Load Balancer SSL Terminator VSR

2.0

N/A N/A N/A N/A

NG-5700 NG-8070 NG-8700

February 16, 2009

2.0 2.0 2.0

Latest Vital Knowledge Articles and FAQ

If the links below do not work, please open kb.finjan.com in your browser.

#1802: How can certificates be exported from the root CA in an Active Directory environment? #1810: How To Exclude Web Applications From the Authentication Mechanism #1812: How To Use X-Ray Rules To Troubleshoot The Security Policy #1815: How to download files larger than 1 GB through the Finjan #1816: Bandwidth Monitoring #1817: ICAP Timeout Error When Browsing Through BlueCoat Proxy #1820: SNMP Monitoring and Finjan MIB - Version 9.0 #1823: Forwarding IP Addresses from a Squid Cache to a NG Appliance #1827: How to boot an NG5000-S appliance from a USB key #1835: Upload Data - True Content Type #1840: Port Mapping in 9.2
Please visit our Vital Knowledge Base to keep track of latest articles and FAQ.

Web Security

URL Filtering & Web 2.0 Control

Data Leakage Prevention

Content Caching & Acceleration

Application Control

Management & Reporting

Technical News Flash

From the Field: A Case Study
Case Symptoms

Issue 2, March 2009

A customer reported that the browser-based Finjan policy management user interface was responding very slowly, preventing normal usage. Committing any change in the system took very long time and caused the appliance to be extremely unresponsive. The customer was running a version 8.4.3 appliance which is not as stable or as efficient as higher versions of the Finjans operating system, therefore upgrading to higher operating system version is always recommended.

Investigation Phase
We conducted a Webex session with the customer in order to debug it. At first we suggested checking the Hard-Drive space of the appliance using the DF command which specifies the disk usage of the appliance, as large logs can clog the system and cause this type of behavior. While there were a few logs to clear, this step didnt prove useful and the problem persisted. We analyzed running processes using the PSTREE and TOP commands in order to determine the culprit. It seems that that the main scanning engine of the Finjan, the WASP, was taking too much resources from the system. Restarting the appliances role didnt seem to resolve the issue either.

Solution
We then proceeded with backing up the database of the appliance using the GBAK internal command which copied the database of the appliance in its entirety to a different location. We then used the GBAK command to restore the database to a new location. While restoring, this command also checks for the authenticity of the database, purging it and clearing it of unused entries, shrinking its size considerably and allowing it to be used more efficiently by the Finjan. When finished, we continued by stopping the appliances role, copying the newly purged database instead of the corrupted one, and bringing the appliances role back up to speed. This did the trick, as the appliance was being more responsive, committing changes was finished in timely manner and the issue was resolved.

Conclusion
The above commands can be used from the limited shell for debugging purposes. Please note that the GBAK command is an internal script intended for support purposes only and should only be used by a Finjan Support representative.

Web Security

URL Filtering & Web 2.0 Control

Data Leakage Prevention

Content Caching & Acceleration

Application Control

Management & Reporting

Technical News Flash

Finjan Support Center

Issue 2, March 2009

As part of our customer service improvements, we have created a new platform for our customers in order to enrich their support service experience and to provide them with a higher level of customer care treatment. By the end of June 2008 the Support Portal for customers became fully operational. Customers are using it and the feedbacks are positive.

In the Finjan Support Center customers are able to:

Open new support cases Review the status of opened cases Add updates to open cases and receive updates when their case is updated in real-time View history of cases Directly access Finjans Vital Knowledge
The previously used web form was switched off when the new Finjan web site was launched.

What Lies Ahead

In the beginning of March a new maintenance fix for version 9.0 was released: 9.0-M02. We strongly recommend installing it in existing environments. See Release Notes for details as usual from the Vital
Security Updates section in the Finjan website. engine for customers version 9.0 McAfee updates5.3 will only be availablebe provided as usingas 8.5 will beand above. For version 8.5, pattern for McAfee engine will long supported.