Altiris™ IT Analytics Data Loss Prevention Pack 3.5 from Symantec

Altiris™ IT Analytics Data
Loss Prevention Pack 3.5
from Symantec™ Release
Notes
Altiris™ IT Analytics Data Loss Prevention Pack 3.5
from Symantec™ Release Notes
Legal Notice
Copyright © 2014 Symantec Corporation. All rights reserved.
Symantec, the Symantec Logo, the Checkmark Logo and Altiris, and any Altiris or Symantec
trademarks used in the product are trademarks or registered trademarks of Symantec
Corporation or its affiliates in the U.S. and other countries. Other names may be trademarks
of their respective owners.
This Symantec product may contain third party software for which Symantec is required to
provide attribution to the third party (“Third Party Programs”). Some of the Third Party Programs
are available under open source or free software licenses. The License Agreement
accompanying the Software does not alter any rights or obligations you may have under those
open source or free software licenses. Please see the Third Party Notice document for this
Symantec product that may be available at
http://www.symantec.com/about/profile/policies/eulas/, the Third Party Legal Notice Appendix
to this Documentation or TPIP ReadMe File accompanying this Symantec product for more
information on the Third Party Programs.
The product described in this document is distributed under licenses restricting its use, copying,
distribution, and decompilation/reverse engineering. No part of this document may be
reproduced in any form by any means without prior written authorization of Symantec
Corporation and its licensors, if any.
THE DOCUMENTATION IS PROVIDED "AS IS" AND ALL EXPRESS OR IMPLIED
CONDITIONS, REPRESENTATIONS AND WARRANTIES, INCLUDING ANY IMPLIED
WARRANTY OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE OR
NON-INFRINGEMENT, ARE DISCLAIMED, EXCEPT TO THE EXTENT THAT SUCH
DISCLAIMERS ARE HELD TO BE LEGALLY INVALID. SYMANTEC CORPORATION SHALL
NOT BE LIABLE FOR INCIDENTAL OR CONSEQUENTIAL DAMAGES IN CONNECTION
WITH THE FURNISHING, PERFORMANCE, OR USE OF THIS DOCUMENTATION. THE
INFORMATION CONTAINED IN THIS DOCUMENTATION IS SUBJECT TO CHANGE
WITHOUT NOTICE.
The Licensed Software and Documentation are deemed to be commercial computer software
as defined in FAR 12.212 and subject to restricted rights as defined in FAR Section 52.227-19
"Commercial Computer Software - Restricted Rights" and DFARS 227.7202, et seq.
"Commercial Computer Software and Commercial Computer Software Documentation," as
applicable, and any successor regulations, whether delivered by Symantec as on premises
or hosted services. Any use, modification, reproduction release, performance, display or
disclosure of the Licensed Software and Documentation by the U.S. Government shall be
solely in accordance with the terms of this Agreement.
Symantec Corporation
350 Ellis Street
Mountain View, CA 94043
http://www.symantec.com
Technical Support
Symantec Technical Support maintains support centers globally. Technical Support’s
primary role is to respond to specific queries about product features and functionality.
The Technical Support group also creates content for our online Knowledge Base.
The Technical Support group works collaboratively with the other functional areas
within Symantec to answer your questions in a timely fashion. For example, the
Technical Support group works with Product Engineering and Symantec Security
Response to provide alerting services and virus definition updates.
Symantec’s support offerings include the following:
■
A range of support options that give you the flexibility to select the right amount
of service for any size organization
■
Telephone and/or Web-based support that provides rapid response and
up-to-the-minute information
■
Upgrade assurance that delivers software upgrades
■
Global support purchased on a regional business hours or 24 hours a day, 7
days a week basis
■
Premium service offerings that include Account Management Services
For information about Symantec’s support offerings, you can visit our website at
the following URL:
www.symantec.com/business/support/
All support services will be delivered in accordance with your support agreement
and the then-current enterprise technical support policy.
Contacting Technical Support
Customers with a current support agreement may access Technical Support
information at the following URL:
www.symantec.com/business/support/
Before contacting Technical Support, make sure you have satisfied the system
requirements that are listed in your product documentation. Also, you should be at
the computer on which the problem occurred, in case it is necessary to replicate
the problem.
When you contact Technical Support, please have the following information
available:
■
Product release level
■
Hardware information
■
Available memory, disk space, and NIC information
■
Operating system
■
Version and patch level
■
Network topology
■
Router, gateway, and IP address information
■
Problem description:
■
Error messages and log files
■
Troubleshooting that was performed before contacting Symantec
■
Recent software configuration changes and network changes
Licensing and registration
If your Symantec product requires registration or a license key, access our technical
support Web page at the following URL:
www.symantec.com/business/support/
Customer service
Customer service information is available at the following URL:
www.symantec.com/business/support/
Customer Service is available to assist with non-technical questions, such as the
following types of issues:
■
Questions regarding product licensing or serialization
■
Product registration updates, such as address or name changes
■
General product information (features, language availability, local dealers)
■
Latest information about product updates and upgrades
■
Information about upgrade assurance and support contracts
■
Information about the Symantec Buying Programs
■
Advice about Symantec's technical support options
■
Nontechnical presales questions
■
Issues that are related to CD-ROMs, DVDs, or manuals
Support agreement resources
If you want to contact Symantec regarding an existing support agreement, please
contact the support agreement administration team for your region as follows:
Asia-Pacific and Japan
[email protected]
Europe, Middle-East, and Africa
[email protected]
North America and Latin America
[email protected]
Altiris™ IT Analytics Data
Loss Prevention Pack 3.5
from Symantec™ Release
Notes
This document includes the following topics:
■
About Data Loss Prevention Pack for Altiris IT Analytics
■
What's new in Symantec IT Analytics Data Loss Prevention Pack 3.5
■
General installation and upgrade information
■
System requirements
■
Fixed issues
■
Documentation that is installed
■
Other information
About Data Loss Prevention Pack for Altiris IT
Analytics
Data Loss Prevention Pack is an advanced reporting and analytics module, part of
the Data Loss Prevention (DLP) Suite. It enables DLP program managers to easily
create the reports and the dashboards that communicate the value of the DLP
programs to executive sponsors and business unit stakeholders. It also enables
in-depth visibility on DLP operational data across its functions for auditors, IT
Altiris™ IT Analytics Data Loss Prevention Pack 3.5 from Symantec™ Release Notes
What's new in Symantec IT Analytics Data Loss Prevention Pack 3.5
managers, and incident remediators’ managers. The product allows customers to
extract the data that is contained within their Symantec Data Loss Prevention
database(s) into summarized tables on a scheduled basis so that reports can run
fast and without affecting the performance of the DLP Enforce management console
Data Loss Prevention IT Analytics is free of charge for the DLP licensed customers.
It runs on top of the (SMP), which provides a strong reporting platform, and eases
the process to install and upgrade DLP IT Analytics module. DLP IT Analytics
connects with the Symantec Data Loss Prevention database through a standard
Oracle client which once established, populates the predefined DLP IT Analytics
cubes with the relevant Symantec DLP product data. The DLP IT Analytics Server
then processes these cubes on a given schedule, allowing the data to come together
into the meaningful views which the users can easily interact with, analyze, and
share across the organization.
For a list of cubes, reports, dashboards, and KPIs included with the DLP IT Analytics,
please see the following references:
What's new in Symantec IT Analytics Data Loss
Prevention Pack 3.5
In Data Loss Prevention Pack 3.5, the following new features are introduced:
Table 1-1
List of new features
Feature
Description
New Agent - Health Status
attribute
A new Agent – Health Status attribute has been added to the DLP Agent dimension.
This corresponds to the agent health status that is shown in the Agent Overview screen
within the DLP console. This data is available for DLP 12.0 or later.
Agent Groups support
A new Agent Group dimension has been created and added to the DLP Agent Status
cube.
The Agent Group dimension contains the following attributes:
■
Configuration Name
■
Description
■
Is Enabled
■
Name
This is only applicable for DLP 12.5 or later.
8
Altiris™ IT Analytics Data Loss Prevention Pack 3.5 from Symantec™ Release Notes
General installation and upgrade information
Table 1-1
List of new features (continued)
Feature
Description
Directory Group Matching
(DGM) attributes
The following new attributes were added to the DLP Sender Profile Condition and DLP
Recipient Profile Condition dimensions:
■
Data Source File Name
■
Column Name
■
Clause Values
These three attributes expose the WHERE clause information within the
Sender/Recipient directory rules on the DLP Groups tab.
This applies to the DLP Policy History cube.
Vector Machine Learning
(VML) support
A new dimension has been created for the VML condition type. Although VML was
introduced in DLP 11.1 it was not supported in IT Analytics until this release.
Cube updates
Several cubes have been updated with additional dimension attributes to provide
greater options in reporting.
Additionally, the DLP ScansAgent Status cube has been updated to support Agent
Groups.
Processing performance
Cube processing performance has been greatly improved and optimized to provide
shorter processing times on average. Note that the processing time varies depending
on the amount of data to be included in the cubes and the server hardware specifications
present in your environment.
General installation and upgrade information
You install this product by using the Symantec Installation Manager. You can
download the installation files directly to your server or you can create offline
installation packages.
To upgrade IT Analytics and associated packs, you use Symantec Installation
Manager.
Note: If you have customized any cubes in your implementation, upgrading to this
release of IT Analytics will uninstall all previous cubes and reports. As such, it is
recommended that you back up the IT Analytics Analysis Services and Symantec
CMDB databases. Additionally, if you modified any out-of-the-box IT Analytics
reports, it is recommended that you back up those reports as well. To back up those
reports, save them from within SQL Reporting Services Report Manager console.
Due to schema modifications between versions, you will then need to reapply any
customizations made to cubes and/or reports after upgrading.
9
Altiris™ IT Analytics Data Loss Prevention Pack 3.5 from Symantec™ Release Notes
System requirements
For more information, see the Installing IT Management Suite chapter in the IT
Management Suite 7.5 SP1 Planning and Implementation Guide at the following
URL:
http://www.symantec.com/docs/DOC7332
System requirements
IT Analytics requires the following:
■
Symantec Management Platform 7.5 SP1
■
Microsoft SQL Server 2005 SP4, 2008 SP1 or higher, or 2008 R2 or higher, and
2012 (for IT Analytics Cube database)
■
Microsoft SQL Server 2005 SP4, 2008 SP1 or higher, or 2008 R2 or higher, and
2012 (for IT Analytics Reports)
■
ADOMD.NET 9.0
■
Microsoft Office Web Components 11 (2003)
■
Microsoft Report Viewer 2008 SP1
Fixed issues
The following issues are the fixed issues for this release:
Table 1-2
Fixed issues
Issue
Description
The Agent - Status attribute
does not show accurate data.
This attribute is part of the DLP Agent dimension within the
N/A
DLP Agent Status cube. Starting with DLP 12.0, the data that
is displayed for this attribute doesn’t match the agent status
that is shown within the DLP console.
Endpoint Incident duplicates.
This applies to the DLP Endpoint Incident Summary and DLP N/A
Endpoint Incident Details cubes.
When a DLP agent is deleted and then reinstalled with the
same name, the old instance is not removed but is marked as
deleted. Consequently, every incident that this endpoint
generates contains two records in the cube as opposed to one.
The cubes have been updated to eliminate the duplication
problem.
Article link
10
Altiris™ IT Analytics Data Loss Prevention Pack 3.5 from Symantec™ Release Notes
Documentation that is installed
Table 1-2
Issue
Fixed issues (continued)
Description
Article link
Deleted statuses are shown as This applies to the DLP Incident Status History cube.
unknown.
With this fix, historical data for status changes is preserved
even if the status is deleted within the DLP console.
N/A
Incorrect totals for status groups This is applicable to the DLP Incident Status History cube. N/A
measures.
With this fix, the measures that are associated with the status
groups are calculated correctly.
Note: The status group measures are accurate as long as
each status is assigned to one and only one status group.
Documentation that is installed
Table 1-3
Documentation that is included in the product installation
Document
Description
Location
Help
Information about how to use The Documentation Library, which is available in the Symantec
this product.
Management Console on the Help menu.
Help is available at the
Context-sensitive help is available for most screens in the Symantec
solution level and at the suite Management Console. To open context-sensitive help, click inside the
level.
window, pane, dialog box, or other screen element about which you
want more information, and then do one of the following:
This information is available
in HTML help format.
■ Press the F1 key.
■
In the Symantec Management Console, click Help > Context.
In the Symantec Help Center window, type your search string to search
within the installed documentation. To expand your search to the
Symantec Knowledge Base, check Include online search.
For more information on how to use the Symantec Help Center, click
the Home symbol.
11
Altiris™ IT Analytics Data Loss Prevention Pack 3.5 from Symantec™ Release Notes
Other information
Table 1-3
Documentation that is included in the product installation
(continued)
Document
Description
Location
Product
Guides
Information about how to use ■
this product.
This information is available
in PDF and Cloud help
format.
■
■
The Documentation Library, which is available in the Symantec
Management Console on the Help menu.
The Documentation Library provides a link to the PDF User Guide
on the Symantec support Web site.
The Supported Products A-Z page, is available at the following
URL:
http://www.symantec.com/ business/support/index?page=products
Open your product's support page, and then under Common
Topics, click Documentation.
The IT Management Suite Planning and Implementation Guide,
Administration Guide, Migration Guides, and the IT Management
Solution Guides are also accessible from the following cloud help
location:
http://symhelp04.elasticbeanstalk.com/CS?locale=EN_US&vid=
v90719369_v93032876&ProdId=SYMHELPHOME
Other information
In the Symantec Management Platform 7.5 documentation, the following changes
are introduced:
■
Symantec Management Platform release notes are deprecated. You can find
the information about the Symantec Management Platform release in the Asset
Management Suite, Client Management Suite, and Server Management Suite
release notes.
■
The Symantec Management Platform Installation Guide is deprecated. You can
find the information about the Symantec Management Platform installation in
the IT Management Suite Installation Guide.
■
The Symantec Management Platform User Guide is deprecated. You can find
the information about the Symantec Management Platform in the IT Management
Suite Administration Guide.
■
You can find the information about Software Management Framework in the
Software Management Solution User Guide.
12
Altiris™ IT Analytics Data Loss Prevention Pack 3.5 from Symantec™ Release Notes
Other information
Table 1-4
Information resources that you can use to get more information
Document
Description
Location
IT Management Suite 7.5
SP1 Planning and
Implementation Guide
Information about capacity
recommendations, design models,
scenarios, test results, and optimization
best practices to consider when planning
or customizing IT Management Suite.
http://www.symantec.com/docs/DOC7332
IT Management Suite
Administration Guide
Information about using the Symantec
Management Platform.
http://www.symantec.com/docsDOC7220
IT Management Suite
Installation Guide
Information about installing IT Management http://www.symantec.com/docs/DOC6847
Suite components with Symantec
Installation Manager.
Knowledge base
Articles, incidents, and issues about this
product.
Symantec Connect
An online magazine that contains best
Symantec Connect page
practices, tips, tricks, and articles for users
of this product.
SymWISE support page
IT Analytics Support Landing Offers a consolidated list of topics on IT
IT Analytics Support Landing page
Page
Analytics for Documentation,
Troubleshooting, Known Issues and more.
Symantec Connect - IT
Provides answers to the most frequently
Analytics FAQ and Resources asked questions on IT Analytics.
IT Analytics FAQ and Resources
Symantec Connect –
Learning to Use IT Analytics
Reporting
Lists several Symantec Connect articles
which offer additional examples for using
IT Analytics reporting.
Learning to use IT Analytics Reporting
Symantec Connect –
Reporting How-To Videos
Provides a list of how-to videos for using
IT Analytics Reporting.
Reporting How-To Videos
Symantec Connect – Adding Offers a step-by-step walkthrough of
a Custom Data Class to an IT adding a custom data class to an IT
Analytics Cube
Analytics cube.
Adding a Custom Data Class to an IT
Analytics Cube
13