CyBlock/Cyfin Release 9.2.6 Now Available

Monday, November 14th, 2016

In Release 9.2.6, we are pleased to provide the ability to pair multiple cloud accounts in Hybrid deployments extending your local CyBlock policies to employees in multiple regions. Multiple cloud accounts can also be paired with your CyBlock Directory Agent instance to update the groups and IDs information for employees across multiple regions.

Also in this release is the ability to set a different time zone in your cloud account based on where your Web activity is occurring versus the time zone of your cloud instance. For MSP Partners, the time zone can be set for each of your customers. For Hybrid deployments, the time zone can be set for each of your cloud accounts. The enhancements are highlighted below.

  • Multiple CyBlock Hybrid Cloud Accounts
    • Hybrid Configuration. The ability to pair your local CyBlock installation with multiple CyBlock Cloud accounts is now available on the Hybrid Configuration page. Any configuration changes, including policy changes, in your local CyBlock instance are automatically synced with all paired cloud accounts.
    • Data Management. The cloud log file name is now in the format cloudproxy_cloudserver+port_date.txt and is truncated. You can hover over it to view the full name.
    • Real-Time Web Monitor. Your multiple hybrid configurations are displayed in the Data Configuration drop-down field. Monitor the live Web traffic of any cloud account by selecting the associated hybrid configuration.
    • Reporting. Your multiple hybrid configurations are also available for selection in Dashboard charts and in reports allowing you to view the data for any cloud account.
  • Multiple CyBlock Directory Agent Cloud Accounts
    • The ability to pair your CyBlock Directory Agent installation with multiple CyBlock Cloud accounts is now available on the Directory Agent Configuration page. This allows you to synchronize your internal Active Directory with multiple cloud accounts.
    • Any AD configuration changes in CyBlock Directory Agent are automatically synced with all paired cloud accounts.
  • Cloud Web Activity Time Zone
    • Cloud Customers. The time zone in which your organization’s Web activity is occurring can now be set in your CyBlock Cloud account. The default Web activity time zone is the time zone of your cloud instance, but this can be changed. Web activity displayed in the Dashboard charts, reports, and real-time monitors will reflect the time zone that is set for your cloud account.
    • MSP Customers. For MSP Partners, the time zone can be set for each of your customers. Web activity displayed in the Dashboard charts, reports, and real-time monitors will reflect the time zone that is set for that specific customer.
    • Hybrid Deployments. For Hybrid deployments, the time zone can be set for each of your CyBlock Cloud accounts. Reporting is based on your local CyBlock instance time.

There are also corrections in this release. To see the full release notes for your product, visit our Web site or knowledge base. You can upgrade to the latest release by going to the Help – Check for Updates screen in your product.

For additional assistance, please feel free to contact us.

Proactively synchronize your organization’s internal AD with CyBlock Directory Agent.

Monday, March 23rd, 2015

DirectoryAgent

Changes in your Active Directory (AD) can happen often, and randomly. Whether it is due to changes in a group or an update to the status of an employee, having your workforce change can be a critical security concern if not addressed immediately. Wavecrest CyBlock Cloud customers can now import and schedule automatic updates for any changes to your organization’s AD Groups and IDs, using the CyBlock Directory Agent. There is no need to manually recreate groups and IDs for the cloud service. The features also include a configuration wizard for easy AD setup, the ability to add only new data from AD or replace all groups and IDs, and the ability to view your list of groups and IDs to verify the imported grouping structure. Configuration is easy to implement, and confirmation e-mails are sent to verify the import. With CyBlock Directory Agent, you will know that your changes have been synced, per your schedule or manually at any time, with your CyBlock Cloud account.

CyBlock Cloud Web Security Solution provides comprehensive Web controls, threat protection, reporting, bandwidth management, and more — all in a deployment requiring no hardware or software to buy and install, and no maintenance. Find out more about all the Web Security product lines at Wavecrest Computing.

 

CyBlock/Cyfin Release 9.1.5 Now Available

Tuesday, February 24th, 2015

Release 9.1.5 provides CyBlock Cloud customers with CyBlock Directory Agent, an easy-to-manage directory synchronization tool. CyBlock Directory Agent synchronizes internal Active Directory data with CyBlock Cloud updating the groups and IDs information required by the cloud service. There is no need to manually recreate groups and IDs for your cloud service. Current cloud customers should contact Sales to have this module enabled.

The release also contains updates to the MSP Partner Portal to include the new Directory Agent module. Another enhancement is the ability to create a white list and a black list in the same category policy. The enhancements are highlighted below.

  • CyBlock Directory Agent. The following features have been added:
    • The User Management pages allow you to manage how you would like to import AD groups and IDs, create an AD configuration, and import users from AD.
    • The System Status pages show product communication and event information which is used by Technical Support for troubleshooting purposes.
    • The Settings pages allow you to restart the service for the product as well as pair your Directory Agent installation with your cloud account by entering an access key.
    • The Help menu contains product documentation, Support pages, product updates, and contact information.
    • You will receive e-mail notifications on the availability of an access key or a newly generated access key, and the status of a manual or scheduled AD import.
  • MSP Partner Portal. The following features have been added:
    • The Home Page shows a status icon for the CyBlock Directory Agent module.
    • When viewing the details of a customer, a new D Agent tab displays the status of the Directory Agent module, pairing status, communication port, and access key.
    • You will receive e-mail notifications on the availability of a newly generated access key for Directory Agent and the status of a manual or scheduled AD import.
  • White List/Black List. The ability to create a white list as well as a black list in the same Web category policy is now available. You may enter and save both allowed and blocked URLs.

There are also corrections in this release for CyBlock as well as Cyfin. To see the full release notes for your product, visit our Web site or knowledge base.

If you are at version 9.0.5 or later, you can upgrade to the latest release by going to the Help – Check for Updates screen in your product.

If you are at version 6.8.3.a or earlier, you can download the latest release by going to CyBlock Software Downloads or Cyfin Downloads. To upgrade CyBlock Appliance, please contact Technical Support at (321) 953-5351, Ext. 4 or support@wavecrest.net.

For additional assistance, please feel free to contact us.

Cyfin Release 8.8.2 and CyBlock Release 6.8.2 Now Available

Monday, July 1st, 2013

We are pleased to announce the release of new versions of CyBlock Appliance, CyBlock Software, and Cyfin. In this release, you will find significant enhancements to the products. For CyBlock, the first enhancement is the addition of a new screen that allows you to install client authentication certificates for the proxy so that it can connect to sites that require a nonstandard client certificate. The second enhancement involves a total revision of the Login Name Caching feature to allow more flexibility in the way user names are cached and cached entries are used. Also for CyBlock, domains that have issues when SSL Inspection is used can now be exempted from inspection.

Other enhancements in this release include the ability to import Active Directory Groups and IDs on a more frequent basis than once every 24 hours, and for Cyfin, we have made numerous changes to log file configurations. We also have a number of corrections in this release. The enhancements are described below.

  • SSL Certificates.  This includes the following changes:
    • The ability to install client authentication certificates for the proxy has been added so that the proxy can connect to sites that require a nonstandard client certificate. The proxy uses the installed client certificates when SSL Inspection is enabled to identify clients (Web applications) to Web servers.
    • The Advanced Settings – Proxy Settings – SSL Certificates screen has been added to allow you to add a client certificate. On this screen, you assign domains and groups and/or IDs to the certificate so that the usage of the certificate is secured to only those domains and for those groups and/or IDs. All fields on the screen are required.
    • As certificates are added, they are displayed in a list where you can enable/disable, edit, view, and delete each certificate.
  • Login Name Caching.  This includes the following changes:
    • The Advanced Settings – Proxy Settings – Login Name Caching screen has been updated to allow more flexibility in the way user names are cached and cached entries are used. The screen now consists of the following fields:
    • Cache Mode – The following options are available:
      • Primary – In this mode, cache is used when connection requests are made. If a cache entry is not found or is invalid, authentication occurs and user names are added to the cache.
      • Supplemental – This option is the default and replaces the previous Enable option. If authentication fails or an entry in the Authentication Manager Bypassed list is accessed, the cache is used before the user name “bypassed.”
      • Disabled – In this mode, cache is never used, and all connection requests are authenticated. Entries in the Authentication Manager Bypassed list are given the user name “bypassed.”
    • Duration of Valid Entry – This is the time in minutes that the entry will be available in cache before it is cleared. The default is two minutes.
    • Exempt IPs – This box allows you to enter IP addresses that should be excluded from login name caching. Wildcards (e.g., asterisk (*)) in IP addresses are not matched and should not be used.
  • SSL Inspection.  This includes the following changes:
    • The Advanced Settings – Proxy Settings – SSL Inspection screen now allows you to specify domains to be tunneled, that is, exempted from inspection.
    • Domains to be tunneled can be added or deleted.
    • The list of domains to be tunneled will include specific entries from the URL List. These sites are known to have issues when SSL Inspection is used, and they cannot be deleted from the domain list.
  • Active Directory.  The ability to import Active Directory Groups and IDs on a more frequent basis than once every 24 hours has been added. The Frequency field was added to the Advanced Settings – Groups and IDs – Import – Active Directory – Schedule screen allowing you to schedule the import hourly or at a specific hour.
  • Log File Configurations.  This includes the following changes:
    • On the Logfiles – Setup – Select Logfile Type screen, the Type of Logfile drop-down box has been updated as follows:
      • The following log file configurations have been added.
        • EdgeWave iPrism
        • NETGEAR
        • Palo Alto Firewall
        • Trustwave
      • The following log file configurations have been renamed.
        • 8e6 to 8e6 Appliance
        • BorderManager Proxy to BorderManager
        • BorderWare Firewall to BorderWare
        • Cisco Cache Engine to Cisco Content Engine
        • IronPort Appliance to IronPort
        • Nemesis Cache Proxy to SuperLumin Nemesis
        • NetCache Appliance to NetCache
        • Symantec Web Security to Symantec Web Gateway
      • The sort in the drop-down box has been changed to a case-insensitive sort. Previously, entries beginning with a lowercase letter were sorted last in the list, and entries with the first few letters in uppercase were out of order.
      • The following log file configurations have been converted to an XML format and allow the processing and better handling of more records. Previous and new reports may show differences in counts based on the number of records processed.
        • Barracuda Networks
        • Bloxx Proxy
        • Blue Coat Systems (SGOS 3 & 4 & 5)
        • Blue Coat Systems Common Format
        • CyBlock Appliance
        • CyBlock Proxy
        • Cyfin Proxy
        • EdgeWave iPrism
        • IronPort
        • McAfee Web Gateway
        • NETGEAR
        • Palo Alto Firewall
        • Squid Proxy
        • SuperLumin Nemesis
        •  Webwasher Gateway V7

To see the full release notes for your product, visit the Support Forum. You can download the latest release by going to the Administration – Product Update screen in your Cyfin or CyBlock product.

For additional assistance, please contact us.

Cyfin Release 8.7.2 and CyBlock Release 6.7.2 Now Available

Tuesday, August 28th, 2012

Upgrade today with the latest release of Cyfin and CyBlock. In this release, you will find new user guides, significant changes to the Dashboard charts, new pages to display errors, screen communication with the ISA plug-in as well as several corrections. The list of enhancements for CyBlock Proxy, CyBlock ISA, CyBlock Appliance, Cyfin Reporter, and Cyfin Proxy includes the following:

  • User Guides. The user guides were enhanced to add a hyperlinked table of contents and additional hyperlinks in the chapters for ease of navigation when reading as electronic documents. The chapter and section headings, notes, cautions, and important information are color-coded for improved readability. With the improved layout, the user guides can be easily printed double-sided if you prefer to read in hard copy.
  • Dashboard Charts. The charts and screens were modified to remove the need for Adobe Flash Player, add the ability to zoom in the chart, add a legend to toggle options on and off, and update other sections of the screens.
  • Import From Active Directory. After creating or modifying an Active Directory configuration, you can now click an import link on the Configuration Completed screen. You will be directed to the Import – Active Directory – Manual screen to import groups and IDs.
  • Error Pages. Error pages were added to display more detailed error information and allow information to be sent via e-mail to the administrator if the administrator e-mail is set up. The administrator can then submit the error and additional information to Wavecrest Technical Support.
  • New Job Queue Section. For CyBlock, a Job Queue section was added to the Block Web Categories and Block Web Content screens to inform the user that jobs are running in the queue. If jobs are in the queue, this new section is displayed when the page is accessed or after submitting changes. The page is refreshed when the Job Queue is empty.
  • Speed Up ISA Communication. The communication between the ISA plug-in and the CyBlock service was enhanced so that on the Edit URLs screen, only custom categories are loaded and not the entire URL List decreasing the load time. In addition, messages are now queued.
  • Add Screen Communication for ISA.Changes were made to indicate that the ISA plug-in is communicating with specific screens while the communication messages are being queued. Messages will be displayed on the following screens:
    • Login – Results
    • Administration – System Information – Filter Status
    • Advanced Settings – Filter Settings – Block Web Categories
    • Advanced Settings – Filter Settings – Block Web Content

To see the full release notes for your product, visit the Support Forum. You can download the latest release by going to the Administration – Product Update screen in your Cyfin or CyBlock product.

For additional assistance, please contact us.

Managing Groups and IDs in CyBlock and Cyfin

Thursday, October 8th, 2009

There are two options for managing your Groups and IDs in Cyfin or CyBlock.  You can manage them either “Inside the Product” or “Outside the Product.”

By choosing to manage your Groups and IDs “Inside the Product,”  it means exactly that.  You can manually add, delete and move Groups and IDs in the product.  If you import your Groups and IDs from Active Directory or a text file, each time your Groups and IDs are imported either manually or scheduled, only NEW Groups and IDs will import.  The new Groups and IDs that are imported will be based on your configuration setup in the Active Directory Setup wizard.  Your existing Groups and IDs will not be modified, which means if a user left or moved departments, he/she will have to be deleted or moved in the product.  If you want to have users in the VIP group, you must use the “Inside the Product” option.

If you select to manage your Groups and IDs “Outside the Product,” then you will be only managing and making changes to your Groups and IDs at the directory source.  Each time Groups and IDs are imported, whether manually or scheduled from Active Directory or a text file, all Groups and IDs will be updated to identically match that configuration. Typically this option is not used because the directory source is grouped according to your network setup and not according to how you will want to apply Web-use policies.