Security Manager 6.5.2 release notes (NETIQKB72273)

Release notes for Security Manager 6.5 sp2.

Why Install This Version?

NetIQ Security Manager is the most comprehensive security incident management solution for today's heterogeneous enterprise environments. By consolidating security data from across the enterprise and utilizing advanced correlation, intrusion protection, powerful visualization, and advanced reporting (including trending and forensics capabilities), NetIQ Security Manager enables a rapid identification and response to key security incidents ? all through a central security console. The following sections outline the key features and functions provided by this version, as well as issues resolved in this release.

• Provides Support for Windows Server 2008 and Windows 7 Computers
• Expands Monitoring of User or Group Accounts in Change Guardian for Active Directory
• Resolves Forensic Analysis Query Permissions Issue
• Resolves Reporting Cube Depot Installation Issue
• Resolves Managed Agent Upgrade Issue
• Resolves Log Archive Server Installation Issue
• Resolves Web Console Re-Installation Issue
• Resolves Previous Aegis Installation Issue
• Resolves Forensic Analysis Query View Issue
• Resolves Domain-Less Computer or Device Display Issue
• Resolves Issue with Control Center Views in Foreign Language Environments
• Resolves Agent Authorization and Registration Event Issue
• Resolves Upgrade Password Issue
• Resolves Agent Communication Alert Description Issue
• Resolves UNIX and iSeries Real Time Event Timestamp Issue
• Resolves Log Archive Indexing Issue

Provides Support for Windows Server 2008 and Windows 7 Computers

Security Manager 6.5.2 provides support for installing and using the following components on computers using Microsoft Windows Server 2008:

• Central computer
• Log archive server
• Database server
• Reporting server

Note NetIQ recommends you install all central computers, log archive servers, database servers, and reporting servers in a configuration group on computers using the same version of Microsoft Windows.

In addition, this version includes existing support for deploying agents on Windows Server 2008, Windows Server 2008 R2, and Windows 7 computers and installing user interfaces on Windows Server 2008 and Windows 7 computers. Security Manager 6.5.2 does not support installing components other than agents on computers using Windows Server 2008 Core.

Expands Monitoring of User or Group Accounts in Change Guardian for Active Directory

Security Manager 6.5.2 resolves an issue where a user can enter a maximum of 500 characters to the Authorized Accounts, High-Profile User Accounts, or High-Profile Group Accounts lists in the Change Guardian for Active Directory pages of the Configuration Wizard. Because of this character limit, users can only add roughly 30 user or group accounts to the Configuration Wizard. Users can now enter up to 6000 characters in the lists of monitored user or group accounts in the Configuration Wizard. (ENG282914)

Resolves Forensic Analysis Query Permissions Issue

Security Manager 6.5.2 resolves an issue where you cannot run Forensic Analysis queries using an account other than the Security Manager service account. You can now run Forensic Analysis queries using any account that belongs to the OnePointOp Reporting group. (ENG281371)

Resolves Reporting Cube Depot Installation Issue

Security Manager 6.5.2 resolves an issue where if you try to install Security Manager Reporting components but do not specify the name of the SMCubeDepot server, the setup program cannot complete the installation process. The setup program now replaces any database names left blank with the name of the local computer. (ENG276695)

Resolves Managed Agent Upgrade Issue

Security Manager 6.5.2 resolves an issue where the Agent Manager cannot upgrade managed agents in certain environments. The Agent Manager can now successfully upgrade managed agents. (ENG278401)

Resolves Log Archive Server Installation Issue

Security Manager 6.5.2 resolves an issue where the Log Archive Server did not install correctly if the log archive data directory path contained spaces. The Log Archive Server now correctly installs regardless of spacing in the data directory path. (ENG278511)

Resolves Web Console Re-Installation Issue

Security Manager 6.5.2 resolves an issue where you cannot re-install the Web Console after uninstalling it from a computer with the Security Manager Control Center installed. The setup program now correctly re-installs the Web Console if you have removed it previously. (ENG273525)

Resolves Previous Aegis Installation Issue

Security Manager 6.5.2 resolves an issue where the setup program encounters an unexpected error when you install Security Manager components on a computer where NetIQ Aegis had previously been installed. The setup program now installs Security Manager correctly on computers with previous Aegis installations. (ENG284305)

Resolves Forensic Analysis Query View Issue

Security Manager 6.5.2 resolves an issue where if you select a completed Forensic Analysis report in the Security Manager Control Center and select View Query, you cannot use scroll bars on any of the tabs of the Forensic Analysis Query Properties window. You can now use scroll bars on the Forensic Analysis Query Properties window, whether viewing or editing a query. (ENG283396)

Resolves Domain-Less Computer or Device Display Issue

Security Manager 6.5.2 resolves an issue where if you deploy computers or devices that do not belong to a domain and then open the Configuration Wizard, the Configuration Wizard displays each domain-less computer or device as being a member of a separate blank domain tree in the existing computers list. The Configuration Wizard now displays all computers or devices that do not belong to a domain in a single blank domain tree. (ENG281308)

Resolves Issue with Control Center Views in Foreign Language Environments

Security Manager 6.5.2 resolves an issue where selecting alert or event views in the Security Manager Control Center causes an error in foreign language environments. Security Manager now correctly displays alert or event views in foreign language environments. (ENG283409)

Resolves Agent Authorization and Registration Event Issue

Security Manager 6.5.2 resolves an issue where if you install a new agent, when that agent starts and attempts to communicate with the central computer for the first time, Security Manager logs events warning that the agent is not registered or authorized, even if the agent is valid. Security Manager now does logs events regarding agent registration or authorization only when a previously registered or authorized agent changes to an unauthorized or unregistered state. (ENG283433)

Resolves Upgrade Password Issue

Security Manager 6.5.2 resolves an issue where if you try upgrade your Security Manager 6.0 installation and input the configuration group password, the setup program displays an error even when the password is correct. The setup program now correctly recognizes the configuration group password. (ENG283128)

Resolves Agent Communication Alert Description Issue

Security Manager 6.5.2 resolves an issue in larger environments with multiple agents where the alert indicating a heartbeat failure (event ID number 2030) does not list the specific agents experiencing failures. The alert now accurately lists all agents experiencing failures and the type of failure experienced. (ENG283045)

Resolves UNIX and iSeries Real Time Event Timestamp Issue

This service pack resolves an issue where the timestamp stored in the Security Manager event table is not the same as the agent event timestamp. The description of the event in the control center shows the original timestamp of the event. The Security Manager event table now properly displays the timestamps of real-time events. (ENG203028)

Resolves Log Archive Indexing Issue

Security Manager 6.5.2 resolves an issue where, in environments where the log archive server receives a large, continuous amount of data, the indexer can become overwhelmed by incoming messages. When this happens, the log archive can sometimes mark a received message as invalid and stop the NetIQ Security Managed Log Archive service unexpectedly.

Note Security Manager installations experience this issue very rarely, and only when the log archive server receives a very large flows of data.

The log archive server now handles large amounts of incoming data without stopping the service or flagging valid messages as invalid. (ENG282730)

Return to Top

System Requirements

For the most recently updated list of supported application versions, see the Security Manager Supported Products Web page .

This version requires one of the following to be installed on all computers before upgrading:

• NetIQ Security Manager 6.0 Service Pack 4
• NetIQ Security Manager 6.5
• NetIQ Security Manager 6.5 Service Pack 1

This version also requires different prerequisites than Security Manager 6.5. The installation program requires the latest version of the Microsoft Visual C++ 2005 Service Pack 1 Redistributable Package and the .NET Framework 2.0 Service Pack 1.

Before installing this version on a computer, ensure the computer has a minimum of 400 MB of disk space available for use by the installation program. Because the installation program functionality includes an option to roll back the installation if an error occurs, the installation program copies all Security Manager component files before updating. After the installation finishes, the installation program deletes all temporary copies of the updated files.

Formerly known as NETIQKB72273