New for v8.0.1 in X-Series appliances

60203 | Release Notes | Websense X-Series Appliances | 3-June-2015

Express upgrade

A new, simpler, more efficient upgrade method, called express upgrade, was introduced in version 8.0.0.

Express upgrade is the recommended method of upgrade to any version of 8.0.x. It is recommended because:

It bundles all of the needed upgrade patches into one package and ensures that they are applied in the correct order

It ensures that all patches are correct for the selected version and certified for production

It is the most efficient upgrade process, requiring the fewest steps and human interactions

To begin using express upgrade, the appliance module (APP) must first be upgraded to v8.0.0. After that, an express upgrade package can be used to upgrade directly to any version of 8.0.x. Here's how it works:

After upgrading APP to v8.0.0, in the CLI when you enter load patch with no arguments, a list of patches is displayed. The first package in the list is the Express upgrade package. It is clearly named, including version.

When you select the express upgrade package, the patches in the package are automatically installed as soon as the download process is complete, without the need for a separate install patch command.

For complete details, see the v8.0.x X-Series Upgrade Guide

Password guidelines for "admin"

The password guidelines for the admin account (the default administrator account used by all Websense TRITON solutions) are being moved toward alignment across products and platforms.

On X-Series appliances, the admin password must now meet the following standards:

8 to 15 characters in length

Include:

At least one uppercase character

At least one lowercase character

At least one number

At least one special character
For example: ! # % & ' ( ) * + , - . / ; < = > ? @ [ ] ^ _ { | } ~

Exclude all of the following:

The user name of any appliance service account (admin, root, websense-ts, audit)

Common appliance related terms (appliance, filtering)

The name of Websense services (for example, TRITON, AP-WEB, AP-EMAIL, ContentGateway, PolicyBroker, PolicyDatabase, PolicyServer, DirectoryAgent, StateServer, Multiplexer, UsageMonitor, ControlService, or NetworkAgent)

The device's hostname

The special characters: space $ : ` \ "

Not repeat the previous 3 passwords for the account

Updated glibc libraries

To address vulnerability CVE-2015-0235 (known as GHOST), the GNU C glibc library is updated in the Appliance (APP), TRITON AP-WEB, and TRITON AP-EMAIL modules. For more information about CVE-2015-0235 in relation to Websense security solutions, see the Websense Knowledge Base article titled GHOST glibc Vulnerability CVE-2015-0235.

Updated OpenSSL libraries

In all modules supported by the X10G, OpenSSL libraries have been updated to version openssl-1.0.1e-30.