New in Email Security Gateway v7.8.4

Topic 70085 | Release Notes | Email Security Gateway | Version 7.8.4 | Updated: 26-Aug-2014


Applies To:	Websense Email Security Gateway v7.8.4 Websense Email Security Gateway Anywhere v7.8.4

Enhancements added to version 7.8.4 focus on new appliance platform support, simplified configuration of Data Security policy actions, and enhanced system health awareness. The following new Email Security Gateway features are available in version 7.8.4:

Websense X-Series modular chassis support

Enhanced Data Security action plan configuration

System health monitoring alert enhancements

Embedded Help updates are also included in these Release Notes.

Websense X-Series modular chassis support

Email Security Gateway can now be deployed on a Websense X-Series modular chassis blade server, part of a high-performance network security system. This new support has the benefit of making Email Security Gateway available on a platform that is scalable for large enterprise organizations.

Websense X-Series appliances are configured and maintained through a command line interface (CLI). The CLI is a text-based user interface for configuring, troubleshooting, and monitoring the appliance.

See the following resources for information about X-Series appliance deployment:

X-Series Appliance Release Notes

X-Series Appliance Getting Started Guide

X-Series Appliance Command Line Interface Guide

Enhanced Data Security action plan configuration

The version 7.8.3 release provided tighter integration between Email Security Gateway and Data Security by allowing a DLP policy action plan to include a filter action configured in Email Security Gateway (Main > Policy Management > Actions). That implementation included some configuration limitations that applied when a Data Security action was created in a network with multiple standalone appliances or appliance clusters.

This version simplifies policy action configuration in those types of networks. The following action properties are affected:

Use IP address. Available for a Data Security action being created in a multiple standalone appliance environment. The default setting is the appliance E1 interface.

This setting may be customized for each standalone appliance.

Deliver email messages based on domain-based route. Available for a Data Security action being created in a multiple appliance/multiple cluster environment. The default setting is the default route (Settings > Inbound/Outbound > Mail Routing).

This setting may be customized for each appliance.

Save the original message to a queue. Available for a Data Security action being created in a multiple appliance/multiple cluster environment. The default setting is data-security.

This setting may be customized for each appliance.

Deliver message is now the default policy action option rather than Resume processing.

The Strip attachment option is now called Drop attachment. It is available only for Data Security policy actions.

See the topic titled Creating and configuring a filter action in Email Security Manager Help for more information.

System health monitoring alert enhancements

The previous version of Email Security Gateway included a new inbound undelivered email health alert, for which you could configure a frequency threshold that triggered the alert. In version 7.8.4, you can create a list of backup external recipient email addresses to which this notification can be sent.

This version of Email Security Gateway also includes 2 new system health alerts:

Work queue growth rate alert. Notification provides an estimate of when the message work queue will reach its size limit, based on growth rate.

The work queue includes inbound messages waiting for analysis, messages waiting for Email Security Gateway to deliver, and deferred messages waiting for subsequent delivery attempts.

Exception queue capacity alert. Notification alerts an administrator when the exception queue capacity reaches a specified percentage.

The exception queue includes any message that currently cannot be delivered because it has encountered an exception situation during message analysis.

Use the Settings > Alerts > Alert Events page to configure these alerts. Click the Configure alert thresholds link for each alert type to open a configuration dialog box. See the topic titled Configuring system alerts in Email Security Manager Help for details.

The email notification for each alert contains helpful troubleshooting information to help an administrator resolve these queue size issues.

Help updates

The following updates have been made to the Email Security Gateway Help system after product release files had been delivered:

A message from an address listed in the Trusted IP Addresses group:

Bypasses Personal Email Manager Always Block List analysis

Does not bypass message control invalid recipient or internal sender verification settings

Does not bypass the connection control timeout value

A message from an address listed in the Allow Access List Options (Settings > Inbound/Outbound > Connection Control) bypasses True Source IP detection.