
Network Security Platform v6.0 Page 3
700-2360F00
Release Notes
1 What’s new in this release
This section details the features and/or enhancements delivered with this release of Network Security Platform 6.0.
All the features listed below are described in detail in Addendum II to 6.0 Documentation. Existing 6.0 guides are also
updated to include the enhancements supported in this release. The sections below indicate the guide that contains
updates for each feature/enhancement.
Heterogeneous Environment Support
With this release of 6.0, Network Security Manager provides support for a heterogeneous environment wherein Sensors
configured with either 5.1 or 6.0 Sensor software can be configured to the 6.0 Manager. The signature set included in
this release supports attack definitions for both 5.1 and 6.0, and hence provides a heterogeneous environment.
A 6.0.7.x Central Manager can support both 5.1.11.x and 6.0.7.x Managers. If your Central Manager setup has
Managers using versions 6.0.3.x or 6.0.5.x, then you must upgrade all the Managers to 6.0.7.x to configure these to a
6.0.7.x Central Manager.
With a heterogeneous signature set, the Manager selects only the compatible attacks, signatures, and protocols based
on the Sensor software. For example, for a 5.1.x Sensor, the Manager selects only the attacks, signatures, and protocols
compatible for 5.1 from the heterogeneous signature set.
If you are upgrading from 5.1 to this release of 6.0, you need to manually import the heterogeneous signature set and
push it to the Sensors.
With this release, the Manager can manage 5.1 and 6.0 I-series, M-series, N-450 Sensors, and NTBA Appliances.
A 6.0.7.5 Manager does not support NAC on both 6.0 and 5.1 I-series Sensors.
If you are upgrading from an earlier version of 6.0 and were using Snort signatures, and plan to add 5.1 Sensors to the
same Manager, then after upgrading to this release of Manager software, perform the following steps:
1. In the Custom Attack Editor, go to File > Snort Advanced > View Snort Variables.
2. Click Re-Submit Rules using Current Variables.
A heterogeneous environment is useful in large deployments where the Sensor software upgrade to a major version can
be handled in phases with minimum impact to the production network. McAfee recommends that you use the latest
version of the Manager and Sensor software to avail all features supported in Network Security Platform version 6.0
onwards.
For more details, see 6.0 Upgrade Guide.
Update Server Authentication Enhancements
In earlier releases of 6.0, a separate authentication was required to access McAfee Update Server for downloading latest
signature sets. With this release, upon a successful login to the Manager, you are automatically logged into the McAfee
Update Server as well. Therefore, the Manager > Update Server > Credential page has been removed.
Licensing Changes
In this release of 6.0, the following licensing changes are available:
You do not require a license file for using Manager/Central Manager version 6.0.7.x or above. Therefore, the
Licenses tab under the Manager node has been removed.
No license file is required for enabling IPS on I-series and M-series Sensors; no license is required for enabling NAC
on N-450 Sensors. In other words, when you add a Sensor to the Manager, upon discovery, the native functionality
supported on the Sensor model is automatically enabled.
Comentarios a estos manuales