New Features and Enhancements

On the Gateways page.

On the Policies → Deploy All page.

On the Policies → INTERFACE OBJECTS → Interface Groups page.

On the Policies → Policy Rules → Add → Gateway Groups → Selected Gateway Groups page.

On the Policies → Approved/Blocked Lists → Add → Add URLs → Selected Gateway Groups page.

On the Policies → Approved/Blocked Lists → Add → Add FQDNs/IP Addresses → Selected Gateway Groups page.

On the Analysis & Reports → Reports → Add → Gateway Groups → Specify gateway groups page.

On the Analysis & Reports → Reports → Summary Report → Add → Gateway Groups → Specify gateway groups page.

On the Analysis & Reports → Log Analysis → Policy Enforcement page.

On the Analysis & Reports → Log Analysis → Internet Security page.

The Gateways → (Selected Gateway) → END USER MANAGEMENT → General Settings page is removed. It is renamed as User Type Settings and is now placed under Administration → USER AUTHENTICATION.

The Gateways → (Selected Gateway) → END USER MANAGEMENT → LDAP Settings page is removed. It is now placed under Administration → USER AUTHENTICATION.

On the Administration → USER AUTHENTICATION → LDAP Settings page, after clicking Test LDAP Server Connection, you need to choose a gateway to sync or text.

A new Dashboard widget, Device Categories Requiring Attention under the Device Map & Security tab, shows the network topology as well as the amount of endpoint devices with vulnerabilities, Internet security, and policy enforcement

A new screen, Gateways → (gateway) → Device Recognition → Endpoint Devices, shows a filterable list of endpoint devices, the severity of each endpoint device, and the amount of vulnerabilities on each endpoint device

Device information and the following vulnerability information about each device are shown by drilling down from the Device Categories Requiring Attention widget or the Endpoint Devices screen:

A new screen, Gateways → (gateway) → Device Recognition → General Settings, provides the option for manually initiated or scheduled vulnerability scans, as well as an option to set the recognition mode

The Polices → Policy Rules screen provides the option to deploy a policy to an endpoint device based on the device category

The Policies → Policy Rules screen provides new options for HTTP/2 and QUIC under Content Types

The Policies → Content Type Objects → Application Groups → Add/Edit Application Group screen provides new options for HTTP/2 and QUIC

The Gateways → (gateway) → Bandwidth Control → Manage Bandwidth Control Rules screen provides new options for HTTP/2 and QUIC under Traffic Type

When configured, the following widgets show HTTP/2 and QUIC traffic:

When configured, the following reports show HTTP/2 and QUIC traffic:

When configured, the Analysis & Reports → Log Analysis → Application Bandwidth and Analysis & Reports → Log Analysis → Policy Enforcement screens show HTTP/2 and QUIC traffic

Support for Smart Bypass and Trust Certificate options in HTTPS security policy

Support for Predictive Machine Learning in Anti-Malware security policy

Support for Gateway HA groups

A new screen, Policies → Suspicious Objects, provides an option to retrieve the Suspicious Objects list through Trend Micro Remote Manager from Worry-Free Business Security - Services

When the option on the Policies → Suspicious Objects screen is enabled:

In the Suspicious Object List, you can modify the Block Action that was retrieved from Worry-Free Business Security - Services

The Polices → User Notifications screen provides a new option for Suspicious Objects Violation under Notification Events

The Analysis & Reports → Log Analysis → Internet Security screen has an option for Suspicious Objects under Message Type

Raw log queries on the Analysis & Reports → Log Analysis → Internet Security screen shows the following details:

Under Internet Security reports on the Analysis & Reports → Reports → Report Information screen, the following new reports are available:

Smart Bypass: If enabled and the gateway is unable to decrypt SSL traffic on the first visit, on subsequent visits, the gateway will bypass decryption.

Trust Certificate: If enabled, the Cloud Edge gateway automatically trusts server certificates that are not from a trusted certificate authority when connecting to secured websites.

A new message type, Web Predictive Machine Learning, is provided to track detections by the Predictive Machine Learning scan.

This message type is displayed in the Top Threat Detections widget in the Dashboard.

A new user notification, Web Predictive Machine Learning, is provided to send to users when malware is detected by the Predictive Machine Learning scan.

Two new reports are provided:

The new message type in the security log will be included as a statistic in the following reports:

The Predictive Machine Learning detection message type security log will be a statistic in the Malware Detection Web item for the summary report.

Account lock feature enhancement

Currently, if a user tries to log in with the incorrect password three successive times within an hour, the user must enter Captcha code to ensure that a real person is attempting to log in.

With the account lock feature enhancement, if a user tries to log in with the incorrect password ten successive times within four hours, the account will be locked for four hours. If the count of failed log-in attempts does not reach ten after four hours from the first failed attempt, the count will be reset to zero. Also, the count will be reset to zero with a successful log in.

Enhanced password change security

Under the Accounts Management screen, you cannot edit the account of the logged in user. You must go to the Change User Profile screen to edit the logged in user's profile. In this screen, you must supply the current password before you can change the password.

Enhanced password policy

The password must be at least 8 characters and must contain at least one uppercase letter, one lowercase letter, and one number, and can optionally contain special characters.