Professional Documents
Culture Documents
x Release Notes
Section A: "Reporter 9.2.x Overview" on page 2Provides information about all of Reporter 9.2.x. Section B: "Reporter 9.2.4.1, build 51876" on page 10Provides information about fixes in the v9.2.4.1 release. Section C: "Reporter 9.2.3.1, build 46694" on page 13Provides information about the new feature and fixes in the v9.2.3.1 release. Section D: "Reporter 9.2.2.1, build 45899" on page 15Provides information about the critical bug fix in the v9.2.2.1 release. Section E: "Reporter 9.2.1.1, build 45741" on page 16Provides information about the initial 9.2.x release.
Introduction
Before beginning the installation process, please review the following sections:
"Reporter 9.2.x Feature Matrix" on page 3Provides a quick reference for features introduced in each release, with links to full feature descriptions. "Installing/Upgrading Information" on page 3Provides a quick reference that links to descriptions of customer-reported Service Requests (SRs). "About Licensing" on page 4Provides information about the various Reporter licenses. "System Compatibilities" on page 5Lists which versions of various thirdparty products are compatible with Reporter 9.x. "Global Reporter Limitations" on page 7Provides any limitations that apply to all Reporter 9.x releases. "Reporter Documentation" on page 8Lists and describes the Reporter documentation suite.
Support
Direct support questions regarding this release to: http://www.bluecoat.com/support/contact.html
For questions or comments related to these Release Notes or any Reporter documentation, send an e-mail to: documentation@bluecoat.com
Introduced In Component Feature "Reporter Improvement Program" on page 16 Language Administration User Access "Chinese and Japanese Language Support" on page 13 "Audit Logging" on page 16 "LDAP Nested Groups Support" on page 17 "Role-Based: Allowing Managers to View Direct Report Data" on page 17 "Role-Based: Allowing Reporter Users Access to Their Personal Data" on page 17 Log Source "Custom Calendar" on page 18 "UNC Paths" on page 18 Reports "Threat Protection Enhancements" on page 18 "Network Errors Category" on page 19 "Search Engine Keywords (Report)" on page 19 Custom Report Scripting "Web API" on page 19 X X X 9.2.1 X X 9.2.2 9.2.3 9.2.4
X X X X X X
Installing/Upgrading Information
This section discusses upgrading to Reporter 9.2.x from previous releases.
Database Sizes
Because of the new log data indexing that enables faster reporter generation times, Reporter 9.x databases can be anywhere from 1.5 to 3-times larger than previous versions (7.x/8.x). The size increase is highly dependent on the log data. For complete estimates, refer to the Reporter Sizing Guide.
To accommodate the use of 64-bit operating systems, databases populated by Reporter 9.x processes can grow from 100 to 200 percent larger when compared to the same data set processed in Reporter 8.x. Blue Coat strongly recommends that you consult the Blue Coat Reporter 9.x Sizing Guide to verify that your Reporter system allotment is adequate
The following features and tools associated with previous releases are not available in Reporter 9.2.x:
IM/Streaming/Chat reports (to retain these databases, you can simultaneous run Reporter 8.3.x and 9.2.x). CIFS log support CLI administration/report generation HTML e-mail reports Custom log formats Any v7 reports
About Licensing
Reporter 9.2.x features three available licenses:
Standard (default)Installing and running Reporter requires no license; however, the default mode (also known as Standard License) limits log processing to 50 million concurrent log lines. If log processing reach this limit, Reporter halts processing until lines are removed from databases (or you install a higher level license).
and installing an Enterprise License enables Reporter to process up to 2.5 billion concurrent log lines.
PremiumPurchasing and installing an Enterprise License enables Reporter to
EnterprisePurchasing
process up to 10 billion log lines. After purchasing an Enterprise or Premium license, refer to the installation procedure in the Blue Coat Reporter 9.x Initial Configuration Guide.
System Compatibilities
Reporter 9.2.x supports the following 3rd party systems and products.
Note: Blue Coat Reporter 9.x can run on VMware systems. To be precise, Reporter runs on supported Windows or Linux platforms, which might themselves be running on VMware systems. Reporter does not require awareness of VMware.
Servers
General
FTP Servers
These are the FTP server types that Blue Coat uses to test. Other FTP servers might function correctly, but they are not officially supported by Blue Coat.
Windows
Notes
Supports Intel x86 and AMD processors; Reporter does not support Intel RISC processors. For 32-bit servers, Blue Coat recommends Windows 2003 users use the / 3GB switch option to allocate more memory to the Reporter service. For details of how to accomplish this (with the boot.inifile), see:
http://www.microsoft.com/whdc/system/platform/server/PAE/ PAEmem.mspx
Linux
32-bit: Red Hat Enterprise AS/ES 4 and AP/ES 5. 64-bit: Red Hat Enterprise AS release 4 and AP 5 (Nahant Update 4 or 5)
Note:
About OpenSSL
For the highest security, Blue Coat recommends running OpenSSL 0.9.8o (requires Reporter v9.2.4.x). To upgrade, see the next section, "OpenSSL".
Libcurl Requirement
See "Linux" on page 15 in the v9.2.2.1 Limitation section.
OpenSSL
Linux: v.9.2.4.1 and later uses 0.9.8o. For Reporter upgrades on Windows, the upgrade to v0.9.80 occurs. If your Linux distro does contains a previous version, perform the following procedure.
Steps to Upgrade (Linux)
OpenSSL version 0.9.8o. Perform the following steps: 1. Download the version of OpenSSL:
http://www.openssl.org/source/openssl-0.9.8o.tar.gz
3. Remove all softlinks of libssl.so and libcrypto.so from /usr/lib /usr/lib64 and /lib, /lib64:
rm /usr/lib/libssl.so
5. Create symbolic link to the new shared library. For example, in /usr/lib:
Perform the same step in all directories mentioned above. 6. Extract curl:
./configure --prefix=/usr make make install
Browsers
Blue Coat recommends the following browsers for Reporter access:
Other browsers, such as Firefox 2.x and IE 7.x, will work, but Reporter users might experience slower performance.
Languages
Reporter 9.x supports English, Chinese Traditional, Chinese Simplified, and Japanese. While you might run Reporter on a system that supports user interaces in your language, Reporter is able to support only the specified languages.
Recommended Limits
Do not exceed the following established limits in Reporter 9.2.x:
Limit Recommended
Realms Users Roles Groups Databases Log Sources Custom Reports (per user) Templates/Named Filters (per user)
Limit
Recommended
Panes (per user) Scheduled Events Rows in Report Archived Reports Concurrent Users Pending ProxySG appliances PDF exports
25 5000 25000 No limit; based on disk space capacity. 50 150 Dashboard/Overview Charts: 10 entries + an others entry for pie charts. Summary Charts: 25 entries, plus an others entry for pie charts.
FTP
On some Windows servers, the firewall might prohibit large FTP file transfers. This causes FTP Log Sources to abort log processing and unload because of the fatal error. Disabling the FTP firewall, or possibly increasing a restrictive custom timeout, allows the Log Source to download the entire log file. For more information, see the Microsoft Knowledge Base Article ID:
931130 "Error message when you use and FTP client to download a large file from an FTP server: "Connection closed by remote host"
Double-byte Characters
Double-byte characters in access logs are currently not supported in Reporter 9.x.
Note:
The Reporter Management Console supports Chinese/Japanese Operating Systems and also supports Chinese/Japanese display in the Reporter user interface, but the required double-byte characters are not stored or processed.
Reporter Documentation
This section lists the current Blue Coat Reporter 9.x Documentation Suite:
Blue Coat Reporter 9x. Sizing GuideUse this reference to determine asset requirements for your particular Reporter deployment. Blue Coat Reporter 9.x Initial Configuration GuideDescribes how to install Reporter, how configure the ProxySG to upload access logs to a dedicated server, and how to create a profile and user role. Also includes installation best practices and troubleshooting. Blue Coat Reporter 9.x Administrators GuideProvides tasks and best practices for Blue Coat Reporter administrators. Tasks include policy for backing up access logs, alternative methods, and troubleshooting.
Online Help SystemThe Reporter 9.x user interface features a contextsensitive Online Help System. An administrator logging into Reporter has access to all topics. Non-admin users have access only to topics related that are related to the Report Dashboard and general report information. https://bto.bluecoat.com/documentation/pubs/view/Reporter 9.x https://bluesource.bluecoat.com/technicalresources/productmanuals
PDF versions of these manuals are available on the Blue Coat resource sites:
Blue Coat Reporter 9.2.x Release Notes Section B: Reporter 9.2.4.1, build 51876
Fixes in 9.2.4.1
This section describes all of the user-impacted Reporter issues that were fixed since v9.2.3.1.
Application
Reporter did not properly shut down when the streaming method was configured. (B#139386, SR 2-294895682, 2-304154235) Running a two-filter, site based report required hours to complete. (B#146128, SR 2-322601732)
Browser-Specific
After applying report options, reports did not correctly display in Internet Explorer (okay in FireFox). (B#143305, SR 2-315775432)
Custom Reports
Database
10
Blue Coat Reporter 9.2.x Release Notes Section B: Reporter 9.2.4.1, build 51876
Exporting
Canceling a Dashboard report crashed the service. (B#139346, SR 2-313170152) Exports to CSV file show data in KB, MB or GB; previous versions display in Bytes. (B#141962, SR 2-309950662, 2-311834532) Using a weekly trend report, the date range displayed on the Reporter user interface but not in the exported PDF. (B#143114, SR 2-315553441) Time stamp on PDF report was different than the HTML report. (B#142951, SR 2-314716432) Viewing a Full Log Detail report while trying to download PDF or CSV caused a crash. (B#143027, SR 2-314276029)
Filtering
The option to filter a report using a pre-populated text file was only available to Reporter Administrators. (B#145584, SR 2-322166062) Date filter applied to a role was not respected. (B#143737, SR 2-317138342) Two different results when using the user is in filter option on two identical databases but on separate Linux servers. (B#146834, SR 2-322769652, 2-326721552) Release Notes contained incorrect syntax for -CURRENT USER- in role feature description. (B#146385, SR 2-324671922)
LDAP
The Bcaudit.log does not declare with a Fully Qualified Distinguished Name (FQDN) which user did what. (B#144343, SR 2-316003202) Reporter treated log in names as case sensitive. (B#146214, SR 2-324320047)
Reports
Threat Protection Report date was incorrect (Jan 1, 1970). (B#141676, SR 2-307842302)
Scheduling
Some reports on the List of Scheduled Reports never complete. (B#142347) Re-editing the e-mail recipients on a scheduled report caused an error. (B#143106, SR 2-315875174, 2-318489584) Days of week off by one day while scheduling reports. (B#141678, SR 2-301021882, 2-319734612, 2-331767552)
11
Blue Coat Reporter 9.2.x Release Notes Section B: Reporter 9.2.4.1, build 51876
Scheduled tasks did not load for scheduled Trend reports. (B#146210) Could not set any schedule to a value of 1 (one). This included log source checks and report scheduling. (B#147014, 2-327037192)
Security/SSL
Multiple SSL/TLS vulnerabilities fixed. See Security Advisory 50. (https://kb.bluecoat.com/index?page=content&id=SA50). Support for SSL/TLS secure renegotiation added. See Security Advisory 44. (https://kb.bluecoat.com/index?page=content&id=SA44).
User Interface
The User is in LDAP group filter did not consistently apply. (B#144586, 2-318160931)
Web API
Using the Web API to produce a report did not declare the filtered options on the report. (B#141189, SR 2-302149512) E-mailed WebAPI reports display in Archive Reports but cannot be downloaded. (B#141719, 2-309447202) Using the Web APIcreating a report with no filter present caused a bit of text commenting with the word: where. (B#144425, SR 2-318748511)
Web Server
When the time is out by 20 mins, the Dashboard and Reports page displayed as blank. (B#143602)
12
Blue Coat Reporter 9.2.x Release Notes Section C: Reporter 9.2.3.1, build 46694
The Online Help System translation is based on the 9.2.1 help information.
Fixes in 9.2.3.1
This section describes all of the user-impacted Reporter issues that were fixed since v9.2.3.1.
Exporting
Exporting Dashboard reports to PDF did not always not reflect the same values that were displayed in the HTML report. (B#138893) Exported PDF reports displayed duplicated names of the month. (B#140254, SR 2-297378441)
Reports
Scheduler
Scheduled tasks list never completedremained in perpetual Loading state. (B#139794, SR 2-298629712)
13
Blue Coat Reporter 9.2.x Release Notes Section C: Reporter 9.2.3.1, build 46694
SMTP
Despite SMTP authentication disabled, Reporter attempted to authenticate on both e-mail alerts and e-mails with attached reports. (B#140822, SR 2301151632)
14
Limitations in 9.2.2.1
Limitations are issues that impact Reporter operation but are not subject to fixing by Blue Coat.
Linux
A clean installation of Reporter on Linux will not start because of libcurl dependency errors. Installing the libcurl fixes this issue. For the updated information on this issue, see the following Blue Coat Knowledge Base article:
https://kb.bluecoat.com/index?page=content&id=KB3828
(SR 2-301789412)
Fixes in 9.2.2.1
This release contains the following fixes.
LDAP
After upgrading from 9.1.2.x to 9.2.1.x, users could log in but saw only blank screens with no reports. (SR 2-298834992, 2-299280609)
Scheduler
The Scheduled Reports area never loaded and prevented report management. (SR 2298629712)
15
"New Features in v9.2.1" "Fixes in v9.2.1" on page 20 "Limitations in v9.2.1" on page 20 "Known Issues in v9.2.1" on page 21
Audit Logging
Enables Reporter administrators to analyze when users access Reporter and what actions they take within. When enabled, audit logging records actions such as Reporter log ins and log outs, changed settings, role assignments, and report generations. Log entries display in the following format:
<134>1 2009-09-23T20:22:40.0Z [system name] Reporter 56301 USR001 - User user_admin logged in
This is the syslog format as specified by RFC 3164 (http://www.ietf.org/rfc/ rfc3164.txt). Any reader that can parse it can be used to consume these logs, which are saved on disk.
16
LDAP Enhancements
Reporter 9.2 provides the following LDAP features.
Any group that the user is a member of; Any groups those groups are a member of; and Any groups those groups are a member of and any groups those groups are a member of.
The nesting continues for as many layers of groups exist. For example, the enterprise contains a group called Engineering, which contains members Engineering A, Engineering B, and Engineering C, all of which are also groups containing members (users). With nested groups, a member of Engineering A also becomes a member of Engineering. When nesting is enabled on Reporter, all members of Engineering A, Engineering B, and Engineering C have access to the role.
Administrator credentials: General Settings > System Settings > Access Control > LDAP in the wizard, select the nesting option assign a role to nested groups.
Important:
The ProxySG and Reporter must be configured to use the same LDAP realms for user identification and authentication. The user naming attribute and user base DNs must also be configured the same on both sides.
17
The ProxySG and Reporter must be configured to use the same LDAP realms for user identification and authentication. The user naming attribute and user base DNs must also be configured the same on both sides.
Log Sources
Reporter 9.2 provides the following Log Source features.
Custom Calendar
The Log Source wizard provides the ability to use a calendar-based schedule that allows you to set what time Reporter performs a check for new log data. For example, you want checking to always occur during off-peak hours or not during a scheduled maintenance cycle.
UNC Paths
Reporter 9.2 supports locating log sources on a share. In the New Database/New Log Source wizards, the Directory Path fields support entering a share format path (for example, \\path\path.).
Important: While other, similar fields allow you to enter UNC paths, Blue Coat strongly recommends against locating other Reporter components (such as databases, journals, archives) on shares. You will not be able to use the Upload Diagnostics feature should a problem arise.
18
Web API
The Web API feature makes available a public API of HTTP endpoints (as opposed to private HTTP endpoints that are used by the JavaScript client). This public API allows you to script report creation. The reports, returned in an HTTP response, support PDF and CSV (Microsoft Excel-compatible) file formats. The Web API supports report generation, but does not support settings and configuration management.
Additional Support
Blue Coat provides a Perl script that you can use as a base template to customize. This script, viewable with a text editor, is packaged with the Reporter application. Assuming you installed Reporter in the default directory: Windows: C:\Program Files\Blue Coat Reporter 9\utilities\samples Linux: opt/bc/reporter/utilities/samples
For more detailed information and a list of supported HTTP endpoints, see Chapter 5: Web API in the Reporter 9.x Administrators Guide.
19
Fixes in v9.2.1
Reporter 9.2.1 is a new release that contains the following fixes first reported in v9.1.x.
Exporting
Generating a monthly report displayed different totals in CSV format versus PDF format. (SR 2-289899956) Attempting to export a PDF, ordered by requests, does not download the file (and corrupts the file). (SR 2-260346482)
Filtering
Despite applying a custom date filter for multiple days, reports displayed data for only one day. (SR 2-286866344) When the Previous month filter is applied, Reporter included days from two months prior. (SR 2-289940942, 2-290368462)
FTP
FTP log source configurations did not accept hostnamesonly IP addresses and Reporter did not display the lack of DNS resolution. (SR 2-291219812)
Limitations in v9.2.1
This section lists issues known by Blue Coat for which near-time solutions are not planned.
Browsers
Internet Explorer v8: Attempting to download a report might cause Reporter to display the following message similar to the following: To help protect your
computer, IE has blocked the download. Right-click and select the option to download the file.
Selecting this option refreshes the Reporter page and disrupts the download process. To prevent this, in Internet Explorer 8: 1. Select the Tools > Internet Options > Security tab. 2. In the Security Level for This Zone area, click Custom Level; the Security Settings Internet Zone dialog displays. 3. Scroll down to the Downloads area; for the Automatic prompting for file downloads option, select Disable. 4. Click OK in both dialogs.
Exporting
From any report page Graph Options area: if you select to graph more than one column and export the report to PDF, only the first data column is graphed.
20
Exporting
Adding the Bandwidth Used by Day report to the dashboard and then exporting it to a PDF report results in different data on the graph. (SR 2-282515062) If the Dashboard is exported as a PDF and then canceled, it might crash the Reporter service.
Filtering
Generating a report with Category and the IS NOT criteria filters displays more data, not less. (SR 2-289956880, 2-293156542)
Installing/Upgrading
Upgrading Reporter fails when roles are present but not assigned to a database. Reporter successfully loads after you paste the roles.cfg file back into the directory, but still errors out because the path names in the preference.cfg, log_sources.cfg, and database.cfg files are not valid for the server. (SR 2295280962)
LDAP
Using LDAP authentication might cause unnamed binds to secondary servers. Users are not able to log in or receive a password prompt indicating a group not found. Consult the team responsible for managing Active Directory in your enterprise; use the Global Catalog as the AD server. Extremely large AD trees might cause Reporter to hang while searching. (SR 2-243124032).
Reports
Page view counts for Web 2.0 sites might be inaccurate. (SR 2-295967234)
21
22