home *** CD-ROM | disk | FTP | other *** search
- -----------------------------------------------------------------------
- -----------------------------------------------------------------------
- -- BlackICE Defender --
- -----------------------------------------------------------------------
- -----------------------------------------------------------------------
-
- Release Notes for Network ICE BlackICE Defender Release 2.1.cn
- . blackice.exe version 2.1.36
- . blackd.exe version 2.1.34
- . blackdll.dll version 2.1.44
- . blackdrv.sys version 2.1.44 (for Win NT/2000)
- . blackdrv.vxd version 2.1.45 (for Win 95/98/Me)
-
- These Release Notes contain important information about your copy of
- BlackICE. The following topics will be covered:
-
- . System Requirements
- . What's New in this Release
- . Known Issues and Limitations
- . General Information
- . Support
- . Bug Fixes/Changes History
-
- -----------------------------------------------------------------------
- -- System Requirements ------------------------------------------------
- -----------------------------------------------------------------------
-
- Hardware: Pentium class computer.
-
- OS: Windows 95 (retail(single user), OSR1, OSR2.x)
- Windows 98 (retail, SP1, Second Edition)
- Windows NT 4 Workstation (SP4, SP5, SP6, SP6a)
- Windows 2000 Pro (SP1)
- Windows Me
-
- Memory: Minimum of 16 MB.
-
- Disk Space: A minimum of 6.5 MB. This includes 2.5 MB allocated for
- logging trace files.
-
- Other: System must be using COMCTL32.DLL version 4.72 or newer;
- COMCTL32.DLL is available at:
- http://msdn.microsoft.com/downloads/sdks/platform/redist.asp
-
-
- -----------------------------------------------------------------------
- -- What's New in this Release -----------------------------------------
- -----------------------------------------------------------------------
-
- . Please refer to the section 'Bug Fixes/Changes History' below.
-
- -----------------------------------------------------------------------
- -- Known Issues and Limitations ---------------------------------------
- -----------------------------------------------------------------------
-
- KNOWN ISSUES
-
- . If you update from 1.8.6.x to 1.9.14 and later uninstall BlackICE,
- on Win 98, a Windows registry entry in the
-
- HKLM/Software/Microsoft/Windows/CurrentVersion/Run
- (note: HKLM = HKEY_LOCAL_MACHINE)
-
- key to load blackd.exe (specifically the LoadBlackD entry) will
- remain. On Win 95, the Windows registry entry in
-
- HKLM/Software/Microsoft/Windows/CurrentVersion/RunServices
-
- may remain as well.
-
- Work-around: Uninstall 1.8.6.x prior to installing 1.9.14 or newer.
- At worst, you can uninstall BlackICE cleanly using the utility
- located at:
-
- http://www.networkice.com/Download/updatebiremove.htm
-
- . Certain intermediate adapter drivers may cause BlackICE to crash.
-
- Work-around: Configure BlackICE to ignore that adapter by adding a
- line in blackice.ini, then restarting your system. This web page
- explains how to do this:
-
- http://www.networkice.com/Advice/Support/KB/q000023/default.htm
-
- . For Win NT 4: Under certain situations, the floppy drive is
- inaccessible when BlackICE is installed.
-
- Work-around: Add the following line to blackice.ini:
-
- starting.i=101
-
- After saving and closing blackice.ini, stop and start the blackice
- service in the service list.
-
- . If you are using a dialup modem to access the Internet and you are
- having difficulties connecting with BlackICE Defender running, then
- try the following:
-
- 1. Add the following line to blackice.ini:
-
- restart.whenDeviceChg = false
-
- 2. Save and close blackice.ini.
- 3. Done.
-
- LIMITATIONS
-
- . Under certain situations, you may see the RED slash across the
- BlackICE system tray icon. This may happen under certain conditions,
- to include:
-
- .. You invoked BlackICE Engine/Stop BlackICE Engine.
-
- .. The BlackICE engine is in startup delay. BlackiCE has determined
- that for some reason, the system was abruptly or unexpectedly
- shutdown in a prior computer session. If you do not wish the
- BlackICE engine to go into startup delay, add the following line
- to sigs.ini (note that an entry for that parameter might already
- exist there; in this case modify the entry):
-
- startup.crashdelay = false
-
- If this is the case, you will not be able to start the engine from
- the user interface because the engine is actually running but in
- delayed mode. To recover from this, run the batch program stopblackd.bat,
- wait a minute and then start the engine from the menu.
-
- .. BlackICE has detected a network device insertion event and is
- re-starting to accommodate the new device. In this case the red
- slash is temporary and will disappear after a few seconds. One example,
- if you access the Internet via a dialup modem, then it is very likely
- that you will see the red slash appear everytime you connect to the
- Internet. If you don't want this to occur, then consider adding the
- following line to the blackice.ini file:
-
- restart.whenDeviceChg = false
-
- The side effect of adding this line is BlackICE may, under certain
- conditions, detect your computer as an intruder.
-
- .. Your system has become busy to the point where the BlackICE user
- interface is temporarily unable to communicate with the BlackICE
- engine. If this is the case, you will see the red slash for only a
- short period of time with no lapse in system protection from the
- BlackICE engine.
-
- .. The BlackICE engine has terminated unexpectedly. If this happens,
- contact support-L1@networkice.com and provide the necessary
- information as recommended in the SUPPORT section of this document.
-
- . On some notebook computers, configured to go into standby/sleep when
- there is lack of computer activity (e.g. disk, keyboard, and mouse
- activity), BlackICE Defender may prevent going into standby because of
- BlackICE Defender's own disk activity.
-
- . If you are having difficulties performing SCANDISK or DEFRAG, stop
- the BlackICE engine. When your computer is busy receiving network
- traffic, so is BlackICE (busy, that is). As such, BlackICE is also
- busy logging information to your disk. SCANDISK or DEFRAG may not
- finish when your disk drive is in use.
-
- . BlackICE will prevent certain PDA's to synchronize. If this happens,
- stop the BlackICE engine.
-
- . Versions older than 2.5 of Cookie Crusher are incompatible with
- BlackICE. Removing the Cookie Crusher fixes the problem.
-
- . The parameter "adapters.enabledxxx = false" was originally intended
- to force BlackICE to ignore traffic from the specified adapter. At
- present it will only prevent BlackICE from opening the specified
- adapter, and will continue to monitor traffic and protect against
- intrusions from that adapter.
-
- -----------------------------------------------------------------------
- -- General Information ------------------------------------------------
- -----------------------------------------------------------------------
-
- . Packet/Evidence Files
-
- BlackICE generates packet and evidence logs (log*.enc and evd*.enc
- respectively). To view these files, you will need a utility that
- can read and decode them. This URL lists such utilities:
-
- http://www.robertgraham.com/pubs/sniffing-faq.html#software-windows
-
- . What to do about attacks
-
- These Web pages provides information on what to do about attacks:
-
- What can I use for evidence?
- http://www.networkice.com/Advice/Support/KB/q000016/default.htm
-
- What's the format of attack-list.csv
- http://www.networkice.com/Advice/Support/KB/q000018/default.htm
-
- I've been attacked, now what?
- http://www.networkice.com/Advice/Support/KB/q000033/default.htm
-
- Oh my gosh, I'm being hacked!
- http://www.networkice.com/Advice/Support/KB/q000040/default.htm
-
- . This page lists Internet sites you can use to scan your host. These
- sites won't work if you computer is behind a proxy.
-
- http://www.networkice.com/Advice/Support/KB/q000026/default.htm
-
-
- -----------------------------------------------------------------------
- -- Support ------------------------------------------------------------
- -----------------------------------------------------------------------
-
- Should you require technical support please send your support request to:
-
- support@networkice.com
-
- When submitting a support request, in the subject heading of your e-mail put the
- category of the issue you are experiencing and your license key. For example:
-
- QUESTION: 123450-RS-12345
-
- You can use any one of the following categories:
- - CRASH : BlackICE is causing your system to crash or hang
- - QUESTION : ask a question
- - OPERATION : report an issue regarding one of BlackICE's functions
- or feature
- - NEW INSTALL : you are experiencing an install issue
- - UPDATE INSTALL: you are attempting to update your BlackICE
- installation and are experiencing difficulties doing so
- - FEATURE : to suggest features you would like to see in BlakICE
- - OTHER : to request support for an issue that doesn't fit any of
- the above categories
-
- Make sure to include the following files when requesting technical
- support:
-
- -blackd.log
- -blackd-old.log
- -sigs.ini
- -blackice.ini
- -firewall.ini
- -license.key
-
- -----------------------------------------------------------------------
- -- Bug Fixes/Changes History ------------------------------------------
- -----------------------------------------------------------------------
-
- RELEASE 2.1.cn (this release)
-
- . Issue: Improved compatibility with newer versions of VPN software.
-
- . Issue: Resolved the occurence of erroneous dates on packet and
- evidence logs.
-
- . Issue: Reduced false positives on DNS corrupt packets and ICMP echo
- with no request.
-
- RELEASE 2.1.cm
-
- . Issue: Windows 2000 SP1 causes BlackICE to report a "filter failed"
- event.
-
- Resolution: Fixed
-
- . Issue: Under certain conditions, BlackICE crashes on startup causing
- the red slash to show up.
-
- Resolution: Fixed
-
- RELEASE 2.1.cl
-
- . Feature: Support for Windows Millennium added.
-
-
- RELEASE 2.1.cb
-
- . Feature: New fourth tab that provides license information. This
- tab provides details about your product license.
-
- . Issue: On Windows 2000, the engine stops if the Update Notification
- preference is checked.
-
- Resolution: Fixed.
-
- . Issue: With Netscape Navigator 4.73 as the default browser, invoking
- the Download Update function via the BlackICE Defender user interface
- fails.
-
- Resolution: Fixed.
-
- . Issue: On Windows 95/98, on certain system configurations, users
- could not access the Internet.
-
- Resolution: Fixed.
-
-
- RELEASE 2.1.x
-
- . Issue: Under certain conditions, specific types of traffic may cause
- BlackICE to crash or result in the system rebooting.
-
- Resolution: Fixed.
-
- . Issue: Under certain conditions, BlackICE's system tray icon shows
- a red slash through it.
-
- Resolution: Occurence reduced. The likelihood of this happening
- is now reduced.
-
- RELEASE 2.1.u
-
- . New major release of BlackICE Defender.
-
-
-