With the Security Update 2011.09.01, Symantec Enterprise Security Manager has been enhanced to support Red Hat Enterprise Linux 6.1 on x86, x86_64, PPC64, and zLinux (s390x) and Oracle Solaris 11 Express on x86 and SPARC.
The Security Update 2011.09.01 also includes a new content separation functionality, six new checks, and six new messages across various modules on UNIX and Windows.
Install Security Update 2011.09.01 to upgrade UNIX and Windows security modules on Symantec ESM 9.0 or later agents. For detailed descriptions of new features and enhancements, download the Security Update 2011.09.01 Release Notes.
New Support
New support on ESM 9.0 or later versions are as follows:
Red Hat Enterprise Linux 6.1 on x86, x86_64, PPC64, and zLinux (s390x)
Oracle Solaris 11 Express on x86 and SPARC
New Features
New features in Security Update 2011.09.01 are as follows:
Content Separation
From this release onwards, two separate content packages are shipped. Install the package that contains the module binaries on the ESM agents and install the package that contains the security content such as configuration (.m) files, word files, template files, properties files, and report content files (RDL) on the ESM managers.
A new check, Signature using prelink in the File Watch module on UNIX.
A new check, IIS configured certificates in the IIS Configurations module on Windows.
A new check, Fullcore disabled in the Object Integrity module on UNIX.
A new check, Use lastLogonTimestamp for Inactive accounts checks in the Login Parameters module on Windows.
A new check, File system nodev protection in the Startup Files module on UNIX.
A new check, root CRONTAB file content ownership in the System Queues module on UNIX.
Two new messages are added in the Agent Information module on UNIX.
Three new messages are added in the Object Integrity module on UNIX.
One new message is added in the Security Update installer on UNIX.
Note: On the LiveUpdate wizard, the SU version is now visible in the following format: SU<YYYY>.<MM>.<Release_Version>. Where, YYYY is the year of release, MM is the month of release, and Release_Version is the release version of the SU. For example, SU 42 is displayed as SU 2011.09.01 on the LiveUpdate wizard.
The SU Release Notes contain the details of all module enhancements.Continue using your Security Update 17 User Guides until the updated guides are released.
