Skip to main content

Check out Interactive Visual Stories to gain hands-on experience with the SSE product features. Click here.

Skyhigh Security

Client Proxy 4.9.3 Release Notes

About this Patch Release 

This patch release has enhancements related to the Skyhigh Client Proxy support tool and AD group header size and also covers important bug fixes such as IPv4 traffic interceptions for Private applications on configured ports & SCP about window status to name a few. For more information on the resolved issues, see the resolved issues list.

Release build

  • Windows -  4.9.3.92.1

Enhancements

AD Group Header Size Selection

The AD Group Header Size is now configurable with two available options: 8k and 4k. The default size remains set to 8k. For more details, see Configure Group Header Size.

NOTE: Customers using multibyte characters in their AD group headers with SCP version 4.7.0 & later (till 4.9.2),  have the potential of facing issues such as failed user authentication, disrupted pop connectivity for those regions as total header size exceeds maximum header size limit. We have observed this for some customers only in the APAC region. For these customers, it is recommended to upgrade to 4.9.3 and select the AD Group Header size of 4K. For more details, see Troubleshooting AD Group Header Size.

NOTE: The default AD Header Group Size has remained 8K since Skyhigh Client Proxy version 4.7.0.

Skyhigh Client Proxy Support Tool

Skyhigh Client Proxy support tool supports Network Shell (netsh) to collect network traces and dependency on Wireshark has been removed. For more details, see Skyhigh Client Proxy Support Tool

NOTE: Skyhigh Client Proxy Support Tool enhancement is currently supported on the Windows platform only. 

NOTE: This patch release applies to the Windows platform only. This patch release does not support the upgrade of pre-release software versions, such as beta versions and POC builds. To install a production release of the software, you must first uninstall any pre-release versions. Upgrade work from older GA builds to the latest GA builds.

Resolved issues (Windows)

Reference Issue Description
MCP-5267 Alternate redirection list when selected no longer shows an error for Skyhigh Client Proxy  policy in Trellix SaaS ePO. 
MCP-6668 Skyhigh Client Proxy now redirects traffic while using a dummy proxy IP for the primary proxy.  
MCP-6770 This addresses the issues related to redirection faced by customers using myltubyte characters in AD Group headers.
MCP-6773 Skyhigh Client Proxy About Window is showing the right status when the dummy primary proxy is configured.
MCP-6777 The alternate proxy now redirects traffic when the primary proxy gets 500 responses for a webwasher request. 
MCP-6978 Skyhigh Client Proxy was disconnecting from the proxy and refused to reconnect. 
MCP-7158 Skyhigh Client Proxy intercept IPv4 PA traffic only on configured ports.
MCP-7238 Skyhigh Client Proxy goes to a state of no redirection after a certain period of activity.

 

  • Was this article helpful?