Client Proxy 4.9.3 Release Notes
About this Patch Release
This patch release has enhancements related to the Skyhigh Client Proxy support tool and AD group header size and also covers important bug fixes such as IPv4 traffic interceptions for Private applications on configured ports & SCP about window status to name a few. For more information on the resolved issues, see the resolved issues list.
Release build
- Windows - 4.9.3.92.1
Enhancements
AD Group Header Size Selection
The AD Group Header Size is now configurable with two available options: 8k and 4k. The default size remains set to 8k. For more details, see Configure Group Header Size.
NOTE: Customers using multibyte characters in their AD group headers with SCP version 4.7.0 & later (till 4.9.2), have the potential of facing issues such as failed user authentication, disrupted pop connectivity for those regions as total header size exceeds maximum header size limit. We have observed this for some customers only in the APAC region. For these customers, it is recommended to upgrade to 4.9.3 and select the AD Group Header size of 4K. For more details, see Troubleshooting AD Group Header Size.
NOTE: The default AD Header Group Size has remained 8K since Skyhigh Client Proxy version 4.7.0.
Skyhigh Client Proxy Support Tool
Skyhigh Client Proxy support tool supports Network Shell (netsh) to collect network traces and dependency on Wireshark has been removed. For more details, see Skyhigh Client Proxy Support Tool.
NOTE: Skyhigh Client Proxy Support Tool enhancement is currently supported on the Windows platform only.
NOTE: This patch release applies to the Windows platform only. This patch release does not support the upgrade of pre-release software versions, such as beta versions and POC builds. To install a production release of the software, you must first uninstall any pre-release versions. Upgrade work from older GA builds to the latest GA builds.
Resolved issues (Windows)
Reference | Issue Description |
---|---|
MCP-5267 | Alternate redirection list when selected no longer shows an error for Skyhigh Client Proxy policy in Trellix SaaS ePO. |
MCP-6668 | Skyhigh Client Proxy now redirects traffic while using a dummy proxy IP for the primary proxy. |
MCP-6770 | This addresses the issues related to redirection faced by customers using myltubyte characters in AD Group headers. |
MCP-6773 | Skyhigh Client Proxy About Window is showing the right status when the dummy primary proxy is configured. |
MCP-6777 | The alternate proxy now redirects traffic when the primary proxy gets 500 responses for a webwasher request. |
MCP-6978 | Skyhigh Client Proxy was disconnecting from the proxy and refused to reconnect. |
MCP-7158 | Skyhigh Client Proxy intercept IPv4 PA traffic only on configured ports. |
MCP-7238 | Skyhigh Client Proxy goes to a state of no redirection after a certain period of activity. |