Client Proxy 4.9.3 Release Notes

About this Patch Release

This patch release has enhancements related to the Skyhigh Client Proxy support tool and AD group header size and also covers important bug fixes such as IPv4 traffic interceptions for Private applications on configured ports & SCP about window status to name a few. For more information on the resolved issues, see the resolved issues list.

Release build

Windows - 4.9.3.92.1

Enhancements

AD Group Header Size Selection

The AD Group Header Size is now configurable with two available options: 8k and 4k. The default size remains set to 8k. For more details, see Configure Group Header Size.

NOTE: Customers using multibyte characters in their AD group headers with SCP version 4.7.0 & later (till 4.9.2), have the potential of facing issues such as failed user authentication, disrupted pop connectivity for those regions as total header size exceeds maximum header size limit. We have observed this for some customers only in the APAC region. For these customers, it is recommended to upgrade to 4.9.3 and select the AD Group Header size of 4K. For more details, see Troubleshooting AD Group Header Size.

NOTE: The default AD Header Group Size has remained 8K since Skyhigh Client Proxy version 4.7.0.

Skyhigh Client Proxy Support Tool

Skyhigh Client Proxy support tool supports Network Shell (netsh) to collect network traces and dependency on Wireshark has been removed. For more details, see Skyhigh Client Proxy Support Tool.

NOTE: Skyhigh Client Proxy Support Tool enhancement is currently supported on the Windows platform only.

NOTE: This patch release applies to the Windows platform only. This patch release does not support the upgrade of pre-release software versions, such as beta versions and POC builds. To install a production release of the software, you must first uninstall any pre-release versions. Upgrade work from older GA builds to the latest GA builds.

Resolved issues (Windows)

Reference	Issue Description
MCP-5267	Alternate redirection list when selected no longer shows an error for Skyhigh Client Proxy policy in Trellix SaaS ePO.
MCP-6668	Skyhigh Client Proxy now redirects traffic while using a dummy proxy IP for the primary proxy.
MCP-6770	This addresses the issues related to redirection faced by customers using myltubyte characters in AD Group headers.
MCP-6773	Skyhigh Client Proxy About Window is showing the right status when the dummy primary proxy is configured.
MCP-6777	The alternate proxy now redirects traffic when the primary proxy gets 500 responses for a webwasher request.
MCP-6978	Skyhigh Client Proxy was disconnecting from the proxy and refused to reconnect.
MCP-7158	Skyhigh Client Proxy intercept IPv4 PA traffic only on configured ports.
MCP-7238	Skyhigh Client Proxy goes to a state of no redirection after a certain period of activity.