Date:2014-03-13

OS: Windows/Linux

Etrack Incidents: 3322450, 3332293, 3333195, 3338064, 3339324, 3340194, 
3341260, 3341475, 3346260, 3346852, 3349797, 3360081, 3360996, 3362626, 
3363542, 3365338, 3366466, 3366484, 3368584, 3370111, 3372289, 3374567, 
3375441, 3383035, 3383281, 3386721, 3392016, 3393618, 3401723, 3401763, 
3409975, 3412719, 3415120, 3417580, 3425797, 3429196, 3429442, 3430935, 
3431613, 3434169, 3434502, 3435182, 3436563, 3441213, 3444977, 3446036, 
3446438, 3453007


Errors/Problems Fixed:

3322450 - Data Insight is unable to display domain local group as a member group 
          if it is added in local group of a Windows File Server or a NetApp 
          filer.

3333195 - Performance improvement to Indexer.

3338064	- DLP sensitive policy list filter doesn't work for "Like" or "Not like"
          selection criteria.

3339324	- Controlpoint.exe is crashing.

3340194	- Incorrect membership for SharePoint local groups.

3341260	- DQL returns precision in the output. If file or share size is less 
          than 1GB, then DQL returns size in GB as zero.

3341475	- Discover site collections with the correct URL in case of claims-based
          authenticated web application URLs.

3346260	- DLP settings in Data Insight change after upgrading Data Insight from 
          4.0 to 4.0 RP1.

3346852	- Disabled shares should be grayed out in the workspace like they are in 
          the settings page.

3349797	- Server column missing in email alerts.

3360081	- idxwriter.exe can crash if it needs to reopen the index while processing 
          scan files.

3360996	- Ability to ignore disabled filers in reports.

3362626	- DLP policies count and DLP policies name filters are not working at 
          folder level.

3363542	- DataInsightWinnas service is consuming high memory.

3365338	- DiscoverSharesJob never completes in a large distributed environment.

3366466	- Pull the sidhistory attribute from Active Directory.

3366484	- Scanner.exe crashes if file system type is not supported.

3368584	- adcli.exe crashes when adding sidhistory attribute.

3370111	- Provide option to clear all selected resources from the page selection
          view in report wizard.

3372289	- Index DB need not do an integrity check for every version.

3374567	- DQL throws syntax error if arguments of the "formatdate" function are
          incorrect.

3375441	- In reports, if copy report output step returns failure, then highlight
          the last run status accordingly, and show the warning icon.
		  
3383035	- Duration function in DQL returns nothing if there is no space between
          number and unit.

3383281	- Data Insight 4.0 RP1 fails to display SharePoint version.

3386721	- Add missing filters from version 3.0.1 to Context Map on the Workspace
          tab.

3392016	- Update default sqlite page size to 32k for better performance.

3393618	- GUI freezes completely if you try to assign disabled user as custodian
          on a path.
		  
3401723	- Unable to set "Ignore accesses made by LocalSystem accounts" property
          for a Windows File Server.

3401763	- Permission recommendation workflow is not getting fired in Data Insight
          4.0 RP1.

3409975	- In case of data selection for reports, CSV upload times out for large 
          number of paths.

3412719	- Check if .Net 3.5 framework is installed on the Collector node for 
          SharePoint Servers.

3415120	- Reduce fragmentation in index copy operation.

3417580	- Incremental scan behavior is not consistent with full scan in case of 
          reparse points.

3425797	- Custom cron schedule is not updated in GUI if it is changed using
          command line.

3429196	- Indexers not deleting older filehash and dirhash files on VxFS.

3429442	- adcli.exe corrupts the member hash in a certain scenario, when we 
          encounter failed or disabled domains.

3430935	- Exclusion of Administrators@Filer group removes unrelated user entries
          from report output along with members of the Administrators@Filer group.
		  
3431613	- Add New Policy wizard does not work.

3434169	- Access summary for paths - fix report design for SharePoint and NFS 
          paths.

3434502	- Provision to exclude filers from control point process.

3435182	- Access details for paths - BuName and BUOwner value not getting mapped
          to all records.

3436563	- Cannot add SharePoint site collection with a space in the name. GUI 
          shows invalid URL message.

3441213	- Double quotes in query causes DQL to fail on a Linux Indexer.

3444977	- Fix exception handling in web service during scan operation.

3446036	- Windows File Server agent share scan exits with error code 5 in case 
          the Scanner credentials are from different domains.
		  
3446438	- Reports > Select action does not show option to archive.

3453007	- Scanner does not go in throttle mode even if the latencies are high 
          on the filer.

NOTE: Incidents fixed in earlier rolling patches are listed at the end of this
      document.

Install/Uninstall Instructions:

Apply this rolling patch on all Data Insight servers with version 4.0, 4.0 RP1 or 
4.0 RP1b.

NOTE: Please keep a backup of the Data Insight files in the installation directory.
      This will be required in case you want to manually rollback the patch.

High Level Steps:
1. Apply the rolling patch on Management Server first, followed by all worker nodes.
2. Next, apply patch to Windows File Server agents (if applicable).

Patching Data Insight Management Server and worker nodes:

1. Log onto each server with Administrative privileges.
2. Unzip the patch files to a temporary folder. In this folder, locate the 
   rolling patch installer for the appropriate OS architecture. The installer
   is called Symantec_DataInsight_windows_40RP2_4_0_0_4422_x64.exe for 64 bit 
   Windows OS, Symantec_DataInsight_windows_40RP2_4_0_0_4422_x86.exe for 32 bit
   Windows OS and Symantec_DataInsight_linux_40RP2_4_0_0_4422_x64.sh for 64 bit
   Linux OS.
3. Launch the installer executable to install the rolling patch.

Patching Data Insight Windows File Server agents:

1. Unzip the patch files to a temporary folder. In this folder, locate the 
   rolling patch installer bundles for Windows File Server agents. The agent
   bundle is called Symantec_DataInsight_windows_winnas_40RP2_4_0_0_4422_x64.zip 
   for 64 bit OS and Symantec_DataInsight_windows_winnas_40RP2_4_0_0_4422_x86.zip 
   for 32 bit OS.
2. Log into the Data Insight Management Console with Server Administrator 
   privilege and upload the agent bundles to the appropriate Collector worker
   nodes using "Upload Manager" page on the Settings tab.
3. Navigate to Filer details page for each configured Windows File Server from 
   the Settings tab, and click on "Upgrade Agent" button available on the top of
   the page. This option is only visible if you have enabled the option to let 
   Data Insight install/upgrade agent for this filer.
4. Alternately, to manually patch a Windows File Server agent, log onto the 
   Windows File Server machine with Administrative privileges, unzip the agent
   installer bundle in a temporary location, and launch the patch installer. 
   The patch installer is called 
   Symantec_DataInsight_windows_winnas_40RP2_4_0_0_4422_x64.exe
   for 64 bit OS, and Symantec_DataInsight_windows_winnas_40RP2_4_0_0_4422_x86.exe
   for 32 bit OS.

Patching Data Insight Microsoft SharePoint agent:

1. Log onto the SharePoint farm machine where the SharePoint agent has been 
   previously installed.
2. Uninstall the old agent using the "Add/Remove Programs" applet in Control Panel.
3. Unzip the patch files to a temporary folder. In this folder, locate the 
   SharePoint agent installer. The installer is called 
   Symantec_DataInsight_sharepoint_40RP2_4_0_0_4422.exe for SharePoint 2007, 
   Symantec_DataInsight_sharepoint2010_40RP2_4_0_0_4422.exe for SharePoint 2010, 
   and Symantec_DataInsight_sharepoint2013_40RP2_4_0_0_4422.exe for SharePoint 2013.
4. Launch the installer to install the new agent.

Additional Notes:
1. At this time, automated rollback of patch is not supported. To roll back the
   patch manually:
   a. Remember to take a backup of original files before you install the rolling
      patch.
   b. To roll back the patch, stop all Data Insight services, overwrite the 
      patched files with original files from backup, and restart the services.
2. To confirm if a system has been patched, check the version of Data Insight
   using the Add/Remove Programs applet in the Control Panel.
   
Following ETrack incidents have not been fixed in this release, however 
workaround for these is as below:   

3315995	- EmailUtils caches old value of SMTP host.

Workaround: If the SMTP settings are changed, DataInsightWeb service must be restarted.
	    To do this, log in to the Data Insight Management Server node with 
	    Administrative privileges. From the command prompt, run the following
	    commands: 
			
	    net stop DataInsightWeb
	    net start DataInsightWeb
 
3383277	- Cannot select customattr.csv attributes in analytics configuration.

Workaround: Manually type in the text box.
						
*************************************************************************************************

Incidents fixed in 4.0 RP1b

*************************************************************************************************		

3346255 - Issue fetching list of sensitive paths from DLP when DLP is configured
          with Kerberos authentication.

3348844 - Data Insight does not always recommend the correct patch number 
          applicable for a server node.

3348991 - Permission reports consume excessive memory.


*************************************************************************************************

Incidents fixed in 4.0 RP1

*************************************************************************************************

2781513 - Access Pattern Map showing information in GMT for date as today.

3313610 - SharePoint - Enhance Local user scan job for 10000 site collections.

3098137 - Adding Folder Depth dropdown in Access Summary User/Path reports.

3164625 - EVClient - In case of WinNAS cluster, evclient sends the cluster name 
          as parameter to EV which returns an error for all paths.

3211411 - Wildcard support in Exclude Rules for access events in case of 
          SharePoint is not implemented.

3218248 - Path Permission report does not exclude Administrators group.

3219246 - Entitlement report - Exclude Group/user does not work.

3227205 - Inactive folders query should exclude deleted paths.

3257392 - Reports - parallelism for reports through GUI.

3263375 - Set control point depth analysis to 5 by default.

3272517 - Reports - Custom report output: Exclude column does not work with CSV 
          output format.

3276079 - Enhance Access Summary report to allow for Depth Parameter.

3280454 - Provide option to copy report output to network file-share for 
          reports.

3281612 - Enhancement in Sensitive job to do CSV based sensitive file import.

3284683 - Discovery of sharepoint webapp with 10000 site collection times out.

3292056 - Change the Event details of "Exit Code 1: Incorrect function".

3292723 - Add pagination to SharePoint scanner and sharepoint webservice when it
          fetches websites and lists within a site collection.
 
3281984 - Windows File Server agent registration fails with status code 500.
		  
3298390 - Fetch local users from Netapp filers.

3302069 - Reports - redirect output to a network file share (only supports local
          drive currently).

3303981 - Do not delete SharePoint audit logs during specified period.