Symantec Reporter 10.5.1.

1
Release Notes
Updated: Monday, March 23, 2020
Reporter 10.5 Release Notes Reporter 10.5

Legal Notice

Broadcom, the pulse logo, Connecting everything, and Symantec are among the trademarks of Broadcom. The
term “Broadcom” refers to Broadcom Inc. and/or its subsidiaries.

Copyright © 2020 Broadcom. All Rights Reserved.

The term “Broadcom” refers to Broadcom Inc. and/or its subsidiaries. For more information, please visit
www.broadcom.com.

Broadcom reserves the right to make changes without further notice to any products or data herein to improve
reliability, function, or design. Information furnished by Broadcom is believed to be accurate and reliable.
However, Broadcom does not assume any liability arising out of the application or use of this information, nor
the application or use of any product or circuit described herein, neither does it convey any license under its
patent rights nor the rights of others.

Monday, March 23, 2020

3
Reporter 10.5 Release Notes Reporter 10.5

Table of Contents
Table of Contents 4

About Reporter Licensing 6

Reporter Licensing Levels 6
Prerequisite—Enable Connectivity to Important Symantec Services 6
Reporter Licensing Commands 7
About Connectivity for Reporter Virtual Appliances 7
About Connectivity for Reporter RP-S500 Appliances 7
Considerations for Deploying a Reporter Appliance in a Closed Network 7
License Troubleshooting 7

Reporter Resource Sizing 9

Access Log Storage 9
Databases 9
Database Backups 9
RP-S500 Appliances 9
Virtual Appliances 9
Detailed Specifications 10

Upgrade Reporter 11
Supported Upgrade Paths 11
Can I downgrade Reporter to a previous version? 11
Version-Specific Upgrade Information 11
Reporter 10.3.x 11
Reporter 10.1.5.3 11
Reporter 10.1.4.2 11
Upgrade Procedure 11

New Features in Reporter 10.5.1.1 13

10.5.1.1—Released March 05, 2020 13

Resolved Issues in 10.5.x 16

Reporter Version 10.5.1.1—March 05, 2020 16

New Features in Reporter 10.4.x 18

10.4.1.1—Released August 15, 2019 18

Resolved Issues in 10.4.x 20

Reporter Version 10.4.1.2—October 14, 2019 20

4
Reporter 10.5 Release Notes Reporter 10.5

Reporter Version 10.4.1.1—15 August, 2019 20

Known Issues 22
Hardware: NIC 22
Limitations 22
Functional Issues 22
Reporter RP-S500 Appliance-Specific Issues 24

Documentation Log 25
Reporter Documentation 25
Quick Start Guide 25
Reporter 10.4 WebGuide 25

Differences Between 10.x and 9.x 26

FTP Upload Only 26
Web Security Service Download Feature 26
Audit Logs Information Moved 26
Event Logs 26
HTTP/HTTPS Port Settings Removed 26
Certificate Management Removed 26

5
Reporter 10.5 Release Notes Reporter 10.5

About Reporter Licensing

Symantec Reporter requires a license according to the maximum disk space that the product uses. Each version
specifies CPU and RAM sizing. For a complete sizing schematic, see "Reporter Resource Sizing" on page 9.

Reporter licensing requires accessing MySymantec. Before licensing Reporter, make sure you have your
MySymantec credentials.

Reporter Licensing Levels

n Reporter RP-S500

The license matches the total disk space (original specification). Check the current System Resources
consumption on the Admin link System Overview > System Diagnostics page.

n Reporter VA

Symantec offers three levels of licensing for virtual appliances (VAs) based on the total usable disk space
available on these virtual appliances:

o RP-V50

o RP-V100

o RP-V200

Prerequisite—Enable Connectivity to Important Symantec

Services
Reporter (or the license staging web server) must be able to connect to specific Symantec resource locations.
Verify that your firewall allows the following Symantec URLs.

URL Protocol Description

support.symantec.com https/TCP Support links to software, support cases, and

443 documentation.

upload.bluecoat.com https/TCP Upload portal logs and other large files.

443

download.bluecoat.com http/TCP 80 Licensing portal; redirects to

support.symantec.com

esdhttp.flexnetoperations.com https/TCP Software portal.

443

device- https/TCP License related.

services.es.bluecoat.com 443

6
Reporter 10.5 Release Notes Reporter 10.5

Note: See Reference: Ports and Protocols for a full list of required ports and
protocols.

Reporter Licensing Commands

You must download the Reporter license from the Symantec licensing portal using a CLI command. See License
Reporter for more information.

If your network requires a proxy connection to the Internet, you must also use the proxy-settings CLI
command to specify that proxy.

About Connectivity for Reporter Virtual Appliances

Unless you have purchased a VA offline license, constant Internet connection is required for Reporter to
communicate regularly with the license validation server to confirm that the serial number is valid. If
communication with the server fails, the Reporter license may be suspended.

To ensure license integrity, Reporter VA periodically communicates with the Symantec license portal to validate
the issued licenses. This requires continuous successful network connectivity with the Symantec network.

To allow for temporary WAN outages, this operation continues for 12 hours or until a successful license
validation occurs. After 12 hours of unsuccessful validation, the Reporter license state changes to invalid. Until
this license issue is resolved, you can continue to use all Reporter functionality except for new database and log
source creation; furthermore, Reporter halts the processing of all new data in existing databases.

About Connectivity for Reporter RP-S500 Appliances

Reporter RP-S500 appliances can be deployed in open or closed networks.

Considerations for Deploying a Reporter Appliance in a

Closed Network
If you deploy the Reporter RP-S500 or VA in a closed network, you must:

n Obtain the license separately and place it on a server that Reporter can access.

n Disable the Web Application Attribute feature.

License Troubleshooting
By default, web application information is included in the Reporter database. If this feature is not manually
disabled and Reporter is unable to download the current web application attributes from Symantec, log data will

7
Reporter 10.5 Release Notes Reporter 10.5

not be consumed and log sources will remain in the "Initializing" state until either the application attributes are
downloaded or this feature is disabled.

8
Reporter 10.5 Release Notes Reporter 10.5

Reporter Resource Sizing

This section provides the supported server information required to operate Reporter.

Access Log Storage

n ProxySGs may send their access logs directly to Symantec Reporter for long-term storage.

n Reporter supports FTP file transfers. (Reporter 10.1 does not support FTPS and SCP.)

n Access logs are generally transferred and stored as files compressed to a ~6:1 ratio.

Databases
Access log files may be processed into one or more databases.

n A database is roughly twice the size of its compressed access-log files, or half the size of its raw access-log
files.

n Locally stored access-log files may be processed into databases using Local Log Sources.

n Remotely stored access-log files may be processed directly into databases using FTP Log Sources.

n Reporter officially supports these FTP servers, although other servers may also work with Reporter:

o Windows FTP (through IIS)

o Linux: VSFTPD

Database Backups
n Customers may choose to create one or more backups of any of their databases.

n Each database backup mirrors the size of its database when the backup occurred.

RP-S500 Appliances
n 24 TB (9.7 TB available)

n RAID 10

n 262144 RAM

n 20 CPU (40 hyperthreaded)

Virtual Appliances
Symantec Reporter 10.5.1.1 supports ESXi 6.0 and 6.5 servers with ESXi Essentials, Essentials Plus, Standard,
Enterprise, or Enterprise Plus licenses. (Versions 10.1 and 10.2 do not support ESXi 6.5.) Your environment and

9
Reporter 10.5 Release Notes Reporter 10.5

goals determine the appropriate license. Reporter can operate with the Essentials license; however, if you
employ multiple vSphere servers, a higher-level license is likely required.

The following table provides the Reporter VA per-license specifications.

VA License CPUs Minimum Memory Maximum Drive Space

RP-V50 8 cores 65536 MB 2200 GB

RP-V100 16 cores 131072 MB 4400 GB

RP-V200 32 cores 196608 MB 8800 GB

Note: For more information about licensing, including product behavior when a
license is not valid, see "About Reporter Licensing" on page 6.

Detailed Specifications
The following table provides detailed specifications for all current Reporter 10.x platforms.

n Hardware Appliance (S models)—Specifications according to the hardware model.

n Virtual Appliance (V models)—Values in blue are limited by the terms of the license.

Hardware Model RP-S500-20 RP-V50 RP-V100 RP-V200

Drive Count 24 1 1 1

Minimum Drive Size 950 1950 3950 7950

Maximum Drive Size 1050 2200 4400 8800

Drive Limit 24 1 1 1

Minimum Memory 262144 65535 131072 196608

Maximum Memory 262144 1048576 1048576 1048576

Memory Limit 262144 1048576 1048576 1048576

CPU Count 40 8 16 32

Minimum CPU Speed 2750 0 0 0

Maximum CPU Speed 2850 0 0 0

CPU Virtual Core Limit 40 8 16 32

CPU Scale Multiplier 100 100 100 100

10
Reporter 10.5 Release Notes Reporter 10.5

Upgrade Reporter
When planning to upgrade to a new Reporter release, consider the following information.

Supported Upgrade Paths

Upgrade from the following releases has been validated:

n 10.1.5.6

n 10.2.1.8

n 10.3.1.1

Can I downgrade Reporter to a previous version?

Because of continuous, incremental changes to database architecture for each new Reporter version, you cannot
downgrade the Reporter appliance or VA instance to a previous version without losing all log and configuration
data.

Version-Specific Upgrade Information

Reporter 10.3.x
After upgrading to Reporter 10.3.x from 10.2.x or 10.1.x the admin password must be reset from the device
console. The password does not migrate with the upgrade.

Reporter 10.1.5.3
If you previously installed and operated Reporter 10.1.4.3+ and had expiration enabled in the database
configuration, you must rebuild your databases after upgrading to 10.1.5.3 or later.

Reporter 10.1.4.2
Upgrading to Reporter 10.1.4.2 should be seamless. However, if Reporter is operating on an older license, the
enhanced application attributes support might cause the application to stall. If this occurs, re-download the
Reporter license.

Upgrade Procedure
Before upgrading, do the following.

11
Reporter 10.5 Release Notes Reporter 10.5

1. Unload all databases:

a. On the Administration > General Settings page, select Reporter Settings > Data Settings >
Databases.

b. In the Actions drop-down list, Unload the appropriate database.

2. Verify that Reporter is not currently processing logs:

a. Admin > General Settings > Data Settings > Log Sources

b. Use the Actions option to halt any processing.

3. Verify that RAID is not performing a re-sync.

# show raid array

You must use the CLI to upgrade Reporter.

1. Log in to Mysmantec.

2. Select My Products.

3. Find the row that contains the serial number for your product and click the download icon: .

4. Go to the bottom of the page and click Download Software.

Refer to the Getting Started guide for more information.

5. Place the download package on a local web server.

6. On Reporter, enter the following CLI command.

# installed-systems load <url>

7. Enter # installed-systems view to view the installed system.

8. Enter # restart to perform a graceful restart.

9. Reload all databases.

a. Select General Settings > Reporter Settings > Data Settings > Databases.

b. In the row of the database to change, select Unload Database from the drop-down list in the
Actions column.

Log processing automatically resumes.

12
Reporter 10.5 Release Notes Reporter 10.5

New Features in Reporter 10.5.1.1

10.5.1.1—Released March 05, 2020
Reporter 10.5.1.1 includes the following new features:

Microsoft Hyper-V Hypervisor Supoort

Reporter 10.5.x is compatible with the Hyper-V hypervisor on the following operating system:

n Microsoft Windows Server 2016 configured with GPT partition

Note: Reporter does not support suspend and resume operations, or the creation
of watchpoints.

Refer to the Symantec Reporter 10.5.x Deployment Guide for more information.

Reporter Password Security Settings

You can now use the Reporter CLI to set password standards for all user passwords. The config command
password-policy enables you to set requirements for length, minimum number of upper- and lowercase words,
digits, special characters, and common words. For example:

To require a password to have at least 8 characters, and have at least one number, one symbol, and one
uppercase letter, set the following rules:

(config)# password-policy
(config-password-policy)# min-length 8
(config-password-policy)# min-digits 1
(config-password-policy)# min-special 1
(config-password-policy)# min-uppercase 1
(config-password-policy)# min-groups 3

The character-type minimums (min-uppercase, min-lowercase, min-special and min-digits) are enforced
based on the min-groups setting. If min-groups is zero, NONE of the character types are required.

User Names Can Now Contain Dots

Reporter 10.5.x supports usernames with dots, for example: john.edward.smith

Support for backwards paging in Management Center Full Log

Detail Reports
Management Center users can now page backward in Full Log Detail reports if the report is viewed from a

13
Reporter 10.5 Release Notes Reporter 10.5

appliance running 2.4.1.2 and later that is pulling the data from a Reporter 10.5.x database. Previously, users
could not page backward when viewing Full Log Detail reports.

Specify a Maximum Number of Report Rows to Download

When setting the options for downloading a report, you can now specify the exact number of report rows to
download. Previously, you had to choose from a pre-defined number of rows—with a maximum of 100,000
rows. The 100,000 limit has been removed and you can enter any number.

View More Than 50 Lines Per Page in a Report

When configuring Report Options, you can now specify that the report display up to 9999 rows per page.
Previously, you could only select up to 50 rows in the Summarize By section. To access filter options select the
Reports tab, click a report, and then click the Report Options link in the Report Data header.

Disable Page View Combining

When creating a database, you now have the option to disable page view combining. Determine whether to
disable Page View Combining. By default, page view combining is enabled. Deselect the option to disable page
view combining.

Note: Disabling page view combining requires the system to use more storage and
processing power.

14
Reporter 10.5 Release Notes Reporter 10.5

Ability to Export Database Backups

Reporter 10.5.x supports exporting database backups off-box for security or other reasons. To facilitate this
functionality, all Reporter backups are now saved to the db_backups directory. The db_backups directory is
located in the same folder where local log sources are saved—/db_backups. On upgrade to Reporter 10.5.x, all
existing backups are moved into the db_backups directory.

Note: Each Reporter database backup is saved in subdirectory named with a

Reporter database ID and timestamp. For example:
ae7729501cfd11eabc4cf5007a1a14df_1576521144. Do not change the name of the
database backup. If you change the name, Reporter will not recognize the backup.

Export a database backup by enabling FTP, FTPS, or SCP, and using the appropriate client to move the backup.
Similarly, you can import database backups into Reporter using the same method (FTP, FTPS, or SCP).

Support for Custom Mail Port

Reporter 10.5.x supports the addition of SMTP ports. Previously, Reporter did not allow you to specify a SMTP
port; the default port 25 was always used. To edit the SMTP server, go to Administration > General Settings
> Reporter Settings > System Settings > External Servers > Email. To add a custom SMTP port, enter the
IP address followed by a colon and port number. For example: 198.51.100.24:587

15
Reporter 10.5 Release Notes Reporter 10.5

Resolved Issues in 10.5.x

The following sections provide the issues resolved in Symantec Reporter 10.5.x sreleases.

Reporter Version 10.5.1.1—March 05, 2020

n Security fix

ISSUE: nginx 1.12.1 software name and version was exposed.

(RPT-312)

n Security fix

ISSUE: Slowloris DoS vulnerability.

(RPT-329)

n Security fix

ISSUE: SYMSA1467.

(RPT-600)

n Security fix

ISSUE: SYMSA1428.

(RPT-216)

n Security fix

ISSUE: SYMSA1462.

(RPT-208)

n Security fix

ISSUE: SA129.

(RPT-597)

n Security fix

ISSUE: SA165.

(RPT-215)

n Security fix

ISSUE: SA166.

(RPT-207)

16
Reporter 10.5 Release Notes Reporter 10.5

n Security fix

ISSUE: SA157.

(RPT-231)

17
Reporter 10.5 Release Notes Reporter 10.5

New Features in Reporter 10.4.x

10.4.1.1—Released August 15, 2019
Reporter 10.4.1.1 includes the following new features:

GIN Category Updates
The Symantec Global Intelligence Network (BCIS/BCWF) category lists were updated.

Improved Report Generation Speed

Reporter canned reports now execute more quickly due to more concurrent disk reads during queries.

Custom Report Optimization

Although Reporter's standard reports are optimized, reports that have additional filters can sometimes take a
significant time to run because no data aggregation has been performed. Reporter 10.4 and later allows you to
optimize these custom reports, allowing them to run more quickly in the future.

Documentation: Optimize a Filtered Report

New Diagnostics CLI Subcommand to Force a Reporter Core File

The following CLI subcommand has been added to create a snapshot core file, similar to that created when
Reporter terminates unexpectedly:

# service-info save-core

The snapshot core file will be included in subsequent diagnostics service-info export or send operations. The
save-core operation is useful for times when Reporter seems unresponsive, for example, when you execute the
stop-reporter command but the Reporter process does not shut down.

Documentation: diagnostics

Consent Banner
When you want your users to agree to certain terms, policies, or conditions, you can force them to click through
a "Consent Banner" before logging in to Reporter. When you implement a Consent Banner, the user must
provide consent before the appliance performs authentication and grants access. Manage this feature in the
following location: Administration > General Settings > System Settings > Preferences.

Documentation: Add a Consent Banner

Remove Personally Identifiable Information From a Database

Reporter now allows administrators to remove a user's Personally Identifiable Information (PII) from a database.

18
Reporter 10.5 Release Notes Reporter 10.5

You might want to do this for privacy reasons or because a user has requested it.

Documentation: Remove Personally Identifiable Information From a Database

Authenticate Users via SSL Mutual Authentication—Including

Common Access Card (CAC) Login
Reporter now supports SSL mutual authentication, where an SSL connection between a client and a server is
established only if the client and server validate each other’s identity during the SSL handshake. The server and
the client must each have their own valid X.509 certificate and the associated private key in order to perform SSL
mutual authentication. Certificates and private keys can be stored in multiple locations. On the client, one such
location is a Common Access Card (CAC).

A new CLI command has been added to configure SSL mutual authentication:

(config)# security client-authentication [disable | set-optional | set-regex <value>]

Documentation: Authenticate Users with SSL Mutual Authentication

Import/Export Reporter Settings Backups

Reporter now allows you to save a backup of the Reporter configuration to the file directory used by FTP and
SCP. The following command saves the Reporter configuration to the /.settings.backups/ directory:

# backup-settings Settings backup name

After executing the backup-settings command, you can use FTP or SCP to move backup files to and from the
file directory. For example, you can create a settings backup file on one Reporter appliance, copy it to your FTP
server, and then move it to the /.settings.backups/ folder on a different Reporter appliance.

Caution: The backup settings can only be restored onto a Reporter that is running
the same version that was running when the backup was created. It is highly
recommended that you create a new backup every time you upgrade to a new
Reporter version.

To support this new command, the restore-settings command has been modified to have two options:

n automatic—This option behaves like the previously available restore-settings command to view and
restore the available, automatically backed up settings sets.

n manual—This option is new and is used to view or restore the available settings .zip files from the
/.settings.backups/ folder.

19
Reporter 10.5 Release Notes Reporter 10.5

Resolved Issues in 10.4.x

The following sections provide the issues resolved in Symantec Reporter 10.4.x releases.

Reporter Version 10.4.1.2—October 14, 2019

n Full Log Detail report paging issue

ISSUE: Full Log Detail Reports skipped data when paging forward.

(RPT-595)

n Report field issue

ISSUE: Field values could sometimes be marked as "hidden".

(RPT-607)

n Database issue

ISSUE: Expiring a hidden value could cause failures.

(RPT-610)

Reporter Version 10.4.1.1—15 August, 2019

n Appliance LCD issue

ISSUE: The LCD on the front of the Reporter S-500 was blank after upgrade to 10.3.1.1.

(RPT-515)

n Security fix

ISSUE: Some passwords saved to the server side were returned to the client. Reporter no longer sends
passwords to clients.

(RPT-555) (SYMSA1489: CVE-2019-12753)

n Security fix

ISSUE: Fixed SA74 (CVE-2011-1473, CVE-2011-5094).

(RPT-272) (CVE-2011-1473, CVE-2011-5094)

n Report time was incorrect

ISSUE: Generated reports displayed incorrect timezone in CSV and PDF reports.

20
Reporter 10.5 Release Notes Reporter 10.5

(RPT-491)

n Reports not able to be re-run

ISSUE: Some reports ran correctly and were saved. After some time passed, they were renamed to
"undefined" and users could not run them.

(RPT-323)

n Blocked Website Report Issue

ISSUE: The Blocked Web Sites report displayed incorrect report data.

(RPT-377)

n Restart

ISSUE: The system experienced a restart in ExpireLogSourceStatsFromDisk after fopen failure.

(RPT-442)

n User interface port issue

ISSUE: Users could not change the UI SSL port from 8082 to a custom port. This is now fixed.

(RPT-297)

n Upgrade issue

ISSUE: Upgrade from 10.3.1.1 to 10.3.2.1 failed.

(RPT-395)

21
Reporter 10.5 Release Notes Reporter 10.5

Known Issues
Symantec is aware of the following issues in Reporter 10.x.

Hardware: NIC
The RP-S500 ships with a NIC card in Slot 1. It is not currently enabled and is not required for Reporter 10.x
functionality. If you upgrade to 10.1.5, you can enable this slot through the CLI.

Limitations
Symantec is aware of the following issues. However, because third-party technologies are involved, Symantec
does not intend to resolve them.

n When client is running IE 9 or 11, the data in the exported PDF launched from browser is jumbled
text/symbols.

If the clients use Firefox or Chrome browsers, this issue does not occur because those browsers have the
fonts built in. IE relies on the fonts installed on the client OS. Symantec recommends installing the Adobe
Reader Asian and Extended Language Pack, which is freely available from Adobe.

Functional Issues
Fix
Bug Number Description Fixed In
Available?

RPT-699 No Boot info shows wrong version number on Hyper-V.

RPT-689 No Unable to add or remove protocols within the ssl-context.

Workaround: Specify the ssl-context before removing protocol.

Example:

reporter(config)# ssl edit ssl-context default

reporter(config-ssl-context default)# protocols view tlsv1.1
tlsv1.2
reporter(config-ssl-context default)# protocols remove tlsv1.1
ok

RPT-656 No Reporter removes generated report with message " Removing orphaned
archive."

RPT-654 No reporter# access-logs delete : Possible completions not clear.

RPT-455 No FTPS user-defined passive ports does not work.

RPT-107 No Reporter fails to delete access log when "Enable automatic deletion of
processed log files older than xx days" is enabled.

22
Reporter 10.5 Release Notes Reporter 10.5

Fix
Bug Number Description Fixed In
Available?

RPT-108 No Local users created as 'administrators' in the UI cannot login through SSH.

RPT-254 No LDAPS users generate reports with no data.

RPT-422 No snmp_enable_v3_traps.sh script error.

267676 Yes The Help link on Cloud Log Source and Notifications screens opens to the wrong 10.3.2.1
page.

RPT- No The health-monitoring command does not include power-supply status.

104/267681

RPT- No Using the wrong SR number with service upload-diagnostics should

51/266918 produce an error; instead, the operation appears to be successful.

266912 Yes Clicking ? on some screens does not produce the help page. 10.3.2.1

266799 No "Password is not safe: it is based on a dictionary word" error is returned in the 10.5.1.1
CLI even when the password is not a real word.

RPT- No "Password cannot be a real word" error is returned in the web UI even when the
355/266791 password is not a real word. Workaround: Disable dictionary via CLI command
"no password-policy prohibit-common-words" in config mode.

No

266919 Yes Logs show "Empty access log expiration list" when there is nothing to expire. 10.3.1.1

220726 Yes Reporter displays an error message when you attempt to create a database 10.1.3.1
without a valid license. You can ignore this message.

239229 Yes When you attempt to access Reporter from the CLI, Reporter displays [sudo] 10.2.1.1
password for admin after the first successful entry attempt.

215663 Yes In the Web Browsing per Day report, Reporter displays the same date twice. 10.1.3.1

213128 Yes When Archiving a report, Reporter erroneously displays the size of the PDF in 10.2.1.1
Terabytes (TB)

RPT- No The Reporter Management Console does not reflect HTTP proxy settings
219/222398/ performed in the CLI. Currently, the CLI is the only method available to set the
222331 HTTP proxy.

220373, Yes Reporter might hang during an upgrade to a newer version. 10.1.3.1
221550 VA Workaround: Restart the VA; stop the boot process (press Space); and select
the target image. The upgrade should continue.

235095 Yes There is a data discrepancy between downloaded reports and emailed reports. 10.1.5.1

240944 Yes Scheduled reports generate successfully, but accessing them from the Archived 10.1.5.1
Reports applet causes a page not found error.

240171 Yes The preferences.cfg file does not display some fields, such as SSL and ports . 10.1.5.1

239717 Yes After configuring SMTP, the Alerts page still displays a not configured error. 10.1.5.1

23
Reporter 10.5 Release Notes Reporter 10.5

Fix
Bug Number Description Fixed In
Available?

257675 Yes When enabling advanced commands from CLI, entering an incorrect password 10.2.1.8
5 times triggers an internal info dump. Users are locked out for 20 minutes, 10.3.1.1
even if a correct password is entered. Attempts at entering a password will
reset the 20 minute timer. Users must wait 20 minutes before entering the
correct password.

Reporter RP-S500 Appliance-Specific Issues

Fix
Bug Number Description Fixed In
Available?

RPT-104 No RP-S500 not reporting when PSU has no power.

RPT-222 Yes LCD display is blank after upgrade to 10.3.1.1. 10.4.1.1

RPT- No The front-panel-display (FPD) buttons are not functional.

314/221571

220614 Yes Disk Size reduced to 8.46 TB from 9.7 TB. 10.1.3.1

221558 Yes The System Event Log on the Reporter Management Console does not 10.1.5.4
indicate of power outage, such as a removed power supply unit.

221549 Yes Hard drive hot swap is not yet supported. You must shut down Reporter before 10.3.1.1
replacing a drive.

24
Reporter 10.5 Release Notes Reporter 10.5

Documentation Log
This log lists the significant changes and additions to Reporter documentation, which might occur for each
SymantecReporter 10.x updates or as needed.

Reporter Documentation
Quick Start Guide
https://www.symantec.com/docs/DOC10380

Hardware installation.

Reporter 10.4 WebGuide

http://symantec.com/docs/DOC11544

This web-based documentation WebGuide describes how to install Reporter (VA and high-level appliance
information plus links), perform initial configuration, and describes basic reporting functionality. Embedded in
this portal are downloadable PDFs and YouTube informational/tutorial videos.

25
Reporter 10.5 Release Notes Reporter 10.5

Differences Between 10.x and 9.x

The following is list a of changes from Symantec Reporter 10.x and the legacy application version (9.x).

FTP Upload Only

Tip: Reporter 10.1.5 and later allows you to upload the access logs directly to the
Reporter appliance versus a standalone FTP server.

Web Security Service Download Feature

The ability to download access logs from the Web Security Service to Reporter 10.x requires version 10.1.5 or
later. The feature is not supported in previous 10.x versions.

Audit Logs Information Moved

Audit Log info is now found in the Event Logs (Admin > System Overview > System Event Log).

Event Logs
Reporter 9.x displayed the event logs (Admin > System Overview > System Event Log) with a beginning and
end time. In 10.x, the files are now just titled Log date and generate once per day. The logs contain the previous
day's data.

HTTP/HTTPS Port Settings Removed

Reporter 9.x allowed you to change HTTP/HTTPS port settings (Administration > General Settings > System
Settings > Server Settings > Web Server Settings). In 10.x, this is not an available option; thus, the controls
are removed.

Certificate Management Removed

Reporter 9.x had controls for adding custom SSL certificates and keys (Administration > System Settings >
Server Settings > Web Server Settings). This is removed in 10.1 with the control for SSL Force Secure
Renegotiation remaing. However, this functionality was restored in 10.1.5.5.

26