LevelBlue Knowledge Base » Knowledgebase » WebMarshal

Supported Operating Systems and Prerequisite Versions

Charles Creegan — Tue, 02 Dec 2025 01:43:09 GMT

This article applies to:

MailMarshal (SEG) 10.0 and above
- MailMarshal Web Components (SQM)
WebMarshal 7.6
Marshal Reporting Console 2.6 (for SEG, ECM, and WebMarshal reports)

(For ECM/MailMarshal Exchange, see Q14131. For Service Provider Edition [SPE], see Q11588.)

Question:

What are the supported operating systems for MailMarshal and WebMarshal?
What version of SQL Server can be used with MailMarshal and WebMarshal?
What versions of SQL, IIS and ASP.NET are required and supported?

Information:

This article shows supported versions of operating systems and supporting software.

Notes:

OS and SQL versions earlier than those listed are not supported.

OS and SQL versions that are out of support from Microsoft are not supported.

The information reflects the latest versions of the named products. For details of previous versions, see the documentation for each version.

The information reflects server requirements. For details of requirements for all user interfaces, see the documentation for each product version.

VMWare deployments of the supported operating systems are also supported. See LevelBlue Knowledgebase article Q11828.

Key:

Symbol	Meaning
RTM	Release to Manufacturing, no service pack.
SPn KBnnn	Minimum required service pack or Microsoft Update. Later service packs are supported.
Qxxxxxx	Tested, Supported. See the KB article listed for known issues and workarounds.
	Not currently supported, obsolete, or known issues.
	Not specifically tested. Not yet supported. LevelBlue plans to test and provide support in a later product release. For details of the policy on new OS and SP versions, see Q13687.
(blank)	Not applicable to this product.

Operating Systems and Prerequisites

The table below lists minimum compatible operating system versions and service packs. The products have been tested with the minimum compatible service pack (and in some cases with later service packs).

Note on Service Packs and Operating System updates: If product functionality is affected by Service Packs or Microsoft updates, LevelBlue will work with customers to restore functionality. If a full resolution requires product development, it may not be available immediately.

The listed products do not support RISC architectures. x64 or x86 is the supported architecture.

Server Operating Systems

	MailMarshal 11.3	MailMarshal Web Components 11.3	Marshal Reporting Console 2.6	WebMarshal 7.6
Windows Server 2025	RTM	RTM		RTM
Windows Server 2022	RTM	RTM	RTM	RTM
Windows Server 2019	RTM (Also with any SEG 8.X)	RTM	RTM	RTM
Windows Server 2016	RTM	RTM	RTM	RTM
Windows Server 2012 R2 See also SQL Server service pack requirements			KB2919355
Windows Server 2012 See also SQL Server service pack requirements	(10.0.6 is the last release that allows installation on Windows 2012)		RTM
Windows Server Core edition (any release)

Workstation Operating Systems
(for server installation)

	MailMarshal 11.3	MailMarshal Web Components 11.3	Marshal Reporting Console 2.6	WebMarshal 7.6
Windows 10 or 11 (32 and 64 bit) See also SQL Server service pack requirements	RTM (64 bit required. Permitted but not recommended)	RTM (Permitted but not recommended)		RTM (Permitted but not recommended)

Prerequisites

	MailMarshal 11.3	MailMarshal Web Components 11.3	Marshal Reporting Console 2.6	WebMarshal 7.6
Web Browser	The Management Console works with Microsoft Edge, Mozilla Firefox, Google Chrome and Safari. Internet Explorer is not supported.	SQM works with current versions of Edge, Mozilla Firefox, Google Chrome and Safari. Internet Explorer may be usable but is not recommended.	MRC works with Edge, and with Firefox and Chrome current versions. Internet Explorer may be usable but is not recommended.	Any browser can be used as client.
.NET Framework (minimum - later 4.X is also supported)	4.6.1 MailMarshal also automatically installs a version of the newer .NET technology (previously known as .NET Core) on Array Manager servers.	3.5 SP1 and 4.0	3.5 SP1 (Note that SQL 2016 requires .NET 4.6)	4.6.2

SQL Server Versions

	MailMarshal 11.3	Marshal Reporting Console 2.6	WebMarshal 7.6
SQL 2012 SQL Express 2012 (Microsoft ESU ends July 2025)	(10.0.6 is the last release that allows installation using SQL 2012)
SQL 2014 SQL Express 2014 (Microsoft ESU ends July 2027)	*(CAUTION: Upgrade from earlier versions fails under SQL 2014)*	SP3	SP3
SQL 2016 SQL Express 2016	*(CAUTION: Upgrade from earlier versions fails under SQL 2016)*	SP3	SP3
SQL 2017 SQL Express 2017	RTM		RTM
SQL 2019 SQL Express 2019	RTM		RTM
SQL 2022 SQL Express 2022	RTM	Can upgrade from SQL 2016 Q21228	RTM
Azure SQL Server	Supported where MailMarshal is deployed on Azure

Notes on MRC Installation

MRC 2.6 cannot be installed with SQL versions later than 2016 for the reporting database. However, after installation using the bundled SQL 2016 Express, the SQL Express instances can be upgraded. See Q21228.
MRC can report on data in MailMarshal or WebMarshal databases hosted on later SQL versions.

Additions to Release Notes for WebMarshal 7.6

Charles — Sun, 19 Oct 2025 19:11:58 GMT

This article applies to:

WebMarshal 7.6

Question:

What are the Release Notes for WebMarshal 7.6?

Information:

The Release Notes included with WebMarshal 7.6 are accurate as of the date of publication.

WebMarshal 7.6.0 (build 7.6.0.9374) was released on August 13, 2025.

This article provides highlights and any later updates.

See also the Current Known Issues article, Q21010.

Additional Updates:

The current File Type and Unpacker library is included. Some additional file types are recognized. See articles Q21078 and Q20913.

New categories are included in the Web Filter Database. These categories were populated on 15 October 2025. For more information, see article Q21089.

Web Filter Database changes - New WebMarshal versions

Charles — Sun, 19 Oct 2025 19:10:00 GMT

This article applies to:

WebMarshal
LevelBlue Web Filter Database
Note changes with new WebMarshal versions

Information:

This article describes changes to the categories available in the Web Filter Database URL categorization service that is used by WebMarshal and other products.

The changes do not require any action from customers. However, customers should review their use of the categories to ensure the best use of available information

Categorization Check

To check the categorization of any URL, see the URL check page on the LevelBlue support site. You can also request a review of categorization.

New Categories

Version 7.5.5

In version 7.5.5 and above, a new category for Artificial Intelligence is provided. In addition, the School Cheating category has been restored.

Version 7.6.0

Version 7.6.0 adds support for new categories. As of 15 October 2025, these categories have been populated. The new categories include:

AI Agents: Websites that use an AI agent. AI agents can autonomously interact with their environment, make decisions, and take actions to achieve predefined goals based on user input.
Generative AI: Websites that use AI technology to generate text, images, video, audio, code, or other content based on user input.
Trusted Proxy Relays: External relay proxies from trusted providers, used to obfuscate IP addresses or dissociate browsing history from individual IPs. Examples include Apple's iCloud Private Relay and Google's IP Protection.
QR Code Generators: Websites that generate QR codes or provide tools for generating QR codes.
URL Shortening and Redirect Services: Websites that host redirect services for URLs or domains, masking the requested destination. This includes URL shortening services.

Deprecated Categories

Some categories that were provided before May 2019 are not available in the current database. The deprecated categories generally relate to special purpose sites and typically include only a small number of URLs. The URLs in these categories have generally been added to other appropriate categories.

In new installations of WebMarshal 7.5 and above, the deprecated categories are removed.

On upgrade to version 7.5 or above, the deprecated categories are listed as "Category [category number] no longer available". To preserve integrity of customer configuration the categories are not removed. LevelBlue recommends that customers remove the listings manually.

The list below shows the number for each deprecated category.

In earlier versions, the deprecated categories will still be available, but they will no longer be updated. They will contain the final list of URLs published from the old database. LevelBlue recommends that customers do not use the deprecated categories and remove the listings manually.

The list of deprecated categories and category numbers is:

Adware (0)
Child Pornography (9)
Comics (10)
Cults (13)
School cheating (88) - Available again in 7.5.5 and above
Educational games (20)
Fantasy sports (24)
Fitness (27)
Free hosting (28)
Freeware (29)
Greeting cards (70)
Holistic medicine (42)
Humor (43)
Internet radio (48)
ISPs (49)
Military appreciation (59)
Online classes (68)
Portals (78)
Religious opinion (85)
Remote access (34)
Social opinion (93)
Self defense (90)
Theater (97)
Tickets (98)
Traffic (107)
Web-based productivity apps (113)
Web-based newsgroups (109)

How to use the Support Tool for SEG, ECM, WebMarshal or MRC

Charles Creegan — Mon, 13 Oct 2025 01:44:36 GMT

This article applies to:

MailMarshal (SEG)
MailMarshal ECM (MailMarshal Exchange)
WebMarshal
Marshal Reporting Console

Question:

How do I use the Support Tool?

Information:

The Marshal support tool has been developed to help the LevelBlue Technical Support team gather information about installed software and configuration. The tool produces a single .zip file that contains essential information to help the support team debug specific issues.

The tool can gather information about supported versions of the following products:

MailMarshal SEG (MailMarshal SMTP)
MailMarshal ECM (MailMarshal Exchange)
WebMarshal
Marshal Reporting Console
Marshal virus scanners (Bitdefender for Marshal, McAfee for Marshal, and Sophos for Marshal)
Web Components
IIS

Note: For the MailMarshal SPE (Service Provider Edition) Support Tool, see Q15019.

Installation

In most cases you will find a copy of the tool in the install folder of the base product (MailMarshal,ECM, or WebMarshal).

Otherwise, download the support tool from https://www.marshal.com/supporttool/download (right click, save as. You may see a security warning). The tool will also attempt to update itself automatically, as noted below.

The current version of the tool (1.14 and above) is packaged with .NET runtimes and does not have any software prerequisites.

Using the tool

Repeat the following steps on each server of interest, as directed by Technical Support.

If necessary, downloaad or copy the tool to the server.
Double click to run the tool.
- Note: On startup, the tool checks for updates to functionality. This feature requires access to the URL http://www.marshal.com/supporttool/download
- If the tool cannot connect, it raises a warning.
- If necessary, retrieve the latest version manually as described above.
The main window of the tool appears as shown below. The fields and selections differ depending on the installed software.
Select the items to include, as directed. Clear the selections for items you do not want to include. See below for explanations of each selection.
Choose an output directory.
Enter a support case number.
, Click GO to run the tool. The tool gathers data into a folder, and then creates a single compressed file.
- NOTE: This tool can require significant disk space, particularly if you include multiple dump files. In rare cases it could consume all available space. If not enough space is present, the tool raises a warning: Not enough free space available to package into zip file.
The status bar at the bottom of the window shows the progress. You can cancel the process if necessary.
When the tool is finished, click Close to exit.
Upload the file to LevelBlue as directed by Technical Support.
- Note: Wait for the tool to create the zip file. (The tool creates a temporary folder and then zips the content. Do not zip the folder manually - it will not contain all required items.)

The fields on the window are defined as follows:

Installed Components

Shows the related software that is installed on this computer. Select the components for which you want to include detailed information such as logs and configuration details.

Installation logs (if any) are gathered for all selected components regardless of other selections.

Items to gather

System Information

Includes a listing of the system hardware and operating system information.

Current process details

Includes a listing of processes running on the server.

Configuration details

Includes the XML or text files that define configuration of the selected software.

Marshal Registry

Includes a copy of the registry hive for all components that are present on the server.

Marshal install directory listings

Includes file and version information for files in the installation directories of all selected components.

For MailMarshal, optionally select Include Quarantine directory listing to list all messages in quarantine and archive (only if required, as the file will be much larger and take longer to generate)

Event logs

Includes Windows Event Log information. If you include the event logs, choose to include Application and/or System logs by checking the boxes.

Gather specific message

Attempts to include one or more mail message or Sent History files. Enter the first few characters of the message name (for example B89f00). This option is only available when running the tool on a MailMarshal processing node.

Log files

Includes the text log files generated by the selected components. By default the last 5 days of logs are included. Use the menus to select the range of dates to include.

Marshal Crash Dumps

Includes one or more types of diagnostic information. Shows the number of each type that are available.
Select the number of each type to include. The default is 1 of each available type. The most recent available are included.

Most recent Marshal crash dumps: Includes .mdmp files created by the selected components when recovering from an error.
Most recent WER crash dumps: Includes the Windows Error Reporting data from the recent issues.
Most recent potentially fatal messages: Includes email message files that are marked as suspect because they were being processed at the time of a crash.

Output

Output Directory: Enter the location where the compressed file should be created. The default location is the desktop. Click [...] to browse the local computer.
Support case number: Enter the case number as provided by Technical Support.

Version: The installed version of the Support tool.

Notes:

This tool simply gathers existing information from the system and logs.
- There is no need to restart any services before or after running the tool (unless specifically requested by Technical Support).
- The tool does not affect any running services and it does not require any downtime.
The tool runs as Administrator to ensure full access on servers where UAC is enabled.
Although this tool is able to gather information from MailMarshal SMTP/SEG and WebMarshal versions from version 6.0, many older versions are no longer supported. Technical Support may ask you to upgrade to a supported version as a first step to resolve any issues. For a list of supported versions of products, see LevelBlue Knowledgebase article Q10920.
The current version of the tool does not offer automatic upload. Support will provide instructions to upload to the LevelBlue Portal.

What file types are recognized by WebMarshal 7.X?

Charles Creegan — Wed, 13 Aug 2025 00:06:24 GMT

This article applies to:

WebMarshal 7.X

Question:

What file types are recognized by WebMarshal 7.X?

Information:

The following formats are recognized by WebMarshal 7.X.

Notes:

Some types are recognized only with specific updates to the File Type DLL, as noted.
- WebMarshal 7.0 through 7.3 uses FileType 8.2.1
- WebMarshal 7.4 uses FileType 8.2.6 (updated 8 November 2021).
- WebMarshal 7.5 uses FileType 2023-03-01.
- WebMarshal 7.6 uses FileType 2025-02-01.

In the tables below, Type Name refers to the name seen in the Engine log, Traffic Logs, and rule listings. Description is the name as seen when selecting types in the policy editor.

The Type Name is often the same as the usual file extension. However, file type detection is based on file structure and NOT on the file extension. If you rename a zip archive as ".TXT", it is still recognized as a zip archive by WebMarshal.

Type Name	Description
7Z	7Zip Archive
7Zcrypt	7Zip encrypted archive (from FileType 8.2.1)
7Zsfx	7Zip self extracting archive
ACE	ACE archive
ACEsfx	ACE self extracting archive
IWA	Apple iWork Archive .IWA
ARC	ARC archive
ARJ	ARJ archive
ARJcrypt	ARJ encrypted archive
ARJsfxcrypt	ARJ encrypted self extracting archive
ARJsfx	ARJ self extracting archive
B64	Base64 (MIME) Encoding
B2A	BtoA Encoding
BZ2	bZIP2 archive
CABI	InstallShield CAB Archive
CPIO	CPIO archive
DEB	Debian Binary Package file
GZ	GZIP archive
HQX	HQX (BinHex) archive
CABI	InstallShield CAB Archive
CDISO	ISO 9660 CD Filesystem
LYMESFX	LYME self extracting archive
LZH	LZH archive
MacBIN	MacBinary I, II, or III archive
MDXMedia	MDX Extended Media Descriptor File
CABM	Microsoft CAB/Expand Archive
SZDD	Microsoft SZDD archive
MAR	Mozilla Archive
MSI	MSI Windows Installer package
MSIX	MSIX Windows Installer Package (from FileType 8.2.1)
PBIX	Power BI Report (FileType 2025-02-01 and above)
RAR	RAR archive
RARcrypt	RAR encrypted archive
RARsfxcrypt	RAR encrypted self extracting archive
RARsfx	RAR self extracting archive
RARSpan	RAR spanned archive
RPM	Redhat Package Manager file
SEAEncrypt	SEA encrypted self extracting archive
SEA	SEA self extracting archive
SIT	SIT archive
SITEncrypt	SIT encrypted archive
TAR	TAR archive
UDF	Universal Disk Format (UDF) (from FileType 8.2.3)
UUE	UUencoded Encoding
XZ	XZ archive (from FileType 8.2.1)
Z	Z (compress) archive
ZIP	ZIP archive
ZIPcrypt	ZIP encrypted archive
ZIPsfxcrypt	ZIP encrypted self extracting archive
ZIPsfx	ZIP self extracting archive
ZOO	ZOO archive

Azure IRM Protected Documents

New category and new items from FileType 8.2.1.

Type Name	Description
RPMSGPLAIN	Decrypted restricted-permission message
XLSXIRM	Excel 2007+ document with IRM
XLSIRM	Excel document with IRM
PFILE	File protected with IRM
OREIRM	OLE compound document with IRM
XLSIRMcrypt	Password protected Excel with IRM
PPSIRMcrypt	Password protected Powerpoint show with IRM
PPTIRMcrypt	Password protected Powerpoint with IRM
WordIRMcrypt	Password protected Word with IRM
PPTXIRM	Powerpoint 2007+ document with IRM
PPTIRM	Powerpoint document with IRM
PPSIRM	Powerpoint show with IRM
RPMSG	Restricted-permission message
DOCIRM	Word 2007+ doc with IRM in Word 2003 mode
DOCXIRM	Word 2007+ document with IRM

Document

Type Name	Description
MDB	Access database
MDW	Access system database
INDD	Adobe InDesign Document
MSO	Document data
DVI	DVI TeX document
XLScrypt	Encrypted Excel document
PPTcrypt	Encrypted PowerPoint Document (from FileType 8.2.1)
PPScrypt	Encrypted PowerPoint Show (from FileType 8.2.1)
DOCcrypt	Encrypted Word document
XLSB	Excel 2007+ Binary Document Includes later versions; see note below.
XLSX	Excel 2007+ document
XLSXIRM	Excel 2007+ document with IRM
XLS	Excel document
XLSIRM	Excel document with IRM
NFO	Folio Infobase
FM3	Lotus 123 FM3 sheet form
WK1	Lotus 123 WK1 sheet
WK3	Lotus 123 WK3 sheet
WK4	Lotus 123 WK4
SAM	Lotus AmiPro document
LWP	Lotus WordPro document
MCW	Mac Word document
ACCDB	Microsoft Access Database .ACCDB
ONE	Microsoft OneNote
VSDX	Microsoft Visio 2013 Drawing
DOCXML	Microsoft Word 2003 XML Document
OfficeMacroScript	Office Macro Script
Office2007Macro	Office 2007+ Macro Includes later versions; see note below.
OLE	OLE compound document
OREIRM	OLE compound document with IRM
ODC	Open Office chart file
OTC	Open Office chart template
ODB	Open Office database file
ODT	Open Office document file
OTT	Open Office document template
ODF	Open Office formulae file
OOoOTF	Open Office formulae template
ODM	Open Office global text document
OTH	Open Office global text template
ODG	Open Office graphics file
OTG	Open Office graphics template
ODI	Open Office image file
OTI	Open Office image template
ODP	Open Office presentation file
OTP	Open Office presentation template
ODS	Open Office spreadsheet file
OTS	Open Office spreadsheet template
OpenXML	OpenXML Document (SEG 7.2.3 and above)
PM6	PageMaker document
XLSIRMcrypt	Password protected Excel with IRM (from FileType 8.2.1)
PPSIRMcrypt	Password protected Powerpoint Show with IRM (from FileType 8.2.1)
PPTIRMcrypt	Password protected Powerpoint with IRM (from FileType 8.2.1)
WordIRMcrypt	Password protected Word with IRM (from FileType 8.2.1)
PDF	PDF document
PDFXFAForm	PDF document - Dynamic XFA form
PDFcrypt	PDF document - Encrypted
PDFInvalid	PDF document - Invalid header record (see note below)
PDFprotect	PDF document - Protected
PDFInvalidFormat	PDF Un-recognized file format
PS	PostScript document
PPTX	PowerPoint 2007+ document Includes later versions; see note below.
PPTXIRM	PowerPoint 2007+ document with IRM
PPTIRM	PowerPoint document with IRM
PPSX	PowerPoint 2007+ show
PPT	PowerPoint document
PPS	PowerPoint show
PPSIRM	PowerPoint show with IRM
PRJ	Project document
PUB	Publisher document
QXD	Quark Express document
RTF	Rich Text document
Word2	Word 2 Document
DOCIRM	Word 2007+ doc with IRM in Word 2003 mode
DOCX	Word 2007+ Document Includes later versions; see note below.
DOCXIRM	Word 2007+ document with IRM
DOC6	Word 6 Document
DOC	Word document
WPD	WordPerfect document
WPS	Works for Windows document
WRI	Write document
XPS	XPS Document

Drawing

Type Name	Description
AI	Adobe Illustrator drawing
DWG	AutoCAD Drawing
DWF	AutoCAD Format
CTB	AutoCAD Plotting Support .CTB
CMX	Corel Binary Meta file
CDR	Corel Draw Drawing
DXF	Drawing Interchange File DXF
FP3	FloorPlan Plus 3D
FH	Freehand drawing
VSDX	Microsoft Visio 2013 Drawing .VSDX
VXD	Microsoft Visio Drawing
NWD	Navisworks Document .NWD (from FileType 8.2.7)
Solidworks	Solidworks CAD files (.SPDPRT, .SLDASM, .SLDDRW, .SLDDRT) (from FileType 8.2.5)
STL	StereoLithography Drawing

Encrypted

Type Name	Description
7Zcrypt	7Zip encrypted archive (from FileType 8.2.1)
ARJcrypt	ARJ encrypted archive
ARJsfxcrypt	ARJ encrypted self extracting archive
AXCRYPT	AXCrypt Encrypted Data
Switch	Egress Switch Encrypted Mail
XLScrypt	Encrypted Excel document
PPTcrypt	Encrypted PowerPoint Document (from FileType 8.2.1)
PPScrypt	Encrypted PowerPoint Show (from FileType 8.2.1)
DOCcrypt	Encrypted Word Document
XLSXIRM	Excel 2007+ document with IRM
XLSIRM	Excel document with IRM
PFILE	File protected with IRM
GPG	Gnu Privacy Guard file .GPG (from FileType 8.2.5)
OREIRM	OLE compound document with IRM
XLSIRMcrypt	Password protected Excel with IRM (from FileType 8.2.1)
PPSIRMcrypt	Password protected Powerpoint show with IRM (from FileType 8.2.1)
PPTIRMcrypt	Password protected Powerpoint with IRM (from FileType 8.2.1)
WordIRMcrypt	Password protected Word with IRM (from FileType 8.2.1)
PDFcrypt	PDF document - encrypted
PENC	Perl Encoded file .ENC (from FileType 8.2.5)
PGP	PGP Encrypted Data
PPTXIRM	Powerpoint 2007+ document with IRM
PPTIRM	Powerpoint document with IRM
RARcrypt	RAR encrypted archive
RARsfxcrypt	RAR encrypted self extracting archive
RPMSG	Restricted-permission message
SEAEncrypt	SEA encrypted self extracting archive
SITEncrypt	SIT encrypted archive
P7M	SMime Encrypted Data
DOCIRM	Word 2007+ document with IRM in Word 2003 mode
DOCXIRM	Word 2007+ document with IRM
ZIPcrypt	ZIP encrypted archive
ZIPsfxcrypt	ZIP encrypted self extracting archive
ZIX	ZixCorp encrypted mail

Executable

Type Name	Description
7Zsfx	7Zip self extracting archive
ACEsfx	ACE self extracting archive
ARJsfxcrypt	ARJ encrypted self extracting archive
ARJsfx	ARJ self extracting archive
CLASS	Java class file
APPL	Macintosh M68k executable
PEF	Macintosh PPC executable
CABM	Microsoft CAB/Expand Archive
COM	MSDOS Com executable
EXE	MS-DOS Executable
MSI	MSI Windows Installer Package
MSIX	MSIX Windows Installer Package (from FileType 8.2.1)
NLM	NetWare Loadable Module
EXEO16	OS/2 16bit executable
DLLO32	OS/2 32bit DLL
EXEO32	OS/2 32bit Executable
PYC	Python bytecode file (from FileType 8.2.1)
RARsfxcrypt	RAR encrypted self extracting archive
RARsfx	RAR self extracting archive
SEAEncrypt	SEA encrypted self extracting archive
SEA	SEA self extracting archive
CIF	UNIX CIF Executable
COFF	UNIX COFF Executable
ELF	UNIX ELF Executable
DLLW16	Win16 DLL
EXEW16	Win16 executable
DLLO16	Win16 VXD or OS/2 DLL
DLLW32	Win32 DLL
EXE32W	Win32 executable
ZIPsfxcrypt	ZIP encrypted self extracting archive
ZIPsfx	ZIP self extracting archive

Font

Type Name	Description
EOT	Embedded OpenType Font
OTF	OpenType Font
TTF	True Type Font
AFM	Type 1 Adobe Font Metric
PFB	Type 1 Printer Font Binary
PFM	Type 1 Printer Font Metric
WOFF	Web Open Font Format
FON	Windows Bitmap font
ODTTF	XPS Embedded font (ODTTF)

Image

Type Name	Description
PSD	Adobe Photoshop Image
BMP	Bitmap image
CPT	Corel Photo-Draw Image
EPS	Encapsulated PostScript
EMF	Enhanced MetaFile Image
GIF	Gif image
HEIC	HEIF image (from FileType 8.2.4)
ICO	Icon
JPG	Jpeg image
JBIG2	JBIG2 image
JPEG2000	Jpeg2000 image
CIL	Microsoft ClipArt Gallery
MDI	Microsoft Document Image
MIX	Microsoft PhotoDraw Image
PSP	Paint Shop Pro image
PNG	Portable Network Graphics (PNG)
SVG	Scalable Vector Graphics (FileType 2025-02-01 and above)
TIF	Tiff image
WEBP	WebP Image File (from FileType 8.2.1)
HDPHOTO	Windows HD Photo
WMF	Windows MetaFile Image
PCX	Zsoft PCX Image

Mail Components

Type Name	Description
MBODY	Mail Body
MHDR	Mail Headers
MAIL	Mail message
TNEF	TNEF Exchange Mail Message
HTMLBody	TNEF Exchange Mail Message extracted HTML Mail Body
RTFBody	TNEF Exchange Mail Message extracted RTF Mail Body

Other

Type Name	Description
BPlist	Apple Binary Plist
AppleDouble	AppleDouble header
AppleSingle	AppleSingle formatted file
BIN	Binary Unknown (indicates a file of unrecognized type)
TORRENT	Bittorent .torrent metainfo file
ICS	Calendar Meeting Invitation (iCalendar)
ICSDescription	Calendar Meeting Invitation Description
ICSSummary	Calendar Meeting Invitation Summary
TPS	Clarion TopSpeed File .TPS
CHM	Compiled HTML Help file
DBF	dBase/xbase Data File .DBF
DBT	dBase Memo Field File
MDXdbase	dBase Multiple Index File
SYS	DOS device driver
VCF	Electronic Business Card .VCF
ICM	Independent Color Matching .ICM
InfoSlip	Infoslips document
JOS	Java Object Serialized Data
DSStore	Mac OSX Finder Info
MAPIBlock	MAPI Encoded data
OST	MAPI Off-line Store
PAB	MAPI Personal Address Book
PST	MAPI Personal Store
MAT	MATLAB Data File (from FileType 8.2.1)
PDB	Microsoft Debugging Symbols
LIB	Microsoft Program Library
MSBLDCACHE	MS Build Cache File
RCM	MTXWIN95 Registry Command File
OracleRDF	Oracle Report Definition File
Appointment	Outlook Appointment
Contact	Outlook Contact
MSG	Outlook message
Note	Outlook Note
Task	Outlook Task
P12	PKCS#12 Certificate Archive (FileType 2023-03-01 and above)
PCAP	Packet Capture
PCAPNG	Packet Capture NG
PEMCert	PEM encoded certificate .PEM (from FileType 8.2.1)
PFX	PFX Certificate Archive (FileType 2023-03-01 and above)
PGPPublicKey	PGP Public Key (.ASC) (FileType 2025-02-01 and above)
PGPSigned	PGP Signed Data
PBIXMashup	Power BI Data Mashup Archive (FileType 2025-02-01 and above)
PBIXMetadata	Power BI Data Metadata (FileType 2025-02-01 and above)
PBIXModel	Power BI Data Model (FileType 2025-02-01 and above)
PBIXBindings	Power BI Security Bindings (FileType 2025-02-01 and above) (Current SEG)
PBIXSettings	Power BI Settings (FileType 2025-02-01 and above)
QBB	QuickBooks Backup .QBB
QBW	QuickBooks Company file .QBW (from FileType 8.2.1)
RTF Object	RTF Object
SHP	Shape file .SHP (from FileType 8.2.1)
SHX	Shape Index file .SHX (from FileType 8.2.1)
P7S	SMime Signed Data
SQLiteDB	SQLite Database
EMC	Striata Encrypted Mail Communication
TEXT	Text
VHD	Virtual Hard Disk Image .VHD (FileType 2023-03-01 and above)
VSSSCC	Visual Source Safe Source Code Control
HLP	Windows Help file
MST	Windows Installer Setup Transform .MST (FileType 2023-03-01 and above)
URL	Windows Internet shortcut
EVT	Windows NT event log
REG	Windows Registry Data
WSF	Windows Script File .WSF
LNK	Windows shortcut
EVTX	Windows Vista event log .EVTX
XML	XML Document (recognized from FileType 8.2.1; selectable in the user interface from Filetype 8.2.2)

Sound

Type Name	Description
AAC	AAC audio
FLSA	Adobe Flash Audio
AU	AU sound file
ENC	Encore Music Notation .ENC
ASX	Microsoft Active Streaming link
MID	MIDI sound file
MP3	MP3 sound file
OGA	OGG stream for audio
RAM	Real Audio Link
RA	Real Audio sound file
RMP	Real Jukebox Metadata Package
Real	RealPlayer audio/video
WAV	WAV sound file
ASF	Windows Active Streaming Format

Video

Type Name	Description
3GPP	3GPP Video
FLSV	Adobe Flash Video
FLC	Animator Pro FLC file
FLI	Animator Pro FLI file
AVI	AVI video
DVM	DVM video
ASX	Microsoft Active Streaming link
MOV	Mov video
MPG	Mpeg video
OGV	OGG stream for video
Real	RealPlayer audio/video
SWF	Shockwave Flash
FLV	Shockwave Flash video
WEBM	WebM Video File (from FileType 8.2.1)
ASF	Windows Active Streaming Format

Web Browsing

Type Name	Description
CSS	Cascading style sheet
CRL	Certificate Revocation List (CRL)
GIF	GIF Image
Goog	Google Safe Browsing Update
HTML	HTML Document
ICO	Icon
CLASS	Java class file
JS	JavaScript file
JPG	JPEG image
OCSPResponse	OCSP Response File
PNG	PNG image
SWF	Shockwave Flash
VBS	VBScript file (from FileType 8.2.1)
FORMBIN	Web Page binary form data
FORMTEXT	Web page text form data
WEBM	WebM Video File (from FileType 8.2.1)
WEBP	WebP Image File (from FileType 8.2.1)

Non-Selectable Types

The following types cannot be selected in rules. They are used internally by WebMarshal and will be shown in logs as appropriate.

Type Name	Description
BIFF12	Binary File Format for Office 12
CHMBINOBJ	CHM Binary Object
ODTCache	Open Document Text Layout-cache
OLEStream	OLE Raw Stream
PDFStream	PDF Raw Stream
ZIPBig	Zip with massively redundant data

Notes:

PDF files that do not begin with the string %PDF (header in the document source) do not comply with the PDF standard. These files are recognized separately.
- Note that recent versions of Adobe software enforce compliance with the standard. For more information see Adobe documentation.
Word, Excel, and Powerpoint "2007" file type is the default format used by all later versions (including Office 2010, 2013, and 2016). All documents saved in this format are recognized, regardless of the Office software version.
See the following LevelBlue Knowledgebase articles for information about other versions:
- Q12033 What file types are recognized by WebMarshal 6.X?
- Q10859 What file types are recognized by WebMarshal 3.X?

Latest versions of Unpacker and Filetype for WebMarshal

Charles — Tue, 12 Aug 2025 23:56:43 GMT

This article applies to:

WebMarshal 7.X

Question:

What is the version of the Unpacker and File Type DLLs for my version of WebMarshal?
Is the Unpacker and File Type on my installation up to date?

Information:

LevelBlue provides updates to File Type identification and the Unpacker functionality with each product release.

LevelBlue can also provide updates through the automatic update function for File Type, Unpacker, and additional unpacking executables such as 7zip.

This article lists the most recent version of the Unpacker and File Type. The date listed (if any) is the date of the current update released through the automatic updater.

You can determine the version present in your installation by viewing the Properties > Details tab for each file.

Latest File Versions

Product Version	Unpacker Version	File Type Version
7.6.0	2025-02-01 July 7, 2025	2025-02-01 July 7, 2025
7.5.0-7.5.5	2023-03-01 October 24, 2023	2023-03-01 October 24, 2023
7.4.0-7.4.5	8.2.9 November 8, 2021	8.2.6 November 8, 2021
7.0.1-7.3.0	8.2.2 February 28, 2019	8.2.1 February 28, 2019

What versions of WebMarshal are currently supported by LevelBlue Technical Support?

Charles Creegan — Tue, 12 Aug 2025 22:34:05 GMT

This article applies to:

WebMarshal

Question:

What versions of WebMarshal are currently supported by LevelBlue Technical Support?

Information:

The following table shows the currently supported versions, planned dates of termination of support, and support end dates for discontinued versions.

Note: In this article "supported" refers to full product support as defined in LevelBlue support policy for the Marshal Product Line.

For "discontinued" versions, LevelBlue can often provide advice to help customers resolve issues. However, LevelBlue may recommend upgrade to a later version of the software.

If a reported problem requires remedial development work, LevelBlue will usually provide a fix only for the latest product version.

Upgrades to the current versions of these products are always free of charge to customers with a current maintenance contract.

All versions earlier than those listed are discontinued. Versions below 6.10 no longer have access to Tracenet and other web based updates.

Software Version

Release Date
Support Status
Discontinued Date

7.6.0.9374 August 13, 2025 Active

7.5.5.9336 November 1, 2023 Active

7.5.0.9239

August 31, 2022
Active

7.4.5.9142

February 18, 2021
Active

7.4.1.9033

February 4, 2020
Active

7.4.0.8999

November 19, 2019
Active

7.3.2.8927

July 4, 2019
Discontinued
September 1, 2022

7.3.1.8879

May 14, 2019
Discontinued
September 1, 2022

7.3.0.8967

January 29, 2019
Discontinued
September 1, 2022

7.2.0.8937

December 18, 2018
Discontinued
September 1, 2022

7.1.0.8763

June 20, 2018
Discontinued
March 1, 2020

7.0.2.8614

December 14, 2017
Discontinued
August 1, 2019

7.0.1.8609

December 5, 2017
Discontinued
Withdrawn
Use 7.0.2 or above

7.0.0.8580

November 7, 2017
Discontinued
August 1, 2019

Software Version	Release Date	Support Status	Discontinued Date
7.6.0.9374	August 13, 2025	Active
7.5.5.9336	November 1, 2023	Active
7.5.0.9239	August 31, 2022	Active
7.4.5.9142	February 18, 2021	Active
7.4.1.9033	February 4, 2020	Active
7.4.0.8999	November 19, 2019	Active
7.3.2.8927	July 4, 2019	Discontinued	September 1, 2022
7.3.1.8879	May 14, 2019	Discontinued	September 1, 2022
7.3.0.8967	January 29, 2019	Discontinued	September 1, 2022
7.2.0.8937	December 18, 2018	Discontinued	September 1, 2022
7.1.0.8763	June 20, 2018	Discontinued	March 1, 2020
7.0.2.8614	December 14, 2017	Discontinued	August 1, 2019
7.0.1.8609	December 5, 2017	Discontinued	Withdrawn Use 7.0.2 or above
7.0.0.8580	November 7, 2017	Discontinued	August 1, 2019

Notes:

For information about virus scanner plug-ins and reporting, see the Related Articles below.

Current Known Issues for latest released version

Charles — Tue, 12 Aug 2025 22:24:20 GMT

This article applies to:

WebMarshal 7.6.0 (Current Release)
WebMarshal 7.5.X
WebMarshal 7.4.X
WebMarshal 7.3.X

Question:

What are the known issues in the latest release of WebMarshal?
What are the latest changes and resolved issues in WebMarshal?

Resolved Issues:

For details of the latest changes and resolved issues, see the Release Notes for WebMarshal 7.6.

Known Issues and Limitations:

Release 7.5.5 and above does not allow installation on Windows 10. For console access, the Remote Console functionality can be used. LevelBlue always strongly recommends that the server components of WebMarshal should be installed on server operating systems only.
In release 7.5.0, email sending from rule actions does not succeed in some cases.
Due to a change in the Google Terms of Service for the Safe Browsing API, use of the Safe Browsing engine in WebMarshal (7.1 and above) is discontinued.
- WebMarshal 7.4.1 introduced the Google Web Risk functionality as a replacement.
- For more information see LevelBlue Knowledgebase article Q21118.
WebSockets connections from Chrome using NTLM cannot be authenticated. This issue is under investigation, and currently seen as a limitation of the Chrome browser.

Fixed Issues:

In release 7.4.5, the Engine service can hang when cleaning up user session information. This issue can also appear as inability to connect to the proxy. Requests are not completed.
- This issue is fixed in release 7.5.0.
In release 7.4.0 as installed, accessing PDF documents through WebMarshal can cause the Engine to stop.
- This issue has been addressed with an automatic update to a DLL file. Ensure that WebMarshal can access automatic updates.
In release 7.3.2 and earlier 7.X releases, adding many URLs to a category concurrently could cause the Controller service to stop.
- This issue is resolved in WebMarshal 7.4 and above.
In release 7.3.2 and earlier 7.X releases, console connections required the permission "Modify Policy".
- This issue is resolved in WebMarshal 7.4 and above. The minimum permissions required are "Console Connect" and "View Policy".
In release 7.3.1 when upgraded from some earlier versions, the engine can stop unexpectedly. Engine text logs show "One of the plugins crashed while it was running its rules over the user request."
- This issue is resolved in WebMarshal 7.3.2 and above.

Notes:

For further assistance, contact LevelBlue Support or your reseller support organization.

Applying user group changes immediately

Charles — Tue, 12 Aug 2025 22:22:18 GMT

This article applies to:

WebMarshal 7.6 and above
Imported user groups

Question:

How do I apply user group updates to WebMarshal policy immediately?

Background

WebMarshal can apply policy based on user group membership. Changes in effective policy require the user sessions to be dropped and re-started. This normally require a manual configuration commit.

Customers may want to apply changes in policy automatically based on changes in retrieved connector groups.

New settings in WebMarshal 7.6 and above allow this functionality.

Procedure:

To configure the functionality, changes are required in Array Manager configuration.

Array Manager:

Add the following line in WMArrayMgr.config.xml:

Where the group list is a semicolon separated list of the groups to monitor for changes. When changes are detected in a monitored group, the user sessions are dropped and re-started.

Note: Do not remove or edit any other lines in the file. If an AdvancedSettings line exists already, add the attribute to the existing line.

The group name is as found in the properties of the group in the WebMarshal console. The format is:

NT connector example: myserver\testgroup
AD connector example: CN=policygroup,DC=testdomain,DC=example,DC=com

For example:

<WebMarshal> 
  <ArrayManager>
     <Config> 
        <AdvancedSettings clearSessionUserGroupFilter="group1;group2;" [other attributes..] />     </Config>
  </ArrayManager>
</WebMarshal>

How does WebMarshal Proxy Caching work?

Charles — Mon, 07 Oct 2024 17:55:42 GMT

This article applies to:

WebMarshal 6.5 and above

Question:

How does Proxy Caching work in WebMarshal?

Reply:

Most HTTP proxies work in the same basic manner. The RFC document for HTTP (RFC-2616) includes a set of rules that indicate which content can and cannot be cached. The RFC also sets out a group of HTTP headers that allow web servers to indicate the cacheability of files and how long each file may be cached.

The WebMarshal proxy cache provides a caching implementation within the bounds of the RFC.

WebMarshal does not currently cache FTP traffic. FTP traffic is not covered by the HTTP RFC, and the RFC for FTP does not specify any mechanisms for defining caching information.

WebMarshal 7.5.5 and above introduces caching for static files delivered over HTTPS. HTTPS caching can be disabled. See LevelBlue Knowledgebase article Q21204.

When a request comes through for an HTTP resource, WebMarshal checks the cache directory on disk to see if there is a cached response for the requested URL. If a response has been cached, WebMarshal then checks to see if the response is "fresh" enough to be returned to the client. If the response is considered "fresh", WebMarshal will pass the cached content to the engine for policy processing. If the response is "stale" or no response has been cached, WebMarshal will contact the web server and request the item again. If the web server indicates that WebMarshal's cached copy is still valid, WebMarshal will use the cached data. Otherwise the response from the web server will be downloaded.

The proxy cache does not affect how the WebMarshal policy is applied. When a response is retrieved from the cache, it is still written as a file to the proxy's temp directory then sent to the engine for processing. There is no caching of the rule processing result, because changes to rules or updates to virus scanner data files would immediately invalidate any cached result.

WebMarshal's cache implementation also has some features that can make life easier for system administrators.

Cache Exclusions

While most web sites operate within the bounds of the RFC, there are always some that are incorrectly configured or coded. This can lead to situations where content is cached when it shouldn't be. WebMarshal allows sites to be excluded from caching altogether in order to work around such problems. (You can configure this list in the WebMarshal Console, Properties > Proxy Cache.)

Cache Pruning

When the allocated cache space is nearly full, WebMarshal automatically manages the content. The least recently used items are removed to make room for new content. Note that the original download date of the file is not relevant to pruning. Older files will be retained in the cache if they are requested often and have not changed.

Cache Directory Organization

The cache directory is organized in a logical manner that makes it easy to get to files for a given domain. Directories are organised by top-level domain, then the first 3 characters of the domain name, then the full domain name. For example, all pages for www.m86security.com are stored within com\m86\www.m86security.com. If cache information for a domain is ever corrupted, the system administrator simply needs to locate the correct domain and delete it. The cache will carry on as if those files never existed.

The administrator can also verify the cache contents and perform other advanced tasks using the Cache Tool. See LevelBlue Knowledgebase article Q12724.

Cache URL Rewriting

YouTube presents a problem for caching proxies. Even though its video files are marked as cacheable for an hour, the URL changes every time the video is played. Because the URL changes, a proxy cannot know if the content will be the same, so it has to download the video again. The WebMarshal cache contains URL rewriting rules for YouTube videos that strip out the changing part of the URL. This allows WebMarshal to serve the same video to multiple users without having to contact the server again.

Notes:

For some best practice technical recommendations about caching, see LevelBlue Knowledgebase article Q12720.

How do I increase the security of sensitive information when using WebMarshal with HTTPS content inspection enabled?

Charles — Mon, 07 Oct 2024 17:52:56 GMT

This article applies to:

WebMarshal 6.1 upwards with HTTPS content inspection enabled

Question:

How do I increase the security of sensitive information when using WebMarshal with HTTPS content inspection enabled?

Information:

WebMarshal provides the option to scan content inside secure HTTPS connections. When HTTPS inspection is enabled, It is important for users at an organization to know their HTTPS traffic and the temporary files associated with their HTTPS Internet activity are not accessible to others.

This article clarifies the potential availability of the scanned data and suggests some strategies to minimize any exposure.

Transmission:

WebMarshal HTTPS inspection ensures that all traffic to and from HTTPS URLs is encrypted - between the remote server and WebMarshal, and between WebMarshal and the client. Decryption is limited to a very short processing window on the WebMarshal server.

Caching:

WebMarshal 7.5.5 and above caches static files delivered over HTTPS by default, where permitted by the response headers.

HTTPS caching can be disabled. See LevelBlue Knowledgebase article Q21204.

Earlier versions do not cache any HTTPS material.

Inspection:

The WebMarshal administrator chooses which sites or URLS are inspected. Traffic to other sites is not decrypted.

LevelBlue recommends that you limit inspection to sites such as webmail and social networking sites. Banking or other financial sites should generally not be inspected. You can use WebMarshal rules to choose which sites are inspected.

Logging:

Text logs or database logs could contain the names of files, as well as querystring data, from inspected material.

To mitigate any chance of data mining from these logs, you can choose not to log data from inspected HTTPS requests. See Q12055: How do I exclude HTTPS requests from reporting?

Disk drive forensics:

WebMarshal "unpacks" the web traffic using temporary folders on a local disk drive. Normally these files are deleted and the drive space released within seconds. WebMarshal uses the drive very heavily and will re-use space quickly, but in theory, "deleted" material in the file system could be accessible later.

To mitigate this theoretical risk, you could encrypt the temporary folders (and the Traffic Logs if in use).

Note that encrypting disk folders significantly affects performance.

Follow the instructions below to encrypt the logging folders that WebMarshal uses to store the HTTPS related data. Repeat these steps on each processing node.

Create a Microsoft Windows account and set the WebMarshal services to use the account.
Log off and log on again under the the new WebMarshal account.
In the WebMarshal directory right click on each of the subdirectories in the list below, and select Properties.

NOTE: For a list of default WebMarshal install locations, see article Q20952.

\TrafficLogs
\Temp\unpacking
\Temp

Click the Advanced button and check the box Encrypt contents to secure data.
Click OK and OK again. Select Apply changes to this folder only.
Click OK and OK again.

An alternative solution is to purchase a third party RAM disk and when installing WebMarshal assign the directories mentioned above to the RAM disk. Once this has been done the directories can be encrypted the same way as described above.

The RAM disk is ideal in this situation because when it is restarted any data on the disk is deleted and cannot be recovered using data recovery software.

If you have already installed WebMarshal you may need to re-install to change the directories that can only be chosen during setup.

Updating Root Certificates for use by WebMarshal, SEG, and ECM

Charles Creegan — Mon, 12 Aug 2024 22:53:40 GMT

This article applies to:

WebMarshal
MailMarshal (SEG)
MailMarshal ECM/MailMarshal Exchange

Question:

How do I ensure that required SSL CA root certificates are installed on a Windows server?

Background:

WebMarshal uses HTTPS to retrieve and inspect HTTPS website content. To verify the status of HTTPS certificates, WebMarshal processing nodes require locally installed copies of any CA (root) certificates used to sign the website certificates.
All of the named products use HTTPS to access product update websites. To verify the security of the update sites, these products require locally installed copies of the CA (root) certificates for all hosting locations, including Microsoft, DigiCert, and Let's Encrypt.
- Updates can be requested by the Array Manager and processing nodes.
In some versions of Windows Server, only a small set of CA (root) certificates is installed by default. The certificates required by these products may not be included.

Procedure:

To ensure that the latest root certificates are installed on a Windows server, use the following procedures.

Note: These instructions assume that the servers have access to the Internet and/or Windows Update. For information about how to update certificates on disconnected servers, see the Microsoft article Configure Trusted Roots and Disallowed Certificates.

Create a folder location to hold downloaded files. This example uses C:\Certificates
Open an elevated (Administrator) command prompt.
Enter the following command to retrieve a listing of root certificates from Windows Update:

certutil -GenerateSSTfromWU c:\Certificates\Rootcerts.sst
Open an elevated (Administrator) Powershell prompt.
Enter the following commands to import or update all root certificates:

$file = ( Get-ChildItem -Path C:\Certificates\Rootcerts.sst )
$file | Import-Certificate -CertStoreLocation Cert:\LocalMachine\Root
The Powershell command result shows each certificate that is contained in the SST file. This list includes certificates that are already installed on the local machine.
- You can also view the list of certificates in the Trusted Root Certification Authorities store by running the Windows CertLM utility, or the MMC Certificates snap-in for the local machine.

Notes:

The CA certificates for SEG and ECM updates change very rarely.
- In mid-2023, DigiCert began using a new root certificate (DigiCert Global Root G2). For more details see information from DigiCert.
- In late 2024, LevelBlue began using certificates issued by Let's Encrypt from the ISRG Root X1.
To ensure that WebMarshal is up to date with the latest CA certificates, you can script the certificate update to run once a week, using Windows Scheduled Tasks.
Advanced users can choose which root certificates they wish to add. For basic information about this process, see the Microsoft article linked above.
Certutil also provides a method to import certificates. However, this method does not correctly import all certificates from the SST files. LevelBlue strongly recommends the use of Powershell to import certificates.

What versions of Marshal Security products are currently supported by LevelBlue Technical Support?

Charles Creegan — Sun, 26 Nov 2023 18:02:27 GMT

This article applies to:

MailMarshal (SEG)
MailMarshal ECM/MailMarshal Exchange
MailMarshal SPE
MailMarshal SES
Marshal Reporting Console
WebMarshal
Bitdefender for Marshal
McAfee for Marshal
Sophos for Marshal
Other Products
- MailMarshal Appliance e10000
- MailMarshal Management Pack for MOM
- MailMarshal Management Pack for SCOM
- Marshal EndPoint Security
- Security Reporting Center
- Firewall Suite
- imMarshal for MSN
- Counterspy for Marshal
- Kaspersky for Marshal
- PestPatrol for Marshal

Question:

What versions of Content Security (Marshal) products are currently supported by LevelBlue Technical Support?

Information:

For full details about supported versions of current products, see the articles linked below:

Premises Email Security

Article Q20961 covers the following products:
- MailMarshal (SEG)
- MailMarshal ECM/MailMarshal Exchange
- Secure Email Server (SES)

Web Content Security

Article Q20962 covers WebMarshal.

Service Provider Email Security

Article Q20963 covers MailMarshal SPE.

Anti-Virus and Reporting

Article Q20964 covers the following products:
- Bitdefender for Marshal
- McAfee for Marshal
- Sophos for Marshal
- Marshal Reporting Console

Deprecated and Discontinued Products

e10000 (MailMarshal Node Appliance): End of support: March 31, 2011
EndPoint Security: End of support: May 1, 2013
MailMarshal Management Pack for MOM: End of support: May 1, 2013
MailMarshal Management Pack for SCOM: End of support: May 1, 2013
Security Reporting Center (Windows Version): End of support: December 31, 2009
Security Reporting Center (Solaris Version): Withdrawn
Firewall Suite: Withdrawn
imMarshal for MSN: Withdrawn
Counterspy for Marshal: End of support: January 1, 2014
Kaspersky for Marshal: End of support: November 22, 2023
PestPatrol for Marshal: End of support: January 1, 2014

This article was previously published as:: NETIQKB33882

Controlling Caching of HTTPS content

Charles Creegan — Tue, 31 Oct 2023 20:01:14 GMT

This article applies to:

WebMarshal 7.5.5 and above
Proxy caching

Question:

How do I control caching of HTTPS content?

Background:

WebMarshal 7.5.5 and above caches static files delivered over HTTPS by default.

This is a change from earlier versions that did not cache HTTPS content. This change reflects the reality that most reputable websites now use HTTPS for most content.
Static files generally include scripts, images, and other helper files that do not contain sensitive content.
HTTPS caching is only active for inspected HTTPS content. If your policy excludes a site from inspection, the content from the site will not be cached.

Procedure

To disable caching of HTTPS content:

Add the following entry to the WebMarshal Proxy Configuration file (WMProxy.config.xml) on each processing server

<WebMarshal>
   <Proxy>
     <Config>
        <Cache allowHTTPSCaching="false" />
     </Config>
  </Proxy>
</WebMarshal>

Restart the WebMarshal Proxy service.

Note

WMProxy.config.xml will include other entries. Do not change the other entries.
The Cache element may exist and contain other attributes. Add the new attribute to the existing element.
XML files are case sensitive.
For general information about editing XML settings files, see article Q12705.

Additions to Release Notes for WebMarshal 7.5

Charles — Tue, 31 Oct 2023 19:54:07 GMT

This article applies to:

WebMarshal 7.5

Question:

What are the Release Notes for WebMarshal 7.5?

Information:

The Release Notes included with WebMarshal 7.5 are accurate as of the date of publication.

WebMarshal 7.5.5 (build 7.5.5.9336) was released on November 1, 2023.

This article provides highlights and any later updates.

See also the Current Known Issues article, Q21010.

Configuring Multi-Subnet Failover Connectivity for the WebMarshal Database

Charles — Tue, 31 Oct 2023 19:49:58 GMT

This article applies to:

WebMarshal 7.5.5 and above
Database connectivity

Question:

How do I configure Multi-Subnet Failover for the WebMarshal database connection?

Procedure:

First, configure the database using the WebMarshal Console

To add Multi-Subnet Failover:

On the Array Manager server, in the WebMarshal install edit the file ArrayManager\Policy\ArrayPolicy.Working.xml
Locate the node "Database"
Add an attribute useMultiSubnetFailover and set the value to "yes"; For example:
<Database useMultiSubnetFailover="yes" provider="MSOLEDBSQL" server="somecluster" database="WebMarshal" user="EXAMPLE\Secureuser" password="6X+NAW/fiu/egydom+4j4A==" useTCP="yes" enabled="yes" retention="100" reportingConsole="" />
Do not edit the other values. Note that XML values are case sensitive.
Save the file, and the restart the WebMarshal Array Manager service

Notes:

Be aware that the Marshal Reporting Console does not support Multi-Subnet Failover. Database connections from MRC must be configured for a single server.

Applying Microsoft Tenant Restrictions with WebMarshal

Charles — Tue, 05 Sep 2023 03:26:03 GMT

This article applies to:

WebMarshal

Question:

How do I configure WebMarshal to apply Azure AD (Entra) tenant restrictions?

Background:

Microsoft tenant restrictions allow you to determine which tenancies of cloud applications can be accessed from within an organization (where the web access is forced through a gateway like WebMarshal). This feature can be used to control access to all apps that send the user to Azure AD for single sign-on.

Procedure:

Add URL category Microsoft Auth Services
Add the following URLs to this category (both HTTP and HTTPS):
- login.microsoft.com
- login.microsoftonline.com
- login.windows.net
Ensure that WebMarshal HTTPS inspection is enabled globally and HTTPS rules specify inspection for the category Microsoft Auth Services
Create a standard rule
Where the URL is a member of Microsoft Auth Services
Rewrite Headers
- Add a header to client requests Restrict-Access-To-Tenants with a comma separated list of tenant domains, for example: mycompany.onmicrosoft.com,contoso.com
- Add a header to client requests Restrict-Access-Context with value of the Tenant ID of your domain (get this from Entra/Azure AD settings at https://entra.microsoft.com/ as described in the Microsoft article Restrict access to a tenant)
- It is also possible to choose the users that this rule will apply to.
Continue to name the rule for example Add MS Headers, and save the rule.
Commit WebMarshal configuration.

Requests to the Microsoft services will have the headers added as specified.

Notes:

For more details of the tenant restriction feature, see the Microsoft article linked.

What directories need to be excluded from resident virus scanning and regular backups?

Charles Creegan — Wed, 10 May 2023 00:55:38 GMT

This article applies to:

MailMarshal (SEG)
MailMarshal ECM/MailMarshal Exchange
WebMarshal

Question:

What directories need to be excluded from resident virus scanning and regular backups?

Information:

Note: It is essential that the listed working directories are excluded from resident scanning as well as regular backups. The services are expecting temporary files to be in a certain place and available.
It may also be necessary to exclude applications such as the product Engine and 7zip from interference.

While the LevelBlue products are designed to warn about the presence of traditional scanners, some new technology scanners may not be detected because they only react to specific activities.
If an outside application is interfering with Marshal temporary files the Marshal services will be affected.

Services might halt.

Temporary files might not be deleted as expected, resulting in later issues that can be very difficult to trace.
For background information about this requirement, see LevelBlue Knowledgebase article Q21197.

If you are using Bitdefender for Marshal 1.1 see also the information in the related article below.

To learn how to exclude directories from scanning, consult the documentation for your virus scanner.

Note that this article only covers the requirements for supported product versions.

SEG 8.X and above

Note: These exclusions must be placed on the Array Manager and any Processing Nodes. Some of these folders will not exist on a standalone Array Manager.
Default Install path:

C:\Program Files\Trustwave\Secure Email Gateway\
Directories to be excluded (The exclusion should apply to all subfolders as well):

%InstallPath%\Logging (Only exclude for Backups. Exception: if your backup software has the ability to exclude files that are less than a day old, you can allow backup of this folder)

%InstallPath%\Quarantine (Only exclude for AV software, not Backups)

%InstallPath%\Queues

%InstallPath%\Unpacking

%InstallPath%\SpamProfiler (Exclude from Backups; exclude from AV scanning if your scanner alerts on this folder)

MailMarshal Exchange 7.X:

Note: These exclusions will need to be placed on the Array Manager and any MailMarshal nodes. Some of these folders will not exist on a standalone Array Manager.
Default Install path:

C:\Program Files (x86)\Marshal\M86 MailMarshal Exchange
Directories to be excluded (The exclusion should apply to all subfolders as well):

%InstallPath%\Logging (Only exclude for Backups. Exception: if your backup software has the ability to exclude files that are less than a day old, you can allow backup of this folder)

%InstallPath%\Quarantine (Only exclude for AV software, not Backups)

%InstallPath%\Unpacking

WebMarshal 7.X:

Note: These exclusions should be placed on the Array Manager and any processing servers (nodes). Some of these folders will not exist on a standalone Array Manager.
Default Install path (64 bit):

C:\Program Files\Trustwave\WebMarshal\
Directories to be excluded (The exclusion should apply to all subfolders as well):

%InstallPath%\Logging (Exclude from backups only. If your backup software has the ability to exclude files that are less than a day old, you can allow backup of this folder)

%InstallPath%\Temp

In version 6.5 and above, the location can be customized. See article Q12249.

%InstallPath%\Node\ (For processing servers - Exclude from virus scanning. Policy related files in this location may contain material that scanners see as "suspicious URLs", since WebMarshal is itself configured to check for these same URLs.)

%InstallPath%\ArrayManager\ (For Array Manager - Exclude from virus scanning. Policy related files in this location may contain material that scanners see as "suspicious URLs", since WebMarshal is itself configured to check for these same URLs.)

Notes:

For the Nod32 virus scanner, specify directories using the 8.3 legacy naming format (for instance, c:\progra~1\marshal).

This article was previously published as:: NETIQKB40812

Unable to block HTTPS Web sites by path

Charles — Mon, 06 Mar 2023 20:30:35 GMT

This article applies to:

WebMarshal

Symptoms:

Unable to block parts of HTTPS Web sites.
You have a rule set up to block a path within a HTTPS site, such as https://www.website.com/page/, but the rule does not block the site.

Causes:

In current WebMarshal versions, if HTTPS Content Inspection is enabled and inspection is enabled for a site in rules, you can enter and check path information for HTTPS web sites in WebMarshal URL categories that you use in Standard and Content Analysis rules.

Because secure sites are encrypted, if inspection is not enabled, WebMarshal can only see the name of the site, not the full path. All path information and page content is encrypted.

If you do not have HTTPS inspection enabled for a site, enter only the site name in categories.

Important notes:

HTTPS Rules do not use path information. If you use URL Categories to limit the sites that are inspected, any URL entries with path parts will be ignored.
Standard and Content Analysis rules use the path information for HTTPS sites only if HTTPS rules trigger inspection of the site content.
For example to grant specific users access to limited paths in Google Docs:
- Ensure HTTPS rules are set up to inspect requests from those users to https://docs.google.com
- Add a URL Category to hold the specific URLs within Google Docs that you want to control
- Use this URL Category in Standard or Content Analysis rules, combined with user matching or other conditions.

Note:

See also article Q12708: WebMarshal warning pages redirect HTTPS to the base server address

This article was previously published as:: NETIQKB29188; Marshal KB236

Proxy Caching Recommendations

Charles — Wed, 05 Oct 2022 18:08:17 GMT

This article applies to:

WebMarshal 6.5 and above

Question:

What are the best practices for configuration of proxy caching hardware and settings?

Information:

Virus Scanning Exclusion

When setting up proxy caching, you must exclude the cache directory from on-access or resident virus/malware scanning. If WebMarshal determines that the cache directory is being scanned, proxy caching will be disabled. To re-enable caching, correct the scanner exclusions and then restart the WebMarshal Proxy service.

Cache Location

By default the cache directory location is within the WebMarshal install location (on each processing node server). This location is appropriate for trial installations and low volumes of traffic.

However, to ensure adequate performance on production servers, LevelBlue recommends you place the cache in another location.

Configure the cache on a separate physical disk.
- Ideally this disk should be used only for the cache.
- At minimum it should be a different disk to the WebMarshal temp (unpacking) and logging directories.
- Use a single disk with fast read and seek time. Do not use RAID or mirrored disks (redundancy slows access time). Do not use a compressed disk or folder.
- LevelBlue strongly recommends you use a local disk. The disk must have 100% availability.
  - In 6.5.5 and above you cannot enter a UNC path. (However these versions will use a UNC path if you entered it previously. If you use a UNC path, the Windows account used to run the WebMarshal Proxy service must have full access to the location.)
Ensure that the cache disk always has some free space (at least 30% free, and preferably more). Set the cache maximum size accordingly. This will help preserve performance.
In an array with more than one processing server, the cache maximum size applies to each server. You can set different maximum sizes for each server using the "server groups" feature in the WebMarshal Console.
The cache index is maintained in server memory. If the memory is insufficient, or the cache contains an extremely large number of files, server performance could be slowed due to memory constraints.

Disk Space

The default cache size is 10GB. You can set a larger value, but LevelBlue recommends a maximum of 20GB. As the cache index is stored in memory, larger cache sizes will consume increasing amounts of memory. Other items such as network sockets also consume significant amounts of memory.
- For advanced users who wish to experiment with a larger cache, monitor the total memory consumption and the Virtual Bytes performance counter for the WebMarshal proxy process.
You should ensure adequate free space will remain on the disk (to allow for disk fragmentation with creation and deletion of many files).
The cache maintains a minimum of 1GB free disk space, plus 1MB per GB of configured cache size.
If the cache is located on the same disk as the WebMarshal installation, standard WebMarshal low disk space checking also applies. If the disk free space falls below the minimum, browsing requests will be denied.
The cache data is not compressed, and you should not use disk compression for the cache disk or folder (this helps to maintain quick access).

Cache Statistics

In addition to the Real-time Dashboard in the Console, you can use the command line WMProxyCacheTool to check and administer the cache. See Knowledge Base article Q12724.

Cache Exclusions

Caching depends on the remote web server to provide correct information about when WebMarshal should retrieve new content. In rare cases, a site may not provide this information. As a result, users may not see the latest content from the site.

If you experience problems with out-of-date content for a specific site or part of a site, you can exclude it from caching. In the WebMarshal Console, see Server and Array Properties > Proxy Cache > Exclusions.

SQL Server support for MailMarshal (SEG) and WebMarshal

Charles — Mon, 03 Oct 2022 02:52:27 GMT

This article applies to:

MailMarshal (SEG)
WebMarshal

Questions:

This article collects answers to questions about LevelBlue policy on support for SQL Server versions and features for the named products.

What versions of SQL Server do you support?

See Knowledgebase article Q11358, and also the Release Notes for each product version.

LevelBlue generally plans to test each major and feature product release with the latest versions of SQL Server.
MailMarshal (SEG) supports Azure SQL Server, when the MailMarshal installation is on Azure.

What Service Packs and Cumulative Updates do you support?

LevelBlue generally supports any new SP or CU for the supported SQL versions. Minimum SP requirements are listed in Knowledgebase article Q11358, and the Release Notes.

For a general policy statement, see Knowledgebase article Q13687.

Do the products support named instances?

Yes.

Do the products support SQL Clusters?

Yes, the products only require a constant SQL endpoint that they can connect to. The architecture behind the endpoint is not relevant.

Do the products work with SQL Server Availability Groups?

Yes, the products only require a constant SQL endpoint that they can connect to. The architecture behind the endpoint is not relevant.

SEG interfaces depend on up-to-date databases. Availability of data can be subject to SQL performance considerations.
Data purging from databases hosted on Availability Groups is one area that has caused performance concerns. Ensure good connectivity between the connected SQL Servers.
Multi-Subnet Failover is available in MailMarshal 10.0.5 and above

What best practices for SQL do the products support?

Automatic creation of a security role that has minimal permissions, for everyday connections to the database; one-time entry of credential with higher permission for upgrades.
Enterprise administrators can create an empty database that the product will populate.
TLS1.2 connectivity.

Do you support SQL Server encryption?

Data encryption at rest is supported, assuming this is transparent to the client (subject to performance considerations).
Transport encryption is not supported; however TLS connectivity is supported.

What URLs are required for operation of WebMarshal features?

Charles Creegan — Thu, 29 Sep 2022 20:59:38 GMT

This article applies to:

WebMarshal

Question:

What URLs are required for operation of WebMarshal features?

Information:

Note: Additional URL cdn-updates.marshal.com is used from February 2022.

WebMarshal includes a number of features that are automatically updated using web-based services.

These services are accessed by the WebMarshal processing node servers.

You should ensure that access to these services is permitted by any firewall or external proxy (and by WebMarshal rules if required by network setup).

If WebMarshal is installed as a plugin to ISA, you may need to create special ISA rules. See LevelBlue Knowledgebase article Q10286.

The required URLs include:

URL	From Server	Purpose
HTTP://crl.trustwave.com	All	HTTPS Certificate Revocation Checking - LevelBlue sites (Other URLS may be required for HTTPS CRL checking of third party sites)
HTTPS://tracenetlicensing.m86security.com HTTP://tracenetdl.m86security.com HTTPS://tnreclassify.m86security.com HTTPS://tnfeedback.m86security.com HTTPS://cdn-updates.marshal.com This URL is hosted on Microsoft Azure CDN. IP addresses may change. IP addresses can be retrieved using the "Front Door" tag in Microsoft Azure IP Ranges and Service Tags.	Processing Nodes	TRACEnet service (updates, reclassification requests, and feedback)
HTTPS://tracenetlicensing.m86security.com HTTPS://cdn-updates.marshal.com This URL is hosted on Microsoft Azure CDN. IP addresses may change. IP addresses can be retrieved using the "Front Door" tag in Microsoft Azure IP Ranges and Service Tags.	Processing Nodes	Automatic updates to File Type, Unpacking, and other functionality.
HTTPS://filterlistlicensing.m86security.com HTTPS://secureupdate.8e6.com HTTPS://updates.8e6.com Note: Beginning 3 October 2022, the database content will be served from HTTPS://tracenetlicensing.m86security.com The 8e6.com servers will be decommissioned later in October.	Processing Nodes	LevelBlue Web Filter Database (Previously known as M86 URL filtering List) (Note that this URL must also be accessible from the Array Manager at the time of initial configuration of the list.) Be sure that any external devices allow WebMarshal to access both "secureupdate" and "updates". LevelBlue may serve the database content from either of these sites, depending on operational need.
HTTP://sophos.marshal.com HTTPS://sophos.marshal.com	Processing nodes	Sophos for Marshal Engine and IDE updates (if installed) HTTPS required from SfM version 1.1. Note that the LiveProtection service (present in version 1.1 and above) performs DNS-based queries and must have access to a DNS server that can query the Sophos DNS servers.
HTTPS://safebrowsing.googleapis.com	Processing Nodes	Google Safe Browsing updates (WebMarshal 7.1 and above, if the Safe Browsing feature is enabled)
HTTP://mcafee.marshal.com HTTPS://mcafee.marshal.com	Processing nodes	McAfee for Marshal Engine updates (if installed) HTTPS required from MfM version 1.1.
HTTP://update.nai.com/	Processing nodes	McAfee for Marshal definition file updates (if installed)
HTTPS://bitdefender.marshal.com/ HTTPS://agent-av-mirror.trustwave.com	Processing nodes	Bitdefender for Marshal Engine and signature updates (if installed)

Notes:

Because WebMarshal is a proxy server, it is assumed that processing nodes will have full access to the web.
In some versions the "marshal8e6.com" domain is used instead of "m86security.com". IP address resolution of the servers is identical regardless of this domain change.

How do I selectively disable the requirement of authentication when browsing sites in WebMarshal?

Charles — Wed, 28 Sep 2022 20:39:50 GMT

This article applies to:

WebMarshal

Question:

How do I selectively disable the requirement of authentication when browsing sites in WebMarshal?

Procedure:

When attempting to browse to a Web site through WebMarshal, the user must be authenticated by WebMarshal first. If the authentication is successful (if the user exists in the WebMarshal database and the passwords match) then the rules will be applied to the request.

In some cases, it may be necessary to allow access to certain sites, without WebMarshal authenticating the user. Typically this feature could be used to allow access to Intranet sites without requiring a logon. It could also be used for applications that require access to a specific Web site, but do not have the ability to pass authentication details to WebMarshal.

You can use the IP Authentication feature in rules to allow access to certain sites from certain workstations without a user login. This feature allows you to use WebMarshal filtering, including virus and malware scanning, on the content retrieved.

You can also use the WMProxyLogon helper application. See the User Guide.
You can also configure Authentication Bypass Cache. See the linked article below.

If you need to exclude sites from the WebMarshal filter, add them to the Proxy Bypass list. You can edit this list in the Console Global Settings. Sites on this list will not be filtered, content will not be scanned for viruses or malware and access will not be logged.

This article was previously published as:: NETIQKB29542; Marshal KB334

How does WebMarshal control web access using the machine name instead of IP address?

Charles — Wed, 28 Sep 2022 20:25:26 GMT

This article applies to:

WebMarshal

Question:

How does WebMarshal control web access using the machine name instead of IP address?

Information:

It is not possible to control web access directly using machine names in WebMarshal.

When computers are authenticated by IP address, WebMarshal attempts to discover the associated computer names. The names are used in the group display and reports. However, access control is by IP address and not by computer name.

To apply rules to certain machines, use an IP address group.

Open the WebMarshal Console.
Select Tools | Proxy Server Properties or Tools | Global Settings from the menu bar.
Under the Proxy Settings tab or item, select Ports and Authentication
- In earlier versions, click Modify Proxy Server Settings or select Tools | Proxy Server Wizard from the menu bar, to open the Proxy Server Wizard. Click Next until the Authentication Options (Proxy Ports and Authentication) section displays.
Enable IP address authentication. For detailed steps, see Help.
Click OK, or click Next until the wizard is finished.
Create an IP Address Group under the Policy Elements | User Group node.

In earlier versions, in the New User Group Wizard, select the Create an IP address range group option and then click Next.

In the Create IP Address Range Group section, enter a name for the group and a description.
Enter an IP Address range to be included with this group. Address entry varies by version. For details, see Help.
Click OK, or Next and then Finish.

Next, apply rules to the group you created. For example, a rule (similar to the one below) could be created to block the IP address list in the IP Address Range group from attempting to access a website:

When a web request is received Where the User us a member of 'the IP Address Group created' And where addressed to any URL Block Access to this site and display 'Blocked' page And do not process any further rules

Notes:

A newly created IP address group will initially be empty. The group will be populated with addresses or computer names that have actually connected through WebMarshal.
By default a computer remains in the same IP address group even if its IP address changes. In WebMarshal 7.5 and above, you can choose to update IP group membership dynamically. See the related article below.

This article was previously published as:: NETIQKB36079

How do I allow a remote laptop user to use the WebMarshal proxy server?

Charles — Wed, 28 Sep 2022 20:16:12 GMT

This article applies to:

WebMarshal

Question:

How do I allow a remote laptop user to use the DMZ public WebMarshal proxy server address?
Users who take laptops home have proxy connection issues

Procedure:

LevelBlue does NOT recommend allowing client connections to the WebMarshal proxy from the public internet.

The following options are available:

Recommended Options:

Have the remote users connect to the company network via VPN, and specify the IP addresses that the VPN server could allocate in the WebMarshal Local Address Table.
- Note: This is the recommended workaround, and security conscious organizations are likely to have a VPN already configured.
Educate laptop users on how to manually change the browser or system proxy settings so that they do not use the proxy when out of office.
- In current Windows versions, see Settings > Network & Internet > Proxy

Valid Options that are not supported by LevelBlue Technical Support:

Develop a desktop batch file/script/registry file that laptop users can execute to change the settings.
- One file to check the 'Use a Proxy Server for you LAN' option, and one to uncheck the same option

Notes:

In order to use WebMarshal as the Proxy server for the network, all workstation proxy settings must point to the WebMarshal server. The problem manifests itself when laptop users connect to the LAN from an internal point on the network during the day at work, and then connect to the Internet outside the office, via an ISP without a VPN connection to the company's LAN. At this point, the proxy settings are still referencing the internal name or IP address of the WebMarshal server. The server IP address will resolve fine if the WebMarshal server is in the DMZ, but the end user will not be able to browse the Internet. The web browser will get a 'Website not found" error message.

In this situation, we do NOT recommend opening firewall and the Local Address Table of WebMarshal to accept connections from all addresses. This will allow the WebMarshal machine to accept connection attempts from any address, including unwanted connections.

Opening access freely can result in Denial of Service attacks and other security issues.

This article was previously published as:: NETIQKB35624

LevelBlue Knowledge Base » Knowledgebase » WebMarshal

Supported Operating Systems and Prerequisite Versions

This article applies to:

Question:

Information:

Key:

Operating Systems and Prerequisites

Server Operating Systems

Workstation Operating Systems(for server installation)

Prerequisites

SQL Server Versions

Notes on MRC Installation

Additions to Release Notes for WebMarshal 7.6

This article applies to:

Question:

Information:

Additional Updates:

Web Filter Database changes - New WebMarshal versions

This article applies to:

Information:

Categorization Check

New Categories

Version 7.5.5

Version 7.6.0

Deprecated Categories

How to use the Support Tool for SEG, ECM, WebMarshal or MRC

This article applies to:

Question:

Information:

Installation

Using the tool

The fields on the window are defined as follows:

Items to gather

Output

Notes:

What file types are recognized by WebMarshal 7.X?

This article applies to:

Question:

Information:

Archive

Azure IRM Protected Documents

Document

Drawing

Encrypted

Executable

Font

Image

Mail Components

Other

Sound

Video

Web Browsing

Non-Selectable Types

Notes:

Latest versions of Unpacker and Filetype for WebMarshal

This article applies to:

Question:

Information:

Latest File Versions

What versions of WebMarshal are currently supported by LevelBlue Technical Support?

This article applies to:

Question:

Information:

Notes:

Current Known Issues for latest released version

This article applies to:

Question:

Resolved Issues:

Known Issues and Limitations:

Fixed Issues:

Notes:

Applying user group changes immediately

This article applies to:

Question:

Background

Procedure:

Array Manager:

How does WebMarshal Proxy Caching work?

This article applies to:

Question:

Workstation Operating Systems
(for server installation)