Last Revision:
October 02, 2026
These notes are additional to the WebMarshal User Guide and supersede information supplied in that Guide.
The information in this document is current as of the date of publication. To check for any later information, please see LevelBlue Knowledge Base article Q21263.
New Features
System Requirements
Upgrade Instructions
Uninstalling
Release History
For more information about additional minor features and bug fixes, see the release history.
To review earlier feature enhancement history, see the release notes for earlier WebMarshal versions, available through the LevelBlue Knowledge Base.
Hardware required is dependent on the number of concurrent web users and the rules in use. Use of Filtering Lists improves performance. Heavy use of TextCensor decreases performance. Be prepared to adjust specification as required.
Typically a computer with the following specifications is adequate as a processing server for 250-500 concurrent users.
WebMarshal Array Manager, processing servers, and Console require the following software:
Note: Install Windows using the English language version.
The minimum prior version supported for direct upgrade is 7.5.0. To upgrade from earlier versions, first upgrade to 7.5.0 or above. For details, see release notes for previous product releases.
If you are logging data to a SQL database, the database may require upgrade. If necessary, the installer will prompt for credentials of a database user with permission to upgrade the database (database owner privilege). If the database is not upgraded when required, database logging will be disabled until you upgrade the database and re-enable logging. For more information and instructions, see LevelBlue Knowledge Base article Q12030.
See the upgrade notes below for version-specific information. For upgrade notes relating to versions prior to 7.5, please see earlier Release Note documents available through the LevelBlue Knowledge Base.
For upgrade notes relating to versions prior to 7.5, please see earlier Release Note documents available on the LevelBlue Support website.
WebMarshal can be installed in a variety of scenarios. For full information on uninstalling WebMarshal from a production environment, see the WebMarshal User Guide.
To uninstall a trial installation on a single computer:
The following additional items have been changed or updated in the specific build versions of WebMarshal listed.
| WM-5918 | The product is rebranded for LevelBlue. |
| WM-5930 | The version of TLS libraries included is updated. |
| WM-5931 | Encrypted connections to the SQL server are supported. |
| WM-5960 | Programming component libraries are updated. |
| WM-5963 | The PDF unpacking component is updated. |
| WM-5964 | The version of the archive extraction software included in the installation is updated. |
| WM-5866 | Installation on Windows 2025 is supported. |
| WM-5894 | WebMarshal can be configured to monitor for changes in specific connector user groups and apply the changes immediately (clearing user sessions). |
| WM-5895 | Regeneration of the TRACENet database is optimized. |
| WM-5896 | The version of TLS libraries included is updated. |
| WM-5897 | The bundled SQL Express is updated to SQL 2022. |
| WM-5898 | The PDF unpacking component is updated. |
| WM-5899 | The web download automation component included in the install is updated. |
| WM-5902 | The database connection library is updated. |
| WM-5903 | Programming component libraries are updated. |
| WM-5908 | Indexing of the TRACENet database is optimized. |
| WM-5914 | Download of files over 4GB in size is supported. Note that files of this size may take a very long time to unpack and scan. |
| WM-5915 | The Web Filter Database supports additional categories. |
| WM-5213 | Proxy caching supports caching of HTTPS content by default. For details of the setting to disable caching of HTTPS content, see LevelBlue Knowledge Base article Q21204. |
| WM-5354 | The default SQL provider is updated to MSOLEDBSQL. |
| WM-5537 | Proxying of M-JPEG content could result in unlimited growth of a temporary file. Fixed. |
| WM-5715 | Validation of certificate chains is improved. |
| WM-5823 | Proxy certificates generated by WebMarshal could have invalid dates if the remote website certificate was misconfigured. Fixed. |
| WM-5824 | Proxying of RTSP over websocket content could result in unlimited growth of a temporary file. Fixed. |
| WM-5826 | In release 7.5.0, messages generated by the "Send email to administrator" rule action were not sent. Fixed. |
| WM-5827 | The TLS/SSL library is updated. |
| WM-5830 | The Web Filter Database includes additional categories. |
| WM-5848 | The PDF unpacking component is updated. |
| WM-5851 | Kaspersky for Marshal is removed from the installer options. This module is no longer sold. Customers must migrate to other scanners before 31 December 2023. |
| WM-5857 | Database connections support SQL Multi-Subnet Failover. For details of the required setting, see LevelBlue Knowledge Base article Q21205. |
| WM-5727 | The Microsoft Office 365 endpoints list is automatically retrieved by WebMarshal and available for use in FileFilter and the Proxy Bypass List. |
| WM-5734 | Administrative notification emails now show the name of the node where the issue was reported. |
| WM-5735 | A new advanced setting allows dynamic update of the IP Group membership of a computer. See LevelBlue Knowledge Base article Q21186. |
| WM-5739 | The default value for MaxRuleThreads (filter threads from Proxy to Engine) is reduced to 50. This setting enhances performance by reducing congestion in the Engine. |
| WM-5741 | WebMarshal can now be configured to authenticate and log requests using the IP address presented in the X-Forwarded-For header. |
| WM-5743 | For the avoidance of doubt, Windows authentication used by WebMarshal is no longer referred to as "NTLM". WebMarshal uses the "Negotiate" method and Kerberos is the preferred option. This is a wording change only. The functionality was already present. |
| WM-5748 | Categories deprecated in the Web Filter Database are no longer inserted in new installations. On upgraded installations these categories are renamed, but must be removed manually. See LevelBlue Knowledge Base article Q21089. |
| WM-5777 | The Customer Feedback Module (anonymized browsing data) has been disabled. |
| WM-5786 | The TextCensor2 DLL dependencies are updated to more recent versions. |
| WM-5789 | The Engine service could hang in certain circumstances due to a resource deadlock. Fixed. |
| WM-5791 | In-memory caching of CRLs by the Proxy is more efficient. |
| WM-5793 | The TLS/SSL library is updated. |
| WM-5794 | The web download automation component included in the install is updated. |
| WM-5796 | The archive extraction component in the install is updated. |
| WM-5797 | The PDF unpacking component is updated. |
| WM-5799 | The version of Brotli compression support is upgraded. |
Note: To review change history for earlier versions, please see the Release Notes for the specific version of WebMarshal. All Release Notes are available through the LevelBlue Knowledge Base.
Copyright © 2026 Trustwave Holdings, Inc.
LevelBlue reduces risk and builds lasting resilience so organizations can innovate and advance their mission with confidence. As the world’s most analyst-recognized and largest pure-play managed security services provider, LevelBlue elevates client outcomes that matter: stronger defense, faster response, and sustained business continuity. LevelBlue combines AI-powered security operations, advanced threat intelligence, and elite human expertise to provide the most comprehensive portfolio of strategic advisory, managed security, offensive security, and incident response services..