<> TXOne Networks, Inc. Jun 30, 2022 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ TXOne StellarOne for StellarEnforce/StellarProtect 1.2 Patch 1 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ NOTE: This readme file was current as of the date above. TXOne Networks is a joint venture of Trend Micro and Moxa, and support for TXOne Networks products is provided by Trend Micro. All technical support goes through Trend Micro engineers. All customers are advised to check the Trend Micro website for documentation updates at: https://success.trendmicro.com/ TXOne Networks always seeks to improve its documentation. If you have questions, comments, or suggestions about this or any TXOne Networks documents, please contact us at docs@txone-networks.com. Your feedback is always welcome. Please evaluate this documentation on the following site: https://docs.trendmicro.com/en-us/survey.aspx ==================================================================== Contents ==================================================================== 1. About TXOne StellarOne 2. What's New 3. Documentation Set 4. System Requirements 5. Installation 6. Known Issues 7. Release History 8. Contact Information 9. About TXOne Networks 10. License Agreement ==================================================================== 1. About TXOne StellarOne ==================================================================== The TXOne StellarOne console provides centralized monitoring and management designed to streamline administration of both TXOne StellarEnforce for legacy systems and TXOne StellarProtect for modernized systems. The StellarEnforce or StellarProtect consists of an agent program that resides on endpoints and the StellarOne console as a server program that manages agents. The StellarOne console administrates StellarEnforce's and StellarProtect's agent deployment, status, and events. For example, administrators can remotely manage devices with global or group policies, configure StellarOne configurations and manage events and logs. The StellarEnforce agent provides a simple, no-maintenance solution to lock down and protect fixed-function computers like Industrial Control Systems (ICS), Point of Sale (POS) terminals, and kiosk terminals from malicious software and unauthorized use, helping protect businesses against security threats and increase productivity. Meanwhile, the StellarProtect agent provides an ICS-compatible, high performance, and zero touch endpoint protection solution. The StellarProtect agent includes the following new features and benefits: - Industrial-Grade Next-Generation Antivirus: Secures OT assets with no interruption to operations with ICS root of trust and advanced threat scan - Operations Behavior Anomaly Detection: Detects abnormal operations and enforces least privilege-based control to prevent malware-free attacks - ICS Application Safeguard: Intelligently locates and secures the integrity of the ICS process from ICS targeted attacks - Device Control: Prevents insider threats by only allowing usage of USB ports on a case-by-case administrator-reviewed basis By using fewer resources and without the need for regular software or system updates, StellarEnforce can reliably secure computers in industrial and commercial environments, and StellarProtect can reliably secure modernized computers in industrial and commercial environments, both with little performance impact or downtime. With StellarOne, administrators can remotely deploy StellarEnforce agents, deploy initial agent Approved Lists, and change agent Application Lockdown states. In addition, StellarOne can be used to schedule StellarProtect's scanning operations. Together, the administrator can view the blocked information from the StellarEnforce/StellarProtect agents and determine actions to be taken on these blocked files. This reduces the time and effort required to verify the threat, and facilitates a quick response to the incidents. ==================================================================== 2. What's New ==================================================================== The TXOne StellarOne web console now includes the following new features and benefits: TXOne StellarOne 1.2.2114: - Integration to Apex Central: a. User can use Apex Central account credentials to access StellarOne management console via Single Sign-On. b. User can monitor StellarEnforce agents directly on Apex Central console by adding two widgets to the Apex Central dashboard. - Group Mapping: User can register StellarEnforce or StellarProtect agent to a specific group directly via StellarOne web console. ================================================================== 3. Documentation Set ================================================================== To download or view electronic versions of the documentation for this product, please visit https://docs.trendmicro.com. - Installation Guide (IG): The Installation Guide contains information on requirements and procedures for installing and deploying TXOne StellarOne. - Administrator's Guide (AG): Provides post-installation instructions on how to configure the settings to help you use TXOne StellarOne's management features. Also includes instructions on performing other administrative tasks for the configuration and monitor of StellarEnforce or StellarProtect agents. - Support Portal: The Support Portal contains information on troubleshooting and resolving known issues. To access the Support Portal, go to success.trendmicro.com ================================================================== 4. System Requirements ================================================================== StellarOne is packaged in an Open Virtual Appliance (OVA) format. This section lists the minimum system requirements. ================================================================== 4.1 Supported Hypervisor ================================================================== - VMWare ESXi 6.5 or above - VMware Workstation 16 Pro or above ================================================================== 4.2 Supported Browser ================================================================== - Google Chrome 87 or latest - Microsoft Edge 79 or latest - Mozilla Firefox 78 or latest Note: Minimum supported resolution is 1366*768. ================================================================== 5. Installation ================================================================== Please see the Installation Guide. ================================================================== 5.1 Prescan ================================================================== The prescan function can scan the whole device to add all present ICS applications to the Approved List before StellarProtect is activated. - Before the prescan, please empty the recycle bin. - The prescan process may take 30 minutes to 5 hours, depending on how many apps are installed on the device. - It is strongly recommended NOT to skip the prescan, which may cause later delays in the operation of ICS applications. ================================================================== 6. Known Issues ================================================================== Known issues in this release are listed below, in 6.1 - 6.2: ================================================================ 6.1 StellarEnforce ================================================================ a. Upon the completion of StellarOne server scanning, the consumed memory will not be released. b. The StellarOne console does not support Apex Central SaaS Version. c. Registering StellarOne to Apex Central via Proxy server is not supported. d. If the StellarEnforce agent is inactive due to insufficient license seat count, after group mapping, the selected group name for registration and the successfully registered status will still be shown at the agent console and StellarOne web console. ================================================================ 6.2 StellarProtect ================================================================ a. If the StellarProtect agent is inactive due to insufficient license seat count, after group mapping, the StellarOne console will show "All" as the Group name instead of showing the selected group name. However, the selected group name for registration and the successfully registered status will still be shown at the agent side. ================================================================== 7. Release History ================================================================== For more information about updates to this product, go to: https://www.trendmicro.com/download TXOne StellarOne 1.2.2114 - June 30, 2022 ================================================================== 8. Contact Information ================================================================== A license to TXOne Networks software usually includes the right to product updates, pattern file updates, and basic technical support for one (1) year from the date of purchase. After the first year, you must renew the license on an annual basis at TXOne's then-current maintenance fees. Contact Trend Micro via fax, phone, and email, or visit our website to download evaluation copies of TXOne products. https://www.trendmicro.com/us/about-us/contact/index.html NOTE: This information is subject to change without notice. ================================================================== 9. About TXOne Networks ================================================================== TXOne Networks Inc. is a joint venture between Trend Micro and Moxa Inc. TXOne Networks Inc. offers cybersecurity solutions to protect industrial control systems (ICS), ensuring reliability and safety from cyberattacks. ================================================================== 10. License Agreement ================================================================== View information about your license agreement with TXOne Networks at: www.trendmicro.com/us/about-us/legal-policies/license-agreements Third-party licensing agreements can be viewed: - By selecting the "About" option in the application user interface - By referring to the "Legal" page of the Installation and Administrator's Guide