   Release Notes for McAfee Desktop Firewall
              Version 8.0 (BETA 2)
 (c) 2003 Networks Associates Technology, Inc.
              All Rights Reserved


===============================================


Thank you for using Desktop Firewall software.
This file contains important information
regarding this release. We strongly recommend
that you read the entire document.


   IMPORTANT:
   McAfee strongly recommends that you use any
   pre-release software (beta or release
   candidate) in a test environment only.
   Pre-release software should not be installed
   in a production environment.

   McAfee does not support automatic upgrading
   of a pre-release version of the software. To
   upgrade to a later beta release, a release
   candidate, or a production release of the
   software, you must first uninstall the
   existing version of the software.


_______________________________________________
WHAT'S IN THIS FILE

-  About This Beta
-  New Features
-  Installation and System Requirements
   -  System Requirements (Stand-Alone)
   -  System Requirements(ePO)
   -  Compatibility with PGP Products
   -  Installing Desktop Firewall
      (Stand-Alone)
   -  Installing Desktop Firewall (ePO)
   -  Removing Desktop Firewall (Stand-Alone)
   -  Removing Desktop Firewall (ePO)
   -  Upgrading from the Beta Version
-  Known Issues
-  Documentation
-  Participating in the McAfee Beta Program
-  Copyright and Trademark Attributions
   -  Trademarks
   -  License Agreement

_______________________________________________
ABOUT THIS BETA

This is the second beta for Desktop Firewall
version 8.0.

Future betas will:
-  Publish IDS signature updates


_______________________________________________
NEW FEATURES

Desktop Firewall 8.0 introduces new features
for both the stand-alone and ePolicy
Orchestrator (ePO) versions of the software.
New ePO features include:

-  Support for ePO version 3.0
   (ePO 3.0 is currently in beta).

-  Improved and customizable reports.

-  The ability to quarantine individual Desktop
   Firewall users, so that they can only
   communicate with ePO or specific, predefined
   IP addresses.

-  The ability to remotely review a specific
   user’s ruleset from an ePO console.

-  The ability to browse and manipulate Smart
   Rules and Known Rules.

New features for both the ePO and stand-alone
versions of Desktop Firewall include:

-  Bi-directional Learn Mode, which lets you
   specify whether you want to apply Learn Mode
   to incoming communication, outgoing
   communication, or both.

-  Application monitoring, which lets you:

   -  track applications
   -  create rules that allow or prevent
      applications from running
   -  create rules that allow or prevent
      applications from 'hooking' into other
      applications
   -  use Application Learn Mode to
      automatically detect and respond to new
      applications

-  Support for rules based on non-IP
   protocols.

-  Support for rules based on Internet
   domains.

-  Updateable IDS signatures.

-  Scheduled, time-based rules.

-  Policy archives (custom sets of rules,
   trusted network lists, and program settings,
   which you can label and either export or
   import).


_______________________________________________
INSTALLATION AND SYSTEM REQUIREMENTS

You can use Desktop Firewall on its own
(stand-alone mode), or configure and distribute
it using McAfee ePolicy Orchestrator (ePO).
This section lists the system requirements and
installation instructions for each.

SYSTEM REQUIREMENTS (STAND-ALONE)

Before you install Desktop Firewall, verify
that your computer satisfies the software’s
minimum system requirements:

-  An Intel Pentium 166 MHz processor, or
   faster

-  A monitor offering a minumum display
   resolution of 800 X 600 (1024 X 768
   recommended)

-  A minimum of 64MB of RAM

-  A minimum of 32MB hard disk space

-  One of the following operating systems:

   -  Microsoft Windows 98 SE (Second Edition)

   -  Microsoft Windows NT Workstation 4.0,
      with Service Pack 6 or later

   -  Microsoft Windows NT Server 4.0, with
      Service Pack 6 or later

   -  Microsoft Windows 2000 Professional, with
      Service Pack 2

   -  Microsoft Windows 2000 Server, with
      Service Pack 2

   -  Microsoft Windows 2000 Advanced Server,
      with Service Pack 2

   -  Microsoft Windows ME (Millenium Edition)

   -  Microsoft Windows XP Home Edition

   -  Microsoft Windows XP Professional

Note: These are the minimum system
requirements. Network Associates recommends
that you always use the latest service packs,
and that you install all available security
hotfixes before installing Desktop Firewall.


SYSTEM REQUIREMENTS (ePO)

When running Desktop Firewall 8.0 through
ePolicy Orchestrator (ePO), the system
requirements are the same as those for ePO
version 3.0. See your ePolicy Orchestrator
Installation Guide for details.

To use Desktop Firewall with ePO, you must
use:

-  ePolicy Orchestrator version 3.0, beta 2 
   or later


COMPATIBILITY WITH PGP PRODUCTS

Desktop Firewall is not compatible with the
PGPadmin and PGPvpn components of the following
software suites:

-  PGP Desktop Security, version 7.0 or later

-  PGP Corporate Desktop, version 7.1 or later

-  PGPfire Personal Firewall/IDS, version 7.1
   or later

You must remove the PGPadmin and PGPvpn
components if you plan to install and use
Desktop Firewall.


INSTALLING DESKTOP FIREWALL (STAND-ALONE)

Note: You must install the stand-alone firewall
on your local computer; you cannot install the
software on a mapped network drive.

1. If installing from the product CD, insert it
   into the CD-ROM drive of your computer.

2. In Windows, click Start and then select
   Run.

3. Browse to the location of your Desktop
   Firewall setup.exe file, then click OK.

   If you are installing from a product CD, the
   default location for this file is
   \PRODUCTS\DESKTOP FIREWALL\SETUP.EXE.

   If you are installing from downloaded files,
   this file exists in the directory where you
   saved the files.

4. Follow the installation wizard’s prompts to
   continue installing the product.

5. When the installation finishes, click Finish
   to restart your computer and start Desktop
   Firewall.

   You must restart your computer before
   Desktop Firewall can secure any
   communications.


INSTALLING DESKTOP FIREWALL (ePO)

Note: In this beta, you cannot manage both
Desktop Firewall version 7.5.1 and version 8.0
using ePO. If you have already installed
version 7.5.1, remove it before installing
version 8.0.

Before you install the ePO version of Desktop
Firewall 8.0, you must:

-  install and configure ePolicy Orchestrator
   version 3.0 (beta 2)

-  deploy ePO agents to any computers where you
   plan to install Desktop Firewall

See your ePO documentation for instructions.

To then add Desktop Firewall to ePO, you must:

-  Install the Desktop Firewall ePO Update
   software on all ePO servers and consoles.

-  Add the Desktop Firewall NAP file
   (McAfeeFire80.nap) to your ePO Repository.

-  Add the Desktop Firewall package file
   (PkgCatalog.z) to your ePO Repository.

Once this is complete, you can deploy Desktop
Firewall to any ePO-managed computers. See your
ePO documentation for details.


REMOVING DESKTOP FIREWALL (STAND-ALONE)

1. In Windows, click Start and then select
   Settings.

2. Select Control Panel, then select Add/Remove
   Programs.

3. The Add/Remove Programs dialog box appears.

4. Select McAfee Desktop Firewall 8.0 from the
   list, then click Change/Remove.

5. A welcome dialog box appears.

6. Select Remove to uninstall Desktop Firewall,
   then click Next.

7. Click Yes to verify that you want to remove
   the application.

8. Click Finish to restart the computer and
   finish removing Desktop Firewall.


REMOVING DESKTOP FIREWALL (ePO)

To remove Desktop Firewall from ePO, you must:

-  Uninstall the software from any client
   computers.
-  Remove the software from the ePO
   Repository.
-  Uninstall the Desktop Firewall ePO Update
   software.


UPGRADING FROM THE BETA VERSION

If you choose to install a future version of
Desktop Firewall, you must uninstall this beta
version first.


_______________________________________________
KNOWN ISSUES

1. On Windows NT, Windows 2000, and Windows XP,
   Desktop Firewall does not monitor DOS and
   Windows 16-bit applications if you select
   Enable Application Creation Monitor on the
   Application Policy tab.

2. This beta does not support Fast-User
   Switching (FUS). Using Desktop Firewall with
   FUS may cause system problems. This issue is
   under investigation.

3. Internet Connection Sharing is not
   supported.

4. If you disable Learn Mode on Domain
   Controllers or other Windows NT servers
   (including ePolicy Orchestrator servers and
   consoles), these computers might not be able
   to access the network. Do not disable Learn
   Mode on these computers unless your policy
   enables all of the necessary Windows
   networking services.

5. The PDF documents for this beta do not cover
   any new version 8.0 product features. Only
   the version 7.5.1 PDFs are available for
   this beta release

6. This beta does not fully support Terminal
   Services. Your Desktop Firewall system tray
   icon may change to a red circle with a bar
   across it when you use Terminal Services. If
   this happens, it means that the firewall is
   running but cannot secure your current
   Terminal Services session. The "Policy",
   "Intruders", "Log", and "Options" items
   remain unavailable from the Desktop Firewall
   shortcut menu until you end your session.

7. You cannot customize Desktop Firewall’s ePO
   reports at present.

8. This beta may not properly quarantine users
   who connect using VPN software.

9. Do not quarantine static IP addresses that
   belong to laptop users, or Desktop Firewall
   will quarantine them and prevent them from
   communicating with any network they use.

10.   When installing new applications on a
   Destktop Firewall computer, clear the Enable
   Application Creation Monitor checkbox on the
   firewall's Application Policy tab. This will
   prevent installation problems.

11.   Desktop Firewall does not support IPv6.

12.   If you need to uninstall Desktop Firewall
   from Safe Mode, modify the following
   registry key first:

      HKEY_LOCAL_MACHINE\\Software\\Microsoft\\
      Windows\\CurrentVersion\\RunOnce

   Delete the MDFNeedsReboot value.


_______________________________________________
DOCUMENTATION

This product includes a documentation set that
consists of manuals saved in Adobe Acrobat
Portable Document Format (.PDF){ and an online
Help system}.

Electronic copies of all product manuals are
included on the product CD, or are available
with a valid grant number on the McAfee
download site:

      www.mcafeeb2b.com/naicommon/download/upgrade/login.asp


A free copy of the latest version of Acrobat
Reader comes with the product CD, or you can
download any version from the Adobe web site:

      www.adobe.com/prodindex/acrobat/readstep.html


This BETA product includes the following
documentation set:


1. Installation Guide (version 7.5.1). This
   guide provides system requirements,
   instructions for installing the software and
   information on where to find the product
   documentation. A printed version of this
   guide accompanies the product CD. You can
   also access an online version of the manual
   from the product CD or from the McAfee
   download site. The online version is an
   Adobe Acrobat .PDF file.

2. Product Guide (version 7.5.1). This guide
   introduces the product, documents product
   features, provides detailed instructions for
   configuring the software, and includes
   information on deployment as well as
   recurring tasks and operating procedures. An
   Adobe Acrobat .PDF version of this guide is
   stored on the product CD. You can also
   download a copy in .PDF format from the
   McAfee download site.

3. Online Help system. Online Help, accessed
   from within the software application, gives
   you quick access to hints and tips about
   using your software. Help includes
   field-level What's This? topics, page-level
   context Help with links to more detailed and
   related information, and context Help for
   all error messages. {Help also includes an
   overview of product features and
   step-by-step procedures for product
   features.}

4. This README file (version 8.0).

5. A CONTACT file. This file provides a list of
   phone numbers, street addresses, web
   addresses, and fax numbers for Network
   Associates offices in the United States and
   around the world. It also includes contact
   information for services, such as technical
   support, customer service, onsite training,
   the beta program, and AVERT Anti-Virus
   Emergency Response Team.



_______________________________________________
PARTICIPATING IN THE MCAFEE BETA PROGRAM

To download new beta software or to read about
the latest beta information, visit the beta web
site located at:

   www.mcafeeb2b.com/beta

To submit beta feedback on any McAfee product,
send e-mail to:

      avbeta@nai.com

McAfee is devoted to providing solutions based
on your input.


_______________________________________________
COPYRIGHT AND TRADEMARK ATTRIBUTIONS

(c) 2003 Networks Associates Technology, Inc.
All Rights Reserved. No part of this
publication may be reproduced, transmitted,
transcribed, stored in a retrieval system, or
translated into any language in any form or by
any means without the written permission of
Networks Associates Technology, Inc., or its
suppliers or affiliate companies. To obtain
this permission, write to the attention of the
Network Associates legal department at: 3965
Freedom Circle, Santa Clara, California 95054,
or call +1-972-308-9960.


TRADEMARKS

Active Firewall, Active Security, Active
Security (in Katakana), ActiveHelp,
ActiveShield, AntiVirus Anyware and design,
AVERT, Bomb Shelter, Certified Network Expert,
Clean-Up, CleanUp Wizard, CNX, CNX
Certification Certified Network Expert and
design, Covert, Design (stylized N), Disk
Minder, Distributed Sniffer System, Distributed
Sniffer System (in Katakana), Dr Solomon’s, Dr
Solomon’s label, Enterprise SecureCast,
Enterprise SecureCast (in Katakana), ePolicy
Orchestrator, Event Orchestrator (in Katakana),
EZ SetUp, First Aid, ForceField, GMT,
GroupShield, GroupShield (in Katakana), Guard
Dog, HelpDesk, HomeGuard, Hunter, LANGuru,
LANGuru (in Katakana), M and design, Magic
Solutions, Magic Solutions (in Katakana), Magic
University, MagicSpy, MagicTree, McAfee, McAfee
(in Katakana), McAfee and design, McAfee.com,
MultiMedia Cloaking, Net Tools, Net Tools (in
Katakana), NetCrypto, NetOctopus, NetScan,
NetShield, NetStalker, Network Associates,
Network Policy Orchestrator, NetXray,
NotesGuard, nPO, Nuts & Bolts, Oil Change, PC
Medic, PCNotary, PortalShield, Powered by
SpamAssassin, PrimeSupport, Recoverkey,
Recoverkey – International, Registry Wizard,
Remote Desktop, ReportMagic, RingFence, Router
PM, Safe & Sound, SalesMagic, SecureCast,
Service Level Manager, ServiceMagic, SmartDesk,
Sniffer, Sniffer (in Hangul), SpamKiller,
SpamAssassin, Stalker, SupportMagic,
ThreatScan, TIS, TMEG, Total Network Security,
Total Network Visibility, Total Network
Visibility (in Katakana), Total Service Desk,
Total Virus Defense, Trusted Mail, UnInstaller,
Virex, Virus Forum, ViruScan, VirusScan,
WebScan, WebShield, WebShield (in Katakana),
WebSniffer, WebStalker, WebWall, Who’s Watching
Your Network, WinGauge, Your E-Business
Defender, ZAC 2000, Zip Manager are registered
trademarks or trademarks of Network Associates,
Inc. and/or its affiliates in the US and/or
other countries. Sniffer® brand products are
made only by Network Associates, Inc. All other
registered and unregistered trademarks in this
document are the sole property of their
respective owners.

This product includes or may include software
developed by the OpenSSL Project for use in the
OpenSSL Toolkit. (http://www.openssl.org/)

This product includes or may include
cryptographic software written by Eric Young.
(eay@cryptsoft.com)

This product includes or may include some
software programs that are licensed (or
sublicensed) to the user under the GNU General
Public License (GPL) or other similar Free
Software licenses which, among other rights,
permit the user to copy, modify and
redistribute certain programs, or portions
thereof, and have access to the source code.
The GPL requires that for any software covered
under the GPL which is distributed to someone
in an executable binary format, that the source
code also be made available to those users. For
any such software covered under the GPL, the
source code is made available on this CD. If
any Free Software licenses require that Network
Associates provide rights to use, copy or
modify a software program that are broader than
the rights granted in this agreement, then such
rights shall take precedence over the rights
and restrictions herein.



LICENSE AGREEMENT

NOTICE TO ALL USERS: CAREFULLY READ THE
APPROPRIATE LEGAL AGREEMENT CORRESPONDING TO
THE LICENSE YOU PURCHASED, WHICH SETS FORTH THE
GENERAL TERMS AND CONDITIONS FOR THE USE OF THE
LICENSED SOFTWARE. IF YOU DO NOT KNOW WHICH
TYPE OF LICENSE YOU HAVE ACQUIRED, PLEASE
CONSULT THE SALES AND OTHER RELATED LICENSE
GRANT OR PURCHASE ORDER DOCUMENTS THAT
ACCOMPANIES YOUR SOFTWARE PACKAGING OR THAT YOU
HAVE RECEIVED SEPARATELY AS PART OF THE
PURCHASE (AS A BOOKLET, A FILE ON THE PRODUCT
CD, OR A FILE AVAILABLE ON THE WEB SITE FROM
WHICH YOU DOWNLOADED THE SOFTWARE PACKAGE). IF
YOU DO NOT AGREE TO ALL OF THE TERMS SET FORTH
IN THE AGREEMENT, DO NOT INSTALL THE SOFTWARE.
IF APPLICABLE, YOU MAY RETURN THE PRODUCT TO
NETWORK ASSOCIATES, INC. OR THE PLACE OF
PURCHASE FOR A FULL REFUND.

