Reflection for Secure IT Windows Client 8.2 Service Pack 1 Release Notes

1.0 Introduction

Reflection for Secure IT Windows Client 8.2 Service Pack 1 is available now for new and existing customers. These release notes provide information about how to obtain this release.

For important information regarding security updates, see Security Alerts - Reflection for Secure IT Client for Windows.

2.0 What’s New

Many of these improvements were made in direct response to suggestions from our customers. We thank you for your time and valuable input. We hope you continue to help us ensure that our products meet all your needs.

2.1 Security Enhancements

  • Expanded the null cipher list to include all defined null ciphers. Null ciphers are only proposed for the inner connection of a managed end-to-end encrypted connection.

  • Users can now configure connections to use both a SOCK or HTTP Proxy Server and TLS.

3.0 Resolved Issues

TLS

  • Addressed TLS 1.3 error handling when client authentication fails. Connections now disconnect with an error when client authentication fails.

  • Reflection for Secure IT Client for Windows now skips trusted certificates in the Windows store that fail to be parsed. This enhancement prevents unrelated trusted certificates from causing errors during server certificate validation.

  • Reflection for Secure IT Client for Windows no longer locks up if a timeout occurs during certificate validation for TLS sessions.

SSH

  • If the public key file is missing for an encrypted private key, the user is no longer prompted for the passphrase twice.

  • Host key entries with data that is not recognized are skipped in the known hosts file.

  • Resolved several issues with agent forwarding. These fixes address the addition of new algorithms and an updated user interface.

  • Fixed minor issues with Local Forward Tunneling encountered in the new user interface.

  • Corrected progress bar times for both uploads and downloads when using the SCP command-line client.

Other security issues

  • Child windows, when launched, are centered over the parent window when the parent is being shown in either a primary or secondary monitor.

  • The Reflection FTP Client text (fonts) show clearly on all Windows scaling settings.

  • Previously, Security Proxy authentication under certain conditions would fail. Token size now dynamically changes to prevent the buffer-size related connection issues.

  • The SSH configuration file requires a linefeed (LF) at the end of each configuration line. When storing certain settings the linefeed may not be added to the end of the configuration line. A fix was implemented so Reflection for Secure IT Client for Windows can now add a missing linefeed when the SSH configuration file is saved.

4.0 Known Issues

You may encounter the following issues:

FIPS 140-2 validated crypto module status.

The crypto module in Reflection for Secure IT Client for Windows has now been submitted for FIPS 140-2 validation.

5.0 Installing Reflection for Secure IT Client for Windows

Maintained customers are eligible to download the latest product releases at https://download.attachmate.com/Upgrades/. You will be prompted to login and accept the Software License Agreement before you can download a file.

If you have already installed Reflection for Secure IT Client for Windows, you can apply this update to your existing installation.

6.0 Previous Releases

For information about the previous Reflection for Secure IT Client for Windows release, see the Reflection for Secure IT Client for Windows 8.2 Release Notes and the Reflection for Secure IT Client for Windows 8.2 Update 1 Release Notes.

7.0 Contacting Micro Focus

For specific product issues, contact Micro Focus Support at https://www.microfocus.com/support-and-services/.

Additional technical information or advice is available from several sources:

8.0 Legal Notice

For information about legal notices, trademarks, disclaimers, warranties, export and other use restrictions, U.S. Government rights, patent policy, and FIPS compliance, see https://www.microfocus.com/about/legal/.

© Copyright 2021 Micro Focus or one of its affiliates.

The only warranties for products and services of Micro Focus and its affiliates and licensors (“Micro Focus”) are set forth in the express warranty statements accompanying such products and services. Nothing herein should be construed as constituting an additional warranty. Micro Focus shall not be liable for technical or editorial errors or omissions contained herein. The information contained herein is subject to change without notice. Please see the product’s applicable end user license agreement for details regarding the license terms and conditions, warranties, and limitations of liability.

Any links to third-party websites take you outside Micro Focus websites, and Micro Focus has no control over and is not responsible for information on third party sites.