CA Data Protection 15.2 Communications protocol enhancements.

Products

• CA Security Command Center
• CA Data Protection (DataMinder)
• CA User Activity Reporting

Issue/Introduction

CA Data Protection provides the ability to specify varying levels of encryption when machines send data across the network.

In the GA (General Availability release) the options are as follows:

 

None

The network link is not encrypted.

 

Low

Provides basic encryption (DES) with minimal impact on system performance.

 

Medium

Provides medium level encryption (2-key triple DES) with some impact on system performance.

 

High

Provides high level encryption (128 bit RC4) with minimal impact on system performance.

 

The RC4 encryption protocols employed in the  General availability (GA) release have now been deprecated and have been superseded by more secure protocols.

 

Environment

CA Data Protection 15.2

Resolution

FIX:RO98951 (Incorporating Server_15.20_HF0101, Server_x64_15.20_HF0102, Client_15.20_HF0103, Client_x64_15.20_HF0104 and Server_Native_x64_15.20_HF0105)has been released to provide more secure AES128 protocols for communications.

 

After deploying the fix, the protocols are enhanced as follows:

 

High

Provides high level encryption (128 bit AES with GCM and SHA256) with minimal impact on system performance.

FIX:RO98951 is available to download from the CA Support Portal (http://support.ca.com)

Additional Information

This is now included in cumulative FIX:SO01003 (incorporating Server_15.20_HF0162, Server_x64_15.20_HF0163, Client_15.20_HF0164, Client_x64_15.20_HF0165 and Server_Native_x64_15.20_HF0166).