Netsweeper is pleased to announce the Client Filter 13.90 GA release. This release addresses the compromised Emudrah (emSign) intermediate CA certificates as well as how we validate certificate chains. Customers running 11.10 to 13.90 on Windows, MacOS, and the iOS nFilter VPN Client should upgrade if they are decrypting. This release removes the impacted emSign root certificates from our default certificate bundle. Netsweeper recommends all customers upgrade to this release at their earliest convenience. The iOS Client Filter Browser and Android Client Filter Browser along with the Chrome extension are not impacted as they do not decrypt and filter in the browser. This release also improves MacOS Tahoe and Golden Gate stability when switching users along with more stability improvements on MacOS.
For more information about the compromised Emudrah (emSign) intermediate CA certificates as well as certificate chain validation, please refer to this knowledgebase article (coming soon). If you have any questions or concerns regarding the upgrade to this release, please reach out to Netsweeper Technical Support at support@netsweeper.com.
Downloads
Windows
MacOS
- MacOS Client Filter 13.90.55.55 Universal Package
- MacOS Client Filter All in One Profile (mobileconfig) 13.90.55.55
- MacOS Client Filter System Extension Profile (mobileconfig) 13.90.55.55
- MacOS Client Filter App Proxy Profile (mobileconfig) 13.90.55.55
- MacOS Client Filter CA Certificate Profile (mobileconfig) 13.90.55.55
- MacOS Client Filter CA Certificate (pem) 13.90.55.55
- MacOS Client Filter Configedit MCX Settings Profile (mobileconfig) 13.90.55.55 Legacy (pre-Big Sur)
iOS Netsweeper Client Filter (browser)
Android Netsweeper Client Filter (browser)
Changelog 13.90
| Issue Type | Ticket | Summary |
|---|---|---|
| Improvement | CF-910 | Improved iOS/macOS logging from extensions by always logging to OS-level loggers. |
| Bug | CF-935 | The MacOS VPN Client Filter would fail to reactivate on user switch due to the service hanging and missing the 'NEVPNStatusDisconnected' check. |
| Bug | CF-936 | Client Filter 11.30 to 13.90 would trust all chained Certificates that have a chain. The Client Filter did not make sure the root of the chain was in the Trusted Roots Certificate Store in those versions. |
| Bug | CF-937 | The Client Filter would not release the nsproxycabundle when an AIA download was required. |
| Improvement | CF-939 | Client Filter includes updated root certificate store to resolve eMudhra Intermediate CA Compromise and new nsproxycabundle_install.dat is distributed |
| Bug | CF-944 | When switching to another account on a MacOS laptop running the Tahoe and Golden Gate Operating Systems, the nMonitor systray could fail into a relaunch loop. |