Support of Safetica ONE features in the new Safetica

New Safetica requires

Details

Safetica Client: the minimum version installed on devices must be 10.5 or newer (10.4 can also be used but with limited support).

Older versions of Safetica Client will stop working after upgrading to the new Safetica, but you will be able to update them remotely later.

Safetica Client version 10.4 does not support new external device policies (new Device Control).

Microsoft SQL Server: the minimum supported version is Microsoft SQL Server 2016 or newer

Operating systems on devices:

• Windows 10 (64-bit)
• Windows 11 (64-bit)
• macOS 10.15 and newer

Safetica Clients on older systems will continue working temporarily (they will remain as Safetica 10.4 or 10.5 Clients), but you won’t be able to update them, and they will lack support for new features added to the new Safetica in the future.

Microsoft does not support operating systems older than Windows 10, so they should not be used for security reasons.

Deprecated features

Details

WebSafetica

Replaced with our new web-based Safetica console.

Smart alerts that were part of WebSafetica will no longer be sent.

Safetica Mobile

The Safetica Mobile app is no longer available for mobile devices.

Disk Guard

This feature was not widely adopted and is not needed to protect sensitive company data.

You will no longer be able to set the rights of users and computers to access system and network paths or system drives via Safetica (e.g. choose drives/paths/folders that will be read-only for users).

Cloud sync client overview (i.e. setting up access to local folders that are used by certain cloud services) will be available in the new Safetica in the future.

Printing quota control

This feature was only available under a special license.

It enabled you to see the number of printed pages and types of print (color or black/white; simplex or duplex) and set up printing quotas for users.

In the new Safetica, print control is seamlessly integrated into DLP and controlled by policies and Data destinations. You will be able to control what files can be printed, by whom, and on which printers.

Network traffic audit

You will no longer see quantitative info about downloads and uploads on devices and statistics of network usage. Together with this, the Informative alerts about data dowloaded and data uploaded will no longer be available.

Detailed records on uploaded files are available in Safetica console in the Data section.

Application DLP policies

Application DLP policies were not as secure as data-related DLP policies, and in the new Safetica, we are shifting to a purely data-centric approach.

To control who can use what applications, please use the application policies in the new Safetica.

Depending on customer feedback and priority, a new alternative may come later.

Policy rules:

• Other network connection
• Local path
• Exclusive access

Other network connection was an expert setting for all network traffic except for network file shares. It allowed you to cut off a device from the network.

Local paths was an expert setting for access to specified paths on local drives. It allowed you to completely cut off a destination from all access.

Exclusive access was an expert setting for whitelisting/blacklisting applications accessing sensitive data. It allowed you to completely cut off certain applications from certain data. Depending on customer feedback and priority, a new alternative in the form of business app control may come later.

NTFS tagging

Replaced by new technology.

Sensitive files will be classified when users work with them or when a discovery task is run (replacement for on-demand tagging).

If your files were classified in Safetica ONE using metadata, you can set up Existing classification to recognize them in the new Safetica. To set up the correct identifiers, please contact Safetica Support.

NTFS tags are no longer supported. Files tagged in Safetica ONE will not be recognized or classified in the new Safetica. 

Integrations:

• FortiGate integration
• Netwrix data classifications - Safetica Compliance license

The integration with FortiGate has been deprecated, because the new Safetica does not support persistent metadata tagging yet. FortiGate integration might be added later (after persistent metadata tagging) depending on customer feedback and priority.

The integration of Netwrix data classifications (based on the Safetica Compliance license) has been deprecated, since the new Safetica offers stronger classification options and new classification templates. New Safetica also supports existing 3rd party data classifications.

BitLocker devices and BitLocker disks 

The BitLocker devices and BitLocker disks features have been deprecated and are no longer supported in the new Safetica.

New customers will not have the features available in Safetica Maintenance Console.

For customers upgrading from Safetica ONE to the new Safetica, we provide backward compatibility. BitLocker will remain available for them in Safetica Maintenance Console.

Not yet available in the new Safetica

Details

WebSafetica behavior classes and productivity charts

Data related to user activities will be available in the new Safetica immediately after upgrading.

However, visualizations and categorization of user activities as productive or unproductive will be added in the future.

User-based data classification

User-based data classification is in the roadmap for the new Safetica.

But for now, policies that contained this option will be “broken” after the upgrade to the new Safetica and will need to be reconfigured.

Learn how to fix broken policies and configure new policies in the new Safetica:

• Broken policies: What are they and how to fix them
• Policies: How they work in Safetica
• Data policies: How they work

Upload to webmail / Upload to file share

Upload to webmail and Upload to file share were deprecated and replaced by Web upload.

For now, Safetica offers a partial solution, but we are preparing a better alternative. 

Depending on your current settings, you may need to slightly modify your policies. In such a case, you will see the policy as “broken” in the Safetica console.

Learn how to fix broken policies and configure new policies in Safetica:

• Broken policies: What are they and how to fix them
• Policies: How they work in Safetica
• Data policies: How they work

Use of persistent metadata

The feature will be added later - under consideration + collecting feedback.

Feature

Where to reconfigure it in the new Safetica

Reports with custom layouts

You can set up new reports with custom layouts in Safetica console > Reports.

Learn more about layouts and reports in the following articles:

• Layouts
• Reports
• How to create reports

Admin accounts and access management

Admin accounts will be disabled after the upgrade to the new Safetica. You will need to enable them and assign them correct access permissions. You can do that in Safetica console > Settings > Accounts and permissions.

Learn more about access permissions in the following articles:

• Accounts and permissions
• Accounts and permissions: How to change access permissions
• Accounts and permissions: How to disable and enable an account

Data discovery

If you are using Discovery tasks to protect your data at rest, you will be able to configure Data discovery based on these instructions. You can learn more about Data discovery in the new Safetica here.

Database tasks

From Safetica 11.6.25, it is possible to create new archives in the new Safetica console. Learn more in this article.

From Safetica 11.3.20, it is possible to attach and browse Safetica ONE archives in the new Safetica console. Learn more in this article. 

Office 365 integration

If you are using Safetica CASB (the newer Microsoft 365 integration), your configuration will be migrated automatically.

If you are using the older Office 365 integration, you must disable it manually before upgrading to the new Safetica. Go to Safetica Maintenance Console > Maintenance > Integration settings > Office 365 Integration and disable all options.

Please note that the older Office 365 integration will no longer be supported by Microsoft after October 2023, so switching to either Safetica CASB or the new Safetica will be necessary.

Afterward, configure cloud protection in Safetica console:

• Cloud services: How to add a Microsoft 365 tenant
• Cloud services: How to activate and deactivate email protection in Microsoft 365
• Cloud services: How to activate file protection in M365
• Cloud services: How to protect a subset of M365 users

Data analytics integration

(available only on Safetica hosted on-premises)

If you have your Safetica database integrated with a data analytics tool, you must:

1. perform the steps described here
2. download the new report templates available here
3. connect the new report templates as described here

If you have created your own visualizations based on Safetica records in Power BI or other data analysis tools, you will need to rename the views - see this article for details.

Please note that the Suspicious column was removed.

Policies that contained multiple data classifications

Policies that contained multiple data classifications will be “broken” after the upgrade to the new Safetica and will need to be reconfigured.

Learn how to fix broken policies and configure new policies in Safetica:

• Broken policies: What are they and how to fix them
• Policies: How they work in Safetica
• Data policies: How they work

Data classification: Dictionaries

You can copy and paste up to 10,000 keywords into one classification rule to serve as a custom dictionary. The keywords must be separated by line breaks. Learn more here:

• How to create a data classification

Policies that contained dictionaries will be “broken” after the upgrade to the new Safetica and will need to be reconfigured.

Learn how to fix broken policies and configure new policies in the new Safetica:

• Broken policies: What are they and how to fix them
• Policies: How they work in Safetica
• Data policies: How they work

Use Active Directory security groups to import admin accounts

If you had synced accounts from Active Directory (AD) security groups in Safetica ONE, you will need to add them again in new Safetica.

Learn more here:

• How to add Active Directory security groups and use them to sign in to Safetica console