Security {hardware} producer SonicWall warned prospects at this time of what it describes as a “limitation” of the net content material filtering (WCF) function on Windows 11, model 22H2 methods.
SonicWall’s Capture Client is the corporate’s Windows and macOS safety answer with Endpoint Detection & Response (EDR) capabilities that may be managed utilizing the corporate’s Cloud Management Console service.
The WCF function permits admins to configure insurance policies that permit or block entry to numerous domains/IP addresses, allow net exercise reporting for simpler monitoring, and throttle bandwidth.
“We have recognized an inconsistency in Capture Client Windows 3.7.6 and older shoppers on endpoints operating Windows 11 model 22H2,” the corporate mentioned in an advisory printed on Wednesday.
“This leads to Web Content Filtering (WCF) insurance policies that implement blocked classes to be now not efficient on impacted endpoints. The means to permit or block domains/URLs utilizing customized lists continues to operate usually.”
Since category-based blocking insurance policies (essential in limiting entry to malicious, unlawful, or inappropriate net content material) now not work, Windows 11 22H2 customers are actually prone to potential safety dangers by enabling entry to beforehand restricted domains and URLs.
The service is damaged as a result of the encrypted and decrypted requests and responses exchanged between Windows endpoints and SonicWall Content Filtering Service are despatched utilizing Microsoft’s Cryptographic Application Programming Interface (CryptoAPI).
However, as SonicWall additional explains, “in Windows 11 model 22H2, Microsoft CryptoAPIs have been modified, making Capture Client unable to decrypt responses from the SonicWall Content Filtering Service.”
The firm says it is presently engaged on a repair for this subject which shall be made obtainable with the discharge of Capture Client 3.7.7 for Windows on February seventeenth.
As an interim measure, SonicWall has suggested directors to forego updating their Windows endpoints to the newest Windows 11 model to keep away from breaking content material filtering.
“As a short lived workaround, we advocate endpoints operating Windows 11 not be upgraded to model 22H2 till Capture Client 3.7.7 for Windows is on the market,” SonicWall mentioned.