Datamaxx recently announced that the Microsoft patch for Internet Explorer released to block outdated versions of the Java ActiveX control within Internet Explorer would not affect Omnixx Force customers. Datamaxx made this statement based upon published information directly from Microsoft. Datamaxx has learned that while none of the Omnixx products utilize any Java ActiveX controls, the Microsoft patch does perform other undocumented tasks that have caused some Omnixx Force Desktop customers issues. Because this is a Microsoft issue, there is no Datamaxx code fix that can be done to resolve the issue, however, Datamaxx is providing the following instructions that users can perform that should resolve the issue. Please note that this patch will not affect anyone running under Windows XP. If you would like a Datamaxx technician to walk you through these instructions, or if you have any questions, please contact Datamaxx Technical Support at 877-369-8324 or support@datamaxx.com. For more information on the Microsoft patch, please see the Microsoft Blog Aug 6 2014.

Download the instructions PDF

In the early morning hours of Friday, September 2, 2016, Hurricane Hermine, a category one hurricane, made landfall over Datamaxx headquarters in Tallahassee, Fla. Hurricane Hermine left more than 250,000 residents without power, some for up to seven days. However, Datamaxx is pleased to report that during and after Hurricane Hermine, the Datamaxx Secure Cloud, based in the Datamaxx Network Operations Center, remained completely stable and functional.  The Datamaxx Secure Cloud delivers solutions to the mission-critical law enforcement and public safety industries, including message switches, client interfaces, intelligent ticketing, and many more.

Datamaxx recently announced that the Microsoft patch for Internet Explorer released to block outdated versions of the Java ActiveX control within Internet Explorer would not affect Omnixx Force customers. Datamaxx made this statement based upon published information directly from Microsoft. Datamaxx has learned that while none of the Omnixx products utilize any Java ActiveX controls, the Microsoft patch does perform other undocumented tasks that have caused some Omnixx Force Desktop customers issues. Because this is a Microsoft issue, there is no Datamaxx code fix that can be done to resolve the issue, however, Datamaxx is providing the following instructions that users can perform that should resolve the issue. Please note that this patch will not affect anyone running under Windows XP. If you would like a Datamaxx technician to walk you through these instructions, or if you have any questions, please contact Datamaxx Technical Support at 877-369-8324 or support@datamaxx.com. For more information on the Microsoft patch, please see the Microsoft Blog Aug 6 2014.

Download the instructions PDF

Microsoft will end its support for the Windows XP operating system on April 9, 2014, which, according to Microsoft, means there will be no new security updates, non-security hot fixes, free or paid assisted support options or online technical content updates after April 8, 2014.

So, how does this affect Datamaxx customers? End-of-support for Microsoft XP does not mean that all systems running XP are in imminent danger of a cyber attack. There will be some lag time (although no one knows how long) until the current security updates, patches and fixes are completely out of date. Also, Omnixx does offer some inherent protections. However, you do need to be aware of the implications of end-of-support and plan accordingly. Please review the following facts and recommendations.

On April 9, 2014, Microsoft will stop providing technical support and automatic updates. Also, Microsoft will no longer offer Microsoft Security Essentials for Windows XP. If you have Microsoft Security Essentials installed, you will continue to receive antimalware signature updates for a limited time. You still have time to download Microsoft Security Essentials and should if you have not already done so.

Running Windows XP within your CJIS system after April 8, 2014 may expose it to potential security risks because unsupported and un-patched computer operating systems are inherently vulnerable. Any machine, either physical or virtual, running the Windows XP operating system with access to FBI CJIS data could result in a noncompliance finding during an audit. You should plan to upgrade these operating systems as soon as is practical.

Datamaxx recommends that each CJIS enterprise should:
1. Replace old Windows XP computers with new computers running on a currently supported operating system, and/or
2. Plan to disconnect any remaining Windows XP computers from the internet and isolate them from your internal network.

In order to mitigate additional XP concerns after April 8, 2014, agencies should ensure they are taking the following steps to:
1. Block staff and volunteers who remotely access the institution's computer network using a Virtual Private Network (VPN) via a computer running Windows XP;
2. Ensure proper online authentication is in place to prevent possible fraud by hackers who have gained improper access to a Windows XP computer;
3. Prevent users from accepting information, data or documents that have been created or stored on a Windows XP personal computer, especially via a USB/thumb drive or other storage device; and
4. Verify that third-party service providers have properly addressed the Windows XP concern.

We recommend that agencies update their customer security awareness program by alerting sub-agencies and TACs about the discontinuance of Windows XP support and the potential risk exposure through computers running Windows XP. Specifically, agencies should advise administrators and users about the potential risks from cyber-attacks that could result in compromises of CJIS accounts.

Finally, with regard to the DMPP 2020 protocol used by Omnixx, DMPP-2020 is a transport mechanism between the application and the switch. It is an application–to-application protocol specific to CJIS systems. While DMPP-2020 does not specifically provide intrusion protection, it does help prevent direct access to the CJIS application itself. Further, all CJIS data stored locally or transmitted (via DMPP-2020) is encrypted using FIPS 140-2 validated encryption. Thus, if a machine is compromised, an attacker will not be able to gain access to the CJIS data or gain access over DMPP-2020 to the switch.

If you have any questions, we will be happy to evaluate your current environment and discuss any concerns you may have.

Sincerely,

Datamaxx Technical Support
877-369-8324
support@datamaxx.com