Release Notes

BCS DNS Filtering (August 12, 2025):

Fixed an issue that prevented exception policies from being applied.

BCS Agent for Windows, Version 2.5.21 (August 4, 2025):

Fixed an issue where the agent was incorrectly logging allowed and blocked traffic.
Updated the libcurl library used by the Support tool.

BCS Agent for Windows, Version 2.5.15 (October 1, 2024)

Added support for exempting domains from SSL inspection.
Added support for exempting Safesearch from specific services.
Fixed MS Teams compatibility.

BCS Agent for Windows, Version 2.5.10 (May 23, 2024)

Fixed an issue where the allow URL policy was being blocked.
Improved troubleshooting logs with site connections.

BCS Agent for Windows, Version 2.5.7 (April 26, 2024)

Fixed an issue where websites using TLS 1.3 were not being properly blocked.

BCS Agent for Windows, Version 2.5.4 (November 2, 2023)

Allow IT admins to specify agent DNS using the registry key when the BCS agent is operating inline with the DNS proxy.

BCS Agent for Windows, Version 2.5.2.0 (September 20, 2023)

Fixed an issue where sites were not loading due to SSL handshake failures.

BCS Chromebook Extension Version 2.0.0

Updated extension to support Manifest V3.

BCS Agent for Windows, Version 2.3.23.1 (April 7, 2023)

Fixed an issue where the BCS agent may crash during login.

BCS Agent for Windows, Version 2.3.15 (February 9, 2023)

Fixed an issue where Microsoft 365 exemptions were not loaded properly.
Fixed an issue where Azure SSO was a slow to respond.
Properly filter teams.exe.
Provide ability in backend to set agent DNS server.
Fixed an issue with version comparison on upgrade.

BCS Agent for Windows, Version 2.3.9.0 (October 26, 2022)

Fixed an issue where the BCS agent falls back to default policy during start-up.

BCS Agent for Windows, Version 2.3.8.0 (October 19, 2022)

Improved port handling in the agent.

BCS Agent for Windows, Version 2.3.7.1 (September 28, 2022)

Fixed an issue where the BCS agent was exhausting ports on certain terminal server environments.
Fixed a BSOD issue where the BCS agent is installed with the Barracuda WSA agent.
New feature that prevents installation when the Barracuda WSA is detected on the system.

BCS Agent for Windows, Version 2.3.4.1 (August 15, 2022)

Fixed an issue with detecting terrorism urls.

BCS Agent for Windows, Version 2.3.3.4 (July 26, 2022)

Fixed an issue where Safesearch was not being properly applied.

BCS Agent for Windows, Version 2.3.0.9 (June 8, 2022)

Added capability to support rollover to separate region.
Fixed an issue where the Barracuda Web Filtering Component of the agent was interfering with some download test sites.
PDFs now download as expected with Firefox browser.
The BCS agent for Windows properly displays time based on the Windows time zone. [BNWSS-12788]

BCS Agent for macOS, Version 2.1.3.30 (Mar 1, 2022)

Now supports macOS Big Sur.
Added support for time-based policies.

BCS Agent for Windows, Version 2.2.0.4 (February 8, 2022)

New ability for admins to allow end users to generate support logs.
Fixed an issue where the BCS agent failed to start up.

BCS Agent for Windows, Version 2.1.0.47 (January 4, 2022)

Added support for time-based policies.
Improved handling of scanner cache files that fill up folders from downloaded content.
Addressed openssl security vulnerabilities.
Changed default components that load during installations; the Malware Protection Component (MPC) is no longer installed by default, only by selection.

BCS AD Sync version 1.1.3.0 (November 18, 2021)

AD Sync to properly sync nested groups and users.

BCS Agent for Windows, Version 2.0.24.4 (October 21, 2021)

Fixed issues with sites using an expired Let’s Encrypt certificate, causing SSL Errors to be presented.

BCS Agent for Windows, Version 2.0.21.0 (September 27, 2021)

Fixed an issue with the Barracuda license module that could cause high CPU usage.

BCS Agent for macOS, Version 2.0.21.0 (September 14, 2021)

User policy lookup works as expected.

BCS Agent for Windows, Version 2.0.20.4 (August 26, 2021)

Fixed an issue in which BCS Agent can consume system resources.

BCS Agent for Windows, Version 2.0.18.3 (July 21, 2021)

Fixed an issue that caused the BCS agent to consume memory.
Fixed an issue where newly a installed BCS agent caused high CPU usage. [BNWSS-11828]

BCS Agent for Mac OS, Version 2.0.15.3 (July 21, 2021)

Fixed an issue that caused the BCS agent to consume memory.
Fixed an issue where newly a installed BCS agent caused high CPU usage. [BNWSS-11828]

BCS Agent for Mac OS, Version 2.0.14.5 (June 21, 2021)

Fixed issues where the network interface check can cause issues with the Captive Portal.

BCS Agent for Windows, Version 2.0.14.4 (May 27, 2021)

Fixed an issue where the Threat Module update can cause Windows to crash.
Fixed issues where the network interface check can cause issues with the Captive Portal.

BCS Agent for Windows, Version 2.0.12.0 (May 14, 2021)

Updated license key for internal BCS components. Fixes issue where lack of valid licenses under some circumstances caused Windows devices to crash.

BCS Agent for Windows and Mac OS, Version 2.0.7.8 (March 24, 2021)

The requested policy is applied as expected for unresolvable IP addresses. [BNWSS-10986]
Resolved issue where the BCS agent incorrectly reported a failure at start up. [BNWSS-10950]
Resolved issue where the BCS agent was downloading multiple copies of an update. [BNWSS-10964]
Improved handling of non-standard HTTP methods when scanning for threats. [BNWSS-10794]
Resolved issue where certain tax websites would not load correctly. [BNWSS-11022
Addressed issues where some encrypted .rar files were not being quarantined.

BCS AD Sync Tool, Version 1.1.2.5 (February 24, 2021)

Fixed issue where disk was being filled and user information was not being sent. [BNWSS-10516]
Fixed issue where users were not being removed from groups. [BNWSS-10805, BNWSS-10821]
Fixed issue where large numbers of users and groups were not being synchronized. [BNWSS-10808]
Fixed issue where users that were not part of a synchronized group were being synchronized. [BNWSS-10916]
Various logging improvements.

BCS Agent for Windows and Mac OS, Version 2.0.6.4 (February 10, 2021)

Fixed in Version 2.0.6.4

PDF downloads over HTTPS using Internet Explorer complete as expected. [BNWSS-10732]
Microsoft 365 traffic exemptions work as expected (see Exemption Policies). [BNWSS-10822]
SSL connection no longer stalls during renegotiation. [BNWSS-10823]
The BCS MPC responds on the endpoint as expected when the Malware Prevention switch is toggled on the THREAT POLICY page. [BNWSS-10778]
Updated BCS Support Tool to include IoT logs. [BNWSS-10590]
The IoT service automatically recovers in case of failure. [BNWSS-10793]

BCS Agent for Windows, Version 2.0.5.0 (January 29, 2021)

Fixed in Version 2.0.5.0

The BCS agent correctly applies Advanced Filtering policies when the endpoint is connected to the local network.

BCS Agent for Windows and Mac OS, Version 2.0.4.3 (January 25, 2021)

Fixed in Version 2.0.4.3

Dynamically generated PDF and Excel documents download correctly.
Certain browser requests no longer stall for a minute or longer.
Certain HTTP/S requests with large HTTP header containing large URLs or cookies (several KB) now respond as expected.

BCS Agent for Windows and Mac OS, Version 2.0.3.6 (January 13, 2021)

What's New in Version 2.0.3.6

Note that, if you are using Microsoft Azure AD, you must create a domain filtering exemption for msappproxy.net , which is a Microsoft domain. On the ADVANCED FILTERING page, click ADD RULE, select Everyone as the user/group, Action = Allow and Type = Domains. Then enter msappproxy.net, and click CREATE. Alternatively, you can enable Exempt All Microsoft Application traffic on the EXEMPTIONS page.

Captive Portal Support – BCS Plus subscriptions support captive portal for guests using WIFI at hotels, airports, Internet cafés, or employees who bring personal devices to work, and all traffic is logged. See Captive Portal and Barracuda Content Shield for details.
Scan and Deliver feature – When a user navigates to a website and clicks the download link for a file, the BCS agent scans the downloaded file for malware before allowing access to the user or any program. See How to Use the Barracuda Content Shield Suite for Windows for details.
Domain Category Lookup Tool – To find out which category a domain belongs to, use the Look For Domain Category feature on the ACCOUNT SETTINGS page.
Re-categorize a Domain by Category Tool – Use this feature on the ACCOUNT SETTINGS page to request re-categorizing a domain; i.e. reassigning it to a different category.
Report Threat False Positives – If you determine that any files scanned were falsely reported as suspicious or malicious, you can report that file to Barracuda on the THREAT LOGS page.
User License Reporting – The ACCOUNTS page now displays the following:
- Licenses Purchased – Total number of user licenses purchased.
- Licenses Used – Total number of users detected on the system, based on the last 30 days of activity.
Enhancements to Dashboard:
- Encrypted Traffi c – Graph showing number of HTTPS and HTTP requests over the past 7 days, 30 days, or 24 hours.
- TLS Versions – Number of requests on endpoints and corresponding TLS versions in use.
- Applications – Shows Type of Browser used on endpoints and number of requests.
New Agent Settings page – The Agent Settings, Updates, and Define All Local Domains settings have moved from the ACCOUNT SETTINGS page to the new AGENT SETTINGS page. The Allow Agent Removal setting has been renamed to Tamper Proof, and is set to OFF by default to allow uninstalling from the endpoint unless a password is set.
New Exemption Policies page:
- Exempt Microsoft Applications Traffic – You can choose to exempt all Microsoft application traffic – Microsoft 365, Skype, Teams, etc. – from filtering by the BCS agent.
- The Define All Process Exemption setting has moved from the ACCOUNT SETTINGS page.
- Destination Network Exemption – New setting to configure IP addresses of destination servers (such as VPNs) you want to bypass filtering by the BCS agent.
Improved performance in malware scanning engine.
Schedule Full Scan feature – When Malware Prevention is enabled on the THREAT POLICY page, you can schedule regular scans. See How to Set Threat Policies.
IoT (Internet of Things) integration to allow remote execution of the Support Tool.

Fixed in Version 2.0.3.6

Fixed: Encrypted zip archives containing malwar e are allowed to be copied from a removable drive to another drive on the endpont, but will be caught by the on-access scanner. [BNWSS-9642]
Files with the .7z extension, which are compressed archive files created with 7-Zip open source software, are now recognized, as expected, by the BCS agent as encrypted. [BNWSS-9883].
The statistics reported on the Dashboard now reflect threats identified via website downloads of malware. [BNWSS-10235]
The BCS portal web logs now show 'Security' as the reason for IWF / CITRU websites. [BNWSS-10363]
The BCS agent now properly identifies pure Microsoft Azure users. [BNWSS-10052]
Support for hybrid Microsoft Azure environments where the client is connected to an Azure domain. [BNWSS-10188]
Fixed MS Outlook performance issue where Outlook was slow to load or not responding. [BNWSS-8908]
Resolved HSTS error with Google and Yahoo. [BNWSS-9011]
Fixed system performance issues of delays when opening or closing windows, or switching between applications on the endpoint. [BNWSS-8727]
Resolved issue with running the BCS suite with Carbon Black AV. [BNWSS-8262]

Known Issues in Version 2.0.3.6

Password protected documents are not quarantined by CPA agent when the policy is to quarantine encrypted and password-protected files. [BNWSS-10267]
If you create a URL filtering rule, traffic blocked per that rule does not appear in the Web Filtering Log. [BNWSS-10543]

BCS Agent for Windows, Version 1.9.17.2 (December 23, 2020)

This maintenance update extends the license for the local file scanner.

BCS Agent for Windows, Version 1.9.15.2 (November 16, 2020)

Note that, if you are using Microsoft Azure AD, you must create a domain exemption for msappproxy.net, which is a Microsoft domain. On the ADVANCED FILTERING page, click ADD RULE, select Everyone as the user/group, Action = Allow and Type = Domains. Enter the domain msappproxy.net, and then click CREATE.

Contact Barracuda Support to enable support for your VPN server in your account.
Addressed notification issue with Microsoft Teams server traffic when the device uses IPv6 addresses. Contact Barracuda Support to enable support for Microsoft Teams in your account.
Additional Categories in Web Use Categories (WCS):
- Fireworks – Sites that sell, promote, or enable people to use fireworks.
- Tracking Sites – Sites or back-end services that are dedicated to tracking user behavior or usage.
- Paintball – Sites that sell or promote paintball game or equipment. This includes air guns.
- CBD and Hemp Products – Sites that sell CBD or Hemp products without THC, such as CBD oil, and do not promote marijuana use.
- Child Abuse – Sites or images that include child pornography or abuse. This category is not entirely inclusive of all child abuse sites and may contain adult pornography.
- Cyberbullying – URLs that contain abusive and/or threatening messages towards other users or groups. Sites that regard to abortion information, legal issues, and organizations.
- Abortion – Sites containing abortion information, legal issues, and organizations.
- Self Harm – Sites that contain examples or promotion of self-harm. This includes suicide, cutting, and advocacy of eating disorders.
- Fitness – Sites that primarily promote, discuss, or enable fitness. These include gyms, studios, on-demand, personal trainers, and information about fitness.
- Home and Garden – Sites related to renovation, maintenance and overall home projects. In addition, sites that discuss, educate, plan, or are related to gardening.
- Infrastructure and Backend Services – Sites and IP addresses that are used to support sites and services that typically do not contain content, but are necessary for the function of various back-end services.
- Newly Registered Domains – Sites that have been newly registered within the last 30 days and have not already been categorized.
- Ammunition – Sites that sell ammunition. If sites contain guns, ammunition, and/or knives, they appear in this general Weapons category.
- Guns – Sites that sell or promote gun use. If sites contain guns, ammunition, and/or knives, they appear in this general Weapons category.
- Knives – Sites that sell or promote knives used as weapons or for hunting purposes. If sites contain guns, ammunition, and/or knives, they appear in this general Weapons category.
- Weapons – Any site that sells weapons or advocates the use of weapons. If sites contain more than one of the following: guns, ammunition, and/or knives, they appear in this general Weapons category, except paintball and air guns.

BCS AD Sync Tool, Version 1.1.0.4 (October 12, 2020)

Ability to use multiple based DN. Barracuda strongly recommends using the search root of the domain as the value for the Group Base DN; however, users are sync’d using the base DN specified.
Improved reporting of errors when group name, user name, and user email duplication occurs during sync.
Fixed issues where groups were not synchronized due to missing SID. [BNWSS-9351]

BCS Dynamic IP Address Updater Tool 1.2.0.1 (September 22, 2020)

Updated the DDNS executable to provide the ability to specify the DNS server, removing the requirement for the workstation to proxy traffic to the Barracuda DNS Server. See Dynamic IP Address Updater Tool.

BCS Agent for Windows, Version 1.9.9.9 (September 15, 2020)

Fixed issues where applications using IPv6 address were not loading. [BNWSS-8998]
The BCS agent now allows connections to HTTP/S servers that only support insecure legacy SSL renegotiation. [BNWSS-9080]
Fixed an issue where upgrading may not complete correctly. [BNWSS-9093]

Note: Upgrades must be applied manually when only the WFC agent is installed with version 1.9.7.14. For version 1.8 and lower, when only the WFC agent is installed, a reboot is required for upgrades to be applied.

BCS Agent for Mac OS, Version 1.9.9.9 (September 17, 2020)

Applications using IPv6 address now load as expected. [BNWSS-8998]
The BCS agent now allows connections to HTTP/S servers that only support insecure legacy SSL renegotiation. [BNWSS-9080]

BCS Agent for Windows, Version 1.9.7.14 (August 26, 2020)

What's New in Version 1.9.7.14

Account-based (Overview) report for MSPs – Summary reports for the selected timeframe:
- User Report - Top endpoints with the most requests
- Top users with the most blocked requests
- Security - Denied Categories: Top categories by number of blocked requests
- Security - Allowed Categories: Top categories by number of allowed requests
- Productivity - Denied Categories: Top categories by number of blocked requests
- Productivity - Allowed Categories: Top categories by number of allowed requests
- Compliance - Denied Categories: Top categories by number of blocked requests
- Compliance - Allowed Categories: Top categories by number of allowed requests

See Reports in Barracuda Campus.

Location-based reports – Report lists Top Blocked Super Categories with number of requests, and Top Blocked Categories with number of requests, by the user-defined location.
External Syslog server support – Enables exporting log information from your BCS Plus account to your custom syslog-ng server available on a public IP address. Configure on the ACCOUNT SETTINGS page. See Syslog Integration with Barracuda Content Shield in Barracuda Campus.
Support for IWF and CTIRU URLs – The BCS agent blocks access to web pages on the IWF URL List, which contains websites where images and videos of child sexual abuse have been found. The agent also blocks access to web pages containing unlawful terrorist material found in the URLs documented by the CTIRU.
Support for IPv6 – Allows the BCS agent to intercept web traffic on IPv6 connections.
Safe Search Support – You can create a SafeSearch policy on a per-user basis, per-group, or for Everyone to help block explicit text, images, videos, and websites from Google, Yahoo, Bing, and YouTube search results. Configure on the ADVANCED FILTERING page. See SafeSearch in Barracuda Campus.
Full URL Logging based on User / Group / Everyone policy – Records what websites users are visiting, what the users did on those websites, and what pages they viewed. To track this, the full URL for every website and every page visited on that site is recorded in the web logs. Configure on the ADVANCED FILTERING page. See Full URL Logging in Barracuda Campus.
Domain Controller (DC) Sync tool – This tool makes users and groups in your AD server available to BCS. Configure on the USERS page. See How to Get and Configure the Barracuda DC Sync Tool in Barracuda Campus.
Extended list of Categories and Super Categories – Number of new categories and super categories have been defined to allow the users to define more fine grain Allow / Deny access policies.
Chromebook Support – Enables you to install Chromebook extensions on Chromebook and apply web filtering policies.
Enhanced Search Filters – Enable you to filter web logs based on multiple criteria.

BCS Agent for Mac OS, Version 1.9.7.14 (September 4, 2020)

This version of the BCS Agent for Mac supports High Sierra, Mojave and Catalina. Note that automatic updates are not supported on Mac OS; updates must be installed manually.