The UNIX File Watch module, first released in Security Update 2, now includes a Watch for Malicious Files check that watches your file systems for trojan horse programs with known attack signatures. Attack signatures are defined in a Malicious File Watch template, which is identified by a ".mfw" file extension. Updates to this template will be periodically posted to AXENT's SWAT website.

The UNIX Account Integrity module includes eight new checks or related options.

There are new file attributes templates for Solaris 2.7 and HP-UX 11.

The ESMMODS.NLM update program that installs the Security Update 3 modules on an ESM 5.x NetWare NDS Agent now includes two new installation options that let you create mini-agents. By creating an NDS context mini-agent you can identify a subset of the Agent's context list that will be checked by policy runs on the mini-agent.

You can now use the %Type: % keyword to identify any NDS class in a name list that contains NDS objects. You can also use the %Type: % keyword to specify container and non-container objects.

Two new security checks and five new password cracking options have been added to the NetWare NDS Password Strength module.

The NetWare NDS System Auditing module now includes twelve new checks or related options that verify auditing of selected events, files, and users.

The Integrated Command Engine (ICE) module, first released in Security Update 2, is now located in a new default Dynamic Assessment policy in the Policies branch of the enterprise tree in both the ESM 4.4/4.5 GUI and the ESM 5.x Enterprise Console.