Skip to content Skip to main navigation Skip to footer

Release Notes

v9.4.8 Release Notes for Cyfin

Enhancements

  • Log File Configurations
    • Added Palo Alto VPN configuration
  • Report Templates
    • Added device OS, device Name, and VPN Server to VPN report template. Device OS and Device Name only available in Palo Alto VPN Configuration currently.

Correction

  • Reporting
    • Corrected successive interactive report drilldown causing browser error.

V9.4.3 Release Notes for Software & Virtual Appliance Release Notes

Enhancements

  • Custom Report Header
    • Upgraded the custom report header feature to not require a file to be selected, but instead provide an in-browser HTML editor for users to customize. A toggle button has also been added to enabled and disable this feature. Existing custom report header configuration will be retained in displayed in new HTML editor. The new screen is located in the menu under Settings – Reports – Custom Header
  • User Management – Import Users
    • Added new Metric Server Sync option in the Manage screen to allow for usernames to be imported from the metric server to the product. This feature is enabled by default and will place usernames not currently in the product or being imported from AD or text file into the product in the group “Ungrouped IDs”. 
    • Updated the behavior of “Inside the Product” configuration to now allow users that already exist in the product under the group “Ungrouped IDs” to be moved to their imported Group.  Users that are in other groups will not be moved. 
  • Policy Reports
    • Web Categories
      • Created new Blocked Web Categories Policy report located in the menu under System Status – Policy Reports – Web Categories that includes:
        • Blocked categories grouped by time frame filter id
        • White/Black Listing
        • Blocked YouTube videos
        • Groups and IDs
      • Added link from the Web Management – Application Controls and Filter – Categories screen to the new policy report.
      • The report includes the options to filter the content to only show:
        • Blocked content and No Groups and IDs or vice versa or both (Default)
        • Only policies that have Groups and IDs assigned to them.
    • Groups and IDs
      • Moved the Groups and IDs policy report from System Status – Policy Reports to User Management – View in the product menu.
    • Moved existing Policy Reports screen to System Status – Policy Reports – Other Policies.
  • Real-Time Monitors
    • Added option to only show blocked requests
  • Secure Interface
    • Created ability to generate Certificate Signature Request (CSR) to facilitate certificate generation for secure interface. This new feature is location in Settings – Secure Interface screen.

Corrections

  • Reports
    • Corrected issue preventing Cloud Services reports from running when the product was configured with list version 10.
  • Memory Configuration
    • Fixed upgrade issue that reset the product memory to minimum setting until the VM was rebooted. The memory setting will not be affected during this and future upgrades.

V9.4.3 Release Notes for Cyfin

Enhancements

  • Real-Time Monitor
    • Cyfin customers that have syslog data configuration will now have a new feature to able to watch their syslog traffic in real-time. This new feature is located under Real-Time Monitors – Web.Users will have to option to filter the data they are looking at by:Groups and IDs
      • Categories
      • Blocked Requests only
      • Log Data source (if more than 1 syslog configured)
  • User Management – Import Users
    • Added new Metric Server Sync option in the Manage screen to allow for usernames to be imported from the metric server to the product. This feature is enabled by default and will place usernames not currently in the product or being imported from AD or text file into the product in the group “Ungrouped IDs”. 
    • Updated the behavior of “Inside the Product” configuration to now allow users that already exist in the product under the group “Ungrouped IDs” to be moved to their imported Group.  Users that are in other groups will not be moved. 
  • Policy Reports
    • Groups and IDs
    • Moved the Groups and IDs policy report from System Status – Policy Reports to User Management – View in the product menu.
  • Custom Report Header
    • Upgraded the custom report header feature to not require a file to be selected, but instead provide an in-browser HTML editor for users to customize. A toggle button has also been added to enabled and disable this feature. Existing custom report header configuration will be retained in displayed in new HTML editor. The new screen is located in the menu under Settings – Reports – Custom Header.
  • Product Menu
    • Updated product to only display Reports – Dashboard – Palo Alto Traffic menu option if there is at least 1 Palo Alto data configuration.
  • Secure Interface
    • Created ability to generate Certificate Signature Request (CSR) to facilitate certificate generation for secure interface. This new feature is location in Settings – Secure Interface screen.
  • Product Menu
    • Removed Sample Reports from product menu.
  • User Interface Libraries
    • Updated jQuery library version to remove security vulnerabilities.
  • License
    • Updated license notification message to include number of days left in both the Dashboard screen and the Settings – License screen.

Corrections

  • Reports
    • Corrected issue preventing Cloud Services reports from running when the product was configured with list version 10.
  • Memory Configuration
    • Fixed upgrade issue that reset the product memory to minimum setting until the VM was rebooted. The memory setting will not be affected during this and future upgrades.
  • Log File Configurations
    • Corrected the parser for Fortigate 6.0 to correctly allow it to be imported.

V9.4.1 Release Notes for CyBlock

Enhancements

  • App/Site
    • Added new metric field App/Site to records. This metric is provided through the new version 10 list and applied during manual log import, syslog, or direct import.
    • Report Templates
      • Ability to select App/Site into top or audit report sections.
    • Dashboard
      • Added App/Site to Custom dashboard chart grouping and subgrouping.
    • Categorization – List Version
      • Added ability to toggle between new list 10 with app/site information or the previous list version 9 without.
    • Categorization – Check URL
      • Now returning App/Site information during URL lookup.
  • Metric Server
    • Added check to remove empty indices at startup and during import data delete.
  • Log File Configurations
    • Updated all Check Point log configurations to include the Drop action as a valid result code.

Correction

  • Updated JDBC connect method to properly set the catalog (database) upon instantiating new database connection.

V9.4.0.a Release Notes for CyBlock

Enhancements

  • Interactive Reports
    • Added option to disable password requirement for viewing interactive reports.
  • Hit/Visits
    • Enhanced hit/visit Algorithm
    • For log configurations with 3rd party categories, now still looking at Wavecrest categorization for hit/visit calculation.

Corrections

  • AD Import by Field
    • Corrected the order of the nested fields as this was inverted.
    • Filter is now case insensitive
    • Filter is applied to entire AD import path. eg. If you had a group called Wavecrest with a subgroup of Development and you filtered on Development, the Wavecrest parent group would be missing.
  • Encoding
    • Fixed library to proper handle unicode characters in json encodings.
  • Logon Accounts
    • Fixed the manner in which the logon accounts modifications where being submitted from the interface to prevent browser size limitation.

V9.4.1 Release Notes for Cyfin

Enhancements

  • App/Site
    • Added new metric field App/Site to records. This metric is provided through the new version 10 list and applied during manual log import, syslog, or direct import.
    • Report Templates
      • Ability to select App/Site into top or audit report sections.
    • Dashboard
      • Added App/Site to Custom dashboard chart grouping and subgrouping.
    • Categorization – List Version
      • Added ability to toggle between new list 10 with app/site information or the previous list version 9 without.
    • Categorization – Check URL
      • Now returning App/Site information during URL lookup.
  • Metric Server
    • Added check to remove empty indices at startup and during import data delete.
  • Log File Configurations
    • Updated all Check Point log configurations to include the Drop action as a valid result code.

Correction

  • Updated JDBC connect method to properly set the catalog (database) upon instantiating new database connection.

V9.4.0.a Release Notes for Cyfin

Enhancements

  • Interactive Reports
    • Added option to disable password requirement for viewing interactive reports.
  • Hit/Visits
    • Enhanced hit/visit Algorithm
    • For log configurations with 3rd party categories, now still looking at Wavecrest categorization for hit/visit calculation.
  • Data Management – Log Data Source – SetupUpdated the syslog test page for better clarity when syslog server is accepting messages.

Corrections

  • AD Import by Field
    • Corrected the order of the nested fields as this was inverted.
    • Filter is now case insensitive
    • Filter is applied to entire AD import path. eg. If you had a group called Wavecrest with a subgroup of Development and you filtered on Development, the Wavecrest parent group would be missing.
  • Encoding
    • Fixed library to proper handle unicode characters in json encodings.
  • Logon Accounts
    • Fixed the manner in which the logon accounts modifications where being submitted from the interface to prevent browser size limitation.

V9.4.0 Release Notes for CyBlock Virtual Appliance

  • Enhancements
    • Report Templates
      • Ability to create a custom report using report templates
      • Ability to save custom report in CSV format
    • Reports
      • Running reports on a group will now include all the users in the subgroups as well. Previously only the users directly under the group were reported on.
      • Default URL format now Full URLs instead of single line.
    • Dashboard
      • Filtering dashboard data on a specific group will now include all the users in the subgroups as well. Previously only the users directly under the group were displayed.
    • PDF Writer
      • Updated PDF library
    • Active Directory
      • Added filter to importing by fields. Filtered data must be present in at least 1 of the fields for the user to be imported.
    • List
      • Optimized performance by reducing the number of timers it creates during basic lookup.
    • SSL Certs
      • Added ability to parse PEMKeyPair certificate data.
    • Blocking file extensions
      • Now checking content-disposition for actual filename when checking filename extensions
  • Corrections
    • Reports
      •  Corrected “Full URL” format not wrapping long URLs in IE and Firefox.
    • Report Timeframes
      • Corrected custom timeframe selection when editing report or creating new report in browser that is in different timezone than application server.
    • Dashboard
      • Removed duplicate data set for traffic when denied traffic is empty or only 1 series in data set.
      • Trend Charts not applying proper filter for the Enterprise group for Categories, Classifications and Traffic.
      • Color assignment for classifications when all 3 classifications are not present.
      • Updated x legend label for 24 hour time period that ends in the future to add the hour and minute of the current time.
      • Changed title when group filter is applied to be (Groupname) instead of – Groupname
      • Added Update Chart button when timeframe set to “Today”
      • Now showing group widget for additional top and trend charts.
      • Drilldown audit reports now default to Visits Only unless dashboard metric is hits.
    • PAC File
      • Removed invalid unprintable characters from PAC file template. This prevented the PAC file from matching entries accordingly.
      • Removed local copy of PAC file since PAC file content is stored in memory only.
    • Fixed typo in Monthly rotation selection in  Kiosk.

V9.4.0 Release Notes for Cyfin

Enhancements

  • Report Templates
    • Ability to create a custom report using report templates
    • Ability to save custom report in CSV format
  • Reports
    • Running reports on a group will now include all the users in the subgroups as well. Previously only the users directly under the group were reported on.
    • Default URL format now Full URLs instead of single line.
  • Dashboard
    • Filtering dashboard data on a specific group will now include all the users in the subgroups as well. Previously only the users directly under the group were displayed.
  • PDF Writer
    • Updated PDF library
  • Active Directory
    • Added filter to importing by fields. Filtered data must be present in at least 1 of the fields for the user to be imported.
  • List
    • Optimized performance by reducing the number of timers it creates during basic lookup.
  • SSL Certs
    • Added ability to parse PEMKeyPair certificate data.
  • Log formats
    • Updated Cisco Firepower logs to handle different username fields
      • Cisco FirePower
      • Cisco FirePower 6.3.0
    • Added Sophos XG
    • Added Juniper SRX
    • Updated help link for Forefront TMG (SQL Server Express)
    • Updated Syslog r80.10
      • alternate to parse both regular id and email address in user id field.
      • trim username field to remove extra spaces
  • Log
    • Ability to download log data
  • Log Parser
    • Fixed add current year flag to take into account possible
    • MT time which could lead to incorrect year being set.

Corrections

  • Reports
    •  Corrected “Full URL” format not wrapping long URLs in IE and Firefox.
  • Report Timeframes
    • Corrected custom timeframe selection when editing report or creating new report in browser that is in different timezone than application server.
  • Dashboard
    • Removed duplicate data set for traffic when denied traffic is empty or only 1 series in data set.
    • Trend Charts not applying proper filter for the Enterprise group for Categories, Classifications and Traffic.
    • Color assignment for classifications when all 3 classifications are not present.
    • Updated x legend label for 24 hour time period that ends in the future to add the hour and minute of the current time.
    • Changed title when group filter is applied to be (Groupname) instead of – Groupname
    • Added Update Chart button when timeframe set to “Today”
    • Now showing group widget for additional top and trend charts.
    • Drilldown audit reports now default to Visits Only unless dashboard metric is hits.
  • Syslog
    • Updated decoder method used to decode syslog filter which corrects the filter not being set properly.
  • Fixed typo in Monthly rotation selection in  Kiosk.

v9.3.3.a Release Notes for Cyfin

Enhancements

  • Log Configurations. Updated Sophos (Astaro Security Legacy) log configuration to include useragent and referer.
  • Syslog Status. Added proper name for direct import handler and palo alto firewall handler. Previously these were just illegible object references.
  • Syslog Daemon. Replaced syslog library used when running syslog servers to a newer more advanced library. This new library increases the amount of data our syslog server can handle and can also be scaled.
  • Hits Visits Calculation. The reporter will now check the list for entries that are from known content providers and thus should always be considered hits.
  • Disk Usage Monitor. Added task to monitor disk usage on both product and metric server and email administrator if any disk usage exceeds 90%.
  • Logfile Configuration Wizard. Increased the efficiency of the log record analyzer when configuring logs which leads to quicker results.
  • Server Information screen
    • Replaced Product Disk Usage and Disk Space Available entries with single Product Root Disk Usage entry. The value for the new entry is listed as dd% (n.n free out of mm) where dd is used percentage.
    • Added Metric server disk usage section (Data Disk Usage) where we list the disk usage by the product as well as all configured metric servers. The entries are listed as key value pairs where the key is name(ip) and the value is listed as dd% (n.n free out of mm) where dd is used percentage.

Corrections

  • Hits Visits Calculation. Fixed issue with direct import of syslog data that was making all web requests hit instead of properly assessing visit probability. This was because the supplemental category was not being set properly.
  • Syslog Daemon. Line breaks are now removed from incoming syslog messages. The breaks were causing problems with regex in the log parser.