8.2.2 EA Release (December 21, 2023)

Added the ability to auto-create Daily Quick Reports when either Accounts or Groups are created.

Deleting a Quick Report (Daily,Weekly,Monthly) did not refresh the page to make the deleted report disappear.

Added the ability to share read-only versions of owned Reports with any Accounts the Report owner manages.

Creating an invalid IP address restriction did not give any error message.

The Custom Report editor would allow users to open (but not modify) reports they did not have permission to.

Selecting Custom Report from within either the Demand or Scheduled windows will now limit the new Report to that Report Type. Navigating directly to Reports > Custom Reports will still allow you to select and modify the Report type.

Removed unused PHP and javascript libraries and scripts.

Removed unsafe-eval calls in the Webadmin.

Fixed high level Polaris security issues in view_report.js.

CLI commands for starting and restarting both NSProxy and NSup2d would output an error.

Bandwidth statistics for NSProxy were not counting denied URLs in system deny lists.

The Policy server SSL module did not release free memory for config settings.

The group_set_disabled API now requires a timestamp rather than datetime format.

BGP templates with only '$URLS' would not work in any release.

Deprecated all the Quagga BGP templates and now only have EL8 supported OpenBGP templates available in WebAdmin.

Added the ability to create 'Access Tokens' for your WebAdmin Account, give them a description, as well as to the ability delete them.

Having multiple List owners would only allow the first SysOp List owner the ability to edit/modify/delete, other SysOps would get read only when you had the 'View Organization Sysop Lists' or 'View Managed Sysop Lists, permissions.

Creating a Report for a User with no managed Groups would result in a Report with no Group static filter.

Incorrectly configured external WebAdmin URLs would result in WebAdmin logins being get denied.

WebDB 'create buffer' and PHP Warning: output handler 'ob_gzhandler' were conflicting with URL-Rewriter.

Microsoft Client Secret and Google Client Secret in Webadmin Settings are now encrypted, and will not be displayed.

Updated SQL queries that performed an IN on another SELECT to use JOIN instead.

When an Account is removed from a Group and we update the static filters to remove the Group from the owners reports, we now remove reports that return no data.

Adding or removing Groups from an Account in the Accounts > Groups window did not properly update Report static filters.

The Custom Report page did not check available dates.

The Custom Report window for Scheduled Reports would incorrectly switch to the Demand Report type.

The 'Simple' tab within the Create Report window would show the same list of mixed templates for both Demand and Scheduled reports.

Certain WebDB cache files, such as NSRoutes and NSUp2D, were being incorrectly stored by default in var/lib/nsd/config; we now store them in their own respective cache files.

NSRoutes warning messages for hosts that can't be resolved was causing a high rotation frequency of logs, resulting in critical log entries being difficult to find.

NSRoutes would try to resolve all hostnames during the load process, slow DNS and bad DNS queries could cause the download to timeout and corrupt the download, causing the configuration to fail to load.

Added Access Token support for nswcli, WebAdmin API Test, and API Unit Test Suite.

Assume Identity did not properly load the Session Store settings, causing issues with Account's session information.

Persistent database connections were causing issues with LOCK and UNLOCK tables, where the database would change on connection.

Reordering a column and then hiding the same column would break the hiding functionality.

Session Store settings were not saving as expected in the 8.2.1 release.

When importing Reports as a SysOp, the owner of the Report must be the SysOp or one of their managed accounts. If the Report owner is neither, ownership will now be applied to the importing SysOp upon completion.

The Policy Server dropdown menu in the Policy Logs > Archive tabs were not listing available Policy Servers.

The 'Modify Policy Default Status' and the 'Modify Policy Description' permissions were not being correctly disabled for SysOps with no advanced Policy permissions.

Profile Manager users were unable to load the advanced filter in a Group's Local List tab due to a permissions issue.

Profile Manager users were unable to add a description when adding an entries to Local Lists.

We now allow SysOp users to use the email functionality within the Account Manager.

Added Access Token support for Directory Sync to remove the requirement of webAdmin on localhost and API authorized by host.

Improved the log file rotation message in the Policy Service to indicate the start and end dates of the log file that was rotated out.

Customers transmitting old log files from "months" or "weeks" in the past could rotate out current logs depending on log file transmit ordering.

Added a new logger feature to 'soft_delete' a log file; removing the log file from the possible 'logs to write to' in Policy Service memory, without removing the file from disk.

Vastly improved log file loading times by scanning the log directory once, instead of scanning on a 'per tag' basis.

The List Tools 'Add To List' tool on the Home Dashboard wasn't applying the added List entries.

Exporting Client Filter brands for SysOps would export all the brands into file, the export now only includes the brands managed by the SysOp Account.

nMonitor did not log the platform name, only the brand and version information.

The Netsweeper Protocol Detection Engine would not parse the Server Name Information if the session extension occurred before the server name information extension.

Improved the verbosity of Policy Local and Shared List loading messages in the nsd_message.log to describe the specific parts of the Lists we are creating and loading.

We now allow the Policy Service WebDB download 'Real Time Callback' function to be enabled or disabled as a Policy Service configuration option.

Added new WebAdmin Settings for WebDB Compression, WebDB Flushing, and WebDB Unbuffered Result.

Improved the performance of the 'policylistentries' and 'nsroutes' WebDB modules significantly.

Assigning either of the 'Owner Inherit Groups' and 'Manage All Groups' permissions through a permissions template would result in the permissions not being applied.

Continuous reports did not update when run on servers if nothing else was changed.

WebAdmin socket code no longer does a non-blocking connect, allowing for 'all server connections' to be created and then checked.

File Extension List rules were not working for filenames with multiple instances of '.' in the filename.

Deleting Client Filter Brand settings would cause database errors.

We were no longer getting servers errors displayed in the Request Logs since the 8.2.1 release. Request logs will now display server errors but allow the servers that are online to send logs, making the request logs work with offline systems.

When updating Request Log filters, we now cancel pending requests, to ensure we don't cause issues due to offline servers.

Resolved a rare case where the Policy server could fail to resolve the address of the upstream CNS server, causing the Policy server to be unable to connect to CNS.

When two templates were assigned to one Account, where both templates assigned the same Group; and then the Group was removed from one of the templates, it was also deleting the Group entry for that Account.

The Policy Service rDNS implementation would not call resolution callback for "unrecoverable" errors, which is needed for proper CNS functionality.

Disk queue node didn't save full records in the buffer file.

The nsroutes service for el6 used the "nc" command, which could overload BGPD.

Added WebAdmin Log messages for changes made to the Route Advertisement Services settings.

WebDB services now support access tokens.

NSProxy would not trigger decrypt:// events with the new protocol engine disabled.

The nsproxyctl daemon would read the debug core setting from the nsd.conf, not the nsproxy.conf.

SysOp Accounts were able to create reports for all users with report APIs.

The RAS service did not properly clean up IP Address entries from deployments with multiple DNS servers.

Added the ability to run Search Keywords on the HTTP Referrer in order to enable keyword blocking with YouTube.

RAS Service could create false 'address change' events for hosts that have both IPv4 and IPv6 addresses.

The RAS Service uses the fixed size array when merges old and new IP addresses that can be insufficient for multiple DNS servers polling.

SysOps without Group General and Group Advanced permissions that allow for modifying a Group's information were still able to do so, due to the Group Lock feature added in the 8.1 release.

Fixed Polaris Report issues for the RAS service.