12.40 EA Client Filter Release and Downloads (June 07, 2024)

Added the ability for the Client Filter to lookup First Name, Last Name, and Email Address, as well as the ability to add these to the DUG message so the fields in the logging and nMonitor can be populated.

Certain requests made with Android devices were incorrectly being logged as unknown protocols.

The Client Filter Diagnostics 'Network Test' function would incorrectly return a 'Network works perfectly' result when a Policy Server was unavailable as long as the FQDN would resolve.

Removed unsafe-eval from the Chrome Extension Client in favour of wasm-eval.

Changing the password from the Client Filter Settings GUI would cause log entry errors.

Android GUI '-p servername' did not save the hostname.

The groupname cache for the group prefix search was per-workstation when the lookup is done per user. Both the cache and the lookup are now per-user.

nUpdate now logs to a different file when the config GUI runs.

Uninstalling a MacOS MDM-based install would leave the system extension running, preventing the device from connecting to the internet.

The Chrome Client Filter in all prior releases had no timeout value when trying to access an invalid policy server, which could cause 'fail open' fail close' and other dialogs to be prompted to the user.

Upgraded zlib from 1.2.13 to 1.3 to fix CVE-2023-45853 and CVE-2023-6992.

Upgraded openssl 1.1.1q to 1.1.1w to fix security concerns.

Upgraded sqllite from version 3.39.3 to 3.44.2.

Upgraded libtiff 4.4.0 to version 4.6.0.

MacOS Client Filter Settings App could crash when loading in rare cases in versions 11.60 and 12.10.

The iOS Client browser's nmonitor.php would get called with the compiled brand in the arguments instead of the configured brand.

Automated the iOS Browser upload in Jenkins.

The MacOS Client Filter could get stuck in a non responsive state, as it would incorrectly think the VPN was errantly disabled.

Upgraded c-ares from 1.18.1 to cares-1_27_0.

Upgraded nghttp2 from 1.45.1 to 1.60.0.

Upgraded Chrome Client Filter libjpeg 9c to 9f.

The iOS Firefox Client Filter Browser would incorrectly log the workstation name as 'localhost' instead of the correct value.

We have improved detection of both automated and silent installs via MDM on the MacOS Client Filter.

Resolved an issue where the MacOS nMonitor service would not restart after aborting.

Updated zlib to v1.3.1.

Updated libpng to v1.6.43.

Updated libwebp to v1.3.2.

Updated libtiff to v4.6.0.

Updated libuv to v1.48.0.

Updated mbedtls to v2.28.7.

Updated leptonica to 1.84.1.

The default nUpdate frequency has been reconfigured to one week (168 hours).

Updated tesseract to 5.3.4.

Updated libexpat R_2_6_2.

Updated wxWidgets to v3.2.4.

Updated libopenssl to OpenSSL_1_1_1w

Updated libcurl to curl-8_7_1.

Updated libpcap to libpcap-1.10.4.

Updated sqlite to 3.45.2, multiple ciphers to v1.8.4.

Switched the Chrome Client Filter to use wxWidiget Command Line parser for improved compatibility.

Fixed high priority polaris scan issue.

Resolved a rare Chrome MV3 issue where the Image Capture Code in chrome could crash.

Moved cookies into the new nscf databse.

The diagnostics service could crash if the logfile grew too large.

The default download frequence for nUpdate is now once a week (604800 seconds).

Added the ability to adjust the default nUpdate download timeout.

Added more diagnostic information to the .json download and the .msi download.

nUpdate will no longer reset timers that have not changed when a new configuration change is detected.

Renamed JSONs queries_ocr_cats and queries_keylog_cats to be more consistent with other JSONs.

Disabling the Filter on the VPN-based Client Filter could stop packets from being sent to the SSL Decrypting proxy when filtering was disabled.

Client Filter upgrades to the 12.10 and later release with the default 'Netsweeper' brand were attempting to download nMonitor data from the default https://cloud.netsweeper.com/webadmin URL even when nMonitor was disabled.

nMonitor will no longer try to download training data when it has a revision and will only update when a new revision is available.

We now skip ICMP User Module Lookups For Android devices.

Fixed a minor typo in the generated Windows upgrade JSON.

The nUpdate for Windows will now resume the interval for checking based on the last check time when the service starts.