How can we help?

Netsweeper 7.2.5 EA

Follow

Netsweeper 7.2.5 EA is now available for early adopters with major improvements to stability, security and advancements made for Client Filter, Upgrade and Directory Sync. Customers running 7.2 should upgrade to the 7.2.5 release as we continue to fix major defects and finalize features.

The Netsweeper 7.2 release is available on both EL6 and EL8. Over the course of the 7.2 release cycle, we will be finalizing the EL8 release. Moving forward to Netsweeper 8 releases, we will no longer be releasing new features for the EL6 builds. Netsweeper will continue to provide security fixes to the EL6 builds but will not provide new features to the EL6 based release. Customers are expected to plan a migration to EL8 between now and 2023 if they desire the new features we are introducing.

Netsweeper 7.2.5 New Features:

Client Filter

  • WebAdmin can push an Exception List for the Client Filter along with Config Edit branding settings.
  • Work has been done in the 7.2 release along with the Netsweeper Client Filter 9.0.0
  • 'Client ConfigEdit' and 'Client Exception Lists' added to 'Client Filter Settings' in the WebAdmin
  • 'Platform' attribute added to WebAdmin Brand Settings for our different releases like Windows and MacOS
  • Client Filter Brand can 'optionally' specify a Brand in the Client Filter Configuration
  • Thin-client protocol version 002 implemented that allows for 'Module Name' to be passed for policy processing in the Client Filter 9.0.0 and above

Lists

  • Supports file URLs that do not contain a hostname. This makes it possible to use URLs like file:///app.exe
  • 'Module Name' added to the Request Part List processing so when Client Filter sends the 'Module Name' it will be possible to Allow or Deny it
  • 'No Action' added to List 'Restrict Actions' that allows a user to add a URL that is basically 'Not found'
  • 'Client Module Name' added to 'Trace Request' allowing users to debug Module Name processing steps

WebAdmin Status

  • webadminstatus API used in Active-Active deployments to check if the webadmin is available for a load balancer
  • WebAdmin APIs, Agent requests, and webdb now check the WebAdmin status and will fail if the WebAdmin status is an error.

Upgrade

  • Database only upgraded when the user logs in to the WebAdmin or forced with webadminctl dbupgrade
  • WebAdmin now displays an error when WebAdmin version does not match database
    versions

Directory Sync

  • Active-Active Directory Sync has been enabled to apply WebAdmin URL and server validation settings
  • New WebAdmin Settings for Active-Active Directory Sync: 'WebAdmin Dirsync URL' and 'WebAdmin Dirsync Server Validation Disabled'
  • Validates the accessibility of WebAdmin APIs before running synchronization

Change Log 7.2.5

Ticket Type Description
18649 FEATURE The WebAdmin now has the ability to push an Exception List for the Client Filter along with Config Edit branding settings. This work has been done in the 7.2 release along with the Netsweeper Client Filter 9.0.0 and above clients
22247 FEATURE WebAdmin APIs, Agent requests, and webdb now check the WebAdmin status and will fail if the WebAdmin status is in error.
23138 FEATURE Some small aspects of the Installation's look and feel were modified for the EL8 installation.
24574 BUG Monitoring graphs were not working correctly with Active-Active WebAdmin.
25231 FEATURE The database is no longer upgraded when webadminctl is started. It can now only be upgraded when the user logs in to the WebAdmin or forced with webadminctl dbupgrade.
25232 FEATURE There is a new webadminstatus API for checking if the WebAdmin is working properly allowing user login. This can be used in Active-Active deployments to check if the WebAdmin is available for a load balancer.
25233 FEATURE For Active-Active Directory Sync and multiple deployments, two new settings: 'WebAdmin Dirsync URL' and 'WebAdmin Dirsync Server Validation Disabled' have been added to the WebAdmin Login Settings in the WebAdmin Settings page.
25243 BUG Create Report variables were missing in Scheduled Report.
25246 SECURITY The base RPM packages for EL6 and EL8 have been upgraded.
25248 BUG The i40e driver has been updated to the latest with PF_RING version 8.1.0, i40e driver version 2.17.4.
25253 BUG On Systems with a database connection, the connection is tried for session storage only if the WebAdmin is enabled.
25254 BUG For Active-Active Sessions, saving large data in the session object is now supported.
25255 BUG Custom system routing in /etc/sysconfig/network-scripts/ for rule-* and route-* could cause a system error message when no rule or route existed.
25258 BUG A 'Failed to load resource message displayed when clicking on Surf in Tools > Web Proxy > Allowlistonly.
25263 UPDATE All required packages for the mariadb cluster are now included in the EL 8 release.
25271 BUG Request Logs did not keep the previous buffer of log entries and the logs would get cleared every second.
25273 SECURITY Defining the CIS 5.2.3 maximum buffer size for URIs caused the WebAdmin Web Proxy to fail. A default of large_client_header_buffers is 4 8k used.
25274 FEATURE A 'Module Name' option has been added to the Request Part selection in List processing so when the Client Filter sends the 'Module Name' it will be possible to Allow or Deny it.
25276 FEATURE The Client Filter 'Exceptions Lists' can now be exported to the Client Filter from WebAdmin Lists. Two new options: 'Client ConfigEdit' and 'Client Exception Lists' have been added to 'Client Filter Settings' in the WebAdmin.
25277 BUG EL8 did not have the "rocommunity public 0.0.0.0/0" added to the /etc/snmpd/snmpd.conf.
25278 FEATURE A 'No Action' option has been added to the 'Restrict Actions' section of the List Settings window that allows a user to add a URL that is basically 'Not found'.
25281 FEATURE Client Filter settings can now be set for a specific platform for each brand. You can create a Client Filter brand configuration for our different releases like Windows and MacOS.
25282 FEATURE Thinclient protocol version 002 has been implemented that allows for 'Module Name' to be passed for policy processing in the Client Filter 9.0.0 and above releases.
25285 FEATURE The WebAdmin now displays an error when the WebAdmin version does not match the database versions. This error prevents Accounts without permission from logging in but allows login to perform an upgrade for the database or WebAdmin.
25286 FEATURE 'Client Module Name' has been added as an optional field in the 'Trace Request' window allowing users to debug Module Name processing steps.
25292 BUG Web Proxy did not load pages when clicking on each Group Name or Surf.
25297 FEATURE Active-Active Directory Sync has been enabled to apply WebAdmin URL and server validation settings.
25298 FEATURE The List Manager now supports file URLs that do not contain a hostname. This makes it possible to use URLs like file:///app.exe.
25299 FEATURE The Client Filter Brand lookup can now 'optionally' specify a Brand in the Client Filter Configuration.
25304 BUG Email sending from the WebAdmin, when an Account/password was used, did not work properly. This has been resolved.
25305 FEATURE DirSync now validates the accessibility of WebAdmin APIs before running synchronization.
25309 BUG The DirSync search base did not display in the El 6 build.
25313 FEATURE The 'Platform' attribute has been added to Brand Settings in the WebAdmin.
25338 BUG Invalid Entry Types can now not be added to Lists.
25339 BUG The nsup2d error log contained "No default dpid found" and failed to generate deny pages in version 7.2.3 and 7.2.4.
25342 BUG When upgrading the nsd/nsup2d services, an old cached copy in an old format could be used for the configuration. Upgrade now forces a complete download of any cached data.
25348 BUG The policy server failed to read and apply categorization results sent from NSProxy.
25350 BUG NSUp2Date modules were not checking for errors before running.
25379 BUG if there was no Group name, a log entry was not created.

 

Was this article helpful?
0 out of 0 found this helpful
Have more questions? Submit a request