Netsweeper 7.2.5 EA is now available for early adopters with major improvements to stability, security and advancements made for Client Filter, Upgrade and Directory Sync. Customers running 7.2 should upgrade to the 7.2.5 release as we continue to fix major defects and finalize features.
The Netsweeper 7.2 release is available on both EL6 and EL8. Over the course of the 7.2 release cycle, we will be finalizing the EL8 release. Moving forward to Netsweeper 8 releases, we will no longer be releasing new features for the EL6 builds. Netsweeper will continue to provide security fixes to the EL6 builds but will not provide new features to the EL6 based release. Customers are expected to plan a migration to EL8 between now and 2023 if they desire the new features we are introducing.
Netsweeper 7.2.5 New Features:
Client Filter
- WebAdmin can push an Exception List for the Client Filter along with Config Edit branding settings.
- Work has been done in the 7.2 release along with the Netsweeper Client Filter 9.0.0
- 'Client ConfigEdit' and 'Client Exception Lists' added to 'Client Filter Settings' in the WebAdmin
- 'Platform' attribute added to WebAdmin Brand Settings for our different releases like Windows and MacOS
- Client Filter Brand can 'optionally' specify a Brand in the Client Filter Configuration
- Thin-client protocol version 002 implemented that allows for 'Module Name' to be passed for policy processing in the Client Filter 9.0.0 and above
Lists
- Supports file URLs that do not contain a hostname. This makes it possible to use URLs like file:///app.exe
- 'Module Name' added to the Request Part List processing so when Client Filter sends the 'Module Name' it will be possible to Allow or Deny it
- 'No Action' added to List 'Restrict Actions' that allows a user to add a URL that is basically 'Not found'
- 'Client Module Name' added to 'Trace Request' allowing users to debug Module Name processing steps
WebAdmin Status
- webadminstatus API used in Active-Active deployments to check if the webadmin is available for a load balancer
- WebAdmin APIs, Agent requests, and webdb now check the WebAdmin status and will fail if the WebAdmin status is an error.
Upgrade
- Database only upgraded when the user logs in to the WebAdmin or forced with webadminctl dbupgrade
- WebAdmin now displays an error when WebAdmin version does not match database
versions
Directory Sync
- Active-Active Directory Sync has been enabled to apply WebAdmin URL and server validation settings
- New WebAdmin Settings for Active-Active Directory Sync: 'WebAdmin Dirsync URL' and 'WebAdmin Dirsync Server Validation Disabled'
- Validates the accessibility of WebAdmin APIs before running synchronization
Change Log 7.2.5
| Ticket | Type | Description |
| 18649 | FEATURE | The WebAdmin now has the ability to push an Exception List for the Client Filter along with Config Edit branding settings. This work has been done in the 7.2 release along with the Netsweeper Client Filter 9.0.0 and above clients |
| 22247 | FEATURE | WebAdmin APIs, Agent requests, and webdb now check the WebAdmin status and will fail if the WebAdmin status is in error. |
| 23138 | FEATURE | Some small aspects of the Installation's look and feel were modified for the EL8 installation. |
| 24574 | BUG | Monitoring graphs were not working correctly with Active-Active WebAdmin. |
| 25231 | FEATURE | The database is no longer upgraded when webadminctl is started. It can now only be upgraded when the user logs in to the WebAdmin or forced with webadminctl dbupgrade. |
| 25232 | FEATURE | There is a new webadminstatus API for checking if the WebAdmin is working properly allowing user login. This can be used in Active-Active deployments to check if the WebAdmin is available for a load balancer. |
| 25233 | FEATURE | For Active-Active Directory Sync and multiple deployments, two new settings: 'WebAdmin Dirsync URL' and 'WebAdmin Dirsync Server Validation Disabled' have been added to the WebAdmin Login Settings in the WebAdmin Settings page. |
| 25243 | BUG | Create Report variables were missing in Scheduled Report. |
| 25246 | SECURITY | The base RPM packages for EL6 and EL8 have been upgraded. |
| 25248 | BUG | The i40e driver has been updated to the latest with PF_RING version 8.1.0, i40e driver version 2.17.4. |
| 25253 | BUG | On Systems with a database connection, the connection is tried for session storage only if the WebAdmin is enabled. |
| 25254 | BUG | For Active-Active Sessions, saving large data in the session object is now supported. |
| 25255 | BUG | Custom system routing in /etc/sysconfig/network-scripts/ for rule-* and route-* could cause a system error message when no rule or route existed. |
| 25258 | BUG | A 'Failed to load resource message displayed when clicking on Surf in Tools > Web Proxy > Allowlistonly. |
| 25263 | UPDATE | All required packages for the mariadb cluster are now included in the EL 8 release. |
| 25271 | BUG | Request Logs did not keep the previous buffer of log entries and the logs would get cleared every second. |
| 25273 | SECURITY | Defining the CIS 5.2.3 maximum buffer size for URIs caused the WebAdmin Web Proxy to fail. A default of large_client_header_buffers is 4 8k used. |
| 25274 | FEATURE | A 'Module Name' option has been added to the Request Part selection in List processing so when the Client Filter sends the 'Module Name' it will be possible to Allow or Deny it. |
| 25276 | FEATURE | The Client Filter 'Exceptions Lists' can now be exported to the Client Filter from WebAdmin Lists. Two new options: 'Client ConfigEdit' and 'Client Exception Lists' have been added to 'Client Filter Settings' in the WebAdmin. |
| 25277 | BUG | EL8 did not have the "rocommunity public 0.0.0.0/0" added to the /etc/snmpd/snmpd.conf. |
| 25278 | FEATURE | A 'No Action' option has been added to the 'Restrict Actions' section of the List Settings window that allows a user to add a URL that is basically 'Not found'. |
| 25281 | FEATURE | Client Filter settings can now be set for a specific platform for each brand. You can create a Client Filter brand configuration for our different releases like Windows and MacOS. |
| 25282 | FEATURE | Thinclient protocol version 002 has been implemented that allows for 'Module Name' to be passed for policy processing in the Client Filter 9.0.0 and above releases. |
| 25285 | FEATURE | The WebAdmin now displays an error when the WebAdmin version does not match the database versions. This error prevents Accounts without permission from logging in but allows login to perform an upgrade for the database or WebAdmin. |
| 25286 | FEATURE | 'Client Module Name' has been added as an optional field in the 'Trace Request' window allowing users to debug Module Name processing steps. |
| 25292 | BUG | Web Proxy did not load pages when clicking on each Group Name or Surf. |
| 25297 | FEATURE | Active-Active Directory Sync has been enabled to apply WebAdmin URL and server validation settings. |
| 25298 | FEATURE | The List Manager now supports file URLs that do not contain a hostname. This makes it possible to use URLs like file:///app.exe. |
| 25299 | FEATURE | The Client Filter Brand lookup can now 'optionally' specify a Brand in the Client Filter Configuration. |
| 25304 | BUG | Email sending from the WebAdmin, when an Account/password was used, did not work properly. This has been resolved. |
| 25305 | FEATURE | DirSync now validates the accessibility of WebAdmin APIs before running synchronization. |
| 25309 | BUG | The DirSync search base did not display in the El 6 build. |
| 25313 | FEATURE | The 'Platform' attribute has been added to Brand Settings in the WebAdmin. |
| 25338 | BUG | Invalid Entry Types can now not be added to Lists. |
| 25339 | BUG | The nsup2d error log contained "No default dpid found" and failed to generate deny pages in version 7.2.3 and 7.2.4. |
| 25342 | BUG | When upgrading the nsd/nsup2d services, an old cached copy in an old format could be used for the configuration. Upgrade now forces a complete download of any cached data. |
| 25348 | BUG | The policy server failed to read and apply categorization results sent from NSProxy. |
| 25350 | BUG | NSUp2Date modules were not checking for errors before running. |
| 25379 | BUG | if there was no Group name, a log entry was not created. |