Netsweeper 8.1.1 EA Release (Sept. 2, 2022)

There is now the ability to lock a Group and Client and prevent them from being changed or removed.

The CNS connection structure could be accessed after it was freed.

The URL was not added to the URL Queue for Categorization when the original destination IP was not provided.

Azure Directory Sync Search Base was searching in Groups that were not part of its search base.

The global Search Keywords list has been replaced with the Search Keywords Request Part that can be added to Policy Shared or System Lists as well as the System Wide Lists.

When a Report is filtered and grouped by Categories, the option to show only filtered Categories would only apply to the first Category filter.

Module path URLs were not decoded before displaying in the Request Log.

The domainusergroup message was missing user information in the Request Log. We now log the appropriate username information for the domain user group sent to the Policy Server.

WebAdmin Theme Editor has been added that allows you to change Menu, Login, Error Page, favicons, and other theme-based information.

NSProxy intermittently displayed an error: 'Error can't connect to the policy server.' causing deadlocks and aborts.

WebAdmin Export did not use the filename in the export dialog.

Group-based Quick Reports did not show in the Group-based Quick Reports window.

The Client Filter 10.x now supports the new Bcrypt uninstall passwords when running with Netsweeper 8.1.1 or higher. When running with older servers, the MD5 uninstall password is still used.

NSProxy did not close the ICAP connection when the response was an error code.

NSProxy got an ICAP error message 'ICAP: unexpected response code '501 Not implemented' due to incomplete Policy Service ICAP buffer parsing. We now support incremental reading of ICAP requests properly.

The WebAdmin Notification permission was required for a SysOp Account to view the WebAdmin Log. This caused the WebAdmin Log permission to not permit WebAdmin Log access.

Directory Sync did not remove bad characters from the First Name and Last Name fields.

As a SysOp, it was possible to see the same List twice in a selectized drop-down.

SysOps could not view or remove Exception Lists from the Client Filter Settings page. Exception lists now only require view permissions.

The 'Create account group policy' option, when creating an Account, will set the icon to the name of the user which may not exist.

WebAdmin and DirSync did not process Last Name and First Name invalid characters in the same way.

Using the same Account simultaneously could cause Request Logs and table views to conflict when used at the same time.

The account_query API now allows any SysOp to query themselves and login is no longer required. An empty login uses the Account making the request.

The account_perms_list API now allows any type of Account to query their own permissions.

onGuard permissions have been added for the new onGuard interface.

The WebAdmin Setting, 'Passwords must be changed before expiry' has been removed because 'Inactive Password Age' is a more flexible feature. Customers upgrading should review Password Policy.

List Manager metadata did not display the History for metadata fields. Images from the List Service could cause table paging performance issues.

Source Port and Destination Port have been added to the Logging Framework.

Setting static filters for Reports limiting Groups the Account can run Reports on, would adjust the IP ranges based on the Account making the change and not the Account being changed.

The Report Export filename did not have the appropriate name based on the Report name and Instance date.

List Selectizes that require the view permission have been updated to apply View Managed Sysop Lists and View Organization Sysop Lists permissions.

Improved security of the SAML authentication library has been added by removing unused code.

Samlauth included broken and insecure jquery and other elements. They have been removed from samlauth and only the required Library is used.

Upgrading using the 8.1.X CD did not work correctly.

New APIs: account_password_forcechange and account_password_unlock have been added to reset and fix an Account password when inactive, locked out, or expired.

The 7.2.4 and above releases would crash if the NSProxy ca.crt and ssl/ca.key were mismatched, causing NSProxy to segfault and not log the proper error message.

If the 'Secure SSL Connection to Config Database' option was checked in the WebAdmin Settings, an error 'Could not connect to configuration database' displayed.