BeyondInsight and Password Safe 6.9.0 Release Notes

April 16, 2019

New Features and Enhancements:

  • General:
    • Added Support for Sailpoint System for Cross-domain Identity Management (SCIM), including a new SCIM management API and a new certified Sailpoint SCIM integration.
    • Rebranded the installer, configuration tool, BeyondInsight Console, and Analytics & Reporting.
    • Updated company name and EULA.
    • Added an Endpoint Privilege Management Agents grid.
    • Added an Endpoint Privilege Management Events grid.
    • Added an Endpoint Privilege Management Policy grid.
    • Added an Exclusions Menu for Privileged Desktop Management.
    • Added the ability to clear the .NET cache using the BeyondInsight configuration tool.
  • Analytics & Reporting:
    • Added an Endpoint Privilege Management suite of reports and pivot grid data points.
    • Added "Is Zero Day" as a single-select parameter, "Severity" and "Vendor Name" as multi-select parameter, and "Software" as a partial text match parameter to the Executive Trend Dashboard.
    • Added "Is Zero Day" as a single-select parameter, "Mitigation Type" and "Vendor Name" as multi-select parameters, and "Software" as a partial text match parameter to the Executive Risk Dashboard.
    • Added "Is Zero Day" as a single-select parameter, "Audit Group", "Mitigation Type", and "Vendor Name" as multi-select parameters, and "Software" as a partial text match parameter to the Vulnerability Scorecard.
    • Added "Severity", "Mitigation Type" and "Vendor Name" as multi-select parameters and "Software" as a partial text match parameter to the Executive Environment Summary.
    • Added "Is Zero Day" as a single-select parameter, "Severity", "Mitigation Type", and "Vendor Name" as multi-select parameters, and "Software" as a partial text match parameter to the Vulnerabilities by Operating System report.
    • Added "Audit Group", "Severity", "Mitigation Type", and "Vendor Name" as multi-select parameters and "Software" as a partial text match parameter to the Extended Executive Summary.
  • Password Safe:
    • Added support to manually enter domain fields and disable automatic password management for Directories.
    • Added import and export of Password Cache configuration and data.
    • Implemented performance improvements to Password Safe console.
    • Added authenticated proxy support for the Azure connector.
    • Access Policy Name maximum character length has been increased from 20 to 256.
  • BeyondInsight and Password Safe API:
    • GET Aliases/{id}: Returns a requestable Managed Account Alias by ID.
    • Synced Accounts support:
      • GET ManagedAccounts/{id}/SyncedAccounts: Returns a list of subscribed or synced Managed Accounts by Managed Account ID.
      • POST ManagedAccounts/{id}/SyncedAccounts/{syncedAccountID}: Subscribes and syncs a Managed Account to the Managed Account referenced by ID.
      • DELETE ManagedAccounts/{id}/SyncedAccounts: Unsubscribes and unsyncs all Managed Accounts from the parent Managed Account by ID.
      • DELETE ManagedAccounts/{id}/SyncedAccounts/{syncedAccountID}: Unsubscribes and unsyncs a Managed Account from the Managed Account by ID.
    • GET Aliases, GET Aliases?name={name}: Significantly improved performance.
    • GET ManagedAccounts: Now allows searching on any one of type, systemName, accountName, ipAddress, applicationDisplayName, or workgroupName.

Issues Resolved:

  • Resolved a data issue for Operating System information within the various grids of BeyondInsight.
  • Resolved an issue with Central Policy processing.
  • Resolved an issue with deleting a local user on an asset.
  • Resolved an issue with the All Assets Smart Rule generating a warning message.
  • Resolved an issue with loading the Credentials Manager .
  • Resolved an issue with sending scheduled jobs to Host Scanners.
  • Resolved an issue with RADIUS Two-Factor Authentication NAS Identifiers.
  • Resolved an issue with SAML login failures.
  • Resolved an issue with RADIUS server failover.
  • Corrected a display with the Asset details "Member Of" column.
  • Resolved a login issue with Okta SAML.
  • Resolved an issue with the HP ArcSight connector.
  • Resolved an issue with scheduled scans using the Host Scan template.
  • Resolved an issue with LDAP using SSL returns.
  • Resolved an attribute issue with Smart Rules.
  • Resolved an issue with missing event data being forwarded via connectors.
  • Resolved an issue with the Smart Rule editor.
  • Resolved an issue adding an Active Directory user to a local BeyondInsight group.
  • Resolved a display with Privilege Management IPS custom rules on Asset Details.
  • Resolved an issue with credentialed scans.
  • Resolved an issue with using credentials for directory queries.
  • Resolved an issue when using SNMPv3 for Event Forwarding.
  • Resolved a display issue for IP Addresses in the Assets Grid.
  • Resolved an issue with adding an Address Group.
  • Resolved an issue with the test functionality of the Azure Connector.
  • Resolved an issue with SNMP Connector MIB Formatting.
  • Corrected a typo on Credentials page.
  • Resolved an issue with CVSS Scores.
  • Resolved an issue with the ServiceNow Connector Asset export test.
  • Resolved an issue with updating scans status.
  • Resolved an issue with configuring the BeyondSaaS Connector.
  • Resolved a performance issue with the BeyondInsight Vulnerability Export Report.
  • Resolved a configuration issue with Analytics & Reporting.
  • Resolved an issue with the Password and Session Activity report.
  • Resolved an issue with Analytics & Reporting Reports associated with Global Smart Rules.
  • Resolved an issue with inactive users in the Entitlement by User Report.
  • Resolved an issue with the Mitigation Information field under multiple reports.
  • Resolved an issue with the Analytics & Reporting daily job.
  • Resolved an issue the Password Reset on Release report.
  • Resolved an issue with CVSSv2 scores in various reports.
  • Resolved a data issue with Password Safe Session Monitoring.
  • Resolved an issue with configuring "Enable for API access" for Password Safe Managed Accounts.
  • Resolved an issue with Password Safe Smart Rule Processing of Managed Accounts.
  • Resolved an issue with validating duration for Password Safe OneClick users.
  • Resolved an password change issue for Password Safe Oracle accounts.
  • Resolved a password change issue for Password Safe Sybase accounts.
  • Resolved an issue with SAML logout.
  • Resolved an issue with changing passwords for Password Safe OneClick users.
  • Resolved an issue X11-enabled Password Safe SSH sessions.
  • Resolved an issue with Password Safe SSH Sessions.
  • Resolved an issue with the Smart Rule editor.
  • Resolved an issue with displaying Mainframe accounts on the Password Safe Portal.
  • Resolved a permission issue with a Password Safe Requestor user.
  • Corrected a display issue on the Password Safe Portal for Session Reviewer users.
  • Resolved an issue with Password Safe Managed Bind Accounts.
  • Resolved a database performance issue.
  • Resolved an issue with DSS Auto Key rotation when asset has been onboarded via smart rule user accounts added via psrun2.
  • Resolved an issue with using a proxy server with the BMC Remedy connector.
  • Resolved a login issue for Smart Card users.
  • GET Organizations/{id}/SmartRules?title={title} now properly returns the expected response.
  • GET Organizations/{id} now properly returns only a single matching Organization.
  • In GET Organizations/{id}, {id} is now case insensitive.
  • When using a new credential to bind to the directory, POST UserGroups - groupType=ActiveDirectory now properly creates a new credential before the bind.
  • GET ManagedAccounts?systemName={systemname}&accountName={accountName} no longer returns directory-based accounts when a domain is not specified in {accountName}.

Notes:

  • BeyondInsight requires Adobe Flash Player 22.0 or higher.
  • The MD5 signature is: bdd9ef81b087231f1a156395a4137b5c
  • The SHA-1 signature is: 69d80e471a7a9cabe870dde38ecf0f38745090d1
  • The SHA-256 signature is: 94509c830471457290649aa6ea023937915d52dec8b624eade5745878c31574f