BeyondInsight for Unix and Linux 22.3 Release Notes

December 8, 2022

New Features and Enhancements:

License Management

  • Added License Management section.
  • Added links to License Management section (home page, nav menu).
  • Added PMUL License Server selector page.
  • Added PMUL License Server General Details page.
  • Added client counts to PMUL License Server General Details page.
  • Added license upload to PMUL License Server General Details page.
  • Added License Clients API.
  • Added PMUL License Server Client Usage page.
  • Added Clients grid to PMUL License Server Client Usage page.
  • Added Client Details side-card to Clients grid.
  • Added filters to Clients grid (IP address, hostname, license component, is retired).
  • Added JSON download to PMUL License Server Clients grid.
  • Added CSV download to PMUL License Server Clients grid.
  • Removed Host Details > PMUL Licensing tab.
  • Added PDF download to PMUL License Server Clients grid.
  • Added PDF export of PMUL License Server General Details page.

Notifications

  • Added Notifications screen.
  • Added Notification grid to Notifications screen.
  • Added Notifications link to nav menu.
  • Added filters to Notifications screen (read/unread, notification type).
  • Added the creation of stale hosts notifications.
  • API to return notifications.
  • Added configurability of parameters for generating stale hosts notifications.
  • Added notification details side-card to Notifications grid.
  • Added actions to Notification details side-card for profiling hosts affected by stale hosts notifications.
  • Added button to Notification details side-card to mark a notification as read/unread.
  • Added Notifications panel to top-right of app.
  • Added unread notifications to Notifications panel.
  • Added button to go to Notifications screen from Notifications panel.

Product Activation

  • Added product activation API.
  • Upon activation, a send request to BeyondTrust touchlog is made.
  • Added Product Activation section to About > Legal page for system administrator users only.

Kibana Dashboard

  • Added API endpoint for deploying dashboard to Kibana.
  • Added Deploy Dashboard button to SIEM Connections editor for Elasticsearch SIEMs with a CloudID.
  • A link is shown to Kibana dashboard in Elastic Details section if deployed.

Scrypt Support

  • Updated authorization policy to support the concept of expired passwords.
  • Marked limited set of endpoints as accessible with an expired password.
  • Allowed configurability of scrypt hashing parameters.
  • Redirect users to change password screen upon login with an expired password.
  • Changed use of bcrypt to scrypt algorithm for password hashing.
  • All local user passwords (bcrypt-hashed) are expired on upgrade to BIUL 22.3.

Handle Loss of Connectivity to Elasticsearch

  • Added a local buffer database to serve as a write queue for Elasticsearch events.
  • Modified existing logic to send events to write queue rather than directly to Elasticsearch.
  • Added daemon to service write queue, sending events to Elasticsearch.

Issues Resolved:

Style and Appearance

  • Resolved styling bug in all grid menus.
  • Resolved styling bug in Console Access > Groups > Add Group.
  • Resolved styling bug in Privilege Management for Networks config form.
  • Resolved styling bug in Privilege Management for Networks rules page.
  • Reduced overly large click target area for switch controls throughout the app.
  • Reduced overly large click target area for View RBP Entitlement Report link.
  • Improved error messages for certificate validation.
  • Resolved error message when AD Bridge installer cannot be found.
  • Ensured consistent labels for enabled/disabled switch across RBP entities.
  • Added missing label on RBP > Reauthentication page.
  • Added missing title on FIM > Target Definition Editor page.
  • Added help text on RBP Hostname field.

Miscellaneous

  • Added option to provide sudo alias when installing Sudo Manager.
  • Resolved issue that occured when attempting to create Sudo policy that contained a space in the name.
  • Improved handling of promotion of secondary registry server in RNS.
  • Updated profile to include information about Sudo Manager use of RNS.
  • Updated sudo alias detection and uninstallation to account for Sudo use of RNS.
  • Updated profile to record error if conflict in FIM assignments is detected.
  • Updated profile to record error if conflict in Sudo assignments is detected.
  • Resolved issue with packaging Windows installers.
  • Resolved issue with upload of Sudo Manager to Settings > Software page.
  • Resolved issue getting connection to PMUL REST service.
  • Resolved issue with handling of secrets when starting in restricted mode.
  • Resolved issue in version API endpoint.
  • Resolved issue in which user was unable to edit own roles.
  • Resolved issue with missing toast when profiling host.
  • Resolved issue with hostname validation during profile.
  • Resolved intermittent console error when adding/removing user roles.
  • Restored broken link to RBP > Hosts page.

Notes:

  • Upgraded to Angular 13 for bug fixes, security upgrades, functional and performance improvements.