Release notes for the update June, 16 2024

Update Version 4.1.202406162121

New Features

Manage and browse space hierarchy of nested sub-spaces. Sub-space inherits and extends a configuration of its parent space and maintains unique asset database.
Browse containers and assets based on users permissions.
Create, edit, view and delete as well as copy, paste and link containers and assets.
Mass import assets into the space database from CSV spreadsheets.
Manage and query asset versions including draft (minor) and production (major) versions.
Manage containers and assets custom fields derived from the asset types as well as properties such as name, description and icon.
Manage space, container, asset and field permissions including access inheritance following the space and container hierarchy. Manage global space level access to space operations and access to assets.
Manage asset types defining asset fields with pre-built asset types for Windows and Linux hosts with different access strategies. Support asset fields includes Checkbox, Choice, Date, File, Number, String, Taxonomy, Text and IP Address.
Manage taxonomies as hierarchies of terms with synonyms used to tag assets and build policies. Graphically display taxonomy structure.
Query and export system event log

Support for direct PowerShell (Windows), SSH (Unix) and Groovy (local server) job execution strategies. Support for text and object model results for PowerShell scripts to parse by different parser strategies.
Support for RegEx (through unstructured text analytical handler), XSLT parsers processing results returned by the scripts run at the endpoints.
Manage script library with customizable PowerShell and Shell scripts as well as with batches executing several scripts through the same connection.
Manage parser library with customizable parsers.
Manage task execution policies defining when the script is executed on the endpoint including event based triggers as well as a scheduling mechanizm. Inherit task execution policies from the asser types to the individual assets with the option to override the policy on the asset level.
Query and export job execution queue with the raw job results returned from the script execution on the endpoint.

Integration with Microsoft Active Directory as a user directory for authentication and authorization purposes including nested groups membership.
Integration with LDAP Servers as a user directory for authentication and authorization purposes including nested groups membership.
Integration with Entra ID as a user directory for authentication and authorization purposes including groups membership.
Manage space level local user directories. Manage local users and groups including external directories users and groups membership in local groups.
Integration with external Identity Providers using SAML protocol for the authentication and authorization purposes optionally utilizing group membership transferred using SAML protocol.
Integration with TOTP MFA (such as Google or Microsoft Authenticator).
Integration with HOTP MFA using Yubico services.
Integration with Duo Security Services as MFA provider.
Integration with 3rd party MFA devices over Radius protocol.
Integration with the MFA code provided through email.
Manage MFA requirements for various groups of users.
Manage API Tokens providing access to the application API.
Analyse users using the application and manage users MFA preferences.

Manage services including ports, port range or process comprising the service
Manage micro-segmentation policies defining access to the services on the assets for the selected sources through taxonomy tagging of the asset database.
Manage micro-segmentation policies publishing status including disabled, monitoring and published.
Manage and query policy versions including draft (minor) and production (major) versions.
Manage out of the box micro-segmentation management scripts and parsers for Windows Defender Firewall and Linux IPTables.
Query network information collected from the endpoints including: asset status, network interfaces, workloads, connections, and firewall rules. Graphically display asset workloads as well as connections detected on the endpoint.
Manage policy enforcement status on the asset endpoint.
Manage requests for the temporary access to the asset services in addition to the applied policies.
Query connections violation data from the assets in the monitoring state to evaluate the effect of policy enforcement.

Support for software deployments on Windows and Linux platforms.
Support for internal database deployed during the software installation.
Support for external RDBMS: Oracle, MS SQL Server, MySQL and PostgreSQL.
Manage multiple tenants with each tenant handled by unique URL and managing its data in the tenant-based backend database.
Manage mail server configuration including SMTP and IMAP protocols with Basic and oAuth authentication mechanisms. Manage out of the box email templates.
Manage deployment-level SSL certificate to terminate HTTPS traffic.
API support for external scripts and software to access each function provided by the application based on the permissions assigned to the access token. Support for API browser with the options to test API functions.
Manage software updates including main WEB application and 3rd party components for framework and WEB container.