Monthly Release Notes - January 2025

Clearswift

---

Secure Email Gateway

Version 6.0.1

January 23, 2025

Fixes

• Resolved an issue where the proxy was not working correctly with dnf when set via Cockpit.

• Resolved an issue where applying configuration failed after setting up SMTP authentication and editing a policy.

• The default PGP keyring used by v5.7.0 or earlier versions is not compatible with v6.0.0. When importing a backup from v5.7.0 machine, a new default PGP keyring will now be created.

• Resolved an issue where the web user interface (UI) failed to start if Log Export has been enabled on the Gateway.

• Resolved an issue where performing the Connectivity Test or Check TRUSTmanager Reputation resulted in an error.

• Resolved an issue where adding or editing User Defined Entities for Lexical Expressions was not possible.

• The UI performance has been improved and it now operates faster.

• Resolved an issue where batch deletion of certificates in the Certificate Store failed. 500 certificates can now be deleted at one time.

Secure ICAP Gateway

Version 6.0.1

January 23, 2025

Fixes

• Resolved an issue where the proxy was not working correctly with dnf when set via Cockpit.

• Resolved an issue where applying configuration failed after setting up SMTP authentication and editing a policy.

• Resolved an issue where the web user interface (UI) failed to start if Log Export has been enabled on the Gateway.

• Resolved an issue where adding or editing User Defined Entities for Lexical Expressions was not possible.

• The UI performance has been improved and it now operates faster.

• Resolved an issue where "The ICAP Server has failed" alarm was incorrectly raised at times.

Secure Web Gateway

Version 6.0.1

January 23, 2025

Fixes

• Resolved an issue where the proxy was not working correctly with dnf when set via Cockpit.

• Resolved an issue where applying configuration failed after setting up SMTP authentication and editing a policy.

• Resolved an issue where the web user interface (UI) failed to start if Log Export has been enabled on the Gateway.

• Resolved an issue where adding or editing User Defined Entities for Lexical Expressions was not possible.

• The UI performance has been improved and it now operates faster.

• Resolved an issue where the "Web Proxy has failed" alarm was incorrectly raised at times.

Back to Top

 

Digital Guardian

Agent for Windows

Version: 9.0.1

January, 2025

Fixes

• Network performance issue were identified with Digital Guardian and Palo Alto GlobalProtect VPN. This issue has been resolved by adding DS process flag to PanGPS.exe.

  (e.g., PanGPS.exe, SK+DS+NPR+PR).

  For more details, refer to the "Process Flag File Changes" section in the DigitalGuardian_Agent_for_Windows_9.0.1_Release_Notes.

Network DLP Appliance

Version: 12.1.0

January, 2025

New Features

• This release incorporates support for Indian Aadhaar Identification Number, widely used as a national ID in India. With this new feature, users can now select the "Indian National Identification Number" pattern from the predefined list, enabling accurate recognition and handling of Aadhaar numbers within the system.

Back to Top

 

Fortra

---

Endpoint Manager

January 31, 2025

Fixes

• Fixed issue with the Fortra Agent being prevented from shutting down.

• Fixed issue with scroll bar appearing in Modules table in Endpoint Drawer.

• Resolved security vulnerabilities and minor bug fixes.

January 9, 2025

Enhancements

• All capabilities are now shown while configuring a module, but only licensed capabilities can be selected.

• Improved query speed when there are many endpoints in group.

• All capabilities are listed on Overrides page with hidden toggle for capabilities without entitlements.

Fixes

• Resolved security vulnerabilities and minor bug fixes.

Fortra platform

January 21, 2025

Enhancements

• Multifactor authentication can be managed from the Add User and Edit User drawers.

• Improved accessibility of the app switcher.

• The app switcher can now handle the EPM-EU option.

• Improved text on OTP Device Setup Screen.

Fixes

• Fixed issue with Edit OAuth Client page not showing correctly in dark mode.

• Resolved security vulnerabilities and minor bug fixes.

Back to Top

 

Fortra Application Hub

---

Version 1.3

January 16, 2025

New Features

• Added support for x86_64 RHEL 9 and Rocky Linux 9 operating systems.

• The product known as HelpSystems One is now called Fortra Application Hub. The UI themes have been altered to match new corporate scheme.

Fixes

• Fixed issue where the My Products page may appear slow or unresponsive when a product deployment is in progress.

• Fixed issue where Fortra Application Hub would become slow or unresponsive due to an IBM i system connection error, including an incorrect password.

• Fixed installation issue where services would not start if java was not installed prior to installing Fortra Application Hub.

• Users can no longer change their password to the same password.

• Improved messages when adding an IBM i system at an unsupported operating system release or when connectivity errors occur.

• Fixed issue where marketplace installations could hang if an error occurred during the download and install process.

• Resolved CVE-2024-11923 when trace logging was manually enabled where passwords would appear in the log file.

• Improved default TLS configuration.

• Port 8981 is no longer required by IAM service.

• Backup and Restoration scripts now function correctly when dealing with backups written to an area only accessible via the root user.

• Updated to Java 17.

• Updated to Postgres 13.16.

• Updated to Tomcat 9.0.91.

• Updated versions of various other components and dependencies.

• Fortra Application Hub no longer supports RHEL 7 or CentOS 7.

Back to Top

 

Intermapper

---

Version 6.6.3

January 6, 2025

Enhancements

• Upgraded the jQuery library from v1.10.2 to v3.6.0 for the web server.
• Added support for Mac OS 13/14 Intel.

Fixes

• Resolved cross-site scripting vulnerabilities.
• Updated OpenSSL to 1.1.1 to address vulnerabilities.
• Resolved option to delete reports in Reports server.
• Resolved an issue where a "maintenance contract has lapsed" message may appear when you have a valid license.
• Resolved MacOS unsupported version message.
• Display Intermapper version.
• Updated the Reports option to avoid including an extra "b" in each string when exporting to a CSV.
• The Intermapper service has been improved to handle exceptions that had resulted in a crash.
• Resolved an issue where the NT Services & WMI screen displayed LONG_WMI_DESC instead of the proper text at top of window.
• Updated to ensure long Japanese text fits in the Layer 2 settings window.
• Resolved an issue where the database would not update properly and had a psycopg2.errors.NotNullViolation error.
• Resolved a server-crash issue related to an equality test.
• Resolved an issue where the Intermapper service may crash with a XExitProcess(11): Segmentation violation error.
• Updated to ensure the Check Now and Automatically check buttons only check for updates when on an older version.
• Updated the Intermapper Data Settings to allow email addresses with domains containing two periods.
• Resolved server crash issues related to packet count and IPMI router.
• Updated the More Probes button to ensure it opens the correct page.
• Check for Updates feature was resolved for Remote Access.

Back to Top

 

Powertech

---

BoKS Manager

Version 8.1 (version update)

January 13, 2025

Server s-8.1.0.14

New Features

• Added soft dependency checking.
• Option to start boks_sshd even when the native sshd service is running on a different port.

Fixes

• Fixed potential deadlock when reading/writing configuration data.
• autoblockusers blocks functional accounts.
• Host group modification time is not updated when a host is removed.
• kslog files in "maxage" directory are not parsed.
• Misleading warnings when restoring pre-8.1 backups.

Version 8.1 (version update)

January 13, 2025

Client c-8.1.0.20

New Features

• Added soft dependency checking.
• Check SELinux boolean value "authlogin_nsswitch_use_ldap".
• Increased timeout waiting for servm queue when Replicas start.
• New option 'log_login_module' added to bokspam.conf.
• Option to start boks_sshd even when the native sshd service is running on a different port.
• boksinfo now lists only local file system information.

Fixes

• Fixed potential deadlock when reading/writing configuration data.
• Fixed incorrect parameter details in Boot man page.
• BoKS sudo should not allow users to use '-s' if sudo_touserenv is set.
• kslog files in "maxage" directory are not parsed.

Antivirus

Version 6.3 (6.3.0 Powertech Antivirus Unix/Linux Endpoints)

January 8, 2025

New Features

• The on-demand scanner now supports multi-threaded scanning. On logical partitions and VMs with more than a single logical processor, this can lead to a pronounced reduction in scanning time. The number of scanning threads can be specified with the --scanthreads parameter, as well as by the corresponding setting in the Powertech Antivirus Server GUI (requires Powertech Antivirus Server version 6.3 or higher). By default, a single scanning thread is used, mimicking the behavior of the older versions. For more information, please see Knowledge Article: Multi-Threaded On-Demand Scans.

• Powertech Antivirus now uses the latest Trellix anti-malware engine, version 6700. New and improved functionality in the 6700 engine includes: normalization support for PowerShell scripts, increased coverage of MIME samples, performance improvements and vulnerability fixes, multiple bug fixes, as well as other minor feature enhancements.

• Reasons for skipping files are now presented in program output and scan summary.

• An option to enhance quiet output to include errors, skips and timeouts has been added.

Enhancements

• Tags for an endpoint can now be set when the endpoint is registered with Powertech Antivirus Server (requires Powertech Antivirus Server 6.3 or higher). To do so, specify the tags with the -t or --tags parameters when executing the registration script. Enclose the tags in single quotes, separating the tags with semicolons. Example: ./register.sh <other parameters> -t ’tag1;tag2;tag3’.

• On-access filesystem cache performance has been improved for the default case, where pruning is disabled.

• Performance was optimized for on-demand scanning on AIX in scenarios where on-access scanning is also being used.

• The avsvccfg command, which was used to configure the on-access scanning and which has been superseded by the more powerful avconfig command, has been removed.

• Security for the zlog component that is shipped with Powertech Antivirus has been hardened. Previously, a world-writable file, /tmp/zlog.lock, was used as a lock file for log file rotation. Now, the zlog.conf file is instead used. File permissions for log files have also been tightened. Note that for product upgrades to take advantage of these changes, it may be necessary to make manual updates to zlog.conf and zlog-avsvc.conf. For details, please see the Upgrading section of the product README.

• The delivery of scan termination events to Powertech Antivirus Server has been improved.

• Improvements have been made for memory management during archive scanning.

• Improvements have been made to the on-access scan queue and reconfiguration stability.

• Improvements have been made to signal handling in on-access service threads.

• The Fortra license agreement has been updated.

• The help text for the avconfig command now provides detailed information about how to specify the configuration file section and the configuration setting.

Fixes

• On-access service no longer outputs failure messages when a file scheduled for scanning is no longer available at scan time.

• On-access service shutdown and reconfiguration events are now logged at NOTICE level, which would go to syslog local5.notice with default configuration.

• On-access path validation for avconfig and avsvc has been improved for the case where a path does not currently exist. Unacceptable paths are now noted by avconfig , and logged by avsvc.

• Quarantine security has been improved for on-demand scans that are run under a non-root user.

• Invalid paths are now shown as errors in on-demand scan output.

• When the avupdate command is run on AIX and requires the curl or wget tool, it now additionally searches directory /opt/freeware/bin for those tools.

• The file transfer logs for the avupdate command are now created with more secure file permissions. The avscan and avupdate commands now inherit the system umask.

• The Linux on-access scanner will no longer inspect empty files encountered during file access interception.

• The zlog third-party component has been updated to include a fix for security vulnerability CVE-2024-22857.

Exit Point Manager

Version 8.03

January 13, 2025

Fixes

• If the FTP server exit point encountered an invalid *MEMOBJ rule, it failed to process any other rules correctly. This has been corrected.

• An error will occur in Exit Point Manager if a user-profile does not have both ADD and READ authority to itself. IBM documentation states that these authorities are required for normal system operations, and therefore Administrators should not remove these authorities. Exit Point processing will now detect if these authorities have been removed and issue an appropriate error message to QSYSOPR. The documentation has been updated to note this requirement.

• Collection of data for the Insite Good Morning Dashboard no longer uses a semaphore (a system level object) to ensure sequential processing. This may improve performance and stability.

• Certain non-printable characters (for example, the copyright symbol ©) were not handled correctly in text strings in SQL statements if the system locale was not set. This has been corrected.

• A correction has been made to the text for message LNS0702.

Back to Top

 

TeamQuest

---

Automated Analytics

Version 11.3.40

January 28, 2025

New Features

• Added a new integration with Fortra’s Network Monitoring solution - Intermapper.
• Updated Spring jars to version 6.1.14.

Enhancements

• Updated ActiveMQ to version 6.1.4.
• Updated Apache Tomcat version to 9.0.98.

PostgreSQL

Version 16.4

January 28, 2025

Enhancements

• Added support for Postgres level 16.4.

Vityl Monitor

Version 11.4.12

January 28, 2025

Enhancements

• Updated Apache Tomcat to version 9.0.98.

Back to Top

 

Titus

---

DCS for Windows

Version 5.1.1

January 23, 2025

Fixes

• Opening an Appointment/Meeting item in Office 2016 MSI edition no longer raises an exception

• Policy Alert Description Text can now be manually copied to the clipboard

• Recipient Alert UI now displays the invalid recipients when Force Remediate was false

DCS One

Version 2025.01

January 24, 2025

Fixes

• Fixed issue where HTML formatting configured in the Policy Manager was not being applied in Word Online and Excel Online for the "Content" parameter of the "Apply header/footer" action. HTML formatting cannot be applied to headers and footers in PowerPoint Online.

DCS Policy Manager (Cloud)

Version 2025.01

January 24, 2025

New Features

• You can now configure Schemas, Policies, and Configurations and publish a TCPG file for DCS for Data at Rest (DaR) in the Policy Manager. Read the following for more details:

  • If you are transitioning from the Administration Console, you need a new license to access the Policy Manager site. You can import a TCPG file that you published in the Administration Console but review the Policy Manager documentation for more information on known issues.

  • Policy Manager supports new “Add SharePoint managed metadata” and “Apply date offset” actions for DCS for DaR that are not available in the Administration Console.

• For DCS for Windows and DCS for DaR licensed users:

  • Added Predefined Matches that can be used in Content Validation Profiles. The resources are the same as the Library Matches in the Administration Console, but the names have been changed to provide more clarity on their use.

  • Added new CAD adapter information in published TCPG files.

  • Added support for publishing Microsoft Entra ID (formerly known as Microsoft Azure Active Directory) user groups data in TCPG files.

• For DCS for Windows licensed users:

  • Added new “Show Classification Information Bar Menu Text” App Setting (under Office Add-in Settings).

  • Added new “Number of Favorites to Show in the Ribbon” App Setting (under Favorites).

  • Added PowerPoint Windows support for the “Bookmark prefix” parameter of the “Apply advanced header and footer” action.

  • Removed “Use Microsoft Entra” and “Use Application Certificate to Authenticate” Microsoft Entra App Settings (under DCS System Settings).

Enhancements

• Improved TCPG file importing capabilities to include:

  • Conditions that include Schema metadata properties

  • Content Validation Profiles (imported as Content Scans in the Policy Manager)

  • RunContentValidation Dynamic Properties (imported as Run Content Scans Custom Condition in the Policy Manager)

• Updated from .NET 6.0 to .NET 8.0.

Fixes

• Fixed Target Group dropdown on the Publish Configurations page to display all user groups in an organization’s directory domain. In previous releases, no more than 100 user groups could be displayed.

Back to Top

 

Vera

---

Version 3.24.0

January 2025

New Features

• Mac Client

  • Digital Guardian Secure Collaboration (Vera) announces support for macOS Sequoia.

• SaaS

  • Multiple users can co-edit the SharePoint or OneDrive-hosted secured files using the OnlyOffice editor and push the edited secured files back to SharePoint or OneDrive.

  • Digital Guardian Secure Collaboration (Vera) announces support for the SMB3 protocol with the 3.24.0 release.

  NOTE: To use the SMB3 protocol, users must upgrade their existing connectors.

Fixes

• Fixed an issue where the Digital Guardian Secure Collaboration (Vera) tenant Graphical User Interface (GUI) failed to update the correct SharePoint credentials for SharePoint shares.

• Improved the security fixes.

End of Support

• Digital Guardian Secure Collaboration (Vera) announces the end of support for 3.22 with the 3.24.0 release. Users are recommended to update their clients to ensure smooth operations.

• Digital Guardian Secure Collaboration (Vera) announces the end of support for macOS Monterey for the Mac client by the 3.25.0 release.

Back to Top