Monthly Release Notes - July 2025
Alert Logic
Managed Web Application Firewall (WAF)
Version 5.2.3.0-2903
July 2, 2025
New Features
-
IPv6 support (Dual Stack - IPv4 required for management service)
Enhancements
-
Log new unauthorized content detected by CSP policy violations to deny log
-
Automatically update kernel-core package on non-autoscaling appliances
-
Set a default proxy name within the proxy object when adding a new proxy
-
Use ARN-specific WebACL names for DDoS protection in multiple WAFs
-
Upgrade nginx and sqlite3 while removing some dependencies
Fixes
-
Gracefully handle ALB/CF ARN not defined in the system configuration
-
Allow custom IP lists created with carriage return new lines
-
Resolve an issue where file upload iframe modal box was not properly closed
-
Fix OS commanding issue with * wildcard matching which could lead to false positive blocks
-
Fix virtual patch wildcard name value check
-
Resolve an issue with ACME certificate renew process not applied and remove .ca files
Boldon James
SharePoint Classifier
Version 3.11.3
July 9, 2025
Fixes
-
Fixed issue caused by Microsoft blocking users from adding custom scripts to pages on a SharePoint site:
-
SharePoint Classifier now only requires the SharePoint Add and Customize Pages permission when administrators are actively configuring SharePoint libraries. After configuration is complete, SharePoint Classifier does not require this permission for users to label files.
-
For initial SharePoint site configuration, enabling SharePoint Classifier for a new library, or setting up a quarantine library, the SharePoint Custom scripts setting must be temporarily set to Allowed for the respective site. Microsoft will automatically switch back to blocking custom scripts within 24 hours.
-
Digital Guardian
Analytics & Reporting Cloud
Version: 5.4.0
July, 2025
Fixes
-
Resolved this issue where link bindings reappeared after removal. Link bindings are now correctly and permanently removed once the edit is saved.
-
Resolved this issue where alarms were triggered incorrectly when an email address was included in Custom Data Values.
New Microsoft Outlook Add-in for Digital Guardian Agent
Version: 5.1
July, 2025
Fixes
-
Resolved an issue that prevented the new Microsoft Outlook Add-in from loading in legacy Outlook on Windows when the DG legacy Outlook plugin was disabled. This change affects only the Digital Guardian Windows Agent.
You can access the new Microsoft Outlook Add-in at the following URL:
https://cdn.fortra.com/digitalguardian/agent/outlook-addin/v5.1/
Agent for Windows
Version: 9.3.0
July, 2025
New Features
-
New functionality has been introduced in the Outlook plugin to prevent propagation of DG-X-Refxxxx email properties on mail items when sent from a DG protected mailbox. This feature removes DG-XRefxxx email properties from outgoing messages and meeting invites when they are sent, replied to, or forwarded. This applies to MSFT Outlook in offline mode and is recommended to be enabled if customers have encountered issues related to exceeding Outlook header quota limits.
To implement this, add the following settings to your `config.xml` file:
<dgxheaderOn>0</dgxheaderOn>
<DGXHeaderCleanupEnabled>1</DGXHeaderCleanupEnabled>
Fixes
-
Resolved a BSOD issue caused by a null check on the Window Title rule property.
-
Resolved an issue causing DG to capture non-DG exceptions from the DG monitor applications.
-
Resolved an issue to improve retrieval of the DG rule properties for the windows supported browser’s address bar and windows title.
-
Resolved an issue where Firefox became unresponsive when switching between browser tabs.
-
Resolved an issue where the copying and pasting content multiple times did not work as expected in the Google Chrome browser.
Document Management (RJS)
Webdocs
Version 2.2.1
July 21, 2025
New Features
-
Added support for Microsoft's Azure SQL Database.
-
Addtional authentication providers supported in installer.
-
-
Workflow Additions
-
New Download document button on the workflow details page.
-
New Delete document button to the workflow details page.
-
Freeze inbox, fixes the headers to the top of the screen on the workflow inboxes so that while scrolling down, the information is always visible to the user.
-
Users can now modify the document type, folder, expiration date from the Work Inbox feature.
-
Users can now update the document from the workflow screen without advancing the workflow.
-
Admins can show/hide columns on the inbox definition as well as adjust the column order.
-
New default sort to the inbox definition dialog.
-
Sorted the reassign owner list on the inbox reassignment dialog.
-
Document may optionally be automatically moved to a new route when it expires via Route Expiration setting in workflow definition.
-
Document may optionally be automatically canceled on its current route when it expires via Route Expiration setting in workflow definition.
-
-
Added new REST APIs and Events for Routing
-
REST API to retrieve Workflow steps given the unique ID.
-
REST API to allow users to be added to Workflow Steps.
-
REST API to allow users to be removed from Workflow Steps.
-
REST API to provide lookup of all Routes for a Document.
-
Added User Logon Name to the REST Event handlers User object.
-
REST Event for Take/Give Route ownership actions.
-
Enhancements
-
Added document upload button to viewer control on document details.
-
Added pagination to Orphaned Document page.
-
Added pagination to Orphaned Document purge service for better efficiency of large data sets.
-
Updated install guide.
-
Removed New Refresh Token Created message from dmActivity messages.
Fixes
-
Fixed issue where folder dropdown on document detail page could throw runtime error under specific permission configurations for non-admins.
-
Fixed issue where route expiration process could reprocess the same expiration multiple times.
-
Fixed issue where Full Text indexing could crash service under certain conditions with specific scanned PDFs.
-
Fixed issue where REST API could lock a document in write mode when a user downloads it for a very short period of time.
-
Fixed issue where annotations dialogs could appear offscreen or too large or possibly shift the buttons off screen.
-
Fixed issue where Self-Registration page would not load due to incorrect license restriction.
-
Fixed issue where moving an annotation did not always trigger the save button to be active.
-
Fixed issue where saved searches with a date range specified were not always loading correctly in the UI after selection.
-
Fixed issue where a blank Language cookie could cause the web page to not load completely.
Fortra
Fortra platform
July 2, 2025
New Features
-
Added Email Templates management service.
-
Added ability to view and enable/disable Identity Providers.
Enhancements
-
When an Event Fusion Center solution is provisioned, there is now a toggle to 'Show in App Switcher menu'. The default is enabled.
-
Added new 'All Accounts' filter for system tenant users.
-
Removed Tenant level from left menu in Platform Manager.
Fixes
-
Fixed issue with reauthenticating after session expiration.
-
Updated wording for clarity in platform generated emails.
-
Resolved security vulnerabilities and minor bug fixes.
GoAnywhere
GoAnywhere MFT
Version 7.8.1
July 15, 2025
Enhancements
-
Improved performance with Fortra Threat Brain integration.
-
Improved memory efficiency of Antivirus audit logging.
-
Improved memory cleanup for transfers to and from the SFTP server.
-
Added OAuth support for SMTP Resource and Send Mail task.
-
Added option to allow Documents folder to be exempt from File Restrictions automatically.
-
Added support for Vertical Compression for PeSIT client and server.
-
Enhanced the database switch process to allow for advanced configurations prior to the initial database connection attempt.
-
Excluded commons-configuration library.
-
Removed setting of the Transfer ID (PI-13) from the PeSIT Receive Task.
Updates
-
Updated Tomcat from version 9.0.102 to 9.0.107.
-
Updated commons-fileupload to version 1.6.0.
-
Updated commons-beanutils from 1.9.4 to 1.11.0.
-
Upgraded Azure blob storage SDK from 12.23.0 to 12.29.0.
-
Updated GoJS license key.
-
Updated the Transfer ID generation for PeSIT File Templates and project tasks to include IDs up to 16,777,214.
Fixes
-
Fixed an issue that occurred while uploading/downloading files having special characters in the name.
-
Fixed an issue with Global IP Filter's Test Address feature returning incorrect results.
-
Fixed an issue where LDAP authentication could continuously fail due to a stale connection.
-
Fixed an issue "no such method" with Amazon S3 Buckets using STS.
-
Fixed an issue with custom email templates so they support all UTF-8 characters.
-
Fixed an issue where duplicate emails could be configured by Admin or Web Users when configuring their GoAnywhere One-Time Password email. This remediates CVE-2025-3871.
-
Fixed an issue where 403/404 errors that occurred when listing files/directories using Amazon S3 file syntax returned an empty listing. Exceptions are now propagated.
-
Fixed an issue where the PeSIT Send File and Send Acknowledgement tasks wouldn't allow you to configure a Transfer ID greater than 8,388,607.
-
Fixed an issue that produced a 500 error within the IP Filter page when you searched an IP address and attempted to delete the searched IP.
-
Fixed an issue where the IP Filter Search returned inaccurate results.
-
Fixed an issue where the SFTP Server would fail if the upload directory was not created prior to upload.
-
Fixed an issue with support bundle permissions.
-
Fixed an issue with GACMD when invoked on an IBM JVM.
-
Fixed an issue with the warning messages on the Threat Brain Settings and Automatic IP Blocklist pages when the Threat Brain feature is enabled.
-
Fixed an issue within the SFTP Service where multiple rekeys could occur back to back in certain situations.
-
Fixed an issue where the PI-13 value was missing during some scenarios when using the PeSIT Service and a Send File template.
-
Fixed SFTP Resources experiencing intermittent End of File errors.
GoAnywhere Agents
Version 2.4.1
July 15, 2025
Enhancements
-
Added OAuth support for SMTP Resource and Send Mail task.
Updates
-
Upgraded Azure blob storage SDK from 12.23.0 to 12.29.0.
Fixes
-
Fixed an issue when sending a file to an Agent and the destination file system fails to successfully write the data it could cause corrupt data in the file.
-
Fixed an issue where sending a file to an Agent could result in file corruption if the destination file system failed to write data successfully and auto-resume was triggered.
Intermapper
Version 6.6.4
July 15, 2025
Enhancements
-
Upgraded PostgreSQL to 10.23.
-
Added enforcement for strict transport security (HSTS).
-
Resolved issue where map color is not consistent with the devices status.
Fixes
-
Resolved an issue where the device icon may not update its color due to a change in status.
Powertech
BoKS Manager
Version 8.1 (version update)
July 15, 2025
Server s-8.1.0.17
New Features
-
New parameter for modifyUser: createDirectoryHost. Note that this is not yet supported in BoKS Web Services Interface. Support for this will be added in a future release of BoKS WSI.
Updates
-
The BoKS Integrity Check has been deprecated.
Fixes
-
boks_master failed to start because of gzipped file in $BOKS_var/blogr.
-
blogrd and blogsd might dump core in signal handler.
-
hostadm -l -G dumps core if host doesn't exist.
-
Failing to connect to external syslog server causes audit log queue build-up and duplicated messages.
-
brssetup does not set no expire for user and password.
-
pgrpadmin didn't detect use by SUDO rules.
-
bccasd should not use wildcard matching when not intended.
Version 9.0.0.0
July 14, 2025
Updates
-
Server Agent package for Red Hat EL 8 s390 is published.
BoKS Reporting Services
Version 8.1.0.8
July 3, 2025
Updates
-
Java 21 is now required. Note that Java 21 is not supported on Red Hat EL 7 and Centos 7, which are no longer supported platforms for BoKS Reporting Services. See the KB article "Reference: BoKS Version and OS Support Matrix" for information on supported platforms.
Fixes
-
Fix for setting brsTmpDir has no effect any more. Default location is /var/opt/brs/tmp.
-
Fix for brsuserpwd does not update password history, making password expiration not work when using the program.
-
Upgraded security dependencies.
NOTE: For more information, including CVE references for fixes, see the README file.
Antivirus for IBM i
Version 8.13
July 1, 2025
Enhancements
-
The product has been updated to use the latest Trellix 6800 Anti-Malware Engine, which includes the following new features:
-
Fixed multiple bugs and security vulnerabilities.
-
Decomposition support for Virtual Hard Disk (VHD) files.
-
Repair enhancements for infected Excel spreadsheets.
-
Quality improvements and malware threat enhancement.
-
-
Additional security-related information has been added to the User Guide.
-
The F1 help for the Change *ALLOBJ Profile (AVCHGAO) command has been updated to include the following requirement: If TOTP authentication is enabled for the partition and for the designated All Object profile, function usage for function ID QIBM_RUN_UNDER_USER_NO_AUTH must not be set to *DENIED. This function ID was added in IBM i 7.6.
-
The Installation Guide has been updated to warn that IBM i TOTP authentication should not be enabled for the product profile STANDGUARD. The TOTP authentication was introduced in IBM i 7.6.
-
The anti-ransomware section in the User Guide has been expanded with additional useful information.
-
Documentation for the "Configure Anti-Ransomware Options" menu item in the Anti-Ransomware menu, which was added in release 8.12, has been added to the User Guide.
Fixes
-
Credentials used for the FTP transfer method are now stored in a secure manner.
-
The help text for the Change AV On-Access Attributes (AVCHGA) command now specifies the correct unit of measurement (seconds) for the Timeout parameter.
Robot
Performance Navigator
Version 19.07
July 2, 2025
Enhancements
-
This version is compatible with IBM OS 7.6.
-
The list of pool names has been enhanced for several memory graphs.
-
Enhanced the Power Analytics > Disk / Library / IFS Analysis > Why is disk growing? (over time) > By Library option for users who are regularly running RTVDSKINF on their systems.
-
Restructured and simplified some items in the Graphs and Reports menus.
-
The What If? footnote now takes multiple ASPs into account when calculating disk total and percent full.
-
Temporary storage graphs utilize newer fields in Collection Services to provide a more accurate view.
-
A report set called ServiceLevelCSVs is now distributed to provide users with a blueprint to automate the creation of Service Level CSV files.
-
Entering any type of License Expiry Code will now initiate the display of Fortra's License Agreement.
-
GO MPGLIB/PERFNAV, option 7 now has a refresh option available via the F5 key.
-
The following new graphs have been made available:
-
Graphs > Service Level > Disk Response Time Trend / ASP 1
-
Graphs > Service Level > Disk Response Time Trend / Other ASPs
-
Graphs > Current Day > Users > Specific User > Current User ODBC
-
Graphs > Current Day > Specific Job > CPU% Top Current Users
-
-
As Disk drives can be so fast, Disk Response Time has been amended to show 3 decimal places on the Daily Health Check.
-
Graphs > Current Day > Specific Job > Number of Jobs now includes “Main Thread” and “Secondary Threads”.
-
Performance Navigator's nix version now includes the latest version of njmon.
-
Help text has been added to the Performance Navigator commands on the IBM i.
Fixes
-
Miscellaneous bug fixes.
-
The MPG YouTube page has been deleted. Please refer to the User Manual, the Support Portal, or the Fortra YouTube channel.
Terranova Security
Version: 1.114
July 17, 2025
Enhancements
-
The platform previously used the Froala Text Editor for features such as the Email Template Editor, Course Certificate, Environment Home Page Message, Home Page Title, Login Page Message, and Slogan, while the TinyMCE Text Editor was used for the Phishing Template Editor and Phishing Simulation Builder. Both editors have now been completely replaced by a new Text Editor.
-
New validations were introduced for user deletion. When a group deletion is in progress, a message is displayed to all admins, and both the deletion and upload of users are blocked for all admins to ensure the ongoing deletion process is not interrupted.
-
The “User List” standard report has been updated to include a new column and filter named Role.
Fixes
-
There was an issue where the total number of users displayed in the “My Courses” screen did not match the count shown after accessing a specific course. This issue has been resolved.
-
There was an issue where the Gmail Phishing Add-in configuration tab was nested under the Microsoft 365 tab instead of appearing as a separate tab. This issue has been resolved, and both tabs are now displayed separately as intended.
-
Recently released templates were displaying an incorrect and older creation date instead of the actual date they were created. This issue has been resolved.
-
An issue caused deactivated users to still appear in the phishing simulation list, which should have automatically updated based on user status. This issue has been resolved.
-
There was an issue where HTML attachments in phishing simulations were displaying a blank white page. Even when templates were customized with images and text, the HTML attachment would not render correctly. This issue has been resolved.
-
There was an issue in continuous simulations where users received "Phishing Simulation - Failed" emails that listed actions they had not performed, particularly on subsequent days. This issue has been resolved to ensure that only actual user actions are reflected in the emails.
-
There was an issue where some user accounts appeared as deactivated without any action from the user. The logs wrongly displayed that the user made these changes. This issue has been resolved.
Titus
DCS Policy Manager (SaaS)
Version 2025.07
July 18, 2025
New Features
-
Added support for customer option to use DCS Policy Manager (SaaS) in the Fortra Platform.
-
If your company already uses DCS Policy Manager (SaaS) and is interested in Fortra Platform integration, contact Fortra to ask about additional onboarding steps.
-
The DCS Console login page now includes a “Login with Fortra” button for customers integrated with the Fortra Platform. Customers that are not integrated with the Fortra Platform should continue to select the “Login with Microsoft” button.
NOTE: If integrated with the Fortra Platform, you cannot use the Configuration Targeting feature in this release. -
-
For DCS for Windows:
-
Added “Email > On open” event that occurs when a user opens a received message or calendar item.
-
Added “Email > On check policy” event that occurs when a user clicks the “Check Policy” button in a message or calendar item. To use this feature, you must enable two different App Settings. You must enable the button in the “Check Policy Settings” group, and you must enable the Options Ribbon in the “Ribbon Settings” group.
-
Added “Enable justification” setting for Schema Fields in the “Field behavior” tab. Enable this setting if you want users to justify why they are updating classification values.
-
Added “Retain fields” parameter for the “Apply advanced header or footer” action. This feature allows you to retain selected Microsoft Word fields if you enabled the “Remove markings” parameter.
-
Added “SharePoint Interoperability” App Settings under “Office Add-in Settings” group. Classifying documents with DCS for Windows adds custom document properties. Classifying documents in SharePoint adds document server properties. If your organization has classified Microsoft Office documents in SharePoint and other repositories, use this feature to warn users and resolve metadata conflicts if the DCS custom document properties differ from the SharePoint document server properties.
-
Added “Attachment.Metadata” audit properties selection option under the “DCS Audit Settings” App Settings group.
-
-
For DCS for DaR:
-
Added “Set custom property” action. This feature allows you to add or modify a custom property for files during a DCS for DaR scan.
-
Added “DaRImport” Schema Mapping Namespace selection option for a DCS for DaR Import Scan. DCS for DaR will support the Import Scan feature in a future release.
-
Enhancements
-
Updated the “Documentation” page to open in a new tab.
-
Updated the “Apply subject label” action to also support the “Email > on classification change” event.
-
Updated the display names of the Data Detection Engine custom conditions to change the cloud term to “SaaS” and the on-premises term to “customer-hosted.”
-
Updated HTML Editor alignment formatting to fix visual markings issue.
-
Updated the “Company” value in published TCPG files to display the customer domain instead of “HelpSystems”.