Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.



Tip

Snare Agent Manager v2.0.1 was released on xxx June 2024.

...

Warning
titleImportant Recommendation


It is recommended to discover and
upgrade older Snare Agents to the latest version prior to upgrading SAM to version 2.0.1 or newer. 

Note: upgrading Snare Agent from versions earlier than 5.4.0 may require a 2-step upgrade. Please refer to the Snare Agent v5.8.0 Release Notes. 

Security Updates

  • SAM port used for Agents' connection now enforces HSTS SAMC-1298. Related to Support Case SSUP-959 / SSD-1519HSTS
  • 3rd party libraries upgraded: 
    • OpenSSL upgraded to version 3.1.SA-43295

New Features and Enhancements

  • Agents Policies Management (Agents > Agent Management > Agent Policies page):
    • Added new Unmanaged Agents group that will contain Agents whose configuration should not be managed by SAM. At this stage agents are assigned to this group automatically, but user can remove them as needed. SAMC-1324SAMC-1333 
    • A new checkbox Manage Master Agent was added in the Create and Update Group dialogsSAMC-1324SAMC-1340SAMC-1348
      This will allow user to explicitly determine whether the configuration of Snare Agent from which the master configuration is derived should be managed by SAM. 
      Note:
      • if Manage Master Agent is unselected (default for new groups), the Agent will be added to Unmanaged Agents group, and its configuration will not be managed by SAM. 
        This will allow easy local updates on Master Agent, which is useful as not all settings are editable in SAM yet. 
      • if Manage Master Agent is selected ((warning)use with caution!), the Master Agent will be removed from Unmanaged Agents group.
        From the next time the 
        Master Agent connects to SAM, its configuration will become remotely managed by SAM exclusively, meaning it will not be editable via Agent UI or local config anymore, even if the checkbox is unchecked in the future.
    • Added ability to delete an Agent from a groupSAMC-1306  SAMC-1307 SAMC-1332
      This may be useful for removal of disconnected agents. If the Agent connects again, it will be treated as a new Agent, and will be assigned to the first matching group again. 

      This can also be useful for removing agents from Unmanaged Agents group if needed.
    • Unsupported Agents group will now list Snare Agents in version range from 5.0.0 to 5.7.1, if such agents recently connected to SAM or were discovered via a network scan.
      This will serve as a reminder to upgrade these agents to be able to manage their configuration from SAMSAMC-1309SAMC-1253SAMC-1345
    • Improved validation of master configuration uploaded from JSON file . SAMC-1247
    • Improved on-screen message if Agents Policies Management is unlicensed SAMC-1162unlicensed

  • Audit logs will now be generated for SAM service start/stop operations SAMC-1265 
    On Linux (in Snare Central) admin activity events will be written into SAM log file
    On Windows, the following custom EventIDs will be added to the Event Log, under Windows Logs →  Application:
    • 2565 - Service started
    • 2566 - Service stopped
    • 2567 - Service paused
    • 2568 - Service continued
    • 2569 - Service shutdown
  • Agents > Unlicensed page will only list agents with unlicensed core feature, regardless of whether optional features are licensed. In previous versions Unlicensed page listed Agents that had at least 1 unlicensed feature, even if it is optional and not in useSAMC-1125SAMC-1299
  • The colour of the Agent's license icon is red if and only if the core feature is not licensed. If the core feature is licensed the license icon is green.  SAMC-1300
  • Added menu tooltips with item description displayed on hover SAMC-1294
  • Code quality and performance enhancements SAMC-933SAMC-1266SAMC-1283enhancements

Bug Fixes

  • Get master config functionality now supports connection to Snare Agents that are enforcing TLS 1.3 onlySAMC-1335 Related to Support Case SSUP-984 / SSD-1614
  • The option to generate a random Authentication Key on Settings > General page is now fixed. This did not work in version 2.0.0SAMC-1336 Related to Support Case SSUP-990 / SSD-1657
  • Fixed pagination failure on Agents pages when there are more than 34 agents to list. This did not work in version 2.0.0SAMC-1337 Related to Support Case SSUP-991 / SSD-1655
  • Fixed agent policy pagination control issue on small displaysSAMC-1310
  • Fixed false positive email alerts that could be sent even if licensing feature allowance was not exceeded SAMC-1196exceeded
  • Fixed the display of auto-assign status of a license on the Dashboard page, to match the auto-assign status set on the Registered Licenses pageSAMC-1289
  • Fixed the display of the starred Tags that were missing from the side menuSAMC-1305
  • Removed the expiry warnings from dashboard on removal of an expired licenseSAMC-1291SAMC-1341SAMC-1342
  • Fixed a typo in the settings update success messageSAMC-1287
  • Fixed console error that could occur on scroll-downSAMC-1344
  • Resolved CSS syntax warnings SAMC-1128warnings