Release Notes for Snare Agent Manager v2.0.1

Security Updates

• SAM port used for Agents' connection now enforces HSTS
• 3rd party libraries upgraded: 
  • OpenSSL upgraded to version 3.1.5

New Features and Enhancements

• Agents Policies Management (Agents > Agent Management > Agent Policies page):
  • Added new Unmanaged Agents group that will contain Agents whose configuration should not be managed by SAM. At this stage agents are assigned to this group automatically, but user can remove them as needed
  • A new checkbox Manage Master Agent was added in the Create and Update Group dialogs
    This will allow user to explicitly determine whether the configuration of Snare Agent from which the master configuration is derived should be managed by SAM. 
    Note:
    • if Manage Master Agent is unselected (default for new groups), the Agent will be added to Unmanaged Agents group, and its configuration will not be managed by SAM. 
      This will allow easy local updates on Master Agent, which is useful as not all settings are editable in SAM yet. 
    • if Manage Master Agent is selected (use with caution!), the Master Agent will be removed from Unmanaged Agents group.
      From the next time the Master Agent connects to SAM, its configuration will become remotely managed by SAM exclusively, meaning it will not be editable via Agent UI or local config anymore, even if the checkbox is unchecked in the future.
  • Added ability to delete an Agent from a group
    This may be useful for removal of disconnected agents. If the Agent connects again, it will be treated as a new Agent, and will be assigned to the first matching group again. 
    This can also be useful for removing agents from Unmanaged Agents group if needed.
  • Unsupported Agents group will now list Snare Agents in version range from 5.0.0 to 5.7.1, if such agents recently connected to SAM or were discovered via a network scan.
    This will serve as a reminder to upgrade these agents to be able to manage their configuration from SAM
  • Improved validation of master configuration uploaded from JSON file
  • Improved on-screen message if Agents Policies Management is unlicensed
  • Added a warning message on the Agent policies page, in the group details section, if an overlapping group is created
  • Removed "Master Configuration" tab from default Agent Policy groups where it is irrelevant
    
    
• Audit logs will now be generated for SAM service start/stop operations
  On Linux (in Snare Central) admin activity events will be written into SAM log file
  On Windows, the following custom EventIDs will be added to the Event Log, under Windows Logs →  Application:
  
  • 2565 - Service started
  • 2566 - Service stopped
  • 2567 - Service paused
  • 2568 - Service continued
  • 2569 - Service shutdown
    
• Agents > Unlicensed page will only list agents with unlicensed core feature, regardless of whether optional features are licensed. In previous versions Unlicensed page listed Agents that had at least 1 unlicensed feature, even if it is optional and not in use
• SAM will now accept connections from Snare Agents on the hosts that have an underscore "_" in their FQDN
• The colour of the Agent's license icon is red if and only if the core feature is not licensed. If the core feature is licensed the license icon is green
• Added menu tooltips with item description displayed on hover
  
• Code quality and performance enhancements
  

Bug Fixes

• Fixed issue where SAM would get into deadlock on unstable networks where connection would drop before start of connection completed
• Fixed the IP Regex filter for Agent Policy group
• Get master config functionality now supports connection to Snare Agents that are enforcing TLS 1.3 only
• The option to generate a random Authentication Key on Settings > General page is now fixed. This did not work in version 2.0.0
• Fixed pagination failure on Agents pages when there are more than 34 agents to list. This did not work in version 2.0.0
• Fixed agent policy pagination control issue on small displays
• Fixed false positive email alerts that could be sent even if licensing feature allowance was not exceeded
  
• Fixed the display of auto-assign status of a license on the Dashboard page, to match the auto-assign status set on the Registered Licenses page
• Fixed the display of the starred Tags that were missing from the side menu
• Removed the expiry warnings from dashboard on removal of an expired license
• Fixed a typo in the settings update success message
• Fixed console error that could occur on scroll-down
• Resolved CSS syntax warnings