Release Notes for Snare MSSQL Agent v5.2.0

Security Updates

• Update for OpenSSL to patch to OpenSSL-1.0.2p.
• Removed non-secure ciphers usage, according to the OWASP broad compatibility list.

Bug Fixes

• Fixed intermittent locking issue when stopping the MSSQL service from the Service Control Manager.
• Fixed the memory management issue to prevent high memory usage on busy SQL server machines.
• This change affects the warning messages that are display when protocol for destination is set to TCP or TLS for web UI port 6161 as it can slow down the agent receiving log messages, which will be ignored on the web interface. In high volume environments the agent may appear to hang as a result. As it is not a recommended configuration this will now show as a warning if the agent is configured in this way. In general sending logs to the localhost is only used for testing and only used when its UDP protocol so the logs are discarded. Any real destination should use a real hostname or IP address and not localhost. This change does not affect any other functionality.