Release Notes for Snare MSI v3.1.0

New Features and Enhancements

• Added support for creating MSI on FIPS-enabled machine. MSI package ,created on FIPS-enabled machine will be able to run on both FIPS and non-FIPS machines
• Added logging feature to create MSIBuilder.log file in the same directory. Also added new switch -d and if used then log output is also printed on console
• Allow running MSI multiple times on the same machine. In previous versions this was a limitation, and a new MSI had to be created to install or reinstall the Agent again

• Users that wish to deploy Microsoft Sysmon to Windows end points, side-by-side with Snare Agent, can now include both products in the same MSI package for easy deployment via Group Policy

  Sysmon is a 3rd party tool for System Monitoring that is not distributed or maintained by Intersect Alliance or Snare Development Team.

  Customer will need to download Sysmon themselves, and agree to its Terms and Conditions prior to packaging it with Snare Agent in MSI for deployment.

   While creating an MSI using the Snare MSI Builder, user will be prompted to: 

  • Choose whether to include Sysmon installation file, and if Yes, agree to Sysinternals Software License Terms
  • Select the Sysmon installer file to include in the MSI

  • Optionally select the Sysmon configuration file to include in the MSI

    When running the created MSI, Sysmon will be installed, updated or uninstalled together with Snare Agent, as per user choices. Sysmon will be uninstalled only if it was included in this MSI.
    Please refer to the User Guide for Snare MSI for further details. 

Bug Fixes

• Fixed "There is a problem with this Windows Installer package" warning message box when uninstalling MSI package from command line
• Fix for MSI Builder to correctly list installed Snare products
• Fix for MSI Builder to not show installed Snare Reflector in product list