Release Notes for Snare Agent Manager v2.1.0

Security Updates

• 3rd party libraries upgraded: 
  • OpenSSL upgraded to version 3.2.0
  • Boost upgraded to version 1.84.0
• Replaced usage of deprecated OpenSSL functions with appropriate alternatives.
  The changes are related to certificates handling, RSA signing, hashes, signature generation and verification during licensing and remote upgrade.

New Features and Enhancements

• Agents Policies Management (Agents > Agent Management > Agent Policies page): 
  • Agent Policy Management Groups may now contain up to 255 distinct IP Filters
  • Network Destinations can now be added, edited and deleted in the Master Configuration tab
  • File Destinations can now be added, edited and deleted in the Master Configuration tab
  • Audit Policies for Windows, Windows Desktop and WEC Agents can now be added, edited, deleted and reordered in the Master Configuration tab
  • File Access Monitoring (FAM) policies for Windows, Windows Desktop and WEC Agents can now be added, edited and deleted in the Master Configuration tab
  • Registry Access Monitoring (RAM) policies for Windows, Windows Desktop and WEC Agents can now be added, edited and deleted in the Master Configuration tab

  • Web UI HTTPS Certificate ID is now managed from SAM if set in the Master Configuration

    If the Web UI HTTPS Certificate ID value is set, the managed Agents will attempt to use the certificate with this thumbprint. The Agent may show the "Out of Date" status in SAM if the certificate with this thumbprint is not installed on the machine.

    Please set this value to empty in the Master Configuration if you wish managed agents to keep using their own self-signed or CA-signed certificates.

  • Agent details will now properly use ISO 8601 date-time for Last Seen and Last Updated fields within the user interface.
    Agents already in groups will have these fields updated during the polling of Agent Policies as they connect or update configuration respectively.
  • Added Mutual TLS (mTLS) protocol option in Network Destination configuration in the Master Configuration tab
  • Improved error message for fetching master configuration when password is required
  • Left and Right panels are now resizable
• Snare Agent Manager now allows setting of an inactivity delay of 1 day.
  Snare Agent Manager reduced licensing grace period for licenses issued to be relative to inactivity delay (inactivity delay + 2 days).
  Snare Agent Manager now automatically prunes agents from Agent Policies that have not connected for configuration purposes according to inactivity delay.
• Added case-sensitive search option on Agents pages
• Added new setting under Settings > General > SAM Logging Options. This option can be used to set the logging level for SAM
• Removed hardcoded '+10:30' from the Local Time option of the Last Seen Starting / Ending filters on the Agents page
• Minor error logging improvements

Bug Fixes

• Agents Policies Management (Agents > Agent Management > Agent Policies page): 
  • Fixed the issue where hyphen was not accepted as valid character in editable Master Configuration fields accepting FQDN, such as SAM IP, IP/Hostname for network destination
• Fixed the issue where the expiry date of the license issued by SAM to the Agent was not incremented daily
• Fix to ensure the agent license cache allocates only known licenses and that deleted agents have their agent license cache entries removed
• Change of hostname will now be reflected in SAM, and Agent record will be updated when the Agent re-connects to SAM with the new hostname
• Fixed issue where network scans weren't progressing through the list of passwords
• Appended "Desktop" for Snare Agent Desktop release to distinguish between Windows and Windows Desktop Agents on Upgrade page
• Updated description of the Authentication Key on the General Settings page to replace mentioning of the 'Replace Key' with 'Update' button
• Fixed issue where agents that were formerly using standalone licenses, were not acquiring managed licenses from Snare Agent Manager
• Use full path to specify agent license cache file location
• Fixed text overflow in sidebar when filter is pinned to sidebar of SAM GUI
• Improved error handling when remote configuration is disabled or not licensed in SAM

User Guide

The following is an offline version of the User Guide related to this release.

For an up-to-date version refer to the online version here.