Release Notes for Snare Central v8.0.0

Owned by Andrew Madge
Oct 09, 2019
1 min read

Snare Central v8.0.0 was released on 9th October 2019.

Snare Central incorporates the Agent Management Console (AMC), the v2.3.1 Reflector, and the v1.3.1 Snare Agent Manager (SAM).

If the threat intelligence component is active, version 6.7.2 of ElasticSearch is installed.

Overview

Snare Central version 8.0.0 is a port of version 7.5.0 of Snare Central to a new operating system base. Snare Central version 8.0.0 is broadly based on a hardened version of Ubuntu 18.04.2 LTS Server edition. Hardware that is compatible with the Ubuntu 18 kernel, is highly likely to work on version 8 of Snare Central.  In general, there should be very few effective differences between the two versions other than the updated OS packages and associated infrastructure.  Default configurations are modified in order to harden the operating system and applications. 

Differences between 7.5.0 and 8.0.0

  • CIS security settings applied by default to the installation. STIG hardening, and enhanced password controls can still be separately applied
  • The OpenVAS security auditing tool is no longer directly integrated into the Active Scanning: Port & Vulnerability Scan report, due to changes in the scanner, and XML output components
    • The full OpenVAS GUI and scanner is now available as a separate component from the "System" menu
    • The Active Scanning: Port Scan report, will continue to provide ping and port scans of configured hosts and networks
  • "Write ahead logging" has been turned off for the SQLite configuration settings datastore