Libraesva ESG v5.0: Release Notes – LibraCyber - Help Center

Table of Contents

Main features of version 5.0

New modern web interface, with dynamic responsive dashboard and highly detailed scan result report
Message classification through new message badges: phishing, bulk, spoofing, BEC, malicious, etc…
Adaptive trust engine improvements: UI representation of historic data, improved AI
Advanced analysis result with Risk Confidence and Spam Confidence indicators
Unified Advanced search, a single place to search rejected and accepted messages
New Reports that can also be exported as PDF
Unified TLS management, allows certificate validation, rapid renewal and service assignment from a single page
LDAP sets can be managed in groups, to allow flexibility when merging user information from different tenants

Version 5.0.31 (Sep 16, 2025)

Security

Mail scanner: fixed CVE-2025-59689
System upgrade: new upgrade system with asymmetric signature validation and encryption
Passwordless: removed old authentication systems (may need re-login)
API authentication: removed old authentication systems (may need re-login)
Remote support: removed the old remote support connection via port 25

Version 5.0.30 (Aug 29, 2023)

Security

ClamAV: upgrade to version 0.103.10

Version 5.0.29 (Aug 21, 2023)

Security

Quicksand: add RAR archive reconstruction on sanitization
ClamAV: upgrade to version 0.103.9

Version 5.0.28 (Mar 13, 2023)

Security

QuickSand: block attachments in archive when unzip size is greater than 150MB

Version 5.0.27 (Feb 21, 2023)

Security

ClamAV: upgrade to version 0.103.8

Version 5.0.26 (Oct 17, 2022)

Security

Improves RBL detection sub-domains below 3rd level
Quicksand: improves www-links detection in PDF
Update bitdefender license

Bug fixes

Oulook add-in: remove reference to a deprecated API call

Changes in v5.0.25 (Sep 05, 2022)

Improvement

Add forward compatibility for Clamd configuration of ESG > 5.1
System upgrades: show estimate time in advance and use animated progress bars when upgrade is active

Bug fixes

Whitelist: fix javascript validation in some complex situation
Export no longer generate errors if executed by read-only or quarantine admins

Changes in v5.0.24 (Aug 08, 2022)

Security

ClamAV: upgrade to version 0.103.7

Bug fixes

Mail Logs Real-Time View: stop real-time view on logout to avoid DoS
System Upgrade: fixed prefetch of all packages before upgrade
Increased timeout for quarantine report generation
Associate delivery to the most recent MTA message id, to avoid issues on high-traffic instances
Automatically apply and reload Mail Scanner configuration when changing Mail Intercept configuration and Attachment Filters
ESG 4.x migration: reset cache after Adaptive Truste Engine import
DKIM Signing: fixed generation of DKIM keys

Changes in v5.0.23 (Jul 20, 2022)

Security

URLSand: handle URI with a protocol name containing special chars

Improvements

Show a custom "410 gone" page for all quarantine action URL no longer available on ESG 5.x
File replication: send email notification also when SSH connection repeatedly timeouts
TLS certificates: show expiration date of active certificates

Bug fixes

Mail log: strip invalid UTF-8 character from security report and spam report
Web UI: fixed removal of Passwordless Authorized Devices
make sure graymail plugin is restarted on database reload
Quarantine settings: immediately apply per domain customization of language
Local RBL: make sure statistics are updated only on primary node
ESG 4.x migration: reset file permissions after quarantine import
Domain admin: allow domain names up to 256 character
Backup/Restore: avoid errors if quarantine files changes during a hot backup
Prevent creation of new domain admin password (see upgrade to version 5.1)
Update documentation of Whitelist and Blacklist import

Changes in v5.0.22 (Jul 05, 2022)

Security

Defend against file extension evasion techniques targeting Windows machines

Improvements

Backup Tools: add User Messages to “configuration” backup

Bug fixes

Properly enable all the service after licence upload if the previous was expired
Import 4.9: apply dkim configuration after import
Content Filtering Rules: correctly apply modifier for “regex” filter expression
Search: fixed “not equel” operator on “Delivery status” field
Threat Remediation: permit multiple connector on the same domain with Zimbra mail server
Backup Tool: fixed restore of manually-uploaded certificates
Valid Recipient: properly check duplicate during text import

Changes in v5.0.21 (Jun 15, 2022)

Security

Update kernel to release 5.4

Improvements

Cluster: improved auto-recovery procedure for updates on message tables
Cluster: added popup to better explain Hard Reset behaviour
Quarantine Digest: speed up digest email retrieval
User Management: show Quarantine Action in user details popup

Bug fixes

Always use MTA configured double-bounce address for Dynamic Verification test
Quarantine Test: show all address and domain owned by the User
Quarantine Digest: always generate the report for all hours, even if the previous job is not completed
Quarantine Digest: skip users with invalid data
LDAP Import: honor user configuration for quarantine recipient (regression in 5.0)

Changes in v5.0.20 (May 23, 2022)

Security

Update operative system to upstream RHEL version 8.6

Improvements

Automatically reboot appliance after Time Zone changes
Adaptive Trust Engine: improved speed of Trust score algorithm
Sort domains alphabetically in the drop-down selections

Bug fixes

Fixed Delete action from View Body page
Email Continuity: fixed reply action
SMTP Auth SASL: removed un-supported CRAM-MD5 mechanism
Quarantine Retetion: restore cleanup of Database data according to its retention
Message Details: limit ATE graph history to database retention
Properly identification of First Time Sender for messages with multiple headers X-Envelope-From
Google Workspace: fixed login when user doesn’t exist yet

Changes in v5.0.19 (May 09, 2022)

Security

Quicksand: identify suspicious action write+execute without autoexec
SAVAPI: upgrade to version 4.15.7
ClamAV: upgrade to version 0.103.6

Improvements

MailScanner Engine: preload license options on batch start to reduce overhead
Reordered and randomized scheduled tasks to distribute and avoid spike of resource usage
License Count: cleanup BATV from accounted addresses

Bug fixes

Whaling: fix identification of whales for related (alias) domains
Backup Download: Increased timeout for very large backups
ESG4 migration: keep domain admin without credentials but quarantine report enabled
Per Domain Mailbox Use: fix domain license count
Quarantine Disk: fixed cleanup of duplicated data
Cluster Setup: prevent error on scheduled task start
Graymail: ignore messages without from header
Network Setting: allow DNS change on cloud appliance
Spam Engine: reduce cache timeout of result for messages with the same hash
Address Rewriting: properly save “Rewrite Header” options

Changes in v5.0.18 (Apr 19, 2022)

Improvements

Web UI: faster visualization of navigation tabs
Skip whaling check when scan mode is “virus only”
Message details: add warning for failed SPF beside whitelist result label
Relay: don’t use pop-ups to notify saved changes

Bug fixes

User Messages: preserve active tab when changing language or domain
URLSand: always executes HTML analysis, even when preliminary tests have found no A-tags
First setup: remove special chars from generated company short name

Changes in v5.0.17 (Apr 11, 2022)

Improvements

System memory: improve speed by avoiding swap area as far as possible
System upgrade: add user-friendly message when uploading invalid upgrade file
Web UI: enable sorting in Valid Recipients List, Whitelist, Blacklist, User Manager and Whaling.

Bug fixes

G Suite integration: continue import in case one or more user failed to import
M365 Authentication: add openid scope
Saved Search: restore delete funcionality
Whilist/Blacklist: display invalid email errors
TLS certificates: avoid permission error when generating CSR certificate
Cluster: disable job replicator on destroy
Quarantine digest: hide “send” button when there are no messages to notify via email
Database logger: prevent automatic stop during log rotation

Changes in v5.0.16 (Mar 29, 2022)

Improvements

add “System Upgrade” page to allow manual upgrade to next releases
improved message in error pages (e.g. 403)
improved message logging from ESG application

Bug fixes

Antispam settings: correctly show as customized domain
correctly log graylisted email when only some of multiple recipients cause the delay
fix missing logo when not using the default one
remote syslog: fix a duplicated configuration on apply
Restore description of SPF exceptions in the Web UI
fix TLS certificate file removal
FTP backup: remove double appliance name prefix from admin notices
licensing: allow setting aliases to username without explicit domain
ESG4 migration: avoid connection timeout when migrating huge appliances
ESG4 migration: restore letsencrypt renewal files from previous version if missing

Changes in v5.0.15 (Mar 14, 2022)

Security

protect backups from un-authorized access
add DNS lookup to esvalabs when IP is blacklisted for DoS attempt

Improvements

upgrade parser of PDF documents
Upgrade Letsencrypt certbot
Dashboard: cleaner cluster status box in dashboard
Halves memory usage of web server scripts
Graylist plugin: add inline documentation
IspMonitorController: up to 6x faster requests to remote server (also prevents timeouts)
ESG4 migration: reduce memory usage for xlarge appliances

Bug fix

Smarthost: use most specific configuration when mixing domain based smarthost and default smarthost
User text import: replace variable HOST URL with value configured in quarantine report
Quicksand: fix disarming of external resources in office documents
Policy quota: prevent duplicate names in webui
Logs rotation: use signals to restart database email writer daemon
Upgrade from ESG 4.8: fix a version conflict which may block the upgrade

Changes in v5.0.14 (Mar 07, 2022)

Features

Country Policies: configurable policies to allow/block web interface access from specific countries (see also Geo-Blocking)

Improvements

Backup/Restore: increase timeouts to accommodate huge backups
Valid recipient import: reword web interface to improve UX
SNMPd: inline help for available custom OID
Details: show quicksand result even when running in dry-run mode
LetsEncrypt: update certbot

Bug fix

Cluster file replica: removed a memory leak (may free up to 1GB RAM)
Details: show “not analyzed” status of quicksand and URLSand
Shutdown sequence: ensure all logging is stopped before storage unmount
Log to database email delivered via internal relay service (i.e. fix messages left in active state in the UI)
Improve UI when changing option “block email on attachment removed”
Viewmail: properly identify attachments filenames if defined in MIME Entity headers
Threat Remediation: always try the recall for all recipients, and log failure tentative
Disabled password-less login when domain authentication is configured to “No Access”
Message Detail: fixed report parsing for Deutsche language
Use native select in popup to show more field validation errors
SNMPd: prevent usage of reserved community name “public”
Release request: better feedback on MTA transport errors
Relay test: change user feedback on invalid email
Logwatch: remove some noisy unmatching logs

Changes in v5.0.13 (Feb 22, 2022)

Security

ClamAV: upgrade to version 0.103.5 LTS
Block aggressive bulk email even when Graymail plugin is disabled
(notice: unaffected to PwnKit security issue)

Improvements

Asynchronous system upgrade, which can now be easily and safely called from web-ui and system cron jobs
Asynchronous application of MTA settings to improve service stability and reliability
Periodical cleanup of unusual values in message score normalization
Increase “unusual correspondent” interval from 12h to 24h
Spam rule report: add column “Determined Spam %” to highlight the most influent rules
Add more logging to digest report generator to give more feedback on support tickets
Search: allow the user to search bounce messages and add more validation for email addresses
Local RBL: add engine documentation on the web UI
Mail Encryption reply: allow bigger reply messsage (up to 100M)
License usage: show mailbox count variation to MSP
ESG4 migration: import user customized MTA settings
User text import: improved quarantine report options
Search: results are displayed by “received date” instead of “analyzed on”
Reports: when displaying license usage count, consider all licensing model options
Search modal: improved UI, with autofocus and button reordered
Message details: add column “user / machine learning” to antispam report
Data Loss Prevention: cleanup UI and show report in a modal
First install: when network is available, wait for a full upgrade before starting webserver
Increase logging of verbosity for system jobs
HTTPd: increase server timeout for long running searches
HTTPd: reduce server authorization by moving to backend job sensible tasks
ESG4 migration: improve user feedback while importing data

Bug fixes

Dashboard: adjust count of delivered messages in mail flow
Log rejected messages due to MTA configuration errors
Log rejected messages to multiple recipients due to message size limit
Implemented edit feature in wildcard TLS certificates
Bulk release: make sure sent email are limited to addresses owned by the logged in user
URLSand rewrite: handle & character correctly in HTML text parts
Avoid email notification on slow storage when doing log rotation
License count: when deleting license avoid removal of quarantined messages
FTP backup: auto-delete backup after upload (either on success or failure)
Reboot: avoid multiple reboot when some error are generated by the shutdown process
Outlook addin: generate a unique ID per appliance, to avoid issue on hardware migration
Data loss prevention: schedule engine reload after “apply” action
Mail Encryption: show authentication problem on login
Backup restore: converted to a system service to avoid restore issues
LDAP: fix user/email address DN selection and properly display authentication errors
Summary Report: restore total percentages
Message datails: add all missing rules descriptions
Remember login target path when authenticating via M365 or G Suite
Quarantine: mark messages as “not available” when cleaning storage files
Search: prevent timeout when displaying multiple email with many recipients
Increase timeout for User import
Message Details ATE: ignore bounce messages
ESG4 migration: fix quarantine domain admin permission
ESG4 migration: avoid timeout on configuration import
ESG4 migration: cleanup duplicate whitelist and blacklist on import
ESG4 migration: import greylist database from ESG 4.x

Changes in v5.0.12 (Jan 10, 2022)

Security

Bitdefender server: update to version 3.0
Avira SAVAPI: update to version 4.15
ESG Bitdefender integration: drops high-privileges while scanning
ESG Savapi integration: drops high-privileges while scanning
Quicksand: increase the Office Document scan limits to intercept more threats

Improvements

ESG Bitdefender integration: nearly halves RAM usage during scanning
ESG Savapi integration: nearly halves RAM usage during scanning
Install license: replicate license installation in cluster setup

Bug fixes

MailIntercept: do not monitor for messages received from localhost
System preferences: fix a UI issue when using three-level timezones (e.g. America/North_Dakota/Center)
Report: add UI feedback when using “Per Domain Mailbox Use” with date ranges
System preferences: fix audit message for timezone changes
Social graph: fix a server error when searching by empty email address
Graymail: prevent duplicate record creation
PDF Report: display correct datetime interval
Custom spam policy: avoid errors when adding an policy with empty description
ESG4 migration: copy LetsEncrypt account information to authorize automatic renewal

Changes in v5.0.11 (Dec 28, 2021)

Security

Message detail page: stricter validation of message ownership of logged user
ClamAV SaneSecurity: changed enabled databases based on Libraesva security review
Passwordless: double check server-side secret on token verification
Disable httpd lua module (CVE-2021-44790)

Improvements

ISP Instance Monitor: integrate with ESG4 appliance and use faster queue length evaluation
Scheduled report: new email template with whitelabelling and explicit report type in subject
Release request: new email template with direct detail page link
User messages: allow signatures bigger than 64k
Message details: show delivery information of messages imported from ESG4
Add audit log in Account takeover protection
Disk expansion: warn about possible expansions left
ClamAV monitor: wait more time when doing service availability tests
Whitelabelling: remove Libraesva signatures from email notifications
Hypervisor Console: add “pause incoming mail” command as in web ui
WebUI: better vertical alignment of all forms

Bug fixes

Quarantine actions: avoid redirect to login when session is expired and passwordless cookie is available
Quarantine actions: quarantine administrators always have action “release” instead of “ask to release”
Dashboard: last messages honor the global settings, instead of using a fixed 20 results limit
Disk expansion: minimal increase is set to 1GB (to avoid almost null expansions)
LDAP: enable pagination only when server announce it in the banner
User text import: restore notification email, and document quarantine address selection
History import from ESG4: enable import of deliveries logs
Reports: evaluate all saved search filters on “per domain email usage” report
LetsEncrypt: when server verification fails due to network issues, do not retry validation on remote server
SocialGraph: show proper UI feedback when searching by empty email
Deferred message: show full deferred status as reported by the MTA

Changes in v5.0.10 (Dec 15, 2021)

Security

QuickSand: handle PDF files with random file preamble or filename containing “..”
SNMP: disable basic information access when SNMPd is enabled for one IP
Adaptive Trust Engine: fully handle UTF-8 to better identify first time senders

Improvements

Add UI feedback on Threat Remediation recall actions
LDAP: allow anonymous access to external sets when bind user is left empty
Integration: performance speedup (up to 10x)
UI: show delivery status as bounce when there’s at least one recipient with bounce
Quarantine Actions: show user-friendly 410 gone page for old quarantine link actions
CRM114: improve learning routine, and avoid useless “forget” actions
Enable Threat Analysis Portal registration (license dependent)

Bug fixes

Restore release permission for “Quarantine” Admin/Domain Admin
Mail Encryption portal: allow loading of images on reply
Replicate Bayes learn action in cluster environment
prevent cluster setup failure when letsencrypt directory is missing
Message details: delivery path interpolate hop without Geo-localization
Integration: avoid duplication errors when valid recipients are found on multiple sources
LDAP import: always set a page size when supported by remote server to avoid server import limiting results transparently
LDAP synchronization: correct loading email and users from Domino servers
LDAP on domino: properly filter email addresses based on domain
Avoid a configuration errors on engine which caused messages to became marked as other infected
Fix a race condition which caused some message to be left in “active” delivery status
Permission check against bounce messages for domain admin no longer generate UI errors
WebUI: align graphics for all modal

Changes in v5.0.9 (Dec 1, 2021)

Security

Adaptive Trust Engine: increase accuracy by normalizing header from
Quarantine action: restrict permissions on forwading

Improvements

ClamAV: halves RAM usage during signature reload
Quarantine action: properly blacklist from header when available
Quarantine action: improve feedback on release
LDAPS: allow using self-signed certificates on remote host
Integration: separate import of users and valid recipients for G Suite, Microsoft365 and LDAP, to better compute licensed mailbox
Message detail: add audit logging as in ESG 4
Wizard: add validation when using IP address instead of hostname
Bitdefender: use proper brand spelling

Bug fixes

Encryption: resolve issues with multipart/signed and multipart/encrypted MIME which caused some email to become plain/text
Quarantine action: add modal for “ask to release” when viewing email
URLSand: fix licensing hash on link generation
Database mail logger: avoid issues when importing reports with size above 4 kilobytes
Graymail: fix a database permission error which prevented newsletter identification
Backup: change audit log messages
Antispam engine: resolve accuracy issue when interpreting rare UTF-8 character (i.e. high level pages)
System Preferences: use system administrator email for system email (i.e. sent to root)
Threat Remediation: avoid failing when no mailbox was found
Relay domain: fix an error when enabling dynamic verification

Changes in v5.0.8 (Nov 18, 2021)

Security

update operative system to upstream RHEL version 8.5
reduce session TTL on server-side

Improvements

WebUI: spinners icons review
scanning engine maximum message size is kept in sync with MTA max message size
re-enable email encryption portal (license needed)
graceful reload of HTTPd configurations
email samples are sent to esvalabs.com to improve deliverability
faster mail queues length calculation on dashboard

Bug fixes

avoid CPU high utilization when reading messages in active queue
avoid memory exausted when generating Spam rules hit reports on large dataset
add backward compatibility with encrypted links generated by ESG 4.x
mail queue logger can handle remote server messages up to 8192 chars

Changes in v5.0.7 (Nov 02, 2021)

Improvements

Syslog: configuration isn’t replicated in cluster setup
Microsoft365/GSuite: faster import of users (at least 2x)
Allow readonly access to relay and user page when the license is expired
Whitelabelling: rollback to previous theme, should the generation fail
Allow cluster destroy should the license expires

Bug fixes

IMAP/POP3: prevent a 500 error on user login
Import 4.9: cleanup old configuration to avoid clamav engine failures
Whitelabelling: don’t reset theme on updates
Release requests: allow empty notification email
Release requests: remove loading browsere popup on successful release
Digest Report: fix selection of options in bulk actions
User preference: read default values for new user when creating on login
Email continuity: use new security policy system to validate user from addresses
ATE: prevent errors when from header is not set in a message

Changes in v5.0.6 (Nov 09, 2021)

Security

Hardened configuration for SSH daemon

Improvements

Chrony: if the offset is above 30 minutes, just set the current time
Check for update after network first configuration
Cluster: better status monitor for file replica
automatically reload mail scanner engine after configuration changes
added confirm modal for shutdown/reboot/suspend cluster actions

Bugfix

First run: wait for database initialization before scheduling reboot
Console: reset fallback address in issue file on first boot
restore release requests functionality
cluster setup: fixed file synchronization of TLS keys
compile smtp check override after migration from 4.9
When creating users inherit all configured default
Fix signature saving error on some configuration
Fix widget for color selection in system preferences
Restored SNMP OID for SMTP traffic
Remove errors on whitelist and blacklist insertions for users with multiple addresses in recipients
Remove errors on whitelist and blacklist insertions for safe-learn users
LDAP set of type other are correctly identified as such
prevent a page error when decrypting links generated by ESG 4.9

Changes in v5.0.5 (Oct 19, 2021)

Security

Abuser lockout: implement incremental lockout for recidive abuser
Adaptive Trust Engine: support BATV address and domain with more than 4 levels
Adaptive Trust Engine: separated history age for different relays
DKIM key: upgrade to 2048 bit
DNS: prevent DoS on SERVFAIL by adding a short term cache
Webapp: force HTTPS with TLS > 1.2
Mail transport agent: disable TLS 1.0 and 1.1 on strict/medium TLS mode
RBL: don’t disclose RBL name on rejection
User Manager: all domain admins are now multi domain admins (no longer restrict the username format)
User Manager: increase password security for Users, by using high-end caching algorithm for user passwords.

Improvements

AntiSpam settings: defaults for new users are explicitly configured and no longer inherited from the domain admin’s configurations
Appliance Sizing: automatic configuration of all resource-intensive services
Backup and Restore: new data importer from ESG 4
Backup and Restore: FTP backup supports TLS
Branding: new Libraesva logo and hypervisor themes
Cluster Setup: simplified setup wizard
Cluster: simplified monitoring and recovery UI
Console: add full ANSI-color support to hypervisor console
Console: interactive console with dynamic data
Crash auto-recovery: auto-repair services for most disk crash situation
DKIM: disabled signature for empty envelope from
Dashboard Threat Map: high level threat distribution like phishing, spoofing and whaling
Details page: quick summary for rejected email
Details page: threat or indicators identified by the internal engines
Disk expansion: support for 60 disk expansions
Licensing: new licensing system
MailIntercept: new dedicated configuration page
Machine Learning: new page with statistical records of CRM114 machine learning engine
Machine Learning: new page with statistical records of Bayes machine learning engine
Message Actions: all actions can be executed from all message views
Message details: add DSN and description to all SMTP reject listing, to distinguish temporary from permanent failures
Message details: new analytical representation of email path
Message details: new delivery status badges, which includes all statuses (e.g. recalled, released, …)
NTP: system clock synchronizations is always enabled and synchronized
Network: refactored network management with multiple interface and route configurations
Phishing Highlight: removed some options which are now managed directly by the ESG security team
Quarantine list: show scan results and delivery status
Quarantine settings: explicit configuration of default settings for new users (no longer inherit domain admin configuration)
Reboot/Shutdown: prompt feedback of the progress of the reboot
SASL: automatic realm initialization and asynchronous configuration
Sandboxes: URLSand and Quicksand configurations are on distinct pages
Scan result: Dictionary and DNSBL reporting has been improved
Scan result: new “Archive Encrypted” scan result
Scan result: new “QuickSand URI Disarmed” scan result
Scan result: “OFF” messages (not scanned because of exception rules) are displayed in message lists
Search page: searches with advanced filters can be saved to be used with report pages
Search page: can now search also among rejected messages
Social graph: refined interface and interactions
System preferences: increased the default value of records displayed in message lists
System preferences: new color palettes and new color picker
System resource: new dedicated page, with detailed resource statistics
TLS Certificates: TLS certificate can be shared in a cluster setup
White-labelling: logo automatic scaling from many raster formats
Wizard: brand new first-run wizard, with configuration loader from ESG 4.9

VM hardware improvements

Use EFI in all hypervisors which support it
Add Secure boot and security options in VMware 6.7+
Add IOMMU in VMware 6.7+
Use GPT partitioning which allows up to 60 disk expansions
Support for in-place operating system migration
Fully automated build-chain for many target hypervisors. Supported vSphere 6.0-6.5,
vSphere 6.7+, Proxmox KVM, Hyper-V, Xen

Bug fixes

User Manager: Read-Only administrator can modify their own profile
Mail transport agent: default email max size lowered to 25 MB, to avoid delivery issues to M365 and GSuite
Licensing: atomically switch license without services restart

Breaking Changes

License file: license file for ESG 4.x isn’t valid on ESG 5.x. You should have received the updated license from your channel, if you haven’t please contact us.
Scheduled reports: not migrated from ESG 4.9, must be recreated manually
Quarantine link: links generated from ESG 4.9 are no longer valid. Messages can be released from WebUI after migration process for history and quarantine is completed.
Legacy end-user API (URL /esva-api/myemail.php) (new user API for mobile applications to be used instead. URL: /api/v1)
Administrative API (URL /esva-api/) for system configuration (available from ESG 5.1. URL: /api/v2)
Distributed setup: not available, will be released in a future release.