Changes in v4.8.14 (Apr 12, 2021)
Security
- Undisclosed security fix (thanks to Daniele Barattieri – Ethical Security for the responsible disclosure)
Changes in v4.8.13 (Jan 29, 2020)
Improvements
- Whaling Protection: use DMARC to validate legitimate whales
Changes in v4.8.12 (Nov 23)
Security
- QuickSand: Excel 4.0 macro-formulas embedded in OLE2 xls files are considered suspicious.
- QuickSand: Block MIME text files saved as an Office document
Improvements
- Added new SNMP OIDs for License informations
Bug Fixes
- Increased length of field “LDAP Search Base” in SMTP Auth LDAP settings
- User action “Mark as Spam” is authorized to user with that permission from outside of Safe-Learn networks
- Increased download timeout of Libraesva Updates to 10 minutes
- Outlook Addin: updated Content Security Policy requirements
Changes in v4.8.11 (Nov 12)
Security
- Improved detection of encrypted PDF
Bug Fixes
- Properly check domain before adding to the relay table
- Avoid timeout during LDAP import of Valid Recipient/User
Changes in v4.8.10 (Nov 03)
Security
- Properly extract files in utf8 from 7zip attachments
Improvements
- Limit Dictionary rules to outgoing email instead of all trusted sources
Bug Fixes
- License count for “ESG for Office 365” aligned to the Microsoft 365 licensing
- Properly check current IP when changing “Login Authorized Network” for Admin user
Changes in v4.8.9 (Oct 27)
Improvements
- Allowed Safe Learn Users to mark for release a message
Bug Fixes
- Domain Admin can totally configure a new White/Black list from Message Details
- Graymail plugin will honor the default
- “Per Domain Use Report” will show the correct allocated licenses per domain
- Log properly SMTP Rejects/Bounced messages with long Message Queue ID
Changes in v4.8.8 (Oct 14)
Improvements
- Log mail rejected due to exceeded message size
- Attempted username logged for failure logins
- Added digest report info to User export
- “Custom Spam Rules” allow to specify a custom header instead of the limited list
- Changed alert limit on disk space monitor to avoid “false positive” when using big disks
- API: Added information about aliases/license allocated to getDomainLicenseUsage
Bug Fixes
- Restored automatic bayes learn when submitting to EsvaLabs
- Replicate bayes learn on cluster environment
- Fix synchronization of SMTP Check Override during Cluster wizard
- Date visualization format can be changed in the System Preferences
- Dynamic verification server configuration properly flush cached values
- Restored “Blacklist Sender” link in signatures when using Safe Learn Networks
Changes in v4.8.7 (Sep 29)
Improvements
- Add auditing to pause/resume incoming email
- UI will show the new license details in few minutes after upload
- License Count excludes mail with only blocked message(s)
Bug Fixes
- Threat Remediation: Better handling of errors when searching for the message to recall
- Threat Remediation can manage multiple connectors for the same domain
- Message Score Normalization option correctly managed by the web interface
- Quarantine Actions correctly manage the “Release Reason” option and the “Safe Learn Network” authentication
Changes in v4.8.6 (Sep 14)
Security
- Users authorized to customize spam levels cannot change release actions
Improvements
- Add low-priority swapfile to allow temporary spikes of RAM usage
- Cluster auto-recovery functionality and simplified recovery procedure
- Add report filter for Whaling attack
- API: Add function “msgdetails” to get whole message details including headers
Bug Fixes
- Office365: case insensitive username check on login
- Better error handling in Adaptive Trust Engine for some edge case
- Improve reliability of external connectors when remote connection is lost
- Avoid lags and slow requests to “Core Service” page
- Recover bayes engine auto-start for appliance deployed from 4.8 version image
- Properly show release reason when enabled to users
- Fix English typos in Mail Encryption reports and WebUI
Changes in v4.8.5 (Aug 31)
Security
- Integrate trusted networks and SMTP check override to Antispam engine to avoid IP reputations issues
- Prevent a QuickSand crash due to byte conversions on some MS Macro analysis
Improvements
- UI: Rename Address to Network in trusted network
- Revalidate user provided LDAP configuration for SMTP Auth before writing to file
Bug Fixes
- Resolve an access denied issue for quarantine report due to short url unproper mapping
- Resolved a database error which prevented adding multiple Threat Remediation Connectors
- UI: abbreviate Load Average to avoid UI glitches
- UI: Show correct Message ID in result page for learn as spam
Changes in v4.8.4 (Aug 17)
Improvements
- Distributed setup status monitor improved error messages
- Add destroy master node action to Distributed setup
Bug Fixes
- Properly check permission for quarantine admins using distributed search
- Add redirect for older report URL like /cgi-bin/release-msg.cgi?id=$id&to=$to
Changes in v4.8.3 (Aug 10)
Improvements
- Add links to released messages in detail page overview
- Reduce MySql resources consumption for small appliance
- Add per-batch cache of whaling address to improve analysis speed
Bug Fixes
- Restore logging of attachments details to databases
- Fix redirection to target page when using login from Office365 SSO
- Avoid double-slashes in quarantine actions URL which generated 404 errors
- Properly render popup for dictionary/urlsand matches in detail page
Changes in v4.8.2 (Aug 03)
Security
- Quicksand integration with 7zip archives
Bug Fixes
- Correctly count Office365 mailbox and aliases
- ATP: fix display error on quota statistics page
- Encryption Portal: remove spurious blob data which may prevent email display
- Mail Relay test: allow long timeout, but warn about slow tests
- Authentication redirect: correctly redirect to target page, for pages protected by safe-learn
- When deleting relay domains also delete orphaned threat remediation connectors
Changes in v4.8.1 (Jul 27)
Improvements
- Require Global Privacy Password to enable domain level Privacy Passwords
- Use DNS to fetch current stable version of Libraesva ESG
- Apply whitelabel theme to error page
- Rename “Disk” to “Storage” in UI
Bug Fixes
- Restore user actions from quarantine reports when using anonymous users
- Rollback “SMTP SASL Authentication require encrypted connection”
- Properly compile DKIM domain configuration when mixing similar TLD
- Web Portal Authentication: fix a UI issue when selecting enabled record for domain
- Properly compile Local DNS configuration when multiple Local Forwarder are defined
- Use Local Authentication instead of OAuth-2 for Domain Admins
- Fix permission checks for User Actions
- Fix UI error in ATP Access Control page
Changes in v4.8.0 (Jul 20)
Features
- Mail Intercept: allow recall of messages to unsual recipients
- Social Graph: Social Interation graph with other Organisations, based on Domain/User
- O365 Authentication: added Support for OAuth2-based authentication
- Gsuite: native support for users and valid recipients import
- Gsuite: added support for OAuth2-based authentication
- Enable ports 465 (SMTPS) and 587 (Submission)
- SMTP Auth Relay support LDAP Authentication
- Implemented variable %public-url% for Logo&Messages and Quarantine Actions
- Email Continuity: outgoing email will be sent to the mail server using a BCC to the From
- Email Continuity: add download button
- URLs in mail will be checked on our URL Blacklist
- Message Details: add link to original message for released ones
Security
- Hostname changes will automatically execute reboot
- New Hardware requirements for System Resources sizes
- System Resources size will take effect also to the old ATP Profile
SMTP SASL Authentication require encrypted connection
Improvements
- Improved description for Whaling in configuration page
- Add HTML template for all Report Messages
- Add Domain Customization for all Report Messages
- Load Avg gauge in Dashboard now show the last 5′ value
- Search: Export will include also the Sender IP
- Add Outlook Mail Messages to supported File Types in the Attachment Filters
- Threat Remediation configuration for Zimbra now support non-default ports
- Message Details: Show information about Scan Time for each message
- Replace AWL with the new TxRep plugin
- LDAP Configuration: add new Type for Zimbra
- Quarantine Search: separate Spam & High-Spam Block Reason
Bug fixes
- Add missing SMTP Reject to Summary report
- Decode MIME for Subject in Mail Queues
- Add Audit Log for System Resources changes
- Automatic cleanup of unused Let’s Encrypt certificates
- Urlsand rewrite in Email Continuity now ignore A tag without href
- Adaptive Trust Engine: revoke trust on recall, mark as spam and blacklist
- Fix wrong warning on disk space detection before Backup
- DNS Query for private class addresses will not be resolved on internet anymore
- Domain text import will execute automatically the Relay table rebuild
- Trusted Network: fix wrong propagation of changes on Apply Settings button
- Trusted Network: add check for duplicated networks before add/edit
- Email Continuity: fix cid association of inline image
- LDAP Authentication: fix bug on LDAP DN
- Office365 Import: username will be assigned as alias, if is a valid email address
- License Count: correctly handle of sub-addressing addresses