Skip to main content

Changelog

Version 24.2.1​

2024-08-05

Added​

  • Added missing Expression filter on Protection - Rules page

Fixed​

  • SIEM Notification modules now include a Timezone reference
  • Improved Malicious Scanner and SQL Injection detection modules
  • Increased report generation timeout to handle longer processing times

Changed​

  • Time intervals for sending Telemetry data have been reduced

Version 24.2.0​

2024-07-02

Added​

  • New HTTP clients table on Alert details page to inspect attack sources
  • Updated CLI with new automation features, including license activation and rule management
  • New Attack trends chart on Dashboard
  • New telemetry module to enable shared threat intelligence
  • Hosts can be associated to an existent Domain Group from the Assets - Hosts page
  • New filter that allows to show/hide Hosts associated with a Domain Group on Assets - Hosts page
  • New targets on Custom Rule creation
  • Network rule automation can be enabled for specific Domain Groups, Hosts or attack types
  • Detection can be disabled for specific response codes or client IPs
  • Hosts not assciated with a Domain Group that are not seen by the software for a configurable amount of time will be deleted

Fixed​

  • Improved Path Traversal and Bruteforce detection modules
  • Improved concurrency and efficiency on main Seer Box Engine processes
  • The loading times of the Alert page have been drastically reduced
  • The loading times of the Metrics data have been drastically reduced
  • Oplon WAF rule translation

Version 24.1.2​

2024-05-15

Fixed​

  • Bug blocking sending of application rules to Oplon WAF
  • Bug preventing network rule syncronization after their expiration date
  • Wrong IP validation on Seer Box GUI input fields

Changed​

  • Generic Oplon firewall integration is now split in Oplon WAF and Oplon Firewall for IP blacklisting

Added​

  • Prevent alert detection for specific subset of status codes

Version 24.1.1​

2024-04-24

Fixed​

  • Bug blocking license validation process after license service disruption
  • Error while inserting User Agent data related to alerts
  • Minor fixes

Removed​

  • Redundant dependency on Seer Box GUI container image

Version 24.1.0​

2024-04-11

Added​

  • New Audit Logs section on Seer Box web interface
  • New Seer Box Sentinel component to enable distributed traffic monitoring
  • Built-in support for standard NCSA log formats
  • Alert will be automatically ignored after a configurable amount of time
  • New filters available on Alerts, Rules, Legitimates and HTTP Traffic pages
  • Sample configurations for Kubernetes-based deployments

Changed​

  • HAProxy log format now supports more fields, including HTTP request body
  • Docker-based deployments now support host directory bind mounts
  • Notifications destination now allows hostnames

Fixed​

  • Type mismatch exception on report creation
  • Bug preventing Seer Box Engine from restarting its listeners
  • Bug preventing Seer Box Engine to properly cache metrics and trends
  • PostgreSQL connections are now limited to allow reuse
  • no data warning on Dashboard traffic chart
  • Report generation on Docker-based deployments
  • Editing an existing SIEM Notification resets the log format to CEF