まっちゃだいふくの日記

セキュリティのこと、ITの気になった記事をリンクしています。

Deep Security Manager - 20.0.844 (20 LTS Update 2023-10-19)@ 各種修正対応


What's new in Deep Security Manager? | Deep Security:What's new in Deep Security Manager? | Deep Security

Deep Security Manager - 20.0.844 (20 LTS Update 2023-10-19)
Release date: October 19, 2023
Build number: 20.0.844

New Features

  • Deep Security Manager now allows users to configure the agent Manual Scan from policy. DSM-16

Enhancements

  • In Events & Reports, the advanced search can now filter Intrusion Prevention events by "Flow" value.
  • The "Flow" field is now added to Intrusion Prevention syslog events. SF06798790/SEG-177960/DS-77724/DSM-9
  • Application Control global block by hash rules can now be configured using a MD5 or SHA-1 file hash. (Previously, only SHA-256 could be used.) SEG-108464/DS-74144/DSM-18
  • Application Control trust entities rules that use the process name property can now be configured using wildcards in the Deep Security Manager UI. DS-75316/DSM-18
  • Trust entities process name properties can now use Universal Naming Convention (UNC) paths to files or peripheral devices on a local area network. DS-77133/DSM-18
  • Trust entities "allow by target" rules can now use the process name property. DS-77364/DSM-18

Resolved issues

  • When configuring Role Properties, applying changes to the "Clear Warnings/Errors for" permission under the Computer Rights tab displayed the incorrect result in the console. DSM-195
  • Application Control shared rulesets sometimes triggered policy updates to systems that did not support Application Control. DS-76766/DSM-18
  • Software auto-authorized on agents by a trust entities rule are no longer automatically added to the shared rulesets. This will prevent software from remaining authorized if the corresponding trust entities rule is no longer applied. DS-74855/DSM-18

Known issues

  • Deep Security Notifier may fail to start when deployed as an Anti-Malware Protected Process Light (AM-PPL) in Windows. As a workaround, deploying the Notifier as an AM-PPL has been disabled by default. See KB000295433. DSM-297
What's new in Deep Security Manager? | Deep Security