Page tree

Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

ACD in general  -  New Features

  • TLS 1.2 & 1.3 support for all ACD components
  • Support for OpenJDK 12.x
  • Added support for latest versions of Linux and SELinux (Security-Enhanced Linux) Red Hat, SLES, Ubuntu, CentOS
  • All ACD components configuration files have been switched to user-friendly JSON format (used for configuring/defining audit reports - has not yet UI)
  • Encrypted passwords used in all configuration files
  • Easy SSL/TLS certificates installation and management
  • Added functionality to use Authenticated user LDAP attributes values as a filter for Report and Dashboards
  • Backup scripts added, allows you to make a backup of your old ES data to files, and restore them if it will be needed
    • Elastic-Migration or Backup: ES to ES, ES to File (JSON), File to ES
  • Option to easily change indexes settings (with UI)
    • g. fix when indexes are blocked after not enough disk space issue *
  • Migration Helper
    • Migrate your configuration and data from the old to the new version of ACD
  • Install Wizard will guide you through the installation process and check all needed dependencies

ACD in general  -  Bug Fixes

  • Several vulnerability bug-fixes and security improvements


AuditServer  -  New Features

  • New ACD User Interface
  • Added option to change the order of the dashboards
    • Different sort modes (alphabetically or by usage)
  • Added option to restart the AuditServer from the User Interface
  • Dashboard frame now resized dynamically to prevent multiple scrollbars
  • Front End User Interface gives much more feedback in case of back-end errors
  • Within the workflow reports, you can now use a date & time picker to filter the data.
  • Generally improved and more user-friendly User Interface

AuditServer  -  Bug Fixes

  • Improved communication with Elastic Search API changed to prevent memory leaks and fix the problems occurring when getting more than 500,000 objects for reports
    • This is necessary for large reports
  • fixed problem with big queries (too long HTTP request)
    • g. a report for 1 year => 365 parameters in URL.
      Hence, HTTP-request would crash, using more than 365 parameters
    • New Limit = Length of the URL string definition
      This parameter can be adjusted using the new User Interface (Admin settings)
  • Fix in scheduled reports
    • If a user has no admin rights, he could define a report but it would not work (but no Feedback given)
    • New the User Interface sends feedback “no permission”.


AuditDriver  -  New Features

  • Driver prevents passwords to be shown in iManager and traces
  • In the Publisher channel now we do not start the event processing by IDV to catch the status.
    We catch the status in the OTP now.
  • AJC ECMAScript was removed from all packages
  • Base package - GCV-style Driver Parameters.
    Now we use named passwords to stop all passwords instead of clear-text
  • Base and Monitor packages are split into several smaller packages.
    Hence, the administrator can choose what exactly he needs/wants to add to the ACD Driver or into the 3-party driver to monitor it.
  • Monitor package - all connection parameters were moved into the driver set package.
    Hence, enough to configure the ACD server address, credentials and ssl certificates just once for the whole driverset.


  • audit and event timestamps now have milliseconds and become more precise. Now the administrator can choose the time format which will be sent to the ES.
  • "new value" and "old value" fields are cut to 32760 symbols to avoid ES errors
  • fixed the bug in the Default Workflow report - Filters show only 10 records
  • added 2 fields: "Channel" (Publisher or Subscriber) and "Place of auditing" (OTP, ITP, CTP and so on)
  • now we optionally have 2 points of auditing for each channel
  • 2 ways of Monitor 3-party drivers: send audit message directly to ES or put audit events into the main ACD Drivers's queue
  • more correct handling of ES errors by the ACD Driver appshim. More extended and useful error messages from the appshim to the driver