ACD Migration Tool
- AVD ACD v3.0 comes with a new easy to use migration tool that works with all newer ES versions (v 6.8.4 and up) via the new ES API
- Massive speed increase for data migration
- Based on the new API, the migration process will work about 3x faster
- The issue with the migration of more than 500,000 objects has been fixed
- The new migration tool allows the migration of all data as well as the ES index settings and mappings
...
- Several vulnerability bug-fixes and security improvements
- fixed an existing bug in the Default Workflow report - Filters show only 10 records
...
AuditServer - New Features
...
- Driver prevents passwords to be shown in iManager and traces
- In the Publisher channel now we do not start the event processing by IDV to catch the status.
We catch the status in the OTP now. - AJC ECMAScript was removed from all packages
- Base package - GCV-style Driver Parameters.
Now we use named passwords to stop all passwords instead of clear-text - Base and Monitor packages are split into several smaller packages.
Hence, the administrator can choose what exactly he needs/wants to add to the ACD Driver or into the 3-party driver to monitor it. - Monitor package - all connection parameters were moved into the driver set package.
Hence, it suffices to configure the ACD server address, credentials, and SSL certificates just once for the whole driver set. - Audit and event timestamps now have milliseconds and the administrator can choose the time format which will be sent to Elastic Search.
- The fields "new value" and "old value" are limited to 32760 symbols to avoid ES errors
- 2 fields were added: "Channel" (Publisher or Subscriber) and "Place of auditing" (OTP, ITP, CTP, and more)
- Additionally 2 points of auditing for each channel
- New: 2 ways of monitoring 3-party drivers:
- send audit message directly to Elastic Search
- send audit events into the main ACD Drivers's queue
- Better handling for Elastic Search errors by the ACD Driver appshim.
Extended and useful error messages by the appshim to the driver
...
...
AuditProxy -
...
- fixed the bug in the Default Workflow report - Filters show only 10 records
AuditProxy - New Features
AuditReport - New Features
AuditExport - New Features
New Features
- The AuditProxy has been completely redone and its functionality massively enhanced
- It is now working as the security guard for all ACD functions
- The AuditProxy in ACD v3.0 now supports multiple LDAP servers at the same time
- Any LDAP attributes can be used for a signing in
- It supports the use of signed-in LDAP user attributes as filters and for transformations of the proxied data
- Any data can be processed based on signed-in LDAP users attributes
- Usage of new and flexible rules to control permissions
- It supports the possible usage of security templates
- security roles or security templates
- Unlimited amount of proxies supported
- unlimited amount of proxy server services
- clustering is possible
- Possible action calls or alarms on Audit Events
- The AuditProxy can (is) controlling all HTTP traffic
- It allows data filtering and transformation on the fly
- It now features extended debugging options to control and troubleshoot applications
- It supports a proxy-service health check
- Health status available
- Only 1 SSL/TLS PKC12 Keystore (instead of PEMs) certificate is now used for all ACD components
- Hence, configuration and installation is now much easier
- Only 1 external network port used for all ACD components (instead of five in the previous ACD version)
- Access control for all ACD components in one place, all inside AuditProxy
AuditProxy - Bug Fixes
- fix the issue if login/password containing special symbols or umlauts
...
AuditReport - New Features
Debug options added to better control snapshot process
No possible errors are shown hence, much easier to debug
The possibility was added to use LDAP attributes mapping within the config file
...
AuditExport - New Features
- Various security fixes
- ACD now supports new ES APIs, up to v 6.8.4
...
Object History Browser - New Features
An option has been added to compare and show only attributes that are different
The problem with Object Browser showing incorrect results if objects DNs contains delimiter symbols
The parser has been updated in order to solve this issue (ES)
A print option has been added (e.g. to print comparison)
...
Kibana and Elasticsearch Integration - New Features
- Elasticsearch (ES) and Kibana have been updated to the current version (v 6.8.4)
- No plain-text credentials anymore for Kibana plugin
- Extending mapping rules for ES data
- Some dashboards optimizations and improvements