========================================== = Changes between 7.1.7.07 and 7.1.8.13 = ========================================== BES Client * Fixed an issue launching the Client UI for remote users on Windows 64-bit operating systems * Fixed multiple issues where the Client UI would fail to launch because the user is still logging into Windows. This happens infrequently during computer startup and remote login. It could also occur very frequently for Roaming Profile users with large profiles * Fixed multiple issues that sometimes caused the BES Client not to attempt to launch the Client UI in certain situations * Fixed an issue setting permissions for the Client UI when using the MSI installer * The Client UI will now retry to launch every 30 seconds instead of 24 hours * Improved logging messages for launching and closing Client UI session * Changed the BES Client default behavior to NOT run actions if the action message fails to be displayed to a user. Actions will be in the 'Pending Message' state until the message is displayed and the user responds * Added a BES Client Setting, _BESClient_ActionManager_UIMissingHoldMode, to control the default behavior for running actions when the BES Client UI fails to launch ============================================ = Changes between 7.1.1.315 and 7.1.7.07 = ============================================ BES Relay * fixed bug 22805: BES Relay does not stop accepting requests when bufferdir fills up, delaying recovery ============================================ = Changes between 7.0.9.164 and 7.1.1.315 = ============================================ General * support for Message Level Encryption between servers, relays, and agents * BES components now FIPS 140-2 Level 2 ready with certification pending * enhanced Wake-on-LAN capabilties to include native right-click support from Computers tab to and the agents natively will send Wake-on-LAN magic packets * symmetric cipher used to protect private keys now uses AES for better security (previously 3DES) * various bugfixes and improvements to BES Client Deploy tool * various bugfixes and improvements to Unmanaged Assets Importer BES Console * updated console desktop shortcut icon * new mechanism for BigFix to rename external Fixlet sites * multiple Fixlet messages can now be copied to a custom site at the same time * new option to disable custom site subscription UI * console now always shows success criteria when viewing a Fixlet message * improved UI support for creating periodic actions in Take Action Dialog * computer list context menu subdivided into multiple sections * bes.xsd now allows for reapply intervals of 6 hours * various performance and deadlock handling improvements (bugs 16640, 17553, 18972) * fixed bug 17183: Baselines no longer remain "evaluating" after all member actions have run * fixed bug 17504: NMOs are now able to remove automatic groups from custom sites * fixed bug 17652: action UI group constraints now treated correctly for domain groups * fixed bug 18817: CTRL-SHIFT-P accelerator now reliably works on first attempt in computers tab * fixed bug 18922: Fixlet/Tasks titles now resync when a Baseline is synced * fixed bug 18968: Automatic Group field definition no longer reverts to "Computer Name" when editing an existing group * fixed bug 19062: actions taken by targeting by list now show the list of computers even if the computer has not yet reported back action status * fixed bug 19474: accelerator hotkeys for navigation now work from within HTML documents opened in the Console * fixed bug 19484: custom site names of up to 64 characters allowed * fixed bug 19756: Baselines no longer state source Fixlet message differs when no differences are present * fixed bug 19923: selecting "Shutdown" in the post-action tab no longer shows a "Restart Now" message to users * fixed bug 20138: console now correctly honors disableNmoRelaySelModeChanges setting BES Client * new site-level relevance to control site subscriptions (i.e. Red Hat agents will not subscribe to Windows Fixlet sites) * fixed a bug where proxy information is not sampled soon enough prior to the first registration attempt * ESX agent now correctly reports version on ESX 3.5 * agent can now be force restarted even if ClientUI is non-responsive * ClientUI action details now have horizontal and vertical scroll bars and are CTRL-C copy enabled * new setting _BESClient_ActionManager_UIEnableMode to show ClientUI to all, local, or no users * fixed bug 20499: agents on Windows 2000 would have a slow virtual memory leak when evaluating the current user due to a Windows API issue * Many new inspectors including: - unique values inspector now supports many more types including dates - FIPS mode - maximum of - SACL of security descriptor - SID of - user privilege rights - Red Hat / SUSE kernel version - NetUserModalsGet access to password length/age, account lockout information, and more - updates to many existing inspectors BES Server * improvements to database replication for DSA configurations (bug 19175) * server file system location can no longer be changed on an upgrade * fixed bug 17224: MakeMirrorArchive utility now works with proxy servers BES Admin * "/findInvalidSignatures" diagnostic now provides more details * it is now possible to propagate a single operator site from BES Admin * fixed bug 19453: removed SQL Server Agent warning that potentially appeared on creation of new user due to numerous false positives * fixed bug 19453: usePre70ClientCompatibleMIME setting no longer case-sensitive * fixed bug 18630: BESAdmin now re-signs content for users with custom site content in 6.0, but who had not signed any custom objects in 7.0 * fixed bug 18332: Revocation is now possible for users who have created a manual console-only computer group BES Web Reports * support for "ad hoc" computer groups similar to Console ad hoc groups * options to enable/disable the ability for non-admin users to create/view scheduled activities and email reports * Fixlet messages, Tasks, and Baselines can now be used as filters * added export to PDF button in sidebar * changed default cipher list for SSL ciphers to "MEDIUM:HIGH" * fixed bug 19046: corrected a potential error that could occur when creating a filter by Custom Site * fixed bug 19162: "exist fixlet x of bes site" relevance expression no longer returns false when there is no database with id 0 * fixed bug 19581: logging in with username using different capitalization prevents you from viewing your own private reports * fixed bug 19586: long Fixlet message titles are no longer truncated incorrectly Platform APIs * Many new BES session inspectors added: - unique values inspector now supports * bes action * bes computer * bes computer group * bes filter * bes fixlet * bes property * bes user - activation/creation time of analysis Installers * Console installer now also installs relevance debugger * improved BigFix branding through installers * fixed bug 17860: agent upgrade installer no longer changes permissions to "administrators" only * fixed bug 15775: besrelay.cfg file works consistently with agent installer BES Remove * updated to remove BigFix Client Logging Service and DLP Extensions if found on agent computers * improved logging to provide addition information on changes made * various minor bugfixes