========================================= = Changes between 7.2.4.75 and 7.2.5.22 = ========================================= BES Client - Support added for Windows 2008 R2 and OSX10.6 Snow Leopard (Mac Agent version 7.2.6.4). - Added better error detection to prevent BES Client UI failures that resulted in the error "(22.1245)" on some Windows systems. This error was caused by disconnected terminal server sessions leaving behind a bogus session token. (Issue #27372) - Fixed a bug that would prevent the BES Client from using restart control settings, like the _BESClient_ActionManager_UIMissingHoldMode setting, for Multiple Action Groups when Efficient Mime is enabled. This would prevent the BES Client from performing restarts and cause actions to be stuck in the "Pending Message" state. (Issue #28210) - Added a BES Client Setting to control the frequency the BES Client will check for client compliance evaluation requests in the registry. (Issue #13339) _BESClient_ClientCompliance_PollingIntervalMilliseconds Minimum=200 (5 times per second) Default=200 Maximum=3,600,000 (once an hour) - Added BES Client Setting to control the frequency that Active Directory information will be polled by the BES Client. The default polling interval of 12 hours did not change. (Issue #26078) _BESClient_ActiveDirectory_Refresh_Seconds Minimum=1200 (20 minutes) Default=43200 (12 hours) Maximum=2147483648 (~25K days) - Updated the BES Client startup script for Solaris (/etc/init.d/BESClient) to start and stop the agent in the current Zone only. Previously, if you stopped the agent in the global zone it would affect all BES Client instances in any zone. (Issue #25596) - Added a dependency to SUNWlibC for Solaris Agents to prevent errors when attempting to create a Solaris Zone with the BES Agent pre-installed. (Issue #28453) - Fixed the Operating System inspector to return the correct value for Windows 2008 R2 and Windows XP Embedded. Made the default name for unknown versions of a Windows OS "WinUnkown". However, Windows XP Embedded is not officially supported still. (Issue #26762 and #28097) - Added support for the BES Client to use SSPI Authentication for Proxies including Digest, Normal and Kerberos interfaces. (Issue #28291) - Fixed a memory leak created when using the 'Set' inspector that could lead to the BES Client crashing. (Issue #28231) - Updated the readme.txt file in the BES Client installers. (Issue #28279) - Added the 'accounts with privileges' inspector for use in the SCM solution. (Issue #27122) - Fixed a bug for Red Hat Agents where in rare circumstances a lock could be left on the RPM database when the agent is shut down. (Issue #27944) - Fixed a bug that would cause the Mac Client UI to crash if the end user message contained a character that was not UTF8. (Issue #29406) BES Console - Fixed a bug that caused the left and right arrow keys not to work in Flex controls. (Issue #26837) - Actions taken from a BES Support Fixlet or Task with a custom action script will no longer run on locked computers if you modify the action. (Issue #27168) Web Reports - Fixed a bug that limited Session Relevance calls to only return 4KB of data on FireFox. (Issue #27790) - Fixed a security issue that could lead to SQL injections. (Issue #28451) - Improved load time for the Action Summary creation page. (Issue #28738) ========================================= = Changes between 7.2.4.60 and 7.2.4.75 = ========================================= BES Client (RHEL and SUSE Only) - Added RPM inspectors: o rpm package release o rpm package version o rpm package version record o short rpm package version record ========================================== = Changes between 7.2.1.357 and 7.2.4.60 = ========================================== BES Client - Fixed an issue launching the Client UI for remote users on Windows 64-bit operating systems - Fixed multiple issues where the Client UI would fail to launch because the user is still logging into Windows. This happens infrequently during computer startup and remote login. It could also occur very frequently for Roaming Profile users with large profiles - Fixed multiple issues that sometimes caused the BES Client not to attempt to launch the Client UI in certain situations - Fixed an issue setting permissions for the Client UI when using the MSI installer - The Client UI will now retry to launch every 30 seconds instead of 24 hours - Improved logging messages for launching and closing Client UI session - Changed the BES Client default behavior to not run actions if the action message fails to be displayed to a user. Actions will be in the 'Pending Message' state until the message is displayed and the user responds - Added a BES Client Setting, _BESClient_ActionManager_UIMissingHoldMode, to control the default behavior for running actions when the BES Client UI fails to launch - Fixed an issue where the BES Client would sometimes use more than the expected 2% CPU throttling if there are lots of large Multiple Action Groups with long running relevance statements - Raised the default value of "_BESClient_Report_MinimumAnalysisInterval " from 5 seconds to 60 seconds for efficiency - Added Read permission for the 'Everyone' group on the BESClientUI.exe for new installs and upgrades to prevent BES Client UI launch failures for non-administrative users - Fixed an issue setting permissions for some Windows operating systems. All versions of Windows will now have the same permissions set for the BES Client files. - The BES Client UI will now retry creating the Windows Tray Icon if it fails to launch - BES Clients incorrectly report a status of 'Expired' for sub actions of a Multiple Action Group when the whole group is not relevant. BES Clients did not run the sub actions and did not need to report any status messages - Fixed a memory corruption problem that could cause Unix, Linux and Mac agents to crash - Removed psapi.dll from the BES Client installation folder because it was no longer needed - Fixed an issue that could cause the Mac Agent to fail to upgrade - Fixed an issue where upgrading from the 7.2 MSI installer could lead to duplicate Add/Remove Program entries to appear. Duplicate entries are also cleaned up on upgrade - BES Client's configured to use a specific proxy server through the registry will now try not using the proxy when communication failures occur when using the proxy. Added a new client setting, _BESClient_Comm_ProxyAutoDetectTryDirect, to control the default behavior - Enabled actions with offers to be repeatably run by end users - Fixed rebranding issues - Fixed an issue with the 'download folder' inspector not working when called from inside the 'prefetch block' action script command - Fixed an issue with the 'size of file' inspector for files over 4GB - Fixed the 'name of operating system' inspector to support Windows 7 - Added Action Script Commands for 'Folder Create' and 'Folder Delete' BES Console - Fixed error message: (SQLite error 0-5) - Fixed error message caused by DirectoryNotFoundError: Unknown exception - Fixed error when using SQL Native Client 10.0 drivers - Fixed a crash error when attempting to edit a Fixlet site's properties after loading the masthead but before gathering the site - Fixed an issue capturing keyboard event when using ActiveX controls inside Dashboards - Made Session relevance calls for "Mime Field " case insensitive - Increase the context menu extensions limit from 10 to unlimited - Fixed rebranding issues Web Reports - Fixed an issue parsing XML documents - Fixed an issue copying custom reports that causes the error message "This expression contained a character which is not allowed." - Improved performance opening computer group links - Improved performance of Evaluate Relevance calls which will help improve the load time for many reports BES Installation Generator - Made the list of available evaluation mastheads customizable - Fixed the url for sending license requests to BigFix - Changed the size of some installation dialogs - Fixed rebranding issues BES Admin - Fixed rebranding issues BES Server and Relays - Fixed an issue with Dynamic Downloads that would cause long delays retrying downloads for missing cache files. The delay would only occur if the cache files had been manually deleted - Fixed an issue with FillDB that would cause valid statistical property results to be discarded (affects Power Management and Application Usage dashboards) - Fixed an issue with FillDB that could leave a single document unprocessed in the buffer directory until another BES Client report was received. This would lead to a lag in the BES Console updating data for small deployments (under 10 seats) - Added a TCP timeout setting, _BESRelay_PostFile_TimeoutSeconds, for the Uploads Manager to prevent rare instances where a BES Client's upload connection would be held open indefinitely when no data was being transmitted. This would also lead to the affected BES Client's upload failing until the Root Server was restarted - Fixed FillDB error 'There is insufficient system memory to run this query. (37000:701)'. The change may also reduce overall SQL memory usage for some customers BES Remove - BES Client removal failed if the BES Client Helper Service was installed. The BES Client Helper Service is now removed as a part of the BES Client removal BES Client Deploy Tool - Fixed the '/username' and '/password' commandline parameter options which were not working =========================================== = Changes between 7.1.1.315 and 7.2.1.357 = =========================================== General - Added ability for "dynamically download payloads" that change after action authoring time (virus definition updates for example) - Additional BigFix platform component localization and rebranding Installers - Fixed issue of remote database not installing on x64 systems (bug 23987) - Fixed some Server API installer issues (bug 22246) - Fixed issue where upgrading Web Reports sometimes unnecessarily added a database to aggregate (bug 18519) - Fixed issue of server uninstall sometimes not working on all 64-bit systems (bug 17657) - Fixed issue of remote database installer needing to explicitly remove read permissions from registry keys containing database credentials (bug 23372) BES Admin - Removing a Master Operator no longer removes site subscriptions created by that Master Operator (bug 21266) - Command line switch /fixManagementRights now works as expected (bug 23992) - Fixed issue where the Server install might hang when using a very long Password for DB Configuration (bug 22721) BES Console - Added "currently connected server url" session inspector (bug 23186) - Action status line number can now be reported for actions with more than 256 lines (bug 10585) - Fixed issue with rarely used custom option where post-action scripts for single actions didn't work (bug 23915) - Fixed issue where gathering site sometimes wouldn't update correctly (bug 22541) - Fixed issue where custom site authorizations sometimes were not reissued when authorizers are removed (bug 22024) - Fixed issue causing a "NoSuchSite" error when trying to use the Subscription tab of a site before gathering (bug 21843) - Fixed issue where an error would occur if an action document and action status dialog were open while the action is deleted (bug 21357) - Fixed issue where unsubscribing from sites while they are gathering causes console to crash (bug 23543) - Fixed issue of actions requiring a minimum client version sometimes being improperly constrained, resulting in syntax errors (bug 23436) - Fixed issue with console view action info dialog showing action lines as completed on an action script syntax error (bug 23331) - Fixed issue where the message "Run all member actions of action group regardless of error" was always on, regardless of setting (bug 23364) - Fixed several broken post-action session inspectors (bug 22838) - Fixed issue of "retry delay of " inspector not existing (bug 22831) - Fixed issue where an error message of "Arithmetic overflow error converting expression to data type int" shows after creating many comments (bug 23471) - Fixed issue where editing management rights including a deleted property sometimes caused more rights to be assigned than expected (bug 21021) - Added a warning when creating baselines with Fixlet messages that have no actions selected, since taking an action from the baseline is likely to fail (bug 20440) - Fixed issue that dashboard API function ImportXML didn't open documents when skipping UI (bug 20903) BES Server - Updated client register to prevent certain cases where clients could become unlicensed improperly (bug 21070) - Fixed issue where FillDB reported action status result as "cancelled" though no user input was part of the action (bug 18281) - Fixed issue in which the temp folder sometimes filled with unnecessary SQLite files (bug 23363) - Fixed issue in which there was an error when uploading identical large folder multiple times (bug 21008) BES Relay - Fixed issue where the Relay can sometimes write dumps improperly (without checking BESRelay_HTTPServer_WriteMiniDumps value) (bug 23583) - Fixed issue where relay static throttling has a minimum rate of 4096 bytes/sec (new value is 1024 bytes/sec) (bug 18840) - Fixed issue where setting "_BESGather_Download_CheckInternetFlag = 1" breaks gathering (bug 23440) - Fixed issue where HTTP connections sometimes could be closed prematurely causing connection issues with agents (bug 23496) - Adjusted relay to check the sha1 caches on relay start up to do cache-cleanup activities (bug 23309) - Fixed issue where relay can get stuck would upload corrupted client reports many times without deleting them potentially causing slowness and log spam (bug 20879) - Fixed the issue where relays delete results when their parents' buffer directory is overloaded (bug 22923) - Adjusted relay report upload behavior to better handle situations where bufferdir was overload (bug 23079, 22805) - Default value of PostResults_ResultSizeLimit changed from 10MB to 1MB to keep FillDB from running out of memory while processing very large compressed reports (bug 22806) BES Web Reports - Fixed several fairly rare crash issues (bug 21955, 21726" 23130) - Fixed issue where SOAP WSDL uses a different namespace for each server (bug 17810) - "EvaluateRelevance" command in custom reports now returns data as UTF8 (bug 22535) - Fixed the issue of "EvaluateRelevance" doubly escaping XML entities (bug 23708) - BESMailer.exe errors now show error text instead of error code (bug 22204) - Fixed the issue where anybody could view the unregistered computer information regardless of their rights (bug 22071) - Fixed issue with "[Export to CSV]" link on Overview page not enforcing Filters applied to exported page (bug 22005) - Fixed issue of some filtered reports based off of the Open Vulnerability List report return reporting "Unknown Exception" (bug 21390) - Fixed issue of read-only users not seeing all tabs after becoming an administrator (bug 23406) - Active Directory results are now case insensitive (bug 22798) - Fixed issue with improperly escaped HTML in e-mail error message (bug 22952) - Fixed issue with 'Enterprise Security' instead of 'Patches for Windows (English)' showing up in filters in web reports (bug 22785) - Fixed issue that PrintSingleScheduledActivity page did not verify that the user has permissions to access the activity (bug 21189) - Fixed issue where Custom report text incorrectly escaped in Edit Report text box (bug 21011) - Fixed issue that scheduled content report threw a NoSuchReportID exception when gathered report site contents changed (bug 20708) - Fixed issue where custom report XML assumed to be local code page, even when XML is in UTF-8 (bug 21180) - Fixed issue where site filters don't prevent properties from analyses in a specific site from (bug 20166) BES Client - Added native Windows proxy support (bug 21477) - New inspectors: o Vista/Server 2008 audit event policy inspectors (bug 20884) o Added "security account " inspector to easily identify well-known accounts (i.e., sid of security account "NetworkService") (bug 20122) - Fixes for some rare crash bugs reported through Windows Error Reporting (bugs 21932, 20931, 20919) - Improvements to EMsg logging for troubleshooting and evaluating agent performance (bugs 20028, 20147, 20131) - Fixed issue where actions with a custom success criteria sometimes reapply infinitely without delay (bug 23912) - Added log entry (for emsg and standard log) before going into quiet mode (bug 22519) - Fixed issue where processor inspectors sometimes cause client crashes on Itanium (bug 22050) - Added a check for agent to verify action signatures before doing downloads (bug 21401) - Fixed issue where actions did not obey user group constraints if the "while-running message" option was used (bug 20378) - Fixed issue where an action runs on all computers, not just a selected user group (bug 20237) - Fixed issue where the Client does not check the cache folder when trying to run actions when not connected to a BES Server/Relay (bug 15519) - Fixed issue of client doing infinite registrations if it doesn't have proper registry access (bug 23278) - Fixed issue of client checking for compliance API requests when in quiet mode (bug 23701) - Fixed issue where an action group status can overwrite subaction status while the group is active (leading to cases where a failed or completed subaction would show up as "Waiting" or "Evaluating") (bug 23435) - Fixed issue where "download now as" command always behaved as if it succeeded (even when it failed) (bug 23192) - Fixed issue where site settings inspectors are improperly encoded and can't be inspected when deleted (bug 23017) - Fixed issue on Unix/Linux agents where action scripts of type application/x-sh are broken in some cases (bug 22822) - Fixed issue where unix/linux client can hang on TCP connections left open by the server (bug 21115) - Fixed issue where compliance API COMPLIANCE_FLAG_EVALUATE_ALL flag can finish evaluating whatever Fixlet site it was evaluating when you made the API request but no others (bug 23527) - Fixed issue of Unix/Linux process inspector showing nonexistent processes as existing (bug 22270) - Fixed issue of broken inspector "wake on lan subnet cidr string" (bug 21506) - Fixed issue where "family name of main processor" was incorrect on Intel Xeon CPU (bug 20043) - Fixed issue where inspector last gather time of inspector is broken (bug 22959) - Fixed issue where "uptime of operating system" reported incorrect data on Windows NT (bug 21289) - Fixed issue where policy action would stop reapplying when the action relevance refers to running applications (bug 21022) - Fixed issue where extract command is broken on some Unix/Linux agents (bug 21434) - Fixed issue where Mac Agent UI opened to Progress tab instead of Offers (bug 20783) - Fixed issue where Mac Agent UI progress tab contained 3 columns named "Field" (bug 20785) - Quiet Mode doesn't restrict Client UI on Mac Agent (bug 21003) - Action Requests sheet for post-action restart confirmation message no longer blinks for Mac Agent (bug 21503) - Fixed issue where Mac QnA fails if masthead is not readable (bug 21702) - Fixed issue where Mac "hostname" inspector returned the "computer name" result (bug 23490) - Fixed issue on Mac OS X 10.3, where a crash could occur with a MakeSafeSubLocation with a relative path ending in "/" (bug 24051) - Fixed issue where Mac "applications" inspector failed on files containing a colon (bug 24145) - Fixed issue where Mac "applications" inspector was not timesliced (bug 24146) Server API - Fixed issue where IFixletActionCreator interface doesn't inheret from IBESAPI, so is missing some functions (bug 22251) - Fixed issue where API could return "NoAuthorizedSignature" errors after updating the deployment license (bug 21829) - Fixed issue where "ActionCreator" interfaces SetExpiration function doesn't work properly (bug 20620)