Older platform release notes

Platform release notes

Starting with version 1.7.9 all release notes have been consolidated into one page.

v1.7.8

2020-05-23

  • The pre-login style has been updated.
  • The account registration flow has been updated to provide a smoother activation experience.

v1.7.7

2020-05-17

  • Restricted user accounts may now be assigned roles within multiple organizations.

v1.7.6

2020-05-14

  • Asset and Service attributes have been normalized. All keys are now camelCase and most service attributes are now prefixed by the protocol name.

v1.7.5

2020-05-13

  • SMB v2 OS detection now applies more weight to Windows 10 versus Server 2019 in most situations.
  • SMB v1 OS detection has been improved for non-Windows platforms.

v1.7.4

2020-05-08

  • SSO now supports a default role of No Access. Accounts created through the SSO login process with this default role must be manually promoted to a usable account role.
  • Users now support a No Access role for both All Orgs and specific organizations.
  • A bug preventing access to the per-account Demo Organization has been resolved. Explorer and CLI downloads for the Demo Organization have been explicitly disabled. Any agents with the Demo Organization will automatically uninstall.
  • All runZero Console confirmation dialogs now list the specific item they are confirming. This can prevent misclicks from removing the wrong item.
  • A fingerprinting regression related to non-Windows machines running SMB services has been resolved. This would unintentionally classify some NAS devices as Microsoft Windows.

v1.7.3

2020-05-08

v1.7.2

2020-05-07

  • Cisco HSRP MAC addresses are now ignored for the purposes of asset correlation.

v1.7.1

2020-05-06

  • Explorer diagnostic information is now visible from the agent details page. This requires agent version 1.7.1 or later.

v1.7.0

2020-05-04

  • The Subnet Grid View report is now available (via the Subnet Report).

  • The ts, tls.notBeforeTS, and tls.notAfterTS service fields can now be queried using time comparison operators.

v1.6.10

2020-05-03

  • Scan schedules now show the day of the week for first, last, and next timestamps.
  • A bug that obscured the validation error for invalid TCP ports has been resolved.
  • Alert Rules can now be limited to specific Sites or All Sites.
  • Dependency upgrade across the backend and frontend.

v1.6.7

2020-04-26

  • A bug in the recurring scan limits of the Starter Edition has been resolved.

v1.6.6

2020-04-23

  • A bug in the asset export that resulted in missing service details has been resolved.

v1.6.5

2020-04-22

  • runZero now supports a free tier via the Starter Edition.

v1.6.4

2020-04-19

  • The dashboard now shows statistics for live assets only and not all assets.
  • The license view now ignores demo organizations and sites in the statistics.
  • The task view now represents scans pending processing more accurately.

v1.6.3

2020-04-18

  • The Asset and Service exports now include the service.address, service.transport, service.port, and service.vhost fields (if present) to make them more consistent with the runZero CLI assets.jsonl exports.

v1.6.2

2020-04-12

  • The Analysis Reports section has been added, including the new Domain Membership and Service Attribute reports.
  • The Query Library has been added, including a set of predefined common queries.
  • Inventory search queries can now be saved to the Query Library.
  • Inventory search action buttons have been slimmed down.
  • The Explore tab provides easy aceess the Analysis Reports and Query Library.

v1.6.1

2020-04-07

  • Accounts that have been temporarily locked due to failed logins may be manually unlocked by superusers from the Team page.

v1.6.0

2020-04-06

  • Data retention controls are now available on the Organization Settings page. These can be used to specify data retention periods and remove stale offline assets after a fixed period of time.

  • Inventory, Site, and Organization search now support exact matches with the = prefix. An exact hostname match can be specified as name:=SERVER01.

  • Inventory, Site, and Organization search now support matching empty fields using the = prefix. An empty hostname match can be specified as name:=

  • Inventory searches now support the mac-vendor_count, macvendor_count, and vendor_count terms.

  • Inventory Asset and Service search now support the haspublic, hasprivate, hasipv6, and haslinklocal terms.

  • Inventory Asset and Service search now support % as a wildcard for address matching. The query address:%.0.1 will find all assets with an address ending in .0.1.

  • A bug that prevented searches for less than one hostname has been fixed (name_count:0 and name_count:<1).

  • Active and Failed scan tasks now support the Copy action. Copied scans scheduled in the past will default to the current time to start.

  • Single Sign On users can now specify the default organization role of SSO-enrolled users.

  • Account lockouts are now enforced after 10 failed password-based login attempts.

v1.5.6

2020-04-01

  • The Screenshot Inventory now sorts by address instead of port number by default.

v1.5.5

2020-03-27

  • The Asset Inventory now allows attributes to be queried even if they conflict with a keyword by using the prefix _asset.
  • The Service Inventory now allows attributes to be queried even if they conflict with a keyword by using the prefix _service.

v1.5.4

2020-03-24

  • Fingerprinting improvements for HTTP, X509, Telnet, SSH, FTP, and SIP.

v1.5.3

2020-03-22

  • Scan tasks now have a configurable grace period. Setting this to zero or a negative value will result in the scheduling retrying indefinitely until an agent becomes available.

v1.5.2

2020-03-15

  • Web services with multiple asset icons now show each icon correctly.
  • A bug that prevented Sites from being imported has been resolved.
  • A bug that prevented superusers from logging in directly when SSO was in required mode has been resolved.

v1.5.1

2020-03-09

  • Asset icons are now lazy loaded as they scroll into the viewport.
  • Asset icons URLs are now more cache friendly.
  • Page meta tags have received small tweaks.

v1.5.0

2020-03-04

  • The asset inventory now displays any HTTP and UPnP icons acquired during the scan.
  • The asset inventory now displays an icon for assets with available screenshots.
  • The inventory search no longer triggers an error on some grouped query corner cases.
  • The inventory search now supports /32 masks for the net and cidr keywords.
  • The inventory search now treats the type keyword as an exact match.
  • The inventory search now supports filtering based on service counts.
  • The inventory search now supports filtering based on the RTT and TTL fields.
  • The inventory search for services now supports filtering based on port ranges.
  • The asset detail page now describes upstream and downstream layer 2 links.
  • The asset detail page now lists all acquired icons in the top summary.
  • The asset detail page now has a Scan action available from the menu.
  • The new scan page now supports applying a list of tags to all identified assets.
  • The new scan page agent selection now defaults to the first site-specific agent.
  • The tasks page now allows recurring scans to be paused an unpaused.
  • The console now always shows the live agent count on the navigation menu.
  • The console now applies styling to the print view.
  • Hostnames consisting of leading digits are now ignored when correlating assets.
  • A bug that resulted in the wrong timezone being used after SSO login has been resolved.
  • Scans triggered via API now default to the site scope if no targets were specified.
  • Scans triggered via API can now specify a list of tags to apply to all identified assets.
  • Import tasks with the wrong data supplied format are rejected before task creation.

v1.4.5

2020-02-19

  • Completed tasks are now always shown in the order they finished (versus were created).
  • A Cisco IOS fallback fingerprint was leading to false positives and has been disabled.

v1.4.4

2020-02-15

  • The License page now lists invoices and allows payment methods to be updated.
  • The SMB Server GUID attribute is now used to correlate results to assets.
  • The SNMP sysName and sysObjectID attributes are now used to unmatch assets that have changed IPs or were mistakenly matched through another attribute (shared bogus MAC addresses or similar).

v1.4.3

2020-02-13

  • A bug that could treat active agents as offline has been resolved.
  • Windows agents are now limited to a single concurrent scan to avoid resource contention issues.

v1.4.2

2020-02-09

  • Changes in source TTLs on external segments no longer disqualify an asset match during correlation.
  • Cosmetic updates to email templates and task displays.

v1.4.1

2020-02-05

  • Updates to various javascript and backend dependencies.

v1.4.0

2020-02-04

  • Version 1.4.0 is a rollup of post-1.3.0 point release work.

v1.3.5

2020-02-02

  • Scans now support specifying the SNMP v3 Context for devices that require this (CatOS).
  • Scans now support the “Fast” option for the ARP probe, which is on by default in AWS VPC environments.
  • Explorers now support concurrent scans, with the limit configurable per-agent.
  • Asset correlation avoids accidentally grouping when a forged MAC address is present in routed protocol responses (NetBIOS, SNMP, etc).
  • Change reports now ignore differences in reverse DNS, hostnames, domain names, and the top-level service count.
  • Recurring, scheduled, and queued tasks without an available agent will mark the task as failed after 4 hours. Recurring tasks will attempt to run scans normally during the next scheduled period.
  • CLI binaries for OEM customers now behave according to the license agreement.
  • Long task names are now truncated automatically in the task list.

v1.3.4

2020-01-29

  • The failed tasks tab now shows a longer history by default.

v1.3.3

2020-01-29

  • Minor dependency upgrades (javascript and backend).

v1.3.2

2020-01-28

  • Search queries can now use parenthesis to group terms, for example: os:linux AND (port:22 OR port:80) AND NOT port:3306.

v1.3.1

2020-01-15

  • The Export API now supports an asset sync backend with support for checkpointing based on created_at or updated_at fields.

v1.3.0

2020-01-07

  • Version 1.3.0 is a rollup of post-1.2.0 point release work.

v1.2.9

2020-01-04

v1.2.8

2019-12-29

  • The Teams view is now split between members (access to all organizations) and restricted users (access to single organizations).
  • Team member invitations now have a Reply-To header set to the inviting user.
  • Team member invitations can now specify custom subject lines and messages.
  • Active tasks are now always sorted by their start time, not their last update time.
  • Tasks now always show the created by field (for tasks created or updated after v1.2.2).
  • The search warnings field is now cleared after each new query.
  • The search timestamp fields now default to less-than (<) if no operator is specified.

v1.2.7

2019-12-28

  • The Active Tasks tab now offers a Clear Queue button to remove all queued tasks.

v1.2.6

2019-12-27

  • Sites and Organizations can now be sorted and searched.

v1.2.5

2019-12-26

  • The Beta discount is officially retired.
  • End of year discount is valid through 2019

v1.2.4

2019-12-19

  • Support for BACnet is now available in new scans.
  • Leading and trailing spaces in Site and Organization names are now removed.

v1.2.3

2019-12-13

  • Many new fingerprints were added for HTTP and SIP endpoints. These may trigger asset change notifications due to improved device and service recognition.
  • Network scans of segments where a device responds to all ARP requests with the same MAC address will now be handled appropriately.
  • The SIP protocol is now reported properly on UDP SIP responses.

v1.2.2

2019-12-10

  • Tasks now track which user created or last updated them.

v1.2.1

2019-12-05

  • SSO configurations with multiple IdP x509 certificates will now validate against any certificate in the list, not just the first one.

v1.2.0

2019-12-01

  • Version 1.2.0 is a rollup of post-1.1.0 point release work.

v1.1.9

2019-12-01

  • Initial support for the Wireless Inventory using the new wlan-list probe.

v1.1.8

2019-11-27

  • An encoding issue in the Inventory display of certain columns has been resolved.

v1.1.7

2019-11-24

  • The Scan Max Group Size is now set to a reasonable default when older scans are copied.
  • The Copy action will no longer create names with more than one “Copy of” prefix by default.

v1.1.6

2019-11-19

  • SNMP v3 credentials may now be specified in the scan configuration.

v1.1.5

2019-11-19

  • The Switch Topology report is now available from the Inventory reports menu.
  • Assets that respond to SNMP enumeration of the CAM/MAC table are now automatically classified as switches.

v1.1.4

2019-11-18

  • A bug in the email notifier has been resolved that prevented delivery in rare circumstances.

v1.1.3

2019-11-14

  • The Network Bridges report has been optimized for improved readability.

v1.1.2

2019-11-11

  • The agent inventory search term has been added. This accepts a UUID as well as the agent name.

v1.1.1

2019-11-08

  • Email notifications for expiring, deactivating, and unused trial accounts.

v1.1.0

2019-11-05

  • Version 1.1.0 is a rollup of post-1.0.0 point release work.

v1.0.20

2019-11-04

  • OS detection now prefers the most granular fingerprint in the case of multiple matches.
  • Stopped tasks now show in the Failed list and not the Completed list.
  • Scans now support the Max Group Size option to limit the number of concurrent scan targets.
  • The site inventory search term now accepts a UUID as well as the site name.
  • The task inventory search term now shows all assets that were last updated by a given task ID.
  • The lowest_ttl field is no longer considered as a significant change in asset change notifications.
  • A bug that led to some assets being stored with only IPv6 link-local addresses has been resolved.
  • A bug that prevented OS version numbers from being tracked properly has been resolved.
  • A bug that allowed hostname-based OS matching to override more reliable fingerprints has been resolved.

v1.0.19

2019-11-01

  • Trial accounts and associated data are now automatically removed two weeks after the license period expires.

v1.0.18

2019-10-31

  • The Network Bridges report now supports filtering using the same syntax as the Asset Inventory search.
  • The Network Bridges report is now much faster, with the caveat that nodes are no longer draggable.
  • The Network Bridges report now supports up to 1,000 multi-homed nodes at a time.
  • The Completed Tasks view no longer shows tasks in a Cancelled or Error state (these are now listed under Failed Tasks).
  • The Asset Inventory view now allows merging multiple assets into a single asset.

v1.0.17

2019-10-26

  • Failed tasks can now be cleared via the Clear action button.

v1.0.16

2019-10-25

  • The Export API now treats the Organization ID in the URL as optional.
  • The Asset and Services inventory now support the id search term to find assets by ID.

v1.0.15

2019-10-25

  • The Export API now offers a list of sites in three formats (CSV, JSON, JSONL).
  • The change summary titles in the task view now link to their respective sections in the body.

v1.0.14

2019-10-24

  • A small number of typos and cosmetic improvements resolved with the web console.

v1.0.13

2019-10-23

  • The SYN probe now retries twice if no RST is received. This improves reliability at the cost of a small increase in scan times. This can be changed by the syn-max-retries advanced parameter for the SYN probe in the new scan configuration screen.

v1.0.8

2019-10-18

  • Single Sign On support is now available for all users (SAML2). This is available the SSO Settings button on the My Team page.

v1.0.7

2019-10-07

  • A handful of small cosmetic issues have been resolved in the web interface.

v1.0.6

2019-10-08

  • The asset correlation algorithm now accepts looser matches for TCP/IP stack fingerprints when matching an asset by IP address. This reduces the chance of asset churn when one or more services change between scan runs.

v1.0.5

2019-10-07

  • Scan tasks now have Name and Description fields. These can be set during task creation and updated in Recurring and Scheduled tasks. These fields are shown in the main task view right after the task type.
  • Existing scan tasks can now be copied to a new scan configuration (Copy action in the task list). This simplifies the process of running a one-off scan from an existing recurring scan definition.
  • Less common scan options have been moved to the Advanced Scan Options section, which is now visible by default in the scan configuration page.
  • The Team Manage menu now include an option to reset the security tokens of a team member (available to superusers only).
  • The Sites listing now links the site name to the inventory search query. To edit the Site definition, use the Update Site action from the Modify menu.

v1.0.3

2019-10-06

  • A race condition was fixed that could lead to some scan tasks failing with the error agent failed to queue task.
  • Minor cosmetic improvements were applied to the console.

v1.0.2

2019-10-03

  • A bug was fixed that caused some CLI downloads to have a license expiration set in the past.
  • The task scheduler is now more tolerant of temporary network errors when queueing scans.

v1.0.0

2019-10-01

Updated
Previous: runZero release notes Next: Older Explorer release notes