8.0.2404, 2024-04-18 * SGEE: Fix display of emergency snapshot count when using FlexGroups. * SGEE: Relax PDF file verification for extremely padded files. * SGEE: Fix CVTX viewer time-range when refreshing events from last hour. * SGEE: CVTX stores full share path in addition to the volume path. * SGEE: Add more details to blocked users email when rate limiter was reached. * CDM: Improved disk re-signature algorithm for GPT disks. * CDM: Hide Windows storage spaces partitions when attaching backups to origin VM. * CDM: Do not change disk signatures when attaching backups to a proxy VM. * CDM: Clarify status of archived and paused backup jobs in mail reports. * Improved license warning if the customer is not entitled to use the installed version. 8.0.2403, 2024-03-01 * UI: Modernized icons. * SGEE: Improved timing collection for FPolicy events. * SGEE: Improved display of emergency snapshots. * SGEE: Improved display of locked shares. * SGEE: Add bulk share lock/unlock. * SGEE: Modernized NAS CVTX audit viewer. * SGEE: Added remote host info to FPE REST API. * SGEE: Fix pattern pool edit controls for restricted user roles. * SGEE: Improvements for the upcoming CSO architecture and SSUI v2. * Fix LSARPC when resolving large batches of SIDs or usernames. * Workaround a bug in RODCs (Read-Only DC) for LSARPC with Kerberos. * Improved logging when ONTAP ZAPI/REST calls fail. * Improved handling of FlexGroups in the UI and backend. * Added disk usage information to REST API. 8.0.2311, 2023-11-09 * CDM: Fix regression in 8.0.2310 when restoring partial VMs. * CDM: Fix display of orphan snapshots on DP-style volumes. * UI: Add sorting to various tables. * Added event 8090 (pattern state transition). * Fix for NTLMv2 and KRB GSSAPI when DC is enforcing "SPN target name validation". * Fix rotated native logs inclusion in support bundles. * Reduce ONTAP warnings regarding the use of the "clock-get-timezone" ZAPI. * Reduce warnings due to an ONTAP issue in "job-schedule-cron-get-iter" ZAPI. * Add warning to the log if an ONTAP 9.13.1+ cluster is accessed using a legacy role. * Embedded JRE updated to Azul Zulu 8.74.0.17. 8.0.2310P2, 2023-10-17 * SGEE: Fix FPolicy setup for NFS monitoring. * Add workaround for an issue in ONTAP LSARPC. * Improved handling of bogus LSARPC replies. 8.0.2310, 2023-10-08 * CDM: Fix handling of VMDK filenames that contain square brackets. * CDM: Add per-snapshot file catalog browser. * CDM: Fix orphan snapshot view for unmanaged mirror volumes. * SGEE: Improved DMT v2 protocol, used with upcoming CSO servers. * SGEE: Allow FPolicy request packet size up to 32KB. * SGEE: Show better progress during CVTX search & analysis. * SGEE: Various speed improvements for the CVTX viewer. * SGEE: Improved pattern pool overview when using multiple pools. * SGEE: Per-SVM graphical status indicator in firewall overview. * Disable DHE based TLS ciphers in the integrated web server. * Document the use of RFC6587 for syslog TCP/TLS transport in the UI. 8.0.2307P2, 2023-07-28 * SGGE: Improved DoS protection for FPolicy listeners. * SGEE: More detailed FPE workload and latency history. * SGEE: Several bugfixes for NFS rules. * SGEE: Add basic support for blocked user e-mail notifications. * HCC: Fix display of inventory graph. * CDM: Re-try SnapMirror transfers that fail during cleanup. * CDM: Add event 3060 to log restarted snapmirror transfers. * Improved ONTAP connectivity test for NDMP access. * Embedded JRE updated to Azul Zulu 8.72.0.17. 8.0.2306P9, 2023-06-20 * Improve error reporting for failed SnapDiff V3 RPC connections. * Allow IPspace selection in SM-C setup dialog. * Fix SM-C object store retrieval for ONTAP versions pre-9.12.1. * Fix SM-C relation creation on ONTAP 9.8. * Fix SM-C single file restore issues. * Fix source volume warnings during 7-mode snapvault transfers. * IMPORTANT: this is the final release that supports ONTAP 7-mode systems. * IMPORTANT: this is the final release that includes the vCloud Director viewer. 8.0.2306, 2023-06-06 * Fix snapshot color in indexing preview when filter starts with an asterisk. * Fix bug in volume auto-indexing when re-applying settings for a manually deleted SVM. * Fix object store creation for Azure blob storage accounts. * SGEE: Fix global snapshot filter in indexing-lite. * SGEE: Fix issues when blocking NFS users. * Improve debugging for rare ZAPI timeouts. 8.0.2305P4, 2023-05-16 * CDM: Add experimental support for vSphere 8. * SGEE: Fix pattern cleaning of fullpath patterns. * SGEE: Improve display of filename includes/excludes in ruleset editor. 8.0.2305, 2023-05-09 * SGEE: Fix client unblocking regression in integrated FPolicy engine. that was introduced in 8.0.2303B2. Customers are advised to update. * CDM: Improve restores and retention worker after MCC failover. * CDM: Fix vcenter display name in ERR-70608, ERR-70610 and ERR-70611. * Allow to override SNMP trap port in event receiver setup. 8.0.2304, 2023-04-28 * SGEE: Enable indexing-lite functionality for all customers. * SGEE: Enable Cleondris pattern list database service. * CDM: Enable restore size estimation feature for all customers. * UI: Add SnapDiff version selection for ONTAP clusters. * UI: Add more X509 CSR creation options. * UI: Fix display of root aggregates during MCC failover. * Fix SnapDiff V3 processing of invalid CIFS directory entries. * Increase key size for TLS DH exchange. 8.0.2302P4, 2023-03-01 * Add workaround for MCC retrieval issue in ONTAP 9.10.1. 8.0.2302P2, 2023-02-24 * Add hidden option to perform FPE based SnapDiff V3 RPC processing. 8.0.2302, 2023-02-17 * SGEE: Improve logging of failed pattern updates. * SGEE: Skip file verification for MacOS bookmark files. * SGEE: Fix CVTX analysis on external FPEs. 8.0.2301P2, 2023-02-06 * SGEE: Fix potential display issue of blocked clients. * SGEE: Prioritize external FPEs over built-in FPE in FPE pools. 8.0.2301, 2023-01-25 * IMPORTANT: This release uses an improved update package format. Existing customers must update to 8.0.2212 before installing this or any newer update. * CDM/SGEE: Serialize auto-enablement of SnapDiff V3 RPC servers. * UI: Show RSA private key size in TLS setup screen. * Add hidden option to re-generate the TLS RSA private key. * Fix custom X509 certificate management for customers with old appliances. * Behavior change: The private key and certificate referenced in the config file is used as long as the custom certificate management is not activated. 8.0.2212, 2022-12-02 * SGEE: Speed improvements for the DFR feature * SGEE: Fix SnapGuard AFS snapshot analysis on ONTAP 9.10.1 * SGEE: The CVTX analysis feature is now visible to all customers * SGEE: More flexible user and host filtering in the ruleset editor * CDM: Improve LVM-resignature when MBR partition is of non-LVM type * UI: Fix display of SnapDiff V3 speed in status screen * UI: Add X509 certificate management (CSR generation and installation of certificates via UI) * Dynamically enable the SnapDiff V3 RPC server during indexing (requires proper rest-role) * Add source IP address information to event 9002 (failed login attempt) * Allow installation of Cleondris V2 next generation update images * Behavior change: the web server private key and X509 certificate is stored in the database * Behavior change: the private key and certificate referenced in the config file is only imported once IMPORTANT: please read the latest version of 'TIN-96-ONTAP-Permissions.pdf' for instructions on how the Cleondris user and role needs to be configured on ONTAP versions 9.10.1 and newer. 8.0.2209P2, 2022-09-30 * CDM: Fix signature verification for Linux self-service restore client 8.0.2209, 2022-09-30 * CDM/IDX: Re-try alternate SnapDiff V3 data LIFs in case of connectivity issues * CDM/IDX: Use improved gen-3 databases for newly indexed volumes * CDM/IDX: Fix database size summary column in cluster and SVM indexing screens * CDM/IDX: Fix temporary high storage consumption during SnapDiff processing * CDM/IDX: Add indexing pause option to volume indexing template * CDM/IDX: Add hidden setting to use SnapDiff V1 on ONTAP 9.10.1 (requires NetApp FPVR) * SGEE: Fixes for the pattern pool (garbage collection, improved hit details during export) * SGEE: Improved SnapScan report, optimized storage of SnapScan information * SGEE: Improved logging when SID resolution for SVM-level exception fails * SGEE: Add hidden setting to modify FPolicy external engine port (requires Cleondris FPVR) * SGEE: Add blocked column in CVTX viewer and blocked request filter * SGEE: Fix liveview visibility for users that have no "INVENTORY_NA_VIEW" privilege * Improve LDAP based login behavior when SID lookup fails due to referral issues * UI: Allow LDAP authentication via global catalog port * UI: Enforce strict settings for the session cookie (SameSite=Strict; Secure; HttpOnly) Can be disabled with the advanced option "web.cookie.strict.enable" = "off" * UI: Add support for HSTS (RFC6797, HTTP Strict Transport Security). Can be enabled with the advanced option "web.hsts.enable" = "on" * Add low storage monitoring events 2010 and 2011 8.0.2207P8, 2022-08-02 * CDM/IDX: Speed improvements for SnapDiff V3 processing * CDM/IDX: Workaround for SnapDiff V3 returning bogus file attributes 8.0.2207P6, 2022-07-26 * HCC: Various improvements for the failback logic error reporting * CDM/HCC: Improve robustness when reading VMX files from slow-responding vcenter 8.0.2207P4, 2022-07-25 * IDX: Add maximum snapshot age filter to SVM indexing template * IDX: Fix display of snapshots when indexing a fresh volume * SGEE: Allow updates of the pattern pool description for non-default pools * SGEE: Allow to change the pattern pool case-sensitivity behavior for pattern matching * SGEE: Automatically enable case-sensitive matching for new pattern pools * SGEE: Ignore dangling local patterns and pattern list references in rules that reference a pattern pool * SGEE: Do not allow the creation of pattern pools with an empty name * SGEE: Fix addition of patterns containing spaces into a pattern pool in the UI * SGEE: Fix a border case in pattern pool monitoring reporting when a pattern exists with variations in lower/upper case * SGEE: Fix monitoring time when manually adding patterns into pattern pool * SGEE: Improve error message when SID resolution fails due to DNS or routing problem 8.0.2207P2, 2022-07-13 * IDX: Support FlexGroup indexing with SnapDiff V3 * IDX: Allow NDMP baselines for FabricPool volumes on ONTAP 9.7+ * SGEE: Support volume analysis with SnapDiff V3 * SGEE: Show start/end-times for each snapshot analysis 8.0.2207, 2022-07-12 * SGEE: Display latest events in CVTX viewer even if ONTAP time is in the future * SGEE: Various improvements for the private rawlog feature * IDX: Fixes for SnapDiff V3, speed improvements for both V1/V3 * UI: Enable SnapMirror volume restore in browser * UI: Improved display of license expiry details 8.0.2205, 2022-05-31 * UI: Show event ID in various log tables * UI: Improve display of SVM status for MCC and SVM-DR SVMs * SNMP MIB version "202204241200Z", see https://appliance-ip/docs/CLEONDRIS-MIB.mib * CDM: Fix display problem and mail report when backup job references deleted volume * SGEE: Fix FPolicy setup when audit is generally disabled, but audit-read is enabled * SGEE: Reduce fpolicy re-deployment during pattern updates to workaround ONTAP bugs * SGEE: Add wildcard based volume selection for SVMs with only one ruleset * SGEE: Improved REST api (add host link to FPE details, add FPE link(s) to SVM details) * SGEE: Fix edge case when CVTX search results overlap different blockchain files 8.0.2204, 2022-04-15 * CDM/IDX: Various improvements for SnapDiff V3 - please visit Cleondris homepage * Fix behavior of ONTAP 9.7+ version-dependent workarounds before first scan * UI: Clarify support bundle download screen, add link secure upload server * UI: Show warning for expiring demo licenses only during last 7 days * UI: Show warning if support contract of installed license is about to expire * UI: Show customer ID in licensing screen 8.0.2203P6, 2022-03-29 * UI: Improve display of snapshot details * CDM: Remove VMDK CBT information before starting full VM restore/clone * CDM: Improve behavior when vSphere cold migration fails during full VM restore/clone * SGEE: More optimized fpolicy settings to further mitigate NetApp bug 1438207 * SGEE: Fix visibility of e-mail report setting for SnapGuard-only licensees 8.0.2203, 2022-03-14 * SGEE: Improve file verification for OOXML documents (.docx, .pptx, .xlsx) * SGEE: Enable max. fpolicy TCP buffer setting by default for new firewalls * SGEE: Increase outstanding fpolicy requests to mitigate NetApp bug 1438207 * SGEE: Allow custom event label for file verification rule * SGEE: Fix visibility of e-mail report setting 8.0.2202P2, 2022-02-28 * SGEE: Fix SID resolution for whitelisted users in firewall rulesets * SGEE: Improve LsarLookupNames2 and LsarLookupNames3 response parsing * Improved logging of private database backup feature 8.0.2202, 2022-02-16 * SGEE: Improved CVTX viewer file operation filtering * SGEE: Fix display of firewall rulesets with duplicate names * SGEE: File verification: work around ONTAP FPolicy close notification bug * SGEE: Fix SnapScan check for regex-style patterns * SGEE: Improved denial-of-service protection for FPolicy listener * SGEE: Improve storage of persistent allow/block entries * SGEE: Fix FPolicy deploy if SVM and ruleset file verification settings are inconsistent * SGEE: Fix regression in host based access blocking * SGEE: Improve blocking of users after FPE reboot * CDM: Allow ESXi NFS mounts without leading slash in path * CDM/IDX: Enable SnapDiff V3 for all customers * UI: Display ONTAP per-interface service policy information * Work around bug in ONTAP SVM-level ZAPI for cron job retrieval 8.0.2112, 2021-12-07 * SGEE: Do not deploy privileged FPolicy user for NFS-only SVMs * SGEE: Fix LSA Kerberos setting inheritance for privileged connection * SGEE: Added event 8082, clarified description for event 8081 (pattern list updates) * SGEE: Add time-based CVTX log truncation option * SGEE: Fix CVTX time-range search * SGEE: Add hidden option "snapguard.svmdr.enable" to disable automatic SVM-DR failover * CDM/IDX: Bump up delay for DP volume based SnapDiff processing to one hour 8.0.2111, 2021-11-17 * SGEE: Improved FPolicy connection failover between FPEs * SGEE: Improved daily e-mail report (include SnapGuard pool statistics) * SGEE: Per-SVM scheduled e-mail report (beta) * SGEE: SnapScan rules (passive protection for airgap scenarios) (beta) * SGEE: Improved storage of fpolicy/indexing pool hits * CDM/IDX: Improved behavior for volumes with multiple snapshots with same timestamp 8.0.2110P4, 2021-10-18 * Add advanced option "snmp.source.ro" (limit allowed SNMP clients based on IP) * Do not gather ONTAP SMC information unless a hybrid cloud license is present * REST API improvements 8.0.2110, 2021-10-05 * Major UI cleanup * Improved LDAP test button * SGEE: Official support for CVTX audit logging * SGEE: Fix firewall redeploy loop when there are no volumes to protect 8.0.2109, 2021-09-05 * REST API improvements * Improved support for Amazon FSx for NetApp ONTAP 8.0.2108P4, 2021-08-20 * SGEE: Add pattern list option to volume analysis * SGEE: Store CVTX files on Windows FPEs in DMT install directory 8.0.2108, 2021-08-10 * SGEE: Improve CVTX event filtering by date and time * SGEE: Fix handling of sporadic fpolicy status query messages 8.0.2107P6, 2021-07-28 * SGEE: Highlight selected state in pattern pool editor * SGEE: Fix occasional "bind failed" errors on FPEs (JIRA-1424) * SGEE/IDX: Show index re-scan button in pattern pool (requires protected and indexed volumes) * Do not log warnings for missing REST privileges when detecting cloud targets 8.0.2107P4, 2021-07-15 * HCC: Add guided failback process * SGEE: Workaround issues with SO_REUSEADDR on Linux based FPEs * SGEE: Fix re-deploy bug in EVTX-only forwarding configurations * Enable SMB3 for general SID resolution and SGEE file verification 8.0.2107P2, 2021-07-09 * Various improvements to the EVTX forwarding 8.0.2107, 2021-07-07 * CDM/IDX: Reduce disk access frequency of NDMP history writer * CDM/IDX: Increase maximum allowed path length during NDMP baseline scan * SGEE: Usability: do not clear filter when moving entries in pattern pool * Improved workaround for bugs in ONTAP snapmirror-get-iter ZAPI * Show size of detected EVTX audit log files, allow sorting by name, date and size * Improved resilience when dealing with unstable TCP syslog connections, increase queue size * Decreased TCP syslog reconnect delay to 20 seconds, increased idle timeout to 90 seconds * Improved logging of EVTX forwarding actions in support bundle * Allow use of unresolved SIDs to check group membership in multi-domain setups 8.0.2106P4, 2021-06-23 * CDM/IDX: Skip snapshot when NDMP baseline reports paths longer than 16K characters * CDM/IDX: Fix resource leaks during aborted NDMP scans * CDM/IDX: Add possibility to delay indexing of XDP snapshots * SGEE: Fix file verification for PDF files using ISO 32000-2 standard 8.0.2106P2, 2021-06-11 * SGEE: Fix import of patterns containing certain non-latin characters * SGEE: Allow exact search of patterns in pool (use double quotes) * SGEE: Enable per-SVM CVTX logging and browser (beta) * SGEE: Rename events 8041-8045 to "EVTX Forwarding" * CDM: Re-enable volume dependency settings for hosts 8.0.2106, 2021-06-04 * CDM/IDX: Improved scheduling in presence of long-running SnapDiff sessions * CDM/IDX: Separate snapshot count column in per-SVM indexing view 8.0.2105P8, 2021-05-25 * CDM/IDX: Add indexing events 6200-6203 * CDM/IDX: Improve scalability of concurrent NDMP and SnapDiff indexing * Increase queue size for external TCP syslog receivers to 10000 * Increase connection idle timeout to 60 seconds for external TCP syslog receivers * UI: Improved LDAP authentication test 8.0.2105P6, 2021-05-20 * Fix regression in default-domain setup 8.0.2105P4, 2021-05-19 * SGEE: Fix bug in ruleset editor when editing rules with pool * Add multi-domain support for LDAP login and firewall credential defaults 8.0.2105P2, 2021-05-12 * SGEE: Add audit events for share lockdown * SGEE: Add lockdown mode indication in SVM overview * SGEE: Fix permission issue in pattern pool * Set hidden option auth.ad.auto.subdomain by default to off 8.0.2105, 2021-05-03 * SGEE: Enable pattern pool feature for all customers * Fix behavior of hidden option auth.ad.auto.subdomain * Increase timeout for SnapMirror-C snapshot retrieval 8.0.2104P8, 2021-04-29 * SGEE: Permission fix: read-only users were allowed to enable/disable fpolicy * CDM: Do not modify snapmirror policies during SnapMirror-C transfers 8.0.2104P6, 2021-04-22 * SGEE: Fix SnapGuard NG ruleset editor, regression from 8.0.2104P4 * CDM: Improve SnapMirror-C integration on ONTAP 9.8 8.0.2104P4, 2021-04-21 * Updated application runtime, significantly reduces memory usage * Include indexing data in inventory export 8.0.2104P2, 2021-04-20 * SGEE: Simplify blocking of multiple clients in the live view * SGEE: Do not modify max. outstanding FP requests in ONTAP 9.8 * SGEE: Fix matching of patterns with question marks and no asterisk * SGEE: Show FPE latency and TPS measurements in FPE view * SGEE: Add REST APIs for SnapGuard NG features 8.0.2104, 2021-04-06 * CDM: Improve handling of ONTAP internal snapshot creation error * HCC: Shutdown VMs before breaking the SF volume pairing * SGEE: Improve file verification for legacy MS office formats * Add SPLUNK format option for EVTX forwarding events 8041-8045 8.0.2103P4, 2021-03-17 * SGEE: Improve speed of SID resolution * SGEE: Fix matching of full path expressions (8.0.2102 regression) * Fix editing of user roles (8.0.2102 regression) * Fix background color setting for custom UI title 8.0.2103P2, 2021-03-12 * SGEE: Improve FPE deployment for SVMs with hundreds of volumes * CDM/IDX: Add buffered pipeline stage to NDMP based FH processing 8.0.2103, 2021-03-05 * SGEE: Fix Username-to-SID resolution for SVM-level user exceptions * SGEE: Use sync fpolicy in case there is only blocking file verification * SGEE: Improve FPE throughput 8.0.2102P2, 2021-02-26 * CDM: Fix SnapMirror warnings in backup jobs with many volumes * SGEE: Improve logging during firewall deploy * SGEE: Add functionality to set ONTAP fpolicy engine TCP buffers to 2MB 8.0.2102, 2021-02-19 * CDM: Fix errors during backup of flexgroups [JIRA-742] * CDM: Improve logging for failed SnapMirror transfers * CDM/IDX: Allow NDMP copy/restore without ACLs [JIRA-1378] * CDM/IDX: Fix re-indexing of snapshots that have entered grace period * CDM/HCC: Enable support for vSphere 7 for all customers * SGEE: Fix auth problems when updating patterns via HTTP [JIRA-1396] * SGEE: Add file verification connection test button * SGEE: Add share-level lockdown-mode * SGEE: Return original pattern when matching case-insensitive * The error log can be exported as a csv file [JIRA-1379] * File browser uses NDMP instead of SnapMirror on 9.7+ FabricPool volumes [JIRA-1380] * Allow searching for junction paths in the inventory search box [JIRA-1382] * Show replication type in per-SVM volume list [JIRA-1383] * Indicate if a volume is indexed directly or indirectly in volume screen [JIRA-1384] * Preliminary support to export the ONTAP inventory [JIRA-1385] * External events can be filtered on a receiver basis by event level [JIRA-1386] * ONTAP cluster scan times can be manually set using cron schedules [JIRA-1387] * Add support for LDAP logins via non-Microsoft LDAP proxy server * Extend auto-generated basedn when AD sub-domain user logs in * Improve LDAP and SYSLOG debug information in support bundles * Increase AltaVault default request timeout to 90 seconds 8.0.2012X16, 2020-12-23 * SGEE: Fix SID display of pattern monitoring hits * SGEE: Improve display of FPEs and FPE pools * SGEE: Add private feature to log LV on FPE into file * CDM: Fix for VMFS restores from ONTAP snapmirror targets * CDM/IDX: Improve error reporting for failed SnapDiff v1 sessions * CDM/IDX: Finetune SnapDiff filename generation based on volume security style * CDM/IDX: Increase SnapDiff/NDMP parallelism * CDM/IDX: Limit concurrent SnapDiff sessions per cluster * CDM/IDX: NDMP always leaves one SnapDiff slot available * Improve display of current job activity in case of many recent jobs 8.0.2011P6, 2020-11-26 * CDM: Improve ONTAP NFS datastore detection in presence of SVMs with IP conflicts * CDM/HCC: Make vcenter scans more robust in presence of missing managed objects * CDM/IDX: Skip indexing of snapshots with persistent SnapDiff I2P and filename problems * CDM/IDX: Fix display of number of non-indexed snapshots in filter button in volume screen * CDM/IDX: Fix filtering of volumes in SVM indexing overview screen * CDM/IDX: Fix display of auto-excluded snapshots * HCC: Support failover of virtual machines with multiple datastores * HCC: Initial REST API for failover triggering * SGEE: Use more descriptive ONTAP fpolicy and engine names * SGEE: Improve file verification for office documents written by MACOS users * SGEE: Improve log messages during SSUI login, fix login via group membership * SGEE: Enable NFS support in ruleset editor for all customers * SGEE: Add possibility to set SVM-level default volume ruleset * SGEE: SnapGuard NG: improve auto-state changes and index based pattern checking * SGEE: Fix regression from 8.0.2011 where custom JSON based pattern import failed * Fix SVM-DR relation detection for stopped SVMs and/or in MCC use-cases * Reduce memory usage in large ONTAP environments * UI speedup in in very large ONTAP environments 8.0.2011, 2020-11-06 * SGEE: Add support for pattern list import from CIFS shares * SGEE: Add support for pattern list import using simple txt files (one entry per line) * SGEE: Allow SID lookups via ONTAP data LIFs (instead of domain controller) * SGEE: Perform auto-switchover for SVM-DR protected SVMs * SGEE: Cache last auto-discovered domain controller * SGEE: Smaller improvements in the FW setup UI * SGEE: Includes functionality for the SnapGuard NG beta program * CDM: Do not automatically cleanup failed VMFS LUN attaches, allow inspection of temporary LUN mapping * Improvements for Kerberos/SPNEGO in environments with non-Microsoft KDCs 8.0.2010B4 * CDM: Add advanced option "restore.lun.id" to override LUN ID during VMFS attach * HCC: Add option netapp.sf.volpair.delay to specify delay in seconds when creating volume pairings 8.0.2009B4, 2020-10-02 * CDM/IDX: Improved indexing support for flexgroups * CDM/IDX: Fix SMB share display for shares that export subdir of root volume * CDM/IDX: Improvements in replication screens, show sm-policy and schedules * CDM: Hide non-data SVMs and constituent volumes in backup editor * IDX: Improve pattern matching in snapshot include/exclude filter * SGEE: Workaround issue when ONTAP does not return any domain servers * GUI: Update dependencies, drop support for IE8 and IE9 * Improved C2C preview support (catalog, restores, version screen) 8.0.2008P6, 2020-09-18 * SGEE: Workaround ONTAP bug triggered by improved FPolicy shutdown in 8.0.2008 * IDX: Improve pattern matching in snapshot include/exclude filter * IDX: Fix regression in 8.0.2008P4 pattern matching 8.0.2008, 2020-08-25 * SGEE: Improved FPolicy shutdown (reduces fpolicy logs on ONTAP 9.7) * SGEE: Fix reporting of matched pattern in presence of rate filter * SGEE: Allow AD group names in SSUI admin user list * HCC: Allow to execute scripts on Linux VMs during failover * HCC: Display info about executed scripts in failover details * By default, set "snmp.enable" to "off" * Fix CRLF line termination issue in mail reports * UI: Enable TLS v1.3 8.0.2007, 2020-07-07 * SGEE: Improve file verification for office documents with wrong extension * SGEE: Add rate threshold option to file verification rule * SGEE: Add Kerberos auth option to SVM-specific file verification user setup * SGEE: Fix wrong labeled events in ruleset overview (8.0.2006P10 regression) * HCC: Improve guest script execution when Powershell does not create redirected output * CDM/IDX: Bugfix for rare NDMP based indexing edge case with very large inode numbers 8.0.2006P10, 2020-06-29 * HCC: Add initial support for script execution via VMware guest tools * HCC: Improve log messages during volume-pairing setup * CDM/IDX: Show snapshot metadata in grace period (in per volume detail screen) * CDM/IDX: Correct display of per SVM index size (include databases in grace period) * SGEE: By default use NTLMv2. * SGEE: Allow use of Kerberos auth for file verification worker * SGEE: Restructure rule editor and ruleset overview * SGEE: Improve automatic pattern update in case remote enters empty document * SGEE: Add pause functionality to file verification log * Fix ISO timezone and add BOM in RFC5424 syslog headers * Reduce reporting rate of DNS resolve errors * Improve display of ONTAP homedirectory shares * UI: Minor improvements in event setup screen * UI: Improve editor for domain users (SID override) * UI: Add exclude filter for event receivers * UI: Disable auto-complete for ONTAP and VMware setup forms. 8.0.2006P8, 2020-06-16 * CDM: Improve display of AltaVault SnapMirror relations * SGEE: Improve LIF selection for file verification * SGEE: Increase max pending FPolicy requests to 256 * SGEE: Improve file verification 8.0.2006P2, 2020-06-14 * Clarify event message formats by renaming "DEFAULT" format to "SIMPLE" in UI * Add TCP and TLS transport options for Syslog event receivers * Add RFC 5424 and RFC 3164 header style options for Syslog event receivers * RFC 5424 format uses more precise timestamp, "cleondris" in APP-NAME field and event number in MSGID field * RFC 3154 format uses "cleondris" for the TAG value, TAG is followed by colon-space * Current Syslog header style is called "Legacy", identical to RFC 3164, but without terminated TAG element * Use 4-digit event prefix (CDM-XXXX) in SIMPLE formatted event messages sent via e-mail * Use 4-digit event prefix (CDM-XXXX) in SIMPLE formatted event messages sent via Syslog with RFC5424/RFC3164 header style * For backwards compatibility, use 5-digit event prefix (CDM-0XXXX) in SIMPLE formatted event messages sent via Syslog with "Legacy" header style * CDM/IDX: add workaround for AltaVault/SVM-DR bug in ONTAP * CDM/IDX: auto-exclude vserver temporary snapshots from indexing * CDM/IDX: auto-disable NDMP baselines for volumes on fabric pool * HCC: Add indication of VMs that match the filter in failover groups 8.0.2006, 2020-06-04 * SGEE: More flexible file verification for PDF writers that produce non-conforming documents * SGEE: Improved file verification stability when CIFS connection is interrupted * SGEE: Added improved support for NFS v3/v4, needs PVR 8.0.2005P8, 2020-05-27 * SGEE: Added possibility to define SVM-level based firewall rule exceptions * Added search functionality for virtual machines 8.0.2005P6, 2020-05-20 * SGEE: Add SVM admin self service UI option to delegate user unblocking in provider environments * SGEE: Allow to remove patterns from top list one by one * CDM/IDX: Improve SVM-DR support for inventory, browser and versioning screens * HCC: Add a possibility to filter candidates when adding additional VMs to a failover group * Allow to specify non-default UDP port for syslog receivers (hostname:port format) 8.0.2005P2, 2020-05-11 * HCC: Improve image rendering in PDF failover reports * HCC: Display volume access groups in initiator list * Show storage/vcenter setup wizard even if license is already present 8.0.2005, 2020-05-04 * HCC: Allow custom logo in PDF failover reports * HCC: Allow custom notes in PDF failover reports * SGEE: Fix password save problem for file verification user * Improved handling of SNMP v1/v2 requests 8.0.2004P8, 2020-04-24 * HCC: Improve VM restores from stealth backups involving multiple volumes * HCC: Show snapshot IDs in inventory * Allow loading of license from external file 8.0.2004P6, 2020-04-10 * HCC: Improve network reconfiguration in case vCenter is slow * HCC: Improve behavior in case ESXi takes long time to see new datastores 8.0.2004P4, 2020-04-10 * HCC: Improve handling of sandbox networks in clusters * CDM: Improve index compression * CDM: Improve index compression for NDMP-only indexing * CDM: Tolerate inode resolution errors during SD indexing 8.0.2004P2, 2020-04-08 * HCC: Improve resignature of large number of LUNS * HCC: Improve resignature of failover LUNS, avoid slow "queryUnresolvedVmfsVolume" call * HCC: Allow failover abort 8.0.2004, 2020-04-06 * HCC: Show HCC failover report download button * HCC: Add more detailed view of historic failover executions * HCC: Improve logging during cleanup * HCC: Make sure failover detail screen is promptly reloaded when a failover ends * HCC: Add warning modal and ask for confirmation before starting a real failover * GUI: Add link from host warning sign to host issues in inventory screen * HCC: Enable view of historic failover executions * HCC: Show schedule information in Solidfire inventory * HCC: Add sorting to SolidFire volume screen * HCC: Add HCC_ standard environment variables * HCC: During failover, try to register VMs on the vCenter cluster * HCC: Add script and environment variable support to failover plans * HCC: Add plan-of-plans feature * HCC: New screen design for failover tasks * HCC: Allow registration of hosts (for script execution via DMT) * HCC: Show datastore information in SolidFire inventory and DR wizard * HCC: Add protection section to mail reports 6.4.2004, 2020-04-03 * SGEE: Improve domain selection when priv user is same as LSA user * CDM/IDX: Add option "index.snapdiff.enable" (default is "on") * CDM: Fix LVM2 rewrite for Linux disk attach (handling of empty fields) 6.4.2003P12, 2020-03-31 * CDM: Improve delayed save of indexing config under high load * SGEE: Improve file verification for PDFs and empty office documents * CDM: Improve SSH client for linux self service restore (new kex, mac and host-key algos) * SGEE: Better log messages when file verification connection fails * SGEE: Add possibility to add top matching patterns to pattern list * HCC: Improve restore from stealth backups * HCC: Add more parallelized failover of VMs in same group * HCC/CDM: Add VM detail screen * Reduce number of DB connections during retention * Reduce DB load during backup cache update 6.4.2003, 2020-03-12 * SGEE: Improve firewall overview * SGEE: Collect per-pattern matching statistics * SGEE: Per-pattern matching statistics can be cleared * SGEE: Improve display of volume analyzer overview * SGEE: Show number of analyzed snapshots per analysis * SGEE: Improve DFR detail screen * SGEE: Multiple DFR and File verification fixes * SGEE: Add file verification details to Splunk events and FPolicy screen * SGEE: For renamed files, add new path to Splunk events * CDM/HCC: display more information about the VMs in the inventory * CDM/HCC: better display of vcenter connection error reason * CDM: Fix for VM restore on SVMs with LS mirrors * HCC: allow all customers to use backup/restore * HCC: add BCDR events 9670, 9671, 9672, 9680 and 9681 * Reorder and rename widgets on status screen * By default use OS hostname in syslog packets * Previously "cdm" was used as hostname in syslog packets, use "syslog.hostname" option to override * Allow user to easily enable all events (in new installations all are enabled by default) * Simplify NetApp cluster setup dialog * Rename event 9004 to "User auto-logout" to be more consistent * Clarify some of the event names (events 2001,2003, 2150, 2151, 2152, 2154) * Limit default maximum auto-scaling of application heap to 4GB 6.4.2002P12, 2020-03-02: * SGEE: Fix SVM firewall enable/disable mechanism after reboot * SGEE: Improve retrieval of SVM ms_dc servers * CDM: Reduce database load when indexing thousands of snapshots per day * Improve inventory overview (ONTAP models, detailed SolidFire numbers) * Fix for SolidFire retention worker * Fix LVM metadata rewriter for RHEL/CENTOS 8 * UI: Firewalls can be enabled/disabled from the overview screen * Speedup recalculation after regular cluster/vcenter scans * Fix for upgrade problem with 6.4.2002 + 6.4.2002P2 releases (via 6.4.2002P4) * Fix UI for NDMP and SnapMirror restores into root directory of data volumes * Improve NDMP logging for failed data connections * Improve display of vCenter faults (permission denied etc.) 6.4.2002, 2020-02-07: * GUI: All domain settings are accessible on one screen * SGEE: Add enable/disable checkbox to SVM protection (no need to change FPE anymore) * SGEE: Allow re-use of global SID/LSARPC user in SVM settings * Add possibility to add SID/LSARPC user in global domain settings * Added more audit events (9101, 9102, 9610+) 6.4.2001P6, 2020-01-28: * HCC: Allow the mapping of networks during failover * HCC: Warn if additional vms are affected by a failover * GUI: Add graphical representation of volume relations * GUI: Improve sorting of SVM volume list * GUI: Add SID lookup feature to domain user editor * CDM: Improve NDMP FH handling under high load * SGEE: Improve handling of SID lookup settings 6.4.2001, 2020-01-15: * SGEE: Improve data lif selection for file verification. * SGEE: update discovered domain servers only on demand. * SGEE: Fix remote pattern updates with line breaks. * CDM: Index memory management improvements. * CDM: Allow triggering of index baseline scans. * CDM: Force use of SnapDiff for incrementials. * CDM: Auto to exclude stale NDMP snapshots from indexing. * HCC: Allow failover steps to wait until VMware tools are running. * HCC: Existing networks can be used for sandbox failover. * GUI: Issues can be acknowledged individually. * Do not send HTTP 408 on connection timeout, fixes spurious errors in bogus REST clients. * Add advanced option "rest.keepalive.enable" (HTTP keep alive for REST API), default is on. * Add initial native support for Splunk event format ("generic_single_line" sourcetype in Splunk). * Allow to set multiple DC hosts for LDAP auth (DC field can take comma separated list). 6.4.1912P8, 2019-12-19: * CDM: fix backup job editor warning * HCC: Improve logging when creating sandbox networks * HCC: Remove network adapters from vm if sandbox network creation fails * SGEE: improved file verification details * SGEE: show matching pattern in fpolicy event log * SGEE: Fix handling of special characters in pattern lists * Fix handling of unknown virtual disk controllers in vcenter scans * Add ONTAP license types into support bundle 6.4.1912, 2019-12-04: * This is a major update that cannot be downgraded via the UI to 6.2 or earlier. * SGEE: Improve Kerberos authentication and DC detection in SID resolver. * SGEE: Synchronize block/white list between SVM groups * HCC: First public version with ElementOS snapshot backup support. * CDM: Add SnapMirror restores into FabricPool volumes in file browser. * CDM: Add support for vSphere NVME disk controllers * Add support for STARTTLS and authentication when sending report e-mails. 6.2.1911, 2019-11-06: * Changelog visible when updating the software * UI header color can be changed (advanced option gui.header.color) * SGEE: Add initial FPE pooling features (allow tagging of FPEs and ONTAP clusters) * SGEE: Fix node selection when SVM has volumes on nodes without data interfaces * SGEE: Add better CEF formatting for EVTX events 8041-8045 * CDM: Add support for VM restores with manual snap selection from for cascaded SnapVault * HCC: Add node information to element systems * HCC: Preserve power state of VMs during failover * HCC: Allow to disable unregistering of vms 6.2.1910, 2019-10-11: * Cleanup of internal error codes (now always in 5-digit format ERR-XXXXX) * Better HTTP connection logging to debug buggy clients that use keep-alive * CDM: Fix support for VM restores from cascaded SnapVault * SGEE: show scan rate for each FPE 6.2.1909, 2019-09-13: * Add new navigation in inventory * Fix browser bug in split list mode * Fix NPE in inventory when viewing unscanned ElementOS clusters * Fix scan attempts for recently removed hosts * Support more certificate types in PEM format * CDM/IDX: Improve NDMP MD5 auth error display during indexing * CDM/IDX: Add index statistics grace period for accurate reporting * CDM: Read out all guest IP addresses of a VM (not only primary) * CDM: Add autoscan flag to AVA setup * HCC: Fix permission issue on HCC failover 6.2.1905P2, 2019-05-27: * Handle VMware SDK HTTP 500 errors more consistently * CDM: Improve approximate snapshot matching for AltaVault * SGEE: User is preselected and a default block time is inserted when blocking a user 6.2.1905, 2019-05-15: * CDM: Improve database connection establishment when many backup jobs run currently * HCC: Improved failover, add initial sandbox feature 6.2.1904, 2019-04-19: * New major release 6.2 with internal database schema 139 * Due to the improved database schema, this release cannot be downgraded (pre 6.2) via the web interface * CDM: Improve logic to restore VMs to previous folder and resource pool * CDM: Improve restore of VMs in nested vApps * CDM: Fix warning when scanning a cluster during a volume clone operation * CDM: Cache AVA inventory * SGEE: Improve handling of buggy FPE/hosts, adapt scan frequency * SGEE: Add generic file verification * SGEE: Only show data SVMs when configuring a new firewall * SGEE: Add manual FPE interface selection for DMT hosts with multiple interfaces * SGEE: Fix race condition during setup of multiple SVMs on same FPE * Workaround for stalled ZAPI call when creating snapshots in ONTAP 9.5 * Workaround for NDMP race condition in ONTAP pre 9.5 * Mail report: add possibility to include catalog information * Kerberos: improve PAC handling when resource SID compression is enabled on DC * Add initial support for CEF formatted syslog messages * Allow loading of X509 certificate chains * By default only use TLS 1.2, disable NON-PFS and cipher suites using SHA-1 * DH ephemeral key size can be increased in cdm.conf using "https.option.dhkeysize = 2048" (may break old clients) * By default, if TLS is enabled, redirect non-secure requests for login page to TLS * Add possibility to set fallback login based on GCE instance id, AWS instance ID or static password * GUI: Add paginator to restore log * GUI: Show more details for ONTAP network interfaces * GUI: Use "Dual" instead of "7+cDot" in FPE GUI * GUI: Improve display of DMT host properties (hostname, NETBIOS, IP adresses) 6.0.1902P6, 2019-02-28 * CDM: By default, hide snapmirror label feature in policy editor. * Add advanced option "backup.netapp.snapshot.label.enable" (default is false). 6.0.1902P4, 2019-02-19 * SGEE: Improve behavior when handling FPE/DMT connection errors * SGEE: Automatically remove stale FPEs * SGEE: Add possibility to group firewalls * Workaround ZAPI bug when retrieving many aggregates * Add advanced option netapp.aggr.maxrecords (default "100", use "0" for ZAPI default) * Use SnapMirror RST for FabricPool restores 6.0.1902P2, 2019-02-05 * SGEE: Add support for old HTTP/1.0 proxies when downloading patterns * SGEE: Improve FPE cDot port reuse * GUI: Instruct Chrome to not automatically translate GUI elements 6.0.1902, 2019-02-01 * SGEE: Improve proxy behavior for pattern updater when using TLS * SGEE: Fix socket reuse for FPolicy inbound listener * Fix LDAPS connection errors * Fix bug where LDAPS was always enforced upon LDAP config update 6.0.1901P2, 2019-01-24 * IDX: Fix behavior for cDot snaps with identical timestamp * IDX: Fix registration of new 7-mode vFilers * CDM: Do not hide snapmirror label in policy editor * SGEE: Better log messages when pattern download fails 6.0.1901, 2019-01-22 * HCC: Major update of the DR wizard and DR plan execution * CDM: Improve support for backup/restore during MCC switchover * SGEE: Add proxy support for list updater 6.0.1810, 2018-10-29 * IDX: Enable SnapDiff indexing engine for all customers * IDX: Only show non-indexed data SVMs when adding SVM via general add dialog * IDX: Show more details per indexed snap * IDX: Add workaround for legacy "C" volumes * IDX: Properly remove databases when removing index config for a volume * IDX: Fix display of unreachable volumes (no link, icon in volume list) * CDM: Fix bug when displaying shares on 7-mode non-default vfilers * SGEE: Add pattern management * SGEE: Add possibility to set reverse connection hostname sent via DECRPC * SGEE: Improve support for ONTAP in SMB2 client mode * GUI: Many small improvements in the inventory and indexing screens * Fix handling of incoming SNMP requests with unsupported version * Fix SNMP handler error during shutdown * This major version includes all updates from 4.2.1810