Release Notes for Open-AudIT v2.0.6

Release Notes for Open-AudIT v2.0.6

Released 2017-09-11.

 

NOTE - Dashboard Graphs If you install 2.0.6 and your Dashboard graphs do not populate, simply click on one of the links in Discover, Report or Manage. You will then see the EULA. Click accept and all will work as intended.

Overview

Collector / Server! We have a new feature for Enterprise users called Collector / Server. What this means is that you can install Open-AudIT on your main machine (the Server), and install another Open-AudIT in a remote network (the Collector) and control that remote server from the main Open-AudIT server. The Collector discovers devices on a schedule controlled by the Server. All credentials are set on the Server. Once a Collector has been configured, all work is then performed on the Server and sent to the Collector as required. We have a new wiki page detailing this feature at Collector / Server. All Enterprise licensed users recieve one Collector license. More can be purchased as required.

Tasks Change

As part of the Collector / Server feature, we have changed the way Tasks work. Tasks are now able to be scheduled down to "minute" granularity. Tasks work as per the universal "cron" type schedule (Wikipedia link). When we install (or upgrade) Open-AudIT, you will see a cron entry or scheduled task that runs each minute. This is the controlling task that asks Open-AudIT to check to see if there are any jobs it should run at this time. You should not delete this entry. Your old tasks will still exist and continue to work and can be deleted however no new tasks can be created using the old method. You will see an entry under menu -> Admin for Tasks.

NOTE - If you are using HTTPS you will need to edit the file (linux) /usr/local/omk/bin/open-audit_tasks.sh or (windows) c:\omk\bin\open-audit_tasks.vbs to change the URL. We hope to automate this int he future.

 

Discovery and SSH keys 

We now have the ability to accept password protected SSH keys for discovery under both Linux and Windows.

 

Change Log

Open-AudIT

Bug

Fix template bug for bulk update status.

Open-AudIT Enterprise

Bug

Fix template bug for bulk update status.

Open-AudIT

Improvement

Back off timing by default (T2). Allow extra seconds for scan (now 30, was 90).

Open-AudIT

Improvement

Restore Bulk Edit -> Discover button.

Open-AudIT

Bug

Fix SQL to remove old log lines.

Open-AudIT

Improvement

Prefer curl to wget when submitting result in audit_linux.sh

Open-AudIT

Improvement

Add exception for innotek for keywork 'in' (manufacturers summary).

Open-AudIT

Feature

Allow for password protected ssh keys.

Open-AudIT

Improvement

Replace SSH calls with PHPSecLib library and use in Discovery.

Open-AudIT

Bug

Attachments fixed.

Open-AudIT Enterprise

Bug

Attachments fixed.

Open-AudIT

Improvement

Do not set a default of status == production in the devices filter.

Open-AudIT

Improvement

SNMP vendor Hirschmann (248) added.

Open-AudIT

Improvement

No alert on AD discovery when no subnet provided.

Open-AudIT

Improvement

Discovery for single device implemented.

Open-AudIT

Improvement

Better support for NMIS (and other Opmantek products) export.

Open-AudIT

Improvement

Discovery create use a drop-down with a lost of possible network addresses, and also provide an 'other' option to manually input something else.

Open-AudIT

Improvement

Do not run the Summaries when generating menu items, just retrieve the list of them.

Open-AudIT

Bug

Fix Software Changes query.

Open-AudIT

Improvement

Add a configuration item "page_size" which replaces the hardcoded default of 1,000 for web requests.

Open-AudIT

Improvement

Add to system table - collector_uuid. Show device collector name if present on device details page.

Open-AudIT

Improvement

Added some Ubiquiti tests in ssh_helper.

Open-AudIT

Bug

Fix bug with location_id being (incorrectly) set to 0 (should be 1). Thanks JPA.

Open-AudIT

Improvement

As part of Collector / Server, allow JSON formatted audit submission as well as XML format.

Open-AudIT Enterprise

Bug

Change patch response so we don't error on no data (bulk edit patch doesn't return a data array).

Open-AudIT Enterprise

Bug

Fix URL call for Maps API.

Open-AudIT Enterprise

Bug

Fix link on collection template for networks.

Open-AudIT Enterprise

Bug

Fix collection::create template to display help text for subnet, not other on discoveries::create routine.

Open-AudIT Enterprise

Improvement

Show collectors drop down on tasks::read template.

Open-AudIT Enterprise

Improvement

Added a GET call to login template when using Enterprise so we run check_defaults (upsert server subnets into networks, rotate logs, etc) in Community.

Open-AudIT Enterprise

Improvement

Added package simple-xml to the installer for later versions of Deb and Ubu as they don't ship it by default anymore.

Open-AudIT Enterprise

Improvement

Change nmis_export to nmis_manage to match schema in template.

Open-AudIT Enterprise

Improvement

Single device discovery implemented.

Open-AudIT Enterprise

Improvement

Make menu between OAP/E and OAC consistent. Add Import device from audit script.

Open-AudIT Enterprise

Feature

Implement device detail on a given date (Enterprise license required).

Open-AudIT Enterprise

Feature

Collector / Server.

Open-AudIT Enterprise

Feature

Tasks - cron style with full Open-AudIT API support.

Open-AudIT Enterprise

Improvement

Add an info button on all create forms for each attribute.

Open-AudIT Enterprise

Improvement

Populate the network_address on the discoveries create form as best we can.

Open-AudIT Enterprise

Bug

Fix baseline policy creation.

Open-AudIT Enterprise

Improvement

Feature pricing cards reflect license required