Lastline Enterprise On-Premises Release Notes

Version 9.3.1

End of Support for Lastline Enterprise

This is the final release in which Lastline Enterprise will be supported. Once you have upgraded, your enterprise license will need to be upgraded to Lastline Defender Limited (at no charge). As malicious attacks keep evolving, from email and perimeter based attacks to attacks deeper inside your network, Lastline Defender Limited is an evolution from Lastline Enterprise to address these attacks. Lastline Defender Limited significantly improves your security response by providing a broader network detection platform that incorporates network traffic analysis to provide better context and situational awareness for security alerts. Lastline Defender Limited is built on the same core architecture as our flagship product - Lastline Defender. If you have not yet installed a Lastline Data Node, data and information that the Data Node otherwise provides may be missing in the portal. Once the Data Node is configured, the data will appear.

Detection Improvements

  • TRES-1279: Improved detection of Shell.Explorer Objects in OLEs.
  • TRES-1716: Improved filtering of SLK files.
  • TRES-1646: Improved filtering for zip archive bombs.

Deprecation of API Methods

No additional API methods are being deprecated or discontinued in this release.

The Lastline API documentation includes a deprecation schedule for methods in the legacy API, as well as information on how to replace usage of these deprecated methods with supported methods.

Released Appliance Versions

As part of this release, we are making available the following versions of Lastline appliances for use with Lastline Enterprise On-Premises:

  • Lastline Manager version 1100.1
  • Lastline Engine version 1100.1
  • Lastline Sensor version 1181.1
  • Lastline All-in-one (Pinbox) version 1100.1

Released Sandbox Images Versions

The sandbox images version will remain at 2020-03-13-01.

9.3 9.3.2