Lastline Defender and Analyst Hosted Release Notes

Version 2021.5

Bug Fixes and Improvements

  • SENT-3224 - Fixed incorrect handling of HTTP encoding headers in the ICAP daemon. The issue would cause analysis requests encoded in gzip encoding to be incorrectly treated as archives (and thus fully analysed) in cases in which the proxy submitting the request does not support the ICAP preview mechanism.
  • SENT-3219 - Performance improvement for the sensor IDS component.
  • SENT-3210 - Fixed a bug in the ICAP daemon where enabling Secure ICAP would cause the daemon to crash.
  • SENT-3220 - Fixed an issue in the sensor netflow collector codebase where the presence of a large number of independent collector instances could cause the system to believe it was out of disk space.
  • SENT-3198 - The i40e driver in sniffing appliances was updated to version 2.11.25, including support for some recently released NIC cards.
  • SENT-3208 - Improved allocation of appliance threads to the sniffing components on sensor. While this update will overall increase performance in most deployments, it will negatively affect appliances where the list of sniffing interfaces contains inactive/unused interfaces. We invite all customers to double check their sniffing appliance configurations. and ensure that the list of sniffing interfaces contains only active/useful interfaces.
  • FEAT-7064 - Improved performance and reduced memory usage in the processing of NTA records on sniffing appliances.
  • SENT-3227 - Fixed an issue where a sensor reconfiguration could cause a small number of email messages to be released without full analysis.
  • USER-5439 - All "Threat Timeline" views now display both start- and end-time for each threat. This clarifies the duration of threats when sorting by "earliest" or "most recent".
  • SENT-3219 - Performance improvement for the sensor IDS component.
  • USER-5386 - This fix enables the users to access the ISO download links.

Deprecation of API Methods

The Lastline API documentation includes a deprecation schedule for deprecated Portal API methods, as well as information on how to replace usage of these deprecated methods with supported methods.

Released Appliance Versions

As part of this release, we are making available the following versions of Lastline appliances for use with Lastline Defender Hosted:

  • Lastline Sensor version 1280
2021.4 2021.6