- 30 Oct 2024
- 2 Minutes to read
- Print
- DarkLight
- PDF
Patch 3.1.1
- Updated on 30 Oct 2024
- 2 Minutes to read
- Print
- DarkLight
- PDF
Release Date
28-October-2024
Improvements
Trust Sight Improvements
- Know Your Software widget now has:
- Been aligned to the topology widget to provide relevant insights to the customer about the workload environment such as distribution of registered workloads by operating systems and packaged code that executes on discovered workloads
- An improved graphical representation of data - There are changes in the data visualization of the widget intended to provide valuable insights for users in regards to packaged and non packaged code found in their workloads
- The drill-down options now have only the required columns in Vulnerability Compensation and System Integrity widgets
- System Integrity widget now provides information related to the trust established for non-packaged code. Users can drill-down, filter or view the underlying information for this widget to know the source of the established trust
- The Vulnerability Compensation widget displays only Critical and High Severity vulnerabilities information related to Host Protection
TrustHub - New Feature
Owing to an evolving sophistication of malware techniques and the limitations of traditional detection methods, it is getting increasingly harder to find malware BEFORE it starts executing. Many strands of malware are so fast acting that within a second or two, your workload could turn into a brick. Virsec has come up with TrustHub to verify the safety or trust in the code that is allowed to execute on your workload. Zero Trust in Code delivers Zero Dwell time and renders the machinations of the Threat Actor useless.
TrustHub, a new feature from VSP 3.1.1 onwards, helps to build the trust in code without the customer sweating bullets. Customers are provided with their own Enterprise first-party Code repository located in Virsec's Cloud and read-only access to third party trusted packages in Virsec's Global TrustHub. Both Enteprise and Global TrustHub will ensure that provenance of code packages is established, thereby allowing customers to execute trusted code on their workloads. This feature can be accessed through CMS's new menu TrustHub in the left navigation pane
Performance Improvements
- CMS Performance improvements include moving to zero-latency queries, lesser handoffs between CMS/ACP engine and reduction of time taken during upgrade from VSP 3.0.2 to 3.1.x
- Probe Performance improvements include reduction in Kafka topics, network disconnection issue resolution and CPU limit capping at 60%. CMS and Probe both must be upgraded to version 3.1.1 for the improvements to get reflected in the environment
Fixes
Defect ID | Description |
---|---|
SUPP-1383 | TrustSight Vulnerability Compensation values for vsp-web, vsp-vrule, vsp-mem columns are inaccurate |
SUPP-1384 | Closed Loop ACP - For Windows Struts Log4j, some interactive command line incidents are acknowledged wrongly |
SUPP-1386 | After stopping the Maintenance Mode, Probe did not function as expected |
SUPP-1391 | "Know Your Software" widget displays incorrect Probe count |
SUPP-1392 | "No data found" error is displayed when a small set of Probes are selected in System Integrity widget |
SUPP-1396 | Inconsistent results are displayed for Packaged Code in "Know Your Software" widget |
SUPP-1400 | TrustSight CSV export file has 2 extra trailing lines |
SUPP-1406 | VSP 3.1.0: Incidents are reported for Unverified processes and they are not verified with Trust Blade Engines |
SUPP-1409 | Typo Errors found in log file |