Patch 3.1.1
  • 30 Oct 2024
  • 2 Minutes to read
  • Dark
    Light
  • PDF

Patch 3.1.1

  • Dark
    Light
  • PDF

Article summary

Release Date

28-October-2024


Improvements

Trust Sight Improvements

  1. Know Your Software widget now has:
    1. Been aligned to the topology widget to provide relevant insights to the customer about the workload environment such as distribution of registered workloads by operating systems and packaged code that executes on discovered workloads
    2. An improved graphical representation of data - There are changes in the data visualization of the widget intended to provide valuable insights for users in regards to packaged and non packaged code found in their workloads
  2. The drill-down options now have only the required columns in Vulnerability Compensation and System Integrity widgets
  3. System Integrity widget now provides information related to the trust established for non-packaged code. Users can drill-down, filter or view the underlying information for this widget to know the source of the established trust
  4. The Vulnerability Compensation widget displays only Critical and High Severity vulnerabilities information related to Host Protection


TrustHub - New Feature

Owing to an evolving sophistication of malware techniques and the limitations of traditional detection methods, it is getting increasingly harder to find malware BEFORE it starts executing. Many strands of malware are so fast acting that within a second or two, your workload could turn into a brick. Virsec has come up with TrustHub to verify the safety or trust in the code that is allowed to execute on your workload. Zero Trust in Code delivers Zero Dwell time and renders the machinations of the Threat Actor useless.

TrustHub, a new feature from VSP 3.1.1 onwards, helps to build the trust in code without the customer sweating bullets. Customers are provided with their own Enterprise first-party Code repository located in Virsec's Cloud and read-only access to third party trusted packages in Virsec's Global TrustHub. Both Enteprise and Global TrustHub will ensure that provenance of code packages is established, thereby allowing customers to execute trusted code on their workloads. This feature can be accessed through CMS's new menu TrustHub in the left navigation pane


Performance Improvements

  1. CMS Performance improvements include moving to zero-latency queries, lesser handoffs between CMS/ACP engine and reduction of time taken during upgrade from VSP 3.0.2 to 3.1.x
  2. Probe Performance improvements include reduction in Kafka topics, network disconnection issue resolution and CPU limit capping at 60%. CMS and Probe both must be upgraded to version 3.1.1 for the improvements to get reflected in the environment


Fixes

Defect IDDescription

SUPP-1383

TrustSight Vulnerability Compensation values for vsp-web, vsp-vrule, vsp-mem columns are inaccurate
SUPP-1384
Closed Loop ACP - For Windows Struts Log4j, some interactive command line incidents are acknowledged wrongly
SUPP-1386After stopping the Maintenance Mode, Probe did not function as expected
SUPP-1391"Know Your Software" widget displays incorrect Probe count

SUPP-1392

"No data found" error is displayed when a small set of Probes are selected in System Integrity widget
SUPP-1396Inconsistent results are displayed for Packaged Code in "Know Your Software" widget
SUPP-1400
TrustSight CSV export file has 2 extra trailing lines
SUPP-1406VSP 3.1.0: Incidents are reported for Unverified processes and they are not verified with Trust Blade Engines
SUPP-1409Typo Errors found in log file



Was this article helpful?