Deep Security Manager - 20.0.940 (20 LTS Update 2024-07-17) / Deep Security Agent - 20.0.1-14610 (20 LTS Update 2024-07-17)リリース＠ SAP関係の機能追加、ManagerのCVSS９.8の脆弱性対応

New Features

• Trend Vision One integration enhancement: Intrusion Prevention System rules applied in Deep Security Manager can now be sent to Trend Vision One - Server & Workload Protection.

• Trend Vision One migration tool: A tool is now available to help migrate from Deep Security Manager to Trend Vision One Endpoint Security - Server & Workload Protection.

Enhancements

• Deep Security Manager now supports PostgreSQL 15 & 16, AWS Aurora PostgreSQL 15 & 16, and AWS RDS PostgreSQL 15 & 16. PCT-5186/PCT-32769/DSM-144

Resolved issues

• Using Remote Desktop Protocol failed on some Windows Server 2022 systems. DSM-695
• Migrating on-premise policies or Deep Security Agents to Trend Vision One Endpoint Security using the migration tool resulted an Invalid 'expires' attribute entry in the server0.log file. This did not impact migration. DSM-657

Security updates

Security updates are included in this release. For more information about how we protect against vulnerabilities, visit Vulnerability Responses. Please note, in line with responsible disclosure practices, CVE details will only be made available for select security updates once patches have been made available for all impacted releases. VRTS-11981/DSM-517

• Highest CVSS: 9.8
• Highest severity: Critical

New features

• SUSE Linux Enterprise Server 15 (AWS ARM-Based Graviton 2) support: Deep Security Agent 20.0.1-14610 or later supports SUSE Linux Enterprise Server 15 (AWS ARM-Based Graviton 2). This requires Deep Security Manager 20.0.926 or later. DSA-4836

Enhancements

• SAP Scanner now associates the following MIME types with compatible file extensions. For details, see Integrate with SAP NetWeaver.
  • TrueType Font (TTF). SF08102626/PCT-31518/DSA-6049
  • Java Archive (JAR). SF08102626/PCT-31518/DSA-6044
  • Apple QuickTime File Format (QTFF). SF07967718/SF07840151/PCT-22825/PCT-26844/DSA-5887/DSA-5567
  • Microsoft Advanced Systems Format (ASF). SF07967718/PCT-26844/DSA-5886

Resolved issues

• Deep Security Agent still tried to test connections for Service Gateways. DSA-5814
• A Deep Security Agent restart sometimes caused Application Control to report drift events. SF07813110/PCT-25731/DSA-5798
• Deep Security Agent was only able to use the primary IP address for Service Gateway. DSA-4513
• Integrity Monitoring real-time scans sometimes failed to generate events. SF07269768/PCT-21721/DSA-5877
• Switching from User Mode to Kernel Mode (Computer or Policy > System > General > Choose whether to use Drivers for System Protection) sometimes caused Deep Security Agent to lose real-time Anti-Malware protection. DSA-6090

Enhancements

• SAP Scanner now associates the following MIME types with compatible file extensions. For details, see Integrate with SAP NetWeaver.
  • TrueType Font (TTF). SF08102626/PCT-31518/DSA-6049
  • Java Archive (JAR). SF08102626/PCT-31518/DSA-6044
  • Apple QuickTime File Format (QTFF). SF07967718/SF07840151/PCT-22825/PCT-26844/DSA-5887/DSA-5567
  • Microsoft Advanced Systems Format (ASF). SF07967718/PCT-26844/DSA-5886

Resolved issues

• Deep Security Agent would still try to test connections for Service Gateways. DSA-5814
• A Deep Security Agent restart sometimes caused Application Control to report drift events. SF07813110/PCT-25731/DSA-5798
• Deep Security Agent was only able to use the primary IP address for Service Gateway. DSA-4513
• Integrity Monitoring real-time scans sometimes failed to generate events. SF07269768/PCT-21721/DSA-5877
• The Anti-Malware configuration file size was impacting SAP Scanner performance on some systems. SF08057009/PCT-30380/DSA-5987

Known issues

• With Anti-Malware enabled, querying the lsass.exe Windows service caused some systems to hang. SF07810760/PCT-21624/DSA-5937

Resolved issues

• Integrity Monitoring real-time scans sometimes failed to generate events. SF07269768/PCT-21721/DSA-5877
• Deep Security Agent for AIX platforms was sometimes unable to start without configuring a supported locale. DSA-5876

Enhancements:

• Improved Deep Security Agent's handling of policies imported to Trend Cloud One - Endpoint & Workload Security.