Page Comparison

Description:

• Added support for Data Classifications in the Compliance Engine for entities: S3Bucket, StorageAccount, CosmosDbAccount, PostgreSQL and MySQLDBSingleServer.

• The possible values are: PII, PCI, PHI, Credentials, Other.

• Values are set according to the findings and classifications generated by AWS Macie and Azure Purview services.

Case ID: CNAPP-5975
Known limitations: N/A
Affected Components:

Description: Added new property to the AWS CloudFront entity: ‘WAFGlobalV2 ’.

Case ID: DFR-3079
Known limitations:
Affected Components:

Description: Added support for “AWS WAF Global V2” entity in compliance engine and protected assets.

Case ID: DFR-3079
Known limitations:
Affected Components:

Description: Added support for “AWS Verified Access Instance” entity in compliance engine and protected assets.

Case ID: CNAPP-5858
Known limitations:
Affected Components:

Description: Remove from the UI all the Azure services which are not support in China.
Case ID: CNAPP-5258
Known limitations: N/A 
Affected Components:

Description: New Rulesets Australia Essential 8 for AWS and Azure; New Rulesets CMMC 2.0 for AWS and Azure; New Rulesets CRI Profile for AWS and Azure; New Rulesets NY DFS 23 CRR 500 for AWS and Azure; New AWS and AZURE rules. A complete list can be found here.

Case ID: CNAPP-5921, DFT-3042
Known limitations: N/A 
Affected Components:

Description: Some invalid permissions that was included in the AWS Onboarding CFT was removed.
Case ID: DFT-3209
Known limitations: N/A
Affected Components:

Description: Fix an issue with assigning IamRole entity type in findings as Default.
Case ID: DFT-3009, CNAPP-4270
Known limitations:
Affected Components:

Description: Added support for Azure Virtual WAN entity in Compliance Engine and Protected Assets, as a new entity: VirtualWAN.

Case ID: CNAPP-4233
Known limitations:
Affected Components:

Description: Added support for Azure Static Web App site entity in Compliance Engine and Protected Assets, as a new entity: StaticWebAppSite.

Case ID: CNAPP-5629
Known limitations:
Affected Components:

Description: Added support for Azure Load Testing in Compliance Engine and Protected Assets, as a new entity: LoadTest.

Case ID: CNAPP-4230
Known limitations:
Affected Components:

Description: Runtime Protection: daemon 1.11.5, probe 0.30.2-cp-6.

• Improved File Reputation Blade for Reduced False Positives

• Support Fedora Core OS.

Affected Components: CloudGuard Workload Protection agents.
Case ID: CON-7773
Known limitations: N/A
Affected Components:

Description: Adjusted risk levels and colors for environments and assets risk score.
Case ID: CNAPP-5514, CNAPP-5502
Known limitations: N/A
Affected Components:

Description: Fixed a filtering issue when combining ‘Organizational Units’ and ‘CVEs’ filters.
Case ID: CNAPP-5846
Known limitations: N/A
Affected Components:

Description: Extend Intelligence findings notification output with additional fields from Intelligence logs.
Case ID: DFR-2363 , CNAPP-299
Known limitations: N/A
Affected Components:

Description: Fixed a bug in OCI Compute Instance entity where “timeCreated” property was in a wrong format, this issue was fixed and now this field is treated as date.
Case ID: DFT-3203
Known limitations: N/A
Affected Components:

Description: Added support for Oracle cloud MySql service in Compliance Engine and Protected Assets. The following entities were added:

• MySqlBackup

• MySqlDbSystem

• MySqlConfiguration

• MySqlChannel.

Case ID: DFR-2915
Known limitations:
Affected Components:

Description: Fix the issue that export to PDF got stuck if section was empty
Case ID: DFT-3196
Known limitations: N/A
Affected Components:

Description: ‘close’ button is grayed out for CIEM findings
Case ID: DFT-2657
Known limitations: N/A
Affected Components:

Description: Present Compliance Trend Change History widget in the dashboard in a better way
Case ID: DFT-2998
Known limitations: N/A
Affected Components:

Description: Add additionalFields and Is Public filters to protected assets widget
Case ID: CNAPP-5310
Known limitations: N/A
Affected Components:

Description: Added support for Azure Orbital Spacecraft in Compliance Engine and Protected Assets.

Case ID: CNAPP-4232
Known limitations:
Affected Components:

Description: Fixed the “BatchAccount” entity’s schema for GSL Builder and Compliance Engine.
Case ID: IN-8470
Known limitations: N/A
Affected Components:

Description: Added support for 2 Azure Data Migration Service entities in Compliance Engine and Protected Assets:

• Data Migration.

• Data Migration Classic.

Case ID: CNAPP-4229
Known limitations:
Affected Components:

Description: Added support for Azure Log Analytics as a new entity: LogAnalyticsCluster.

Case ID: CNAPP-5524
Known limitations:
Affected Components:

Description: Added support for the GCP Organization Policy service.

• A new entity: AvailableOrgPolicyConstraint

• A new property to the “Project” entity: orgPolicies[].

• A new property to the “Folder” entity: orgPolicies[].

• A new property to the “GcpOrganization” entity: orgPolicies[].

Case ID: DFR-2863
Known limitations:
Affected Components:

Description: Added new property to the AWS ECS Task entity: ‘SecurityGroups’ - an array of the security groups that are attached to the ENI of the current Task.

Case ID: DFT-3028, IN-8494
Known limitations:
Affected Components:

Description: Aws Security Group now includes network assets statistics on ECS Task. Can be found under ‘networkAssetsStats' where type = “EcsTask”.

Case ID: DFT-3028
Known limitations:
Affected Components:

Description: Added support for Azure Policy Set Definition (initiatives definition).

Case ID: DFR-2913
Known limitations: N/A
Affected Components:

Description: Added a new property ‘compliance’ to AWS “ConfigRule“ entity.

Case ID: DFR-2895
Known limitations:
Affected Components:

Description: New Ruleset CSA CCM v4.0 for GCP; New Ruleset MLPS 2.0 for AWS; New AWS and AZURE rules. A complete list can be found here.

Case ID: CNAPP-5586, DFT-3097, DFT-3118
Known limitations: N/A 
Affected Components:

Description: Added support for Azure Data Share as a new entity: DataShareAccount.

Case ID: CNAPP-5458, DFR-2978
Known limitations: N/A
Affected Components:

Description: Added property to the GCP KmsKeyRing entity: ‘cryptoKeys[].protectionLevel’.

Case ID: DFR-2521
Known limitations:
Affected Components:

Description: Added support for GCP Organization as a new entity: GcpOrganization.

Case ID: DFR-2964
Known limitations: Only organizations that are visible to the service account will appear. Requires to set a policy binding on the organizational level with a view permission for the service account.
Affected Components:

Description: Fix support for Azure China in all Azure entities.
Case ID: CNAPP-5254
Known limitations: Phase 1 of the fix, not all of the entities supported for China yet.
Affected Components:

Description: Added support for SecurityGroup property in AWS Dax Cluster in Compliance Engine.

Case ID: DFR-2722
Known limitations: This property can be used to query the securityGroup property and to pass/fail the rule according to it, but currently not visible in the Entity Viewer in the UI.
Affected Components:

Description: Added support for the following NIC properties: ‘dnsSettings’, ‘nicType’, ‘workloadType’, and ‘privateLinkService’ in Azure VirtualMachine entity.

Case ID: DFR-2840
Known limitations: N/A 
Affected Components:

Description: Risk Management supports Data Sensitivity indication for Azure PostgreSQL and MySQLDBSingleServer using Azure Purview data.
Case ID: CNAPP-4977
Known limitations: N/A
Affected Components:

Description: Azure FunctionApp Support for Network Exposure in Protected Assets and Compliance Engine.
Case ID: CNAPP-4804
Known limitations: N/A 
Affected Components:

Description: Fixed missing permissions from AWS Organization onboarding, added missing permissions to regular onboarding instructions and fixed needed permissions for Sage Maker Notebook.
Case ID: CNAPP-4277
Known limitations: N/A
Affected Components:

Description: Added support for AWS Timestream Query entity in Compliance Engine and Protected Assets.

Case ID: DFR-2414
Known limitations: N/A
Affected Components:

Description: Added support for Azure BatchAccount entity in Compliance Engine and Protected Assets.

Case ID: CNAPP-4227
Known limitations: N/A
Affected Components:

Description: Added support for Azure EventGridNamespace entity in Compliance Engine and Protected Assets.

Case ID: DFR-2837
Known limitations: N/A
Affected Components:

Description: Added support for Azure Compute Gallery in Compliance Engine and Protected Assets.

Case ID: CNAPP-4228
Known limitations: N/A
Affected Components:

Description: Added support for GCP Folder in Compliance Engine and Protected Assets.

Case ID: DFR-2963
Known limitations: Only folders that are visible to the service account will appear. Requires to set a policy binding on the folder's level with a view permission for the service account.
Affected Components:

Description: Added support for GCP Identity-Aware Proxy as new properties in AppEngine: “iapSettings”.

Case ID: DFR-2971
Known limitations: N/A 
Affected Components:

Description: Added support for GCP Identity-Aware Proxy as new properties in BackendService: “iapAccessSettings” and “iapApplicationSettings“.

Case ID: DFR-2971
Known limitations: N/A 
Affected Components:

Description: CSA CCM v4.0 for Azure enrichment;New AWS and AZURE rules. A complete list can be found here.

Case ID: CNAPP-5348, DFT-2970, DFT-2993, DFT-3045, DFT-3075, DFT-3100
Known limitations: N/A 
Affected Components:

Description: Image Assurance 2.27.0:

• Fix “Internal error” image scan errors: on nodes with containerd Container runtime configured to discard compressed image layers once they were unpacked. Affects GKE 1.27+ and all EKS with AMIs released after July 28 2023 

Admission Control Enforcer 2.10.0

• Fix escaping in GSL if regular expression defined.

Case ID: CON-7715
Known limitations: N/A
Affected Components:

Description: Added support for AWS FirewallManagerAdminAccount and FirewallManagerPolicy entities in Compliance Engine and Protected Assets.

Case ID: CNAPP-3511
Known limitations: N/A
Affected Components: