Deployment March 31, 2024
| Info | ||||||||||
|---|---|---|---|---|---|---|---|---|---|---|
Description: CG now displays API keys with the information about when were they last been used. Case ID: DFR-2953 Known limitations: N/A Affected Components:
|
| Info | ||||||||||
|---|---|---|---|---|---|---|---|---|---|---|
Description: Reduced fetching frequency for Aws Code Build Project to once a day to avoid throttling. Case ID: DFT-3574 Known limitations: N/A Affected Components:
|
| Info | ||||||||||
|---|---|---|---|---|---|---|---|---|---|---|
Description: GCP BigQueryTable and GCP DataprocCluster are now fetched with a new mechanism and containing more fields (fields that are not configured will contain null). Relevant to Singapore, Mumbai and Canada DCs only. Case ID: CNAPP-7749, CNAPP-7750, CNAPP-7751
|
Deployment March 28, 2024
| Info | ||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
Description: Add SCP account policies that are inherited from OU. Case ID: DFR-2256 Known limitations: N/A Affected Components:
|
Deployment March 27, 2024
| Info | ||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
Description: Treating the build it firewall rule that allows traffic from Azure services as partially public.
|
| Info | ||||||||||
|---|---|---|---|---|---|---|---|---|---|---|
Description: General maintenance and content updates. A complete list can be found here. Case ID: CNAPP-7825, DFT-3536
|
Deployment March 26, 2024
| Info | ||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
Description: Adding support for adding CIEM label to custom CPSM rule, findings with that label will show up under CIEM\Findings. Case ID: DFR-3257 Known limitations: N/A Affected Components:
|
| Info | ||||||||||
|---|---|---|---|---|---|---|---|---|---|---|
Description: Added support for multi entities selection on CSPM exclusion, entities can be selected from a list or by using a wildcard Case ID: DFR-3422, DFR-2327 Known limitations: N/A Affected Components:
|
Deployment March 25, 2024
| Info | ||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
Description: Added support for Organization Access Analyzers Type under the “accessAnalyzers” field. Case ID: DFR-3185 Known limitations: N/A Affected Components:
|
| Info | ||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
Description: Added support for AWS Organization Unit in compliance engine and protected assets. Case ID: DFR-2914 Known limitations: N/A Affected Components:
|
Deployment March 24, 2024
| Info | ||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
Description: Ignoring firewall rule that allows traffic from Azure services when calculating external public exposure.
|
| Info | ||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
Description: Added outbound rules support for the ‘LoadBalancer’ entity as a new property: ‘outboundRules’. Case ID: DFR-2352 Known limitations: N/A Affected Components:
|
Deployment March 19, 2024
| Info | ||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
Description: Added support for ECS parameters as new property 'targets[].ecsParameters' for the ‘CloudWatchEventsRule’ entity. Case ID: DFR-3372 Known limitations: N/A Affected Components:
|
| Info | ||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
Description: Added support in the ‘SecurityGroup’ entity for ‘EcsSchduledTask’ under the ‘networkAssetsStats’ property. Case ID: DFR-3372 Known limitations: N/A Affected Components:
|
| Info | ||||||||||
|---|---|---|---|---|---|---|---|---|---|---|
Description: New Ruleset CIS Amazon EKS Benchmark v1.4.0, New Ruleset CIS GKE Benchmark v1.5.0, New Ruleset CIS Microsoft Kubernetes Engine (AKS) Benchmark v1.4.0; New AWS,OCI, Alibaba ,GCP and Kubernetes rules. A complete list can be found here. Case ID: CNAPP-7660, DFT-3455
|
Deployment March 19, 2024
| Info | ||||||||||
|---|---|---|---|---|---|---|---|---|---|---|
Description: Avoid deleting previous data of AWS S3 Bucket when not receiving new data (due to missing permissions or other reasons). Case ID: DFR-2952 Known limitations: N/A Affected Components:
|
| Info | ||||||||||
|---|---|---|---|---|---|---|---|---|---|---|
Description: Added support for ‘Contact Information’ property in AWS Account in Compliance engine & Protected Assets. Case ID: DFR-2383 Known limitations: N/A Affected Components:
|
| Info | ||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
Description: Expose public & private IP in OCI VNIC in Protected Assets page Case ID: DFT-3217 Known limitations: N/A Affected Components:
|
Deployment March 18, 2024
| Info | ||||||||||
|---|---|---|---|---|---|---|---|---|---|---|
Description: GCP BigQueryTable and GCP DataprocCluster are now containing more fields (fields that are not configured will contain null). Relevant to Sydney DC only. Case ID: CNAPP-7553 Known limitations: N/A Affected Components:
|
| Info | ||||||||||
|---|---|---|---|---|---|---|---|---|---|---|
Description: Fixed an issue that caused the presentation of old data in the 'CloudIamCredentialReport' API. Case ID: DFT-3454
|
Deployment March 17, 2024
| Info | ||||||||||
|---|---|---|---|---|---|---|---|---|---|---|
Description: Fixed missing OU path when exporting from GSL builder Case ID: DFT-3339
|
| Info | ||||||||||
|---|---|---|---|---|---|---|---|---|---|---|
Description: Fixed failure to associate Ali baba cloud to OU Case ID: DFT-3496
|
| Info | ||||||||||
|---|---|---|---|---|---|---|---|---|---|---|
Description: Fixed an issue that caused partial fetching for ‘PostgreSQL’ entities. Case ID: DFT-3466
|
Deployment March 14, 2024
| Info | ||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
Description: Added support for GCP Identity Platform Entities: IdentityPlatformTenant and IdentityPlatformUser. Case ID: CNAPP-1463 Known limitations: N/A Affected Components:
|
| Info | ||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
Description: Internal change in the way we generate tokens to access Azure APIs. The change affects services that manage the network security groups in Azure. Case ID: CNAPP-7585 Known limitations: N/A Affected Components:
|
| Info | ||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
Description: Network Exposure support for Azure SQL Server. Available in Protected Assets and as part of the risk score calculation.
|
| Info | ||||||||||
|---|---|---|---|---|---|---|---|---|---|---|
Description: Fixed a bug where AWS VPC\KMS was shown as Alibaba VPC\KMS in the protected assets table, and AWS route table was shown as Azure route table in the protected assets table. Case ID: DFT-3458, DFT-3510, DFT-3452, DFT-3508
|
Deployment March 13, 2024
| Info | ||||||||||
|---|---|---|---|---|---|---|---|---|---|---|
Description: New AWS, OCI, Alibaba, and GCP rules; DFTs fixes. A complete list can be found here. Case ID: CNAPP-7557, DFT-3484, DFT-3447
|
| Info | ||||||||||
|---|---|---|---|---|---|---|---|---|---|---|
Description: Remove duplication of key vault Case ID: DFT-3408
|
Deployment March 12, 2024
| Info | ||||||||||
|---|---|---|---|---|---|---|---|---|---|---|
Description: Lable was added to CIEM findings Case ID: DFT-2551
|
Deployment March 10, 2024
| Info | ||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
Description: Added support for GCP Cloud Source Repository entity in Compliance Engine and Protected Assets. Case ID: CNAPP-1467 Known limitations: N/A Affected Components:
|
Deployment March 07, 2024
| Info | ||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
Description: Internal change in the way we generate tokens to access Azure APIs. The change affects services that manage the network security groups in Azure. Case ID: CNAPP-7491 Known limitations: N/A Affected Components:
|
| Info | ||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
Description: Added support for ‘assignmentRoles’ property in Azure User in Compliance Engine and Protected Assets. Case ID: DFT-3348 Known limitations: N/A Affected Components:
|
| Info | ||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
Description: Added support for ‘minimalTlsVersion’ property in Azure Cosmos DB Account in Compliance Engine and Protected Assets. Case ID: DFR-2932 Known limitations: N/A Affected Components:
|
Deployment March 06, 2024
| Info | ||||||||||
|---|---|---|---|---|---|---|---|---|---|---|
Description: Fixed issue of switching logs in MSP in Firefox Case ID: DFT-3430
|
| Info | ||||||||||
|---|---|---|---|---|---|---|---|---|---|---|
Description: DFTs fixes. A complete list can be found here. Case ID: CNAPP-7453, DFT-3455, DFT-3381
|
| Info | ||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
Description: Added support for ‘networkConfig’ property in GCP GkeCluster. Case ID: DFR-2663 Known limitations: N/A Affected Components:
|
| Info | ||||||||||
|---|---|---|---|---|---|---|---|---|---|---|
Description: Fixed rate limit issue in AWS Kinesis Firehose. Case ID: DFT-3432
|
Deployment March 05, 2024
| Info | ||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
Description: Added support for GCP Cloud Armor Security Policy entity in Compliance Engine and Protected Assets. Case ID: DFR-2968 Known limitations: N/A Affected Components:
|
Deployment March 04, 2024
| Info | ||||||||||
|---|---|---|---|---|---|---|---|---|---|---|
Description: Fix typo in role creation screen Case ID: DFT-3483
|
Deployment March 04, 2024
| Info | ||||||||||
|---|---|---|---|---|---|---|---|---|---|---|
Description: Bug fix in Slack and Teams Notifications. Case ID: CNAPP-8613
|
Deployment March 02, 2024
| Info | ||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
Description: Added support for ‘encryption.serverSideEncryptionRules.serverSideEncryptionByDefault.isCrossAccountKey’ and ‘encryption.serverSideEncryptionRules.serverSideEncryptionByDefault.kmsKey' properties in AWS S3 Bucket in Compliance engine & Protected Assets. Case ID: DFR-2482 Known limitations: Keys which are cross account will be seen in the 'kmsKey’ property - only if belongs to a cloud account which was on boarded to the same CloudGuard account as the S3Bucket’s cloud account, and only if the client has approved account data sharing. Affected Components:
|
Deployment March 01, 2024
| Info | ||||||||||
|---|---|---|---|---|---|---|---|---|---|---|
Description: Bug fix in Slack and Teams Notifications. Case ID: CNAPP-8613
|