Release Notes Home

Welcome to CloudGuard Dome9 Release Notes

 For RSS feeds, click here.


Latest Deployments

FEATURE AWS Timestream Query - 10:45 UTC

Description: Added support for AWS Timestream Query entity in Compliance Engine and Protected Assets.

Case ID: DFR-2414
Known limitations: N/A
Affected Components: COMPLIANCE ENGINE FETCHERS PROTECTED ASSETS

FEATURE Azure Batch - 10:45 UTC

Description: Added support for Azure BatchAccount entity in Compliance Engine and Protected Assets.

Case ID: CNAPP-4227
Known limitations: N/A
Affected Components: COMPLIANCE ENGINE FETCHERS PROTECTED ASSETS

FEATURE Azure Event Grid - 10:45 UTC

Description: Added support for Azure EventGridNamespace entity in Compliance Engine and Protected Assets.

Case ID: DFR-2837
Known limitations: N/A
Affected Components: COMPLIANCE ENGINE FETCHERS PROTECTED ASSETS

FEATURE Azure Compute Gallery - 10:45 UTC

Description: Added support for Azure Compute Gallery in Compliance Engine and Protected Assets.

Case ID: CNAPP-4228
Known limitations: N/A
Affected Components: COMPLIANCE ENGINE FETCHERS PROTECTED ASSETS

FEATURE GCP Folder - 10:45 UTC

Description: Added support for GCP Folder in Compliance Engine and Protected Assets.

Case ID: DFR-2963
Known limitations: Only folders that are visible to the service account will appear. Requires to set a policy binding on the folder's level with a view permission for the service account.
Affected Components: COMPLIANCE ENGINE FETCHERS PROTECTED ASSETS

IMPROVEMENT GCP AppEngine - 10:45 UTC

Description: Added support for GCP Identity-Aware Proxy as new properties in AppEngine: “iapSettings”.

Case ID: DFR-2971
Known limitations: N/A 
Affected Components: COMPLIANCE ENGINE FETCHERS PROTECTED ASSETS

IMPROVEMENT GCP BackendService - 10:45 UTC

Description: Added support for GCP Identity-Aware Proxy as new properties in BackendService: “iapAccessSettings” and “iapApplicationSettings“.

Case ID: DFR-2971
Known limitations: N/A 
Affected Components: COMPLIANCE ENGINE FETCHERS PROTECTED ASSETS

IMPROVEMENT Compliance Rulesets Update - 11:00 UTC

Description: CSA CCM v4.0 for Azure enrichment; New AWS and AZURE rules. A complete list can be found here.

Case ID: CNAPP-5348, DFT-2970, DFT-2993, DFT-3045, DFT-3075, DFT-3100
Known limitations: N/A 
Affected Components: COMPLIANCE RULESETS

FEATURE Workload Protection for Kubernetes: helm 2.25.0 - 11:00 UTC

Description: Image Assurance 2.27.0:

  • Fix “Internal error” image scan errors: on nodes with containerd Container runtime configured to discard compressed image layers once they were unpacked. Affects GKE 1.27+ and all EKS with AMIs released after July 28 2023 

Admission Control Enforcer 2.10.0

  • Fix escaping in GSL if regular expression defined.

Case ID: CON-7715
Known limitations: N/A
Affected Components: CONTAINERS

FEATURE AWS Firewall Manager - 11:00 UTC

Description: Added support for AWS FirewallManagerAdminAccount and FirewallManagerPolicy entities in Compliance Engine and Protected Assets.

Case ID: CNAPP-3511
Known limitations: N/A
Affected Components: COMPLIANCE ENGINE FETCHERS PROTECTED ASSETS

IMPROVEMENT Filter by more than one Organizational Unit in the Protected Assets page - 15:30 UTC

Description: When navigating to Assets → Protected Assets page, you can now filter by more than one Organizational Unit.

Case ID: CNAPP-3457, DFR-2706
Known limitations: N/A 
Affected Components: PROTECTED ASSETS

FEATURE Generate Protected Assets report without size limitation - 15:00 UTC

Description: Protected Assets report can now be exported by mail without size limitation.

Case ID: CNAPP-3454, DFR-2706
Known limitations: N/A
Affected Components: PROTECTED ASSETS

FIX Favorite Filters in Risk Management pages - 14:00 UTC

Description: Fixed an issue where it was impossible to create favorites filters in all the Risk Management pages (i.e. Protected Assets table and dashboards)

Case ID: CNAPP-5246
Known limitations: Filters saved prior to this fix may no longer work. Please delete the filter and save it again.
Affected Components: EFFECTIVE RISK MANAGEMENT UI

FEATURE Risk Level Calculation for Environments - 14:00 UTC

Description: Added a new column in the Environments list and a new badge in the single environment view that indicates the level of risk presented by the assets in this environment.

Case ID: CNAPP-2948
Known limitations: N/A
Affected Components: EFFECTIVE RISK MANAGEMENT UI

FEATURE Risk Management Assets Support - 11:30 UTC

Description: Added support for new Azure asset types in Risk Management:

  • MySQLDBSingleServer

  • MySQLDBFlexibleServer

  • PostgreSQL

  • PostgreSQLFlexibleServer

Case ID: CNAPP-3994
Known limitations: N/A
Affected Components: EFFECTIVE RISK MANAGEMENT

FEATURE Compliance Notifications - SNS Integration- 00:40 UTC

Description: SNS payload improvement.

Case ID: DFT-3049, DFT-3051, CNAPP-4796, CNAPP-5019
Known limitations: N/A
Affected Components: COMPLIANCE ENGINE