December 6, 2020 Service Pack

The following Service Pack versions were released:

Versions (Sensor and Server)

20.1.381

The tables below describe the enhancements, fixed issues, and changes included in each version.

  • The Versions column indicates the versions that include the fix.

  • The Required Update column indicates if the fix requires sensor/server update.

IMPORTANT: If you want to upgrade your servers to this version, we recommend that you upgrade all components - Registration server, Detection servers, and WebApp server - to this version.

Enhancements

Issue

Area

Description

Versions

Required Update

Sensor OS

CYBR-36967

Investigation

On the Investigation screen, after you run a query, the default number of results displayed is now 100. The maximum number of results that can be displayed using the Limit results slider, is now 1000. This change reduces the time it takes for query results to be returned.

20.1.381

Server

N/A

CYBR-36700

NGAV

To improve performance of Anti-Malware > Signature scans, Behavioral document protection is no longer included in On demand scans. Behavioral document protection is still included in On file access scans.

20.1.381

Sensor

Windows

Fixed issues

Issue

Area

Description

Versions

Required Update

Sensor OS

CYBR-36404

Detection

We have updated the text in the confirmation message displayed after a file has been quarantined or un-quarantined.

20.1.381

Server

N/A

CYBR-36242

Endpoint Controls

If the Product ID or Vendor ID of a USB storage device contained a hashtag (#), you could not add the device to the Device control Allowed devices list on the System > Policies management > Create/Edit Policy > Endpoint controls screen. This issue has been resolved.

20.1.381

Sensor

Windows

CYBR-37102

Investigation

On the Investigation screen, if a result (for example a Parent of a Process) had an empty value, a bad string was displayed in the results grid. This issue has been resolved. If a result has an empty value, ‘–empty name–’ is now displayed in the results grid.

20.1.381

Server

N/A

CYBR-36841

Investigation

When navigating to the Attack Tree, the parent of the selected process was highlighted. This issue has been resolved, now when navigating to the Attack Tree the selected process is highlighted.

20.1.381

Server

N/A

CYBR-37179

Sensor Management

When upgrading or installing the sensor to versions 19.1.300, 19.2.201, or 20.1.361/362/363, as part of the upgrade process the check for old versions of the sensor on the machine receives information from a registry path. This check could fail if the registry path was too long and cause the sensor installation or upgrade to fail. This issue has been resolved.

20.1.381

Sensor

Windows

CYBR-37154

Sensor Management

A connection handling issue between the WebApp server and the Detection server resulted in performance issues. This issue has been resolved.

20.1.381

Server

N/A

CYBR-36806

Sensor Management

In the userActionLog file (/opt/cybereason/logs/userAuditSyslog.log), if a user was deleted, the log contained the name of the User admin who deleted the user and not the user that was deleted. This issue has been resolved. Now, if a user is deleted the userActionLog file now contains the name of the deleted user.

20.1.381

Server

N/A