October 11, 2020 Service Pack

The following Service Pack versions were released:

Versions (Sensor and Server)

19.1.282

19.2.182

20.1.343

The tables below describe the enhancements, fixed issues, and changes included in each version.

  • The Versions column indicates the versions that include the fix.

  • The Required Update column indicates if the fix requires sensor/server update.

IMPORTANT: If you want to upgrade your servers to this version, we recommend that you upgrade all components - Registration server, Detection servers, and WebApp server - to this version.

Enhancements

Issue

Area

Description

Versions

Required Update

Sensor OS

CYBR-31825

Detection

You can now use the Unquarantine response option in the Malops Inbox for Endpoint Protection Malops.

20.1.343

Server

N/A

CYBR-35261

Detection

For our Managed Security Services Partners, we have removed the automatic selection and enforcement of two factor authentication for Responder users during an upgrade.

If you plan to use the Remote Shell utility in Unrestricted mode, you must select the option to require two-factor authentication for Responder users after the upgrade

20.1.343

Server

N/A

CYBR-35543

Detection

To improve how we handle stability issues for cloud deployments, server configuration updates are now automatic and do not need a server restart.

19.1.282, 19.2.182, 20.1.343

Server

N/A

CYBR-35542

Detection

To improve stability, we have added additional internal metrics to increase our visibility into sensor to server traffic.

19.1.282, 19.2.182, 20.1.343

Server

N/A

CYBR-34318

Sensor Management

For Japanese customers, on the System > Detection servers screen, we have improved the accuracy of reporting of the Detection server status.

19.1.282, 19.2.182, 20.1.343

Server

N/A

Fixed issues

Issue

Area

Description

Versions

Required Update

Sensor OS

CYBR-35134

Detection

The sensor did not collect binary data from registry events if the size of the data was an odd number. This issue has been resolved.

19.1.282, 19.2.182, 20.1.343

Sensor

Windows

CYBR-26959

Detection

The database used for storing Behavioral Allowlisting rules was matching accumulated data that found matches for existing rules up to a point that would have negative impact the database performance.

To maintain the performance and stability of the database, we introduced limits so that collected Behavioral Allowlisting matches only contain data that is relevant to the user experience.

19.2.182, 20.1.343

Server

N/A

CYBR-32958

Investigation

In the Investigation screen, when downloading an Element from a connected sensor, an error was returned and the Element did not download. This issue has been resolved and Elements can be successfully downloaded.

19.1.282, 19.2.182, 20.1.343

Server

N/A

CYBR-35116

Investigation

In the Investigation screen, the limit results slider did not display correctly in the UI. This issue has been resolved.

19.1.282, 19.2.182, 20.1.343

Server

N/A

CYBR-34988

Investigation

In the label section of the Malop Inbox, if multiple Malop labels have been created, it was not possible to view them all. This issue has been resolved, in the Malop Inbox a scroll has been added to the Malop labels section.

19.1.282, 19.2.182, 20.1.343

Server

N/A

CYBR-35476

NGAV

On endpoint machines operating Windows 7 32 bit operating systems, the Artificial Intelligence analysis service sporadically stopped its activities. This was most likely because of Windows unsigned files, which were mistakenly classified as malicious, generating messages that blocked other messages.

This issue has been resolved, the Artificial Intelligence analysis service no longer stops because of this issue.

20.1.343

Sensor

Windows

CYBR-35509

Sensor Management

When upgrading a Windows sensor in the UI to a new sensor version (from a hotfix or a Service Pack, the upgrade failed due to a verification issue as a result of Microsoft Windows 10’s August update. This issue has been resolved.

19.1.282, 19.2.182, 20.1.343

Sensor

Windows

CYBR-34922

Sensor Management

Sensors on machines running Ubuntu did not detect proxy environments, causing the auto-detect mechanism to fail. This issue has been resolved.

19.1.282, 19.2.182, 20.1.343

Sensor

Linux

CYBR-31644

Sensor Management

When installing a sensor, the sensor installer installs the Microsoft C Runtime Environment (CRT) in a shared folder on Windows (the system32 folder). Installing the CRT in this folder affected other applications by causing them to not function properly.

This issue is now resolved and the sensor installer installs the needed CRT files in the ActiveProbe folder in the ProgramFiles folder.

In addition, as a result of this fix, you do not need to install KB2999226 for operating system versions that previously required this KB. For more information, see Supported OS versions for the sensor.

19.2.182, 20.1.343

Sensor

Windows