October 24, 2021 Service Pack

The following Service Pack versions were released:

Versions (Sensor and Server)

20.2.383

Note

Linux AV is generally available in version 20.2.303 and later. When you upgrade a Linux sensor to this version, and the sensor is assigned a policy with Anti-Malware > Signatures mode enabled, scheduled and on demand scans run automatically according to policy settings. On access scans on Linux machines are enabled by default in version 20.2.462 and later (prior to this version, contact Technical Support to enable on access scans).

The tables below describe the enhancements, fixed issues, and changes included in each version.

  • The Versions column indicates the versions that include the fix.

  • The Required Update column indicates if the fix requires sensor/server update.

IMPORTANT: If you want to upgrade your servers to this version, we recommend that you upgrade all components - Registration server, Detection servers, and WebApp server - to this version.

Enhancements

Issue

Area

Description

Versions

Required Update

Sensor OS

CYBR-45509

NGAV

To improve performance, the Cybereason platform now excludes known and safe processes by default on Windows machines.

You can also exclude files from Anti-Malware based on the name of the process that opens the files. This capability is not generally available. To enable and use this capability, contact your Customer Success Manager.

20.2.383

Sensor

Windows

CYBR-44384

NGAV

We have made stability improvements to Linux AV.

20.2.383

Sensor

Linux

CYBR-47564

Sensor Dashboard

On the System > Dashboard screen, machines running Linux Amazon 2 are now displayed under the Sensors by OS version section.

20.2.383

Server

N/A

CYBR-47397

Sensor Dashboard

On the System > Dashboard screen, machines running Linux SLES 15 are now displayed under the Sensors by OS version section.

20.2.383

Server

N/A

CYBR-46634

Windows collection

After a machine boot or reboot, we have improved how we collect data about ongoing processes to ensure the process name is always collected.

20.2.383

Sensor

Windows

Fixed issues

Issue

Area

Description

Versions

Required Update

Sensor OS

CYBR-44406

Custom Reputations

In the Cybereason platform, if you blocklisted a domain, IP address, or file hash that did not receive a classification from the Global threat intel server, the item could not be removed from the blocked list. This issue has been resolved.

20.2.383

Server

N/A

CYBR-46979

Investigation

On the Investigation screen, if you used the search bar to search for Process name, the results were displayed twice. This issue has been resolved.

20.2.383

Server

N/A

CYBR-45874

Sensor Management

If you exported sensor data from the Cybereason Platform, the resulting CSV file would be incorrectly formatted if a sensor field included a new line character (\n). This issue has been resolved.

20.2.383

Server

N/A

Please see our Legal Disclaimer on links to third party web sites.