Added Windows 11 and SUSE 15 compliance report bundles
Converted CIS benchmarks to STIG format for Windows 11 and Server 2019-2025
Hub — v8.2.1
Fixed unexpected logouts caused by invalid sessions after token refresh
Fixed the Vulnerabilities tab incorrectly appearing in debug builds
Fixed empty report data returned via the reporting API
Fixed inability to resubmit events stuck in Unknown status
Fixed a login page error in SaaS mode after OIDC changes
Fixed worker status not recovering after a Redis outage
Fixed agent registration failure after single-session login enforcement
Improved event search accuracy and fixed search timeouts
Fixed SMTP authentication after mail security hotfix
Restored the Hub version and build number display in the UI
Added dynamic log4net log level changes for on-prem and AWS deployments
Restricted user accounts to a single active session
Gen7 Agent — v7.3.1
Linux
Fixed agent startup failure on SUSE Linux due to tracker store errors
Improved security of temporary file handling in the Linux Agent
Fixed Debian agent package leaving the service stopped after an upgrade
All platforms
Fixed a crash when the agent could not determine a proxied device’s platform
Fixed silent failures when upgrading agents through the Hub
Express Agent — v2.1.2
No changes in this release.
Agentless
Fixed a null reference error blocking agentless file monitoring on RHEL 9
SyncService — v2.2.3
Fixed SyncService routing internal Remedy connections through a proxy
FAST
Fixed FAST connectivity failure through a proxy
For a full list of supported platforms and packages, see the Support Matrix.
Agent compatibility: This release is backward-compatible with existing v8.x agents. You may upgrade Hub independently and update Gen7 Agent and Express Agent only if the platform-specific fixes in this release are relevant to your environment.
Fixed HP-UX device discovery and platform detection issues (#1621)
Fixed Windows agentless compliance report returning no results (#1617)
SyncService — v2.2.2
Fixed Planned Changes being created when the requireMember setting is enabled (#1623)
For a full list of supported platforms and packages, see the Support Matrix.
Agent compatibility: This release is backward-compatible with existing v8.x agents. You may upgrade the Hub independently and update Gen7 Agent and Express Agent only if the platform-specific fixes in this release are relevant to your environment.
This document contains the bug fix lists from the general availability (GA) version and the cumulative updates (CUs) published after GA of this product.
Version 7.5.1.5 Released July 19, 2022
ID
Description
105347
Fix for Baseline - Failed Process/Services rules cannot be extended, process tracker failures need to have missing value passes flag set when extending, adding or deleting a rule
105245
Fix for Baseline - Processes/Services Cannot Be Added with Missing Value Passes Rule Option - Process/Service Rule Builder options now support Missing value passes
106778
Fix for unable to add more than 1 process failure to pending changes grid
106779
Fix for only current page of pending changes sent to hub
107120
Fix for Baseline failures from ‘No Others’ rules could not be added/extended to the baseline
105839
Enhancement re: handling multiple mongodb certificates in the certificate store
Fix for LDAPS AD login authentication, custom port can now be supplied in the LDAP:// uri, and LDAPS is honored on Windows
Fix for Settings > Groups > Agent Updates > Define the update schedule - Update button wasn’t working
Fix for show correct local user date on baseline etc timeline
Fix for Extending tracker rule failures that need to always have missing value passes due to attribute values not being available
Version 7.5.1.4 Released May 24, 2022
ID
Description
For LDAPS AD login authentication on Windows (LDAPS not supported on Linux)
Added Proetheus metrics for http request count/concurrent/duration stats per dto request
Version 7.5.1.3 Released May 10, 2022
ID
Description
101305
Timestamp added to generated report names has been changed from using UTC to the user’s local time zone.
To detect untrusted commands in existing policies during an upgrade from 7.3.x so that the commands are available in UI ready for approval by user
New Hub config settings: EventSubmissionBackoffThresholdMs (default 1000), EventSubmissionBackoffMinMs (30000 / 30sec) and EventSubmissionBackoffMaxMs (240000 / 4min). Used to instruct the agent to backoff when Hub is under load indicated by the event submission request processing time being greater than the limit (backoff is random number of ms chosen between min and max)
Add performance-improving index _t_1_SubmittedDateTimeUtc_1 on BackgroundTaskQueue
Use existing environment var option “NNT_API_AVAILABILITY”=“agentonly” to prevent cache pre-load at startup
Add support for windows certificate store for MongoDB certificate
Version 7.5.1.2 Released April 5, 2022
ID
Description
100688
Allow registration script length up to 10000000 (~10MB) characters
Version 7.5.1.1 Released March 25, 2022
ID
Description
3797
File/Folder access problem events can now be stored as the specified type, via the new config key “ProcessAccessProblemEventsAs” (default “Device”, other event type options are “Audit”, “Alert” and “Error”).
9660
Remove default NNT_CONFIG_LOCATION entry from web.config, so that IIS based installs can have a config folder location specified in an Environment variable
9661
Change Tracker uninstaller removes website from IIS even if user backs out of uninstall
9360
Added ‘NoExpansionOfEnvironmentVariables’ flag to rules schema to allow Compliance Reports to be configured to not expand Environment Variables in output text fields
For ‘template not trusted … HashError’ in ValidatePolicyDataHash to compare IsTrusted flag correctly
Added “SyslogAllowInvalidCertificates” advanced setting to allow CT to use self-signed certificates in a remote syslog server
Handle Oracle stored procedure privileges errors in compliance report
Vulnerability page did not correctly filter when using an inherited group selection filter
Default reports not having an attachment template name set, resulting in error on update/edit from UI
For ‘Proxied device Diagnostic mode & Baseline source don’t persist’
Change events page to query SHA256 instead of SHA1
Ensure compliance/cloud/baseline timeline dates reflect the selected timezone
Ensure baseline events submitted from a tracking template that doesn’t have send baseline events are not stored
Added Microsoft Azure OAuth2 OIDC authentication for ChangeTracker signin
New FileTrackerFilePollLimit Hub config setting. Limits the items tracked by all agents’ filesystemtracker. Default is 0 (unlimited)
Addition of CIS Microsoft Windows 10 Enterprise (Release 21H1) compliance report templates
Updated CIS Microsoft Windows Server 2019 compliance report templates
Additional check to identify if a scheduled compliance report is still referenced and only remove data if related report no longer exists
Device Detail report template now includes Tracking templates along with the Compliance templates associated with a device
Updates to compliance rule descriptions to add group members info, and ports process and PID info to XML description field
Added diff/comparison display to process output rule results in compliance rule results. Updated web UI to use same presentation including character-level differences. Added optional ConfigKeys “MaxAllowedDiffSizeBytes” (default 262144) and “DiffConfigLines” (default 5) to control this feature.
Reset filters from LHS Filter Panel
Added ‘Clone’ function to duplicate scheduled reports
Update UI to remove misleading software inventory ‘ticks’ icons, replaced with ‘Awaiting Review’ and ‘Review Complete’ badges
Added ConfigKey setting “SyslogAllowInvalidCertificates” (default “false”) to allows a TCP (Secure) connection to a remote syslog server which is using a self-signed certificate
Include “Filesecurity” field in syslog CEF output
Device Detail report now includes Tracking templates along with the Compliance templates associated with a device
Version 7.5.0.0 Released February 1, 2022
ID
Description
10429
Change Tracker generating lots of audit events when a user no longer exists
3614
Add Proxied Device not honoring the Custom OS Name
8420
Event Stream Dashboard Widget Event Types Configuration not Honored
7821
Incorrect Start-Time displayed when creating a new planned change having selected the ‘All Events’ option
8089
No planned change ruleset rule created when selecting the ‘All Events’ option
229
Re: showing other changes apart from contents
8422
Re: group report result event notification
9074
Planned Changes Dashboard Widget > link to Events page doesn’t filter to only Device Change events
8997
Compliance Filter - Select Report does not match name
9301
Re: size of passes / fails expression being truncated
9232
System Settings - User Password Settings Policy is being enforced when it’s not set
8689
Enhancement Request - Compliance Report - CSV Export - Remove RuleNumber From The RuleTitle Field
3820
Added collated sort to DeviceName
3563
Addition of TCP pinger to update online status for devices that can’t respond to ping
For adding proxied device in UI, and editing existing device details (re popup won’t close/validator won’t allow empty IPv6/OS)
Cache problem with contained devices when groups moved between groups
Added ConfigKey setting “ProcessAccessProblemEventsAs” (default “Device”) to change the type of event an access problem is processed and shows up as on the hub (values: Device, Audit, Alert, Error)
Added Two-factor authentication. Default admin account is auto-enrolled when first signing in (turn off via security:auth:twoFactor:registerAdmin = false (default:true))
Addition of SQL Server 2016 and 2019 compliance templates
Addition of CIS Windows 10 Enterprise (Release 20H2) compliance reports
Addition of CIS Amazon Linux 2 Benchmark compliance reports
Addition of CIS VMware ESXi 6.5 Benchmark compliance reports
Addition of CIS Ubuntu Linux 20.04 LTS compliance report templates
Addition of CIS SUSE Linux Enterprise Linux 15 compliance report templates
Looking for a bug fix list for all versions of Change Tracker?
For a full list of supported platforms and packages, see the Support Matrix.
The following versions are no longer supported.