Chat now with support
Chat with Support

IT Security Search 11.3.2 - Release Notes

Release Notes

Quest® IT Security Search 11.3.2

Release Notes

March 2018

These release notes provide information about the Quest® IT Security Search release.

Topics:

About this release

IT Security Search provides IT administrators, IT managers and security teams with a way to navigate the expanse of information about the enterprise network.

New features

New features in IT Security Search 11.3.2:

  • Delegation of Active Directory recovery privileges to operators
    You can now configure which operators are allowed to restore backups directly from IT Security Search. The actual recovery functionality is provided by the Recovery Manager for Active Directory connector.
  • Support for new versions of associated products
    The following product versions are supported in this release:
    • InTrust 11.3.1
    • Change Auditor for Active Directory 6.9.5
    • Recovery Manager for Active Directory 9.0

    • Active Roles 7.2.1, 7.2
  • Support for TLS 1.2
    IT Security Search can now work in environments where TLS 1.2 is used exclusively.

New in IT Security Search 11.3.1

  • Support for new versions of associated products
    The following Quest product versions are supported in this release:
    • Change Auditor for Active Directory 6.9.4
    • Enterprise Reporter 3.0
    • Recovery Manager for Active Directory 8.8.1

New in IT Security Search 11.3

  • Active Roles integration
    IT Security Search now has a connector for Active Roles, giving you access to security audit and management history. Active Roles 7.1 and 7.0 are supported.
  • Saved searches
    The searches you perform on a regular basis can now be saved for future use. Even more usefully, specific terms in such searches can be turned into customizable parameters for easy tweaking.
  • Support for Windows Server 2016
    IT Security Search can be installed on Windows Server 2016.
  • Searching by effective permissions
    Smarter analysis of Enterprise Reporter data lets you search not only by direct permissions on files and folders but also by effective permissions that result from group membership.
  • Support for new versions of associated products
    The following Quest product versions are supported in this release:
    • InTrust 11.3
    • Change Auditor for Active Directory 6.9.3, 6.9.2, 6.9.1
    • Recovery Manager for Active Directory 8.8

  • Detailed documentation for all event fields
    Fields provided by all IT Security Search connectors are now documented in the IT Security Search User Guide. This helps you tailor your searches to suit your data analysis needs precisely.

See also:

Enhancements

Table 1: General enhancements

Enhancement Issue ID

Members of the computer local Administrators group on the IT Security Search server do not automatically become IT Security Search administrators anymore.

857

IT Security Search administrators can now be specified through Active Directory group membership.

887

Facet behavior has been improved: when you click Show more, IT Security Search now displays all filters instead of adding five items at a time.

883

You can now resize columns in the search result table.

834

Enhancements in IT Security Search 11.3.1

There is now an easy way to fill in the list of repositories in InTrust connector settings. Use the Select all available repositories link instead of selecting repositories one by one.

Enhancements in IT Security Search 11.3

Table 2: General enhancements

Enhancement Issue ID

If an object is outside an operator's explicit scope, information about it should be hidden from the operator.

473

"Whom" field values should be context-sensitive like "Computer " and "Who" field values.

475

Make the "Result" field available for Change Auditor data.

394

Add a details page for events.

533

Improve documentation on SSL certificate requirements.

531

Make the "Organisational Unit" field clickable for computers.

528

Add fields for Office 365-related Change Auditor events.

627

Resolved issues

The following is a list of issues addressed in this release.

Table 3: Resolved issues

Resolved Issue Issue ID

The IT Security Search installer doesn't check the operating system version.

864

In connector settings, pressing Enter switches tabs if the selected connector is not the first.

844

In the Restore Object dialog box, there is no way to tell whether you are trying to restore the correct attribute.

140

Due to issues in previous IT Security Search versions, you may find yourself in a situation where incorrect Recovery Manager for AD settings are saved. Because of this, IT Security Search can fail to start.

839

An indexing error occurs during collection of computer data from Enterprise Reporter if a computer was removed and added again with the same name in Active Directory.

856

Security vulnerability: you can restore an Active Directory object from an OU that is out of your scope as an IT Security Search operator.

853

When you export results to PDF, some non-ASCII characters are incorrect in the resulting documents.

669

Previous resolved issues

Table 4: Resolved issues in InTrust 11.3.1

Resolved Issue Issue ID

If you change only the time range (but not the date range) after a search and try to search again, the new search does not start.

690

The Files and folders where this user has permissions (both direct and indirect) action link fails to take Deny permissions into account.

692

There is no "busy" animation on the Security tab to indicate activity.

650

Security vulnerability: if the results of a search contain JavaScript code instead of an attribute value, then this code is executed on the client side during result formatting.

212

If event has a file path in its description, this path is automatically converted to a hyperlink for convenience. However, in Change Auditor events this works only for files, not folders.

821

Table 5: Resolved issues in IT Security Search 11.3 Updates 1 and 2

Resolved Issue Issue ID

If you specify a custom port instead of the default 8087 when you install the IT Security Search Warehouse API component, then the Active Roles connector will not be able to read Active Roles events. A symptom of this is the following error when you try the Test Connection link on the Active Roles connector configuration page:

Connection error: Data attendant last error 'An error occurred while sending the request.

To work around this issue, open the <IT_Security_Search_installation_path>\Connectors\ActiveRoles\ITSS.ARSConnector.dll.config file and change the port number as necessary in the following line:

<add key="WarehouseHttpPort" value="8087" />

666

The link to the demo screen for a currently disabled connector doesn't work, because IT Security Search tries to perform a real search instead.

677

If an Active Directory object has been deprovisioned by Active Roles, the link to details about such an object doesn't work.

644

The number shown in the "Results found:" label may not match the number of items actually shown in the grid.

684

The Who has direct or indirect access permissions on this file action link fails to take Deny permissions into account.

576

Clicking Rebuild Index before clicking Apply in Enterprise Reporter connector options causes an error.

654

The event page shows native field names where it should show display names.

656

After you apply a filter by Who, the results pane shows more results than it should.

759

If you are looking at event details and then follow a link to the details for some other record type, then the date range is reset.

760

The default time range should be 00:00 to 23:59.

764

When you select the date range in the calendar control, changing the month above either calendar half also changes the month in the other half.

767

Table 6: Resolved issues in IT Security Search 11.3

Resolved Issue Issue ID

The IT Security Search UI stops working if the authenticated user's display name contains non-ASCII characters.

609

If the account used for connecting to InTrust is denied the rights to log on interactively to the IT Security Search server, the InTrust connector does not work.

554

Self Service Tools
Knowledge Base
Notifications & Alerts
Product Support
Software Downloads
Technical Documentation
User Forums
Video Tutorials
RSS Feed
Contact Us
Licensing Assistance
Technical Support
View All
Related Documents

The document was helpful.

Select Rating

I easily found the information I needed.

Select Rating