Changes in v4.6.12

Security:

• Intercept new macro malware variant as suspiciouos in Quicksand

Changes in v4.6.11

Security:

• Increase known senders history size to increase accuracy of spam engine

Improvements:

• Suspend background jobs (cron) during upgrades
• Implemented auto-reboot after system upgrade

Changes in v4.6.10

Security:

• Whaling: blocks evasion techniques using crafted multi-line headers

Improvements:

• Improve email HMAC watermark handling
• Bitdefender updated autorecovery configuration

Changes in v4.6.9

Improvements:

• Tuned DoS protection for NDR flood
• More reliable parser of mail text log

Bug fixes:

• Properly log SMTP reject for user custom Content Filtering rules
• Avoid HTTP 500 error page for email removed from quarantine

Changes in v4.6.8

Security:

• Whaling: improve UTF-8 support in matching by name
• Better recognition of encrypted PDF

Improvements:

• Added automatic check of SMTP Policy Quota service
• Added automatic check of options included in the license

Bug fixes:

• Adjusted the length of the “LDAP Host” field in LDAP Configuration
• Fixed the loading of “Multi Domain Admin” domains
• Fixed QuickSand logging for documents contained in an archive
• Better parsing of the From Header to prevent false positives

Changes in v4.6.7

Bug fixes:

• Properly sanitize spam score on fallback situations
• Update codebase to integrate latest Let’s Encrypt changes

Security:

• Whaling: narrow domain applicability derived from Whale user aliases

Changes in v4.6.6

Improvements:

• More reliable SMTPd service in case of server configuration problems

Bug fixes:

• Properly attach Quicksand warnings to email with ‘multipart/alternative’ or ‘multipart/related’ root entity
• Fix database connection errors which may happens in Bayes learning engine

Security:

• Improve audit log for Whaling functionality

Changes in v4.6.5

Features:

• Extend dictionary retention to MCP defaults

Improvements:

• Optimized Whitelabeling feature
• Speedup syncronization for HTML and HTML images
• Don’t replicate temporary table in cluster

Bug fixes:

• Properly calculate and set relay default config, based on existing configurations
• Disable signatures only when DKIM is enabled
• Restore normal Bayes cleanup which affected some appliances

Security:

• Disable Recall (thread remediation) for domain admins
• Better audit log for quarantine_delete

Changes in v4.6.4

Features:

• Option “block email with attachment removed” now applies also to outgoing emails
• Support DHCP for first setup, and fallback to static IP
• New bootsplash images and console welcome message

Bug fixes:

• Added workaround to support quoted-printable of binary files
• Added support for utf-16 attachments sent with transfer encoding quoted-printable
• Fix attachment extension rules for files with long extensions

Security:

• Whaling features use Whale user aliases if available to expand domains applicability
• Improve sinergy between Quicksand analysis and anti-spam engine to block phishing campaign

Changes in v4.6.3

Bug fixes:

• Restore DKIM functionality when HTML comment disarming option is enabled
• Fix table pagination in authorized devices page
• API: fix domain and type options in addldapset
• Tuned SMTP DoS limits for trusted senders

Changes in v4.6.2

Security:

• QuickSand: blocks office documents with specially crafted unparsable macro

Changes in v4.6.1

Security:

• Delete safe-network obsolete option Notify as it may allows for metadata disclosure
• Show HTML disarm in dangerous report

Improvements:

• Cleanup old kernels after successful upgrade
• Hide virus report table header when there’s no content
• Console: distinct commands for Database repair and optimize

Bug fixes:

• Fix race condition on vmware migration script
• Fix issue on recipient delete from license details page.
• Fix update cron for Office 365 Trusted IPs
• UI: explicitly highlight actions applied to whitelist and blacklist
• UI: Fix label good/bad for bayes messages/audit
• UI: Show proper licensing errors
• UI: Fix a bug in visualization of subtables in Web portal authentication

Changes in v4.6.0

Features

• Office 365: native support for users and valid recipients import
• Threat remediation: recall delivered messages from user’s mailboxes (O365, Exchange, Zimbra)
• Quarantine Report: From field new show “via domain” envelope informations
• Disarm Microsoft conditional comments from email HTML
• Full deliverability test available from relay page
• Attachments table in details page with security hashes
• Configurable TLS security level

Improvements:

• Domain Anti-spoofing integrations with user SPF and DMARC
• Licensing: highlight accounted email
• Dashboard: improve status summary table and license usage
• Improved Avira, BitDefender and ClamAV integrations and service reliability
• URLSand: show original domain as a title to rewritten URL
• Whitelist and Blacklist now share the same CSV format
• Add new Search filter “Only SMTP Reject”
• Automatic VMWare Tools upgrade
• Highlight OR filter semantics in active filters
• Dictionary filters applies to subject field
• Rename HAM/SPAM with simpler terms Good/Bad where possible (bayes, submit, …)
• Removed “forgot” bayes filter action which is now automatic
• Syslog: improved support to RELP/TLS and replication
• Add pending/deleted/unknown delivery statuses in details page
• Add SNMP OID to monitor cluster status
• Add minor releases to ESVA Version to SNMP OID
• Removed header X-%org-name%-MailScanner-ESVA

Bug fixes:

• Mail signatures: generate proper configuration when only domain is customized
• Set system administrator email as MailFrom and MailTo for logwatch
• Align message security tag in every web page and quarantine report
• Fix replication of DKIM Keys in Distributed Setup
• Fix report filter with attachments fields
• Properly handle content-disposition in mail continuity

Security:

• Whaling plugin: improve fuzzy email comparison
• URLSand: improved detection of inlined plain text files
• Intercept new RTF variant embedded in OLE objects
• Add DLL to File Extension blocked by default
• Allow “Release and Whitelist” to domain administrator from quarantine digest
• Changed defaults SMTP Denial of Service limits
• Properly follow link shorted with is.gd
• Whitelist and Blacklist are applied to envelope by default