Proofpoint | ObserveIT On-Premises Release Notes version 7.13.1

Version 7.13.1

This document provides information about new features, issues that were discovered and fixed since the previous release, and any limitations of the release. It is important that you read this document before you install and configure this version.

For information about how to install and upgrade, see:

• Installation Guide

• Upgrading ITM On-Prem (ObserveIT)

This version includes security fixes.

New Features and Enhancements

Agent-server communication via Static Proxy is now GA

When enabled via installation, all communication between the Agent and the server is via the proxy server for both Windows and Mac.

This feature is currently available via GUI-based installation as well as via silent installation.

New Action-Related Parameters in Report API for Alets

The Alert-related information externalized via the Report API has been enhanced to include the Alert type of the Action configured in the Alert Rule in the field actionStatus field and whether the action was applied in the field ActionWasApplied. (Alert Rules include, Warning Notification, Blocking Message, Close Application, Log Off, Start Video Recording)

New Default Setting for Time Zone Display

A new default setting option is now supported. This option lets you choose to set the default time for the Show time by option. You can set this to either Endpoint time of Sever time.

The default time zone display can be selected from the Default time zone display dropdown in Configuration > System Settings > System Settings. Select Server or Endpoint (local time). The default you select, will display in the Endpoint, User and File Diaries and Alerts and Search screens.

See: Configuring System Settings

New Distributions Supported for Linux Distribution

For Linux Agent installation Linux Mint and Kali Mint are now supported.

Linux JWT Support

From version 7.13.1, JWT authentication is supported when installing Linux agents.

Before installing Linux agent, you must download a JWT File that you will provide during the installation. This file can be downloaded from the Configuration > Settings > Service Settings. (See Configuring Service Settings.)

Add the location of the JWT file when you run the installation command, for example:

./observeit-agent-Ubuntu-12.04-precise-5.8.0.156.run -- -i -s 10.3.0.72 -j <jwt file path>

where <jwt file path> is the JWT file path location.

See Installing a Unix/Linux Agent.

Resolved Issues

[Issue 598]: The incorrect extraction of MIP labels after an API update by Microsoft (MIP SDK 1.8) was resolved.

[Issue 608]: Performance issue that occurred when pulling file activity related information with report API was resolved.

[Issue 647]: Database performance in large deployments while using SQL 2016 or later has been optimized further.

[Issue 618]: Mac Agent failure issue that occurred in some very specific circumstances has been resolved.

[Issue 484]: Incorrect detection of internal hard drive as the USB device has been resolved.

[Issue 650]: Failure to install version 7.13.0 when using a non-default model database has been resolved.

[Issue 632]: Failure to remotely connect to remove Linux endpoint over SSH has been resolved.

[Issue 623]: The time displayed on alerts with CEF log files was resolved to take into consideration time zone gaps.

[Issue 602]: Failure to detect paste activity on Japanese localized OS has been resolved.

[Issue 605]: MIP label extraction for bulk operation of attaching files to an email has been resolved.

[Issue 590]: The incorrect classification of the Website Category Finance & Banking has been resolved.

[Issue 581]: The issue that occurred when loading the archive page for large amounts of archive data has been resolved.

[Issue 514]: Size allocation maintenance issue on a disk when the Agent is working offline has been resolved.

[Issue 609]: Failure to play sessions within the archives has been resolved.

[Issue 631]: Failure that occurred when loading File Diaries within the Web Console has been resolved.

[Issue 615]: In generated reports, the sorting issue that occurred due to incorrect use of am/pm, has been resolved.

[Issue 595]: Failure to open the System Events screen within the Web console has been resolved.

[Issue 587]: Failure to download saved session has been resolved.

[Issue 543]: The option to delete screenshots stored by the Agent on Linux endpoints by all Linux users has been blocked.

[Issue 472]: The failure of Windows Agent processes after reboot has been resolved.

Supported Versions

From version 7.13.0, Windows 7 is no longer supported.

32 bit is not supported from version 7.13.0 for Agent and Updater.

In-App Elements are no longer supported. In-App element options still appear in some places in the UI, they will be removed in 2022.

This is the last version to support SQL Server 2012. From version 7.13.2 SQL Server 2012 will no longer be supported.

For server side components such as the Application Server and Web Console, the following software development frameworks are supported for this version:

• Node.js 14.18.1

• .Net Core 3.1.24

From version 7.13.1, the following are no longer supported

Centos5

Centos6-Power

Ubuntu 12

Debian 6 32 bit

Debian 7 32 bit

Suse 11

Oracle Linux 4

Oracle Linux 5

Version 7.13.0 and up can be deployed only on SQL Servers that support partitions

You can upgrade to 7.13 (or later) only if your original deployment was installed as partitioned. If your system was installed not as partitioned, a migration will need to be performed. Contact Support to get help with it.

To see whether your current SQL Server deployment supports partitions. use the following commands:
use observeit
go
/*
You want to see the following partition schema:
PS_Day

PS_Day_DayTime

*/ select * from sys.partition_schemes

go