ThreatSync+ NDR Release Notes
ThreatSync+ NDR extends the existing ThreatSync functionality in WatchGuard Cloud and offers enhanced network detection and response, network device identification, and advanced reporting for Fireboxes, third-party firewalls, and LAN infrastructure.
For a full description of ThreatSync+ NDR features and functionality, go to ThreatSync+ NDR Help.
Release Information | Date |
---|---|
Latest ThreatSync+ NDR Update | 21 November 2024 |
Release Notes Revision Date | 21 November 2024 |
Latest Release
Release Date: 21 November 2024
New Features
Initial release of ThreatSync+ SaaS. For information about ThreatSync+ SaaS, go to Introduction to ThreatSync+ SaaS in Help Center.
Resolved Issues
- Minor updates and bug fixes.
Previous Releases
Resolved Issues
- Minor updates and bug fixes. [NDR-1471, NDR-1487, NDR-1702]
New Features
ThreatSync+ NDR Collection Agent for Linux
You can now enable and configure the ThreatSync+ NDR Collection Agent for Linux to collect logs from devices and provide real-time collector status. For more information, go to Configure Collectors for ThreatSync+ NDR (Linux Computers) in Help Center.
Enhancements
- The ThreatSync+ NDR Collectors menu has moved to Configure > ThreatSync+ Integrations. [NDR-764]
- On the Manage Devices page, you can now select Phone or Tablet as a device type when you create a device. [NDR-1642]
- The ThreatSync+ NDR Collection Agent for Linux now shows an Initialization status when the collector is being installed by the WatchGuard Agent. [NDR-1453]
Resolved Issues
- Minor updates and bug fixes. [NDR-1562, NDR-1666]
Enhancements
- The Download WatchGuard Agent Installer dialog box now includes a Copy Download URL link. [NDR-1492]
Resolved Issues
- Minor updates and bug fixes. [NDR-1466, NDR-1562]
Resolved Issues
- Minor updates and bug fixes.
New Features
ThreatSync+ NDR Collection Agent for Linux (Beta)
You can now enable and configure the ThreatSync+ NDR Collection Agent for Linux to collect logs from devices and provide real-time collector status. To learn more or to report an issue, go to the ThreatSync+ NDR Beta test community.
Resolved Issues
- Minor updates and bug fixes.
Resolved Issues
- Minor updates and bug fixes.
Resolved Issues
- Minor updates and bug fixes.
Resolved Issues
- Minor updates and bug fixes.
Resolved Issues
- Minor updates and bug fixes.
Resolved Issues
- Minor updates and bug fixes.
New Features
Managed Security Service Provider (MSSP) Reports
You can now generate and schedule a Service Provider Summary Report for your managed accounts in WatchGuard Cloud. For more information, go to Schedule ThreatSync+ NDR Reports in Help Center.
Resolved Issues
- Minor updates and bug fixes.
Resolved Issues
- Minor updates and bug fixes.
Resolved Issues
- Minor updates and bug fixes.
Resolved Issues
- This release resolves a display issue with the Traffic page. [NDR-595]
- Minor updates and bug fixes.
Enhancements
- WatchGuard Cloud now deletes ThreatSync+ NDR data for an account when:
- The ThreatSync+ NDR license expires
- You deallocate the license to 0 users
- You cancel an active ThreatSync+ NDR trial
A new message warns operators that the data will be deleted in seven days. After seven days, data is deleted and operators cannot access the ThreatSync+ NDR management UI. Deleted data cannot be restored.
For more information, go to FAQs for ThreatSync+ NDR Licensing. [NDR-433, NDR-434, NDR-435, NDR-645, NDR-647, NDR-648, NDR-649, NDR-650]
Resolved Issues
- This release resolves a display issue with the Traffic page. [NDR-595]
- Minor updates and bug fixes.
Resolved Issues
- You can now control how much of your network ThreatSync+ NDR monitors. [NDR-476]
- Minor updates and bug fixes. [NDR-889]
Resolved Issues
- Minor updates and bug fixes.
Resolved Issues
- Minor updates and bug fixes.
Enhancements
- The Traffic page now shows the Alert Severity Scale when specific anomaly types are selected with the Events Data Source. [NDR-666]
Resolved Issues
- The ThreatSync+ NDR UI now shows Monitor and Configure pages as expected. [NDR-641]
- Minor updates and bug fixes. [NDR-637, NDR-577, NDR-694]
Resolved Issues
- Helpdesk operators now have the expected read-write permissions in ThreatSync+ NDR. [NDR-578]
- The Activity by Source Device table now shows FireClusters as a device type. [NDR-366]
- The Activity by Source Device table now shows data for all dates selected. [NDR-639]
- Minor updates and bug fixes.
New Features
Initial release of ThreatSync+ NDR. For information about ThreatSync+ NDR, go to Introduction to ThreatSync+ NDR in Help Center.