ThreatSync+ NDR Release Notes

ThreatSync+ NDR extends the existing ThreatSync functionality in WatchGuard Cloud and offers enhanced network detection and response, network device identification, and advanced reporting for Fireboxes, third-party firewalls, and LAN infrastructure.

For a full description of ThreatSync+ NDR features and functionality, go to ThreatSync+ NDR Help.

Release Information Date
Latest ThreatSync+ NDR Update 17 October 2024
Release Notes Revision Date 17 October 2024

Latest Release

Release Date: 17 October 2024

New Features

ThreatSync+ NDR Collection Agent for Linux (Beta)

You can now enable and configure the ThreatSync+ NDR Collection Agent for Linux to collect logs from devices and provide real-time collector status. To learn more or to report an issue, go to the ThreatSync+ NDR Beta test community.

Resolved Issues

  • Minor updates and bug fixes.

Previous Releases

Resolved Issues

  • Minor updates and bug fixes.

Resolved Issues

  • Minor updates and bug fixes.

Resolved Issues

  • Minor updates and bug fixes.

Resolved Issues

  • Minor updates and bug fixes.

Resolved Issues

  • Minor updates and bug fixes.

New Features

Managed Security Service Provider (MSSP) Reports

You can now generate and schedule a Service Provider Summary Report for your managed accounts in WatchGuard Cloud. For more information, go to Schedule ThreatSync+ NDR Reports in Help Center.

Resolved Issues

  • Minor updates and bug fixes.

Resolved Issues

  • Minor updates and bug fixes.

Resolved Issues

  • Minor updates and bug fixes.

Resolved Issues

  • This release resolves a display issue with the Traffic page. [NDR-595]
  • Minor updates and bug fixes.

Enhancements

  • WatchGuard Cloud now deletes ThreatSync+ NDR data for an account when:
    • The ThreatSync+ NDR license expires
    • You deallocate the license to 0 users
    • You cancel an active ThreatSync+ NDR trial

A new message warns operators that the data will be deleted in seven days. After seven days, data is deleted and operators cannot access the ThreatSync+ NDR management UI. Deleted data cannot be restored.

For more information, go to FAQs for ThreatSync+ NDR Licensing. [NDR-433, NDR-434, NDR-435, NDR-645, NDR-647, NDR-648, NDR-649, NDR-650]

Resolved Issues

  • This release resolves a display issue with the Traffic page. [NDR-595]
  • Minor updates and bug fixes.

Resolved Issues

  • You can now control how much of your network ThreatSync+ NDR monitors. [NDR-476]
  • Minor updates and bug fixes. [NDR-889]

Resolved Issues

  • Minor updates and bug fixes.

Resolved Issues

  • Minor updates and bug fixes.

Enhancements

  • The Traffic page now shows the Alert Severity Scale when specific anomaly types are selected with the Events Data Source. [NDR-666]

Resolved Issues

  • The ThreatSync+ NDR UI now shows Monitor and Configure pages as expected. [NDR-641]
  • Minor updates and bug fixes. [NDR-637, NDR-577, NDR-694]

Resolved Issues

  • Helpdesk operators now have the expected read-write permissions in ThreatSync+ NDR. [NDR-578]
  • The Activity by Source Device table now shows FireClusters as a device type. [NDR-366]
  • The Activity by Source Device table now shows data for all dates selected. [NDR-639]
  • Minor updates and bug fixes.

New Features

Initial release of ThreatSync+ NDR. For information about ThreatSync+ NDR, go to Introduction to ThreatSync+ NDR in Help Center.