windows firewall control 4.5.4.2 activation

Windows firewall control 4.5.4.2 activation update#
Windows firewall control 4.5.4.2 activation software#

Improve completeness of deny logs exported to S3.Support unrestricted file uploads within an application.Improved decoupling of monitoring components.API Support - including OpenAPI specification import.Generalized interface for managing client connection trust.Fix issue where caching of XML parse results can lead to subsequent similar XML payloads not being validated correctly.Set correct violation for requests with an unspecified protocol.Improvements to error message to read-only users attempting disallowed actions.Set correct permissions on some log files.Support ACL path regexes with curly brackets.Resolve an issue in UTF-8 detection in the WAF engine introduced in version 5.1.0.0 which could lead to a 500 Internal Server Error.Redact sensitive values in the config object sent to the backend.Several improvements to CAPTCHA capability.

Windows firewall control 4.5.4.2 activation update#

Update Web Session Anomaly Detection sensitivity definitions.

Emit a 'wsm-cert-monitor' log when certificates approach expiration dates.

Update dependencies not already part of automatic updates.

Send additional audit log to Fortra log backend.

Support managing RFC1918 addresses as a separate Source Class in L7 Source IP and Geolocation based controls.

Ensure strictest source IP controls combination is selected when multiple Source Control Groups apply in L7 Source IP and Geolocation based controls.

Ensure XXE parsing state is properly preserved in all cases to prevent spurious violations.

Normalize filenames in multipart file upload HTTP requests to prevent spurious decoding violations.

Windows firewall control 4.5.4.2 activation software#

URL decode software packaged filenames properly when looking for updates in S3 repos.Solve conflict when CSRF protection (response rewriting) and dynamic HTTP response caching are both enabled.Improvements to PKCS12 certificate key encryption.Only add vhost alias for a domain to its 'www.' proxy if not already present for another website.Fix initialization error in certain ACL policy overrides.Use systemd for al-core service start/stop.Support X-Forwarded-For source IP parsing for requests going to the black hole.Support AWS IMDSv2 API for host metadata.Automated challenge-based DDoS protection in AWS - pushing protection into AWS infrastructure.For additional information, refer to our software update. If you are running version(s) of Managed WAF that will be affected by this EOL, we strongly urge you to contact our dedicated Security Operations team at to schedule an update to the latest version. Skip public IPs of trusted proxies in XFF headersĪlert Logic has announced that Fortra's Managed WAF will 'end of life' (EOL) software versions prior to version 5.x as of March 31, 2024.Preserve and restore non-alphabetic ACL orderings.Fix validation issue in web form for layer 7 source IP blocking.Fix validation issue in web form for restricting request length and number.Various improvements to bot and client management user interface.Correctly parse out the HTTP method for requests using HTTP/2 and client authentication.Correctly parse out hyphenated hostnames for some blackholed requests.Restore DDoS configurations properly on autoscaling deployments.Improve efficiency of loading an IP database in core worker processes.Transmit additional uptime details with the existing uptime monitoring check.Mitigate HTTP/2 rapid resets with per-iteration stream handling limit.Improved logging of session anomalies to the deny log.

API optimized DDoS protection option in Azure and AWS based on automatically generated rulesets of known-good clients.Release date: NovemVersion 5.1.1.0 Features Improve DNS resolution resiliency for single-protocol sites with backends defined by hostname.Correctly enforce large URI first line request limits.Avoid URL collisions in paths used by both protected websites and internal captcha redirects.Prevent deactivation of global L7 blocking settings if particular websites are using it.Google reCAPTCHA and hCaptcha integration via interstitial page injection

Release date: DecemVersion 5.1.2.0 Features