Resolved issues

ENDPT-62698

The sftaskernode job failed when sftasker received invalid characters. The issue has been resolved.

ENDPT-81207

ExploitGuard alerts that were marked as False Positive due to the Exploit Timestamp condition were not being deselected. This issue has been resolved.

ENDPT-96530

After the DTI download source was changed, Endpoint Security (HX) did not use the new source until the fenet_content_manager was restarted. This issue has been resolved.

ENDPT-95280

Navigation between Endpoint Security (HX) Web UI pages could cause 502 Bad Gateway errors. This issue has been resolved.

ENDPT-83646

Logs generated from the Endpoint Security (HX) Web UI or CLI did not include module logs. This issue has been resolved.

ENDPT-92342

The vulnerability addressed in CVE-2021-40438 has been resolved.

ENDPT-96312

The fenet license update service failed when it encountered non-ASCII characters in the Customer Name field. This issue has been resolved.

ENDPT-99466

The Storytime module continually fails on Endpoint Security (HX) version 5.2.0. This issue has been resolved in Storytime v2.1.0, which is included in this release.

COM-29610

Cloud deployments of Endpoint Security were returning an incorrect port number in the SAML expected response. This issue has been resolved.

ENDPT-101574

The vulnerability addressed in CVE-2022-0778 has been resolved.

ENDPT-66854

A kernel issue caused Endpoint Security (HX) Servers to crash and reboot, which prevented the customer from being able to monitor their endpoints. This issue has been resolved.

COM-29529

Python license fetch auto update feature was affected. The issue is fixed.

ENDPT- 88172

A False Positive storm caused the Endpoint Security (HX) log to fill with errors, which caused other processes to error and fail. If left unchecked, Agents will not be able to check in with the Endpoint Security (HX) Server. This issue has been resolved.

ENDPT- 83648

After upgrading to Endpoint Security (HX) Agent version 33.46.0, a customer began receiving Unsigned Image Load alerts. This issue has been resolved.

ENDPT-86671

After a customer upgraded their host endpoints to Endpoint Security (HX) version 33.46.0, Endpoint Security (HX) began receiving alerts for Suspicious Windows Trust Configuration on many of their hosts. This issue has been resolved.

ENDPT- 102277

After an Agent has been contained and uncontained multiple times, the containment icon can disappear (indicating a Normal state) instead of switching to Contained state for the contained Agent. This issue has been resolved.

ENDPT-85074

Syslog entries received from a remote source were not forwarded by the rsyslogd service. This issue has been resolved.

ENDPT-92499

A customer requested that the Host Management Module results limit for API queries be increased. The Host Management module now allows API calls to return up to 1000 results. This issue has been resolved.

ENDPT-62543

After more than 5 hours, a raw disk acquisition failed while a full disk acquisition succeeded for a host endpoint running Endpoint Security (HX) Agent version 31.28.4. This issue has been resolved.

ENDPT-87477

Some processes adversely affected memory availability, which generated a "Management back end unavailable. Continuing with reduced functionality." error. This issue is resolved.

ENDPT-95195

Secure content upload failed with an error message stating "error: 415 filetype not permitted", which prevented the customer from uploading to DTI. This issue has been resolved.

ENDPT-93957

The port 80 http response included the FireEye brand name on the page not found error, which could potentially be used as information by an attacker. This issue has been resolved.

ENDPT-83248

After migrating from a cloud instance of Endpoint Security (HX) to an on-premises instance, a customer received a "Login Failed: Failed to Dynamically register a client hostname" error when trying to log in with IAM. This issue has been resolved.

ENDPT- 101849

A customer required a domain name that exceeded the character limit for top level domain names. To avoid future problems the character limit for top level domain names has been extended to 24 characters. The issue has been resolved.

ENDPT-72866

The end of life status of nginx 1.16.1 produced alarms in some customer's monitoring software on earlier versions of Endpoint Security (HX), which caused concern over potential vulnerabilities. Endpoint Security (HX) version 5.2.1 and later support nginx version 1.20.1. This issue has been resolved.

ENDPT-60050

The Endpoint Security (HX) server generates an error if the host set name exceeds the character limit for names or if the host set name contains invalid characters. However, these rules are only enforced for existing host set name changes and for the creation of new host sets. This issue has been resolved.

ENDPT-101509

After a customer performed a database vacuum, the app_processor and lighthouse processes did not restart on their release 5.2 instance of Endpoint Security (HX). This issue has been resolved.

ENDPT-71217

Several fields were only appearing intermittently in CEF event logs. This issue has been resolved.

ENDPT-95998

sf_nginx_fe was missing route information for agent upgrades, which prevented the customer from upgrading the agent version on their host endpoints. This issue has been resolved.

ENDPT-97085

A customer using Endpoint Security (HX) version 5.2 with proxy enabled configured a proxy username containing a back-slash "\", which caused the fenet content manager service to terminate and go into a pending state. This issue has been resolved.

ENDPT-89752

The Error Saving Policy message text was revised to provide a better explanation of why you cannot disable Removal Protection before you remove the Removal Protection password. This issue has been resolved.

ENDPT-93830

Case sensitive path exclusions were not supported for some Endpoint Security (HX) features. This issue has been resolved.

ENDPT- 92708

The password for both Removal Protection and User Defined Proxy appeared in plain text in the logs when a customer modified a policy with both Removal Protection and User Defined Proxy enabled. This issue has been resolved.

ENDPT-73329

Host set creation using Set Builder is unsuccessful when using a regular expression of a certain format. This issue has been resolved.

ENDPT-85576

Hosts with a large number of IP Addresses can cause failure of the Endpoint Security (HX) server to parse the agent sysinfo audit due to the size limit of sysinfo. This issue has been resolved.