F I R E E Y E T E C H N I C A L D O C U M E N T A T I O N
SECURITY ORCHESTRATOR
RELEASE NOTES
RELEASE 6.6
SECURITY ORCHESTRATOR / 2021
FireEye and the FireEye logo are registered trademarks of FireEye, Inc. in the United States and other countries. All other trademarks are the property of their respective owners.
FireEye assumes no responsibility for any inaccuracies in this document. FireEye reserves the right to change, modify, transfer, or otherwise revise this publication without notice.
Copyright © 2021 FireEye, Inc. All rights reserved.
Security Orchestrator Release Notes
Software Release 6.6.0
Revision 1
FireEye Contact Information:
Website: www.fireeye.com
Technical Support: https://csportal.fireeye.com
Phone (US):
1.408.321.6300
1.877.FIREEYE
Contents
Contents
Announcements ............................................................ 4
FireEye Customer Security Best Practices ............................................................ 4
Upgrade ............................................................ 4
What's New ............................................................ 6
Installing Self-Reliant Plug-ins Support ............................................................ 6
Single-Click Install for Plug-in Installation ............................................................ 6
Enhancements to Existing Functionality ............................................................ 6
Fixed Security Orchestrator Issues ............................................................ 8
Technical Support ............................................................ 9
Documentation ............................................................ 9
© 2021 FireEye 3
Security Orchestrator Release Notes
Announcements
Announcements
This document provides an overview of the new features and changes in the FireEye Security Orchestrator 6.6.0 release, including any new commands, resolved issues, and known issues.
FireEye Customer Security Best Practices
Because our quality assurance process includes continuous security testing, FireEye recommends updating all FireEye products with the latest releases as soon as possible. As an overall strategy to reduce risk exposure, customers are also encouraged to follow best practices, which include:
- Always keep the product version up-to-date
- Limit network access to the management interfaces of the appliance using firewalls or similar measures
- Only issue accounts to trusted administrators
- Use strong passwords
- Monitor logs
- Restrict physical access to the appliance to trusted administrators
Upgrade
You can upgrade to Security Orchestrator 6.6 from version 6.0 and above versions.
To upgrade from an earlier version of Security Orchestrator, you must use snapshots to migrate data from the older version of Security Orchestrator to a new 6.6 virtual machine. You cannot install Security Orchestrator 6.6 directly onto a machine running version 4.x or 5.x.
The following sections in the Security Orchestrator System Administration Guide contain information and steps about deploying a new Security Orchestrator VM and migrating your existing configuration into the 6.6 machine:
- Virtual Appliance Installation
- Obtain SO Deployment Files
Release 6.6
Upgrade
Install the SO Virtual Appliance
Upgrading Software
Configure the Virtual Appliance at Initial Start up
Set SO Virtual Appliance Date and Time
Access SO Web UI
Troubleshoot SO Web UI Access Issues
Using Snapshots to Save System Configuration
Creating a Snapshot of Your SO Configuration
Importing a Snapshot to Your SO Virtual Machine
Migrating Data Into a New Version of Security Orchestrator
Migrating Data Using a Snapshot Import
CAUTION: You cannot upgrade directly to Security Orchestrator 6.6 from any version earlier than 6.0.
© 2021 FireEye
5
Security Orchestrator Release NotesWhat's New
What's New
The Security Orchestrator release 6.6.0 provides easier on-boarding, better user experience, security fixes, and platform performance improvements. This section describes new features in the FireEye Security Orchestrator release 6.6.0.
Installing Self-Reliant Plug-ins Support
Support has been added for installing the self-reliant plug-in that includes all the required PYTHON and RPM dependencies. This eliminates the need for manual installation of all the dependencies.
Single-Click Install for Plug-in Installation
A single-click installation of the plug-in from your Security Orchestrator UI is now possible. The Market tab in the Plugins section of the Web UI displays available plug-ins listed in the FireEye Market. Click Install on the plug-in tile to download and install the plug-in directly.
The existing installed plug-in tiles display an indicator on the top-right corner if there are updates available. You can click the indicator to update the installed plug-ins.
Enhancements to Existing Functionality
- Security Orchestrator is now the default application when you create an adapter. Users need not perform an additional step of selecting the application while creating a new adapter.
- The following key libraries were upgraded:
- Erlang from OTP 20.3 to 23.3
- Elixir from 1.5.1 to 1.10.4
- RabbitMQ from 3.7.12 to 3.8.16
- Python from 3.6.9 to 3.8.6
6© 2021 FireEye
Release 6.6
Enhancements to Existing Functionality
© 2021 FireEye
7
Security Orchestrator Release Notes
Fixed Security Orchestrator Issues
Fixed Security Orchestrator Issues
The following issues were resolved in the Security Orchestrator 6.6.0 Release.
The relevant issue tracking numbers for each item are included in parentheses.
-
On the Cases and All Activity page, clicking the Back arrow did not return to the previous page. This issue has been resolved. (FSO-2366)
-
Clicking the Back arrow from the Address bar caused a Web UI crash. This issue has been resolved. (FSO-1416)
Technical Support
For technical support, contact FireEye through the Support portal:
Documentation
Documentation for all FireEye products is available on the FireEye Documentation Portal (login required):
FireEye, Inc. | 601 McCarthy Blvd. | Milpitas, CA | 1.408.321.6300 | 1.877.FIREEYE | www.fireeye.com
© 2021 FireEye, Inc. All rights reserved. FireEye is a registered trademark of FireEye, Inc. All other brands, products, or service names are or may be trademarks or service marks of their respective owners.
