Release Notes

Enhancement:

• Shareable dashboard and widgets: AD360 now allows you to generate dashboard and widget share links with access tokens.

Enhancement:

• The third-party Zip4j JAR files in the product have been updated to version 2.10.0

Issue fixed:

• A critical RCE security vulnerability (CVE-2022-47966) caused due to a vulnerable .jar file used when SAML SSO is/was enabled in the product, has been fixed. This was reported by Khoadha of Viettel Cyber Security.

Important update

• Third-party requirement for NTLMv2 SSO: To enable NTLMv2 SSO for ManageEngine AD360 and the integrated components in builds 4309 and above, you will have to manually download the Jespa JAR file and add it to the product's lib folder. For more information, click here.
• Note for customers who are on build 4308 or lower: If you have already enabled NTLMv2 SSO, you can continue using the feature and no further actions are needed.

Enhancement:

• AD360 now allows you to configure your mail server using SMTP (Basic or OAuth authentication) or using your mail service provider’s API.

Highlight:

• SharePoint Manager Plus integration: Manage, audit, and secure your on-premises and SharePoint Online environments by integrating SharePoint Manager Plus with AD360.

Enhancement:

• JRE update: JRE which comes bundled with the product has been updated to version 1.8.0_282.

Highlight:

• New 2FA methods: You can now use Microsoft Authenticator and any Time-based One-Time Password (TOTP) authenticator as a secondary authentication factor to verify users’ identities during login.

Highlight:

• Audit-ready compliance reports: You can now generate predefined and audit-ready reports for the following compliance regulations.
  • PCI DSS
  • GDPR
  • FISMA
  • POPIA

  • HIPAA
  • SOX
  • GPG
  • CMMC

Highlight:

• In-product push notifications: AD360 will notify users about issue fixes, patch availability, and other essential updates through in-app banners.

Issue fixed:

• Minor issues were fixed to improve the stability of the product.

Issue fixed:

• Some minor issues have been fixed.

Issues fixed:

• A local privilege escalation vulnerability reported by Lukasz through our bug bounty program has been fixed by changing the default installation path to C:\Program Files\ManageEngine and by removing unnecessary product file permissions. Existing customers can refer this guide to remove the unnecessary product file permissions for AD360. If you wish to migrate the existing installation directory to C:\Program Files, please contact the AD360 support team.
• Log4j dependency in AD360 has been removed to ensure security. Customers who have enabled or would like to enable RSA SecurID configuration for TFA, read this forum post to know how to manually update the latest authapi.jar file and its corresponding Log4j JAR files.

Enhancements:

• Updated Tomcat server: The Tomcat server which comes bundled with the product has been updated to version 8.5.57.
• Updated jQuery: The jQuery used by the product has been updated to version 3.5.1.
• Secure backup archives: AD360 database backup archives are now password protected.

Issue fix

• An open URL redirect vulnerability which allows an attacker to redirect to a target URL has been fixed. This vulnerability was reported by Roberto Nunes through our bug bounty program.

Issue fix

• This release includes a fix to prevent unauthorized remote code execution (RCE).

Highlights:

• Security Hardening: This feature provides access to all of the AD360's existing security-related settings under a single tab to ensure better accessibility to the security configurations. You can also get to know how secured your product is with Product Security Hardening.
• Default Product Accounts' Password Change Notification: Admins will be notified if the product in-built users' default password is yet to be changed, through email, and in the AD360's notification center.

Enhancements:

• Two-factor authentication: You can now enable a second authentication factor for the default product users apart from the already existing support for domain users.

Issue fixed:

• We offer an option to disable single sign-on between integrated components now. This option has been included since each component can have different admin credentials, which was brought to our notice by Gregory.

Issues fixed:

• Fixed the account takeover issue reported by HaYiCle, by enforcing SAML signature verification before logging in users through SAML SSO (CVE-2021-37927).
• Fixed the Post-Auth OS command injection issue that occurs while configuring database backup in an external location. It was reported by Thai Nguyen (CVE-2021-37925).

Enhancements:

• Load all the integrated components instantly: All of AD360's integrated components will now load automatically once you log into AD360. This saves the time spent waiting to load the components individually.
• Reorder the components in apps pane: AD360 now gives you the option to reorder the display of the components in the apps pane. You can simply drag and drop the components to the desired position.
• JumpTo UI revamped: You can now find the featured components of AD360 organized into sections.
• Revamped integration settings: The integration settings have been revamped to present the components in a simple, user-friendly fashion.
• Improved downtime notifications: Downtime notifications will be sent to the admins if the product is down due to unexpected causes including out of memory errors or database access failures.
• Support for Chinese (Traditional): AD360 can be now set up to use traditional Chinese as the user interface language.

Enhancements:

• AD360 now includes provisions to set TLS protocol versions and configure cipher suites.

Issue fixed:

• Minor bugs have been fixed.

Enhancements:

• Browser notifications: Get push notifications in your web browser for product downtime, updates, new events (workshops, webinars, seminars), and more.

Issues fixed:

• Minor bugs have been fixed.

Highlights:

• Self-service password reset: Allows domain users to reset their passwords from their AD360 logon screen when the product is integrated with ADSelfService Plus.

Enhancement:

• Minor Enhancements have been made in the Roboupdate functionality.

Enhancement:

• Some built-in third-party applications used by AD360 have been updated:
  • jQuery has been updated to v3.4.1 from v1.8.1.
  • Jespa jar has been updated to 1.2.2 from 1.1.19.

Issues fixed:

• A vulnerability which allowed a user to enable integration with other supported ManageEngine products bypassing authentication [ CVE-2020-24786].
• Some minor issues have been fixed.

Issue fixed:

• The issue in sending e-mails when the TLS (TLS v1.1 and TLS v1.2) security setting is enabled in the mail server is rectified in this build.

Highlight:

• Startup Notifier: In addition to the existing downtime notifier,admins will also be notified via email when the product starts up.

What's new:

• Few minor Enhancements and bug fixes.

• REST API support:Use HTTP GET and POST methods to read and update domain, proxy, and mail server settings configured in AD360.
• IP-based API and product URL restriction: Allow access to APIs and product URLs to individual IPs or only a specificrange of IP addresses.

Issue fixed:

• Issue faced by certain users in backing up MS SQL database configured in AD360.
• A few minor issues.

Enhancement:

• Implemented security measures to prevent CSRF attacks.

Issue fixed:

• Some minor issues have been fixed.

Highlight:

• SAML-based SSO for login: Allow users to log into AD360 easily by setting up single sign-on through SAML-based third-party identity providers such as Okta, OneLogin, PingIdentity and AD FS.

Enhancement:

• LDAPS can now be enabled or disabled individually for each AD domain.

Issue fixed:

• Issue in disabling the high availability configuration of integrated products from AD360.

Issue fixed:

• Issue which failed to run automatic backup schedule if the PostgreSQL database version is 9.2 or lower.

Enhancement:

• The SSL Certification Tool UI has been revamped for better usability.

Issues fixed:

• Issue in accessing the integrated products from the Apps Pane when context-based reverse proxy is enabled.
• Issue in enabling LDAP SSL.
• Issue in configuring MS SQL database migration using a Windows domain account that doesn't have permission to access the selected SQL instance.

Highlight:

• MS SQL auto-backup: Now schedule automatic backup for the MS SQL database configured in AD360 and restore it as per your requirement.

Highlight:

• Categorize reports from different components: Group similar reports from different components together by creating custom report tabs and categories. This will help you consolidate events, such as users’ logon activities, across AD, Office 365, and Exchange server,and view them without having to jump between different tabs or consoles.

Highlight:

• Backup verification codes for login: Helps users log in to AD360 in case they face issues during two-factor authentication, such as issue in receiving codes via text or if they do not have access to their mobile devices.

Enhancement:

• The notification center UI is revamped to let you filter product notifications based on their priority levels such as critical, warning, and info.

Enhancement:

• The Jump To option for accessing the integrated products has been revamped for easier access.

Issues fixed:

• An XSS vulnerability has been fixed.
• Minor UI issues have been fixed.

Highlight:

• Language Customization:Personalize AD360 by modifying any text displayed in its web interface to suit your organization needs.

Enhancement:

• Database migration made easy:Now you caneasilychangeAD360's bundledPostgreSQL databaseto MS SQL or another instance of PostgreSQLfrom theweb console.

Issues fixed:

• Some minor issues have been fixed.

Highlight:

• Simplified SSL certification tool: A completely revamped SSL certification tool allows you to easilyapply SSL certificate for AD360 with just UI-based actions.

Enhancement:

• Product and event notification: Stay updated about new product features, events, and more.

Highlight:

• Centralized reverse proxy support: Enhance security by configuring AD360 as a reverse proxy server that receives all client requests, forwards them to the appropriate integrated components, and responds to the requests without revealing the identities of the servers.

Enhancement:

• Centralized high availability configuration support has now been extended to ADSelfService Plus.

Issues fixed:

• Brute force attacks can now be prevented by enabling CAPTCHA in AD360 login page.
• Remote code execution vulnerability issue has been fixed.
• Issue which allowed users to access the product's log information.

Issues fixed:

• Some minor issues have been fixed.

Feature:

• IP-based access restriction:Allow orrestrict access to AD360 and all its integrated components based on a specific or range of IP addresses.

Issues fixed:

• Some minor issues have been fixed.

Enhancements:

• Apache Tomcat server used in the producthas beenupgraded to version 8.5.
• Java Runtime Environment (JRE) packagehas beenupgraded to version 8.

Features:

• Exchange reports integration: Now you can integrate Exchange Server and Exchange Online reports in the centralized Reports tab in addition to Active Directory and Office 365.
• Dashboard customization: Create custom tabs under the dashboard and add widgets (reports in graphical format) from different integrated components.
• RecoveryManager Plus integration: Now back up your entire Active Directory and virtual machines (VMware & Hyper-V), and restore them in case of disasters by integrating RecoveryManager Plus.

Enhancements:

• Option to encrypt keystore password while configuring SSL (HTTPS).

Features:

• Two-factor authentication:AD360 now provides an extra layer of security for its users by supporting two-factor authentication during login. Supported authentication modes include:
  • Duo Security
  • RSASecurID
  • RADIUS Authentication
  • Google Authenticator
  • Email verification
  • SMS verification

Features:

• Embed dashboard:Embed the entire AD360 dashboard in any webpage of your choice.

Issue fixed:

• Fixed some minor issues.

Enhancements:

• Separate modules forIAM and compliance management:AD360 now comes with two different EXEs—one for identity and access management and another for IT compliance management. You can now download and install only the module you need. Download AD360 IAM module (32-bit | 64-bit ) | Download AD360 IT Compliance module (32-bit | 64-bit )

Issue fixed:

• Fixed some minor issues.

Feature:

• Smart card authentication: The use of smart cards/ PKI/ certificates has been enabled as additional options for AD360 login. If you have such an authentication system configured in your organization, AD360 can be configured to authenticate users through it, bypassing other first factor methods.

Enhancements:

High availability in AD360 has been enhanced with:

• A revamped GUI, making it easier to work with the connected applications, and enhance user experience.

Issues fixed:

• Minor bug fixes that improve the stability and performance of the application.

Issue fixed:

• Fixed some minor issues.

Issue fixed:

• Some minor issues have been fixed.

Feature:

• Unified Active Directory and Office 365 reporting: Get access to reports on both on-premises Active Directory and Office 365 cloud in one spot.

Enhancements:

• Employee Search now works with the flat UI of AD360 and also neatly sorts the results based on users, groups, and contacts.

Feature:

• Notification Center – Now get instantly alerted about critical events, such as low disk space, product downtime, and mailer server configuration, and take necessary action from within the web console itself.

Feature:

• O365 Manager Plus dashboard integration: Now get a bird’s eye view of your Office 365 environment from AD360 dashboard.
• High availability for O365 Manager Plus can now be configured from AD360.

Feature:

• O365 Manager Plus integration: Now you can integrate O365 Manager Plus with AD360 and get access to exhaustive reports on Exchange Online, Azure AD, Skype for Business, and other critical services of Office 365.

Issue fixed:

• Some minor issues have been fixed.

Feature:

• Configure NTLM Single Sign-On for all integrated components from AD360.

Enhancement:

• You can now synchronize mail server settings across all integrated components.

Issue fixed:

• Some minor issues have been fixed.

Issues fixed:

• Issue in initializing the built-in pgSQL database has been fixed.
• Other minor bugs have also been fixed.

Enhancements:

• New flat user interface for an improved look and feel.
• Support for Japanese language.

Features:

• Centralized database management: Change the database of any integrated component from AD360.
• You can now choose to hide any component that you do not use from the dashboard, apps pane, and license module.

Enhancement:

• Enhanced license module: You can now apply the license to individual components and check the license application status from AD360 itself.

Issues fixed:

• Issue in integration settings which failed to remove a component when it is down.
• Startup issue when NTLM is enabled.

Issue fixed:

• Some minor bugs have been fixed.

Features:

• High availability support (active/standby mode) to ensure minimal downtime.
• Now easily back up the database of all the components from a centralized location.
• Unified single tray icon comprising settings of all the components.
• Apps pane is now available in all the components to facilitate easy switching between the components.
• Single sign out support to automatically sign out of all components.
• Single startup and shutdown to automatically startup and shutdown all the components.

Enhancements:

• Enabling NTLM SSO has been made easier; requires no configuration from your side.

Issues fixed:

• Issue in UI performance when some components are down.
• Other minor issues have also been fixed.

Issues fixed:

• An issue with auto update has been fixed.
• Other minor issues have also been fixed.

Issues fixed:

• An issue with auto update has been fixed.
• Other minor issues.

Issues fixed:

• Startup and shutdown issues when installed on a 32-bit machine have been fixed.

Issues fixed:

• Issue in updating AD360 through the service pack has been fixed.
• All the components have been updated to their latest versions.
• Java Runtime Environment used in AD360 has been updated to version 7.

Issues fixed:

• An issue with auto update has been fixed.
• Evaluation period of components integrated in AD360 has been increased from 30 days to 60 days.
• Other minor issues have also been fixed.

Issue fixed:

• Issue in integrating the components when they are installed in a DMZ environment.

Issue fixed:

• Issue which triggered license expiry notification emails even if any one of the component is unlicensed has been fixed.

Enhancements:

• Option to enable/disable license expiry and product downtime notifications.
• Option to hide selected components from the dashboard.

Issue fixed:

• Issues that arise when the product is started multiple times simultaneously.
• Issue in saving changes made in the product settings tab.

Enhancement:

• Auto Update user interface has been enhanced by bringing it under the Admin Tab for greater visibility.

Issue fixed:

• Issue that affected AD360 user interface when Ad blockers are enabled in the web browser.

Enhancement:

• Chinese language support: Default user interface language of AD360 can now be set to Chinese.

Issue fixed:

• An issue in the license module has been fixed.

Issues fixed:

• Minor issues in the components when accessed from the apps pane.
• Log in issue which allowed disabled users to log in to AD360 when guest access is enabled in Active Directory.
• Issue in Single Sign-On when enabled with NTLM authentication.

Features:

• AD360 now supports Single Sign-on using NTLM authentication protocol for enhanced security
• Introducing Apps Pane - now instantly access all the ManageEngine ADSolutions products from the same browser tab.
• Now admins and help desk technicians in AD Management component can view and approve the requests created by end-users in Password Self-Service component like self-update contact info with the new "Self-Service Approval Workflow" feature.

Feature:

• AD360 debuts its 64-bit version for better stability and memory management.

Enhancement:

• License module has been enhanced to successfully apply the license even if certain components are down.

Enhancement:

• Easily download and integrate the latest version of the individual components; no restrictions on version compatibility.
• Ability to view license details of each component individually within the AD360 console.

Issue fixed:

• SSL issues that appeared in Integration Settings, License Module & Dashboard Access have been fixed.

Enhancement:

• Now integrating ADSelfService Plus will give you easy access to 'Employee Search' from anywhere in AD360.

Issue fixed:

• Fixed some minor issues.

Issue fixed:

• The latest release comes with minor bug fixes that improves the stability and performance of the program

Issue fixed:

• Issue with domain users logging into AD360 when their username has less than 5 characters

Features:

• SSL Certification tool to help you secure AD360 with HTTPS for safer data transfer
• Get prompt notifications via email whenever AD360 goes down

Issue fixed:

• Issue with domain duplication