Overview

Cyber Asset Inventory - Devices: Network Inspectors

We have enhanced our Asset Inventory of Devices to surface network device inspectors, including Cisco Meraki, WatchGuard, FortiGate, and SonicWall versions 6 and 7. This enhancement ensures you are equipped with a complete and accurate inventory, enabling you to manage patching and licensing effectively and maintain optimal configuration states across all network assets.

For more information about our Cyber Asset Discovery and Inventory feature, please visit our Documentation.

Palo Alto Inspector Now in Production

The Palo Alto Inspector is officially in production status, delivering enhanced security and monitoring capabilities for IT Service Providers managing Palo Alto devices. This release introduces IT Glue and ConnectWise Manage mappings, a new management interface view, and data quality improvements for streamlined visibility and proactive security management. Existing partners will automatically receive these enhancements with their next successful inspector run.

Feature Highlights

• Prevention of Misconfigurations An updated dataset that aligns with our standard Liongard firewall inspector datasets helps to identify better and rectify potential vulnerabilities related to device configuration.
• Out-of-the-Box Metrics: Predefined metrics that streamline the monitoring process.
• Actionable Alerts: Notifications on configuration issues, enabling swift resolution.
• Enhanced Integrations: Mappings added for IT Glue and ConnectWise Manage to improve data correlation across platforms.
• New Management Interface & Licensing View: The System Details page now includes new “Interfaces” and “Licensing” views, improving how IT Service Providers interact with and analyze Palo Alto device data.

To take advantage of this inspector, please review our documentation.

Minor Updates and Bug Fixes

Platform Minor Updates and Bug Fixes

• Company Settings: Updated the Billing section under Company Info page to Usage to better reflect the information displayed on the page.
• Improved Cyber Risk Dashboard EDR identification for Crowdstrike Falcon.

Integration and Inspector Minor Updates and Bug Fixes

• 3CX
  • Updated the inspector to replace the invalid LicenseInfo endpoint with the correct LicenseStatus equivalent, ensuring accurate retrieval of licensing details and improved data reliability.
  • Deployed a fix for the 3CX Inspector to bypass 404 errors for 'License Info,' allowing inspections to continue uninterrupted as we investigate the issue.
• Actionable Alerts
  • Improved reliability of alerts triggered by a change detection in certain scenarios.
• Active Directory
  • Fixed an issue causing false positives for the Active Directory inspector's "Default Guest Account Enabled" metric.
  • Fixed an issue related to "DefaultAdministratorEnabled" false positives in the Active Directory inspector.
• Agents
  • New agent version 5.0.0 to address some security and vulnerability fixes. Performance enhancements.
• Amazon Web Services
  • Resolved an issue causing the AWS Inspector to fail in certain scenarios.
  • Resolves an issue causing some AWS Inspections to fail due to rate limiting.
• Asset Inventory
  • Added WatchGuard, Fortigate, and V6/7 Sonicwall devices to the Asset Inventory.
  • Added ConnectWise Automate as a device source for the Asset Inventory.
• Change Detection
  • Improved reliability of alerts triggered by a change detection.
• Cisco ASA
  • The Cisco ASA inspector data print now includes a new "Hostname" key within the SystemInfo object, providing better identification and organization of system data
• ConnectWise
  • Integration: Fixed an issue where enabling the Environment Name Sync would fail with the message "Failed - Failed to save your changes."
• Domotz
  • Fixed an issue causing the Domotz inspector to display device IDs instead of names in RTD (Real Time Delay) statistics.
• Duo
  • Duo inspector has been updated to prevent duplicate child inspector discoveries.
• EnGenius
  • The EnGenius Cloud inspector is now categorized as a Network inspector.
• HP ProCurve
  • The HP ProCurve inspector data print now includes a new "Hostname" key within the SystemInfo object, providing better identification and organization of system data.
  • Fixed an issue causing HP ProCurve inspections to fail while extracting interface data.
• Internet Domain/DNS
  • Updated the Internet Domain/DNS Inspector to handle wildcard subdomains by marking subdomainHasSSL as false when the top-level domain has a TLS/SSL certificate, thus avoiding unnecessary TLS/SSL discovery for these subdomains.
  • The Internet Domain/DNS inspector now includes enhanced logic to prevent false reports of missing SSL certificates.
• IT Glue
  • Fixed an issue with IT Glue Mappings not properly showing the IT Glue Organization name
• Kaseye BMS
  • The Kaseya BMS inspector now correctly lists Internet Domain/DNS in the "Discovers" column.
• Microsoft 365
  • The Microsoft 365 inspector has been improved to handle certain 400 and 500 errors effectively, resulting in a successful inspection.
• Palo Alto
  • Removed the "Beta" label from the Palo Alto inspector.
  • Enhanced the Palo Alto Inspector with IT Glue and ConnectWise mappings, enabling seamless data integration and management across these platforms for improved efficiency.
  • A new "Licensing" view has been added to the Palo Alto inspector System Details that surfaces licensed features, their expiration date, and those that have expired.
• Quick Views
  • Fixed an issue causing QuickViews to fail to load.
• SentinelOne
  • Fixed an issue where the SentinelOne inspector was failing with a 403 error when calling the sites endpoint.
• SonicWall
  • Sonicwall v6: Resolves a formatting issue wherein SonicWall device hostnames were being incorrectly parsed.
  • Resolved an issue where partners received an error while bulk updating SonicWall inspectors, as the system incorrectly marked the password field as empty, despite it being filled out.
• Synology NAS
  • The Synology NAS inspector now displays group membership details in the Users table within the system details view.
• WatchGuard
  • Fixed an issue preventing extraction of one-to-one NAT data containing IP ranges.
• Windows Workstation
  • Fixed JSON parsing issue in Windows Workstation inspector.
  • Fixed an issue with the "Windows Workstation: DNS Filters Installed" metric.
  • Added retry logic to the Windows Workstation inspector to reduce erroneous change detections.

Liongard Library

Have you checked out the Liongard Library yet? Share custom Metrics and learn best practices from other Partners to get the most out of the platform. Access it in the Support drop-down menu in your instance.

Visit the Liongard Library today!