Reporter for Sophos Web Appliance Release Notes

Reporter for Sophos Web Appliance 1.0.1.28 (2016-11-01)

All alerts within an alert group can now be dismissed easily.
LDAP import will no longer clear user aliases if no users were imported from any LDAP source.
Improved 'Generating Report' progress indicator.
Triggered alerts are now written to the verbose log.

Alert criteria matching is now case insensitive.
Removed Blank Origin domains that may display in 'Sites by size' sections of the Overview Reports
Origin Domain is now calculated for any record type where DestinationHost is not blank.
The Overview Dashboard | Productivity widgets now shows uncategorised traffic as 'Unassigned', fixing an issue where a blank report was produced when clicking the 'Uncategorized' pie slice.
LDAP import no longer aborts entire import if unable to search any single node in the tree.
Unsearchable LDAP nodes are reported in the LDAP import synopsis in Settings | Directory / LDAP.
Fixed "System.String[]" appearing in the Category column for Alert CSV exports.
Updated Domain Substitutes and Junk URLs

Domains with trailing dots (for example apple.com.) are now extracted properly.
Corrected "That statistics below…" to "The statistics below…" on the Data Storage page.
Added more tracing (in Verbose diagnostic mode) for report generation data/proc threads to better identify the root cause of report performance issues.

When you click pie chart slices on the dashboard, Fastvue Reporter now runs an Overview Report filtered by that slice for the past 12 hours.
Fixed issues that may cause data import to stop.
Enhanced Import/Loader diagnostic messages (in Verbose diagnostic mode)
Fixed issues where Source Host resolution affected log import.
Source Host resolution now only resolves for RFC/IETF/IANA defined internal IP ranges (10./8, 172.16./12, 192.168./16, 169.254./16, fe80::/16, fc00::/7).
Source Host resolution is now background threaded on cache miss or expiration.

Fixed issues causing reports to fail due to unescaped URLs
When running Activity Reports filtered by Search Terms, the Origin Domain field is now added as a column to the report instead of the Site Domain.
Adjusted column widths in Activity Reports to provide more space to 'key' columns when there are under 9 total columns in the report.
New factory domain substitutes including *.nflxvideo.net (netflix.com).
Report filters now included in diagnostic log (in Verbose diagnostic mode)

Added the ability to duplicate alerts in Settings | Alerts. Makes creating the same alert for different departments much easier for example.
Added the ability to duplicate Scheduled Reports in Settings | Reports. Makes creating the same report for different departments much easier for example.
Newly created alerts now get added to the bottom of the Alerts list and the UI scrolls to the new alert (consistent with Settings | Reports | Scheduled Reports)

Added support for Alert criteria operators "Does not start with", "Does not end with", and "Does not contain".

Fixed errors that may occur when encountering URLs with blank resource strings in the logs.

Fixed issue where users could not be selected from a pick list in the Filters interface.
Fixed issue where duplicate categories may appear in the 'Unknown' productivity list in Settings | Productivity
Improvements to data record sanity checks making automatic data storage repairs more effective.

Resolving Source IPs is now only performed on records younger than 12 hours (limit is customised via the ResolveSourceHostsAgeLimit property in Settings.xml. Stop the service Fastvue Reporter service to make manual changes to this file).