Sophos Reporter Release Notes
Sophos Reporter 2.0.1.7 (2015-09-25)
  • Corrected nullref error on newly added Sophos UTM sources.
  • Fixed "Bandwidth Over Time" chart labels in User Overview Reports for date ranges greater than 1 day. They were formatted as HH:mm which always resulted in labels of 00:00 (midnight) for reports longer than 1 day.

Sophos Reporter 2.0.1.6 (2015-08-13)
  • Added support for importing from multiple LDAP sources.
  • Added new mappings to Domain Substitutes factory data.
  • Top User widget in Overview Reports is now determined using the Total Bytes aggregate, rather than Received Bytes to be consistent with the Top Users By Size table.
  • Dashboard charts no longer show yAxis labels (often truncated and confused the display). Values still available on hover.
  • Fixed tooltip display issues on some charts.
  • Fixed chart alignment issues.

Sophos Reporter 2.0.1.5 (2015-06-02)
  • JSON parser now handles strings terminated with an escaped backslash when within an array

Sophos Reporter 2.0.1.4 (2015-05-30)
  • Added URI enconding when launching reports from the Dashboard. Fixes issue preventing reports being run on usernames and other values containing characters such as '&'.

Sophos Reporter 2.0.1.3 Full GA Release (2015-04-28)

Alert emails now include the first Alert key in the subject line of the email.


Sophos Reporter 2.0.1.2 RC (2015-04-13)
  • Removed Filename column from Activity Report details when filtering on Mime Type as filenames can be highly unique and cause excessive memory usage.
  • Improved Site Clean Algorithm

Sophos Reporter 2.0.1.1 RC (2015-04-13)

No change other than a release version increment. Simply bring the release candidate onto the full release versioning scheme.


Sophos Reporter 2.0.0.13 RC (2015-03-30)

Fixes issues with insane memory ramping when running an Activity Report where one of the keys is set to Category or other 'arrayed' fields.


Sophos Reporter 2.0.0.12 RC (2015-03-24)
  • Sophos sources can now import manually downloaded archived web filtering log files in their original .zip format without first requiring extraction. Caveat: The dates of the log files inside the zip must fall before the first record received in a Sophos source to be imported. Zip files can therefore not be used for syslog gap-filling, but extracted zips (text logs) work fine for syslog gap filling.
  • Fixed issue where clicking on the 'Share via email' input launches email settings dialog, even if email settings are properly configured.
  • The share report non-private URL is now built using the site's public interface setting (specified in Settings | Site Settings) rather than the current URL (such as localhost).
  • Share via email now works when hitting the enter key after entering an email address.
  • Control characters (such as new line) and whitespace are now trimmed from incoming Syslog messages. This fixes an issue that prevented usernames from being aliased into AD usernames and departments due to the username field not being qualified with quotes (e.g. user=bob vs user="bob") in the log, and immediately followed by a new line character. This occurs in 'warned and proceeded' log events (the bug has been logged with Sophos).
  • The message displayed when accessing data for an invalid/dismissed alert is more useful.
  • The "Customize Productivity Settings" is now displayed on the Productivity Dashboard again (This regression was introduced in 2.0.0.8)

Sophos Reporter 2.0.0.11 RC (2015-03-21)
  • Edited the default 'User Warned And Proceeded' Alert. Note, installing the new build will not automatically overwrite your existing alerts configuration. To receive this updated alert, stop the Fastvue Sophos Reporter Service, delete the Alerts.xml files in the Sophos Reporter data location, and restart the service. 
  • Moved ajax.ashx underneath the _ directory. This means you do not have to provide access to the ajax.ashx file for private reports anymore. You can only need to provide access to the /p folder and the /_ folders.
  • Changed the URL endpoint for the API. The end point is now /_/api?f= instead of /ajax.ashx?f=. For example http://sophosreporter/_/api?f=Reports.GetReports
  • 'Greater than or equal to' operator now works for IP Addresses.