Sophos Reporter Release Notes
Subscribe
Sophos Reporter 2.0.1.1 RC (2015-04-13)

No change other than a release version increment. Simply bring the release candidate onto the full release versioning scheme.

Sophos Reporter 2.0.1.2 RC (2015-04-13)
  • Removed Filename column from Activity Report details when filtering on Mime Type as filenames can be highly unique and cause excessive memory usage.
  • Improved Site Clean Algorithm
Sophos Reporter 2.0.0.13 RC (2015-03-30)

Fixes issues with insane memory ramping when running an Activity Report where one of the keys is set to Category or other 'arrayed' fields.

Sophos Reporter 2.0.0.12 RC (2015-03-24)
  • Sophos sources can now import manually downloaded archived web filtering log files in their original .zip format without first requiring extraction. Caveat: The dates of the log files inside the zip must fall before the first record received in a Sophos source to be imported. Zip files can therefore not be used for syslog gap-filling, but extracted zips (text logs) work fine for syslog gap filling.
  • Fixed issue where clicking on the 'Share via email' input launches email settings dialog, even if email settings are properly configured.
  • The share report non-private URL is now built using the site's public interface setting (specified in Settings | Site Settings) rather than the current URL (such as localhost).
  • Share via email now works when hitting the enter key after entering an email address.
  • Control characters (such as new line) and whitespace are now trimmed from incoming Syslog messages. This fixes an issue that prevented usernames from being aliased into AD usernames and departments due to the username field not being qualified with quotes (e.g. user=bob vs user="bob") in the log, and immediately followed by a new line character. This occurs in 'warned and proceeded' log events (the bug has been logged with Sophos).
  • The message displayed when accessing data for an invalid/dismissed alert is more useful.
  • The "Customize Productivity Settings" is now displayed on the Productivity Dashboard again (This regression was introduced in 2.0.0.8)
Sophos Reporter 2.0.0.11 RC (2015-03-21)
  • Edited the default 'User Warned And Proceeded' Alert. Note, installing the new build will not automatically overwrite your existing alerts configuration. To receive this updated alert, stop the Fastvue Sophos Reporter Service, delete the Alerts.xml files in the Sophos Reporter data location, and restart the service. 
  • Moved ajax.ashx underneath the _ directory. This means you do not have to provide access to the ajax.ashx file for private reports anymore. You can only need to provide access to the /p folder and the /_ folders.
  • Changed the URL endpoint for the API. The end point is now /_/api?f= instead of /ajax.ashx?f=. For example http://sophosreporter/_/api?f=Reports.GetReports
  • 'Greater than or equal to' operator now works for IP Addresses.
Sophos Reporter 2.0.0.10 RC (2015-03-19)
  • Performance optimizations around the Site Clean calculations
  • Added 'Warn' to the auto complete values for 'Action'.
  • Added auto complete values for the new 'Warn rules'.
  • Added fake sample data for Referrer fields, UTM Name and UTM IP (used in Alert evidence configuration)
  • Fixed issue that preventing an open report from being scheduled.
  • Fixed ajax error that presents when configuring email settings from the Dashboard or Reports tab.
  • You can now enter more than one email address to send an 'in progress' report to. The option to enter another address reappears after 4 seconds.
  • Beautified the report and alert notification emails. Mobile friendly too!
Sophos Reporter 2.0.0.9 RC (2015-03-13)
  • Installer file now installs _ and p directories to the website. Permissions can be set to these folders in addition to the ajax.ashx file to allow specific users to view private reports links.
  • Fixed issue where the UI did not show the configured email address when editing Scheduled Reports using Internet Explorer.
Sophos Reporter 2.0.0.8 RC (2015-03-10)

Sophos Reporter 2.0 Release Candidate (RC)

  • Fixed issue where removing filters from the report popover dialog sometimes didn't remove the filter from the new report.
  • Filters on size fields now correctly parse floating point values (e.g. 1.5MB -> 1572864), and handles commas for locales where comma is used as the decimal mark.
  • Dashboard now reloads the page after 6 hours of inactivity. Resolves browser memory issues when leaving the dashboard open for long periods of time (such as in large Ops Center monitors).
  • Dashboard page now includes #anchors in the URL that take you to the correct dashboard on page load (e.g. /dashboard.aspx#bandwidth).
  • Fixed issue that stopped an alert from working when its settings were modified in Settings | Alerts. This has the side effect of dismissing all existing alerts for a given alert when its settings are modified. Editing an existing alert now informs the you that changing an Alert's settings will dismiss any existing alerts that have already been triggered with the old settings, and asks if you would like to continue.
  • Lightened the colour of column headings in the dashboard and reports to better distinguish them from the content.
  • The currently active navigation tab (Dashboard/Reports/Alerts/Settings) now highlights again.
  • Fixes a issue with the 'test email' function reporting that the email was successful when a valid domain name is specified, but no mail server is running on that domain.
  • Prerequisite installation failure on Server 2012 now displays an appropriate error message and aborts installation.
  • Installer now looks at all website bindings to determine best possible default URL for start menu shortcut.
  • Installer now remembers last website selected.
  • Reporter now uses the URL generated by the installer for the start menu shortcut as the default public URL, substituting localhost for the local host name.
  • When IIS has no websites configured, installer now warns user that there are no websites in IIS rather than displaying a "List index out of bounds" error. 
Sophos Reporter 2.0.0.7 BETA (2015-03-03)
  • Fixed JSON parse error that may occur when running reports.
  • The currently generating report no longer hijacks the UI with the spinning Fastvue logo pre-loader when trying to opening an existing report, or trying to generate a new one.
  • Activity Reports show real user from Active Directory instead of logged authenticated username when available. Otherwise Source IP is displayed.
  • Improved Installer trace log error handling. 
  • Updated Factory Domain Substitutes and Junk URLs
  • Renamed "Firewall Server" to "UTM Name" and "Firewall Server IP" to "UTM IP".
  • FileNotFoundException import errors now only add one notification if a file goes missing, rather than spamming notifications.
  • Changed the second series on the Top Users bandwidth dashboard widget to Origin Domain (result of Fastvue Site Clean)
Sophos Reporter 2.0.0.6 BETA (2015-02-12)
  • New installs now include factory Site Clean settings by default, instead of downloading them from the Internet after install.
  • Fixed .NET dependency issue in the latest installer.