Sophos Reporter Release Notes

Sophos Reporter 3.0.1.46 (2021-02-16)

Sophos UTM (SG) pppd-l2tp VPN connections are now shown in the VPN Dashboard and Reports.
Updated text in Settings | Licensing to remove the message about the number of license keys relating to licensed sources. A single key can now license multiple sources.
Updated default keywords relating to Adult and Profanity alerts and suspicious searches. Note: You will not see the changes to Alerts automatically. Please see our article on Updating Alerts to the latest version while keeping any custom alerts.

Sophos Reporter 3.0.1.45 (2020-11-17)

Improved licensing system. Each installation of Fastvue Reporter can now support a single key in Settings | Licensing that can be renewed rather than replaced at renewal time with a new key. Fastvue Reporter also no longer requires a separate key for each firewall that needs monitoring.
Added a Proxy Settings page to enter the details of your proxy server if one is required for Fastvue Reporter to connect to the internet. The Fastvue Reporter server needs to access licensing.fastvue.co and api.fastvue.co for license activation and Site Clean updates.

Sophos Reporter 3.0.1.44 (2020-10-26)

Fixed issue preventing the export of reports with long titles.
Reports are now automatically unloaded from memory after 15 minutes of inactivity.
Fixed issue preventing the import of Security Groups with more than 1500 members.
Improved search results extracted from Yahoo, Bing and YouTube.
Authenticated traffic is now correctly matched to an Active Directory user object when the firewall logs the UserPrincipalName as the user.
Fixed issue where filtering Activity Reports by Productivity groups provided unexpected results in some cases.

Sophos Reporter 3.0.1.43 (2020-09-22)

No change. Fixes for Fastvue Reporter for Palo Alto and Reporter for SonicWall caused a Fastvue Reporter platform version number increment.

Sophos Reporter 3.0.1.42 (2020-09-02)

Fixed excessive CPU usage issue introduced in 3.0.1.41 due to the extra size calculation in Sophos XG logs.
Fixed issue with excessive memory and CPU usage when an alert is configured using the ‘Greater than’, ‘Less than’, ‘Greater than or equal’, or Less than or equal’ operators on numeric fields that are not aggregates, such as Hours or Ports.

Sophos Reporter 3.0.1.41 (2020-08-07)

Fixed issue that bloats bandwidth figures when the same traffic is logged in both the Content Filtering and Firewall Rule log files.
Filtering reports by Filename Extension no longer requires the extension to be entered in UPPERCASE.
Fixed an issue where strange Search Terms such as “56,148,835,15” were being extracted from YouTube.
Fixed issue preventing picklists from being presented when filtering by certain fields such as Event/Message Types.

Sophos Reporter 3.0.1.40 (2020-06-25)

Added support for Sophos UTM (SG) VPN logs. The VPN Dashboard and the VPN Section of the IT Network and Security report will now be populated with SSL VPN traffic handled by your Sophos UTM (SG).
Reports can now be filtered by ‘Manager’. For example, select Manager ‘Equal to’ Bob to filter a report by all of Bob’s employees/subordinates as defined in Active Directory. You can of course schedule this report to send to Bob every day, week or month.
Fixed issue preventing YouTube searches from being extracted.

Sophos Reporter 3.0.1.39 (2020-06-10)

Changes to default Alerts:
- Added Drug Searches alert.
- Added Content Keyword Matches alert.
- Added Policy Overrides alert.
- Removed Site Resource criteria from existing Search Term alerts as this is now handled in the Search Term extraction.
- Changed Downloads > 100 MB to Downloads > 1 GB and decreased its priority to Medium.
- The Unproductive Browsing alert now triggers when over 1 hour of unproductive browsing occurs within four hours.
Note: If upgrading, you will not see the new Alerts automatically. Please see our article on Updating Alerts to the latest version while keeping any custom alerts.
When configuring an alert, the Alert Evidence table is now populated with fake/example data when you select the Content Match, Content Prefix, Content Suffix, Override Authorizer, Override Name and Override Token fields.

Sophos Reporter 3.0.1.38 (2020-05-12)

Fixed issue where the Schedule Report button would not work (issue was introduced in build (3.0.1.35)
Fixed issue where links to Private Reports would no longer work once the Fastvue Reporter service is restarted.
Fixed URL parsing issue where URLs shorter than 15 characters with no scheme (e.g. http or https) appeared as an invalid URL.
Viewers of Private Reports can now export the report to PDF or CSV.
Fixed issue where the Connected and Disconnected times in the VPN sessions widget were truncated when exported to PDF.
Added support for Sophos XG’s download_file_name and Upload_file_name fields. These are imported into the ‘Filename’ field.

Sophos Reporter 3.0.1.37 (2020-04-23)

Added a new VPN Dashboard, and a VPN section to the IT and Network Security Report.

You can now monitor the number of active VPN sessions throughout the day to help plan for extra capacity or use the reports to find who has not connected recently.

You can also easily see when most people connect and disconnect, and proactively respond to unexpected disconnections or excessive invalid login attempts.

For more information, see Introducing Sophos VPN Reports and VPN Dashboard

Fixed issue where launching reports from an existing report (via hover-over) includes an extra date in the date range, and shows an incorrect date range in the report title.