Sophos Reporter Release Notes
Subscribe
Sophos Reporter 2.0.1.53 (2018-06-11)
  • The time that Scheduled Reports start each day can now be customised using a direct API URL (there is no UI for this yet). The URL is:

    http://fastvuereportersite/_/api?f=Settings.Reports.SetScheduledReportsStartAtTime&minutes=60 

    Replace fastvuereportersite with your actual Fastvue Reporter URL and replace 60 with the number of minutes after midnight that you would like the scheduled reports to start. Note, this is a global setting for all Scheduled Reports. It cannot be set for individual Scheduled Reports.
     

  • The first day of the week used in 'Weekly' scheduled reports can now be customised using a direct API URL (there is no UI for this yet). The URL is:

    http://fastvuereportersite/_/api?f= Settings.Reports.SetScheduledReportsFirstDayOfWeek&day=Sunday 

    Replace fastvuereportersite with your actual Fastvue Reporter URL and replace Sunday with either Monday, Tuesday, Wednesday, Thursday, Friday, Saturday or Sunday. Weekly reports will then contain data from that day and the following 6 days. Note, this is a global setting for all weekly Scheduled Reports. It cannot be set for individual Scheduled Reports.
     

  • The Scheduled Reports Start Time can be retrieved using this direct API URL:
    http://fastvuereportersite/_/api?f=Settings.Reports.GetScheduledReportsStartAtTime
     
  • The First Day Of Week can be retrieved using this direct API URL:
    http://fastvuereportersite/_/api?f=Settings.Reports.GetScheduledReportsFirstDayOfWeek
Sophos Reporter 2.0.1.52 (2018-06-08)
  • Emailed report notifications now indicate if the report is blank rather than provide a button/link to view the report.
  • Fixed LDAP import to correctly merge Security Groups from multiple domains.
  • Sharing non-private reports from the Reports tab now uses the correct URL.
  • Report emails now use a query parameter (?reportID=abc), rather than a # (#reportID=abc) to identify the reportID in the report's URL. This is because some email clients strip out everything after # when clicking links in emails.
  • Accessing Reports.aspx with a report GUID that doesn't exist now displays a "Report does not exist" message.
  • Date pickers on the Reports tab no longer display a drop-down showing most recently selected dates.
  • Internal 'Filesystem' source type now supports compressed files (zip, gz, tgz/tar.gz, tar).
Sophos Reporter 2.0.1.51 (2018-03-19)
  • Fixed "Error in Report Processor Process Thread: Invalid Unicode code point found at index 1. Parameter name: unicode" that may occur when running reports.
  • Sources page no longer displays 9999/1969 when no data has been received and instead shows "Waiting for data" for 20 seconds after adding a source. After 20 seconds, a message and link to the troubleshooting KB article is displayed.
  • Adjusted the data storage auto-recovery logic to avoid issues when threads are aborted.
  • Updated all UI error handlers to display the error message given by the backend API.
  • Double-quotes in error messages no longer cause Javascript errors.
  • The number of detected syslog gaps in each source is now limited to 1,440 entries or an age of 7 days (whichever comes first) to avoid performance issues during service start. Both values are customisable with the hidden settings`HistoricalGapsCutoffDays` and `HistoricalGapsMaxCount`. These settings can be changed in the Settings.xml file (in Fastvue Reporter's data location) while the service is not running.
Sophos Reporter 2.0.1.50 (2018-02-07)
  • Now supports new log fields introduced in SFOS v17 including referer, status code, user agent, reason, and content type. This greatly improves the effectiveness of the Fastvue Site Clean algorithm on Sophos XG data.
  • Settings | Licensing | User Statistics no longer double-counts users with when they're logged as both 'username' and 'domainusername'.
  • Updated Self Harm Searches Alert keywords (fresh installs only).
  • Improved Fastvue Reporter's DNS resolution for when a Username or Source Host is not logged.
  • LDAP import now imports a user's First/Last Name if their Display Name attribute in Active Directory is blank.
  • Added more diagnostic logging to LDAP security group import to help troubleshoot errors.
Sophos Reporter 2.0.1.35 (2017-12-20)
  • Diagnostic logging now has only three modes. Normal, Verbose and Full (Full logs all syslog messages received by the server).
  • Reworked Settings | Diagnostic UI with descriptions.
  • CSV export now uses UTF-8 encoding, allowing usage of unicode characters in report exports.
  • Security Group lookup now correctly handles nested groups (requires re-import of directory in Settings | Directory / LDAP).
Sophos Reporter 2.0.1.49 (2017-11-03)
  • Fixed issue where clicking the navigation menu in Overview Reports doesn't scroll to report section in Chrome.
  • Search term alerts no longer trigger on search terms containing "tbn:" (Google thumbnail IDs). Unfortunately, this change will not affect existing installs. Existing users will need to go to Settings | Alerts, and add a 'tbn:' to the Search Terms 'Does not contain' filter in the Search Term alerts.
  • Updated Site Clean Settings (Snapchat CDNs and adnxs junk URLs).
Sophos Reporter 2.0.1.48 (2017-10-03)
  • Reports now remove browser polls to the facebook chat service that occur when the browser is minimised.
  • Sophos XG's "None" category now defaults to the "Unassigned" productivity rating.
  • Domain extraction from URLs now uses the public suffix list from https://publicsuffix.org to resolve issues extracting domains for some ngTLDs, SLDs under ccTLDs, and reversed ccTLDs. 
  • The default placeholder filter is now removed when using the 'Load Filter' option. 
  • Duplicate import sources can no longer be added.
  • The Start/Welcome page now redirects to the Dashboard page if at least one source has been added.
  • Fixed "AJAX error 0" issue that may display occasionally on certain pages of the application 
  • A modal dialog is now shown in the UI if the backend service is not responding, telling the user to try refreshing or ensure the Fastvue Reporter service is running.
  • Updated default Junk URLs and Domain Substitutes. 
  • Fixed error when attempting to remove license keys in Settings | Licensing.
Sophos Reporter 2.0.1.47 (2017-08-04)
  • Fixed issue that may cause the import engine to lock up and stop importing data.
  • Updated default keywords for Extremist Searches alert
  • Updated Site Clean Settings
  • Any errors when saving alerts and productivity settings are now displayed correctly.
Sophos Reporter 2.0.1.46 (2017-07-21)
  • Added new default alerts for Extremist Searches, Extremist Websites, Self Harm Searches, and Adult and Profanity Searches.
  • The Search Terms field now includes LinkedIn searches and any other site that uses the 'keywords' query parameter in the URL.
  • Data import now continues when your installed license key(s) have expired (reports and alerts will no longer function).
  • Fixed timestamp formatting in the Search Terms section of User Overview Reports.
  • Fixed issue where the Web UI may not display when accessed by a machine with unknown or invalid regional settings. 
  • Device Count in Settings | Licensing | User Statistics only counts source IP addresses that are considered internal or link-local by IANA (RFC 1918, 3927, 4193, 4291, 6890).
  • Fixed licensing / registration issues.
  • Data produced when running in demo mode now illustrates the site clean feature.
  • Dashboard buttons now highlight when going directly to a dashboard page via a # link (e.g. /dashboard.aspx#productivity)
Sophos Reporter 2.0.1.45 (2017-06-13)
  • Added 'User Login Name' field to show the raw username (without Active Directory display name) so that you can add this as a column to your alert evidence table.
  • Added more diagnostic tracing to the import process when in Verbose logging mode.