Vantage Ultimate Release Notes

Vantage Ultimate 3.0.0.58 (2021-01-25)

This public release rolls up all changes since the last public release (3.0.0.52 on 2020-05-20). The versions in between were released privately to some customers to address specific issues.

Changes since the last public release:

ADDED: Added support for Cisco Firepower Threat Defence log files. Merged the Cisco Firepower Threat Defence schema introduced in dev build 3.0.0.54 with the Cisco Firepower schema so that existing report templates for Cisco Firepower can be used with Cisco Firepower Threat Defence log files.
ADDED: Zscaler log support
ADDED: Added Default Templates for Barracuda NG Firewall and Sophos UTM (see updating templates below)

IMPROVED: Palo Alto log support
IMPROVED: Ubiquiti UniFi Security Gateway log support
IMPROVED: Cisco Umbrella log support
IMPROVED: Checkpoint ‘User’ summary (improved fallback if username is blank)

FIX: Storage inputs list being overwritten with previously selected storage inputs list. (Happens if a storage import completes and you have a different storage selected instead of the importing one) FIX: null object error when publishing a report to Web Module. (Happens when a null/empty analysis table occurs with a split option. ie template node has no data)
FIXED: Copying rows from the ‘Individual Hits’ view now correctly copies String arrays.

Updating Templates

Updating the software will not automatically load the new templates or aliases (to avoid overwriting your own customizations). To load the new Templates for Barracuda or Sophos:

Download and run the latest installer for WebSpy Vantage.
Open the newly updated WebSpy Vantage and go to Reports | Save Templates, to save your existing templates to a file for backup.
Click Open Templates and open the file at "C:\ProgramData\WebSpy\Vantage Ultimate 3.0\Defaults\Vantage Ultimate.Templates"
Select an appropriate merge option. For example, if you have not made any customizations to the default reports, you can choose “Replace existing template with new template” (this option does not affect ‘New’ templates you have created). If you have made customizations to the default reports, the safest option is “Keep existing template and add new template (Name of new template will be modified)”.

Your Templates will now be updated. If anything went wrong during this process, you can open the backup file(s) you saved in step 2 and 5, and Overwrite when prompted.

How to upgrade

Updating Vantage 3.0 to the latest version
If you are already running WebSpy Vantage 3.0, select Tools | Check for updates. To update the Vantage Web Module, right-click the WebSpy system tray icon and select Check for updates.

Note that this process will not update your Templates. See the ‘Updating Templates’ section above.

Upgrading Vantage 2.2 to 3.0
If you have version 2.2 of WebSpy Vantage and/or the Web Module installed, you need to download and run the latest installer. It is easy to migrate your settings to the new version 3.0 by following the steps on the Upgrading Existing Installations tab on our Getting Started Page.

Download Update

Vantage Ultimate 3.0.0.57 (2020-12-10)

IMPROVED: Ubiquiti Unifi Security Gateway log support

Vantage Ultimate 3.0.0.56 (2020-12-04)

IMPROVED: Cisco Firepower Threat Defence log support
IMPROVED: Cisco Umbrella log support
IMPROVED: Zscaler log support
IMPROVED: Checkpoint ‘User’ summary (improved fallback if username is blank)

FIXED: Copying rows from the ‘Individual Hits’ view now correctly copies String arrays.

Vantage Ultimate 3.0.0.55 (2020-10-08)

IMPROVED: Checkpoint log support

Vantage Ultimate 3.0.0.54 (2020-09-23)

ADDED: Zscaler log support
ADDED: Cisco Firepower Threat Defence log support
ADDED: Added Default Templates for Barracuda NG Firewall and Sophos UTM (see updating templates below)

IMPROVED: Cisco Umbrella log support
IMPROVED: Palo Alto log support
IMPROVED: Checkpoint log support

Updating Templates

Updating the software will not automatically load the new templates or aliases (to avoid overwriting your own customizations). To load the new Templates for Barracuda or Sophos:

Download and run the latest installer for WebSpy Vantage.
Open the newly updated WebSpy Vantage and go to Reports | Save Templates, to save your existing templates to a file for backup.
Click Open Templates and open the file at "C:\ProgramData\WebSpy\Vantage Ultimate 3.0\Defaults\Vantage Ultimate.Templates"
Select an appropriate merge option. For example, if you have not made any customizations to the default reports, you can choose “Replace existing template with new template” (this option does not affect ‘New’ templates you have created). If you have made customizations to the default reports, the safest option is “Keep existing template and add new template (Name of new template will be modified)”.

Your Templates will now be updated. If anything went wrong during this process, you can open the backup file(s) you saved in step 2 and 5, and Overwrite when prompted.

Vantage Ultimate 3.0.0.53 (2020-08-19)

FIX: Fixed an issue where the list of log file inputs in a Storage can be overwritten with another Storage’s inputs if an import completes and you have a different Storage selected instead of the importing one.
FIX: Fixed error that can occur when publishing a report to the Web Module if a template node has no data.

Vantage Ultimate 3.0.0.52 (2020-05-20)

This public release and automatic update rolls up all changes since the last public release (3.0.0.47 on 2019-09-23).

ADDED: Added VPN Report Templates for Citrix Netscaler and Pulse Secure.
ADDED: Gene6 FTP report Templates
ADDED: Checkpoint report Templates
IMPROVED: Updated the Productivity alias apply to the Application Category and Matched Category fields in the Checkpoint schema.
FIX: Fixed issue where a user’s activity may appear in a report if they are logged as the ‘destination user’.

Loaders:
ADDED: Pulse Secure log support
ADDED: Gene6ftp log support
IMPROVED: Checkpoint (Added support for Checkpoint Syslog format and improved VPN support)
IMPROVED: Cisco ASA with Firepower (Fixed datetime parsing issue preventing log import)
IMPROVED: Fortinet FortiGate (Added support for logs provided by AT&T’s hosted FortiGate solution)
IMPROVED: Citrix Netscaler (Improved VPN support)
IMPROVED: Palo Alto (Fixed URL parsing issues)
IMPROVED: SonicWall Source and Destination MAC fields are now available in a default ad-hoc analysis.

Existing customers:
Updating will not automatically load the new templates or aliases to avoid overwriting your own customizations. To load the new Templates and Productivity alias:

Download and run the latest installer for WebSpy Vantage.
Open the newly updated WebSpy Vantage and go to Reports | Save Templates, to save your existing templates to a file for backup.
Click Open Templates and open the file at "C:\ProgramData\WebSpy\Vantage Ultimate 3.0\Defaults\Vantage Ultimate.Templates"
Select an appropriate merge option. For example, if you have not made any customizations to the default reports, you can choose “Replace existing template with new template” (this option does not affect ‘New’ templates you have created). If you have made customizations to the default reports, the safest option is “Keep existing template and add new template (Name of new template will be modified)”.
Go to the Aliases | Save Aliases to save your existing aliases to a file for backup.
Delete the Productivity alias.
Click Open Aliases and open the file at "C:\ProgramData\WebSpy\Vantage Ultimate 3.0\Defaults\Vantage Ultimate.Aliases" and select Merge when prompted.

Your Templates and Aliases will now be updated. If anything went wrong during this process, you can open the backup file(s) you saved in step 2 and 5, and Overwrite when prompted.

Note that this process will not update your Templates and Aliases. See the ‘Existing Customers’ section above.

Vantage Ultimate 3.0.0.51 (2020-05-13)

Existing customers:
Updating will not automatically load the new templates or aliases to avoid overwriting your own customizations. To load the new Templates and Productivity alias:

Download and run the latest installer for WebSpy Vantage.
Open the newly updated WebSpy Vantage and go to Reports | Save Templates, to save your existing templates to a file for backup.
Click Open Templates and open the file at "C:\ProgramData\WebSpy\Vantage Ultimate 3.0\Defaults\Vantage Ultimate.Templates"
Select an appropriate merge option. For example, if you have not made any customizations to the default reports, you can choose “Replace existing template with new template” (this option does not affect ‘New’ templates you have created). If you have made customizations to the default reports, the safest option is “Keep existing template and add new template (Name of new template will be modified)”.
Go to the Aliases | Save Aliases to save your existing aliases to a file for backup.
Delete the Productivity alias.
Click Open Aliases and open the file at "C:\ProgramData\WebSpy\Vantage Ultimate 3.0\Defaults\Vantage Ultimate.Aliases" and select Merge when prompted.

Your Templates and Aliases will now be updated. If anything went wrong during this process, you can open the backup file(s) you saved in step 2 and 5, and Overwrite when prompted.

Note that this process will not update your Templates and Aliases. See the ‘Existing Customers’ section above.

Vantage Ultimate 3.0.0.50 (2020-01-06)

Vantage Application:

Updated: EULA and Copyright year.

Loaders:

IMPROVED: Cisco ASA with firepower log support

How to upgrade

Upgrading Vantage 2.2 to 3.0
If you have version 2.2 of WebSpy Vantage and/or the Web Module installed, you need to download and run the latest installer. It is easy to migrate your settings to the new version 3.0 by following the steps on the Upgrading Existing Installations tab on our Getting Started Page.

Updating Vantage 3.0 to the latest 3.0 build
If you are already running WebSpy Vantage 3.0, select Tools | Check for updates. To update the Vantage Web Module, right-click the WebSpy system tray icon and select Check for updates.

If you have any issues, you can download the latest Vantage 3.0 installer from the WebSpy Vantage download page, and simply run the new installers (for both Vantage and the Web Module) over the top of your existing installations. The installer will pick up your existing settings, so just click next throughout the wizard without making any changes.

Vantage Ultimate 3.0.0.49 (2019-10-23)

Vantage Application:

FIX: Report publishing 'split by' feature may have a problem if the schema uses the UserInfo attribute that contains two or more values. This attribute has now been set to only one value.

Loaders:

FIX: Palo Alto extraction on broken up url field data.

How to upgrade

Upgrading Vantage 2.2 to 3.0
If you have version 2.2 of WebSpy Vantage and/or the Web Module installed, you need to download and run the latest installer. It is easy to migrate your settings to the new version 3.0 by following the steps on the Upgrading Existing Installations tab on our Getting Started Page.