Product Update 4.11.2.0 - August 17, 2023

If you're on a Mandiant Security Validation (MSV) release prior to 4.12.1.0, you may notice that a license expired watermark appears on the Network Map page on your Director.

Network Map Page with License Expired Watermark on an MSV Director

This watermark is related to the software that renders the Network Map and does not affect functionality of the product.

Use one of the following options to fix the watermark issue permanently:

  • Update to the latest release (4.12.1.0 or later) or migrate to Mandiant Advantage Security Validation (MA-SV).
  • As an additional option, you can upgrade to release 4.12.0.1, which provides a fix for this issue and if you need more time to complete the update to 4.12.1.0 or later.

The Mandiant Security Validation (MSV) team is pleased to announce version 4.11.2.0 of the MSV platform.

General Enhancements

  • Added additional event filtering capability, allowing users to configure specific filters for Integration and Host Events as another Match type
  • Added a new setting in Advanced Settings where additional sleep time can be configured if needed to properly run some Actions

Bug Fixes

  • Fixed an issue that prevented adding the Juniper JSA integration
  • Fixed an issue with Windows OS systems configured for Spanish language where incorrect "Blocks" could occur on Actions run
  • Improved ability to render large Jobs in the user interface
  • Fixed an issue that would render some Actors unreachable after upgrade
  • Fixed an issue preventing use of an external database for Director
  • Fixed an issue causing errors with the Splunk remote integration test query
  • Fixed an issue that was causing errors with the MA-SV Migration Tool

Known Issues

  • The Multisite Reporting feature and Preview Integrations service are not working properly with new RHEL8 Directors. We are working to resolve this issue as soon as possible.
  • Local Event Filtering works as expected but is limited to Match Action, Match Integration, and Match Events (when the latter involve Raw Events). If a rule has a Match Event condition for any field other than Raw Event, the rule does not apply to Local Events. It only applies to events from standard local integrations in MSV.

Appliance OS Security Update

The latest platform security update can always be found on the Validation Section of the Docs Portal. This security update applies to all versions of the product and is cumulative.

Important Installation Notes

Minimum Director version 4.9.0.0 or higher is required to upgrade to version 4.11.2.0.

  • August 17, 2023
  • November 2, 2023
In This Article