What's New in Axonius 6.1.39

Release Date: November 3rd 2024

These Release Notes contain new features and enhancements added in version 6.1.39.

• Read What's New in Axonius 6.1 to see all Axonius 6.1 features.

• Axonius adds and updates adapters and enforcement actions all the time. Follow Ongoing updates to adapters and enforcement actions in Axonius 6.1.

Assets Pages

Devices Page New Features and Enhancements

The following new features and enhancements were added to the Devices page.

Support for Additional Operating Systems

It is now possible to query by the following additional Operating Systems on the Devices page:

• IBM AIX
• HP HP-UX
• Adva/Adtran
• Juniper

Administrator Settings New Features and Enhancements

The following updates were made to various Administrator settings:

Data Aggregation Settings

From the Convert preferred device manufacturer to option in Data Aggregation Settings (Settings> Data> Data Aggregation), it is now possible to convert the case of the preferred manufacturer to one of the following: lowercase, uppercase, title.

Enrichment Settings

It is now possible to enable the new Get location information only from the smallest subnet of each device option in Enrichment Settings (Settings> Enrichment) to determine the location information based only on the smallest subnet of each device.

Association Settings

Flexible Filtering of 'Last Used Users'

You can now use the 'Last Used Users' setting to filter the list of Last Used Users based on values that start with, end with, or contain the entered filter criteria.

Adapter and Enforcement Action Updates

New Adapters

The following new adapters were added:

• Black Kite V2
  • Black Kite is a risk management tool that provides cyber risk intelligence and third-party risk assessment solutions. (Devices)
• exacqVision
  • exacqVision is a video management system for surveillance, offering video recording, monitoring, and playback. (Devices)
• Forcepoint NGFW
  • Forcepoint NGFW is a next-generation firewall that provides advanced security features, including intrusion prevention, VPN, and centralized management to protect network environments. (Devices, Firewall Rules)
• Microsoft Endpoint Configuration Manager (MECM) for Data Warehouse
  • Microsoft Endpoint Configuration Manager (MECM) (formerly SCCM) is a comprehensive management solution for Microsoft Windows operating systems along with some capabilities for Linux, Mac OS, and mobile devices. (Devices)
• Morpheus
  • Morpheus is a unified cloud management platform that provides automation, self-service, and governance for hybrid cloud infrastructure. (Devices)
• Rockwell FactoryTalk AssetCentre
  • Rockwell FactoryTalk AssetCentre is a software solution that offers asset management, backup, and disaster recovery for automation environments. (Devices)
• VulnCheck
  • VulnCheck is a cybersecurity platform that identifies and assesses vulnerabilities within IT infrastructure for threat management.
• Yokogawa CIM
  • Yokogawa CIM (Consolidated Instrumentation Management) is an industrial automation tool that provides centralized monitoring, management, and optimization of instrumentation and control systems. (Devices)

Adapter Updates

The following adapters were enhanced:

• Absolute - This adapter now works with v3 of the adapter API.
• Aruba Central - Due to changes that were made to the vendor’s API, it’s paramount that you change the value in Advanced Settings → Adapter Configuration → 'Wait for a connection to the sources for up to X seconds' to 3000.
• Axonius Users - Added the option to get the user's query history actions for a configured time range.
• Censys - Added the option to enrich each device with its full details.
• Cisco Umbrella - Added support for API V2.
• IBM QRadar - Added the option to fetch all assets from the asset model as devices.
• ImmuniWeb - Tab Types field was added to connection parameters.
• Lansweeper Cloud - Added the option to control the limit in the vulnerability fetch request.
• Microsoft Azure - * Under Azure services to fetch as assets, the App Services option was changed to Function Apps.
• Microsoft Defender for Endpoint (Microsoft Defender ATP) - * Added the option to fetch only applicable and non-compliant recommendations.
• Microsoft Entra ID (Azure AD) and Microsoft Intune - Added capability to enrich users with the Mailbox Usage data
• Netskope - This adapter now supports fetching devices from API V2
• Netwrix Auditor - Added the option to configure the port to use.
• Snyk - Added the option to select whether to fetch projects with their vulnerabilities or not. If you selected group ID on the main configuration screen, it will fetch all devices from all organizations in the group.
• Symantec Endpoint Management Suite (Altiris) - added the option to fetch encryptions.
• Workday - Added the capability to add custom fields for users.

New Enforcement Actions

The following Enforcement Actions were added:

• Dynatrace - Add Custom Tag - adds custom tags to selected assets.
• Halo Create or Update Device - Creates or updates devices
• Halo Create or Update User - Create or updates users
• NinjaOne - Run Scripts on Device - Runs scripts on selected assets.
• ServiceNow - Manage Assets with Scripted REST API - Executes a custom REST API endpoint.
• VMware CB Cloud - Delete Assets - Deletes asset details from VMware CB Cloud.
• WMI - Enrich Devices with DNS Records - Enriches assets with DNS records from Windows Management Instrumentation.

Updated Enforcement Actions

The following Enforcement Actions were updated:

SharePoint - Send CSV - When running this action, if the file generated is greater than 240MB, the file will be split into multiple files (with suffix _1, _2, etc.) to not exceed Microsoft's limit of 250MB.