What's New in Axonius 6.1.43

Release Date: December 1st 2024

These Release Notes contain new features and enhancements added in version 6.1.43.

• Read What's New in Axonius 6.1 to see all Axonius 6.1 features.

Reports New Features and Enhancements

The following enhancements were added to reports.

System Queries Included in Reports

Added the ability to add Asset Investigation, Activity Logs, Findings, and Adapter Fetch History system queries to Reports.

Assets Pages

New Device Field: Associated Azure Configuration

The new 'Associated Azure Configuration' complex field displays configuration information in Azure devices and contains the following fields:

• Policy Name
• Compliance State (for compliant devices)
• Non Compliance State (for non-compliant devices)
• Account Name

Adapter Pages and Adapter Interface New Features and Enhancements

The following updates were made to the common functionality across all adapters:

Adapter Interface

'Tiles' was changed to 'Cards' on the Adapters page.

Administrator Settings New Features and Enhancements

The following updates were made to various Administrator settings:
Data Aggregation

• Added a setting to remove loopback IP addresses from Preferred IPs.
• Added a setting to remove link-local IP addresses from Preferred IPs.

Adapter and Enforcement Action Updates

New Adapters

The following new adapters were added:

• Palo Alto Networks Cortex XSOAR
  • Cortex XSOAR is a security orchestration, automation, and response platform that integrates and automates threat detection and incident response. (Fetches: Alerts/Incidents)

Adapter Updates

The following adapters were enhanced:

• AWS - The Entry Role and Entry Role External ID are now part of the adapter connection configuration and can be used by Axonius-hosted customers.
• CSCDomainManager - This adapter now fetches domains and URLs.
• CSV Applications - Added the option to ignore new applications that are not in the SaaS Applications Repository.
• Delinea Secret Server (Thycotic)
  • This adapter now fetches roles, groups, and application resources.
  • Added the option to fetch the users roles and permissions the user has.
  • Added the option to fetch groups.
  • Added required role permissions information.
• Google Workspace - You can now use Axonius's new built-in authenticator to set up Multi-Factor Authenticator when creating a connection to the Google Workspace Adapter.
• Guardicore - Added the option to create devices on agents.
• FleetDM - Added the option to enable Legacy Mode for Akamai.
• Have I Been Pwned - Added the option to fetch users in an asynchronous way.
• Jira Service Management - This adapter now fetches certificates.
• Landscape - Added the option to fetch the software deny list.
• Microsoft Entra ID - Added the option to select the Fetch Mailbox Delegation Info option in the 'Fetch mailbox settings for users' advanced configuration, for accounts that have SaaS Management capabilities.
• Qualys Cloud Platform - Added the option to fetch certificates as assets.
• Randori - Added support for new API Access Token authentication.
• Trend Micro Vision One - Added the option to fetch extended endpoint details (including MAC addresses).
• UpGuard CyberRisk - This adapter now fetches domains and URLs.
• VMware ESXi and vSphere - Added the option to force parsing the serial number from the 'SerialNumberTag' field.

New Enforcement Actions

The following Enforcement Actions were added:

• Microsoft Teams - Send Direct Message to a User - Sends a direct message to Teams users.
• Microsoft Teams - Send Direct Message to a Channel - Sends a direct message to Teams channels.
• Palo Alto Cortex XSOAR Create Incident - Creates incident for assets.
• Okta - Reset User Factors - Resets all authentication factors of Okta users.

Updated Enforcement Actions

The following Enforcement Actions were updated:

• CSV - Send to Share - Added the capability to export CSV files as Excel Worksheets.
• Qualys - Add IP Addresses to Asset Group - Added the new 'Fail when no IP is added' field to this Enforcement Action to enable the action to present a failure status when it doesn't find an IP address to add.
• Trace3 Lamp - Update Device - The ability to select Trace3 fields from the list in the Field Mapping was added.