Cisco Cloudlock Release Notes: 1.11.17

CloudLock Security Fabric Release Notes

1/11/17

Summary

Areas affected in this release include:

● AFW ● DLP ● UEBA

Details

Apps Policies Hierarchy

Category : Apps Firewall
Feature : Apps Policies Operate in Hierarchical Order
Details: The hierarchical order in which policies are applied to evaluate apps has been optimized for better security and performance. The new order in which policies are applied to apps is:

1. Risky Access Scopes

2. Trusted Apps by Name

3. Trusted Access Scopes

4. New Unclassified Apps

Cyberlab threats

Category : UEBA
Feature : Cyberlab-originated threats added to Threats view
Details: In addition to the threats displayed in Threats view that are generated by machine learning, Cyberlab-generated threats are now also included to provide a more complete picture of the threats customers may be facing.

AWS ACL in Incident Details

Category : DLP
Feature : The ACL of the relevant S3 bucket is now linked on the Incident Details page. Details: In order to provide CloudLock administrators with better and more complete information about incidents, a link to the Access Control List (ACL) for the relevant AWS

S3 bucket is now included in the Details page of the generated incident.

Incident Bulk Selection Workflow

Category : DLP
Feature : Workflow improvements for incident bulk selections.
Details: Working with bulk selections of incidents has been updated for consistency with the rest of the Security Fabric UI. Several updates are included as detailed in images below.

Number of incidents selected indicated above list.

Selection total indicated in dropdown menu.

Incident update options now available in a modal dialog.

Fixes

• ●  Platform configuration messages are now correct in all authorization and deauthorization cases

• ●  Policy Summary exposure settings display improved

• ●  Activities list layout now correct when IPv6 Addresses included

• ●  Fixed a case in which events might not be pushed to S3 and ES

• ●  Activities list now correctly links to all locations a user has logged in from

• ●  Corrected a situation where an error could be generated on the Settings page due to an

  undefined role

• ●  Fixed the capitalization of "OAuth"

• ●  Updated the App risk summary bar layout

• ●  Updated the dashboard summary row layout

• ●  Corrected refresh intervals for Incidents pagination controls

• ●  Bulk selection of incidents workflow has been improved

• ●  Failures and timeouts in search requests now generate alerts correctly