Security Server Multi-Platform
Version 6.2.14.11938
Release date:
Fast ring: 2023.03.08
Slow ring: 2023.03.09
Resolved issues
Product
Fixed an issue where the Security Server was not automatically updated when the root password expired.
Version 6.2.14.11914
Release date:
Fast ring: 2023.02.28
Slow ring: 2023.03.02
New features and improvements
Product
Added support for Open SSL version 1.1.1t.
Resolved issues
Product
Fixed an issue that caused the Internet Content Adaptation Protocol (ICAP) to disconnect due to the limited number of connections to the Security Server. The limit has been increased.
Improved resource usage on the Security Server when network connectivity problems occurred on Bitdefender Endpoint Security Tools while running Central Scan.
The JSON parsing issues during UTF-16 encodings have been fixed.
Version 6.2.13.11842
Release date:
Fast ring: 2022.12.07
Slow ring: 2022.12.12
New features and improvements
Product
The password security requirement has been increased. It must contain at least 8 characters, one digit, at least one upper case character, at least one lower case character, one special character and must be changed every 3 months.
The thick provisioning pre-allocation storage for Security Server Multi-Platform has been set to 40 GB.
You can now download the Microsoft Hyper-V Gen 2 Security Server image from GravityZone.
The number of concurrent connections per client IP has been limited to reduce denial-of-service and distributed denial-of-service attacks.
Resolved issues
Fixed an issue that prevented the OS Upgrade Task status from being updated in GravityZone.
Fixed an issue that caused floppy disk kernel errors to be displayed in System logs.
Version 6.2.12.11679
Release date:
Fast ring: 2022.09.20
Slow ring: 2022.09.22
Resolved issues
Product
Fixed a proxy configuration issue in the setup interface.
Version 6.2.12.11661
Release date:
Fast ring: 2022.09.19
Slow ring: -
Resolved issues
Product
Fixed an issue that prevented the Communication Server from being configured.
Fixed an issue that prevented the GravityZone loopback IP address from being displayed correctly for the Security Server role.
Version 6.2.11.11638
Release date:
Fast ring: 2022.08.29
Slow ring: 2022.08.31
Resolved issues
General
Security fixes.
Version 6.2.10.11582
Release date:
Fast ring: 2022.07.04
Slow ring: 2022.07.05
New features and improvements
General
Applied the changes to reflect the new Company hash label, formely known as Company ID. For more information, refer to Release notes for GravityZone Cloud version 6.26.2-2.
Note
GravityZone On-premises users are not affected by these changes.
Version 6.2.9.11558
Release date:
Fast ring: 2022.06.14
Slow ring: 2022.06.16
New features and improvements
Product
Added an additional local interface in the the Security Server console. You can use this interface to view more information about the Security Server, as well as configuring it without using the
sva-setup
command.
Resolved issues
General
Fixed an issue that prevented DNS entries from remaining saved after a reboot.
Version 6.2.8.11464
Release date: 2022.05.19
Resolved issues
General
Fixed an issue that prevented the applied HVI policy from being displayed.
Fixed an issue that caused the
ubuntu
user to be overwritten during a manual installation.Fixed an issue that caused DNS entries to change after a Security Server reboot.
Fixed an issue that prevented the Security Server role from being installed on GravityZone, when it was deployed on Amazon AWS or Azure.
New features and improvements
Product
The Communication Server configuration options have been renamed to better reflect the used Cloud instances, based on your browser's URL:
For
cloudgz.gravityzone.bitdefender.com
: GravityZone Cloud Instance 1For
cloud.gravityzone.bitdefender.com
: GravityZone Cloud Instance 2
Version 6.2.7.11403
Release date:
Fast ring: 2022.04.12
Slow ring: 2022.04.14
New features and improvements
Product
When you configure the Communication Server parameters on the Security Server for GravityZone Cloud, you can select your cloud region from a drop-down menu.
Known issues
Some Security Server have lost their static DNS configuration. If you have encountered this issue, use the
sva-setup
command to manually correct them.
Version 6.2.6.11319
Release date:
Fast ring: 2022.03.01
Slow ring: 2022.03.03
New features and improvements
Product
Security hardenings for Security Server have been implemented according to CIS Benchmarks and CIS-CAT scan, achieving a score of 85%.
Improved the proxy settings for the Support Tool.
Events are now sent hourly to the syslog server. In addition, the syslog file maximum size is now 2 GB.
Security Server now stores the command history in the
[bitdefender_directory]/var/log/history.log
file for previous Terminal sessions.
Version 6.2.5.11201
Release date:
Fast ring: 2021.12.16
Slow ring: 2021.12.20
Improvements
General
The Security Server now retries failed updates.
Implemented a cleanup mechanism to remove unnecessary files.
Version 6.2.4.11063
Release date: 2021.10.21
Improvements
General
All connections to Bitdefender servers are now performed via HTTPS.
Version 6.2.4.11021
Release date: 2021.09.30
Resolved issues
General
Security fixes.
The Security Server embedded into GravityZone virtual appliance is no longer incorrectly displaying the 127.0.0.1 IP address.
Version 6.2.3.10978
Release date:
Fast ring: 2021.09.02
Slow ring: 2021.09.02
Resolved issues
General
Security Server was seen as Relay after the update to version 6.2.3.10956.
Version 6.2.3.10956
Release date:
Fast ring: 2021.08.30
Slow ring: 2021.09.01
Improvements
General
Updated the library for the communication with GravityZone Control Center.
Versions 6.2.2.10607 and 6.2.2.10609
Release date:
Fast ring: 2021.04.16
Slow ring: 2021.04.19
Improvements
Product
Bitdefender upgrades the operating system of the Security Server to Ubuntu 20.04. You can perform the OS update through the Update Security Server task from Control Center. For detailed information, best practices and upgrade steps, refer to Update the operating system of the Security Server to Ubuntu 20.04 LTS.
Warning
Before proceeding with the update, we strongly advise you to take snapshots of the Security Server appliances.
Note
You may notice one of these Security Server versions in Control Center:
6.2.2.10607 - when updating from an older version based on Ubuntu 16.04
6.2.2.10609 - when deploying a new image
Final version that will appear in Control Center after the update is 6.2.2.10608.
Version 6.2.1.10665
Release date:
Fast ring: 2021.05.13
Slow ring: 2021.05.13
Resolved issues
Product
An incompatibility of the Citrix hypervisors prevented the Security Server OS upgrade to Ubuntu 20.04. Citrix has solved the issue and released the Citrix XS71ECU2060 hotfix for Citrix XenServer 7.1 LTSR.
LTSR and Citrix Hypervisor 8.2 LTSR. For detailed information, best practices and upgrade steps, refer to Update the operating system of the Security Server to Ubuntu 20.04 LTS.
Warning
Before proceeding with the update, we strongly advise you to take snapshots of the Security Server appliances.
Note
Final version that will appear in Control Center after the update is 6.2.2.10608.
Version 6.1.79.10425
Release date:
Fast ring: 2021.03.16
Slow ring: 2021.03.16
Resolved issues
Antimalware
Resolved an issue with scheduled security content updates.
Resolved an issue with security content update through proxy.
Version 6.1.79.10417
Release date:
Fast ring: 2021.03.15
Slow ring: 2021.03.15
Resolved issues
Product
Policy was pending after installing the Security Server from an OVA. The issue occurred when the Security Server was connected to a GravityZone cloud console.
Version 6.1.79.10397
Release date:
Fast ring: 2021.03.11
Slow ring: 2021.03.11
Important
This version includes all improvements and fixes delivered with version 6.1.79.10377, released only on fast ring.
Resolved issues
HVI
Resolved a critical issue that occurred after updating from the previous version.
Version 6.1.79.10377
Release date:
Fast ring: 2021.03.04
Slow ring: -
Improvements
Security for Storage
Improved the prefiltering technologies for automatic file submission to Sandbox Analyzer. As a result, file selection is more rigorous.
Added support for automatic malware submission to Sandbox Analyzer.
Note
Files detected as malware may be sent for a deeper analysis in Sandbox Analyzer after the GravityZone release scheduled in April.
HVI
Added support for the following operating systems:
Ubuntu 20.04
Oracle Linux 8 UEK
Oracle Linux 8.2
SUSE Linux Enterprise Server 15 SP2
Version 6.1.78.10210
Release date:
Fast ring: 2020.11.17
Slow ring: 2020.11.17
Improvements
General
Applied security patches to the underlying operating system of the Security Server.
HVI
Added support for Windows 10 20H2.
Resolved issues
HVI
Security fixes.
Version 6.1.78.10100
Release date:
Fast ring: 2020.08.24
Slow ring: 2020.08.24
Resolved issues
HVI
Minor bug fixes.
Version 6.1.78.10081
Release date:
Fast ring: 2020.07.30
Slow ring: 2020.07.30
Improvements
General
Updates from the Bitdefender fallback Update Servers are now performed only via HTTPS. Learn more.
HVI
Added support for Citrix Hypervisor 8.2.
Version 6.1.77.10028
Release date:
Fast ring: 2020.06.29
Slow ring: 2020.07.01
Important
This update requires Security Servers based on OS versions above Ubuntu 12.04. If you have Security Servers with this version of Ubuntu or a previous one, you are strongly advised to replace them. For more information, refer to End of support for Bitdefender Security Server based on Ubuntu 12.04.
Improvements
General
Added storage support for Remote Troubleshooting logs in Bitdefender Cloud (AWS S3).
Added support for user control over the data that Security Server sends to Bitdefender.
Note
On this occasion, we would like to reassure you that your data is safe with Bitdefender. We protect it according to the privacy policy and existing regulations.
Security Server now reports more details regarding its update status, such as timestamps for successful operations, and the source location of the update files.
You can view these details in the Control Center > Network page, by viewing the Information > Protection tab for the selected Security Server.
Antimalware
Several anti-exploit improvements.
HVI
Added support for the following operating systems:
Ubuntu 20.04 LTS
Red Hat Enterprise Linux 8.2
CentOS 8.2
Windows 10 20H1
Version 6.1.76.9814
Release date:
Fast ring: 2020.04.15
Slow ring: 2020.04.15
Improvements
Antimalware
Improved the performance of the scan load balancing mechanism running unequal distribution mode.
Resolved issues
Antimalware
Resolved an issue affecting load balancing equal distribution mode in scenarios where multiple On-Demand Scan tasks were requested.
Security for Storage
Resolved a cache invalidation issue affecting ICAP Server when connecting to Sandbox Analyzer for the first time.
HVI
Resolved minor service stability and performance issues.
Version 6.1.75.9595
Release date:
Fast ring: 2020.02.18
Slow ring: 2020.02.18
New features
General
Added support for upcoming GravityZone features.
Improvements
HVI
Added support for CentOS and Red Hat Enterprise Linux 6.8, 6.9 and 6.10.
Added support for scanning certain parts of an application's memory with the Antimalware engines.
Resolved issues
HVI
Fixed an issue that was preventing protection from starting properly on Debian 8.
Several minor bug fixes.
Removed features
HVI
Removed support for Citrix XenServer 7.5.
Disabled an optimization available for platforms with #VE support to avoid a security risk.
Known issues
HVI
HVI protection is unavailable for Linux guests on XenServer 7.0 until further notice.
Version 6.1.74.9485
Release date:
Fast ring: 2020.01.30
Slow ring: 2020.01.30
Resolved issues
General
Fixed several minor issues.
Version 6.1.74.9417
Release date:
Fast ring: 2019.12.18
Slow ring: 2019.11.19
Security
Applied the latest OS security patches on the Security Server.
Improvements
Antimalware
Improved the caching technology and Antimalware scanning performance.
Resolved issues
General
CPU usage was high during On-Demand Scan tasks covering multiple VMs.
Security for Storage
The service SSL certificates update was causing stability issues affecting the ICAP server.
HVI
In some corner cases, the introspection engine was generating false positive alerts.
Other minor service stability issues.
Version 6.1.73.9218
Release date:
Fast ring: 2019.11.05
Slow ring: 2019.11.06
Improvements
Security for Storage
Added support for content submission from Sandbox Analyzer On-premises ICAP clients to Sandbox Analyzer On-premises. For more information, read the GravityZone Release Notes.
HVI
Added support for CentOS 8 and Windows 10 19h2.
Version 6.1.72.8965
Release date: 2019.09.26
New features and improvements
HVI
Security Server is now able to scan command lines.
Resolved issues
General
Resolved some crashes of the Security Server services that caused malfunction of the equal distribution mode for load balancing.
Uninstalling via GravityZone task failed when multiple Security Servers were deployed on the same Citrix Xen host.
Fixed several issues that caused high memory consumption on machines having over 16 GB of RAM.
Known issues
HVI
Pausing and then resuming a VM running SUSE Linux Enterprise Server (SLES) 12 SP1 affects the ability of HVI to properly protect it.
General
In some corner case scenarios, Security Server may cause virtual machines to stop working.
Version 6.1.71.8593
Release date: 2019.07.04
New features and improvements
General
Added support for update rings. Security Server updates will be released on Fast and Slow rings.
Antimalware
Security Servers now support evenly distribution of assigned endpoints, through the new Load Balancing mechanism.
Version 6.1.70.8478
Release date: 2019.06.19
New features and improvements
General
Security Server can receive updates through a HTTPS secured channel. Make sure to open port 443 to allow communication with Bitdefender Update Servers. Learn more.
HVI
Added support for the following Windows operating systems:
Windows 10 version 1903 or 19H1, x32 and x64
Red Hat Enterprise Linux 8, x64
Performance improvements on the protected Linux VMs.
Overall performance improvements on hosts with Broadwell processors or newer.
HVI support for new versions of the operating systems is now performed on-the-fly, without the need of product update.
Antimalware
Improved the scanning caching mechanism.
Resolved issues
General
In all-in-one GravityZone deployments, regardless of the installation method – automatic or manual, Security Server was incorrectly reporting as outdated.
Antimalware
The encryption mechanism on the scanning channel between Bitdefender Endpoint Security Tools and Security Server was malfunctioning.
Bitdefender Endpoint Security Tools with Central Scan was generating a deadlock on Windows Server 2008 R2 systems due to an issue at Security Server.
Resolved several issues with a minor impact on product stability.
Version 6.1.69.8234
Release date: 2019.05.14
Resolved issues
Antimalware
Updated the sensitivity of the algorithm for computing the overload. Security Server will report a more accurate overload status in Control Center.
HVI
On specific builds of Windows 10 RedStone 4, the hooking of memory pages was malfunctioning. In such scenarios false positives were created.
Version 6.1.69.8084
Release date: 2019.04.18
New features and improvements
General
Applied the latest security patches to Security Server's operating system.
Antimalware
Security Server is reporting a more accurate load status in Control Center.
HVI
Added a new protection layer for Descriptor Table Register to ensure the integrity of the guest VM.
This layer is embedded in the Kernel space module and enabled via the IDT/GDT integrity policy option.
Implemented a Denial of Service mechanism to prevent flooding of the Control Center with events during continuous attacks.
Resolved issues
General
The memory dumps could fill all available disk space in case of consecutive crashes of the Security Server services.
Antimalware
The encryption mechanism on the scanning channel between Bitdefender Endpoint Security Tools and Security Servers was malfunctioning.
When using the HyperDetect technology, caching of clean command line instructions was not performed as intended.
When used in conjunction with the Storage Protection feature, some scanning options were not functioning properly.
HVI
In XenServer 7.6 environments, the policy was reset to Default when VMs migrated to other hosts.
Resolved some false positives caused by Java compatibility issues.
Security for Storage
When multiple Security Servers were configured in Nutanix AFS, they were not properly leveraging the caching mechanism of the NAS.
Note
This feature requires all Security Servers to have the date synchronized.
Version 6.1.68.7705
Release date: 2019.02.12
New features and improvements
General
Applied the latest security patches to Security Server's operating system.
Security Server has now SNMP packages installed by default. However, you need to add the
snmpd
daemon to startup in case SNMP queries are to be used.
HVI
Improved the product stability in HVI stress scenarios related to a high amount of changes at the policy settings.
Added support for SUSE Linux Enterprise Server 12 SP4, 64-bit
Added support for Windows 10 Redstone 5, 64-bit with KB4476976 applied
Security for Storage
Added an advanced caching mechanism to improve scanning speed for any supported storage device.
Other minor improvements
Limitations
To benefit of HVI protection, you have to deploy the Security Server remotely from the Network page of GravityZone Control Center. Do not install locally the Security Server package available in the Packages page.
HVI installs only on standalone Security Server deployments. If you deploy the Security Server as a role of a GravityZone appliance, HVI will not be available.
Machines protected by HVI become unresponsive for a couple of seconds if the Security Server is overloaded. To avoid such situations, Bitdefender recommends enabling the Overloaded Security Server notification and adding resources when the load is high.
When forced to shut down, the Security Server does not have the time to update the status of the protected virtual machines and they are still displayed as managed. This situation is resolved as soon as the Security Server is online again.
The Security Server cannot be uninstalled by a task from Control Center when powered-off.