Version 8.0

Version 8.00.05

• Fixed missing description of the SMTPANOMALY method in syslog messages.

Version 8.00.04

• Fixed scheduled PDF report sending.
• Fixed and improved proxy correlation with new warnings about bad configuration.

Version 8.00.03

• Improved HTML events report by using hostnames instead of IP addresses in links to event details.
• Fixed overwriting of the DetectOnlyKnown configuration option for the SCANS method during upgrades.

Version 8.00.02

• Fixed missing translations by refreshing the cache after upgrades.
• Fixed ADS database startup in the background to prevent blocking system startup.

Version 8.00.01

• Fixed displaying profiles and channels in the ADS source editing form.

Version 8.00.00

• Added relational filters to define complex filters using relations.
• Improved IP address display on the false positive list page.
• Added a new "Events by type" chapter to PDF reports (shows the top 10 events by type).
• Revised PDF report permissions with a new ability to set the owner.
• Added the IgnoreInternal parameter to the ANOMALY method to ignore communication within local segments.
• Added the ability for the BLACKLIST method to detect blacklisted domains in DNS traffic (requires Flowmon DNS fields).
• Added the ability for the DOS method to detect SYN flood and FIN2-WAIT attacks.
• Added the ability for the MULTICAST method to detect high traffic (based on data volume or high packets per second rate).
• Added the ability for the REFLECTDOS method to detect attacks through the portmap service.
• Added the ability for the SCANS method to detect ARP scans.
• Added the ability for the SCANS method to specify port ranges in the DetectThesePorts parameter.
• Renamed the OUTSPAM method to SMTPANOMALY.
• Changed the meaning of the BITTORRENT MinSeeds parameter (all events now respect it).
• Removed the "export filters to CSV" function (deprecated and replaced by FCC configuration import/export).
• Removed the free space alert (deprecated; data storage now respects the defined module quota).

Changes in syslog messages

• Added the long name of the method after the short method code.
• Renamed the INVEA-TECH string to Flowmon.
• Updated event details for some methods (for example, MULTICAST).

---

Contact information

If you encounter any issues or have questions, contact us at support@flowmon.com.