Table of contents

• 1. Presentation of GCenter version 2.5.3.103 HF2
• 2. New features and enhancements
  • 2.1. Detection engines and features
  • 2.2. Analysts: WebUI and features
  • 2.3. Administration: Web UI and features
  • 2.4. WebUI – Kibana Dashboards
  • 2.5. System
  • 2.6. Other enhancements
  • 2.7. Other changes
• 3. Patches
• 4. Known problems and limitations
  • 4.1. Active-CTI / RetroHunt - Post Update problem
  • 4.2. GCenter Backup/Restore - Error management
  • 4.3. GCenter Backup/Restore - Pairing the GCap
  • 4.4. Incorrect GCap status after updating the GCenter
  • 4.5. Sigflow Manager - Transform Category
  • 4.6. Sigflow Manager - Error 500 when adding a rule in a custom source
  • 4.7. Sigflow Manager - Inconsistency in displaying the number of categories and rules in a category
  • 4.8. Sigflow Configuration - Custom source name cannot contain space
  • 4.9. GCenter Backup/Restore - Error in FQDN
  • 4.10. Kibana - Error 500 due to changing storage media for ES data
  • 4.11. Migration - Problem with online update configuration
  • 4.12. Migration - Problem with the detected user base of NDR interface
  • 4.13. Migration - Problem with the application of Sigflow rulesets
  • 4.14. Network - Problem with interface MTU configuration
  • 4.15. Network - VPN connectivity issue between GCap and GCenter
  • 4.16. GUM - Problem with the configuration of the address of a local repository
  • 4.17. Backup/Restore - Wrong format of the logs of the export in Syslog
  • 4.18. Migration - Improper configuration of scheduled backups
  • 4.19. ECS - Missing http_refer field
  • 4.20. CTI - Active-CTI Alerts Missing in the NDR Interface
  • 4.21. CTI - Change of the SID of the Active-CTI rules with each update of Sigflow
  • 4.22. Sigflow - Error while updating engine
  • 4.23. NDR interface - Loss of filter on IP address in Asset and User views.
  • 4.24. XDP Filter - Configuration synchronization
  • 4.25. WebUI - Access Issue
  • 4.26. Malcore - File storage space saturation
  • 4.27. Retention - Saturation of the storage space in Elasticsearch
  • 4.28. NDR Interface - Problem with muting alerts
  • 4.29. Kibana - Beacon Detect dashboard
  • 4.30. Update - Issue with UEFI version
  • 4.31. NDR - User detection
  • 4.32. NDR Interface - Alert Filtering
  • 4.33. NDR interface - Solution health
  • 4.34. Help - Embedded documentation
  • 4.35. NDR Interface - Home Page links
  • 4.36. DGA - Addition of a comment
• 5. Software compatibility
  • 5.1. Compatibility with the GCap
• 6. Hardware compatibility
• 7. Hotfix
  • 7.1. Package 1
  • 7.2. Package 2
  • 7.3. Package 3
• 8. Procedure for upgrading from V102 to V103
  • 8.1. Prerequisites
  • 8.2. Retained data
  • 8.3. Procedure to install

PDF documentation