This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Announcing General Availability of Micro Focus ArcSight Logger 6.7, ArcMC 2.9 & Smart Connector 7.11

 

We are very excited to announce the general availability of Micro Focus ArcSight Logger 6.70, ArcMC 2.90 and Smart Connector 7.11.0


Here are the new features and improvements.

Arcsight Logger 6.70:
Global Event ID
Storage Volume Size increased in Software Loggers to 16TB
Archive Retention Policy
Custom Fields Enhanced to have CEF fields
Unified Query for Search Group Filters
Logger SMB v2 support with CIFS
CIFS mount from Logger to Windows 2008/2012 R2 server (hardened)
Reports:
  - Scheduled Reports Delivery thru secure FTP
  - Scheduler Job Dispatch Threads and Maximum Concurrent Reports options added to Report Configuration.
  - Job Execution Status and Recent Reports options available from the Home Page.
  - Legend position is configurable in Smart Reports.
Collection of deployment environment information
Various security fixes, feature updates and bug fixes

ArcSight Management Center 2.90:
Global Event ID
Generator ID Management
SecureData Client
Non-root user support for instant Connector deployment
Various security fixes, feature updates, and bug fixes

ArcSight SmartConnector Framework 7.11.0:
Global Event ID
New SmartConnectors support for
  - Microsoft DGA DNS Trace Log Multiple Server File
  - AWS CloudWatch VPC Flow Logs
New Device, Component, OS Version Support
  - Support TAP syslog for Proofpoint Enterprise Protection and Enterprise Security Syslog SmartConnector
  - Support Microsoft Windows Event Log Native SmartConnector to be installed on Microsoft 2012 R2 Datacenter Edition
  - Support Oracle Audit v12cR2 for Oracle Audit DB SmartConnector
Smart Connectors support and/or Improved parsing and mapping for
  - Microsoft Azure Event Hubs
  - Microsoft Office 365
  - Cisco ASA Syslog
  - Check Point Syslog
  - Cisco Syslog Connectors
  - NetApp Filer Syslog
  - Fortinet Fortigate
  - CheckPoint Syslog
  - Tenable Nessus File
  - Microsoft IIS Multiple Server
  - McAfee ePolicy Orchestrator
  - Microsoft SCCMDB
  - Linux Audit File
  - MS SharePoint Server DB
  - Cisco Wireless LAN Controller Syslog
  - Cisco ISE Syslog
  - Microsoft Office 365
  - IBM AIX Audit Syslog
  - IBM WebSphere File
  - IBM eServer iSeries Audit Journal File
  - McAfee Network Security Manager IDbased DB
  - McAfee Network Security Manager Timebased DB
  - Check Point Syslog
  - Fortinet Fortigate
  - Snort Syslog
  - Cisco IOS Syslog
  - Pulse Secure Connect Syslog
  - Juniper JUNOS Syslog
  - All Cisco Syslog Connectors
  - Cisco ASA Syslog
  - Symantec Endpoint
  - Oracle WebLogic Server File
  - Pulse Secure Connect Syslog
Various security fixes, feature updates, and bug fixes.

Please note that all Logger, ArcMC and Smart Connector customers with active support subscription can upgrade to Logger 6.70, ArcMC 2.90 and Smart Connector 7.11.0.If you own these components individually, then you can access the new software from the software entitlement portal.

ADP / Security Data Platform customers - Please contact technical support to obtain the software for Logger 6.70 and ArcMC 2.90. Smart Connectors 7.11.0 can be found on the software entitlement portal.


Documentation can be found as follows:

Logger 6.70, ArcMC 2.90 and Smart Connector 7.11.0 Support Matrix

Logger 6.70

Logger 6.70 Release Notes
Logger 6.70 Administrator’s Guide 
Logger 6.70 Installation Guide 
Logger 6.70 Web Services API Guide
Logger 6.70 Best Practices Guide 

ArcMC 2.90

ArcMC 2.90 Release Notes
ArcMC 2.90 Administrator's Guide

Smart Connector Framework 7.11.0

Smart Connector Framework 7.11.0 Release Notes
Smart Connector Framework 7.11.0 User Guide
Smart Connector Framework 7.11.0 Configuration Guides

 

If you have any questions, please contact Customer Support.

 

Thank you,

ArcSight Product Team

 

 

  • 0

    Now if it would only be available to download... ;)

  • 0

    We can not find the download files in the portal, can Microfocus tell us more about availability of the download files?

    Regards

  • 0 in reply to 

    Hi,

    if you are looking for binaryes then https://support.microfocus.com/downloads/swgrp.html is the link from where you can start looking. Also, as you know you need to have an account and SAID for the support since those are not free to be downloaded.

    if you are related to the documentation then nice start will be here https://community.softwaregrp.com/t5/ArcSight-Product-Documentation/ct-p/productdocs

    Best Regards,

    Daniel

  • 0 in reply to 

    Actually I have access to several customer order numbers / SAIDs and on none of them I can find Logger version 6.70. I contacted the support and they told me 6.70 is not available.

     

    I was able to get ArcMC 2.90 from one customer's account though... however that also needed the support's help since I couldn´t see the download option even though the customer should have access. Support fixed that somehow.

     

    Funny sidenote: You can download 2.90 and 6.70 from the eval portal as a partner, however only the software version is available... no appliance downloads. :(

  • 0   in reply to 

    Please note you are most likely using an ADP SAID that temporarily does not show latest ArcMC and Logger in the downloads. 

    ADP / Security Data Platform customers - Please contact technical support to obtain the software for Logger 6.70 and ArcMC 2.90. Smart Connectors 7.11.0 can be found on the software entitlement portal.

  • 0 in reply to   

    Support says 6.70 is not available...

  • 0   in reply to 

    I haven't tested it since I don't have a HW Logger in lab, anyhow I believe you are looking for logger-8242.enc that is available including OS updates RHEL 6/7.

    If there is still an issue you could ping your preferred local presales engineer or me on petr DOT hnevkovsky AT microfocus DOT com to provide it temporarily by other means before its published on the usual portal.

  • 0 in reply to 

    Yep is true.

    I was able to download only the software version.

    If i want to download the apliance version of Logger or ArcMC there is a red message " Entitlement to this version requires an active support subscription. Please contact your sales representative to have your support agreement validated ".

    Maybe something change in the way the the appliance model must be download .

    We are still checking with our sales representative but till now nothing.

     

    Best Regards,

    Daniel

  • 0 in reply to 

     

     

    If you

    • read until here and
    • sucessfully managed to update to logger 6.7
    • and you are
      • using ArcMC to manage your logger users and use "Default" groups
      • make changes on the logger locally to "Default" groups

    Congratulations, you will run in following error on Logger 6.7:

    • you will be unable to push users, which life in "Default" groups via your ArcMC
    • you will be unable to make changes locally to "Default" groups (probably you should not, however just for reference)
    • Error message will be
      • for ArcMC some "error 500" message
      • for local logger your error message will be "The provided data is invalid."

    Yes there is a sulotion/Workaround for this

    • Just remove any "." (dot) or "," (comma) from Description field of the group.

    Yes this also aplies to new groups, yes the issue lives on the logger not the ArcMC.

    Thanks to the ppl. that do input validation, for keeping us busy.

    Enjoy & Special thanks to

       for telling me about the error before we updated to logger 6.7 and also ssoban for setting up a complete test lab to figure out why this issue is happening and figuring out the root cause together with me.

    Cheers

    A

     

  • 0 in reply to   

    New partner portal still not up?

    'Registration to this portal is now closed while we move to our new unified partner portal'

    'You will be able to register once our move has been completed on the 1st March'

    Its now 27 March.

    Come on MF. Please put the products into our downloads.

    We shouldnt have to jump thru all these hoops