Change Guardian 6.1 Release Notes

April 2021

Change Guardian 6.1 includes new features, improves usability and resolves several previous issues. Many of these improvements were made in direct response to suggestions from our customers. We thank you for your time and valuable input. We hope you continue to help us ensure that our products meet all your needs. You can post feedback in the Change Guardian forum in the Micro Focus Communities, our online community that also includes product information, blogs, and links to helpful resources.

The documentation for this product is available on the Micro Focus website in HTML and PDF formats on a page that does not require you to log in. If you have suggestions for documentation improvements, click comment on this topic at the bottom of any page in the HTML version of the documentation posted at the Change Guardian Documentation page. To download this product and patches, see the Micro Focus Downloads website.

1.0 What is New?

The following sections outline the key features and functions provided by this version, as well as issues resolved in this release:

1.1 Report About Agent Health Status on Federated Setup

In a federated setup of Change Guardian servers, you can create a consolidated report that contains information about the Change Guardian servers and the health of agents associated with them. The report can also include diagnostic information about agents in the warning state that failed to monitor against some or all policies. You can save the report as PDF and also email the report. You can also create a schedule to generate and email this report.

1.2 Improved Management of LDAP Connections and Support for Secure LDAP

The following enhancements are included for LDAP connection management: (Defect 172259, 170150)

  • Unified LDAP configuration screen to manage LDAP connections, and to configure user container details

  • Easy switching between multiple Active Directory (AD) servers in Policy Editor

  • Agent Manager now enables deployment of agents on pre-configured AD servers

  • Configuring AD server to Change Guardian server with secure LDAP connections

1.3 Enhanced Event for Windows Process

Change Guardian event details for a Windows process contains the following information such as Description, Parent Process ID, Parent Process Name, Command Line, Command Line Length, Command Line Parameter, Command Line Parameter Length, and Decoded Command Parameter.

The decoded command parameter information is available for command line parameter that support-encoding types like Unicode (UTF-8, UTF-16, and UTF-32) and Hexadecimal.

1.4 Enhanced Web Console

The web console views are reorganized for better user experience:

  • Events and agents overview are available under the Dashboard tab

  • Reports about events, agent health on federated servers, and policies are grouped under the Reports tab.

1.5 Support for Appliance Installation in Hyper-V Environment

You can install Change Guardian appliance 6.1 in Hyper-V 2016 and 2019. This release supports Hyper-V Generation 1 virtual machines.

1.6 Software Fixes

The release includes software fixes that resolves several previous issues.

Event Dashboard Does not Display Events When an AD Account is Locked Out

Issue: Change Guardian Agent for Windows stops working when AD DNS policies are applied. The agent does not collect any AD events.(Defect 285385)

Fix: Events are displayed as expected.

Change Guardian Agents Stopped Working After Change Guardian Server Upgrade

Issue: If you have more than one certificate enrolled under certificate enrollment policy, after upgrading Change Guardian server, Change Guardian Agent for Windows stops working. Windows error logs display the following message:(Defect 174167)

Faulting application name: VigilEntAgent.exe

Fix: Change Guardian Agent for Windows works as expected if you have multiple certificates enrolled under certificate enrollment policy.

AD Account Locked Out Events Not Displaying

Issue: Change Guardian Event Dashboard does not display events about AD account locked out.(Defect 172237, 258120)

Fix: AD account locked out events are displayed as expected.

Difficulty in Analyzing Logs Due to the Large Log File

Issue: All Change Guardian error messages are added to the same file, resulting in a large log file. Analyzing the log messages is difficult because all messages are put under one category. (Defect 288141)

Fix: Log messages are categorized into debug and information for better readability.

2.0 Installing Change Guardian 6.1

You can perform installation of Change Guardian 6.1 on supported platforms. For more information about the installation procedure, see Change Guardian Installation and Administration Guide.

3.0 Upgrading to Change Guardian 6.1

You can upgrade to Change Guardian 6.1 from Change Guardian 5.2 or later. For information about the upgrade procedure, see Upgrading Change Guardian in the Change Guardian Installation and Administration Guide.

4.0 Known Issues

Micro Focus strives to ensure our products provide quality solutions for your enterprise software needs. The following issues are currently being researched. If you need further assistance with any issue, please contact Technical Support.

4.1 Events Do Not Show the Command Line Details

Issue: If a process is terminated within a second of its creation, the Change Guardian Agent for Windows cannot collect the command line details such as Command Line, Command Line Length, Command Line Parameter, and Command Line Parameter Length. Events that are generated as a result of such processes do not display the command line details. (Defect 292163)

Workaround: None.

4.2 Events Do Not Show the Windows Process Description

Issue: The assembly path for certain Windows processes is not available to the Change Guardian Agent for Windows, due to which the agent cannot collect the Windows process description. Events that are generated as a result of such processes do not display the process description. (Defect 290154)

Workaround: None.

4.3 When you are on Events Dashboard, if you Click the DASHBOARD Menu, the Events Dashboard Appears Blank

Issue: If you click DASHBOARDS > EVENTS, the Events dashboard is displayed. If you click on DASHBOARDS again, the Event Dashboard appears blank. (Defect 189391)

Workaround: Refresh the page to view the Events Dashboard.

4.4 On a Scheduled Report For Agents Health on Federated Servers, the Requestor is Deselected

Issue: On a scheduled report for AGENT HEALTH ON FEDERATED SERVERS, if you added the requestor (shown as the local Change Guardian server) to be included in the report, the web console incorrectly displays that the server is not selected. (Defect 319023)

Workaround: Although the web console incorrectly displays the requestor server is not selected, the filters are saved and the report includes the server details.

4.5 Launching Alerts Dashboard Displays Conflict Error Message in FIPS Mode

Issue: After installing or upgrading Change Guardian in FIPS mode, when you launch Alerts Dashboard for the first time, a conflict error message is displayed. (Defect 302233)

Workaround: Refresh the page and ignore the conflict error message as there is no functionality impact.

4.6 Deleting an Asset with Agent Manager Does Not Delete All Components

Issue: If you use Agent Manager to delete an asset, Agent Manager does not delete the Change Guardian Agent component from the Installed Programs list in Windows. To remove all asset components completely, uninstall the Change Guardian Agent component from the computer, and then use Agent Manager to delete the asset from Change Guardian. (Defect 170281)

Workaround: None.

4.7 The Change Guardian Dashboard Chart View Displays Incorrect Values

Issue: The chart view in the Change Guardian dashboard displays the percentage value greater than 100. (Bug 172363)

Workaround: Refresh the dashboard to load correct values, and ensure that you synchronize the systems on which Change Guardian dashboard and the Change Guardian agent are installed with the local time zones.

4.8 Internet Explorer 11 Does Not Save Event Dashboard Customizations

Issue: If you use certain versions of Internet Explorer 11, such as versions 11.0.10240.16384 and 11.1098.17763.0, to view and modify Event Dashboard settings, Internet Explorer does not display the saved settings. (Defect 155003)

Workaround: Use other supported web browsers.

4.9 Events from UNIX Do Not Display Generation Time

Issue: In the Events dashboard, the Generation Time column is empty for UNIX events. (Defect 254001)

Workaround: Add Event Time column to the Events Summary report (REPORTS > Event Report) to see the time stamp for UNIX events.

4.10 AD Does Not Synchronize New User if the Account Name is the Same as a Deleted User

Issue: If you delete a user from AD, and then create a new user with same account name, AD does not synchronize the new user. (Defect 170282)

Workaround: None.

4.11 Appliance Reports Errors During Boot

Issue: When the Change Guardian appliance boots after installation, the appliance reports that some services have failed to start: (Defect 174273)

Failed to start LSB: NetIQ LDAP Expander.
Failed to start LSB: Sentinel Server.

Workaround: The services start correctly. You can ignore such error messages.

5.0 Legal Notice

For information about Micro Focus legal notices, see https://www.microfocus.com/about/legal/

Copyright © 2021 Micro Focus or one of its affiliates.