Change Guardian provides security intelligence to rapidly identify and respond to unauthorized activities of privileged users that indicate a security breach or compliance gaps. Change Guardian helps security teams to detect and respond to potential threats in real-time.
Change Guardian CE 25.1 (6.3.2.0) release includes new features, security fixes, and usability improvements. Many of these improvements were made in direct response to suggestions from our customers. We hope you continue to help us to ensure that our product meets all your needs.
If you have suggestions for any documentation improvements, click comment on this topic at the bottom of any HTML page of Change Guardian Documentation. To download Change Guardian and patches, see the OpenText Downloads website.
The following sections outline the key features and functions provided by this version, as well as issues resolved in this release:
Change Guardian will now upgrade to OpenSSL 3.0.12 version across the following components:
Change Guardian Agent for Windows
Change Guardian Agent for Linux/UNIX
Change Guardian Agent for Policy Editor
NOTE:The CBC cipher has been disabled accordingly. For more information, see the CBC Ciphers section.
Change Guardian now supports security protocol TLS version 1.3, enabling users with faster and more secure monitoring of all communications.
Change Guardian has been updated to be compatible with newer RHEL and SLES platforms. For more information about supported platforms, see System Requirements for Change Guardian 6.3.2.
Change Guardian now supports Hostname lookup for logon and logoff events of Active Directory can now be enabled or disabled from the Agent Management Dashboard configuration.
Server and Agent services are now managed using systemctl, replacing init.d scripts.
For example, use systemctl restart sentinel.service instead of rc sentinel restart.
For more information about hardware requirements, supported operating systems, and browsers, see the System Requirements for Change Guardian 6.3.2.
You can install Change Guardian 6.3.2 on supported platforms. For more information about the installation procedure, see Installing Change Guardian.
You can upgrade to Change Guardian 6.3.2 either from Change Guardian 6.3.0.x or 6.3.1.x. For more information about upgrading Change Guardian, see Change Guardian Installation and Administration Guide.
Resolved an issue in which events were not sent to Change Guardian. (Defect 548205)
Documented that warning statuses and driver initialization errors on the Agent Health page do not affect functionality. Events are forwarded to the server without data loss, and file change monitoring operates as expected. You can safely ignore these warnings and errors and continue normal operations. (Defect 603387)
Documented the steps to add agents manually to address an issue where the Manage Agents dashboard in the web console displays the error message: There was an error processing your request. It has been logged (ID <id_value>) after upgrading to Change Guardian 6.3.1 from versions 6.2.1.x or 6.3.0.x. For more information, see Manage Agents Dashboard Fails to Load Post Change Guardian Upgrade. (Defect 677499)
Resolved an issue where Windows agent installation failed when the SMB protocol was disabled on a Windows machine. With SMB disabled, the standard agent installation methods using Agent Management Dashboard did not function as expected, preventing the agent from being deployed to the target machine through remote or manual installation procedures. For more information, see Agent Installation with PowerShell Script. (Defect 648034)
Resolved an issue where, when using the latest version of Change Guardian with existing older versions of policies, agents displayed a warning state. (Defect 603114)
Resolved an issue where the customers cannot block or disable CBC ciphers. (Defect 598058)
OpenText strives to ensure our products provide quality solutions for your enterprise software needs. The following issues are currently being researched. If you need further assistance with any issue, please contact Technical Support.
Issue: When you create agent configurations for deployment, the configurations are lost after upgrading the server. (Defect 964001)
Workaround: Post upgrade, create new agent configurations, if necessary.
Issue: When the Client Agent Manager is uninstalled or removed, the windows agent stops functioning and goes offline. This issue occurs because the environment variables created during Client Agent Manager installation are deleted when Client Agent Manager is uninstalled. These environment variables are required for the agent to operate correctly. (Defect 686005)
Workaround: Reinstall or reconfigure the windows agent without uninstalling the existing agent to avoid policy reassignment. This applies to scenarios where Client Agent Manager has been uninstalled.
Issue: The user and directory browse options may not function when creating policies using the Policy Editor. This issue applies to both Windows and UNIX systems. (Defect 673081)
Workaround: Add the directory or user in the policies manually.
Issue: The Event Collector Add-on cannot collect CEF data if the default path for CEF data (C:\Program Files\NetIQ\ChangeGuardianAgentAddon\CEFData) is used.(Defect 686151)
Workaround: Configure a custom path for the CEF data output and reconfigure the Event Collector Add-on with the custom path.
Starting with Change Guardian 6.3.2, only traditional installations are supported, and appliance-based setups are no longer supported. The ISO, VHD, and OVF appliance files will no longer be available on the product download site. If you are leveraging with appliance-based setups then you can continue using appliance-based setups. For more information, see Upgrading the Appliance Installation.
Change Guardian 6.3.2 does not include an agent update for Solaris; however, Change Guardian 6.3.1 for Solaris will remain compatible with Change Guardian 6.3.2.
For information about OpenText legal notices, see https://www.opentext.com/about/legal/
Copyright © 2025 OpenText or one of its affiliates.