v7.0.1

Open-AudIT 7.0.1 is the current release, for Linux and Windows. It is the first Windows release of the 7.x series, and it brings fixes and improvements from feedback on the Linux 7.0.0 release. The FirstWave VM on the download page still carries 7.0.0.

Upgrading

Open-AudIT 7.0.1 upgrades in place from 7.0.0 or from any supported 6.x release. Take a database backup first. The upgrade adds two benchmark history settings and no new database tables.

Highlights

Every edition:

• Windows discovery. WinRM retries NTLM with the NetBIOS domain, then the computer name, when a DNS domain is rejected. WMIC falls back to a usable domain so local Windows accounts authenticate. On Windows client editions the discovery queue limit defaults to 4.
• Discoveries that finish. Scanned-but-abandoned IPs are recovered into devices, stalled queue workers are recovered from the scheduled task, and excluded IPs are honoured for ping-discovered hosts.
• Richer audits. SNMP audits collect disk and processor components, CPU count and memory from HOST-RESOURCES-MIB. ESXi audits over the SOAP API collect network interfaces and more.
• Dashboards. The create form builds the widget grid from the chosen layout.

Enterprise:

• Benchmark reports in Word. A compliance Benchmarks report with per-policy time series charts, and a security Benchmarks report of the directory benchmark results.
• Benchmark history. STIG and SCAP results keep their history, with two new settings to control retention.
• Vulnerabilities. Execute a single vulnerability from its read page. CVE updates are batched to stop memory exhaustion.
• People. The manager column and stat widgets link to the matching person and filtered views.

Every change in this release, including upgrade and database notes, is in the Open-AudIT 7.0.1 release notes.