The next release of the Security Vision 5 platform has been released, focused on improving security, manageability and transparency of processes. The update brings enhanced API access control, in-depth logging, improvements in event and incident correlation, as well as significant workflow and interface improvements.
Updating the interface
The design of widget editors and object properties has been updated, input/output forms and group icons have been improved. Everyday scenarios have become easier due to visual consistency and unification of interface elements.
Security and API access
Now you can set a list of allowed IP addresses (whitelist) for API tokens, limiting API access to trusted infrastructure only. An API-only account type has been introduced for integration scenarios. Such users interact with the platform exclusively through the API, without logging into the web interface. Additionally, the secrets (connector passwords, tokens, etc.) stored in the database are re-encrypted using the organization's own master password.
Audit and compliance
The coverage of audit events has been expanded, which increases the reproducibility of actions and meets the requirements for logging. Now the shutdown of schedules and connectors, changes in the status of running workflows, as well as the creation of reports (from the RP and according to the schedule) are recorded. There is a setting of the logging level of actions in running RP for more detailed tracing.
Correlation and incidents
When the correlation rule is triggered, the platform can automatically create an incident and create a separate section with detailed information on such triggers. Criticality has been added to the rules themselves, and alerts have been displayed for workings, which helps to quickly assess the importance and visibility of an event.
Work processes
In the "Connector Call" action, a dynamic connection configuration is available — one block covers different environments and contours without duplication. Corporate chat rooms support messages on behalf of the "system" for uniform service notifications. In tables, you can run one workflow on all selected records at once, which reduces the load and reduces the time for bulk operations.
Analytics and visualization
A circular mode has appeared in the Indicator widget, which allows you to compactly display progress and KPIs. Axis signatures have been added to line and column charts, making graphs and reports more readable.
Administration and rights
In the custom menu type, you can hide the Settings section for the required roles, narrowing the administration surface for non-core users and reducing the risk of erroneous changes.
Filters and navigation
By default, the "Enter into" operator is used in fast filters (except for strings and date-time), which speeds up work with multiple values and directories.
