Arc v1.14.0

A list of new features that have been introduced in this release.

• Arc-510: Arc service has been renamed nozomi-arc to address a known naming conflict with a Microsoft Windows service from another vendor. The new name nozomi-arc will be effective from v1.14.0 for all new installations (Windows, Linux, and macOS) and for old Windows installations that receive the update. The service will be renamed from Arc to nozomi-arc in Linux and macOS from the subsequent v1.15.0 version update.
• Arc-806: Implemented six new attack scenarios for Arc Embedded for Mitsubishi Electric:
  • Module attachment (through SIGN:DEV-STATE-CHANGE)
  • Insertion and removal of secure digital (SD) cards (through SIGN:SD-CARD)
  • Remote Password Successful Login and Remote Password Unsuccessful login (through SIGN:LOGIN)
  • Boot security error (through SIGN:BOOT-SECURITY-ERROR)
  • For more details, see Detection information, in the Arc Embedded Administrator Guide
• Arc-816: Users extraction is now also available on Linux and macOS.
• Arc-830: A global Berkeley Packet Filter (BPF) filter can now be set from the user interface (UI) and applied to all found endpoint interfaces.
• Arc-850:
  • Discovery and Smart Polling:
    • Arc now sets the creation time for nodes discovered or smart-polled
    • Arc can now obtain data about BACnet devices in serial networks that are connected to a BACnet router through Discovery, and then poll them to enrich them
  • Smart Polling:
    • Smart Polling now delivers more accurate hardware module data for Mitsubishi Electric iQ-R devices
    • The simple network management protocol (SNMP) strategy for Smart Polling has been enhanced to use LLDP OIDs to extract data, this enables features for upcoming physical network mapping
  • Discovery:
    • Arc can now find more ONVIF devices through Discovery
    • Discovery can now obtain more data from Cognex devices

A list of all the issues that have been resolved in this release.

• Arc-841: Fixed an issue with software extraction that left the Microsoft Visio.exe open when Visio is installed without an office license.