Reports and integrations

A list of improvements for the queries, assertions and reports, and new developments for data and firewall integrations that have been introduced in this release.

  • Google Chronicle integration now offers query filters for assets and vulnerabilities. A new option available only for multicontext Central Management Console (CMC) allows you to send only assets with confirmed media access control (MAC) address.
  • Editing a data integration that has credentials configured now requires the user to input credentials again.
  • Open API requests throttling: requests to api/open endpoints are now limited to 60 requests per minute for a given remote internet protocol (IP) address. Requests exceeding this limit will result in 429 - Too many requests error. The computation of the number of requests is not precise as the requests are counted based on a 1 minute time window starting from the next minute. That means that more than 60 requests might be needed to get the 429 - Too many requests error.
  • In version 24.1.0, Aruba ClearPass Smart Polling plans were converted to Data Integration configurations. Such migration worked on all appliance types instead of considering only Guardian appliances. This version fixes the migration by converting only plans that were created on Guardian appliances. Plans that were present on the CMC, because they were synchronized from downstream sensors, are simply deleted.