= Version 2.4.2 = Features: Added support for MariaDB 11 Updated NetXMS client library to latest version (4.5.3) Added sorting for random ordering of dynamic rules on Palo Alto PanOS when managed by Panorama Added support for prompt changing from hostname to FQDN on JunOS after entering "cli" Added separate drivers for various versions of Nokia TiMOS / SROS to better handle differences between versions Added support for sntrup761x25519-sha512@openssh.com KEX algorithm Added "require_strict_kex" configuration option for Core, which will force usage of strict KEX extension for SSH sessions Added more logging for various SSH and TCP Core logic when Debug Mode logging is enabled Added support for: - Adtran SDX 6000 series OLT - APC Smart-UPS AOC Management Cards - Aruba 9004 Gateway - Brocade / Foundry EdgeIron - Calix E3-2 - Calix E5 - Calix E9-2 - newer versions of Cisco ISE - more variations of Hauwei Campus switches - Huawei CloudEngine S series switches - Huawei NetEngine - Huawei CloudFabric - newer version of Nokia SROS - Opengear CM81xx series - Patton SmartNode 41xx VoIP Gateway series - Teltonika RUTOS (RUTX50 and similar) - Ubiquiti Dream Machine (UDM) Pro - Ubiquiti Dream Machine (UDM) SE - Ubiquiti Wave Fixes: Fixed Unimus could not be deployed on MariaDB 11 Fixed Unimus would stop working after updating the database to MariaDB 11 Fixed config change notifications even when nothing changed on PA PanOS when managed by Panorama Fixed UI and text issues in Windows Installer Fixed jobs failing on specific Cisco IOS devices that shortened their prompt in Configure mode Fixed jobs failing on specific TrueNAS versions Fixed jobs failing on WatchGuard devices in [Fault] mode Fixed jobs failing on specific configurations of JunOS Fixed jobs failing on specific Cisco ISE versions Fixed PEM SSH keys could not be loaded properly when formatted in a specific way Embedded Core version: 2.4.2 Known issues: ISSUE: "Re-discover affected devices when Ports or Connectors change" Advanced Settings option does not work WORKAROUND: none STATUS: issue scheduled for fixing ISSUE: Some screens in Unimus show time in server's time zone, others in client's (browser's) time zone WORKAROUND: none, issue only relevant if client has different time zone than server STATUS: we are debating on how to fix this - will likely create a setting to select which TZ should be used = Version 2.4.1 = Hotfix releases: Fixed Panopta NMS Sync connector not working Fixed error in "Device Info" dialog with devices imported from Panopta Please refer to the 2.4.0 section for the full Changelog = Version 2.4.0 = Features: Updated NetXMS client library to latest version (4.4.4) Added filtering of log messages inside Cisco SMB switch backups Added a built-in backup filter for new timestamp format in MikroTik RouterOS v7.10 Improved built-in backup filters for newer versions of Ubiquiti EdgeSwitch X Improved handling of errors for Zones which use a NetXMS Agent as the Zone's proxy Added possibility to search by Credential Type in "Credentials > Device credentials" table Various minor UI and UX fixes and improvements Added support for devices which don't respond to the "none" SSH auth method Improved login banner recognition logic, more banner types are now supported If a DNS lookup for a device hostname fails, this will now be reported as an exact job failure reason Added support for session restoration prompts after login (for example on Cisco ISE) Added support for CLIs which don't echo the "?" when receiving commands like "show ?" Added the option to override the SSH version validation timeout (new "unimus.core.ssh-version-validation-timeout" setting) Added support for multi-partition backup on F5 devices Added support for all possible formats of user and root prompts in OPNsense Added support for output termination in newer versions of VyOS Added support for Cisco SMB switches which don't report their model on the CLI Added support for Linux shell login on netElastic vBGN Added support for output termination in paged output on netElastic vBGN Improved support for Adtran NetVanta devices Improved support for logins to JunOS in BSD mode Improved handling of quoted strings on MikroTik RouterOS v7 Added support for paginated output on RAD devices Added support for backup multipliers in the Cisco WLC driver Improvements to the CLI mode change algorithm (better handling of specific edge cases) Improved handling of error messages when Unimus config file is missing Config Push modifiers were improved and reworked: - modifier syntax was changed to a "$(modifier-name yes/no)" format - enforced modifier and action positions within a line - added support for new modifiers "fail-on-error", "wait-echo" and their opposites (yes/no) - added support for a "delay" action, which simply waits for a specified time - all existing Config Push presets should be migrated to the new syntax automatically - full documentation: https://wiki.unimus.net/display/UNPUB/Mass+Config+Push Major improvements to NMS Sync: - devices no longer present in NMS can now be automatically Unmanaged / Deleted in Unimus - improved tracking of which local device corresponds to which NMS device, allowing to move devices locally when they are moved in the NMS - if a device is not found locally in the target Zone, you can now specify if Unimus looks for a candidate to move into the Zone, or creates a new device - allow specifying what scope Unimus searches in for move candidates when trying to move devices across Zones - fixed multiple issues that arose in setups where multiple NMSes were being imported from into the same Zone - more info at https://blog.unimus.net/new-nms-sync-logic-2-4-0/ Improvements to the Zabbix NMS Sync connector: - added support for importing from Templates and Tags on top of existing options - introduced new prefixes for various import sources - existing Sync Presets should be migrated automatically, and continue working as expected - full documentation: https://wiki.unimus.net/display/UNPUB/Zabbix+importer Improvements to the LibreNMS NMS Sync connector: - added "Address field priority" selector, allowing to specify how Unimus pulls device addresses from Libre - added "Description field priority" selectors, allowing to specify how Unimus pulls device descriptions from Libre APIv2 improvements: - add optional query param to select zone for the "findByAddress" endpoint at "api/v2/devices/" - add option to specify Zone for the "createDevice" endpoint at "api/v2/devices" - add option to specify Managed State for the "createDevice" endpoint at "api/v2/devices" - add option to specify Managed State for multiple GET and UPDATE endpoints at "api/v2/devices" APIv3 improvements: - added possibility to search by "usedByDevices", "boundToDevices" and "credentialsTypes" in "api/v3/credentials" endpoint Added support for: - Adtran NetVanta chassis - ADVA FSP 1xx series - AricentOS devices - more variants of the Aruba Mobility Controller - Calix AXOS - Calix E7-2 - Cambium cnPilot - Casa vCCAP - Cisco Catalyst 1200 series switches - Cisco ISE - ComNet Switches (based on CNGE11FX3TX8MS) - EdgeCore 7316 - EdgeCore CSR320 - Ericsson IPOS (SSR series) - Ericsson SGSN - F5 multi-partition - Grandstream GWN7800 series switches - improved netElastic vBGN support - Opengear Operations Manager - Radware Alteon - Ruckus vSZ-D - Ruckus vSZ-E - TRENDnet TI switches - Westermo L110 - Westermo Lynx-5512 - Westermo RedFox-5728 - Westermo WeOS Fixes: Fixed inter-connection delay was not applied for Telnet service availability check Fixed logs present in backups on Cisco SMB switches (would trigger new change-points and change notifications on every backup) Fixed NMS Sync from Zabbix versions 6.2.1 and newer within 6.2 was not working (6.4 and older than 6.2 worked properly) Fixed for Zones which use a NetXMS Agent as a proxy all tasks within a job would fail if a single tasks failed Fixed inter-connection delay was not applied for NetXMS TCP proxy connections Fixed elements in combo box sometimes appearing multiple times in multiple screens across the application Fixed elements in combo box sometimes missing in multiple screens across the application Fixed beginning of lines could be truncated in diff the view on specific browser configurations Fixed reporting wrong Last Job Status for unmanaged devices over API (multiple APIv2 "/devices" endpoints) Fixed attempting to input a very long FQDN into the DB address during the Deploy Wizard was not possible Fixed Credential usage could be counted twice if a credential was used for both for SSH and Telnet (Credential > Usage screen) Fixed CLI Mode Change password usage could be counted twice if a credential was used for both for SSH and Telnet (Credential > Usage screen) Fixed an error that could occur if you switched screens while multiple popup windows were opened Fixed the possibility to input extremely long strings into dropdowns, which would eventually trigger an error Fixed Config Push triggered via API with an empty device ID string would create a wrong entry in Push results Fixed Delete Push Job History retention job was not re-scheduled when default schedule is changed Fixed issues with Config Push presets being deleted while they were opened in another browser window Fixed various minor UI and UX issues and inconsistencies Fixed jobs using Telnet could randomly fail Fixed login to devices could fail if certain login banners were used Fixed Remote Core would not be able to reconnect to the Server in specific cases Fixed Remote Core connections could be considered still alive even after the connection was closed Fixed jobs on Cambium 450i would always fail Fixed jobs on newer versions of VyOS failing Fixed login failing on specific Palo Alto devices Fixed specific commands on Aruba Mobility Controller (ArubaMM) could cause a Config Push to fail Fixed backups could fail on Cisco WLC under heavy load, or with very large configs Fixed jobs on specific Moxa switch types could randomly fail Fixed jobs on specific RAD devices would fail Fixed jobs on specific Adtran NetVanta devices would fail Fixed discovery failing on OPNsense with specific account and shell type combinations Fixed discovery would fail on JunOS devices with specific BSD prompt format Fixed discovery would fail for specific versions of the Aruba Mobility Controller Fixed sporadic config change notifications on MikroTik RouterOS v7 Security fixes: Fixed read-only users could add a new Zone Fixed Credentials and CLI Mode change passwords could be printed to the log file in cleartext on specific API calls Embedded Core version: 2.4.0 Migration warnings: On MikroTik RouterOS v7, you can get a single config change notification due to changes in how quoted strings are handled in our ROSv7 driver. This config change should only happen on the first backup job after upgrade and can be ignored. Known issues: ISSUE: "Re-discover affected devices when Ports or Connectors change" Advanced Settings option does not work WORKAROUND: none STATUS: issue scheduled for fixing ISSUE: Some screens in Unimus show time in server's time zone, others in client's (browser's) time zone WORKAROUND: none, issue only relevant if client has different time zone than server STATUS: we are debating on how to fix this - will likely create a setting to select which TZ should be used = Version 2.3.3 = Features: Added support for Zabbix 6.4 in "NMS Sync" (older versions of Zabbix are still supported) Added primary keys to all tables in all DBs (this prevented deploy on some cloud DB engines) Added device descriptions to exported HTML and .yaml files from "Config Search > Export / Send" "Config Search > Export / Send" have been optimized to use less memory "Backups > Send" and "Config Search > Send" will now retry sending results if email sending fails Improved error handling for "Backups > Send" and "Config Search > Send" - if sending fails, proper error is now reported in UI Improved built-in backup filters for newer versions of Cisco Nexus Improved built-in backup filters for newer versions of Exablaze Fusion Added fallback to using "enter" as the pagination key if "space" doesn't work Added support for devices which ask "Press Y or Enter to continue" during login Added an option to disable SSH client sending a "none" auth request to detect available auth methods (some devices don't support this) Added security rules and security addresses as part of Palo Alto PanOS backups Improved handling of CLI mode switching on Checkpoint devices Improved connection handling with RSA SSH keys Added additional debug logging in the Core module Added support for log messages displayed after a prompt when a user logs in - many devices can print a log message into the terminal after a user logs in - this caused Unimus not to recognize the device prompt and fail to detect a successful login - added support for multiple log message formats (Cisco IOS, Cisco SMB, IBM, Lenovo) Added support for: - ADVA OptiDriver Network Manager - Cisco FirePOWER for KVM / Azure / GCP - Cisco Nexus FMB - Cisco SD-WAN vEdge - Cisco SD-WAN vSmart - Dell SmartFabric - Exablaze FMB - MRV OptiDriver Network Manager - RAD Carrier Ethernet Switches - Viptela vEdge - Viptela vSmart Fixes: Fixed some devices could be omitted from backup during a scheduled backup run Fixed unable to enable disabled connectors (both default and per-tag) on HSQL (file-based) database Fixed invalid data in the config file (unimus.properties) would be duplicated on startup, resulting in large file growth Fixed unable to remove a CLI Mode Change Password in "Credentials" if it was bound to a device Fixed search in "Dashboard > Device job history" not working Fixed Network Scan reverse DNS resolving not working on Windows Fixed unable to deploy Unimus on some cloud-hosted databases due to missing primary keys Fixed Connector update triggering discovery on devices which were not affected by the Connector change Fixed errors on "Credentials > CLI Passwords > Show usage" when using the HSQL (file-based) database Fixed errors on "Schedules > Show Scheduled Tasks" when using the HSQL (file-based) database Fixed sorting in "Backups > Configuration > Filters" and "Devices > Info > Backup Filters" was not working Fixed UI errors when changing the screen while Config Search export was running Fixed multiple issues with table search on MSSQL Fixed multiple minor UI / UX issues Fixed incorrect config change notifications for date / time changes on Cisco Nexus Fixed jobs failing on many device types due to post-login log messages Fixed device connection failing when using RSA SSH keys in specific cases Fixed backup failing on Checkpoint devices in specific cases Fixed discovery failing on HP(E) Comware devices with specific login configurations Fixed discovery failing on newer firmware versions of Dell OS10 Fixed discovery failing on Cisco FirePOWER in specific cases Fixed discovery failing on specific Moxa switches Security fixes: Fixed Network Scan could fall back to resolving IP addresses using 8.8.8.8 in specific cases Embedded Core version: 2.3.3 Known issues: ISSUE: "Re-discover affected devices when Ports or Connectors change" Advanced Settings option does not work WORKAROUND: none STATUS: issue scheduled for fixing ISSUE: Some screens in Unimus show time in server's time zone, others in client's (browser's) time zone WORKAROUND: none, issue only relevant if client has different time zone than server STATUS: we are debating on how to fix this - will likely create a setting to select which TZ should be used = Version 2.3.2 = Features: Updated NetXMS client library to latest version (4.3.0) Improved Congig Search behavior when the Browser would not report the timezone correctly to the Server The backup range dates in "Backups" were swapped for easier navigation Improved error messages and sync fail reasons for LibreNMS sync if a device group did not exist or was empty Improved built-in backup filters for newer versions of Arista switches Improved built-in backup filters for Huawei VRP Improved built-in backup filters for Metaswitch Perimeta SBC Improved built-in backup filters for SonicWall Improved built-in backup filters for Siklu EtherHaul Added support for LDAP Filters: - LDAP Filters were added as an optional configuration for the LDAP connector - You can use filters to more exactly specify which users are found when searching for a user in LDAP - full documentation: https://wiki.unimus.net/display/UNPUB/LDAP+Auth Added support for: - Riverbed RiOS Fixes: Per-Tag Sensitive Data Stripping policies were not working (jobs failed with SENSITIVE_DATA_STRIPPING_ERROR) Fixed errors on "Credentials > Show usage" when using the HSQL (file-based) database Fixed regressions for wrong order of dates in "Backups" (changed in 2.0.5, regression in 2.1.0) Fixed the output columns in "Mass Config Push" could have some content cut-off on specific screen resultions Dynamic backup filters were not applied when backup was uploaded via API Fixed "Do not check certificate" for LDAPS would still try to validate FQDN against the certificate Fixed errors when both Radius AAA and LDAP auth were used together (accounting records were not properly created) Fixed errors when an existing user was switched from Radius auth to LDAP auth Fixed incorrect "Variable missing" indicator for Targets in Mass Config Push Fixed missing automatic refresh in API Mass Config Push results page when a push finished Fixed backups could in very specific cases contain some control character sequences Embedded Core version: 2.3.2 Known issues: ISSUE: "Re-discover affected devices when Ports or Connectors change" Advanced Settings option does not work WORKAROUND: none STATUS: issue scheduled for fixing ISSUE: Some screens in Unimus show time in server's time zone, others in client's (browser's) time zone WORKAROUND: none, issue only relevant if client has different time zone than server STATUS: we are debating on how to fix this - will likely create a setting to select which TZ should be used = Version 2.3.1 = Hotfix releases: Fixed Radius AAA not working (Radius "Enabled" state was ignored) Fixed unable to delete a Zone which had devices with historic jobs still present Please refer to the 2.3.0 section for the full Changelog = Version 2.3.0 = Features: Added device UUIDs in APIv2 (all "/devices" endpoints) The "Default" Zone will now be marked as "Default" when renamed Added support for recognizing Observium devices IDs in Observium NMS Sync Improved built-in backup filters for Siklu devices Incremental performance improvements across many parts of the system Added support for acknowledging login prompts in keyboard-interactive mode during SSH login Added retrieval of backup from Fiberhome devices in configure mode if not available in enable mode Improved device CLI mode switching and mode detection during discovery Added support for prompt format changing when switching contexts on Cisco ASA (multi-context) Added support for Configure Mode on Sonicwall NSA Added handling which improves backup formatting on Cambium cnMatrix switches (removes double lining) Added "Offline Mode" (support for air-gapped networks): - Unimus can be now switched to full offline mode, which removes the necessity to contact our Licensing Server - Offline Mode licenses are only available to users with an Unlimited License subscription - please contact us to request an Offline Mode license Added support for LDAP authentication: - LDAP can now be used as an external authentication provider - full support for configuring custom user search DN and specifying username LDAP attributes - tested on both OpenLDAP as well as Microsoft Active Directory - full documentation: https://wiki.unimus.net/display/UNPUB/LDAP+Auth Added support for MS SQL: - we have added support for Microsoft SQL Server as an officially supported DB engine - the Deploy Wizard will allow you to select MSSQL during deployment - to migrate to MSSQL, you will need to setup a new Unimus deploy, data migration is currently not supported Added Config Search Export and Send functionality: - you can now export (download) or directly send Config Search results - support for exporting in both HTML and YAML format - configurable export formatting (header, search criteria, etc.) or just results Added options to specify which SSH cryptography options Unimus supports: - in some environments, it may be desired to disable support for weaker SSH crypto - full documentation: https://wiki.unimus.net/display/UNPUB/Supported+SSH+cryptography Added support for: - Accedian AMO series - ADVA LX series console servers - Arris C4 series chassis - BDCOM OLTs - Additional Brocade NOS device models - CheckPoint Gaia devices - CheckPoint Security Gateway - CheckPoint Security Management Server - CheckPoint SMB Gateway - CheckPoint VSX - Additional Ciena SAOS device models - Dasan OLTs - Entrasys switches (A4 / B2 series) - Extreme Wing APs in cluster mode / virtual controller mode - Extreme WLC - Fortinet FortiAuthenticator - Metaswitch Perimeta SBCs - NetApp switches - Nokia OLTs (FX-8) - MRV LX series console servers - Opengear Infrastructure Manager devices - Opengear Resilience Gateway (ACM) - Pulse Secure Virtual Traffic Manager - Ribbon (ECI) Apollo - Securepoint UTM - SNR (NAG) Switches - YunKe switches - Zyxel GS19xx series switches - Zyxel ATP Fixes: Fixed backup retention would not work on specific MySQL Server versions Fixed Inverted Config Search would not work on specific PostgreSQL versions Fixed diff visualization would incorrectly show new empty lines when large delete sections were followed by a new addition Fixed first failed job on a newly added device would not set its Last Job Status to failed Fixed disabled retention jobs would still show up in "Schedules > Show scheduled jobs" window Fixed API v2 get backups by device id and latest backups by device id not working Fixed API (of the local instance) denying all requests when connection to Licensing Server was down Fixed API v3 Push Jobs search not working on PostgreSQL Fixed possible deletion attempt on an already deleted object comment which would result in errors Fixed Per-Tag Connector config updates not being propagated between concurrent users (live updates were missing) Fixed "Schedules" table updates not being propagated between concurrent users (live updates were missing) Fixed "Config Search > Show all lines" does not work if Context lines is set to a negative value Fixed moving devices between Zones would not trigger needed rediscovery in specific cases Fixed moving devices between Zones would trigger unneeded rediscovery in specific cases Fixed incorrect "Currently running Scans" count if a Network Scan preset was deleted while it was running Fixed "Devices > Last Job Status" could be incorrect if running a job with all Connectors disabled Fixed multiple minor UI / UX issues and UI element state and alignment issues Fixed SSH connections failing to PanOS devices when login acknowledgement prompts were enabled Fixed backup not working on specific Fiberhome devices Fixed backup and Config Push could fail on some Positron GAM devices Fixed backup not working on Cisco FXOS devices in cluster mode Fixed Cisco SX devices could contain backup command echo as part of the backup Fixed Exablaze Fusion devices could contain backup command echo as part of the backup Fixed discovery failing on specific Aruba ArubaOS / HP(E) ProCurve devices Fixed discovery failing on specific Brocade NOS devices Fixed discovery failing on specific Ciena SAOS devices Fixed discovery failing on DCN devices with newer firmwares (after rebranding to YunKe) Fixed discovery failing on netElastic vBNG Fixed discovery failing on Dell OS10 switches if they output a Bell before the prompt Fixed discovery failing on Extreme VX devices (VX9000) Fixed discovery failing on Opengear devices when using the "root" user Fixed discovery failing on newer versions of OPNsense Fixed discovery failing on Fiberstore S5850 (and related devices) with newer firmwares Fixed discovery failing on specific Nokia / Vecima OLT devices Fixed discovery failing on multi-context Cisco ASA with different prompt in different contexts Fixed discovery could fail on devices which use pagination in very specific cases Fixed discovery not falling back to Telnet after IO errors occurred on the SSH connection Fixed SSH connections failing to servers which did not support higher MAC segment size: - affected devices usually had very old firmwares with weak SSH MAC support - example of affected devices: Dell PowerConnect 55xx, some versions of Cisco SF/SG switches, etc. Security fixes: Updated MySQL Connector due to multiple published vulnerabilities in older versions Fixed currently opened "Devices > Tags" window still working if user lost access to the device Fixed currently opened "Devices > Comments" window still working if user lost access to the device Users which did not have full access to a Config Push preset could still delete the preset in its context menu Embedded Core version: 2.3.0 Known issues: ISSUE: "Re-discover affected devices when Ports or Connectors change" Advanced Settings option does not work WORKAROUND: none STATUS: issue scheduled for fixing ISSUE: Some screens in Unimus show time in server's time zone, others in client's (browser's) time zone WORKAROUND: none, issue only relevant if client has different time zone than server STATUS: we are debating on how to fix this - will likely create a setting to select which TZ should be used = Version 2.2.4 = Features: "Config Push > Advanced Settings > Override Timeouts" max allowed value has been increased to 30 minutes Added a new Output Group for devices not pushed to when a Config Push is stopped Improved sever FQDN detection on Windows Improved built-in Backups Filters for Fortinet FortiOS Juniper JunOS driver will now send 'ESC-Q' instead of 'monitor stop' before grabbing a backup Added support for latest firmwares on TelcoSys T-Marc devices Added support for latest firmwares on DCN switches Added support for read-only accounts on LANCOM switches Improved support for specific Cisco FX-OS device models Added support for: - Alloy switches - DC YunKe Networks switches - DD-WRT - Dell R1 switches - Dell VRTX devices - FiberStore N58xx switches - Positron GAM devices Fixes: Fixed incorrect HTML escape sequences being present in Slack diffs Fixed "Config Push > Stop" did not work Fixed diff view could be cut-off on the left on clients with non-US locale Fixed new devices not being backed up after Import if "Backup new devices immediately" was enabled Fixed sporadic config change notifications on MikroTik RouterOS that consisted only of line breaks in commands Fixed MikroTik RouterOS backups could contain a tailing prompt Fixed very rare issue where a rogue '\_' would appear in MikroTik RouterOS backups Fixed Config Push required one additional '\' when escaping the '$' Fixed being able to create Backup Filters with an empty regex Multiple small UI / UX fixes (UI element overflows, etc.) Fixed Telnet sessions would not be properly closed in specific scenarios Fixed Discovery failing on Netonix switches Fixed Discovery failing on some Cisco SMB switches (Sx5xx series) Fixed Discovery failing on Cisco IOS devices failing in specific cases Fixed Mellanox MLNX-OS devices failing Discovery in some cases Fixed specific models of Cisco FX-OS devices failing Discovery Fixed backup failing on Opengear devices in specific cases Embedded Core version: 2.2.4 Migration warnings: A single config change for MikroTik devices may occur, due to long config lines in RouterOS being now consumed as a single line rather than broken into multiple lines. This may generate a new config change-point / diff if you had devices with multi-line config lines before. In Config Push, using one additional '\' was needed to escape '\$' due to a bug. This was now fixed, and if you were adding additional '\' before '\$', a single '\' should now be removed due to the bug being fixed. Known issues: ISSUE: "Re-discover affected devices when Ports or Connectors change" Advanced Settings option does not work WORKAROUND: none STATUS: issue scheduled for fixing ISSUE: Some screens in Unimus show time in server's time zone, others in client's (browser's) time zone WORKAROUND: none, issue only relevant if client has different time zone than server STATUS: we are debating on how to fix this - will likely create a setting to select which TZ should be used = Version 2.2.3 = Features: Added support for syncing device manage state from Zabbix ("status" field) Added a new tooltip which will display all text for text field contents which are shortened when containing very long text Unmanaged devices will now appear in Italics in "Config Push > Targets" Added line breaking on whitespace in Diff view (better UX with long diff lines) Improved search behavior (search triggering will now be less aggressive and not stop you during typing) Improved long text label behavior with text fields in "Network Scan", "Config Push" and "NMS Sync" Performance optimization for "Retention > Keep only last x backup(s)" - the retention cleanup is now much faster Improved Config Search regex fallback for regex unsupported by the DB engine on PostgreSQL Improved the input behavior for the "Subnets" input box in "Network Scan" Credentials and CLI Mode Change Passwords are now searchable by "Used by" counts Improved explanation text in Config Push output groups when devices failed to switch to Enable / Configure mode Improved remote Core connection management and remote Core connection state detection Improved pagination handling for Dell PowerConnects Added support for devices with "User ID:" prompt during login Added support for config sections on ArubaOS-CX Improved support for specific HP ProCurve / ArubaOS devices (for example Aruba 2540) Improved support for specific Allied Telesis devices Performance improvements: - added additional new thread pools to multiple parts of the system - improved thread management, threads are now reused where possible instead of spawning new threads - this improves performance, decreases total lifetime threads spawned by Unimus - also solves issues in environments where the OS thread and/or PID limits are low New SSH client library: - added support for many newer crypto algorithms - added support for non-64bit aligned DH groups - https://wiki.unimus.net/display/UNPUB/Supported+SSH+cryptography - added support for more SSH key types - added support for more SSH key formats - https://wiki.unimus.net/display/UNPUB/SSH+key+types+and+formats Added support for: - 6Wind Virtual Service Router (VSR) - Accedian Metronids NID - Array Networks Load Balancers (ArrayOS) - Aruba Mobility Access Switch - Cisco CatOS - Lenovo FlexSwitch - netElastic vBNG - Opengear Console Servers - Transition Networks NID Fixes: Fixed Config Search with some specific regex modifiers not working on PostgreSQL Fixed outbound http(s) proxy authentication would not be used when configured Fixed initial part of text could be cut off in the Diff view in specific cases Fixed deleting a device while Discovery was running would print errors into the log Fixed "Admin" user with Device Access restrictions not able to access the System screen Fixed regex validator not being applied to the regex in "Backup Filters > Change Condition" Fixed adding additional entries into the "Network Scan > Subnets" field would reorder entries randomly Fixed "Add to Unimus" button in "Network Scan" not disabling itself after device was added Fixed "Network Scan" screen would hang when extremely large data was pasted into the Search box Fixed long addresses in "Credentials > Show usage" prevented showing other columns Fixed "Credentials > Show all passwords" would reorder the entries in the table Fixed missing spinner in resources Fixed jobs failing with "Timed out" error when very large job requests were submitted to Core Fixed some Cisco SMB switches could not be discovered (reported as Unsupported Device) Fixed Configure Mode could not have been discovered on devices during Discovery in rare cases Fixed during SSH negotiation only LF would be sent in ID string, some devices would complain about this Fixed Config Push results could fail to send to server from Core in rare cases Fixed Config Push could require escaping "$" even when it was not being used for a variable declaration Fixed a trailing prompt could be present in a MikroTik RouterOS backup Fixed a trailing prompt could be present in Config Push output for a MikroTik RouterOS device Fixed Config Push output grouping could not work for MikroTiks in multiple cases Fixed discovery failing on Arista switches when specific prompt was used Fixed discovery failing on specific HP ProCurve / ArubaOS devices (for example Aruba 2540) Fixed discovery failing on specific Allied Telesis devices Fixed wrong model discovered on specific Allied Telesis devices Security fixes: Fixed multiple possible XSS injections around the GUI (injecting XSS required authenticating to the application first) Fixed wrong IP address reported for user at login (only login was affected, all other screens reported IPs for user correctly) Fixed currently opened "Device Tags > Tag devices" and "Device Tags > Un-tag devices" window still working if user lost access to the device Embedded Core version: 2.2.3 Migration warnings: On Telcosys T-Marc devices, CLI mode classification was changed. What was previously "Enable mode" has now become "Configure mode". If you have Config Push presets with "Require 'enable' mode" set, you need to also check "Require 'configure' mode" to ensure the same behavior as before 2.2.3. Known issues: ISSUE: "Re-discover affected devices when Ports or Connectors change" Advanced Settings option does not work WORKAROUND: none STATUS: issue scheduled for fixing ISSUE: "Stop" in Config Push does not work WORKAROUND: none STATUS: issue scheduled for fixing ISSUE: Some screens in Unimus show time in server's time zone, others in client's (browser's) time zone WORKAROUND: none, issue only relevant if client has different time zone than server STATUS: we are debating on how to fix this - will likely create a setting to select which TZ should be used = Version 2.2.2 = Features: Administrator-type accounts can now Tag themselves with any Tags in "User Management > Device Access" - prevents loss of access for admins Added fallback to in-memory search for "Config Search > Regex" if the DB engine doesn't support provided regex Device Variable values can now start with any character (previously only alphanumeric) Added the option to configure email client read/write timeouts Added support for: - Cambium cnMatrix switches - Extreme VX wireless controllers - FibroLan µFalcon - older Siklu EtherHaul devices - Sophos switches Fixes: Fixed users could not log in through Radius AAA if their passwords didn't meet Unimus internal complexity requirements Fixed Unimus did not work on Tomcat (running the .war distribution was not possible) Fixed broken / non-functional horizontal scroll bar in some tables Fixed users that were created as non-Admin could not access the "System" screen even after becoming Admins Fixed Obserium NMS Sync presets required a group ID, even tho it was supposed to be optional Fixed "API tokens > Copy to clipboard" did not work on Safari Fixed unable to start Network Scan while Config Push was running (and vice-versa) Fixed "User management > Device access" would not load under specific circumstances Fixed unable to use specific characters for Device Variable names and values Fixed sorting in "Mass config Push -> Output Groups" was broken Fixed sorting on bound / used columns in "Credentials > CLI mode change password" was broken Fixed closing the "Devices > Edit" window would not closed its child windows (for example Binding windows would stay open) Fixed performance degradation in "Device > Edit > Bind Credentials" window under specific circumstances Fixed performance degradation in "Device > Edit > Bind CLI mode change password" windows under specific circumstances Fixed table loading indicator could remain visible after specific actions Fixed searching in table while it was still loading data could thrown an exception Fixed trying to delete a Tag could throw exceptions in specific cases (Tag was properly deleted, UI/UX issue only) Fixed tagging / untagging devices / Zones would not update device counts for the Tag in the Device Tags table Fixed not possible to open the "Comments" window from "Device > Edit > Bind Credentials" Fixed other minor UI and UX issues, non working concurrent modification updates, and other non-significant UI edge cases Fixed MikroTik backups could contain the prompt and the echo of the backup command Fixed specific Cisco IOS-XR devices could be wrongly discovered as Cisco SMB devices Fixed Config Push would not collect command output properly on slow MikroTik devices Fixed output grouping in Config Push could not work properly for MikroTik devices Fixed concurrent changes to settings were not properly reflected for other users also currently on the screen in: - "User Management > Radius" settings - All "Notifications" screen settings - "Other settings > Retention" settings - "Other settings > Advanced system settings" Security fixes: Close currently opened "Device Tags" window if user lost access to the device Fixed users already on "Config Search" screen could see Tags listed even after they lost access to them (Search results were properly secured) Embedded Core version: 2.2.2 Known issues: ISSUE: "Re-discover affected devices when Ports or Connectors change" Advanced Settings option does not work WORKAROUND: none STATUS: issue scheduled for fixing ISSUE: "Stop" in Config Push does not work WORKAROUND: none STATUS: issue scheduled for fixing ISSUE: Some screens in Unimus show time in server's time zone, others in client's (browser's) time zone WORKAROUND: none, issue only relevant if client has different time zone than server STATUS: we are debating on how to fix this - will likely create a setting to select which TZ should be used = Version 2.2.1 = Features: Improved table behavior and data loading with high latency Fixes: Fixed failing DB upgrade to 2.2 in specific cases Fixed wrong variable could be substituted for devices in Config Push in specific cases Fixed "Config Search > Regex Search" did not work in specific cases Fixed errors in Config Push could completely break the UI for the user running the push Embedded Core version: 2.2.1 Known issues: ISSUE: "Re-discover affected devices when Ports or Connectors change" Advanced Settings option does not work WORKAROUND: none STATUS: issue scheduled for fixing ISSUE: "Stop" in Config Push does not work WORKAROUND: none STATUS: issue scheduled for fixing ISSUE: Some screens in Unimus show time in server's time zone, others in client's (browser's) time zone WORKAROUND: none, issue only relevant if client has different time zone than server STATUS: we are debating on how to fix this - will likely create a setting to select which TZ should be used = Version 2.2.0 = Features: Added option to set UI session timeout (example "-Dserver.servlet.session.timeout=1h") Updated NetXMS client library to latest version (4.0.2156) Added additional built-in Backup Filters for FortiOS devices Added missing search in Config Mode Password binding window (Devices > Edit) Unmanaged devices are now displayed with Italic font in "Backups" screen (same as in "Devices") Added support for device selection menus on Cisco IOS Added support for CLI sections in FortiOS Improved Huawei VRP driver compatibility Improved detection and grouping of invalid commands in Config Push Reordered buttons on the Devices screen into logical groups (better UX) New Device Variables feature for Config Push - Variables can be defined for devices in the Device screen - both single and multi device variables edit are supported - Variables can be used in Config Push in the "${variable_name}" format - more info: https://wiki.unimus.net/display/UNPUB/Device+Variables Added new APIv3: - implemented new v3 API, exposing functionality currently missing in APIv2 - currently available endpoints: "Jobs", "Zones", "Tags", "Credentials", "CliModeChangePasswords" - API tokens now have a new "Allow access to credentials" checkbox - please check http(s)://your_unimus_address/api/v3/ui for new built-in API docs - APIv2 will remain functional for the foreseeable future Improvements to API Token management: - added "Description" to API tokens - API tokens now have a new "Allow access to credentials" checkbox - added an "Edit" button for API tokens Mass Config Push is now available over APIv3: - added an "API Jobs" tab to Config Push if any API jobs exist - new retention settings for API Push Job history - see above section for details on APIv3 Performance improvements: - general improvements across the application due to DB structure and data access improvements - substantial performance improvements in high-concurrency environments due to JDBC datasource change - Config Search has been offloaded to the database (as required per DB engine), bringing much better performance - optimized job initialization time (10x faster when running jobs on 5.000 devices) - a single Unimus instance can now handle 120.000 devices with full discovery + backup on 120k devices in 2 hours 45 minutes - UI component responsiveness massively improved (for example, select all on 120k objects in the UI now takes 8 seconds, from 3 minutes previously) - with 120.000 devices in Unimus, all screens now load in under 10 seconds max (average screen load at 2 seconds) Security improvements: - performed an internal security audit of Unimus in advance of full Penetration Testing - more info on found and fixed issues in the "Security fixes" section - updated user password hashing algorithm to Argon2 (previously Bcrypt2 was used) - existing user passwords will be migrated on first successful login - Unimus 2.2.0 will undergo a full pentest cycle, results will be published publicly on our Blog Optimization of device connection count during Discovery: - only open a single CLI session when only a single credential is available for a device - applies when credential discovery is not needed due to Credential Binding - more info: https://wiki.unimus.net/display/UNPUB/Discovery Rewrite of MikroTik RouterOS driver: - performance increases, average discovery on ROS down to ~9 seconds (from 21 seconds) - added handling for new CLI behaviors introduced in latest ROSv6 versions - added support for ROSv7 Added support for: - ArubaOS v6 - DrayTek VigorSwitch - Engage IPTube - FiberStore Campus switches - Hatteras / Overture Networks - Huawei USG - JunOS EVO - MikroTik RouterOS 7 - Planet XGS switches - other various Planet switches - Ubiquiti Dream Machine (UDM) - Ubiquiti LTU / LTU-Pro Fixes: Fixed a memory leak if a Core connection connected and disconnected frequently Fixed wrong Running Job state could be set on devices during heavy concurrency operations Fixed job history records would not be created for devices with extremely long addresses Fixed a running Network Scan not being stopped if its Preset was deleted Fixed description missing in Mode Change Password binding (Devices > Edit) Fixed running job state could be reverted to a wrong state when Managing / Unmanaging devices while a job was running Fixed select all / deselect all and the selection model in general could break in the "Device credentials" table Fixed moving devices between Zones could cause the Zone Number to update even if device was not moved due to address conflict Fixed changing a user's role to visually break the Backups screen if the affected user was already on it Fixed possibility to add Comments to deleted objects if the Comment window was opened while object was deleted Fixed actions buttons not working properly in "Backups > Configuration" in specific cases Fixed wrong time formatting in "Use management > System access history > Session end" (values were correct in DB) Fixed "Other settings > Per-Tag connectors" would not properly show all configured ports for a connector Fixed attempting to remove all Users would throw an exception (will now properly remove all users other than yours) Fixed the Zones screen not properly refreshing when specific changes were done to Zones by another user Fixed select all on tables with extremely large amounts of objects could causing loading for a very long time Fixed enabling "Show all passwords" in the "CLI mode change passwords" table could cause bad behavior in the "Device credentials" table Fixed search in "Import history jobs" did not work Fixed the "port" field being formatted wrongly in the "Notifications > Email" screen Fixed changing a user's role to duplicate the Theme selector on the Dashboard if the affected user was already on it Fixed Credentials screen did not live-update changes to counters when credentials were Bound / Unbound by another user Fixed "Basic import > CSV file import" could throw exceptions to the UI when an invalid CSV file was provided Fixed possibility to add Device Access restriction without selecting and account, which resulted in an exception Fixed Comment icon column in the Schedules screen was not properly sized Fixed rare scenarios where upgrade from 2.0 or 2.1 to latest versions could fail Fixed possible invalid input in "Notification settings > Diff before and after lines" Fixed multiple rare errors on concurrent operation attempts on already deleted objects during multi-user workflows Fixed multiple other minor UI and UX issues and missing live value changes during multi-user workflows Fixed discovery failing on some models of Adtran TA Fixed discovery failing on JunOS-EVO devices Fixed discovery failing to recognize newer Planet switch types Fixed Config Push on MikroTik RouterOS could fail on specific commands with long output Fixed output formatting in Config Push on some MikroTik RouterOS versions could be broken Fixed backup could contain some extra unwanted data on some MikroTik RouterOS versions Security fixes: Completely removed log4j library due to multiple exploits that were identified in this library Log out all other user's sessions if a user changes their password (other than the session changing the password) Log out all sessions of a user if their password is changed by another Administrator user Users logged out due to session timeout are redirected to the Login screen instead of just an overlay on their last screen Fixed user could remove Backup Filters applied to Tags the user didn't have access to Fixed users could re-run Push presents from output group context menu even if they didn't have access to do this Close currently opened "Show password" popups in the Credentials and "Device > Info" screens when a password is set to "High security mode" Close currently opened "Show password" popups in the Credentials and "Device > Info" screens when a user's role is changed to READ-ONLY Fixed Backups screen would not remove access to already opened device backups if access to a device was lost Fixed users without access to the Default Zone could still add devices through "Network Scan" Changed APIv2 to no longer expose credential passwords through Device endpoints (there was no way to control this), use APIv3 for credential access Fixed multiple instances of "live" access changes not working (screen change / reload was required to apply new access restrictions): - for all affected screens affected data will be added / removed immediately after accessibility is changed now - fixed Dashboard not listening to live device access changes - fixed Zones not listening to live access changes - fixed "Mass Config Push > Targets" not listening to live device access changes - fixed "Mass Config Push > Output groups" not listening to live device access changes - fixed "Other settings > Per-Tag connectors" not listening to live access changes - fixed Devices screen not listening to Zone-based device Tag live access changes (Tag propagations to Devices from Zones) - fixed "Basic import" not listening to live Zone access changes Embedded Core version: 2.2.0 Known issues: ISSUE: "Re-discover affected devices when Ports or Connectors change" Advanced Settings option does not work WORKAROUND: none STATUS: issue scheduled for fixing ISSUE: "Stop" in Config Push does not work WORKAROUND: none STATUS: issue scheduled for fixing ISSUE: Some screens in Unimus show time in server's time zone, others in client's (browser's) time zone WORKAROUND: none, issue only relevant if client has different time zone than server STATUS: we are debating on how to fix this - will likely create a setting to select which TZ should be used = Version 2.1.4 = Security fixes: Fixed security issues caused by the CVE-2021-44228 vulnerability Embedded Core version: 2.1.4 Known issues: ISSUE: "Re-discover affected devices when Ports or Connectors change" Advanced Settings option does not work WORKAROUND: none STATUS: issue scheduled for fix in next version ISSUE: "Stop" in Config Push does not work WORKAROUND: none STATUS: issue scheduled for fix in next version ISSUE: Some screens in Unimus show time in server's time zone, others in client's (browser's) time zone WORKAROUND: none, issue only relevant if client has different time zone than server STATUS: we are debating on how to fix this - will likely create a setting to select which TZ should be used = Version 2.1.3 = Features: Added option to disable full listing of failed devices in notifications (if disabled, will only show count) Large improvements for loading speed of the "Mass Config Push" screen with large number of presets and results Improvements to in-application notification popups (better formatting, consistency, etc.) Improvements to formatting and consistency of external notifications (Slack, Email, etc.) Improved built-in dynamic backup filters for IBM / Lenovo RackSwitch The "Backup now" button is now disabled for Unmanaged devices on the "Backups" screen Added support for MikroTik default configuration wizard (will accept defaults if asked to) Added support for MikroTik "change your password" prompts added in latest RouterOS versions (will continue login without changing password) Improved logging during discovery (will no longer log mode change failures during discovery, as these are expected) Improved handling for UBNT airOS devices with specific firmware versions (due to airOS bug) Added support for password input in Config Push when password is echoed back with asterisks Added option of including list of filtered devices (for example Unmanaged) in job result notifications: - will include full listing of filtered devices in all notifications if enabled - new options in "Notifications > Advanced notification settings" control if full list is sent Added support for: - more variants and new models of Cisco SMB switches - OpenWRT - SAF Tehnika Lumina Fixes: Fixed PRTG importer not working in some cases Fixed LibreNMS importer not working if group names contained spaces Fixed API remove device endpoint not working Fixed issues with migration from older v2 versions if LibreNMS importer was used Fixed issues with migration from old v1 versions when migrating directly to v2.1 Fixed issue with Job Status column not properly updating when a manual backup was executed in specific cases Fixed wrong credential type being displayed for "Username-only" credentials (display issue only) Fixed wrong data in "Show usage" for "Credentials > CLI mode change passwords" when using binding Fixed "Show usage" not being possible for credentials that were only used for binding (had no discovered devices) Fixed comments for objects could not be loaded if more than 5 comments were present on an object Fixed unable to close an open preset in Mass Config Push without first switching to its tab Fixed Config Push preset became unusable if Advanced Push Settings were deleted Fixed buttons in "Credentials" screen staying enabled and referencing a deleted entity after deleting a credential Fixed a missing newline in Slack notifications in discovery result notifications Fixed various minor UI / UX issues and inconsistencies Fixed $[no-wait] Config Push modifier could not work in specific cases Fixed backup would fail on specific UBNT airOS versions due to an airOS bug Fixed an issue where jobs could fail on heavily loaded devices or devices that took very long out send command output Fixed Config Push could fail with wrong error in rare cases when connection to device failed Security fixes: Fixed the "/#!system" screen being partially available without authentication: - this exposed some system details (such as schedules and runtime state) to unauthenticated users - unauthenticated users could enable debug logging for runtime components - this could NOT be used to gain access to any data inside your Unimus instance by unauthenticated users - this could NOT be used to perform any attacks nor data exfiltration by unauthenticated users Embedded Core version: 2.1.3 Known issues: ISSUE: "Re-discover affected devices when Ports or Connectors change" Advanced Settings option does not work WORKAROUND: none STATUS: issue scheduled for fix in next version ISSUE: "Stop" in Config Push does not work WORKAROUND: none STATUS: issue scheduled for fix in next version ISSUE: Some screens in Unimus show time in server's time zone, others in client's (browser's) time zone WORKAROUND: none, issue only relevant if client has different time zone than server STATUS: we are debating on how to fix this - will likely create a setting to select which TZ should be used = Version 2.1.2 = Fixes: Fixed issues with migration from older versions on PostgreSQL Fixed unable to delete credentials in certain cases Embedded Core version: 2.1.2 Known issues: ISSUE: API remove device endpoint does not work WORKAROUND: none STATUS: issue scheduled for fix in next version ISSUE: PRTG NMS Sync does not work WORKAROUND: none STATUS: issue scheduled for fix in next version ISSUE: Notifications don't contain a list of addresses of filtered devices (no connectors, Core offline, etc.) WORKAROUND: none STATUS: issue scheduled for fix in next version ISSUE: "Re-discover affected devices when Ports or Connectors change" Advanced Settings option does not work WORKAROUND: none STATUS: issue scheduled for fix in next version ISSUE: "Stop" in Config Push does not work WORKAROUND: none STATUS: issue scheduled for fix in next version ISSUE: Some screens in Unimus show time in server's time zone, others in client's (browser's) time zone WORKAROUND: none, issue only relevant if client has different time zone than server STATUS: we are debating on how to fix this - will likely create a setting to select which TZ should be used = Version 2.1.1 = Features: Updated NetXMS client library to latest version (3.9.229) Performance improvements in Config Push (very large Push presets now behave without issues) Improved search by device vendor / device type in "Devices" screen Added "Credentials > Edit" option Added "Credentials > CLI mode change password > Edit" option Added support for new authentication options to devices: - added "Username only" authentication support - added "Password only" authentication support - includes other internal improvements related to device login handling Added support for: - more variants of Cambium ePMP devices - more variants of FiberHome devices - MicroSens Switches Fixes: Fixed when many jobs are running and you scroll or re-order the Devices table, some rows can be duplicated and/or malformed Fixed jobs could hang and devices could be stuck running a job forever in certain cases Fixed Device ownership (Owner) is not properly set when using Basic Import Fixed errors trying to navigate to the "Zones" screen in certain cases Fixed opening a Config Push preset is slow and locks the UI session with large results (1000+ devices) Fixed search in Config Push results is slow and locks the UI session with large results (1000+ devices) Fixed searching in Push results doesn't update "Device in output group" table Fixed search by device vendor / type not working under certain circumstances Fixed already logged in user gets 'Access denied' when they manually navigate to '/' Fixed sorting by Job Status in "Devices" table does not work properly if Unmanaged devices are present Fixed moving many devices across Zones (for example "Move to Default Zone" on Zone delete) could fail Fixed Updating device via REST APIv2 results in Internal server error Fixed 'Require "enable" mode' is not automatically checked when 'Require "configure"' is checked during Config Push preset creation Fixed "Config Push > Run now" now properly clears all result tables Fixed APIv2 calls to the "devices" endpoint using PATCH don't work Fixed forgotten password recovery would not work in certain situations Fixed trying to show old history job result details would show an error Fixed PRTG import could fail when specific characters were present in username or password Fixed data put into HTTP query parameters are not escaped in NMS Sync importers that use HTTP protocols Fixed in HA deployments, a Zone Access Key could be changed on other instances if a Zone was edited on another instance Fixed multiple UI / UX issues in Config Push and Config Push > Advanced Settings Fixed irrelevant errors in the log file during application start Fixed errors in the log file when the application is turned off during Deploy Wizard Fixed jobs failing on Cambium ePMP devices in specific cases Fixed backups failing on FiberHome devices in specific cases Security fixes: Fixed "Show all passwords" in "Devices > Info" would stay active until you left the "Devices" screen (instead of when the window was closed) Fixed multiple instances when a cleartext password could be printed to the log file (introduced in 2.1.0) Embedded Core version: 2.1.1 Known issues: ISSUE: API remove device endpoint doesn't work WORKAROUND: none STATUS: issue scheduled for fix in next version ISSUE: PRTG NMS Sync does not work WORKAROUND: none STATUS: issue scheduled for fix in next version ISSUE: Notifications don't contain a list of addresses of filtered devices (no connectors, Core offline, etc.) WORKAROUND: none STATUS: issue scheduled for fix in next version ISSUE: "Re-discover affected devices when Ports or Connectors change" Advanced Settings option does not work WORKAROUND: none STATUS: issue scheduled for fix in next version ISSUE: "Stop" in Config Push does not work WORKAROUND: none STATUS: issue scheduled for fix in next version ISSUE: Some screens in Unimus show time in server's time zone, others in client's (browser's) time zone WORKAROUND: none, issue only relevant if client has different time zone than server STATUS: we are debating on how to fix this - will likely create a setting to select which TZ should be used = Version 2.1.0 = Features: Added notifications if a Zone goes offline (can be configured in the "Notifications" screen) You can now select which Zone the "Basic import" imports devices into Config Push History (on the Dashboard) now shows which user ran the Push, or if it was scheduled Improved Diff performance (diffs with a large change-set could be very slow) Improved Import / NMS Sync handling - import/sync jobs are now queued, so a single job doesn't block you from queueing others You can now disable the Core connection listener if desired (if not using remote Cores) The "get" endpoints for "devices" in the API ("/api/v2/devices/...") now also return the status of the last device job "Sensitive data stripping" has been moved from "Other settings" to "Backups > Configuration" "Advanced settings" > "Discover un-discovered devices when new Credentials are added", "added" was changed to "added or bound" Improved Output Group matching in Mass Config Push Added new icons for Comments / Tags / Filters in all tables Added "unimus.core.tcp.connect-timeout" config option to control Core->Unimus connection timeout (default 5 seconds) You can now disable specific job types (Discovery, Backup, Scan, Config Push) if desired Added support for devices which ask "Configure from terminal?" when the "configure" command is sent On JunOS devices, "monitor stop" will be sent before backup to make sure logs are not present in backup Improved support for Adtran NetVanta devices Improved support for Datacom devices Improved support for ExtremeWare devices Improved support for Quanta devices New "Custom Backup Filters" feature: - you can create custom filtering rules on backups to filter any data you don't want inside backups - both completely deleting and/or replacing data for a filtered text are available - allows for creation of rules based on Tags, device vendors or device types - https://unimus.net/blog/backup-filters-unimus-210 "NMS Sync" is now configured using Presets, and now properly works with Zones - you can now define as many NMS Sync connections as you like - fully integrated with Zones, you can now use NMS Sync to sync devices to multiple Zones - existing configuration automatically migrated to Presets - https://unimus.net/blog/nms-sync-improvements-unimus-210 Ability to use the NetXMS Agent as a proxy for Zones: - you can use a NetXMS Agent as a poller for an Unimus Zone instead of an Unimus Core - if you use NetXMS, you no longer need to deploy both a NetXMS Agent and an Unimus Core for the Zone - https://wiki.unimus.net/display/UNPUB/NetXMS+Agent+as+Zone+Proxy New "Advanced Settings" feature for Mass Config Push: - allows overriding credentials used to connect to devices by this Push Preset - allows overriding timeouts used in device communication by this Push Preset - allows settings the prompt matching mode used by this Push Preset - https://unimus.net/blog/config-push-advanced-settings-unimus-210 Unimus Core version is now checked by Unimus and shown in Zones - added versioning to the Core communication protocol - Unimus now checks if Cores are using a supported version during connection - Unimus will notify on the Dashboard if any "older" version Cores are connected - Core version is now shown in the "Zones" screen (if the Zone is using an Unimus Core as its proxy) Added support for: - Adit 600 series - Brocade G620 - Cisco FirePOWER for AWS - Datacom DmOS devices - Datacom DmSwitch devices - D-Link DXS 5000 series - Extreme 200 series - Extreme VOSS / VSP OS - Extreme Wing AP 510 - Fiberhome devices - Fiberstore (FS.com) Campus switches - Fortinet FortiWeb - IBM Flex System Fabric - IBM RackSwitch - Netgear GSM switches - Nomadix EG devices - Nomadix NSE devices - Siklu Terragraph - Ubiquiti airFiber 60 5G - Ubiquiti airFiber 60 LR - Ubiquiti GigaBeam - ZTE ZXA devices Fixes: Fixed Slack notifications not working with new Slack Apps (changes in Slack API for new Apps) Fixed issue when writing into an input box, a desync may occur that caused a character to get lost, and the cursor to jump to the start of the input box Fixed built-in backup filtering in rare cases could add many "<--filtered-->" text instances into a backup Fixed config change notification not sent if a backup was pushed over the API Fixed API limited max page size to 50, even if user specified a much larger size Fixed Import and/or NMS Sync could get stuck if there was an internal error during import/sync Fixed Unimus could stop working on HSQL after a long period of time if data retention cleanup settings were enabled Fixed running discovery/backups on all devices over the API did not work (single device requests worked properly) Fixed Import and NMS Sync running UI notifications could get lost when moving around the application Fixed wrong Config Change Notifications on specific Cisco IOS versions Fixed wrong Config Change Notifications when a few specific config items were present on F5 devices Fixed "Backup it very long, do you want to continue?" warning boxes not working properly Fixed errors when trying to add extremely long passwords (over 130) characters in the "Credentials" screen Fixed inconsistent case sensitivity in Config Search (normal matching is now always CI, regex matching is done per regex settings) Fixed Config Search showing whole backup when Context Size was set to 0 Fixed multiple edge-case issues and errors in Config Search Fixed multiple edge-cases where a device address with a whitespace was not properly trimmed Fixed checkbox and selection not being properly reloaded after refresh (F5) Fixed "last run" value not being updated in a Config Push preset in some circumstances Fixed multiple UI issues (element overflows, wrong element sizing on small resolutions) in Config Push Fixed "$[no-wait]" not properly working in Config Push under certain circumstances Fixed Discovery failing on newer firmware version of HP/HPE ProCurve devices Fixed devices that used "enter" as pagination not working over Telnet Fixed jobs failing on newer Adtran NetVanta devices Fixed jobs failing on a few specific HP Comware devices Fixed jobs failing on a few specific devices over Telnet Fixed jobs failing on specific configurations of ExtremeWare devices Security fixes: Upgraded the frontend framework to the latest LTS version Upgraded the backend framework to the latest LTS version Fixed not properly invalidating all sessions of a logged-in account if it was removed (sessions would work until session timeout) Fixed users being able to see Tags they did not have access to in Config Search (only list of Tags affected, search results were properly secured) Embedded Core version: 2.1.0 Known issues: ISSUE: When many jobs are running, and you scroll or re-order the Devices table, some rows can be duplicated and/or malformed WORKAROUND: table re-render fixes this - scroll out and back in, or reorder again and elements will rerender properly STATUS: issues in framework after upgrade to latest LTS - we are investigating how to fix :( ISSUE: Opening a Config Push preset is slow and locks the UI session with large results (1000+ devices) WORKAROUND: none STATUS: issue scheduled for fix in next version ISSUE: Search in Config Push preset outputs is slow and locks the UI session with large results (1000+ devices) WORKAROUND: none STATUS: issue scheduled for fix in next version ISSUE: Device ownership (Owner) is not properly set when using Basic Import WORKAROUND: none STATUS: issue scheduled for fix in next version ISSUE: An API call to the "devices" endpoint using PATCH doesn't work WORKAROUND: none STATUS: issue scheduled for fix in next version ISSUE: Already logged in user gets 'Access denied' when they manually navigate to '/' WORKAROUND: none STATUS: issue scheduled for fix in next version ISSUE: When moving many devices across Zones, an error can occur WORKAROUND: none, retry the move again STATUS: issue scheduled for fix in next version ISSUE: Notifications don't contain a list of addresses of filtered devices (no connectors, Core offline, etc.) WORKAROUND: none STATUS: issue scheduled for fix in next version ISSUE: Config push creation - 'Require "enable" mode' is not automatically checked when 'Require "configure"' is checked WORKAROUND: none, works properly after preset has already been created STATUS: issue scheduled for fix in next version ISSUE: Data put into HTTP query parameters are not escaped in NMS Sync importers that use HTTP protocols WORKAROUND: none STATUS: issue scheduled for fix in next version ISSUE: Sorting by Job Status in Devices does not work properly if Unmanaged devices are present WORKAROUND: none STATUS: issue scheduled for fix in next version ISSUE: Some screens in Unimus show time in server's time zone, others in client's (browser's) time zone WORKAROUND: none, issue only relevant if client has different time zone than server STATUS: we are debating on how to fix this - will likely create a setting to select which TZ should be used = Version 2.0.12 & 2.0.13 = Hotfix releases: Fixed DB migration failing when upgrading from 1.x.x directly to latest 2.x.x version Fixed DB migration failing on HSQL if specific Allied Telesis (AlliedWare) devices were present in the system Fixed jobs failing on Palo Alto and PA Panorama in specific cases Please refer to the 2.0.11 section for the full Changelog = Version 2.0.11 = Features: Added support for _ (underscore) as part of hostnames for devices Updated NetXMS client library to latest version (3.8.166) Improve system stability when using HSQL database Free allocated but no longer used disk space on shutdown when using HSQL Mass Config Push and Network Scan now properly support high resolution and widescreen displays New features for Mass Config Push: - new Universal Search feature for push results (searches devices, descriptions and / or all push outputs) - Config Push can now be used with Tags - New "Targets" feature allowing to specify Tags and / or Devices for Push Preset - Push Preset will be in read-only mode if user doesn't have access to all devices in the preset - https://unimus.net/blog/new-config-push-features-unimus-2011 Added support for: - A10 Networks AX series - Aruba Mobility Conductor - Aruba Mobility Controller - more variants of Aruba WLC (7xxx / 72xx / 9xxx) - Cisco FirePower for VMware - Datacom routers - Datacom switches - more variants of Eltext switches - Fortinet FortiExtender - Netgate Appliances with pfSense Plus - pfSense Plus Fixes: Fixed Config Push could pick a wrong device in Output Group "Rerun push" if multiple devices with same address existed in different Zones Fixed formatting issues with Palo Alto and Panorama output in long lines (200+ characters) Fixed discovery failing on newer Aruba WLAN controllers Fixed discovery failing on Eltex MES1xxx series Fixed a few specific Exinda devices that were failing discovery Fixed some versions of Cisco Firepower / FTD not being supported Fixed wrong Config Change Notifications on specific configurations of F5 BIG-IP / BIG-IQ Security fixes: Fixed users with limited Device Access being able to start a Push even if they didn't have access to all devices in the Push Preset Fixed deleting a user would not invalidate the user's session if currently logged in, and the deleted user could use some (but not all) features of Unimus until logout or timeout Embedded Core version: 2.0.11 Migration warnings (v1 -> v2): Weekly schedules were running one day earlier than configured. We have migrated existing schedules to the day they were running on - which was different than what was configured. If you were using weekly schedules, please review your schedule configuration. Slack integration has been migrated from a Webhook to a Slack App. This is due to the addition of sending Configuration Change Notifications over Slack. The Webhook API did not support sending Snippets, which Config Notifications require. You will need to setup a new Slack App for Unimus, and reconfigure Unimus Slack sender in "Notifications > Slack". For some devices, there may be a single config-change notification after the first backup following the 2.0.0 upgrade. This will show a change occurred inside a comment or a non-config line. This is expected due to changes to the dynamic (runtime) backup content filtering mentioned in the "Features" section. This is caused by changes to what Unimus considers as dynamic (runtime) data inside backups, and you can safely ignore this change notification. Known issues: ISSUE: with higher latency, when writing text into an input box, a desync may occur that causes a character to get lost, and the cursor to jump to the start of the input box WORKAROUND: none STATUS: we are investigating = Version 2.0.10 = Features: Added support for TP-Link devices that shorten their prompt when in Configure mode Improved compatibility with newer firmwares of some Ubiquiti devices Improved job result and log messages on specific devices that required enable mode for Backup, but it was not discovered during Discovery Added an Unattended / Silent install support for all installers - both Unimus and Core now support silent installation - supported added in Linux and Windows installers - use the "-u" parameter to install silently Added support for: - 6WIND Turbo Router - A10 Networks vThunder series - Eltex ME routers - Eltex MES switches - Eltex ESR gateways - Extreme MLXe - Netgear ProSafe M-series switches (M4300, etc.) Fixes: Fixed device model disappearing from Devices table after un-managing a device Fixed rare job failure on devices that output the 1st page of data extremely fast Fixed discovery failing on Extreme MLXe devices (formerly Brocade MLXe) Fixed discovery failing on Avaya / Extreme ERS with disabled banner Fixed discovery failing on some TP-Link switches when prompt was too long Fixed wrong Config Change Notifications on some versions of Cisco IOS Fixed discovery failing on newer firmwares of some Ubiquiti devices Fixed discovery failing on some versions of Cisco ASA TDM Fixed backup failing on some versions of Cisco ASA TDM Embedded Core version: 2.0.10 Migration warnings (v1 -> v2): Weekly schedules were running one day earlier than configured. We have migrated existing schedules to the day they were running on - which was different than what was configured. If you were using weekly schedules, please review your schedule configuration. Slack integration has been migrated from a Webhook to a Slack App. This is due to the addition of sending Configuration Change Notifications over Slack. The Webhook API did not support sending Snippets, which Config Notifications require. You will need to setup a new Slack App for Unimus, and reconfigure Unimus Slack sender in "Notifications > Slack". For some devices, there may be a single config-change notification after the first backup following the 2.0.0 upgrade. This will show a change occurred inside a comment or a non-config line. This is expected due to changes to the dynamic (runtime) backup content filtering mentioned in the "Features" section. This is caused by changes to what Unimus considers as dynamic (runtime) data inside backups, and you can safely ignore this change notification. Known issues: ISSUE: with higher latency, when writing text into an input box, a desync may occur that causes a character to get lost, and the cursor to jump to the start of the input box WORKAROUND: none STATUS: we are investigating = Version 2.0.9 = Features: Improved debug logs when a job fails due to a runtime error Updated NetXMS client library to latest version (3.6.314) Added more detailed logging to Config Push - available in "debug" level - https://wiki.unimus.net/display/UNPUB/Detailed+logging+for+Config+Push+jobs Added support for: - ADVA MasterOS switches - Avaya ERS - Extreme ERS - Meinberg LANTIME - MRV MasterOS switches - Palo Alto Panorama - Perle IOLAN STS series Fixes: Fixed Config Push could not work with Remote Cores (issue introduced in 2.0.6) Fixed Config Push would sometimes not properly remove pagination (--More--) from outputs Fixed incorrect config change notifications for dynamic hashes on Aruba Wireless Controllers Fixed incorrect config change notifications for dynamic hashes on F5 BigIP / BigIQ Fixed rare incorrect config change notifications for Comware-based devices Fixed debug options (Debug Mode) not properly resetting to default after restart Unified formatting of all notification messages (fixed minor inconsistencies) Fixed some models of Planet Switches not being discovered Fixed some models of ZyXel IES DSLAMs not being discovered Resolved issues with special characters being replaced by '?' under specific circumstances - we fixed various Unimus components which could not properly render special characters - the DB used by Unimus must also properly support special characters - https://wiki.unimus.net/display/UNPUB/Common+first-launch+issues#Commonfirst-launchissues-Unimusdoesn'tproperlydisplayspecialcharacters Embedded Core version: 2.0.9 Migration warnings (v1 -> v2): Weekly schedules were running one day earlier than configured. We have migrated existing schedules to the day they were running on - which was different than what was configured. If you were using weekly schedules, please review your schedule configuration. Slack integration has been migrated from a Webhook to a Slack App. This is due to the addition of sending Configuration Change Notifications over Slack. The Webhook API did not support sending Snippets, which Config Notifications require. You will need to setup a new Slack App for Unimus, and reconfigure Unimus Slack sender in "Notifications > Slack". For some devices, there may be a single config-change notification after the first backup following the 2.0.0 upgrade. This will show a change occurred inside a comment or a non-config line. This is expected due to changes to the dynamic (runtime) backup content filtering mentioned in the "Features" section. This is caused by changes to what Unimus considers as dynamic (runtime) data inside backups, and you can safely ignore this change notification. Known issues: ISSUE: with higher latency, when writing text into an input box, a desync may occur that causes a character to get lost, and the cursor to jump to the start of the input box WORKAROUND: none STATUS: we are investigating = Version 2.0.8 = Fixes: Fixed jobs failing on HP/HPE/Aruba ProVision/ProCurve/ArubaOS Embedded Core version: 2.0.8 Migration warnings (v1 -> v2): Weekly schedules were running one day earlier than configured. We have migrated existing schedules to the day they were running on - which was different than what was configured. If you were using weekly schedules, please review your schedule configuration. Slack integration has been migrated from a Webhook to a Slack App. This is due to the addition of sending Configuration Change Notifications over Slack. The Webhook API did not support sending Snippets, which Config Notifications require. You will need to setup a new Slack App for Unimus, and reconfigure Unimus Slack sender in "Notifications > Slack". For some devices, there may be a single config-change notification after the first backup following the 2.0.0 upgrade. This will show a change occurred inside a comment or a non-config line. This is expected due to changes to the dynamic (runtime) backup content filtering mentioned in the "Features" section. This is caused by changes to what Unimus considers as dynamic (runtime) data inside backups, and you can safely ignore this change notification. Known issues: ISSUE: with higher latency, when writing text into an input box, a desync may occur that causes a character to get lost, and the cursor to jump to the start of the input box WORKAROUND: none STATUS: we are investigating ISSUE: special characters can be replaced by '?' under specific circumstances WORKAROUND: none STATUS: currently no ETA, framework limitations = Version 2.0.7 = Features: Failed and successful login log messages now include the IP of login attempt Login log messages now support proxy headers to properly report login attempt IP address Added support for devices which ask "Press any key to continue" twice in a row during login Added support for devices which expect a key press to continue ("Press CTRL+Y to continue"), and then output a banner Added support for devices which output a custom message and ask for confirmation ("Accept (y/n)?") Added support for devices which ask "Do you want to change expired password?" during login Default inter-connection delay value increased to 500ms Added support for: - Aviat WTM4200 Radios - Dell X series switches - Fortinet FortiWLC - FreeNAS - IBM RackSwitch - InfoBlox - Mellanox InfiniBand switches - Perle IOLAN - TrueNAS - Ubiquiti EdgeSwitch 10X Fixes: Fixed Unimus stuck on "License synchronization error" screen, which required Unimus restart Fixed Unimus not reconnecting to the DB if the DB server went down until a user tried to log in Fixed newly imported devices not being scheduled for jobs if there were not devices in Unimus before import Fixed newly created credentials not being used in discovery when "Rediscovered unknown devices when new credentials are added" is enabled Fixed unprintable characters in email notifications Fixed wrong config change notifications on Nokia TimOS/SROS with bof ("show bof" possible) Fixed more possible wrong Config Change notifications on FortiOS (FortiGate, etc.) Fixed minor UX issues in the Deployment Wizard, Config Search and NMS Sync Fixed Telnet credential discovery not testing any other credentials after the first failed credential Fixed 3COM/HP/HPE ComWare devices not being discoverable if prompt contained only numbers Fixed specific unprintable characters being saved as part of backups Fixed OPNsense not discovering under specific circumstances (prompt contained tab) Fixed more Foundry/Brocade switches not discovering on specific hardware types Embedded Core version: 2.0.7 Migration warnings (v1 -> v2): Weekly schedules were running one day earlier than configured. We have migrated existing schedules to the day they were running on - which was different than what was configured. If you were using weekly schedules, please review your schedule configuration. Slack integration has been migrated from a Webhook to a Slack App. This is due to the addition of sending Configuration Change Notifications over Slack. The Webhook API did not support sending Snippets, which Config Notifications require. You will need to setup a new Slack App for Unimus, and reconfigure Unimus Slack sender in "Notifications > Slack". For some devices, there may be a single config-change notification after the first backup following the 2.0.0 upgrade. This will show a change occurred inside a comment or a non-config line. This is expected due to changes to the dynamic (runtime) backup content filtering mentioned in the "Features" section. This is caused by changes to what Unimus considers as dynamic (runtime) data inside backups, and you can safely ignore this change notification. Known issues: ISSUE: with higher latency, when writing text into an input box, a desync may occur that causes a character to get lost, and the cursor to jump to the start of the input box WORKAROUND: none STATUS: we are investigating ISSUE: special characters can be replaced by '?' under specific circumstances WORKAROUND: none STATUS: currently no ETA, framework limitations = Version 2.0.6 = Features: Added support for "Enter Ctrl-Y to begin" question during login to device Fixes: Fixed "Device Output Log" file being recreated after deletion when logging was disabled by jobs started when logging was still enabled Fixed wrong Config Change notifications on Cisco IOS Fixed more wrong Config Change notifications on Nokia TiMOS Fixed wrong Config Change notifications on FortiOS (FortiGate, etc.) Fixed wrong Config Change notifications on SonicWall / SonicOS Fixed Cisco IOS-based devices not discovering in specific circumstances (introduced in 2.0.5) Fixed Aruba Mobility controller not discovering on specific hardware types Fixed Foundry/Brocade switches not discovering on specific hardware types Embedded Core version: 2.0.6 Migration warnings (v1 -> v2): Weekly schedules were running one day earlier than configured. We have migrated existing schedules to the day they were running on - which was different than what was configured. If you were using weekly schedules, please review your schedule configuration. Slack integration has been migrated from a Webhook to a Slack App. This is due to the addition of sending Configuration Change Notifications over Slack. The Webhook API did not support sending Snippets, which Config Notifications require. You will need to setup a new Slack App for Unimus, and reconfigure Unimus Slack sender in "Notifications > Slack". For some devices, there may be a single config-change notification after the first backup following the 2.0.0 upgrade. This will show a change occurred inside a comment or a non-config line. This is expected due to changes to the dynamic (runtime) backup content filtering mentioned in the "Features" section. This is caused by changes to what Unimus considers as dynamic (runtime) data inside backups, and you can safely ignore this change notification. Known issues: ISSUE: with higher latency, when writing text into an input box, a desync may occur that causes a character to get lost, and the cursor to jump to the start of the input box WORKAROUND: none STATUS: we are investigating ISSUE: special characters can be replaced by '?' under specific circumstances WORKAROUND: none STATUS: currently no ETA, framework limitations = Version 2.0.5 = Features: Added LibreNMS import connector (NMS Sync) Swapped backup range dates in Backups for easier navigation Historic Config Search now shows newest backups at the top Email notification sender with enabled TLS/SSL now requires TLS/SSL Added support for devices that include a command counter in device prompt Fixes: Fixed email notifications stopped working if email server didn't respond to outbound email Fixed Config Push notifications not when Network Scan notifications were disabled Fixed broken pagination in Unimus API Fixed historic Config Search not showing full backup range (only showed first backup retrieval time) Fixed wrong Config Change notifications on Nokia TiMOS Config Push will no longer force pagination on commands (fixes issues on Vyatta / VyOS and others) Fixed Citrix NetScaler not discovering on certain OS versions Fixed Cambium ePMP discovery not working (again...) Fixed Nokia OmniSwitch backup failing Embedded Core version: 2.0.5 Migration warnings (v1 -> v2): Weekly schedules were running one day earlier than configured. We have migrated existing schedules to the day they were running on - which was different than what was configured. If you were using weekly schedules, please review your schedule configuration. Slack integration has been migrated from a Webhook to a Slack App. This is due to the addition of sending Configuration Change Notifications over Slack. The Webhook API did not support sending Snippets, which Config Notifications require. You will need to setup a new Slack App for Unimus, and reconfigure Unimus Slack sender in "Notifications > Slack". For some devices, there may be a single config-change notification after the first backup following the 2.0.0 upgrade. This will show a change occurred inside a comment or a non-config line. This is expected due to changes to the dynamic (runtime) backup content filtering mentioned in the "Features" section. This is caused by changes to what Unimus considers as dynamic (runtime) data inside backups, and you can safely ignore this change notification. Known issues: ISSUE: when you delete the "Device Output Log" file in "Debug mode", any jobs that started before deletion, but finish after deletion will recreate the file and write their output to the file WORKAROUND: delete "Device Output Log" after all jobs finish / no jobs are running STATUS: issue scheduled for fix in 2.0.6 ISSUE: with higher latency, when writing text into an input box, a desync may occur that causes a character to get lost, and the cursor to jump to the start of the input box WORKAROUND: none STATUS: we are investigating ISSUE: special characters can be replaced by '?' under specific circumstances WORKAROUND: none STATUS: currently no ETA, framework limitations = Version 2.0.4 = Hotfix release: Fixed Config Change emails not properly rendering the change diff Please refer to the 2.0.3 section for the full Changelog = Version 2.0.3 = Features: Added a new warning box when displaying very large backups and diffs Added new help windows and more documentation for Mass Config Push Added a link to documentation for the Sensitive Data Stripping feature Zabbix importer (NMS Sync) now has options to configure which fields are pulled as device address and description Improved performance of diff generation - specially visible on large diffs Added Panopta importer (NMS Sync) Improved performance of all jobs - interaction with devices now uses less CPU Cumulus driver now requires access to 'root' ('sudo su') for backup (to have access to all config files) Cumulus driver will now retrieve files in '/etc/frr' during backup to save FRR config Improvements to debug logs - added logs to a few missing edge-cases in various places in the Core Adtran AOS driver will now switch the session to 'no events' mode before performing backup Mass Config Push improvements: - you can now send special / command characters (for example CTRL+X) in Config Push - you can now specify command submission behavior (if to send after a command or not) - you can now specify if Unimus waits for known output after each sent line - more at: https://wiki.unimus.net/display/UNPUB/Mass+Config+Push Added support for: - Arista vEOS - old Allied Telesis AlliedWare switch models - more variants of Dell PowerConnect switches - FiberStore FS3900 - Nokia ISAM (7363) - ZTE ZXA / ZXAN - ZyXel IES (MSC) Fixes: Fixed Config Search not displaying all results if there were multiple devices with same address in multiple Zones Fixed Cores disconnecting and not being able to connect back to Unimus until Unimus was restarted Fixed PRTG importer only importing a maximum of 500 items Fixed line overflow on diff line numbers (with large numbers) Fixed line overflow on Config Search line numbers (with large numbers) Fixed Config Search 'last valid date' being wrong - initial retrieval time instead of last valid time was used Fixed Config Search text being partially cut-off on the left side, line numbers were overlapping Fixed multiple other cosmetic UI inconsistencies (alignment issues, etc.) Fixed Telnet discovery failing on devices when there were SSH-key credentials available for the device Fixed not stripping "ip ftp password" on Cisco when Sensitive Data Stripping was enabled Fixed Cambium ePMP discovery not working Fixed Nokia ISAM / SROS / TiMOS discovery not working Fixed not properly removing device prompt in Config Push when command failed (caused Output Grouping to not work) Fixed backup failing (timing out) on devices with extremely large backups (looking at you Zhone) Fixed Config Push failing (or not grabbing all data) on devices with very similar pagination and prompt Fixed some versions of Alcatel-Lucent OmniSwitch failing Discovery (discovery would report an unsupported device) Fixed discovery not working on some specific older Juniper JunOS versions Fixed backup failing on WatchGuard - backup timeout was increased, as the default was too short Fixed logs (events) during backup on Adtran AOS being captures as a part of the backup Fixed not completely stripping pagination on some Aruba devices ('--' would remain in the config) Embedded Core version: 2.0.3 Migration warnings (v1 -> v2): Weekly schedules were running one day earlier than configured. We have migrated existing schedules to the day they were running on - which was different than what was configured. If you were using weekly schedules, please review your schedule configuration. Slack integration has been migrated from a Webhook to a Slack App. This is due to the addition of sending Configuration Change Notifications over Slack. The Webhook API did not support sending Snippets, which Config Notifications require. You will need to setup a new Slack App for Unimus, and reconfigure Unimus Slack sender in "Notifications > Slack". For some devices, there may be a single config-change notification after the first backup following the 2.0.0 upgrade. This will show a change occurred inside a comment or a non-config line. This is expected due to changes to the dynamic (runtime) backup content filtering mentioned in the "Features" section. This is caused by changes to what Unimus considers as dynamic (runtime) data inside backups, and you can safely ignore this change notification. Known issues: ISSUE: when you delete the "Device Output Log" file in "Debug mode", any jobs that started before deletion, but finish after deletion will recreate the file and write their output to the file WORKAROUND: delete "Device Output Log" after all jobs finish / no jobs are running STATUS: issue scheduled for fix in 2.0.4 ISSUE: with higher latency, when writing text into an input box, a desync may occur that causes a character to get lost, and the cursor to jump to the start of the input box WORKAROUND: none STATUS: we are investigating ISSUE: special characters can be replaced by '?' under specific circumstances WORKAROUND: none STATUS: currently no ETA, framework limitations = Version 2.0.2 = Features: Failed job indicator in the Devices table is now clickable - will show details of the failed job Added a new help screen to "Schedules > Add > CRON" explaining CRON formatting Unimus uses Improved handling of devices with timeout modifiers (Exinda, FortiOS, Ruckus, Zhone) Improved support for CTS FOS switches Added support for: - Arris E6000 CER - Brocade/Foundry/Ruckus FastIron Chassis - Brocade/Foundry/Ruckus NetIron Chassis - Huawei SmartAX (Integrated Access Software OLTs) - OPNsense - Ubiquiti EdgePower Fixes: Fixed session timeout not working in certain situations when browser tab is not closed Fixed accounts that don't have access to the Default Zone due to Tag-based access restrictions being able to use Importers Fixed not exporting all backups in "Export backups" when there were multiple devices with same addresses in multiple Zones Fixed Config Change notifications on Cisco IOS switches when only date and load changed Fixed Config Change Summary notification to behave the same as in v1 - a single summary will be sent again instead of sending per-device When a single Network Scan preset was running concurrently (Scheduler), it would incorrectly show its idle even when it was running Fixed Network Scan preset creation closing if the specified IP ranges were incorrect instead of highlighting the incorrect configuration Fixed UI overflow with long Tags in multiple screens and menus Fixed various other UI overflows and overlaps Fixed multiple migration issues from v1 -> v2 Fixed a rare case where backups could fail on devices that output VT100 control characters after pagination or after prompt Embedded Core version: 2.0.2 Migration warnings (v1 -> v2): Weekly schedules were running one day earlier than configured. We have migrated existing schedules to the day they were running on - which was different than what was configured. If you were using weekly schedules, please review your schedule configuration. Slack integration has been migrated from a Webhook to a Slack App. This is due to the addition of sending Configuration Change Notifications over Slack. The Webhook API did not support sending Snippets, which Config Notifications require. You will need to setup a new Slack App for Unimus, and reconfigure Unimus Slack sender in "Notifications > Slack". For some devices, there may be a single config-change notification after the first backup following the 2.0.0 upgrade. This will show a change occurred inside a comment or a non-config line. This is expected due to changes to the dynamic (runtime) backup content filtering mentioned in the "Features" section. This is caused by changes to what Unimus considers as dynamic (runtime) data inside backups, and you can safely ignore this change notification. Known issues: ISSUE: when you delete the "Device Output Log" file in "Debug mode", any jobs that started before deletion, but finish after deletion will recreate the file and write their output to the file WORKAROUND: delete "Device Output Log" after all jobs finish / no jobs are running STATUS: issue scheduled for fix in 2.0.3 ISSUE: with higher latency, when writing text into an input box, a desync may occur that causes a character to get lost, and the cursor to jump to the start of the input box WORKAROUND: none STATUS: we are investigating ISSUE: special characters can be replaced by '?' under specific circumstances WORKAROUND: none STATUS: currently no ETA, framework limitations = Version 2.0.1 = Fixes: Fixed some jobs getting stuck in rare circumstances when a Unimus Core disconnected due to packet loss Fixed weekly schedules running one day earlier than configured Fixed multiple cases of dynamic hash changes being considered as config changes on FortiOS Fixed leaving a stale CLI connection opened when an internal error occurred during a job Fixed discovery failing on multiple device types when using SSH-key based authentication Fixed discovery failing on devices with a login menu Fixed discovery not working on pfSense Embedded Core version: 2.0.1 Migration warnings (v1 -> v2): Weekly schedules were running one day earlier than configured. We have migrated existing schedules to the day they were running on - which was different than what was configured. If you were using weekly schedules, please review your schedule configuration. Slack integration has been migrated from a Webhook to a Slack App. This is due to the addition of sending Configuration Change Notifications over Slack. The Webhook API did not support sending Snippets, which Config Notifications require. You will need to setup a new Slack App for Unimus, and reconfigure Unimus Slack sender in "Notifications > Slack". For some devices, there may be a single config-change notification after the first backup following the 2.0.0 upgrade. This will show a change occurred inside a comment or a non-config line. This is expected due to changes to the dynamic (runtime) backup content filtering mentioned in the "Features" section. This is caused by changes to what Unimus considers as dynamic (runtime) data inside backups, and you can safely ignore this change notification. Known issues: ISSUE: when you delete the "Device Output Log" file in "Debug mode", any jobs that started before deletion, but finish after deletion will recreate the file and write their output to the file WORKAROUND: delete "Device Output Log" after all jobs finish / no jobs are running STATUS: issue scheduled for fix in 2.0.2 ISSUE: session timeout doesn't work in certain situations when browser tab is not closed - user's web session can remain logged-in forever WORKAROUND: close all tabs in which Unimus is opened, or log-out manually STATUS: issue scheduled for fix in 2.0.2 ISSUE: Importing is possible even with accounts that don't have access to the Default Zone due to Tag-based access restrictions WORKAROUND: none, account can be made read-only STATUS: issue scheduled for fix in 2.0.2 ISSUE: Unable to export all backups when two zones have devices with same addresses WORKAROUND: none STATUS: issue scheduled for fix in 2.0.2 ISSUE: with higher latency, when writing text into an input box, a desync may occur that causes a character to get lost, and the cursor to jump to the start of the input box WORKAROUND: none STATUS: we are investigating ISSUE: unable to set connection timeout in Core - this doesn't influence Core functionality in any way WORKAROUND: none STATUS: currently no ETA, framework limitations ISSUE: special characters can be replaced by '?' under specific circumstances WORKAROUND: none STATUS: currently no ETA, framework limitations = Version 2.0.0 = Important: Slack integration has been migrated from a Webhook to a Slack App. Your Slack notifications will not work without reconfiguration. Manual migration and reconfiguration is required, please see more in the "Migration warnings" section. Features: New "Zones" feature for support of remote networks - includes a new "Unimus Core" that serves as the remote proxy / remote agent Configuration Change Notifications with full diffs are now supported over Slack (if Slack Notification Sender enabled) Failed discovery logs now show full details of discovery and why it failed (Dashboard > Latest Failed Jobs) Added visual indicator (grey/green/red) of last job result to the Devices table "Devices > Info" window completely reworked, now shows much more useful information about the device Added Last Backup Date to device info window ("Devices > Info") Added REST endpoint to upload backup (Push backup into Unimus) Added support for binary backups (currently only possible with API Backup Push) Added an "Export backups" button to the "Backups" view - allows to export all or only latest backups for all devices Added support for specifying a CRON expression for Schedules (in addition to current options) Changed pagination on the "Config Search" view to 500 (up from 10) NetXMS client API updated to version 3.1 (NMS Sync) Zabbix importer will now import nodes with only Agent-type interfaces Added a new help link on the Backups view, "How does Unimus store backups?" Added a new Backup Retention Policy - "Number of backups" (will only keep last x backup for device) Added a new "Send Diff" and "Send Backup" popup that replaces the old email input form The "Send Diff" and "Send Backup" features now also supports sending diffs over Slack New global notification options to control where the system FQDN is displayed in notifications (title or body) Added system FQDN to notifications which were missing it (all notifications now contain system FQDN) Improved system FQDN lookup for notifications on Windows Improved message formatting in all Email and Slack notifications Improved UX in all sections of the Notification view ("Save" buttons now only active on change, added "Discard" button, etc.) Added retention cleanup jobs to the "Show scheduled tasks" window Added new "http.proxyType" and "https.proxyType" settings to configure proxy type when running Unimus behind a HTTP(S) proxy Improved responsiveness in multiple views in Mass Config Push Added a new Easter Egg (hint: "mike", also, Hi Mike!) Improved handling of CLI mode changes, many previously unhandled edge-cases now work properly Added support for empty password (just press enter) CLI mode changes (enable, configure) Improved detection of "Press any key to continue" and "Press enter to continue" prompts Added support for "Do you accept this statement [yes/no]" prompts during login Added support for shortened prompts on Cisco IOS in Configure mode Added support for line-break prompts in Cisco IOS when using tclsh Improved support for Cisco ASA Thread Defense and Cisco FirePOWER TDM Added support for read-only user accounts on ExtremeOS Improved support for Enhanced Security Mode on HP/HPE ProCurve/Provision/ArubaOS Added output of "show bof" to TiMOS backup Improved support for ArubaOS Wireless Controllers in various edge-cases Improved banner detection during CLI login process "Zones" feature for support of remote networks and distributed polling - you can create as many Zones as required, each zone signifying a unique network - new top level "Zones" view for Zone management - Zones can be polled directly from Unimus, or using the new Unimus Core serving as the remote proxy / remote agent for the Zone - architectural overview: https://wiki.unimus.net/display/UNPUB/Architecture+overview - more info about Zones: https://wiki.unimus.net/display/UNPUB/Zones "Debug Mode" options moved to the "Zones" menu - Unimus allows debugging remote cores directly from the Unimus UI - you can also download logs from Remote Cores directly in Unimus - this requires setting debug options per-zone, so Debug Mode moved to "Zones" Mass Config Pushes can now be scheduled - You can now schedule Config Push jobs for more automation power - More details on Push result notifications and Push result history below Other Mass Config Push improvements: - Added "Config Push History" table to the Dashboard - Added new "Config Push Result" notifications (enabled by default) - Push job status is displayed for each Push preset in Mass Config Push Home view - Improved the responsiveness (UI scaling) of the Config Push view PRTG importer was added to the "NMS Sync" view - uses PRTG API to sync devices from PRTG to Unimus - sync possible based on Tags, or by node hierarchy in the device tree Observium importer was added to the "NMS Sync" view - uses Observium API to sync devices from Observium to Unimus - sync only specific devices from Groups, or all devices in Observium Updated dynamic (runtime) data filtering from backups in diffs: - improved filtering of dynamic (runtime) data from backups in all diff views - whenever possible, filtering will no longer make a backup invalid by changing its syntax - this only influences diffs - in Unimus and in Config Change notifications (View, Download and Send Backup features were always sending raw, unfiltered backups) - See more info below in the "Migration warnings" section Network Scan improvements: - Added "Network Scan History" table to the Dashboard - Added new "Network Scan Result" notifications (disabled by default) Added support for: - ArubaOS-CX devices (Aruba / HPE 8320) - more variants of AudioCode devices - Blonder Tongue CMTS - Casa CMTS - Cisco ASA TD - Cisco IE (industrial ethernet) switches - CTS switches (FOS-3128) - more variants of Dell PowerConnect switches - Draytek Vigor (Discovery and Config Push only, Backup not supported) - Exinda devices - Fortinet FortiAnalyzer - Fortinet FortiOS v6 - Harmonics CMTS - HPE StoreFabric devices - HPE VirtualConnect - Huawei Eudemon - Huawei VRP in HRP mode - Huawei VRP multi-context - LANCOM switches (Discovery and Config Push only, Backup not supported) - more variants of Mellanox switches - Moxa switches - Omnitron RuggedNet switches - Ubiquiti AirOS CS (custom script) firmwares - Ubiquiti UFiber OLT - Zhone MXK Fixes: Fixed discovery not running for undiscovered devices when credential was added and discovery should run according to system settings Fixed the password of a High Security credential being visible in "Device -> Show Info -> Show credentials" Fixed Mass Config Push not working when it contained Un-managed or Undiscovered devices Fixed Mass Config Push not working when it contained devices with all connectors disabled Fixed Config Search showing only first 500 backups that matched the search Fixed Config Search "Expand all" not working Fixed wrong (empty) config change notifications on Calix OccamOS based devices Fixed device selection selecting devices randomly if they were imported from "Address Importer" or ".csv File Importer" Fixed Zabbix importer not importing nodes which only had Agent-type interfaces Fixed .csv importer sometimes importing the file header even when "Ignore header" was enabled Fixed wrong config change notification for Cisco WLC caused by CDP peer changes Fixed wrong config change notification for FortiOS caused by dynamic certificate key output Fixed Mass Config Push status showing "Scan Status" instead of "Push Status" Fixed multiple extremely rare bugs where Config Search did not show some backups that matched (normally this would never happen) Fixed scheduling services to run on Schedule deletion, even if no Push or Scan presets were scheduled (did not schedule jobs, just enabled service) Fixed a very rare bug that could cause backup failing with very short backups Fixed change of backup retention only being applied after service restart Fixed not being able to delete schedules in the Deployment Wizard Fixed multiple UI inconsistencies and UX pain-points Fixed multiple rare edge-case failures when switching CLI modes (enable, configure) Fixed ExtremeOS devices not working when used with read-only accounts Fixed FS S3900 switching being discovered as Allied Telesis Fixed some HP 1910 models not being discovered Fixed Network Scan very slow when DNS requests were timing out Fixed Network Scan subnets import incorrectly accepting invalid some subnets as valid Fixed DNS timeout configuration being ignored Fixed some Mellanox switch models not being discovered Fixed backup not working on specific TelcoSys T-Marc firmwares Fixed backup not working on a few specific Brocade devices Fixed very rare login failure on devices with extremely slow data output during login Fixed Config Push that required Configure mode not working on some Fiberstore switches Fixed Patton/Inalp devices not working (discovery/backup/push) in certain cases Fixed ArubaOS Wireless Controllers not working in very rare edge-cases Fixed extremely rare login failure on devices with a post-login menu Fixed multiple other extremely rare login failures in various edge-cases Fixed backup failing on Adtran Total Access with extremely long configurations Fixed discovery failing on newer AudioCodes Mediant devices / firmwares Fixed extremely rare cases where VT100 control sequences were not properly stripped from backups Fixed a bug that could cause ~1% of scheduled backups to fail on slow, or heavily loaded devices - each scheduled backup, a small random subset of devices would fail their scheduled backups - slow (older) devices, devices under sufficient load to slow down the control plane, or devices with slower external AAA were most affected - in the long run, all devices would be properly backed up, as the subset was usually different for each scheduled run - running backups manually would work, only scheduled backups were affected Security fixes: Fixed issue that caused imports from HTTPS URLs in "NMS Sync" to not check HTTPS certificates even if "Do not check HTTPS certificates" was not checked Fixed users being able to change "Other settings > Sensitive data stripping" even for Tags they didn't have access to Fixed users being able to change "Other settings > Per-Tag connectors" even for Tags they didn't have access to Embedded Core version: 2.0.0 Migration warnings (v1 -> v2): Slack integration has been migrated from a Webhook to a Slack App. This is due to the addition of sending Configuration Change Notifications over Slack. The Webhook API did not support sending Snippets, which Config Notifications require. You will need to setup a new Slack App for Unimus, and reconfigure Unimus Slack sender in "Notifications > Slack". For some devices, there may be a single config-change notification after the first backup following the 2.0.0 upgrade. This will show a change occurred inside a comment or a non-config line. This is expected due to changes to the dynamic (runtime) backup content filtering mentioned in the "Features" section. This is caused by changes to what Unimus considers as dynamic (runtime) data inside backups, and you can safely ignore this change notification. Known issues: ISSUE: under rare circumstances, when a Unimus Core disconnects due to packet loss, some jobs may become stuck in Unimus WORKAROUND: restarting Unimus is necessary STATUS: fixing already in progress - fix coming in 2.0.1 ISSUE: when you delete the "Device Output Log" file in "Debug mode", any jobs that started before deletion, but finish after deletion will recreate the file and write their output to the file WORKAROUND: delete "Device Output Log" after all jobs finish / no jobs are running STATUS: issue scheduled for fix in 2.0.1 ISSUE: session timeout doesn't work in certain situations when browser tab is not closed - user's web session can remain logged-in forever WORKAROUND: close all tabs in which Unimus is opened, or log-out manually STATUS: issue scheduled for fix in 2.0.1 ISSUE: Importing is possible even with accounts that don't have access to the Default Zone due to Tag-based access restrictions WORKAROUND: none, account can be made read-only STATUS: issue scheduled for fix in 2.0.1 ISSUE: Unable to export all backups when two zones have devices with same addresses WORKAROUND: none STATUS: issue scheduled for fix in 2.0.1 ISSUE: with higher latency, when writing text into an input box, a desync may occur that causes a character to get lost, and the cursor to jump to the start of the input box WORKAROUND: none STATUS: we are investigating ISSUE: unable to set connection timeout in Core - this doesn't influence Core functionality in any way WORKAROUND: none STATUS: currently no ETA, framework limitations ISSUE: special characters can be replaced by '?' under specific circumstances WORKAROUND: none STATUS: currently no ETA, framework limitations = Version 1.10.4 = Features: Updates to NMS Sync configuration table (UI elements better organized, added responsiveness) Per-tag Connector settings table now visually shows disabled connectors (port numbers use strikethrough) License key entry boxes will now automatically strip whitespace from the license key Visual improvements to the "Add Credentials" dialog Minimum username length requirement decreased to 2 characters Network Scan improvements and support for address exclusion: - You can exclude addresses from Network Scan by prefixing them with a "-" (minus) sign - Network Scan can now accept address ranges and individual addresses on top of subnets - Address exclusions also supports inputting subnets, ranges and individual addresses - see "Supported data formats" help popup in the Subnets input box for more details New "Forgot password" feature to allow password recovery for your local Unimus accounts - When "Forgot password" is clicked, a password reset token is output into the server log - You can use this reset token to reset the password of any local Unimus account Added support for: - more variants of Aruba WifiController - newer UBNT UniFi firmware versions Fixes: Fixed broken menu logo under the latest Chrome version Fixed Mass Config Push for Netonix not recognizing the "Press ENTER to confirm configuration change" prompt (push would fail with interaction error) Fixed not discovering / backing-up UnFi devices running new firmware versions Fixed not sending ENTER if it was the last command in Mass Config Push preset (multiple empty lines as last commands were all ignored) Fixed incorrect config change notifications on EXOS switches in rare cases Fixed Backup Retention configuration changes not being reflected across other UIs (added live-updates) Fixed not properly disabling the Save button in Backup and History job retention when there were no changes to the configuration Fixed Sensitive Data Stripping configuration changes not being reflected across other UIs (added live-updates) Fixed a comma being used as a thousands separator in port fields in NMS Sync and Radius configuration Fixed being able to add deleted Tags into the Sensitive Data Stripping configuration in certain cases (would re-create the deleted Tag) Fixed an exception in the Radius configuration when using the "Clear" button Fixed silently failing Network Scan when all connectors disabled (a notification will be shown now) Known issues: Special characters can be replaced by '?' under specific circumstances = Version 1.10.3 = Features: Added a list of failed devices to Email/Slack/Pushover notifications when discovery or backup fails Improved the Discovery algorithm - it is now faster and more efficient Unimus will now check for newer versions, and notify on new version availability - Unimus will check once a day if a newer version is available - Added an in-app "Newer version available" notification - Added a clickable "Newer version available" button on the Dashboard (will open a window with the Changelog and a download link for the latest available version) Added support for: - new Ubiquiti airMAX models (2CX, 2WA, etc.) - new Zyxel VPN devices - more variants of Aruba WifiController Fixes: Fixed not outputting warning to the log file on failed user login attempts Fixed not sending notifications (Email/Slack/Pushover) on failed user login attempts Fixed outputting the Radius Secret into the log file in clear-text Fixed first scheduled job failing after upgrade to 1.10.2 (only the first scheduled job was affected) Fixed discovery wrongly identifying devices in a few very rare edge-cases Fixed Cisco IOS-XR devices wrongly identified as standard IOS devices Fixed "Debug Mode" not working (it was not outputting debug messages into the log file) Fixed discovery/backup not working on newer airOS devices (2CX, 2WA, etc.) Fixed system FQDN lookup not working on Windows in certain cases Fixed incorrect config change notifications on F5 - software update check error count is now ignored Fixed not properly removing pagination (--More--) on backups of some FiberStore switch models Fixed Deploy Wizard processing to next step even when the logging file was not accessible Known issues: Special characters can be replaced by '?' under specific circumstances = Version 1.10.2 = Features: NetXMS API client library updated to 2.2.15 Snort rule updates and package timestamps are not considered as a config change on pfSense Improved support for newer versions of IOS-XR on Cisco ASR Improved support for newer versions of UBNT airOS Improved discovery driver compatibility for EdgeCore switches Added History Job Retention settings (enabled by default for 90 days retention) Added support for: - Alcatel OmniSwitch switches - Brocade MLXe - Cisco CRS series - Cisco Fire Linux OS (FirePower TDM) - Cisco NCS series - more variants of EdgeCore switches - more variants of FiberStore switches - Metamako devices Fixes: Fixed Mass Config Push failing with very long (190+ character) commands Fixed discovery/backup not working on InfiNet devices Fixed backup not working on specific SonicOS versions Fixed incorrect config change notifications on newer firmware on HP 1920S switches Fixed multiple rare instances of devices getting stuck in a running task Fixed discovery and/or backup execution threads always failing to complete a job in rare scenarios Fixed JobDurationMetrics reporting errors when a previous job failed with specific rare errors More fixes for incorrect configuration change notifications on FortiOS Fixed incorrect configuration change notifications on pfSense with Snort installed Fixed backup not working on ProCurve when user logged in to user-exec (privileged-exec login worked) Fixed Cisco ASR not being discovered on newer versions of IOS-XR Fixed discovery process for specific JunOS versions Known issues: Special characters can be replaced by '?' under specific circumstances = Version 1.10.1 = Features: Added a "Description" field for Credentials Added credentials description field to the object returned by REST API Added a "Use High-Security Mode for Credentials by default" checkbox to "Advanced system settings" Added an option is Advanced settings to suppress discovery when credentials or enable password are deleted or unbound Added REST API endpoint to get devices by description Improved diff when the entire device configuration has changed Improved diff generation performance when the entire device configuration has changed Implemented the "Per-Tag Connector settings" feature: - allows defining connector over-rides for devices on a per-Tag basis - this feature makes it easier to define specific connection-option for device groups - configuration available in the "Other settings" screen Added support for: - Dell FTOS switches / chassis - Lenovo ThinkSystems RackSwitch switches Fixes: Fixed backups failing on SonicWall when its config was very long Fixed broken "View backup" when backup contained html or xml data Fixed broken "Config Search" when backup contained html or xml data Fixed number input fields throwing exceptions under certain conditions Fixed incorrect diff highlighting when leading spaces were present in changed lines Fixed config change summary email not sending full device list (it properly stated some devices were left out) Fixed line numbers being selectable in config change notification emails Fixed broken "Comments" contents when comment contained html data Multiple fixes for Config Change Notification emails: - fixed line numbers not properly displayed in MS Outlook / Windows Mail - fixed leading spaces not being displayed properly - fixed multiple consecutive changed lines not being grouped together Tickets closed by this release: UN-165, UN-268, UN-356, UN-360, UN-368, UN-399, UN-400 Known issues: Special characters can be replaced by '?' under specific circumstances = Version 1.10.0 = Features: Added official support for Java 9/10/11 Added a Dark Theme (theme switching possible on the Dashboard) Added fallback to 'show startup-config' for Cisco IOS when full content of 'running-config' is not available (due to privilege issues) Cisco ASA will now be discovered even if "show version" is not available in user-exec mode Do not retrieve rogue AP table as part of Cisco WLC backups (it caused config change notifications on every backup) When a discovered device fails rediscovery with UNABLE_TO_IDENTIFY_DEVICE error its discovered details will be cleared Emails expire from email sender queue after 1 hour if they fail to send within this period Improved compatibility with certain Dell N series switches Improved compatibility with certain Juniper JunOS devices Deploy Wizard table width increased (credential and schedule creation screens in the Deploy Wizard) New "Ignore dynamic content" option for diffs "Only changed lines" and "Ignore dynamic content" options now on by default for diffs New "Send diff" button that allows to send currently shown diff over email When an import is in progress, a notification will be shown on the Import and Devices screens Performance and UX improvements when importing large number of devices (5k+) through Basic Import Diffs now highlight actual word changes within change lines: - new diffing logic can recognized changes inside changed lines on a per-word basis - changed lines are still highlighted, but changes within lines will be highlighted even more - this features makes it even easier to see what has changed when looking at a diff New features for Config Search: - added ability to search by Device Tag (search filtering by Tag) - added Config Search in a time-range (search filter by date / time) - added full historic Config Search option (search in all config history) - added option to specify context size (lines before and after match) Performance improvements for Config Search and Diff: - complete rewrite of rendering logic, performance of rendering improved by 10x - Diff rendering performance improvements, cosmetic/color changes - for inverse Config Search, do not render config until stack panel is opened - added paging for very big config search results (this is to avoid browser limitations) Added support for: - 3Com 29XX switch series - 3Com non-switch devices (chassis, routers, etc.) - Dell PowerConnect 8024 (and similar PowerConnect switches) - Exablaze Fusion switches - FireBrick devices - InfiNet WANFleX devices - Lenovo RackSwitch switches - Lenovo Flex System Fabric - OcNOS (switches running OcNOS) - Ruckus Wireless Bridges - SonicWall devices (SonicOS) - Telco Systems T-Marc devices - Turris OS devices (Turris Omnia, etc.) Fixes: Fixed a deadlock when using Network Scan with HSQL DB Fixed expiring session in other tabs when a new tab was open Fixed backup 'Download' returning a wrong backup in certain cases Fixed address validation not accepting a device if it contained certain special characters in its FQDN Fixed Mass Config Push merging first line of output with the command line (missing newline) Fixed Import / NMS sync considering failed imports / syncs as successful in certain cases Fixed Import / NMS sync not sending failure notifications on failed imports / syncs in certain cases Fixed newer versions of Fiberstore switches not being discovered Fixed incorrect configuration change notifications on newer versions of IgniteNet MetroLinq Fixed rare incorrect configuration change notifications for MikroTik RouterOS Fixed incorrect configuration change notifications on F5 BIG-IP and F5 BIG-IQ Fixed incorrect configuration change notifications on Cisco WLC Yet another round of fixes for more incorrect configuration change notifications on FortiOS Fixed discovery on certain HP 1920S switches Fixed error when searching in bound / not bound device tables in initial config push binding Fixed Powercode importer not being rescheduled when default schedule changed Fixed Cisco IOS driver wrongly discovering CDB series switches as IOS routers Fixed incorrectly identifying some Cisco Catalyst switches as IOS routers Fixed config search for HSQL and PostgreSQL databases Fixed multiple cases where a Read-Only account could modify objects: - read-only account was able to re-run Mass Config Push on an output group through the re-run menu - read-only account was able to clone or delete a Mass Config Push preset through the right-corner menu - read-only account was able to clone or delete a Network Scan preset through the right-corner menu Tickets closed by this release: UN-126, UN-191, UN-336, UN-348, UN-350, UN-361, UN-366, UN-385, UN-386, UN-392, UN-393, UN-406 Known issues: Special characters can be replaced by '?' under specific circumstances = Version 1.9.0 = Features: Juniper JunOS driver completely rewritten, solving multiple issues with JunOS Added hints (contextual help) to "Do not manage device" and "High security mode" checkboxes Improved compatibility with certain Cisco MDS models Backups for Cisco IOS and NXOS will now complete even if the "show vlan brief" command is not available Increased subnets text area limit in the Network Scan to 65k characters Improved support for devices with certain versions of Comware / Huawei VRP Improved support for certain models of Cisco SMB switches Mass Config Push now supports devices which present a menu after login (pfSense, ProCurve stacks, etc.) Improved support for devices that display "Press any key to continue" but really ignore that and proceed to prompt Improved visuals for all input fields to better handle IPv6 addresses or long FQDNs Event system (top right corner popups) enhanced and visually unified Added support for "enhanced security-mode" on HP ProVision / HPE ProCurve / Aruba ArubaOS Improved support for "(y/n)" prompts Improved the usability of Device Tags: - Device Tags now have their own top-level menu for tag management - improved the tag management (add/remove/assign/unassign) process - various other UI and UX improvements related to tags Improved the Device Access Limitation system: - Added a new "Users with access" window to devices which have Tags (will show which users have access to this device, and where the access comes from) - Added device ownership - account which creates a device is now the owner of that device - owners always see the devices they own, even if limited Access Limited by Tags (solves Operator-level users not seeing the devices they create when they are access-limited) - Accounts are not able to changed their own access role anymore - you can't cut yourself from Admin access anymore Update to the Comments windows across Unimus: - Comments now have live updates, if one user adds a new comment, all users will immediately see it - multiple graphical and visual updates and fixes to the Comments windows Added two new API endpoints to retrieve configuration changes - you can now retrieve list of devices with config changes over the API - external integrations can now use the API to display diffs generated by Unimus - more details at: https://wiki.unimus.net/display/UNPUB/Full+API+v.2+documentation Added high security mode option for credentials and enable passwords - will disable "Show password" for these credentials anywhere in Unimus - useful to make sure no one (no matter their access level) can retrieve password from Unimus New "Sensitive data striping" feature: - will not store any sensitive data in backups (passwords, keys, etc.) - can be configured globally, or per-Tag - currently supported on Cisco ASA, IOS, IOS-XR, Nexus, NXOS - more details at: https://wiki.unimus.net/display/UNPUB/Sensitive+data+striping The CLI login handler has been rewritten from scratch: - this improves overall compatibility with all devices that we support - many edge-cases where login to device would fail were solved Added support for: - A10 Networks Thunder series - Adtran TA (Total Access) 2nd gen. - Cisco SMB SF2xx / SG2xx / SX2xx switch series - more H3C Comware switches - HPE 1920S - Nomadix AG - more Zyxel MGS switches (37xx and newer) - more Zyxel USG models - Zyxel XGS switches - more Zyxel ZyWALL models Fixes: Fixed a bug casing some login banner to cause Unimus to fail the login to devices Solved access-limited users not seeing the devices they create when they are Operator level (see device ownership in Features section) Fixed users with Device Access limitations seeing devices they should not see in Mass Config Push device binding Fixed UBNT devices not discovering / backing-up if firmware version contained 4 digits Fixed some environment configuration being ignored on startup (logging, proxy, etc.) Fixed a rare failure when trying to switch to enable / configure mode during discovery Fixed enable / configure mode switch failing on devices which responded with a lot of data immediately during mode switching Fixed Mass Config Push incorrectly reporting "unsupported command" in very rare cases Fixed multiple issues with Juniper JunOS backups (parts of backups missing, incorrect change notifications, etc.) Fixed not discovering / backing-up some models of UBNT AirFibers Fixed some versions of ZyXel USGs not being discovered Fixed some versions of Comware / Huawei VRP devices not being discovered Fixed some models of Cisco SMB switches not being discovered Fixed "--More--" not being properly removed from FortiOS backups in rare circumstances Another round of fixes for more incorrect configuration change notifications for FortiOS Fixed table search not behaving as expected with certain special characters Fixed incorrect username format tooltip message on the login screen Fixed inconsistent width of subnets area in the NetworkScanView when changing browser window size Fixed Unimus switching view when licensing server went offline and then back online Fixed device output logging not working after enabling/disabling it multiple times Fixed a UI error when trying to backup multiple unmanaged devices Fixed a UI error when a 'read only' account navigated to the Notifications view Fixed a UI error when 'Expand command(s) windows' clicked when creating new mass config push preset Fixed various cases where login would fail to devices that display "Press any key to continue" but really ignore that and proceed to prompt Fixed some models of Zyxel MGS switches not being discovered Tickets closed by this release: UN-245, UN-272, UN-316, UN-334, UN-362, UN-365, UN-371, UN-372, UN-377, UN-378, UN-379, UN-380, UN-382, UN-383 Known issues: Special characters can be replaced by '?' under specific circumstances = Version 1.8.3 = Features: Trailing spaces will now be automatically stripped from output of Mass Config Push Added an option to configure number of context lines in diffs in configuration change notifications Added options to clone "Mass Config Push" and "Network Scan" presets Cisco IOS devices will now be discovered even if "show version" is not available in user-exec mode Added support for devices that require pressing ENTER before logging in over Telnet Improved support for HPE / Aruba ProCurve stacks Improvements to the "Show backup" window Visual updates to the "Notifications" screen Added a system entropy check during startup - will notify if system entropy is low Increased left menu size in Tablet mode (menu item texts are no longer only partially visible) New Powercode importer (NMS sync) - allows synchronizing devices from Powercode to Unimus - you can configure which devices to pull into Unimus in Powercode New "Debug mode" settings: - added options to change debug levels during runtime - added options to enable device communication logging during runtime - the log file can now be downloaded directly from the GUI - the device communication log file can now be downloaded directly from the GUI - deleting the device communication log file is also possible directly from the GUI New "Show all passwords" feature: - this features makes it easier to work in environments where many credentials have the same username - usable in "Credentials" and "Bind credentials..." screens - when enabled, also enables search within passwords "Mass Config Push" feature improvements: - presets can now be cloned, renamed and deleted from the home screen - ability to re-run a push on an output group - ability to set devices in output group as push target - ability to clone a preset and set devices in output group as push target Added support for: - AudioCodes Mediant - more variants of Dell PowerConnect - DragonWave Horizon Compact - DragonWave Horizon Compact+ - F5 BIG-IP - F5 BIG-IQ Fixes: Fixed Unimus not properly reconnecting to the database after the database went down Fixed incorrect configuration change notifications for Cambium ePMP (again) Fixed more rare incorrect configuration change notifications for FortiOS It is no longer possible to add negative numbers as ports in connector settings Fixed wrong notification formatting for notifications that contained un-managed devices Fixed Mass Config Push and Network Scan preset creation data disappearing for unsaved presets Fixed Network Scan preset subnets area to trigger configuration validation on text change event, not focus out event Fixed a regression that caused MikroTik RouterOS not being discovered if it asked to show EULA at login Fixed NMS config still present after 'clear' and re-open the config widget Fixed URL validation not properly validating contents of URL Fixed password confirmation field not behaving properly in some cases Fixed showing obsolete data after update and re-open accordion (connectors and notification, email, slack, pushover configs) Tickets closed by this release: UN-111, UN-338, UN-340, UN-344, UN-347, UN-352, UN-354, UN-355, UN-358, UN-359 Migration warnings: Radius accounts must now be created in Unimus, and have their authentication method set to Radius. If you are migrating from previous versions and use a Radius account to log in to Unimus, you must first create that account in Unimus and properly set its auth method. Use a local admin account to create this Radius account. Known issues: Special characters can be replaced by '?' under specific circumstances = Version 1.8.2 = Features: Unimus will now send full graphical configuration change notification emails (including diff of actual changed config) Commands text area in 'Mass Config Push' can now be expanded (also to full-screen) Added an option to ignore empty lines in diff Improved support for various D-Link switches Improved support for newer IgniteNet MetroLinq devices (HeliOS v2 now supported) Added support for custom UBNT firmwares Improved handling of pre and post login banners If backup retrieved from the device is empty, Unimus will fail the backup job Trailing spaces will now be automatically stripped from each line of backups Improved striping of dual-newlines from dual-spaced backups Added support for devices that display "Press any key to continue" but really ignore that and proceed to prompt Added an option to Un-manage devices: - excludes devices from Discovery, Backup and Mass Config Push - allows to disconnect / remove devices from network, but keep them in Unimus - Un-managed devices are rendered with Italic font style in tables Added support for: - Aruba Wireless Controllers - Brocade SLX-OS switches - D-Link xStack switches - D-Link SmartPro switches - D-Link generic managed switches - Dell Networking N-series switches - Extreme SLX-OS switches - Extreme WiNG APs - Patton / Inalp SmartNode Fixes: Fixed various cases where jobs could fail on devices with pre and post login banners Fixed very rare discovery stuck issue when switching devices to enable/configure mode Fixed Araknis switches discovery not working over SSH Fixed Ubiquity AF5xHD not discovering nor backing up Fixed incorrect configuration change notifications for Cambium ePMP Fixed incorrect configuration change notifications for FortiOS Fixed discovery failing for MikroTik RouterOS with long identities Fixed rare incorrect configuration change notifications for MikroTik RouterOS Fixed device sync across multiple instances not working Fixed errors when changing a password for a user Fixed unable to turn off configuration change notification Tickets closed by this release: UN-260, UN-303, UN-327 Migration warnings: Radius accounts must now be created in Unimus, and have their authentication method set to Radius. If you are migrating from previous versions and use a Radius account to log in to Unimus, you must first create that account in Unimus and properly set its auth method. Use a local admin account to create this Radius account. Known issues: Special characters can be replaced by '?' under specific circumstances = Version 1.8.1 = Features: Improved enable/configure mode switching logic Improved support for Juniper JunOS devices Added support for: - More variants of Dell PowerConnect switches - Mellanox switches Fixes: Fixed HP ProCurve / ArubaOS backup not working Fixed wrong email formatting in certain mail clients (newlines were missing) Fixed Telnet connector ignoring custom timeout configurations Fixed enable password discovery failing on some Cisco devices Fixed JunOS devices not being discovered in certain configurations Fixed some very rare and specific issues with failing login to devices Fixed running DB migration jobs which were not needed in specific circumstances Fixed very rare MySQL connection issue ("Public Key Retrieval is not allowed" errors) Migration warnings: Radius accounts must now be created in Unimus, and have their authentication method set to Radius. If you are migrating from previous versions and use a Radius account to log in to Unimus, you must first create that account in Unimus and properly set its auth method. Use a local admin account to create this Radius account. Known issues: Special characters can be replaced by '?' under specific circumstances = Version 1.8.0 = Features: Added multi-device Edit - edit schedule, bound credentials and enable/configure passwords on several devices at once Added support for additional crypto / hashing / DH algorithms - adds compatibility with more devices Improved handling of failed Enable / Configure mode switch during discovery Improved model detection for Fiberstore / GCOM switches Cosmetic improvements to "Access Tags" screen Added configuration change notifications: - a notification will be sent when Unimus detects a config change on a device - enabled by default, configurable in the "Notifications" screen Improvements to the "Mass config push" feature: - Improved detection of yes / no ("[Y/N]") prompts in "Mass config push" - Improved "Mass config push" compatibility with slow devices Performance improvements: - Improved the speed of Discovery, Backup and Mass Config Push processes - General improvements and optimizations for connections to older / slow devices - CPU utilization improvements - optimized many aspects of device communication Changed how Radius user authentication is handled: - Radius accounts now have to be defined as local application accounts, with auth method set to Radius - Added support for specifying an Access Role for Radius accounts - Added support for tagging Radius accounts with Access Tags Added support for: - Araknis switches - Dell EMC OS10 - Dell switches (OS10) - HP BladeSystem OA - Huawei Quidway switches - Ruckus standalone APs - More variants of ZTE ZXR10 Fixes: Fixed some Brocade, Foundry and Ruckus ICX devices not working over Telnet Fixed not properly striping pagination from backups of some Cisco WLCs Fixed errors during Discovery in various edge-cases when using SSH Fixed not setting reverse DNS as device description with automatic device addition from Network scan Fixed failing discovery on devices that didn't exit out of "Password: " prompts after CTRL+C Fixed re-discovery not being triggered in certain cases when connector configs change Fixed wrongly showing a successful notification in the GUI when a backup actually failed Fixed discovery could sometimes report wrong Vendor / Type for some devices Fixed Audiocodes devices not being discovered / backed up when there was no previous login Fixed a very rare case of discovery failing when adding/removing same device Fixed unable to add schedules in the deployment wizard Fixed echo messages being retrieved as a part of the backup on MikroTik RouterOS in rare cases Tickets closed by this release: UN-252, UN-299, 317, UN-328, Migration warnings: Radius accounts must now be created in Unimus, and have their authentication method set to Radius. If you are migrating from previous versions and use a Radius account to log in to Unimus, you must first create that account in Unimus and properly set its auth method. Use a local admin account to create this Radius account. Known issues: Special characters can be replaced by '?' under specific circumstances = Version 1.7.2 = Features: Device discovery process will be much faster, especially on slow devices Added an option to select Radius authentication protocol, CHAP or PAP Improved prompt detection across all vendors - improves Backup and Mass Config Push operations Improved configuration change detection on Huawei VRP Added support for: - Aruba ArubaOS switches - Fiberstore switches - GCOM switches Fixes: Fixed "Mass config push" not working on MikroTik RouterOS when using nested blocks Fixed other edge-cases where "Mass config push" could fail with INTERACTION_ERROR Fixed backup not retrieving any output in rare cases on some devices (could affect 3COM/HP/Huawei/H3C Comware, Huawei VRP) Fixed discovery failing on some devices (could affect ZTE ZXR, Quanta, Aruba IAP, Dell RTOS, Adtran TA) Fixed Juniper JunOS not working when logging into the BSD shell Fixed configure mode switch not working on D-Link DGS 1510 Tickets closed by this release: UN-185 Known issues: Special characters can be replaced by '?' under specific circumstances = Version 1.7.1 = Fixes: Fixed "Add to Unimus" button in "Network Scan" doing nothing Fixed unable to remove device while there was a job running on it Fixed "Mass config push" breaking if ran on devices with multiple available connectors (SSH + Telnet for example) Fixed not properly striping pagination from ZyXel ZyWALL backups Fixed "Mass config push" not working on MikroTik RouterOS when line break used inside a quoted string Fixed visual issues on "Adding the first device" screen Fixed double notifications in GUI after a NMS Sync completes Known issues: Special characters can be replaced by '?' under specific circumstances = Version 1.7.0 = Features: Improved configuration change detection on Cisco IOS and Cisco NXOS Unimus now detects when devices return "permission denied" / "access denied" errors and fails the backup job Improved error reporting in Dashboard "Show log" for all jobs Improved logging of various errors and failed jobs in the log file Improved Enable/Configure mode switching for all supported vendors Added detection of command unsupported and permission denied errors in output of devices that do not use paging Added support for devices which require entering login password twice Added device description to job logs on the Dashboard Added a new "Mass config push" / "Mass reconfig" feature: - Unimus is now able to push configuration to your devices - you can create as many "push presets" as needed to automate your network - devices will be switched to Enable or Configure mode automatically if a push preset requires it - output from the push job is grouped, no need to check output of each device manually Added support for Enable/Configure passwords separate from Credentials (username/password combinations): - you can specify a list of Enable/Configure passwords on the Credentials screen - Unimus will automatically discover which Enable/Configure password is valid for a device Added support for Credential and Enable/Configure password binding: - you can bind specific Credentials or Enable/Configure passwords to devices - this will disable Credential and Enable/Configure password discovery on the device - only the bound Credential and Enable/Configure passwords will be used for the device - discovery, backup and any other operations on the device will fail if the bound Credentials are invalid Added a new "Network scan" (device discovery) feature - Unimus is now able to adopt devices by scanning your network - you can define multiple subnets for scanning, and Unimus will find available devices - networks scans can be scheduled to periodically adopt devices from the network Added support for: - Adtran NetVanta - Adtran TA (Total Access) - Brocade NetIron - HP 1950 switches - Ruckus Unleashed - ZyXel ZyWALL Fixes: Fixed Brocade NetIron/FastIron/TurboIron SX/CX/GS/LS/WS not being discovered Fixed wrong backup contents for multi-context ASA Fixed not properly striping pagination on some models of Netonix switches Devices with very long backup time (3+ minutes) would not be backed up, now they will be Fixed discovery not working when quickly removing and then re-adding the same device Fixed Citrix NetScaler driver not working with newer versions of NetScaler Fixed connections sometimes failing to slow devices Fixed missing scroll-bar in "View backup" Fixed wrong backups table columns width Fixed account with READ_ONLY role could access 'Adding the first device' screen Fixed not properly handling empty device address in Basic Importers Fixed license key change handling (it was not possible to change license key in certain situations) Tickets closed by this release: UN-34, UN-127, UN-209, UN-232, UN-251, UN-309, UN-310, UN-311, UN-312, UN-313 Known issues: Special characters can be replaced by '?' under specific circumstances = Version 1.6.1 = Fixes: Fixed high memory requirements for migration to 1.6.x when using HSQL DB Known issues: Special characters can be replaced by '?' under specific circumstances = Version 1.6.0 = Features: Increased default timeouts for more reliable operations on slow devices Added support for access disclaimer messages on FortiOS Added option to not use SMTP authentication in email notifications settings Added option to not check HTTPS cert for Zabbix importer (for example when running Zabbix with a self-signed cert) Improved discovery reliability on slow (or heavily-loaded) MikroTik devices Only unique new backups will be stored (duplicate backup filtering): - If a backup retrieved from the device is the same as the last backup already in the system, it will not be stored - Backup table now shows a time range for which a backup was valid for, rather than just backup retrieval timestamp - This feature makes it much easier to see when a device config changes Added support for: - Brocade TurboIron - Citrix NetScaler - Dell Force10 (RTOS) - Dell switches (RTOS) Fixes: Fixed comma character not being properly loaded from configuration file, causing issues when used in the DB encryption password Fixed NetXMS importer not finding containers if user didn't have access to Infrastructure Services in NetXMS Fixed issue where Zabbix importer was not possible to configure - it was expecting an address, but it really needed an URL Fixed new devices imported from an importer not being backup up if there were no other devices using the default schedule Fixed not logging out a user whose account was removed while he was logged in Tickets closed by this release: UN-33, UN-253, UN-227, UN-277, UN-304, UN-305, UN-306, UN-307, UN-308 Known issues: Migrating to this version when using HSQL DB requires a large amount of memory Special characters can be replaced by '?' under specific circumstances = Version 1.5.1 = Features: Improved performance when many simultaneous device connections were opened Added logging when device operations fail due to communication timeouts NetXMS importer upgrades: - Importer will now import all nodes in the structure under sync container, not just nodes directly in it - You can now specify sync containers not just by name but also by ID, using "#1234" format - You can now specify full sync container path using "Container 1/Container 2/Sync container" format - More information at https://wiki.unimus.net/display/UNPUB/NetXMS+importer Added support for: - AudioCodes MP-11x - AudioCodes MP-12x - Brocade FastIron - Calix B6 - Calix BLC - Calix OccamOS - Foundry FastIron - Huawei VRP - more variants of IgniteNet MetroLinq - LANCOM routers - Vyatta Fixes: Fixed last few edge-cases where VT100 sequences were not being stripped Fixed Telnet not being detected on certain Cisco devices Fixed not properly identifying the model of some Cisco NX-OS devices Fixed the IgniteNet MetroLinq driver to captures all possible config files Fixed MikroTik RouterOS not being discovered if it asked to show EULA at login Fixed missing license key input field at license key error view Tickets closed by this release: UN-241, UN-291, UN-292, UN-293 Known issues: Special characters can be replaced by '?' under specific circumstances = Version 1.5.0 = Features: Added option to choose device description update policy during imports and syncs Added invert search option for 'Config search' (shows results that do not contain search expression) Performance improvement when rendering search results Detect and properly handle Java SSL sub-system errors during Unimus startup Added options to control re-discovery behavior when ports or connectors change Added a REST API: - most Unimus functions available through the API - full documentation at https://wiki.unimus.net/display/UNPUB/API+documentation Added support for: - Ciena Service-aware OS (SAOS) - Cisco IOS XR - D-Link 3200 switch series - D-Link 3528 switch series - D-Link 3552 switch series - D-Link 3620 switch series - IgniteNet MetroLinq - Ubiquiti EdgePoint Fixes: Fixed NMS sync wiping out device description Fixed not closing connection to device when backup download failed Fixed inability to change default schedule in wizard Fixed Ubiquiti devices not found when searching by vendor in 'Devices' table Fixed not striping VT100 control sequence from backups under very rare conditions Tickets closed by this release: UN-229, UN-233, UN-243, UN-267, UN-273, UN-275, UN-276, UN-279, UN-285 Known issues: Special characters can be replaced by '?' under specific circumstances = Version 1.4.1 = Features: Improved handling of ZyXel switches when they fail to generate running config Added an 'Advanced system settings' menu, which allows to fine-tune certain system behavior Database port can be configured during the first-run wizard Added full IPv6 address support in all system components Support for adding IPv6 devices Added support for: - Aruba IAP (Aruba Instant) - Cisco FirePOWER (FX-OS) - HP ProCurve stack Fixes: Fixed users logged-in from Radius being unable to access devices nor backups Fixed not discovering complete model for HP / Huawei Comware switches Fixed not discovering HP ProCurve in certain cases Fixed failing to backup ZyXel MSG in certain situations Fixed NMS sync not working when no schedule selected Fixed more cases in which JunOS would not be backed-up Fixed account password change did not work Tickets closed by this release: UN-116, UN-228, UN-239, UN-249, UN-250, UN-266, UN-269, UN-270 Known issues: Special characters can be replaced by '?' under specific circumstances = Version 1.4.0 = Features: Backup retrieval performance massively increased when retrieving large backups Improved Telnet detection Improved UBNT device identification (will identify even if device returns wrong output) Improved backups of UBNT devices Improved Cisco WLC support (more version supported) Added comments to user accounts table Added a confirmation popup on device deletion Added a 'View' button to 'Backups' - will show the selected backup Added a role-based access privilege system - each system user has a role (Administrator, Operator, Read-only, None) - access to various parts of the application is limited according to users access role - more information at https://wiki.unimus.net/display/UNPUB/Account+security+roles Added 'Device access tags' - can be used to additionally limit accounts to have access only to specified devices - you can create 'Tags', and tag devices with the tags - Accounts can have access limited to only devices with specific tags (they will only see devices with the tags they have access to in 'Backups', 'Config search', etc.) Added support for: - Brocade / Ruckus ICX switches - Cisco ASA FirePower - Cisco ASA multi-context - HP MSM Controller - Siklu EtherHaul Fixes: Fixed notifications not being sent Fixed ProCurve not being discovered over Telnet Fixed FortiMail with very large config not backing-up Fixed error message on device address change More fixes for JunOS not discovering nor backing-up when user logged into BSD shell Fixed ProCurve backup being empty in certain situations Tickets closed by this release: UN-190, UN-234, UN-246, UN-247, UN-248, UN-254, UN-255, UN-257, UN-258, UN-259, UN-261, UN-262, UN-263, UN-264 Known issues: Special characters can be replaced by '?' under specific circumstances = Version 1.3.0 = Features: Application startup time improved by 30% Improved first-run wizard finalization process Improved handling of various error states during system startup On Cisco ASA, use 'more system:running-config' if available, if not, fall back to 'show running-config' Added new comments/notes feature: - you can now add comments/notes for backups, credentials, schedules and devices - tables show a comments icon for entities with comments - multiple users can add comments, comment history can be seen Added support for: - Brocade FOS - Cisco MDS switches - Cisco NXOS generic support (should support all NXOS) - HP Blade Switch (c-class) - HP MSA Storage - More variants of Juniper SSG Fixes: Fixed users sometimes not being redirected from boot screen to login screen Fixed FortiMail not being backed-up Tickets closed by this release: UN-55, UN-110, UN-128, UN-213, UN-215, UN-220, UN-222, UN-224 Known issues: Special characters can be replaced by '?' under specific circumstances = Version 1.2.0 = Features: Improved backup performance Include system FQDN in all notification messages Improved Diff widget drawing performance Diff lines now start from 1 instead of 0 Added ability to change device address New 'Config search' screen - easily search through the configuration of your entire network - support for flat search, or regex search Handling of backup line-endings improved for more friendly cross-OS behavior - backups in DB now always stored with \n (LF) line-ending - when downloading backups on Windows, they are automatically converted to \r\n (CRLF) line-ending - when downloading backups on Linux/Unix/Mac, they keep \n (LF) line-ending Added support for: - Juniper SSG - Generic FortiOS support (should support FortiGate, FortiADC, FortiWiFi, FortiVoice, etc.) Fixes: Fixed FortiADC and FortiGate not being discovered with certain firmware versions Fixed Sophos UTM not being discovered on certain firmware versions Fixed Brocade NOS not being discovered nor backed-up when user logged into user-exec mode Fixed IgniteNet FusionSwitch not being discovered nor backed-up when user logged into user-exec mode Fixed Zyxel switches not being discovered nor backed-up when user logged into user-exec mode Fixed JunOS not being discovered nor backed-up when user logged into BSD shell Fixed ProCurve not being discovered nor backed-up when user logged into Operator level Fixed backup not working on very old versions of RouterOS Fixed exceptions when trying to finish the wizard and there is no connection to the Licensing Server Fixed different notification message formatting, now all messages follow same pattern Fixed missing new lines in email notification messages Tickets closed by this release: UN-156, UN-188, UN-197, UN-208, UN-214, UN-217, UN-218, UN-219, UN-221, UN-223, UN-225, UN-230 Known issues: Application startup times can be long (up to 2 minutes on slow hardware) Special characters can be replaced by '?' under specific circumstances = Version 1.1.1 = Features: Improved handling of devices that require entering configuration mode ('configure') to be discovered / backed-up Improved discovery performance Added support for: - D-Link 1510 switch series - Huawei routers (H3C / Comware) - Huawei switches (H3C / Comware) - Planet DSLAMs - Planet switches Fixes: Fixed scheduled backups not running (issue introduced in version 1.1.0) Fixed failing discovery under rare circumstances Fixed notifications in GUI missing newlines Fixed visual issues in Firefox when zoomed in Fixed all capital letter vendor names not properly displaying in tables Fixed Comware switches being identified as COMWARE_OTHER Fixed tables briefly refreshing with old values when actions were performed Fixed additional search field being added to the Credentials table on each 'Show usage' click Fixed missing search bar in 'Show credential usage' popup Fixed exceptions in log after deleting credentials that were used by a device Tickets closed by this release: UN-48, UN-179, UN-192, UN-202, UN-206, UN-207, UN-210, UN-211 Known issues: Application startup times can be long (up to 2 minutes on slow hardware) = Version 1.1.0 = Features: Improved performance when running many concurrent discoveries Device import now updates descriptions for existing devices that don't yet have any description Added support for devices which disconnect the CLI when sending CTRL+C - Unimus will now properly discover and backup such devices Unified the selection model in tables - all rows select on click, rows with checkboxes can still use checkboxes, or selection on click New and improved configuration 'Diff' functionality: - support for cross-device config diff (diff backups of 2 different devices) - added 'Split' (side-by-side) diff mode - added option to squash unchanged lines ('Show only changed lines') - newer backup now always properly considered as new revision in the diff view (selection order of backups no longer matters) Improved handling of 'enable' (privileged-exec) mode - improved discovery speed for devices which support 'enable' (privileged mode) switching - all supported devices that use 'enable' (privileged mode) will work properly if in 'user' (user-exec mode) or 'enable' mode after login - devices that use 'enable' (privileged mode) will no longer attempt to 'enable' if already in 'enable' mode after login - added support for devices which require username and password to switch to 'enable' mode Added support for: - Arista switches - VyOS - Zyxel MGS switches Fixes: Fixed high CPU usage by the discovery process in rare conditions Fixed discovery timing out and never completing in rare conditions Fixed scheduled NMS import failing Tickets closed by this release: UN-56, UN-133, UN-134, UN-183, UN-193, UN-194, UN-195, UN-196, UN-200, UN-201, UN-203 Known issues: Application startup times can be long (up to 2 minutes on slow hardware) = Version 1.0.0 = Features: Improved Telnet availability detection during device discovery Improved device discovery speed in many situations Added backup retention settings (backups older than x days can be automatically deleted) If a device reports that the backup command is not supported, backup fails rather than taking that output as the backup text Downloading and sending of multiple backups now possible (backups will be put inside a .zip file) Automatic fallback to '/export' on MikroTik devices which do not support '/export compact' (really old RouterOS versions) Proper 'lock' handling for ePMP (fail backups on lock acquisition failure, strip lock acquisition from backup contents) Device credentials usage can now be displayed - you can see what devices use particular credentials Added a 'Backup now' button to the 'Backups' table Added support for devices that require and additional interactive (keyboard) SSH login after successful userpass (password) login Added support for: - Alcatel Lucent TiMOS (SR, ISAM and SAS) - Allied Telesis AlliedWare - Calix E7 - Cisco WLC (wireless controllers) - Nokia SR OS (SR, ISAM and SAS) - Ubiquiti UniFi APs - ZTE ZXR10 - Zyxel switches (GS22xx series, etc.) Fixes: Fixed not being able to complete the wizard when running as .war in Jetty Fixed MikroTik RouterOS discovery and backup not working Fixed certain Cisco devices not being discovered in rare situations Fixed backup not working on older Cisco IOS devices Fixed attempting to switch to 'enable' mode on Cisco devices even if already in 'enable' mode after login Fixed Comware 7 backup not working Fixed Comware not being discovered over Telnet Fixed newer versions of HPE V1910 / HPE 1920 switches not being discovered Fixed UBNT EdgeSwitch discovery not working in certain conditions Fixed errors in log when starting with invalid DB encryption key, the error will properly show on the Starter screen Fixed SSH to be discovered even if the device outputs invalid SSH server identification string Tickets closed by this release: UN-32, UN-82, UN-140, UN-158, UN-174, UN-175, UN-176, UN-177, UN-178, UN-180, UN-181, UN-184 Known issues: Application startup times can be long (up to 2 minutes on slow hardware) = Version 0.3.3 = Features: Added support for SSH keys (password-based or SSH-key-based Device Credentials can now be created) Added "Info" button to device table which shows additional information about selected device (used credentials, schedule, etc.) Performance improvements when many events are generated by the system concurrently (such as when performing operations on a large number of devices) Updated NetXMS API to support NetXMS 2.1 Device import now runs asynchronously and doesn't block the UI (much better experience when importing 3k+ devices) Current application version is now shown on the Dashboard Added support for: - Cumulus Linux Fixes: Fixed pfSense not being discovered if logged directly into the Shell instead of the initial menu Fixed not getting whole config on Cisco IOS with non level 15 account with specific 'show run' command privilege Fixed device edit not working Fixed schedule table showing 2 schedules as default in rare situations Fixed schedule table showing wrong 'Used on devices' count after changing the default schedule Fixed search not working in Wizard schedule table Fixed email test showing success even when it failed in rare situations Fixed backup table selection not working as expected after device change Fixed updates on detached ui components produced errors Tickets closed by this release: UN-64, UN-96, UN-122, UN-160, UN-161, UN-162, UN-163, UN-164, UN-166, UN-167, UN-168, UN-169, UN-170, UN-171, UN-172 Known issues: Application startup times can be long (up to 2 minutes on slow hardware) = Version 0.3.2 = Features: Added PostgreSQL support Application performance has been visibly increased with 2000+ devices in the system Added 'Show credentials' ability in the Credentials table All tables are now automatically refreshed on data changes - the manual refresh button has been removed All input windows now treat ENTER as a confirmation All input windows now treat ESCAPE as a cancellation Added ability to email a device backup directly from Unimus to any email address Added ability to send a device backup directly from Unimus to a Slack channel Added support for: - Exalt ExtendAir Fixes: Fixed 'Use TLS' being ignored in Email settings Fixed wrong driver being selected for devices during Discovery in rare situations Fixed devices not being discovered by Telnet in certain situations Fixed Cisco Nexus and ASA backup not working when user was put in User EXEC mode after logging-in Fixed Ruckus ZoneDirector not being discovered (and therefore not being backed-up) Fixed Cisco ASA backup ending empty lines not being properly stripped Fixed HP ProCurve backup ending empty lines not being properly stripped Fixed table search not searching if space present Fixed table search not searching in uppercase texts Fixed being unable to login in certain situations after restarting Tomcat (only an issue when running as .war) Tickets closed by this release: UN-47, UN-50, UN-65, UN-81, UN-88, UN-109, UN-129, UN-143, UN-148, UN-150, UN-151, UN-152, UN-154, UN-157, UN-159 Known issues: Application startup times can be long (up to 2 minutes on slow hardware) = Version 0.3.1 = Features: Improved performance when 2000+ devices in the system Improved striping of beginning and ending empty lines from backups Fixes: Fixed database initialization errors on Linux (caused errors when finishing Configuration Wizard) Fixed database drivers not working in .war distribution Fixed scheduled jobs not running on devices with non-default schedules Fixed unable to login when Radius enabled Fixed Cisco IOS backup not working Fixed Cambium ePMP not being discovered Fixed UBNT TOUGHSwitch backup not working Fixed FortiADC backup not working Fixed redirecting to '/' on Logout rather than to Login page (only an issue if Unimus was not running on '/' context path) Fixed incrementing 'Notifications sent' counter even if no notification senders enabled Tickets closed by this release: UN-137, UN-138, UN-139, UN-141, UN-142, UN-144, UN-145, UN-146, UN-147 Known issues: Application startup times can be long (up to 2 minutes on slow hardware) = Version 0.3.0 = Features: Added automatic database upgrades (new releases from now-on will automatically take care of database upgrades) Local application users passwords are now hashed in the database, instead of being encrypted - adds additional security Switched order of successful and failed job logs on the Dashboard (failed job history is now at the top) Graphical improvements in the entire application Multiple accordion sections can now be opened at the same time "Show scheduled tasks" window improvements Added possibility to enable/disable individual device connectors (SSH, Telnet, HTTP, HTTPS) Added database disconnection handling, Unimus will show an error screen if DB connection is not available and constantly try to reconnect When a new input popup is spawned, focus is automatically switched to required input fields Added more help text on Connector configuration page When device credentials are deleted, all devices using those credentials are automatically re-discovered Made the Logout button responsive - it no longer overlaps with other menu items when screen size very small Discovery is automatically performed on all un-discovered devices when new device credentials are added Added Notification support - notifications are now configurable - you can select on which events a notification is sent - implemented Email notifications - implemented Pushover notifications - added Slack notification support Added Telnet support - all supported devices can be connected to over Telnet as well as SSH - Telnet by default disabled, has to be enabled in connector configuration Unimus now logs into logging files (as well as console if running as .exe or .jar) - on Windows: C:\ProgramData\Unimus\log\unimus.log - on Linux/Unix: /var/log/unimus/unimus.log Added a new Starter mechanism - checks the status of all system components before Unimus starts - if there are any startup issues (log files inaccessible, DB connection error, etc.), they are listed on the startup page - suggested ways to resolve the issue are shown; also if Unimus needs to be restarted to fix the issue Added support for: - Brocade VDX - Cambium ePMP series - Cisco Nexus - Cisco SMB SF500 and SG500 series - Extreme EXOS - Extreme Extremeware - Fortinet FortiADC - IgniteNet FusionSwitch - Juniper JUNOS - Palo Alto firewalls - Quanta switches - Ruckus ZoneDirector - Sophos UTMs (Astaro) - UBNT RC and update (U2, etc.) firmwares - UBNT UniFi switches Fixes: Fixed being able to delete last local application user (access to application could have been lost in this case) A login attempt with 'unimus-discovery-ssh-test' user is no longer performed during SSH discovery Fixed discovery/backup failing when the first character of device prompt was a regex control character Device discovery is now more dynamic - devices which are slower to respond could previously not be discovered; now they will work without issues When removing the last device, user is properly redirected to the "Add first device" screen instead of seeing empty device table All drivers for devices which require entering an 'enable' mode now properly log an error when switching to 'enable' mode fails rather then just failing without any error Fixed proxying of HTTP(S) communication not working when required to go through HTTP(S) proxies Fixed wrong running discovery/backup counters on Dashboard Fixed wrong "Used on" counters in Credentials and Schedules screens Fixed visual bug on the Dashboard - bottom border was not stretched enough Fixed successful job table not refreshing on the Dashboard Fixed being able to delete the default schedule in the Wizard Fixed a NPE when accessing an invalid path Fixed DB SSL connection warning in logs Login page responsiveness not working in Firefox and some other browsers Page title is correctly set to "Unimus" Fixed license key switch issue Fixed exception stacks in logs when no database connection at start Known issues: Application startup times can be long (up to 2 minutes on slow hardware) = Version 0.2.3 = Features: Added device edit functionality Made the login screen nicer Local user database manipulation is now possible (create/modify/delete local system users) Added system access history table (login/logout time and authentication method) Added Radius support: - support for user login from Radius (Unimus as a Radius client) - user session accounting to Radius is now supported (both locally and Radius authenticated user's sessions are accounted to Radius) Added support for: - Cisco ASA - Cisco SMB switches (SF300, SG300, etc.) - Fortinet FortiOS (FortiGate, etc.) - WatchGuard (Fireware OS) Fixes: Already logged-in user is auto-redirected to dashboard when connecting on a new tab or window (instead of needing to login again) Fixed UBNT EdgeRouter backup with long configuration parameter strings Fixed backups not being sorted from newest by default = Version 0.2.2 = Features: If there is a critical error during startup, a page describing the error and required steps to solve it will be displayed Added support for: - HP Comware routers (A-MSR, etc.) Fixes: Fixed SQL sessions timing out and not reconnecting when inactive for a long period Fixed HP Comware backup not working HP ProCurve driver now supports even more ProCurve switch variants Fixed wrongly identifying HP Comware and 3com switch models Fixed not discovering older versions of Halon SecurityRouter Fixed discovery failing when device returned "too many authentication failures" during discovery Fixed UBNT EdgeRouter backups (for real this time) Fixed unable to identify MikroTik devices with long (40+ characters) identity strings Fixed multiple rare SSH issues Fixed showing wrong importer type in "Scheduled tasks" table Logs for startup errors (such as unable to create config file) are now much more readable (removed exception stacks) = Version 0.2.1 = Features: Added support for: - NetScreen ScreenOS - Ubiquiti airFiber - Ubiquiti AirOS 6,7,8 (all airMax devices should be supported now) - Ubiquiti TOUGHSwitch Fixes: Fixed always appending new values to port list instead of over-writing the list with new values Fixed MySQL "Cannot execute statement in a READ ONLY transaction" errors Improved UBNT AirOs v5 support - XM and XW supported as well as more v5 versions are now supported HP ProCurve driver now supports more ProCurve switch variants Fixed striping spaces from HP ProCurve backups that should not have been stripped = Version 0.2.0 = Features: New database layer - redesigned and optimized (a single Unimus instance can now support virtually unlimited devices) New table implementation - can now handle virtually unlimited records per table without any slow-down Discovery and Backup failure reason messages are now more precise Added a "Discover now" button on the Devices page Added a popup informing user that the task was run when doing "Backup now" or "Discover now" on device/devices Redesigned the device table on the Devices page Search now searches in "Address", "Description" and "Model" fields in Devices page Search now searches in "Address" and "Description" fields in Backups page Redesigned successful and failed Job Logs tables on the Dashboard Added support for: - Halon SecurityRouter - pfSense Fixes: Application will now log a friendly message and exit if config file can not be created (due to permission issues, etc.) Fixed reporting wrong SSH discovery failure reason (for example, "no valid credentials" would be reported instead of "ssh security algorithm negotiation failure") Fixed not removing device from internal scheduler after the device has been deleted (also fixes exceptions in log during scheduled backup caused by this issue) Fixed .exe distribution Java version check when the update number is higher than 99 (e.g. JRE 1.8.0_101) Fixed application freezing for prolonged period when importing a large number of devices (1000+) Fixed application freezing for prolonged period when removing a large number of devices (1000+) Fixed more issues with UBNT EdgeRouter backups Improved HP ProCurve switch discovery on Linux Fixed unable to remove credentials in wizard Fixed not displaying notification when trying to add duplicate credentials Fixed issues with selection not reseting when changing devices in Backups screen Fixed "Used by count" on Schedules and Credentials page being incorrect in heavily concurrent scenarios = Version 0.1.3 = Features: Added "Show scheduled tasks" button to "Schedules", which shows all scheduled tasks and when they will run Added Discovery and Backup subsystem load to dashboard Added Discovery and Backup min., avg. and max. durations to the dashboard Jetty 9 now supported in .war mode Added Import functionality: - one time import from an address list or .csv file - one time or scheduled (sync) import from NetXMS and Zabbix Added support for: - 3Com switches - Dell PowerConnect switches - HP Comware (former 3Com) switches - TP-Link switches (JetStream series and Smart Switch series switches) Fixes: Downloaded backup file name now contains address of the device the backup is from Fixed sorting by date in all tables Added confirmation dialogs on schedule removal and default schedule change Fixed wrong credentials password label when running in .war mode Fixed licensing usage indicator on the dashboard Fixed an issue causing a device to be set to an invalid internal state when discovery failed in certain conditions Fixed discovery of AirMax devices with older AirOs v5.5 versions Fixed discovery of HP v1910/1920 switches with older firmware versions Improved support for EdgeCore switches (some models were not discovered) Fixed backup not working on UBNT EdgeRouters = Version 0.1.2 = Features: Redesign of the internal discovery and backup logic Added support for: - Cisco IOS routers - Cisco IOS switches - DCN switches - EdgeCore switches - HP ProCurve switches - Netonix switches - Ubiquiti AirMax (AirOS v5) = Version 0.1.1 = Initial closed Beta release = Version 0.1.0 = Internal release