Dectar is excited to announce the release of version 7.6.0 of ACSIA SOS, introducing powerful new features to enhance integration and device management, further strengthening your cybersecurity defenses.
New Features in v7.6.0
- Firewall Integration ACSIA SOS now integrates with Fortigate firewalls, offering a unified view of your infrastructure and enabling seamless communication for enhanced threat response.
- Unified Device Overview:
The ACSIA SOS interface now displays detailed information about your firewall alongside your other devices (servers and clients). This centralized view allows you to monitor and manage your entire infrastructure from a single platform. - Dynamic Rule Creation via API:
When ACSIA SOS detects a threat and applies an IP ban as remediation, it communicates with the firewall via API to automatically create corresponding rules. These rules are not pre-existing in the firewall, ensuring effective enforcement of bans at both the ACSIA SOS and firewall levels. - Secure Token-Based Communication:
The communication between ACSIA SOS and Fortigate is secured with token-based API authentication. The token must be generated by an administrator using the Fortinet GUI and is designed to be exclusively used by ACSIA SOS for security purposes. - Guided Setup:
When adding a device of type “firewall” in the ACSIA SOS interface, users are provided with a detailed guide on generating the API token in the Fortinet GUI, making the integration process straightforward and secure.
- Unified Device Overview:
- Device Tags
Users can now create and apply custom tags to multiple devices within the same tenant. This feature simplifies device organization and enhances management capabilities, making it easier to classify and track devices based on specific criteria.
Improvements in v.7.6.0
1. Enhanced Password Security
The length of passwords automatically generated for accessing the compliance Wazuh dashboard has been increased from 10 to 32 characters, providing significantly stronger protection against unauthorized access.
2. Bulk Actions in Device Management
A new bulk actions feature has been added to the device management section, allowing users to select multiple devices and perform actions on them simultaneously. The supported actions include:
- Uninstall: Remove the ACSIA SOS agent from selected devices in bulk.
If you have questions or need assistance, please reach out to our support team.