Ivanti Security Controls 2024.1

Build Information

These release notes support the General Availability (GA) version of Ivanti Security Controls 2024.1, released in February 2024. The GA build is 9.6.9307.0 and it can be downloaded from the download page.

You can upgrade to Security Controls 2024.1 from Security Controls 2022.2 or later. See the Upgrade Guide for complete details.

IMPORTANT! We recommend you back up your current database before performing any upgrades. If you are using a full edition of SQL Server, use the SQL Server Maintenance Plan Wizard to perform the backup. SQL Server Express users who do not have access to the SQL Server Maintenance Plan Wizard can use the Ivanti Security Controls Database Maintenance tool.

Installation Notes

System Requirements

The following operating systems are no longer supported for use by the Security Controls console:

  • Windows Server 2012 family
  • Windows Server 2012 R2 family

The following operating systems are no longer supported as Windows endpoints:

  • Windows Server 2008
  • Windows Server 2008 R2

Microsoft SQL Server 2012 is no longer supported. You must be using Microsoft SQL Server 2014 or later.

A new version of the Microsoft Visual C++ Redistributable for Visual Studio 2015 – 2022 is available, so this will likely be identified as missing during the prerequisite check of the installation process.

For a complete list of requirements for the console, your agentless clients and your agent-based clients, see System Requirements in the help.

New Installation vs Upgrade

If you are an existing customer using Security Controls 2022.2 or later, you should upgrade to Security Controls 2024.1 (or 2022.2 if you require a Common Criteria certified version). This will enable you to maintain your current product database and configuration data.

If you are a new Ivanti customer or an Ivanti Application Control customer who is migrating to the Application Control feature in Security Controls, you will be performing a new installation.

Although the upgrade and new installation processes are similar, there are differences. For example, if you upgrade you will not be presented with the opportunity to create a new database or choose how users and services will connect to the database.

Disconnected Networks

If you are installing on a disconnected console machine, in addition to manually installing any prerequisite software, you must also manually download and install the product core files BEFORE you begin the installation process. For complete information on this process, see the Performing a New Installation topic in the Security Controls help.

For information on how to manually manage your data files in a disconnected environment, see How to Download Content Data Files and Patches Using the Download PowerShell Script on the Ivanti Community.

Enhancements and Improvements

This release contains the following changes:

  • In 2024, Linux patching in Security Controls is undergoing a major change as it transitions away from the content-based patching of previous versions to contentless patching directly from the distribution's repository. This provides a much more efficient and exhaustive mechanism for patching Linux devices. In this first release, you can scan for all vulnerabilities and then patch all.
  • When scanning virtual inventory, Security Controls honors all the configured download sources in your vSphere Lifecycle Manager, and also supports upgrading minor versions, such as from 7.0.1 to 7.0.2. A View button has been added to the right-click menu in the Virtual Inventory navigation pane to facilitate viewing your vCenter servers and ESXi hypervisors, and you can right-click the table on the Bulletins tab to export hypervisor bulletin details.
    VMware has ended support and technical guidance for versions 6.5, 6.7 and 6.7.1, and security updates are no longer published. Support for these versions will be removed in a future release, leaving the earliest supported version as 7.0.
  • New options for configuring the encryption of the connection between the console and SQL Server have been added. The new options provide more security, but may need further configuration.

    • The upgrade does not change this setting, leaving it at the least secure but most compatible setting. When upgrading, we recommend you review the database connection encryption setting using the Database Setup Tool. For more information, see Performing a New Installation in the Help.

  • Windows Server 2008 and Windows Server 2008 R2 endpoints are no longer supported.

Known Issues

None.

Removed Features

Feature That Was Removed from 2023.4

The Security Controls console is no longer supported on the following operating systems:

  • Windows Server 2012 family
  • Windows Server 2012 R2 family

Feature That Was Removed from 2023.2

The Ivanti Scheduler has been removed. The Microsoft Scheduler has been improved to the point that the Ivanti Scheduler was no longer needed.

Feature That Was Removed from 2022.2

Support for Red Hat Enterprise Linux 6 has ended. This is because Red Hat has stopped providing maintenance support for Red Hat Enterprise Linux 6.

Features That Were Removed from 2021.2 Update 1

The following operating systems are no longer supported:

  • The Security Controls agent is no longer supported on Windows 8 and CentOS 6 operating systems
  • Agentless operations are no longer supported on Windows XP, Windows Server 2003, Windows Vista and Windows 8 operating systems.

Features That Will Be Removed in Future Releases

  • VMware has ended support and technical guidance for versions 6.5, 6.7 and 6.7.1, and security updates are no longer published. Support for these versions will be removed in a future release, leaving the earliest supported version as 7.0.
  • CentOS 7 will reach end of support on June 30, 2024. Ivanti will be deprecating support for CentOS 7 beyond this end of support date and will be removing support in a future update.
  • The database views are now organized using the Reporting2 namespace. The original Reporting namespace will be removed in a future release and should only be used by legacy queries. All new queries should be created using the Report2.* views. For more information about report views, see the Generating Custom Reports section in the Security Controls help.
  • In the REST API, support for servicecredentials requests and the sharewithservice parameter will end in a future release. This capability is contained in the new shared credentials functionality.
  • In the REST API, support for the /metadata/vendor Family.products parameter will end in a future release. That capability is being replaced by the Family.productVersions parameter.

Bugs Fixed

2024.1 (build 9.6.9307.0, February 2024)

Problem ID Title

90450

Corrected an issue where deploying an Application Control Config prevented Microsoft Edge from launching. Edge displayed an error message ‘msedge_elf.dll not found’ on launch.

94881

Corrected an issue where MS23-08-W10-5029242 / Q5029242 fails to be detected as Installed after deployment and rescan.

98582

Upgraded to version 8.5 of curllib_x64.dll.

99012

Corrected an issue where scans with "No Patches" results were not updating View > Machines.

99247

Corrected an issue where an invalid/incomplete results file was encountered.

99422

Corrected an issue where the Last patch scan template column was not populated.

99432

Corrected an issue with end-of-life date warnings on non-latest builds.

99482

Corrected an issue where long Agent Task names were preventing jobs from being scheduled in V2023.4.

99746

Corrected an issue where certificate lookups were causing issues with Cloud Syncs and overall performance issues.