Page Comparison

Key objectives

In this release a lot of underlying work has been accomplished for upcoming feature in the upcoming release(s). This includes work for the better onboarding experience when adding devices into Nanitor that collect data from network devices or databases. Additionally we will add the ability to select other than profile 1 CIS benchmark profiles and the possibility to customize the values for certain parameters in some checks. These features will be better announced in the upcoming release.

Nanitor is always striving to increase the user experience. Therefore a lighter and more intuitive UI is key. In this release we introduce a redesign of the modal windows. Modal windows are interactive windows that expect input from the end user. One of the characteristics of a modal window is take ownership of the screen and drawing the attention of the user to the window where he needs to take a decision on the output or input data. All modal windows are now clearer and the user should easier and quicker know what is expected from him or he knows what the selectable items mean to himThis release includes a huge milestone by implementing the possibility to select both Level 1 and/or Level 2 benchmarks. Additionally a couple of CIS benchmark checks can be customised in order to match organisation’s technical policies. To start with we are have been implemented this feature set for the CIS benchmarks for Windows 10 and 2016.

If you want to know more on how to apply a different level of benchmark rule refer to the documentation here. With this Nanitor release onwards it will be possible for certain benchmark rules to set customised values for a rule to check against. E.g you might want to set the password policy to 30 characters rather than the default value provided by CIS. Customisable rules are available within the Windows 10 and 2016 benchmarks only to start with but will be extended to further benchmarks in the upcoming releases. You can refer to our documentation on how to customize benchmark rules here.

One of our focus points for the next release is a better usability of Nanitor. As a commitment to that goal we implement more possibilities in the issue filter. This is to reflect and streamline along with other areas within Nanitor.

Having a prioritised list of issues is fundamental to scope out work to harden your IT infrastructure. We are aware that fixing vulnerabilities can be hustle and sometimes simply impossible when vendors do not provide fixes or vulnerabilities are discovered in shared applications with a high risk of upgrading. Nanitor ranked issues higher up the diamond with time with the so called elevator. This meant especially for vulnerabilities ending up on top of the diamond quickly resulting in an overwhelming amount of issues to handle. Included in this release is a breaking change by removing this age elevator by default. Means you will recognise a markable amount of issues being released from the top of the diamond. We made this “feature” now configurable in order for you to turn it back on when you wish to do so.

New Features

• You can now customize certain benchmark rule checks for the WIndows 10 and 2016 benchmark

• New and better possibilities to filter on issues. A couple of filtering options have been added

...

Improvements

Benchmarks

These benchmarks have been upgraded to support the most recent version from CIS.

For more information on supported benchmarks visit the documentation of our benchmarks space.

Fixes

Feature removal

None

Breaking changes

• We removed the issue age elevator by default. You can re-enable the the issue age elevator from the Nanitor settings menu. For more information refer to the documentation.

• Projects - change "delete" into "archive" (NAN-1698)