With this release we have improved performance, added features, fixed some bugs and done some product internal cleanup and restructuring to prepare for future releases.

Features

We have added the following features to Impex:

  • A new printed receipt type was added that suits organizations wanting to provide an audit trail of exactly what files were scanned by which versions of AV engines and the last updated timestamp of the AV engine signature database. The files scanned and their checksums are also included on the paper receipt.

  • Quarantine of files can be turned on. By checking the “quarantine files” checkbox on the ICC, infected files found on stations will be uploaded to the ICC. The management interface for this in the ICC will come in a later release, after the new ICC design has landed in the next version. It will also be possible to do transfers where the infected files are not copied over. If you have input on this feature, please reach out.

Performance

We have also made some changes behind the surface when it comes to data exchange between different components, which have cut execution times and times processing data. This allows for a series of performance enhancements, some which are noticeable in this release. The scanning file results uploaded by the stations are now uploaded and imported in one transaction, instead of a series of transactions. This will result in a much shorter latency between the scan and the result being available in the ICC.

Apart from these features the following bug fixes and additional changes were done in this release:

Station

  • Printed receipts now also include the AV engines, their version and last updated db signature that was used for the scan.
  • Added functionality to include a full listing of scanned files on printed receipts (configured via ICC).
  • The font was changed on the printed receipts to improve readability.
  • The station backend now uses a single sqlite database for each scan, for keeping filename, checksums and AV engine matches in one place. This is what gets uploaded to the ICC if file meta upload is turned on. This is a refactor that enables other upcoming improvements on the IMPEX roadmap.
  • Wifi WPA logs were added to the nightly uploaded station logs to help in troubleshooting wifi issues.
  • Unified the last updated timestamp format in the system’s information view to look like the other dates.
  • Moved initial configurations from the installation part to IMPEX controlled configurations. This is a part of an ongoing process in making IMPEX into a product that potentially can be installed by a third party on approved customer hardware.
  • Minor updates of AV-engines to ensure the correct version is stored after signature update.
  • Minor fix to ensure temporary files are cleaned up during AV-updates.
  • Operating system updates applied, including security updates and more hardening.

ICC

  • Added configuration option for choosing printed receipt types.
  • The scanning file results uploaded by the stations are now uploaded and imported in one transaction. This massively improved the time for a complete file listing for a scan to become visible in the ICC. In one example with 8000 files it went from 147 seconds to 1 second.
  • Moved initial configurations from the installation part to IMPEX controlled configurations. This is a part of an ongoing process in making IMPEX into a product that potentially can be installed by a third party on approved customer hardware.
  • Operating system updates applied, including security updates and more hardening.

Repo server

  • Operating system updates applied, including security updates and more hardening.
  • Moved initial configurations from the installation part to IMPEX controlled configurations. This is a part of an ongoing process in making IMPEX into a product that potentially can be installed by a third party on approved customer hardware.

Documentation

  • Documented the available receipt types in the ICC manual.

Known issues

  • Documentation for quarantine of files is missing
  • Adding new Device and Exception Rules to set/group only works if the set/group has been saved first.