Feature:

• Launching ManageEngine SecureAI in AD360: ManageEngine SecureAI is now available as part of AD360, helping organizations govern AI agents, assess their risk, and protect their access to applications and data. SecureAI offers:

  • Agent and entitlement discovery: Discovers AI agents in supported connected applications and shows their associated models, MCP servers, and entitlements. Shows the owner recorded for each entitlement, where available, to support approval and review.

  • Agent ownership: Automatically assigns owners to newly discovered unmanaged agents based on assignment rules evaluated in priority order.

  • Interactive agent access graph: Shows what one agent can reach, including its roles, API permissions, guardrails, knowledge bases, tools, MCP servers, models, and the other agents it works with.

  • Over-privileged agent flagging: Identifies agents that hold entitlements marked as privileged, helping reviewers quickly spot high-risk access during access reviews and when creating access templates.

  • Reusable access templates: Groups entitlements from multiple applications into a reusable set for access certification campaigns.

  • Scheduled certification campaigns: Schedules a review of agent access, and sets what is reviewed, which agents are included, who reviews it, how often the review repeats, and what happens to anything left undecided.

  • AI risk assessment: Measures each connected AI account against risk indicators mapped to the NIST framework, and calculates a risk score out of 100. The score is tracked across assessments, and each failed indicator carries a severity, the affected users, keys, or settings, and the remediation steps.

  • MCP gateway: Routes agent tool calls through a gateway with a single address in place of each MCP server's own, and checks every call against the control policies attached to that gateway before letting it through.

  • Access control policy: Allows or blocks gateway-routed tool calls based on contextual factors such as time, IP address, MCP server etc. Includes built-in policies based on OWASP Top 10 and MITRE ATLAS recommendations.

  • Data loss prevention (DLP) policy: Detects sensitive data in gateway-routed tool calls using built-in regex patterns for PII or custom patterns, and redacts or blocks matches based on the configured policy.

  • Unified dashboard: Brings together the agent and MCP server counts, guardrail coverage by platform, the enterprise AI risk score, the most used MCP servers, and recent gateway activity, and every figure leads to the records behind it.

  • Prebuilt reports: Provides platform reports on discovered agents, recent changes, blocked and unmanaged agents, privileged access, and associated tools, knowledge bases, and guardrails. Gateway reports cover routed tool usage, server errors, and slow calls.

  • Audit report: Records gateway-routed tool calls and their outcomes, along with supported technician and administrator actions in SecureAI, for later review.

  • Help desk delegation: Grants each technician only the part of SecureAI their work requires, through built-in roles or roles built from individual permissions. A separate workflow role of reviewer, approver, or executor decides which governance stages a technician can be assigned.

Enhancements:

• Updated Duo Universal JAR to v1.3.1. This maintains compatibility ahead of the Duo legacy version sunsetting on February 2, 2026.

Enhancements:

• Tomcat updated from version 9.0.99 to 9.0.112.

• Introduced support for High Availability deployments across different subnets.

Issue fixes:

• Resolved minor issues to improve overall product stability.

Issue fixes:

• Fixed a critical out-of-memory crash that caused downtime.

Enhancements:

• You can now enable or skip two-factor authentication for specific technicians.

• Advanced settings have been added to configure encryption and signing in SAML-based SSO.

• AD360 now uses upgraded versions of Apache Tomcat (version 9.0.99), JRE (1.8.432), PostgreSQL (version 15.8), and Microsoft SQL Server driver updated to JDBC.

Issue fixes:

• Minor issues have been fixed to improve the stability of the product.

Enhancements:

• M365 Manager plus will now come bundled with AD360, enabling centralized hybrid AD and Microsoft 365 management, reporting, and auditing.

Enhancements:

• You can now register for security advisory notifications from the Security Hardening section to ensure timely updates about recently released fixes for vulnerabilities.

• All component integrations will now require the credentials of the component’s super administrator.

Issue fixes:

• Some issues have been fixed to improve the stability of the product.

Enhancements:

• Centralized technician management support has been enabled for the component M365 Manager Plus.

• JRE has been updated to version 1.8.0_412.

Issue fixes:

• Minor issues have been fixed to improve the stability of the product.

Enhancements:

• The Tomcat version has been upgraded to 8.5.99.

• The Compliance tab has been revamped with a fresh user interface.

Issue fixes:

• An issue which occurred when configuring 2FA using Internet Explorer has been fixed.

• An issue with the widget selection for custom dashboard has been fixed.

• An issue where the Reverse Proxy configured in HTTP mode gets disabled when AD360 is restarted has been fixed.

• An issue where technicians were unable to login to the product through SAML SSO when the user names were configured in UPN format has been fixed.

Issue fixed:

• A minor issue with the Centralized Technician Management feature has been fixed.

Highlights:

• Centralized technician management: Technicians' accounts can be managed centrally from the AD360 admin console for all the components.

• ADManager Plus reports: You can now access all ADManager Plus’s Active Directory, Exchange, file server, and compliance reports from the consolidated reports tab.

Enhancement:

• Force SAML login: You can now force technicians to login to AD360 using SAML authentication instead of the traditional username and password.

Issue fix:

• A security vulnerability (CVE-2024-21733), which led to account takeovers, has been fixed by updating the Apache Tomcat Server bundled in the product from version 8.5.57 to version 8.5.98.

Enhancement:

• The public key certificate used for service pack upgrade has been updated.

Enhancement:

• Support for Duo Security Web v4 SDK: You can now configure Duo Security using Web v4 SDK as a secondary authentication factor to verify technicians when they log in to AD360. Duo security has announced end-of-life for Web v2 SDK on 30 March, 2024. We recommend all users to configure Web v4 SDK immediately.

Enhancement:

• RSA SecurID REST API support: AD360 now supports REST API-based integration with RSA Secure ID, besides SDK-based integration. It is recommended to use REST API-based integration as RSA Security LLC has deprecated SDK-based integration.

Highlight:

• Product File Tamper Detection: AD360 now allows you to monitor the product's executable files and identify the tampered files in the installation directory.

Issue Fixes:

• A security vulnerability (CVE-2023-35785), reported by dalt4sec, has been fixed.

Issue Fixes:

• Minor issues encountered during database migration have been fixed.

Highlight:

• Database restore: You can now restore the database backups of AD360 from the product's user interface.

Enhancement:

• AD360 now allows you to generate dashboard and widget share links with access tokens.

Enhancement:

• The third-party xmlsec JAR files in the product have been updated to version 2.3.0.

Important update:

• Third-party requirement for NTLMv2 SSO: To enable NTLMv2 SSO for ManageEngine AD360 and the integrated components in builds 4309 and above, you will have to manually download the Jespa JAR file and add it to the product's lib folder. For more information, click here.

• Note for customers who are on build 4308 or lower: If you have already enabled NTLMv2 SSO, you can continue using the feature and no further actions are needed.

Enhancement:

• AD360 now allows you to configure your mail server using SMTP (Basic or OAuth authentication) or using your mail service provider’s API.

Highlights:

• SharePoint Manager Plus integration: Manage, audit, and secure your on-premises and SharePoint Online environments by integrating SharePoint Manager Plus with AD360.

Enhancement:

• JRE update: JRE which comes bundled with the product has been updated to version 1.8.0_282.

Highlights:

• New 2FA methods: You can now use Microsoft Authenticator and any Time-based One-Time Password (TOTP) authenticator as a secondary authentication factor to verify users’ identities during login.

Highlights:

• Audit-ready compliance reports: You can now generate predefined and audit-ready reports for the following compliance regulations.

  • PCI DSS
  • GDPR
  • CCPA
  • FISMA
  • POPIA
  • HIPAA
  • SOX
  • GPG
  • CMMC

Highlights:

• In-product push notifications: AD360 will notify users about issue fixes, patch availability, and other essential updates through in-app banners.

Issue Fixes:

• Minor issues were fixed to improve the stability of the product.

Issue Fix:

• Some minor issues have been fixed.

Issue Fix:

• Log4j dependency in AD360 has been removed to ensure security.

Enhancements:

• Updated Tomcat server: The Tomcat server which comes bundled with the product has been updated to version 8.5.57.

• Updated jQuery: The jQuery used by the product has been updated to version 3.5.1.

• Secure backup archives: AD360 database backup archives are now password protected.

Issue Fixed:

• This release includes a fix to prevent unauthorized remote code execution (RCE).

Highlights:

• Security Hardening: This feature provides access to all of the product's existing security-related settings under a single tab to ensure better accessibility to the security configurations. You can also get to know how secured your product is with Product Security Hardening.

• Default Product Accounts' Password Change Notification: Admins will be notified if the product in-built users' default password is yet to be changed, through email, and in the AD360's notification center.

Enhancements:

• Two-factor authentication: You can now enable a second authentication factor for the default product users apart from the already existing support for domain users.

Issues Fixed:

• Fixed account takeover issue by enforcing SAML signature verification before logging in users through SAML SSO.

• Fixed the Post-Auth OS command injection issue that occurs while configuring database backup in an external location.

Enhancements:

• Instantly load all the integrated components: All AD360's integrated components will now load automatically once you log into AD360. This saves the time spent in waiting to load the components individually.

• Reorder the components in apps pane: AD360 now gives you the option to reorder the display of the components in the apps pane. You can simply drag and drop the components to the desired position.

• JumpTo UI revamped: You can now find the featured products of AD360 organized into sections.

• Revamped integration settings: The integration settings have been revamped to present the components in a simple, user-friendly fashion.

• Improved downtime notifications: Downtime notifications will be sent to the admins if the product is down due to unexpected causes including out of memory errors or database access failures.

• Support for Chinese (Traditional): AD360 can be now set up to use traditional Chinese as the user interface language.

Enhancement:

• AD360 now includes provisions to set TLS protocol versions and configure cipher suites.

Issues Fixed:

• Minor bugs have been fixed.

Enhancements:

• Browser notifications: Get push notifications in your web browser for product downtime, updates, new events (workshops, webinars, seminars), and more.

Issues Fixed:

• Minor bugs have been fixed.

Highlight:

• Self-service password reset: Allows domain users to reset their passwords from their AD360 logon screen when the product is integrated with ADSelfService Plus.

Enhancement:

• Minor enhancements have been made in the Roboupdate functionality.

Enhancement:

• Some built-in third-party applications used by AD360 have been updated:

  1. jQuery has been updated to v3.4.1 from v1.8.1.
  2. Jespa jar has been updated to 1.2.2 from 1.1.19.

Issues Fixed:

• A vulnerability which allowed a user to enable integration with other supported ManageEngine products bypassing authentication.

• Some minor issues have been fixed.

Issue fixed :

• The issue in sending e-mails when the TLS (TLS v1.1 and TLS v1.2) security setting is enabled in the mail server is rectified in this build.

What's new:

• Few minor enhancements and bug fixes.

Enhancement:

• REST API support: Use HTTP GET and POST methods to read and update domain, proxy, and mail server settings configured in AD360.

• IP-based API and product URL restriction: Allow access to APIs and product URLs to individual IPs or only a specific range of IP addresses.

Issues Fixed:

• Issue faced by certain users in backing up MS SQL database configured in AD360.

• A few minor issues.

Enhancement:

• Implemented security measures to prevent CSRF attacks.

Issues Fixed:

• Some minor issues have been fixed.

Issues Fixed:

• Some minor issues have been fixed.

Highlight:

• SAML-based SSO to access AD360: Allow users to log into AD360 easily by setting up single sign-on through SAML-based third-party identity providers such as Okta, OneLogin, PingIdentity and AD FS.

Enhancement:

• LDAPS can now be enabled or disabled individually for each AD domain.

Issues Fixed:

• Issue in disabling the high availability configuration of integrated products from AD360.

Enhancement:

• Japanese characters can now be used to generate CSR using the built-in SSL Certification Tool.

Issues Fixed:

• Issue in configuring smart card authentication when AD360 is installed on a system that is running the Japanese Windows OS.

• Some security issues have been fixed.

Issues Fixed:

• Issue which failed to run automatic backup schedule if the PostgreSQL database version is 9.2 or lower.

Enhancement:

• The SSL Certification Tool UI has been revamped for better usability.

Issues Fixed:

• Issue in accessing the integrated products from the Apps Pane when context-based reverse proxy is enabled.

• Issue in enabling LDAP SSL.

• Issue in configuring MS SQL database migration using a Windows domain account that doesn't have permission to access the selected SQL instance.

Highlight:

• MS SQL auto-backup: Now schedule automatic backup for the MS SQL database configured in AD360 and restore it as per your requirement.

Highlight:

• Categorize reports from different components: Group similar reports from different components together by creating custom report tabs and categories. This will help you consolidate events, such as users’ logon activities, across AD, Office 365, and Exchange server,and view them without having to jump between different tabs or consoles.

Highlight:

• Backup verification codes for login: Helps users log in to AD360 in case they face issues during two-factor authentication, such as issue in receiving codes via text or if they do not have access to their mobile devices.

Enhancement:

• The notification center UI is revamped to let you filter product notifications based on their priority levels such as critical, warning, and info.

Enhancement:

• The Jump To option for accessing the integrated products has been revamped for easier access.

Issues Fixed:

• An XSS vulnerability has been fixed.

• Minor UI issues have been fixed.

Highlight:

• Language Customization: Personalize AD360 by modifying any text displayed in its web interface to suit your organization needs.

Enhancement

• Database migration made easy: Now you can easily change AD360's bundled PostgreSQL database to MS SQL or another instance of PostgreSQL from the web console.

Issues Fixed:

• Some minor issues have been fixed.

Highlight:

• Simplified SSL certification tool: A completely revamped SSL certification tool allows you to easily apply SSL certificate for AD360 with just UI-based actions.

Enhancement:

• Product and event notification: Stay updated about new product features, events, and more.

Highlight

• Centralized reverse proxy support: Enhance security by configuring AD360 as a reverse proxy server that receives all client requests, forwards them to the appropriate integrated components, and responds to the requests without revealing the identities of the servers.

Enhancement:

• Centralized high availability configuration support has now been extended to ADSelfService Plus.

Issues Fixed:

• Brute force attacks can now be prevented by enabling CAPTCHA in AD360 login page.

• Remote code execution vulnerability issue has been fixed.

• Issue which allowed users to access the product's log information.

Issues Fixed:

• Some minor issues have been fixed.

Feature:

• IP-based access restriction: Allow/restrict access to AD360 based on a range of or specific IP addresses.

Issues Fixed:

• Some minor issues have been fixed.

Enhancements:

• Apache Tomcat server used in the product has been upgraded to version 8.5.

• Java Runtime Environment (JRE) package has been upgraded to version 8.

Features:

• Exchange reports integration: Now you can integrate Exchange Server and Exchange Online reports in the centralized Reports tab in addition to Active Directory and Office 365.

• Dashboard customization: Create custom tabs under the dashboard and add widgets (reports in graphical format) from different integrated components.

• RecoveryManager Plus integration: Now back up your entire Active Directory and virtual machines (VMware & Hyper-V), and restore them in case of disasters by integrating RecoveryManager Plus.

Enhancements:

• Option to encrypt keystore password while configuring SSL (HTTPS).

Features:

• Two-factor authentication: AD360 now provides an extra layer of security for its users by supporting two-factor authentication during login. Supported authentication modes include:

  • Email verification
  • SMS verification
  • Google Authenticator
  • RSA SecurID
  • Duo Security
  • RADIUS Authentication

Features:

• Embed dashboard: Embed the entire AD360 dashboard in any webpage of your choice.

Issues Fixed:

• Other minor issues have also been fixed.

Issues Fixed:

• Fixed some minor issues.

New Feature:

• Smart card authentication: The use of smart cards/ PKI/ certificates has been enabled as additional options for AD360 login. If you have such an authentication system configured in your organization, AD360 can be configured to authenticate users through it, bypassing other first factor methods.

Enhancements:

• A revamped GUI, making it easier to work with the connected applications, and enhance user experience.

Issues Fixed:

• Minor bug fixes that improve the stability and performance of the application.

Issues Fixed:

• Fixed some minor issues.

Issues Fixed:

• Fixed some minor issues.

Features:

• Unified Active Directory and Office 365 reporting: Get access to reports on both on-premises Active Directory and Office 365 cloud in one spot.

Enhancements:

• Employee Search now works with the flat UI of AD360 and also neatly sorts the results based on users, groups, and contacts.

Issues Fixed:

• Other minor issues have also been fixed.

Features:

• Notification Center - Now get instantly alerted about critical events, such as low disk space, product downtime, and mail server configuration, and take necessary action from within the web console itself.

Issues Fixed:

• Other minor issues have also been fixed.

Enhancements:

• O365 Manager Plus Dashboard integration: Now get a bird's eye view of your Office 365 environment from AD360 Dashboard.

• High availability for O365 Manager Plus can now be configured from AD360.

Issues Fixed:

• Other minor issues have also been fixed.

Features:

• O365 Manager Plus integration: Now you can integrate O365 Manager Plus with AD360 and get access to exhaustive reports on Exchange Online, Azure AD, Skype for Business, and other critical services of Office 365.

Issues Fixed:

• Other minor issues have also been fixed.

Features:

• Configure NTLM Single Sign-On for all integrated components from AD360.

Enhancements:

• You can now synchronize mail server settings across all integrated components.

Issues Fixed:

• Other minor issues have also been fixed.

Enhancements:

• New flat user interface for an improved look and feel.

• Support for Japanese language.

Features:

• Centralized database management: Change the database of any integrated component from AD360.

• You can now choose to hide any component that you do not use from the dashboard, apps pane, and license module.

Enhancements:

• Enhanced license module: You can now apply the license to individual components and check the license application status from AD360 itself.

Issues fixed:

• Issue in integration settings which failed to remove a component when it is down.

• Startup issue when NTLM is enabled.

Feature:

• High availability support (active/standby mode) to ensure minimal downtime.

• Now easily back up the database of all the components from a centralized location.

• Unified single tray icon comprising settings of all the components.

• Apps pane is now available in all the components to facilitate easy switching between the components.

• Single sign out support to automatically sign out of all components.

• Single startup and shutdown to automatically startup and shutdown all the components.

Enhancement:

• Enabling NTLM SSO has been made easier.

Issues Fixed:

• Issue in UI performance when some components are down.

• Other minor issues have also been fixed.

Issues Fixed:

• An issue with auto update has been fixed.

• Other minor issues have also been fixed.

Issues Fixed:

• An issue with auto update has been fixed.

• Other minor issues have also been fixed.

Issues Fixed:

• Startup and shutdown issues when installed on a 32-bit machine have been fixed.

Issues Fixed:

• Issue in updating AD360 through service pack has been fixed.

• All the components have been updated to their latest versions.

• Java Runtime Environment used in AD360 has been updated to version 7.

Issues Fixed:

• An issue with auto update has been fixed.

• Evaluation period of components integrated in AD360 has been increased from 30 days to 60 days.

• Other minor issues have also been fixed.

Fixed:

• Issue in integrating the components when they are installed in a DMZ environment.

Fixed:

• Issue which triggered license expiry notification emails even if any one of the component is unlicensed has been fixed.

Enhancement:

• Option to enable/disable license expiry and product downtime notifications.

• Option to hide selected components from the dashboard.

Fixed:

• Issues that arise when the product is started multiple times simultaneously.

• Issue in saving changes made in the product settings tab.

Enhancement:

• Auto Update user interface has been enhanced by bringing it under the Admin Tab for greater visibility.

Fixed:

• Issue that affected AD360 user interface when Ad blockers are enabled in the web browser.

The latest release comes with a service pack for existing customers to upgrade and get all the fixes of build 4013.

Enhancement:

• Chinese language support: Default user interface language of AD360 can now be set to Chinese.

Fixed:

• An issue in the license module has been fixed.

The latest release comes with a service pack for existing customers to upgrade and get all the fixes of build 4012.

Enhancement:

• Now you can apply self-signed certificates to AD360 using the in-built SSL certification tool.

Fixed:

• Minor issues in the components when accessed from the apps pane.

• Log in issue which allowed disabled users to log in to AD360 when guest access is enabled in Active Directory.

• Issue in Single Sign-On when enabled with NTLM authentication.

The latest release comes with a service pack for existing customers to upgrade and get all the fixes of build 4011.

Feature:

• AD360 now supports Single Sign-on using NTLM authentication protocol for enhanced security.

• Introducing Apps Pane - now instantly access all the ManageEngine ADSolutions products from the same browser tab.

The latest release comes with a service pack for existing customers to upgrade and get all the fixes of build 4010.

Feature:

• AD360 debuts its 64-bit version for better stability and memory management.

Enhancement:

• License module has been enhanced to successfully apply the license even if certain components are down.

The latest release comes with a service pack for existing customers to upgrade and get all the fixes of build 4009.

Enhancement:

• Easily download and integrate the latest version of the individual components; no restrictions on version compatibility.

• Ability to view license details of each component individually within the AD360 console.

Fixed:

• SSL issues that appeared in Integration Settings, License Module & Dashboard Access have been fixed.

The latest release comes with a service pack for existing customers to upgrade and get all the fixes of build 4008.

Enhancement:

• Now integrating ADSelfService Plus will give you easy access to 'Employee Search' from anywhere in AD360.

Fixed:

• Fixed some minor issues.

The latest release comes with a service pack for existing customers to upgrade and get all the fixes of build 4007.

Fixed:

• Build 4007 comes with minor bug fixes that improves the stability and performance of the program.

The latest release comes with a service pack for existing customers to upgrade and get all the fixes of build 4006.

Fixed:

• Issue with domain users logging into AD360 when their username has less than 5 characters.

The latest release comes with a service pack for existing customers to upgrade and get all the fixes of build 4005.

Features:

• SSL Certification tool to help you secure AD360 with HTTPS for safer data transfer.

• Get prompt notifications via email whenever AD360 goes down.

Fixed:

• Issue with domain duplication.

The latest release comes with a service pack for existing customers to upgrade and get all the fixes of build 4003.

Features:

• Automatically update AD360 to its latest build with Auto Update.

• Automatic DB Backup to automatically backup the built-in database used in AD360.

• Get notified on AD360 License Expiry via email with License Expiry Notification reminders.

Enhancements:

• Page rendering speed has been improved.

Fixed:

• Issue in displaying perpetual license information.

• Issues in user interface.