Version 6.5.0.0401 (April 1, 2022)

New Features

DeviceID registration and renewal verification using Deepnet Authenticator (3469)
Introduced DeviceID renewal (3469)
Improved extraction of DeviceID properties (3473, 3525, 3563)
Added FIDO2 support (3420)
Travel velocity detection (3017)
Replaced log4j with logback in the authentication server module (3447)
Replaced log4j with logback in the certificate server module (3441)
Upgraded log4j from 1.2.17 to 2.17.2 in the management console module (3451)
New Device Sign-in support for Outlook Anywhere and ActiveSync (3516)
New Device Sign-in support for Computer Logon (3528)
New Device Sign-in support for Deepnet Authenticator (3529)
Automatically renew the SSO certificate when the associated let's encrypt certificate has been renewed (3564)
DualShield Deployment Service - support incoming username as a URL parameter 'username' (3582)
DualShield SSO - support incoming username as the NameID attribute in the SAML request (3612)
DualShield SSO - upgraded jquery to 3.6.0 (3590)
Added "Send Activation Code via email" for DeviceID

...

Failed to save the Product value in the task 'delete token by product' (3415)
Error - "500:no enum constant com.deepnet.das.util.LogicalOperator", when navigating to Reports (3463)
Error - "Gateway type not matched for TELEPHONE" in the Admin Console (3489)
DualShield Service Console - user-defined token properties were not displayed for T-Pass and MobileID (3545)
User's external status (Active/Disabled) change not reflected immediately (3561)
Querying available channels for activation code raised exception (3565)
LDAPBroker integration error: No signature of method (3569)
In push token email, QR-Code is always included (3620)
Searching LDAP user by internal attribute didn't work (3621)
After LDAP user's internal attributes have been updated, DAC always shows the old values (3624)

...

3. Log4j 2 in the certificate server (frontend) has been upgraded to the latest log4j 2.15 which has fixed this vulnerability.

...