CloudPassage Halo — 14 January 2013

New Features and Fixes

The 14 January 2013 Release of CloudPassage^® Halo^® is a minor release that includes improved administrative capabilities for site administrators, clarified onscreen messaging for all users, enhanced logging capabilities, and other user experience enhancements and functional improvements. Also, support for the deprecated legacy API keys is removed as of this release.

Site administrator can change a Halo user's email address

A site administrator can change the email address of any Halo user listed on the Users tab of the Site Administration page. The Edit User page now includes a Change email link that makes the email address field editable.

Custom network services now editable

You can create a custom network service for your firewalls by clicking the Add Network Service button on the Network Services page in the Halo Portal. You can now also edit or delete a custom network service through the Actions menu for the service on the on the Network Services page.

You cannot delete a firewall service that is currently being used in a firewall policy.

"From" field changed on Halo email alerts

Previously, no-reply email messages from Halo displayed "donotreply@cloudpassage.com" as the sender. The sender is now displayed as "CloudPassage Halo", and the message body includes the statement "Please do not reply to this message."

"Delete server group" error message lists firewall policies

You cannot delete a server group that is being used as a source or destination in any firewall policy rule. If you attempt to do so, an error message is displayed. That message now lists the firewall policies from which the server-group source or destination must be removed before the group can be deleted.

Halo Logging Enhancements

This release includes the following enhancements to Halo's logging capabilities:

• GhostPorts. The following GhostPorts provisioning events now include the IP address of the user that made the provisioning change: GhostPorts permission granted, GhostPorts permission removed, YubiKey code changed, SMS phone number changed, SMS phone number verified.

  Also, the following GhostPorts event is now logged: GhostPorts session close.

• Halo user provisioning. The following events are now logged: user invited, user re-invited, user deactivated, user modified.
• Halo user password changes. The following events are now logged: Halo password changed, Halo password recovery requested, Halo password recovery success
• Halo user login and logout. The following events are now logged: login success, login failure, logout, session timeout.

Legacy API keys no longer supported

As of this release, the use of legacy API keys for accessing the CloudPassage API has been deprecated for several months. Support for the keys is now removed. Your account's legacy API key no longer appears on the API Keys tab on the Site Administration page in the the Halo Portal, and the key is no longer accepted for authenticating to the CloudPassage API.

Please use Halo's new, stronger authentication method for accessing the CloudPassage API. See the call authentication discussion in the CloudPassage Programmer Guide for details.