Release notes Tesorion Immunity

Immunity 2025.1 contains several new functionalities as well as updates and improvementsthat are not externally visible.

Principal new functionalities

• Extended support for SurfWired where MAC-based authentications can also be checked against Surf’s RADIUS-servers in the normal MAC-based authentication flow.

• Optimizations in the SNMP-daemon to better deal with simultaneous triggers to update trunk-ports (for connected Fat access points or Local LAN switches) and to better deal with unreachable/unresponsive devices upon startup.

• Automatic Host group selection, based on Azure group membership, when using Azure as an authentication backend on registration pages for end users.

• The underlying database system (PostgreSQL) has been updated to version 17.

Points of attention

• If you are receiving Syslog from the Immunity RADIUS-process, and are parsing that, then note that the field “Q-Qnid”, which holds the Incident ID is client has an active incident, has been renamed to “Q-Incident”.

Hardware support

• Aruba AP600-series access points are now supported.

• Aruba 9000-series Wireless Lan Controllers are now supported.

• Cambium XV2-23T access point is now supported.

• Juniper EX 4400-series switches are now supported.

• TP-Link SG3452P switch is now supported.

As usual, there are also several minor improvements and bugfixes that are not explicitly listed.

Immunity 2024.2 contains several new functionalities as well as updates and improvements that are not externally visible.

Principal new functionalities

• It is possible to have Immunity perform an Intune compliance check when providing access to MAC-addresses and accounts.
• To debug network issues between Immunity and managed network hardware (or other network infrastructure Immunity interfaces with), you can now perform pings and traceroutes from the Immunity web interface.
• OpenID-functionality has been extended to the additional “reception”-pages, for creating activation codes outside of the regular Immunity web interface.

Hardware support

• Support for the Aruba MC-VA was reintroduced

As usual, there are also several minor improvements and bugfixes that are not explicitly listed.

Immunity 2024.1 contains several new functionalities as well as updates and improvements that are not externally visible.

Principal new functionalities

• It is possible to use an OpenID Connect-provider (i.e. Google, Azure, etc) for Administrator-logins to the Immunity webinterface.
• The piecharts in the Dashboard-parts for Security Events and Incidents have links. The will allow Administrators to get to the Security Events in the category a “pie-piece” represents or the Incidents for a Reason a “pie-piece” represents.
• In a few tables with overviews (active MAC-registrations/802.1X-account-registrations, Switches, Wlan devices, Switchports and active incidents) an Advanced Search is now available, allowing the Administrator to search for items across specific columns.
• The underlying database system (PostgreSQL) has been updated to version 16.

Hardware support

• Netgear M4250-xxxxxx-PoE+ switches are now supported.
• Huawei S5720-HI switches are now supported.
• Cisco Catalyst 9200CX switches are now supported.
• Juniper EX4100 switches are now supported.
• Cisco Catalyst 9100 Wireless Access Points are now supported.

As usual, there are also several minor improvements and bugfixes that are not explicitly listed.

Immunity 2023.2 contains several new functionalities as well as updates and improvements that are not externally visible.

Principal new functionalities

• It is now possible to add multiple pieces of managed network hardware (for instance wireless Fat Access Points) to Immunity by importing an Excel-sheet, filled out with required data and credentials.
• It is possible to use an OpenID Connect-provider (i.e. Google, Azure, etc.) in the registration procedures for end users.
• The underlying OS (Debian) has been updated to Bookworm (12).

Hardware support

• Cambium XV2-2T0/T1 Access Points are now supported.
• Huawei S5720-*-LI-* switches are now supported.
• Huawei AC6005-series wireless controllers are now supported.
• Ruckus Access Points, which support Unleashed-mode, are now supported in that mode.
• TP-Link TL-SG3452 is now supported.

As usual, there are also several minor improvements and bugfixes that are not explicitly listed.