count items File modification time is now ignored in log and log.count items. Enhanced URL widget security The URL dashboard widget and the URL screen element now put retrieved URL content into the sandbox attribute settings in the defines.inc.php file, however turning sandboxing off is not recommended for security reasons. To learn more about the sandbox attribute, please see the sandbox section of the iframe have any functional changes. 42 What’s new in Zabbix 4.0.37 Security Vulnerability to CVE-2021-42550 has been fixed. As an additional security measure it is recommended to check permis- sions to the /

count items File modification time is now ignored in log and log.count items. Enhanced URL widget security The URL dashboard widget and the URL screen element now put retrieved URL content into the sandbox attribute settings in the defines.inc.php file, however turning sandboxing off is not recommended for security reasons. To learn more about the sandbox attribute, please see the sandbox section of the iframe are now available for out-of-the-box monitoring: • Cisco ASAv SNMP - monitoring of Cisco Adaptive Security Virtual Appliance (ASAv) via SNMP; • Website certificate by Zabbix agent 2 - native monitoring

input field), and supports additional values. Other security parameters now also follow the same structure. For more information, see the security parameters in Administration → General. Databases MySQL components (server, proxy, agent, zabbix_sender and zabbix_get utilities) using Transport Layer Security (TLS) protocol. network discovery - automated discovery of network devices. low-level discovery using the zabbix[process,,,] internal item. Supported platforms Due to the security requirements and mission-critical nature of server operation, UNIX is the only operating system

with the actual/recommended values, i.e. SMTP server, SMTP server port, SMTP helo, and Connection security. Because of this automation, these fields are not even shown, however, it is possible to see the maximum length of the HostMetadata option in agent configuration has been increased to 2034 bytes. Security Secure password change When changing your user password in User profile or User configuration (for password can only be changed for users using Zabbix internal authentication. CSRF tokens For enhanced security against CSRF (Cross Site Request Forgery) attacks, Zabbix frontend now uses randomly generated CSRF

components (server, proxy, agent, zabbix_sender and zabbix_get utilities) using Transport Layer Security (TLS) protocol. agent autoregistration - automated process whereby a Zabbix agent itself is registered using the zabbix[process,,,] internal item. Supported platforms Due to the security requirements and mission-critical nature of server operation, UNIX is the only operating system recommended to run the database on a separate box for large installations. Supported platforms Due to security requirements and the mission-critical nature of the monitoring server, UNIX is the only operating

zero. 5.20.2 Configuration parameters Default configuration files have been changed to improve security and usability. • DBUser has been changed to zabbix for proxy and server • Default value for MaxHousekeeperDelete version does not have any functional changes. 37 What’s new in Zabbix 3.0.32 Enhanced URL widget security The URL dashboard widget and the URL screen element now put retrieved URL content into the sandbox attribute settings in the defines.inc.php file, however turning sandboxing off is not recommended for security reasons. To learn more about the sandbox attribute, please see the sandbox section of the iframe

when testing SNMP items, problems are often associated with a wrong SNMPv2 community or SNMPv3 security credentials. The values of these fields are pre-filled by the values of the corresponding SNMP number of failed login attempts and period of blocking login page after exceeding this limit; – Security, which allows to set URI scheme validation rules, X-Frame-Options HTTP header, and custom iframe components (server, proxy, agent, zabbix_sender and zabbix_get utilities) using Transport Layer Security (TLS) protocol. network discovery - automated discovery of network devices. low-level discovery

components (server, proxy, agent, zabbix_sender and zabbix_get utilities) using Transport Layer Security (TLS) protocol. 27 network discovery - automated discovery of network devices. low-level discovery start-up/shutdown. The scripts are located under directory misc/init.d. Supported platforms Due to the security requirements and mission-critical nature of server operation, UNIX is the only operating system recommended to run the database on a separate box for large installations. Supported platforms Due to security requirements and mission-critical nature of monitoring server, UNIX is the only operating system

14 available for selection if authNoPriv is chosen as Security level or both SHA and AES options are available if authPriv is chosen as Security level: 5.17 Ability to extract matching part of a regular start-up/shutdown. The scripts are located under directory misc/init.d. Supported platforms Due to the security requirements and mission-critical nature of server operation, UNIX is the only operating system to run the database on a separate box for large installations. Supported platforms 51 Due to security requirements and mission-critical nature of monitoring server, UNIX is the only operating system

components (server, proxy, agent, zabbix_sender and zabbix_get utilities) using Transport Layer Security (TLS) protocol. network discovery - automated discovery of network devices. low-level discovery using the zabbix[process,,,] internal item. Supported platforms Due to the security requirements and mission-critical nature of server operation, UNIX is the only operating system recommended to run the database on a separate box for large installations. Supported platforms Due to security requirements and mission-critical nature of monitoring server, UNIX is the only operating system