frontend. 5.6.2 Support for PHP 4 dropped Last bugfix release in 2008.01.03 and last release with security fixes in 2008.08.07, PHP4 was not receiving bugfixes anymore. Zabbix 1.8 requires PHP 5.0 or later Zabbix agent daemon has a new configuration parameter - UnsafeUserParameters. This allows to override security checks and pass all characters in user parameter arguments. • Zabbix server daemon has a new configuration technology levels: 5100 • Supported technology levels: 5200 • Supported technology levels: 5300-00,01,02,03,04,05 • Supported technology levels: 5300-06 and above • Supported technology levels: 6100 and

Now it is possible to add multiple, while also giving a label for each. This can be done on two levels: 9 • Map element level • Map level For example, here two URLs have been defined on the element Hosts: – Interface IP/DNS – Interface port • Passive proxy – Interface port • Items – SNMPv3 security name – SNMPv3 auth pass – SNMPv3 priv pass – SNMPv1/v2 community – SNMPv1/v2 OID – DB monitor username – Telnet password – Telnet script – Calculated item expression • Discovery – SNMPv3 security name – SNMPv3 auth pass – SNMPv3 priv pass – SNMPv1/v2 community – SNMPv1/v2 OID Additionally

was confined to individual triggers. In the new version tagging can be applied on template and host levels: 13 • On template level that means all problems of host triggers inherited from these templates components (server, proxy, agent, zabbix_sender and zabbix_get utilities) using Transport Layer Security (TLS) protocol. network discovery - automated discovery of network devices. low-level discovery using the zabbix[process,,,] internal item. Supported platforms Due to the security requirements and mission-critical nature of server operation, UNIX is the only operating system

with the actual/recommended values, i.e. SMTP server, SMTP server port, SMTP helo, and Connection security. Because of this automation, these fields are not even shown, however, it is possible to see the maximum length of the HostMetadata option in agent configuration has been increased to 2034 bytes. Security Secure password change When changing your user password in User profile or User configuration (for password can only be changed for users using Zabbix internal authentication. CSRF tokens For enhanced security against CSRF (Cross Site Request Forgery) attacks, Zabbix frontend now uses randomly generated CSRF

components (server, proxy, agent, zabbix_sender and zabbix_get utilities) using Transport Layer Security (TLS) protocol. network discovery - automated discovery of network devices. low-level discovery using the zabbix[process,,,] internal item. Supported platforms Due to the security requirements and mission-critical nature of server operation, UNIX is the only operating system recommended to run the database on a separate box for large installations. Supported platforms Due to security requirements and mission-critical nature of monitoring server, UNIX is the only operating system

components (server, proxy, agent, zabbix_sender and zabbix_get utilities) using Transport Layer Security (TLS) protocol. agent autoregistration - automated process whereby a Zabbix agent itself is registered using the zabbix[process,,,] internal item. Supported platforms Due to the security requirements and mission-critical nature of server operation, UNIX is the only operating system recommended to run the database on a separate box for large installations. Supported platforms Due to security requirements and the mission-critical nature of the monitoring server, UNIX is the only operating

count items File modification time is now ignored in log and log.count items. Enhanced URL widget security The URL dashboard widget and the URL screen element now put retrieved URL content into the sandbox attribute settings in the defines.inc.php file, however turning sandboxing off is not recommended for security reasons. To learn more about the sandbox attribute, please see the sandbox section of the iframe are now available for out-of-the-box monitoring: • Cisco ASAv SNMP - monitoring of Cisco Adaptive Security Virtual Appliance (ASAv) via SNMP; • Website certificate by Zabbix agent 2 - native monitoring

components (server, proxy, agent, zabbix_sender and zabbix_get utilities) using Transport Layer Security (TLS) protocol. network discovery - automated discovery of network devices. low-level discovery using the zabbix[process,,,] internal item. Supported platforms Due to the security requirements and mission-critical nature of server operation, UNIX is the only operating system recommended to run the database on a separate box for large installations. Supported platforms Due to security requirements and the mission-critical nature of the monitoring server, UNIX is the only operating

when testing SNMP items, problems are often associated with a wrong SNMPv2 community or SNMPv3 security credentials. The values of these fields are pre-filled by the values of the corresponding SNMP number of failed login attempts and period of blocking login page after exceeding this limit; – Security, which allows to set URI scheme validation rules, X-Frame-Options HTTP header, and custom iframe components (server, proxy, agent, zabbix_sender and zabbix_get utilities) using Transport Layer Security (TLS) protocol. network discovery - automated discovery of network devices. low-level discovery

count items File modification time is now ignored in log and log.count items. Enhanced URL widget security The URL dashboard widget and the URL screen element now put retrieved URL content into the sandbox attribute settings in the defines.inc.php file, however turning sandboxing off is not recommended for security reasons. To learn more about the sandbox attribute, please see the sandbox section of the iframe have any functional changes. 42 What’s new in Zabbix 4.0.37 Security Vulnerability to CVE-2021-42550 has been fixed. As an additional security measure it is recommended to check permis- sions to the /