Product Release Notes (v30)

 Workflow enhancements: Workflows have the following new features that enhance their flexibility:

o Repeating timers: Allows playbook designers to repeat the occurrence of a non- interrupting timer event.

o Child Workflows: Allows workflows to be placed within workflows. Playbook designers can better organize their playbooks by creating smaller workflows that perform a smaller, repeatable business process and then use them within more complex workflows.

o Script conditions: Allows conditions on the output paths of exclusive and inclusive gateways. The condition is a single expression that evaluates to True or False. Playbook designers can add a script that computes a value, which is then consumed by the expression.

•  Wiki: Users can create and edit wiki pages from within the Resilient platform. This enables organizations to add important information, guidelines, and reference material for the Incident Response team. Wikis can also be used as part of incident response process. All users can access the wiki pages.

•  Workspaces: Contained areas that can be used to group different categories of incidents for ease of management. Incident managers can assign different incidents to different teams as appropriate. Administrators can assign users to one or more workspaces. Users cannot access incidents in workspaces not assigned to them. Workspaces and workspace roles are now also included in export files when exporting configuration information.

•  Role based access control changes: The new permissions include the ability to create and manage workspaces, and create and manage wiki pages. As a part of the workspace feature, there is a distinction between Global Roles, which provide user permissions that apply to all workspaces, and Workspace Roles, which grant permissions for the assigned workspace only. Roles are cumulative; therefore, users with Global and Workspace roles have a superset of those permissions. If assigning users to workspaces only, you should remove any assigned global roles. The details are in the System Administrator Guide.

  If upgrading to version 30, no changes are made to existing roles. Your administrators need to explicitly grant the new permissions to existing roles.

  For new installations or newly created organizations after an upgrade to V30, the Master Administrator and Administrator global roles have the Manage Workspaces and Manage Wiki Pages permissions assigned by default.

•  Threat source enhancement: Cisco Threat Grid has been added as a new Threat Source. It is disabled by default.

•  Operating System support:

o This release supports the Red Hat Enterprise Linux (RHEL) platform only. For customers on a Debian platform, you need to migrate to V29 RHEL then migrate, as described in the V29 Installation Guide.

o A variation of the Resilient platform that is FIPS 140-2 compliant is available. Please contact Customer Support for details.

 Documentation: The Master Administrator Guide has been replaced by a Playbook Designer Guide and a System Administrator Guide to better focus on those user roles.

Page 2