ThreatBlockr Build 135 - June 29, 2023

New Features:

Domain, Threat Lists & IPs by ASN Per Policy

PREREQUISITE : Update all Edge instances to BUILD 214

After all of your Edge instances are successfully updated to the new build, we strongly recommend you log out and log back into the ThreatBlockr admin console.

Domain & Threat Lists and IPs by ASN can now be applied per policy (once all Edge instances are on Build 214). The following outlines how this applies to new and existing policies, as well as the impact to global settings for IPs by ASN and Domain lists.

New Policies

Once all Edge instances are updated to Build 214, Domain & Threat Lists and IPs by ASN can be applied per policy. When creating a new policy the following will now be available:

• There will be a new step for IPs by ASN, which will allow you to select the ASNs to allow or block on the policy

• The Lists step will now include: 
  • Domain lists will now appear in the Allow Lists and Block Lists
  • A new Threat Lists column, which shows out-of-the-box, premium, and/or configured Threat Lists available to you

IPs by ASN

Once all Edge instances are updated to Build 214, IPs by ASN will no longer be a global setting and will no longer be accessible in the left-hand navigation menu. All ASN adjustments must be set per policy.

Domain Lists

Once all Edge instances are updated to Build 214, Domain lists will no longer be globally enabled or disabled. Domain lists must be applied per policy.

Existing Policies

Once all Edge instances are updated to Build 214, the following will apply to any policy that was created prior to updating all Edge instances to this build:

• Any Threat List your company has access to (i.e. Webroot) or has configured on your own will be applied to each existing policy
• Existing ASN adjustments will be applied to each policy
• Enabled Domain lists will be applied to each policy

Users will have the ability to adjust each policy to remove any of the above settings.

MSP Features:

Edge Instance Management

Edit Name and Location

MSP Master and Admin users can now edit the name and location of an Edge instance at the MSP scope. To make these updates:

• Navigate to the MSP Dashboard
• Click on the Edge Instances tab
• Click on the pencil icon in the row of the Edge instance you want to Edit

• Make the desired edits
• Click Save

Install Software

MSP Master and Admin users can now install software at the MSP scope. To do so:

• Navigate to the MSP Dashboard
• Click on the Edge Instances tab
• Click on the Software button in the top right corner of the table

From here, you can choose to install software on an individual Edge instance immediately, or schedule an update for one or more Edge instances. For further instructions on how to install software and additional details on the information included on this screen, please refer to our Edge Software support article.

MSP Dashboard Enhancements

Companies Tab

The Companies tab (previously named Company Subscriptions) now includes the following menu options in the ellipsis menu for an individual company:

• Manage Edge Instances - selecting this option will navigate you to the Edge Instances tab, pre-filtered for the selected company
• Manage Software - selecting this option will navigate you to the Edge Software screen, pre-filtered for the selected company’s Edge instances

Edge Instances Tab

The Edge Instances tab (previously named Edge Subscriptions) now includes the following data columns:

• Admin IP - displays the protected-side administration IP address of the Edge instance
• Bridge State - displays one of the following:
  • Normal
  • Hardware Bypass - displays if the Edge instance is currently in hardware bypass mode
  • Unknown - displays for any Edge instance running legacy Edge software, or if the Edge instance’s current state is unknown
• Build - displays the ThreatBlockr Edge software build the Edge instance is currently running. If the Edge instance is not on the latest build, the build number will display in red.
• Last Connection - displays the date and time the Edge instance last connected to the ThreatBlockr admin console. Normally, this should be within a few minutes of the present time.
• Supported - displays one of the following:
  • Supported - the Edge instance has at least one subscription applied to it
  • No Subscription - the Edge instance does not have a subscription applied to it