Nipper OmniSight v4.1.0 Release Notes
This document communicates the new features and functionality changes in this release of Nipper OmniSight.
v4.1.0
New Features
Segmentation Policy Enhancements
- Authentication Server list — You can now specify authorised IP addresses and domain names within segmentation policies for Authorization Servers
- Improved segmentation analysis — Segmentation checks now also inspect IPs found in the routing section of device reports for more comprehensive coverage
- External authentication whitelist findings — New findings are raised when external authentication destinations violate your segmentation policy
- Updated dashboards — Segmentation dashboards now reflect the new finding types
- Accuracy improvement — Resolved an issue where segmentation audits could report excessive duplicate IP/CIDR findings
- Network objects fix — Fixed a bug affecting network objects within segmentation policies
Certificate & Connectivity
- Corporate VPN CA certificate support — Improved handling of custom CA certificates when customers access the internet through a VPN
- Repository CA certificates — You can now provide a CA certificate when adding or editing a git repository connection
Licensing
- Lease period continuity — The product now continues to operate normally during the licence lease period
MITRE ATT&CK Dashboard
- MITRE ATT&CK Matrix Navigator — A new high-level visual summary that maps device assessment results (CIS, STIG, and CVE) to the MITRE ATT&CK framework, featuring a severity-coded heat map for rapid risk identification.
- Technique & Device Drill-down — Navigate from the matrix to detailed technique pages to see impacted devices, and further drill down into specific device findings prioritized by severity.
- KEV Filtering — Focus your assessment results on Known Exploited Vulnerabilities with the KEVs Only toggle.
- Direct Report Linking — Quickly pivot from a MITRE technique finding directly to the relevant section of the assessment report for immediate context.
Performance & Usability
- Performance fix — Resolved an issue that could cause the user interface to be slow in some circumstances
- Schedule frequency fix — Fixed an issue where schedule frequency options became disabled after refreshing the page
- Assessment profiles — Fixed a bug where selected profiles were not being applied to assessments
Engine Update
- Nipper Infrasight updated to version 4.2.4