8.9.04: Service Pack 4
This section contains an overview of the enhancements in version 8.9.04 of TrueSight Network Automation
Version 8.9.04 provides the following enhancements.
TrueSight Network Automation version 8.9.04 includes a new administration console, TrueSight Network Automation – Multi-Server Administration for the administrators who have multiple application servers in their environments. Using this console, administrators can perform the following tasks:
- Push content – Push the following types of content from one application server to multiple application servers:
- Combo Groups
- Device Security Profiles
- Search for devices – Search for devices using the following attributes across multiple TrueSight Network Automation application servers:
- Address: You can search by host name, IP address or URL of a device.
- Dynamic fields (not enabled by default)
To use the new console, you need to install Multi-Server Administration separately from TrueSight Network Automation. For more information, see Installing Multi-Server Administration on Windows and Installing Multi-Server Administration on Linux.
Pushing events for analysis and monitoring
Now you can push the TrueSight Network Automation events to one or more syslog servers that are configured as event receivers. These events can be used for further analysis and monitoring in event receivers. While adding a syslog server as an event receiver, you can configure it for various event parameters based on which they will be pushed to the syslog server. For more information about events receivers, see Managing event receivers.
Platform security enhancements
Support for Security Assertion Markup Language 2.0 (SAML 2.0) and OAuth 2.0 for Single Sign-On (SSO)
Starting from version 8.9.04, TrueSight Network Automation supports SSO. To implement SSO for the GUI-based interface, TrueSight Network Automation uses the SAML 2.0 protocol and for the non-GUI based interfaces, such as SSH Proxy and REST services, TrueSight Network Automation uses the OAuth 2.0 protocol. TrueSight Network Automation supports SSO with CA Single Sign-On and Okta as Identity Providers (IdP).
To enable SSO, you need to choose SAML 2.0 as the authentication mechanism while installing TrueSight Network Automation on the Authentication Source panel. Additionally, for the non-GUI based interfaces, you need to configure the Enable OAuth Integration parameter on the System parameters page. For more information, see Supporting SSO mechanism.
Windows authentication support for the Microsoft SQL Server database
For enhanced security, TrueSight Network Automation now supports Windows authentication in addition to the default SQL Server authentication for the SQL Server database user. When performing a fresh installation, to enable the Windows authentication, choose the Windows Authentication option in the Database Information panel. For more information, see Installing the application server on Windows.
In case of upgrade, if you are using SQL Server authentication in your existing installation, and you want to switch to Windows authentication, update configuration files and the BCA-Networks Web Server service after upgrade.
Network Security Operations (SecOps) enhancement
Support for importing advisories for ArubaOS devices from National Vulnerability Database (NVD) repository
Now, you can import vendor-supplied security vulnerability advisories for ArubaOS device types from the NVD repository into the system, and use them to generate compliance rules that detect vulnerable device operating systems. A canned database of NVD-based ArubaOS advisories is shipped with TrueSight Network Automation. For more information, see About security vulnerability importers and Managing security vulnerabilities.
Device adapter and device import updates
Support for OS version 6.3.6 for VMware NSX Manager
With this release, the VMware NSX Manager device type supports devices that are running on OS version 6.3.6.
Discontinued support for the End of Life (EOL) BMC Discovery version formats
The device import task no longer supports the following mapping formats for the BMC Discovery versions that are EOL:
- BMC Atrium Discovery and Dependency Mapping 8.2+
- BMC Atrium Discovery and Dependency Mapping 7.5
- BMC Foundation Discovery 1.5
After upgrade to version 8.9.04, any device import tasks referring to above formats are automatically upgraded to use the BMC Discovery 11.0+ (XML API) format. If you do not want the automatic upgrade, edit your device import tasks to use any other format other than the above mentioned formats before you start upgrading. If you have not edited these tasks, validate whether these tasks are working as expected after upgrade.
Support for operating systems
TrueSight Network Automation version 8.9.04 supports the following additional operating systems:
- Ubuntu 18.04
- Red Hat Enterprise Linux 6.10
- Oracle Enterprise Linux 7.5
For the complete operating system support information, see Operating system support.
Discontinued support for operating systems
Starting from version 8.9.04, TrueSight Network Automation discontinues support for the following operating systems:
- Microsoft Windows Server 2008 R2
- Microsoft Windows Server 2008
- Red Hat Enterprise Linux 6.x (earlier than version 6.7)
- Ubuntu 11.10
- Ubuntu 10.04 LTS
Deprecated support for SUSE Linux Enterprise Server
From this release of TrueSight Network Automation, support for SUSE Linux Enterprise Server is deprecated.
Support for databases
TrueSight Network Automation version 8.9.04 supports Oracle Database 18c.
For the complete database support information, see Database support.
Discontinued support for databases
Starting from version 8.9.04, TrueSight Network Automation discontinues support for the following databases:
- Microsoft SQL Server 2008 R2 SP 3
- Microsoft SQL Server 2008
Third-party software support
This version of BMC Network Automation is bundled with the following third-party software:
- Open JDK version 11.0.1
- Apache Tomcat web server version 9.0.12
Updates to Web Services
The following table describes the updates to the TrueSight Network Automation Web Services.
|REST API version 3.0 introduced|
As in the previous versions, version 3.0 supports create, retrieve, update, and delete operations on the following existing components: network spans, jobs, predefined jobs, rules, and rule sets.
In version 3.0, support is added for the following operations on various components:
See the complete API in Endpoints in the REST API v3.0.
|Dynamic field updates|
In previous release, you could retrieve dynamic fields associated with the following components:
Users, Realms, Groups, Combo groups, Devices, Jobs, Rules, and Rule Sets
Now you can retrieve dynamic fields associated with the following additional components:
Conditions, Device agents, Email distribution lists, Event receivers, External event filters, External links, Global substitution parameters, Job approval types, Keywords, OS images, Policies, Remote file servers, Roles, Security vulnerability importers, SNMP Manager Stations, and Templates
For more details, see the API in Endpoints in the REST API v3.0.
|Deprecated support for Java API web services|
Starting with this version, support for all Java API web services except the following ones is deprecated:
For the complete list of supported services, see General API classes and methods.
Changes to supported products and solution versions
This section describes the versions of products and solutions supported by TrueSight Network Automation version 8.9.04.
TrueSight Network Automation version 8.9.04 supports version 11.3.00.004 of BMC Discovery.
BMC TrueSight Vulnerability Management and BMC Threat Director
TrueSight Network Automation version 8.9.04 integrates with TrueSight Vulnerability Management versions 3.0.01 and 3.0, and Threat Director version 2.2.02. For more information, see the TrueSight Vulnerability Management documentation and Threat Director documentation.
BMC Decision Support – Network Automation
TrueSight Network Automation version 8.9.04 integrates with version 8.9.02.004 of BMC Decision Support – Network Automation. For more information, see BMC Decision Support - Network Automation.
BMC Continuous Compliance for Network Automation
TrueSight Network Automation version 8.9.04 integrates with the following products to provide the BMC Continuous Compliance for Network Automation solution. For more information about this integration, see BMC Continuous Compliance for Network Automation solution.
BMC Remedy AR System Server
BMC Remedy ITSM Suite
BMC Cloud Lifecycle Management
TrueSight Network Automation version 8.9.04 integrates with the following BMC and non-BMC products to provide the BMC Cloud Lifecycle Management solution. For more information about this integration, see BMC Cloud Lifecycle Management.
|BMC Cloud Lifecycle Management||4.6.07|
|Infoblox Grid Manager||6.8.13|
Entuity Network Analytics
This version of TrueSight Network Automation supports Entuity Network Analytics version 17.0 Patch P01. For more information, see Entuity Network Analytics.
Downloading, installing, and upgrading to the service pack
If you are upgrading the application server, you must also upgrade all remote device agents to the same version as TrueSight Network Automation. For more information about upgrade, see Upgrading.