8.9.04: Service Pack 4

This section contains an overview of the enhancements in version 8.9.04 of TrueSight Network Automation

Related topics

Enhancements

Version 8.9.04 provides the following enhancements.

Multi-Server Administration

TrueSight Network Automation version 8.9.04 includes a new administration console, TrueSight Network Automation – Multi-Server Administration for the administrators who have multiple application servers in their environments. Using this console, administrators can perform the following tasks:

Push content – Push the following types of content from one application server to multiple application servers:
- Combo Groups
- Device Security Profiles
Search for devices – Search for devices using the following attributes across multiple TrueSight Network Automation application servers:
- Name
- Address: You can search by host name, IP address or URL of a device.
- Dynamic fields (not enabled by default)

To use the new console, you need to install Multi-Server Administration separately from TrueSight Network Automation. For more information, see Installing Multi-Server Administration on Windows and Installing Multi-Server Administration on Linux.

Pushing events for analysis and monitoring

Now you can push the TrueSight Network Automation events to one or more syslog servers that are configured as event receivers. These events can be used for further analysis and monitoring in event receivers. While adding a syslog server as an event receiver, you can configure it for various event parameters based on which they will be pushed to the syslog server. For more information about events receivers, see Managing event receivers.

Platform security enhancements

Support for Security Assertion Markup Language 2.0 (SAML 2.0) and OAuth 2.0 for Single Sign-On (SSO)

Starting from version 8.9.04, TrueSight Network Automation supports SSO. To implement SSO for the GUI-based interface, TrueSight Network Automation uses the SAML 2.0 protocol and for the non-GUI based interfaces, such as SSH Proxy and REST services, TrueSight Network Automation uses the OAuth 2.0 protocol. TrueSight Network Automation supports SSO with CA Single Sign-On and Okta as Identity Providers (IdP).

To enable SSO, you need to choose SAML 2.0 as the authentication mechanism while installing TrueSight Network Automation on the Authentication Source panel. Additionally, for the non-GUI based interfaces, you need to configure the Enable OAuth Integration parameter on the System parameters page. For more information, see Supporting SSO mechanism.

Windows authentication support for the Microsoft SQL Server database

For enhanced security, TrueSight Network Automation now supports Windows authentication in addition to the default SQL Server authentication for the SQL Server database user. When performing a fresh installation, to enable the Windows authentication, choose the Windows Authentication option in the Database Information panel. For more information, see Installing the application server on Windows.

In case of upgrade, if you are using SQL Server authentication in your existing installation, and you want to switch to Windows authentication, update configuration files and the BCA-Networks Web Server service after upgrade.

Network Security Operations (SecOps) enhancement

Support for importing advisories for ArubaOS devices from National Vulnerability Database (NVD) repository

Now, you can import vendor-supplied security vulnerability advisories for ArubaOS device types from the NVD repository into the system, and use them to generate compliance rules that detect vulnerable device operating systems. A canned database of NVD-based ArubaOS advisories is shipped with TrueSight Network Automation. For more information, see About security vulnerability importers and Managing security vulnerabilities.

Device adapter and device import updates

Support for OS version 6.3.6 for VMware NSX Manager

With this release, the VMware NSX Manager device type supports devices that are running on OS version 6.3.6.

Discontinued support for the End of Life (EOL) BMC Discovery version formats

The device import task no longer supports the following mapping formats for the BMC Discovery versions that are EOL:

BMC Atrium Discovery and Dependency Mapping 8.2+
BMC Atrium Discovery and Dependency Mapping 7.5
BMC Foundation Discovery 1.5

After upgrade to version 8.9.04, any device import tasks referring to above formats are automatically upgraded to use the BMC Discovery 11.0+ (XML API) format. If you do not want the automatic upgrade, edit your device import tasks to use any other format other than the above mentioned formats before you start upgrading. If you have not edited these tasks, validate whether these tasks are working as expected after upgrade.

Platform support

Support for operating systems

TrueSight Network Automation version 8.9.04 supports the following additional operating systems:

Ubuntu 18.04
Red Hat Enterprise Linux 6.10
Oracle Enterprise Linux 7.5

For the complete operating system support information, see Operating system support.

Discontinued support for operating systems

Starting from version 8.9.04, TrueSight Network Automation discontinues support for the following operating systems:

Microsoft Windows Server 2008 R2
Microsoft Windows Server 2008
Red Hat Enterprise Linux 6.x (earlier than version 6.7)
Ubuntu 11.10
Ubuntu 10.04 LTS

Deprecated support for SUSE Linux Enterprise Server

From this release of TrueSight Network Automation, support for SUSE Linux Enterprise Server is deprecated.

Support for databases

TrueSight Network Automation version 8.9.04 supports Oracle Database 18c.

For the complete database support information, see Database support.

Discontinued support for databases

Starting from version 8.9.04, TrueSight Network Automation discontinues support for the following databases:

Microsoft SQL Server 2008 R2 SP 3
Microsoft SQL Server 2008

Third-party software support

This version of BMC Network Automation is bundled with the following third-party software:

Open JDK version 11.0.1
Apache Tomcat web server version 9.0.12

Updates to Web Services

The following table describes the updates to the TrueSight Network Automation Web Services.

Update

Description

REST API version 3.0 introduced

As in the previous versions, version 3.0 supports create, retrieve, update, and delete operations on the following existing components: network spans, jobs, predefined jobs, rules, and rule sets.

In version 3.0, support is added for the following operations on various components:

Create, retrieve, update, and delete operations on the following components:
- Device agents
- Dynamic fields
- Email distribution lists
- Event receivers
- External event filters
  Note: These operations are supported on the external event filters only if the event source is Syslog.
- External links
- Global substitution parameters
- Job approval types
- Remote file servers
- Roles
- Security vulnerability importers
- SNMP manager stations
- Templates
Enhanced retrieve operation with complete filtering criteria to retrieve jobs, predefined jobs, devices, rules, and security vulnerabilities

See the complete API in Endpoints in the REST API v3.0.

Dynamic field updates

In previous release, you could retrieve dynamic fields associated with the following components:

Users, Realms, Groups, Combo groups, Devices, Jobs, Rules, and Rule Sets

Now you can retrieve dynamic fields associated with the following additional components:

Conditions, Device agents, Email distribution lists, Event receivers, External event filters, External links, Global substitution parameters, Job approval types, Keywords, OS images, Policies, Remote file servers, Roles, Security vulnerability importers, SNMP Manager Stations, and Templates

For more details, see the API in Endpoints in the REST API v3.0.

Deprecated support for Java API web services

Starting with this version, support for all Java API web services except the following ones is deprecated:

AuthenticationService
EventService
ImportExportService
ReportService
SpanService

For the complete list of supported services, see General API classes and methods.

Changes to supported products and solution versions

This section describes the versions of products and solutions supported by TrueSight Network Automation version 8.9.04.

BMC Discovery

TrueSight Network Automation version 8.9.04 supports version 11.3.00.004 of BMC Discovery.

BMC TrueSight Vulnerability Management and BMC Threat Director

TrueSight Network Automation version 8.9.04 integrates with TrueSight Vulnerability Management versions 3.0.01 and 3.0, and Threat Director version 2.2.02. For more information, see the TrueSight Vulnerability Management documentation and Threat Director documentation.

BMC Decision Support – Network Automation

TrueSight Network Automation version 8.9.04 integrates with version 8.9.02.004 of BMC Decision Support – Network Automation. For more information, see BMC Decision Support - Network Automation.

BMC Continuous Compliance for Network Automation

TrueSight Network Automation version 8.9.04 integrates with the following products to provide the BMC Continuous Compliance for Network Automation solution. For more information about this integration, see BMC Continuous Compliance for Network Automation solution.

Product	Component	Version
BMC Remedy AR System Server (Includes BMC Remedy Mid Tier)		9.1.03
BMC Remedy ITSM Suite (Includes BMC Change Management and BMC Service Desk: Incident Management)		9.1.03
BMC CMDB (Includes BMC CMDB Web Services)		9.1.03
TrueSight Orchestration	Platform	8.1.00.001
TrueSight Orchestration	Content	20.18.01

BMC Cloud Lifecycle Management

TrueSight Network Automation version 8.9.04 integrates with the following BMC and non-BMC products to provide the BMC Cloud Lifecycle Management solution. For more information about this integration, see BMC Cloud Lifecycle Management.

Product	Version
BMC Cloud Lifecycle Management	4.6.07
Nokia VitalQIP	8.1.2
Infoblox Grid Manager	6.8.13

Entuity Network Analytics

This version of TrueSight Network Automation supports Entuity Network Analytics version 17.0 Patch P01. For more information, see Entuity Network Analytics.

Downloading, installing, and upgrading to the service pack

For download instructions, see Downloading the installation files. For installation instructions, see Installing.

If you are upgrading the application server, you must also upgrade all remote device agents to the same version as TrueSight Network Automation. For more information about upgrade, see Upgrading.