Page History

...

...

6.

...

0 New Features

Performance Enhancements

...

Cloud Support Enhancements

Anchor
SQLCM-6350 SQLCM-6350

New SQL CM Cloud Agent  

SQL Compliance Manager 56.9 improved the event file capturing mechanism by enabling parallel event file processing performed by the Collection Service. Before the SQL Compliance Manager 5.9 release, several areas appeared to be functioning single-threaded. With the SQL Compliance Manager 5.9 release, the Collection Service can now process multiple files simultaneously. This change enhances the performance and scalability of SQL Compliance Manager and significantly lowers the impact on the monitored systems while maintaining data integrity.

Console Application Performance Improvements

SQL Compliance Manager 5.9 improved the console application response state to avoid and eliminate areas that caused "Non-Responding" conditions. In addition, streamlining the SQL Compliance Manager index structure and query efficiency improved the console application's response time significantly, resulting in a quicker response time. These enhancements reduce latencies and improve the overall usability of the SQL Compliance Manager console.

Enhanced Report and Console Performance with Large Repositories

SQL Compliance Manager 5.9 improved upon reports and console performance for large repositories by modifying the SQL Compliance Manager repository index structure and query efficiency to refine the console application response time. As a result, the SQL Compliance Manager console application presents a faster response time when running Reports with the index structure and query improvements. For more information, visit the Index rebuild operation page. 

Inheritance Mechanism Adjustments

SQL Compliance Manager version 5.9 introduces a more simplified inheritance mechanism by providing users with flexible customization options when configuring the audit activities settings for both the Server-Level and the Database-Level audit settings. Users can now audit Server-Level audit activities and have unique settings configured separately at the Database-Level in case needed.

The Database-Level Privileged Users settings are dependent on the Server-Level Privileged Users settings and the Audited Activity settings. In SQL Compliance Manager 5.9, whenever Privileged Users are set on the Server-Level, they are automatically displayed on the Database-Level Privileged Users as pre-selected Privileged Users and can only be edited at Server-level. Visit the Audited Database Properties window - Privileged User tab for more information.

Alerts

Timeframe Configuration

SQL Compliance Manager 5.9 introduces a new addition to the alert rules wizard by including the new timeframe configuration feature, allowing users to specify alerts to trigger only for certain rules and for certain specific timeframes. In addition, to help users capture what matters the most, SQL Compliance Manager 5.9 adds a new screen to the Alert Rule wizard where users can decide to keep the alert rule active within a specified time and for specific days. For more information, visit the Alert Rule Timeframe tab. 

SQL Compliance Manager 5.9 improved the alert rules wizard by including the ability to limit the number of notification alerts sent via email by setting up a time interval to receive email alerts with a summarized list of the accumulated alerts which occurred during the selected time interval. For more information, visit the Alert Actions tab. 

5.9 Fixed Issues 

0 extends the capabilities of the current SQL CM Agent to support remote auditing on SQL servers on EC2. Allowing users to add SQL Servers active on the share network location to write/read data and support DBaaS SQL Server Instances.  The Cloud Agent consists of the same behavior and functionality as the current SQL Agent, but the RDS agent is a separate agent deployed into the cloud with its own configuration auditing settings. 

Anchor
SQLCM-6489 SQLCM-6489

Add support for Amazon RDS

SQL Compliance Manager 6.0 adds support for Amazon RDS to audit servers, databases, Sensitive Data, and Activities while alerting and reporting on them. Users can select Amazon RDS as their Server Type when adding a new server in the Specify SQL Server configuration window. According to the selection, SQL CM asks to Specify Connection Credentials for the authentication, and once registered, users can begin auditing the database activity on that server.

Anchor
SQLCM-6557 SQLCM-6557

Storage account for SQL CM on Cloud

SQL Compliance Manager 6.0 permits the creation of storage accounts to place its components within AWS. In Amazon RDS, users can audit Microsoft SQL Server databases using the built-in SQL Server auditing mechanism. For additional information on Support for SQL Server Audit, visit the SQL Server Audit User Guide.

Performance Enhancements

Anchor
SQLCM-6555 SQLCM-6555

Improvements to the Event Collection method 

Upon upgrading to SQL CM 6.0 or preparing a new installation, SQL Compliance Manager Event Collection Method Capture Default Setting changes to "SQL Server Audit Specifications". All audit logs for 'DML and Select Activities' are captured and filtered properly both for the existing CM architecture and the cloud support platform. 

6.0 Fixed Issues 

• Anchor
  SQLCM-6012 SQLCM-6012

  Resolved the issue where users were mistakenly prompted for an agent upgrade. Now, if the Agent is on the latest version, the Upgrade Agent displays as a non-clickable out.  AnchorSQLCM-6385SQLCM-6385Exporting Audit Settings now successfully includes an export of the Server Level Trusted Users configured.  AnchorSQLCM-6259SQLCM-6259Resolved the issue where the SQL Server Properties window displayed the version as Unknown for registered SQL Server 2019 instances. Now, the correct version is shown.  AnchorSQLCM-6407SQLCM-6407Resolved the issue where auditing stopped working when a user-configured Sensitive Column auditing without first selecting the DML or SELECT option caused the SQLcompliance Agent to have problems creating the sp_SQLcompliance_AuditXE stored procedure. AnchorSQLCM-6277SQLCM-6277Resolved the issue and now events get captured for sensitive columns when Select and DML are enabled at the database level Audited activities on fresh and upgraded setups. AnchorSQLCM-6463SQLCM-6463The DML Activity (Before-After) report shows accurate results regardless of the collection method being set to Extended Events or SQL Tracing. AnchorSQLCM-6460SQLCM-6460The DML\SELECT filters are now working correctly when auditing SQL Server 2019 and no longer prevent DML and SELECT activities from being audited accordingly. AnchorSQLCM-6457SQLCM-6457The following error is no longer observed when attempting to run DML changes on a table configured for Before-After auditing in the software. "The DELETE permission was denied on the object 'SQLcompliance_Changed_Data_Table'."
  AnchorSQLCM-6379SQLCM-6379The retention period of the Activity Log is now configurable. It is set to a default of 60 days which can be modified in the SQLcomplianceCollectionService.exe.config file, in the MAX_ACTIVITY_LOGS_AGE flag. AnchorSQLCM-6376/6365SQLCM-6376/6365Console loading times are faster now at both console startup and when navigating to the Audit Events view of the audited server or database. AnchorSQLCM-6370SQLCM-6370Event details on INSERT and DELETE events, audited not as INSERT INTO or DELETE FROM executions, are no longer missing the Target Object Name information, showing the name of the database object affected by the audited DML change. AnchorSQLCM-6349SQLCM-6349Reports deployed to SQL Server Reporting Services now show corresponding logins in the Login dropdown filter when these are set to run against an archived database. AnchorSQLCM-6223SQLCM-6223Reports no longer show a syntax error when executed either from the console application or SQL Server Reporting Services. AnchorSQLCM-6149SQLCM-6149The permissions check for the SQL Server service account permissions on the Agent Trace Files folder no longer fails when the SQL Server is running under the NETWORK SERVICE service account. AnchorSQLCM-6327/6193SQLCM-6327/6193Data types have been updated in the tables saving Before-After data to prevent the tables from filling up with event data too soon. This would have prevented new events from processing otherwise, as a result. AnchorSQLCM-6367SQLCM-6367The console application logging is no longer showing a collation conflict error, as shown below: "Cannot resolve the collation conflict between "SQL_Latin1_General_CP1_CI_AS" and "Latin1_General_CI_AS" in the equal to operation."

For more information about new features and fixed issues in versions version 5.89.x, see see Previous new features and fixed issues.

...