MuseKnowledge™ Proxy 5.4 is Available
To address the recent widespread Apache Log4j 2 emerged vulnerabilities (https://logging.apache.org/log4j/2.x/security.html), the MuseKnowledge team released a new version of MuseKnowledge™ Proxy to contain the latest Log4j library version - 2.17.0.
The Apache Log4j 2 library is used by few components in Muse Proxy. The core logging mechanism of the Muse Proxy is based on the in-house built logger and logs such as access.log, MuseProxy.log, MuseProxyStatistics.log are produced using the in-house logger, and not Log4j.
When upgrading make sure that the entire Library ecosystem stay safe by updating any Java based related software used in the portal, authentication services (LDAP, SAML, etc.), log processing, monitoring infrastructure, etc. as per the Log4j CVEs.
The new MuseKnowledge™ Proxy version is available for trial, purchase or upgrade. Besides the security update, several new features are available and presented below. The detailed list of changes is available in MuseKnowledge™ Proxy Release Notes PDF Document.
- The TLSv1.3 standard can now be used on both ends of Muse Proxy if running under JVM version 8, at least, update 262. For the server end Muse Proxy is now configured with TLSv1.2 and TLSv1.3 only as enabled protocols. For sources' end TLS v1.3 can be configured if needed, however, there are still many servers not supporting it, hence, by default TLS v1.3 cannot be enabled for all the sources.
- In the Muse Proxy Administrator Console, Utilities section, the Un-Rewrite URL tool was extended to support un-rewrite "Rewrite By Host" URLs.
- The Find/Replace filter is able to process (rewrite, unrewrite, rewriteHostHTTPS, etc) strings that represents the Base64 encoded form of an URL/Host and then re-encode it back. By using the attribute base64 we can achieve decode, rewrite (or any other group process) and then re-encode in Base 64 as long as the replacement group represents the Base64 sole representation of an URL/host.
Since the beginning of the COVID-19 global crisis, the MuseKnowledge™ Proxy Trial periods are extended from 30 days to 90 days. Request your Trial License Key by simply filling in the trial form.