August 2025 Monthly Release

For help upgrading to the latest version, contact your Cloudhouse Representative. The following table describes each component available to upgrade within this release of Cloudhouse Guardian (Guardian). For more information on the known issues currently present within Guardian, see Known Issues.

Tip: To access a more simplified view of the changes included within this release, see August 2025 Changelog.pdf.

Last Updated	Release Date	Guardian Platform	Guardian Web	Linux Agent	Windows Agent
29th August 2025	27th August 2025	V4	V3.58.3	V5.46.0	V5.22.0

Guardian Web Application V3.58.3

Here's what's included in V3.58.3 of the Guardian web application as part of the August 2025 monthly release.

New Features

The following new features are included within this release of the Guardian web application.

New Import/Export Scan Options

We have added two new buttons to the Scan options drop-down list, displayed when editing a node group's settings:

• Import Scan Options – Option to upload a JSON file containing a list of scan directory options to the node group's settings.

• Export Scan Options – Option to export the node group's scan directory options as a JSON file, downloaded locally to your machine.

Tip: These buttons have been added to the default Monitored skin, but were already present with the new Monitored skin enabled. This enhancement ensures broader accessibility of scan options.

Other Enhancements

The following enhancements are included within this release of the Guardian web application.

Global Enablement of Pluggables Feature

The Pluggables feature has been updated to ensure consistent behavior across all organizations within an appliance. Previously, enabling Pluggables in one organization (e.g., ORG1) did not activate the feature for others (e.g., ORG2), resulting in limited access and functionality.

Note: If the Pluggables feature is enabled, the Pluggables tab (Inventory > Pluggables) is displayed, allowing you to extend Guardian’s capabilities and customize its functionality to meet your needs via the use of pluggables such as FortiGate.

This enhancement introduces a centralized setting to manage Pluggables globally, with the following key changes:

• Centralized Control: A new Enable Pluggables checkbox is available within Guardian's General Settings (Account drop-down menu > Settings > General):

  • When enabled, Pluggables functionality is available to all organizations.

  • When disabled, Pluggables are unavailable across the appliance.

• Feature Flag Removal: The Pluggables feature has been removed from the Features page, which is only accessible to the Guardian team, to prevent per-org toggling and remove dependency on the Guardian team to enable/disable the feature for each user.

• Backward Compatibility: Appliances upgrading from a version with Pluggables enabled will retain the setting. Existing pluggables remain configured and usable post-upgrade.

This change simplifies feature management and ensures a consistent experience for all users across organizations.

Tip: In addition, we have simplified the Pluggables tab by removing the Default section. Now, the page only displays the custom pluggables that have been added to Guardian.

Security Update: CIS Benchmarks Refresh

As part of our ongoing commitment to security and compliance, we’ve updated our CIS benchmark checks to ensure alignment with the latest standards.

Tip: No action is required from users. Benchmark updates are applied automatically and will be reflected in future compliance assessments.

Support for Larger Scan Results

Recent Rack query parser updates added parameter and bytesize limitations which prevented larger scans from completing successfully. We have now increased these limits to accommodate larger scan results.

Scan Docker or Kubernetes Containers

The Add Node page (Inventory > Add Node) and Edit Node page (Inventory > Monitored > Select a node group > Select a node > Edit) have been updated to include scanning for Linux-based Docker containers and Kubernetes pods and deployments. To enable this feature on your appliance, contact your Cloudhouse Representative.

Tip: Scanning Docker or Kubernetes containers requires the most recent version of the Connection Manager, as well as remote helper to be running. To download the most recent version of the Connection Manager, click here. For more information on Connection Managers, see Connection Managers.

Fixed Issues

The following issue has been fixed within this release of the Guardian web application.

New GWB-6270 – Azure AD and LDAP Nodes not Syncing
Affects Versions: V3 (onwards)	Fix Version: V3.58.3

Problem:	For Azure Active Directory and LDAP integrations, when performing a 'Synchronize Nodes' job, it would run successfully but any detected nodes were not added to the Detected or Monitored tabs as expected. Note: For more information on node detection jobs, see Synchronize Nodes – Job Type
Solution:	We have corrected the logic that handles node detection results. Now when a 'Synchronize Nodes' job is run for an Azure Active Directory or LDAP integration, any detected nodes are correctly added to the Detected or Monitored tabs as expected.

 

New GWB-6273 – Preprocessor Settings Hidden from Node Group Settings
Affects Versions: V3 (onwards)	Fix Version: V3.58.3

Problem:	The Preprocessor section was only visible when editing a node group's scan options. It was not displayed when accessing the node group's settings directly, preventing users from configuring preprocessors unless a node had already been added to the group. Note: For more information on scan options, see Scan Options.
Solution:	The Preprocessor section is now included on the node group settings page, allowing users to view and edit Preprocessor settings directly from the node group configuration, regardless of whether any nodes have been added. This improves usability and ensures consistent access to scan configuration options. Note: For more information on preprocessors, see Preprocessors (Linux only).

 

GWB-6236 – Remove Nodes From Node Group Option Incorrectly Displayed for Connection Manager Groups
Affects Versions: V3 (onwards)	Fix Version: V3.58.2

Problem:

When viewing nodes within a Connection Manager group, if you selected the checkbox for one or more nodes and then click the Diff X Nodes drop-down button, the Remove X Nodes From Group option would be incorrectly displayed. This action pertains to node groups, not Connection Manager groups, and its presence in this context was misleading. Note: For more information on Connection Manager groups, see Connection Manager Groups.

Solution:

The Remove X Nodes From Group option has been removed when viewing nodes in a Connection Manager group. This ensures that only relevant actions are available, improving clarity and preventing confusion between Connection Manager and node group functionalities.

Linux Agent V5.46.0

Here's what's included in V5.46.0 of the Linux Agent as part of the August 2025 monthly release.

New Features

There are no new features included within this release of the Linux Agent.

Other Enhancements

The following enhancement is included within this release of the Linux Agent.

Scan Docker and Kubernetes Containers

You can now scan Docker containers and Kubernetes pods or deployments within Linux nodes. For more information, see the Other Enhancements section of Guardian Web Application V3.58.0 above.

Fixed Issues

The following issue has been fixed in this release of the Linux Agent.

GLA-899 – Connectivity Checks for Cisco Nodes not Working as Expected
Affects Versions: V5 (onwards)	Fix Version: V5.46.0

Problem:	Connectivity checks for Cisco nodes were reporting success even when the node had a non-existent or unreachable IP address.
Solution:	The connectivity check logic for Cisco nodes has been updated to correctly validate IP reachability and credential accuracy. The check will now only pass when presented with valid a IP/hostname and credentials. Tip: This fix ensures consistent and reliable connectivity validation across node types.

Windows Agent V5.22.0

Here's what's included in V5.22.0 of the Windows Agent as part of the August 2025 monthly release.

New Features

There are no new features included within this release of the Windows Agent.

Other Enhancements

There are no additional enhancements included within this release of the Windows Agent.

Fixed Issues

The following issue has been fixed in this release of the Windows Agent.

GWA-488 – Install Log Not Launching as Expected
Affects Versions: V5 (onwards)	Fix Version: V5.22.0

Problem:	After the Windows Connection Manager has been installed, if you click Finish with the 'Review install log' box checked, the install log would not launch. Note: For more information on the Windows Connection Manager installer, see Windows Connection Manager – Installer.
Solution:	This was due to a timing issue in the installer, where the log file hadn’t been created before the installer attempted to open it. The fix ensures the log file is present before launch at the end of the installation process. Now, when you click Finish with the 'Review install log' box checked, the install log will open correctly.