ID

Category

Fixed Issue in MOVEit Transfer 2017

MIDMZ-7446

Ad Hoc Transfer

When a guest user replies to a package, the subject and body are prepopulated (as expected). After the guest user uploads an attachment, the prepopulated content now remains in the subject and body fields.

In previous releases, the subject and body fields were erroneously cleared after attachments were uploaded.

MIDMZ-7438

Address Book

You can now delete an address book entry after you add it.

In previous releases, new entries could not be deleted.

MIDMZ-6967

API

The COM API FileCopy function works correctly.

In previous releases, the system reported a failure after 60 seconds, even if the copy action was subsequently successful.

MIDMZ-7230

Archive

ArchiveMessages file now archives packages correctly. .

In previous releases, errors in the archive process caused failures.

MIDMZ-7230

Downloads

Percent symbol (%) used in filenames of downloaded files now is handled correctly, so that files can be downloaded.

In previous releases, files whose filenames contained percent symbols (%) could not be downloaded.

MIDMZ-6624

FTP Server

Comma characters (,) in SSL Certs common names are now handled correctly so that the cert is accepted.

In previous releases, if the common name contained a comma, errors prevented the cert from being accepted, causing the FTP service to use the default server certificate instead.

MIDMZ-6983

Installation

In the installer, passwords that are longer than 12 characters are now handled correctly.

In previous releases, passwords longer than 12 characters were truncated before being passed to the database, causing a failed update.

MIDMZ-6807

Macros

The File/OriginalFileName macro now works correctly. Macro name is case sensitive. Default custom notifications now use the correct capitalization.

In previous releases, the macro name in the custom File Delivery Receipt notification for the [File/OriginalFileName] used incorrect case.

MBL-2447

Mobile

PDF documents that are sent in packages can now be opened and modified in the native IOS app, as well as in Office docs.

In previous releases, PDF documents on the mobile device could be opened only in Office docs.

OUTLK-2104

Outlook Plug-in

If you use shared mailboxes in MOVEit Transfer, you now can use the Outlook Plug-in to send packages on behalf of another user.

In previous releases, the plug-in failed to validate email strings correctly before sending the From email address when posting a package.

OUTLK-900

Outlook Plug-in

You can attach files that have .MSG extensions via WS_FTP, and if you toggle to Office and back to WS_FTP, the files are correctly attached as WS_FTP secure delivery attachments.

In previous releases, when toggling from WS_FTP, to Office, and back to WS_FTP, the files with .MSG extensions remained attached to Office. rather than as WS_FTP secure delivery attachments.

MIDM-6775

Scheduler

If duplicate LoginName and GroupName values exist within a single organization, the SyncLDAP .exe module writes these duplicates to the error log, and skips the synchronization for that organization.

In previous releases, duplicate values caused Sync LDAP to generate the error "An item with the same key has already been added." The sync then failed.

MIDMZ-7573

Security

Temp users are not permitted access to folders and do not have a Folder link on their pages. If you add a Temp user to a group that has folder access, the Temp user does not inherit the folder access permissions from the group, and cannot access via URL any folders for which the group has permission.

In previous releases, if you added a Temp user to a group that has access permissions to a folder, the Temp user could access folder contents via a URL that pointed to the folder.

MIDMZ-7566

Security

File download links can no longer be exploited to inject rogue code into the user's browser.

A security issue has been fixed.

MIDMZ-7633

Security,
Web App

Fixed a security issue related to HTTP requests.

MIDMZ-6144

Security

SSO configuration now supports SHA-256 for hashing in XML signatures.

MIDMZ-6732

Security, SSH-Server

You can now configure and reorder SSH key exchange (KEX) algorithms by using the DMZ Config utility SSH Ciphers tab.

MIDMZ-8135

Security,
FTP Server

Fixed a security issue related to a buffer overrun error.

MBL-2458

Security, Mobile

SSL Certificate validation has been improved.

A security issue has been fixed.

MIDMZ-6860

Updates

After an update, PassHistory values from the previous version are correct in the new version.

In previous releases, after updating, the PassHistory values from the earlier release did not match the expected character length in the subsequent release.

MIDMZ-7264

Updates

During updates, a version reference is applied to files that are cached in the user's browser. This prevents incompatibilities with files of the same name, and allows the browser to load new copies of the files.

In previous releases, files cached in the user's browser caused problems with MOVEit DMZ software updates.

MIDMZ-7706

Utilities

The MOVEitDMZFTP service path value can now be enclosed in double quotes (") to conform to current security requirements. DMZBackup recognizes the quote characters.

In previous releases, DMZBackup incorrectly identified double quotes in the path as illegal characters, causing the backup to fail.

MIDMZ-7615

WebApp

MOVEit Transfer now correctly handles SAML identity providers that provide multiple signing certificates (multiple IdP certificate support). The handling of certificate expiration, renewal, and replacement has been improved.

In previous releases, MOVEit Transfer did not correctly handle SAML identity providers that provided multiple signing certificates in their metadata files.

MIDMZ-7334

WebApp

If your organization uses lookup plus LDAP authorization, you can sign on successfully even if you click the sign-on button more than one time.

In previous releases, clicking the sign-on button multiple times caused the sign-on attempt to fail.

MIDMZ-7235

WebApp

This issue pertains to users who are authenticated via SSO.

You can now successfully upload a file to an ad-hoc package, even if after the upload finishes you wait 20 minutes or more before you click OK in the wizard.

In previous releases, the process timed out if you did not click OK within 20 minutes after the upload finished.

MIDMZ-5953

Web App

When loading an IdP metadata file, MOVEit Transfer now correctly identifies the X509 key information from the file.

In previous releases, MOVEit Transfer could sometimes not locate the X509 key information in the file. An exception occurred, and the metadata file was not imported.

MIDMZ-5940

WebApp

When authenticating with an Authentication Only source, Template settings in Edit LDAP User Settings for the Auth Source are correctly applied only to new users whose accounts are created when the user signs on.

In previous releases, the Template settings were applied to both new and existing users, which caused the FullName of the existing users to be overwritten by their Username.

MIDMZ-2016

WebApp

In the Address Book, you can now search for users whose names contain underscores (_).

In previous releases, the search failed if the name contained an underscore.

MIDMZ-7439

WebApp

Exceptions that occur in SAML handling code are written to the DMZ_WEB.log files. Admins can access this log.

In previous releases, these exceptions were displayed directly to the user.

MIDMZ-7398

Wizard

The JavaScript wizard now uploads correctly.

In previous releases, the Javascript wizard reported "session expired" errors if the user's HTTP Policy did not allow HTTPS access via HTTP clients.

MIDMZ-7330

Wizard

When uploading with the JavaScript wizard, the comment field limits the length of the comment that you can enter to 1000 characters. This limit prevents you from entering comments that are too long to upload.

In previous releases, long comments failed to upload.