ID

Category

Fixed Issue in MOVEit Transfer 2017 PLUS

MIDMZ-1920

Load & Performance,
Scheduler,
Web Farm

Performance was improved for tamper-checking of webfarm systems under heavy loads.

Before this optimization was added, webfarm systems experiencing peak periods were more likely to experience system latency.

OUTLK-2196

Outlook

Unneeded prompts for Windows credentials are now suppressed.

MIDMZ-2216

Web App

When many files arrive in a user's folder on which notify is enabled, the list of new files now spans multiple pages in the folder as needed.

In previous releases, when a large number of files arrived at the same time in a user's folder, the system's attempts to display the files caused a SystemOutOfMemoryException and/or a long-running database query.

MIDMZ-6347

Web App

Controls and logic added to prevent an admin from deleting own account.

MIDMZ-6896

Web App

Application hardening against cross-site scripting.

MIDMZ-7610

Ad Hoc, Web App

If you send a package to a recipient who uses package passwords (guest user), you now receive a delivery receipt to indicate if the package attachment was received and downloaded.

In previous releases, you did not receive notifications for packages that you sent to guest users.

MIDMZ-7704

Web App

When you receive a notification email and click the hyperlink to open the sign-on page, the default account name appears correctly in the Username field.

In previous releases, if the hyperlink in a notification email was not secure (that is, the URL used http:// ), the at symbol (@) in account names was incorrectly replaced with a percent sign (%).

MIDMZ-7853

Web App

Organization names are compatible with Unicode.

MIDMZ-7932

Web App

Default password length now enforced at Add User, My Account, and Organizational Admin fields.

MIDMZ-7932

Web App (sign on).

UI controls in User Add, My Account, and Organization Admin prevent passwords from exceeding the limit enforced by the server (32 characters).

MIDMZ-7991

Load & Performance,
Scheduler

The following new optional registry values control the operation of ArchiveLog. All are string values that reside under HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Standard Networks\siLock

• ArchiveLogBatchSize The number of records to bundle together into a single log archive file, or batch. Default is 10000 (used if this value is not present). Smaller values might reduce the performance impact of running ArchiveLog.
• ArchiveLogBatchPauseMS The number of milliseconds to pause between batches. Default is 1000. Larger values might reduce the performance impact of running ArchiveLog.
• ArchiveLogTableName The name of the log table. The default is "log". This rarely-used registry value can be of use to advanced sites that have split their log table into multiple tables, and are doing maintenance on older records.

MIDMZ-7994

SAML sign on.

Improved and hardened session ID handling for SAML.

MIDMZ-8047

Ad Hoc, Outlook

If you send a message to multiple users, but one or more users are inactive or expired, the package is sent to all valid users. You receive a Non-Delivery Alert message that lists the inactive/expired users who did not receive the package.

In previous releases, if the recipient list contained inactive or expired users, the package was not sent to any users.

MIDMZ-8124

Web App

All standard graphic files now can be used for the organizational logo. Before the fix, web posts limited valid graphic file format use in the confirmation page (such as an organizational logo).

MIDMZ-8145

MOVEit Transfer sign-on, SAML

SAML session creation accommodates IDs up to 64 chars.

MIDMZ-8189

MOVEit Transfer

Fixed a problem where not gracefully closing connection to an email server could cause email failures under load (heavy use).

MIDMZ-8202

Web App

Upload of large package files does not timeout artificially.

MIDMZ-8209

Libraries

Improvements to active session table.

MIDMZ-8211

Installation

You can now perform an unattended installation with an existing service user account.

In previous releases, the unattended installation worked only when a new service account was created during the unattended installation.

MIDMZ-8243

Web App

This issue pertains to profiles in which the Display Help Section and Display Online Manual Link are enabled.

The Technical Support page (launched by clicking the HELP button in the top menu bar) now displays the Manual link, which opens the online help. The Custom Help link is also displayed if it has been configured.

In previous releases, the links to online help and custom help did not appear.

MIDMZ-8279

Tools

Check Database utility has a larger default value for query timeout to accommodate large DB tables.

MIDMZ-8313

Web App

When you move files or folders to any of their parent folders (that is, upwards in the folder hierarchy), an exception is no longer written to the DMZ_Web log files.

In previous releases, moving a folder or file to a parent folder was successful. However, an unnecessary database query was performed, which caused SQL exceptions to be written to the DMZ_Web log files.

MIDMZ-8343

SAML Sign on

Organization welcome message not displayed to end-users.

MIDMZ-8434

FTP Server

Fix for accommodating long file paths (previously long file paths could cause errors). Fixes were added as part of the 2017 Unicode improvements but not specifically called out in the 2017 Release Notes.

MIDMZ-8459, MIDMZ-8445

Security

Hardening against pre and post auth SQL Injection cases.

MIDMZ-8495

Scheduler Service

Fixed lag in status for scheduler state when running on Windows Server 2016.

MIDMZ-8564

Web App

Admin file permissions are granular and regulated by group.

MIDMZ-8554

Web App

On rare occasions file list population in Web UI failed to load.

MIDMZ-8556

Ad Hoc

Guest users (package password) can switch languages at sign in with continuity of session and package download.

MIDMZ-8596

API

Added support for a documented, but not implemented API feature for exempting a user from password aging. With the related change for password aging policies, this feature sets the user's password policy to "Exempt".

MIDMZ-8629

Web App (Upload)

Fixed case where some error messages were rendered in English rather than their localized (translated) versions.

MIDMZ-8630

SSH/SFTP

Memory management optimizations applied to SSH/SFTP server.

MIDMZ-8975

SecAux Utility

The option to re-order SSL ciphers to make 256-bit AES primary has been removed from the SecAux utility. (This option is now out of date since Microsoft has been updating ciphers as needed for better security). The cipher order can be changed using the MOVEit Transfer Config Utility.

MBL-2456

Security,
Server Updates,
Android Devices

Since the MOVEit Transfer 2017 release, Android devices will connect only to a secure server that has a server certificate issued by a Certificate Authority (CA) that is trusted by the device.

For more information, see Updating a Mobile Server that connects to Android Devices