Release 1.8.1

May 25, 2023

What’s New?

Here’s what’s new in SaaS Detection and Response 1.8.1!

Certificate-based Authentication for Teams, and Security & Compliance

Certificate-based authentication is now available for the Teams, and Security & Compliance modules, which means that the Teams Administrator and Compliance Admin user roles are no longer necessary.

With this update, Multi-Factor Authentication (MFA) will no longer show the Error status for these applications. However, the MSOL module still displays the Error status with MFA, but this issue will be addressed in an upcoming release.

New Command Line Arguments

You can now use the below command line arguments while installing the Azure setup for Office 365 connector. They allow you to customize your function application plan, function runtime version, and function storage.

Argument	Required/Optional	Description
-v	Optional	Specify the powershell runtime version. Supported version: 4 (default value).
-p	Optional	Specify the SKU plan for the function application. The higher the plan, the faster the function application. Minimum supported version: B2 (default value). Supported versions: B2 (Basic Medium) B3 (Basic Large) S1 (Standard Small) P1V2 (Premium V2 Small) The cost of the Azure function application increases with higher plans.
-S	Optional	Specify the SKU type for the storage account. Minimum supported type: Standard_LRS Supported types: Premium_LRS Premium_ZRS Standard_GRS Standard_GZRS Standard_ZRS The cost of the Azure function application increases with the increase in SKU type.

Argument

Required/Optional

Description

-v

Optional

Specify the powershell runtime version.

Supported version: 4 (default value).

-p

Optional

Specify the SKU plan for the function application. The higher the plan, the faster the function application.

Minimum supported version: B2 (default value).

Supported versions:

B2 (Basic Medium)
B3 (Basic Large)
S1 (Standard Small)
P1V2 (Premium V2 Small)

The cost of the Azure function application increases with higher plans.

-S

Optional

Specify the SKU type for the storage account.

Minimum supported type: Standard_LRS
Supported types:

Premium_LRS
Premium_ZRS
Standard_GRS
Standard_GZRS
Standard_ZRS

The cost of the Azure function application increases with the increase in SKU type.

Usage: sh qualys_azure_installation.sh [-v value] [-p value] [-S value]

Upgrade and Post-Upgrade Steps for Office365 Connector

Perform the following steps to upgrade the existing Microsoft Office365 connector to leverage the improvements introduced in SaaSDR 1.8.1:

Upgrade the Microsoft Office365 Connector

Log in to Qualys Cloud Platform and navigate to Saas Detection and Response.
Download qualys_azure_setup.zip and extract it to a local folder.
1. Go to the Configuration tab, click Create Connector and select Office365 from the list.
2. In the right pane, click the link for detailed setup instructions.
Go to the Create Azure Resources section and download the qualys_azure_setup.zip using the link.
- You need the following permissions:
  - Global Reader
  - Privileged Role Administrator
- You must have MFA disabled. This is required because not all PowerShell modules support alternate/modern ways of authentication.
On the Bash terminal (Cygwin), run the upgrade script using: qualys_azure_upgrade. For example, sh qualys_azure_upgrade.sh.

Re-authenticate the Office365 Connector

Go to Saas Detection and Response > Configuration.
Select the Office365 connector, click Actions > Re-authenticate, and wait until all the scanners and the connector are in the Success state.

Issues Addressed

The following issues were fixed in this release:

Catogary/Component	Application
SaaSDR	The control “CID-70088 Ensure root public folders should not be present” showed the Error status when there were no active public folder mailboxes.
SaaSDR	The control “CID-70088 Ensure root public folders should not be present” showed the Error status when there were no active public folder mailboxes.