Release Notes

Security Awareness Training Application Security – Various internal security enhancements.

Security Awareness Training Demo – Potential customers can virtually explore the Security Awareness Training application.

Address Books – Email addresses with an apostrophe and saved in an Address Book are now correctly validated.

Email Sending – The sending of Sample Emails from a campaign now uses the priority set on the Email Template.

Email Templates – Can no longer delete an email template that is currently in use as a Training Reminder template.

Improved Performance - The final phase of database indexing performance improvements has been completed.

Web Activity Details – Fixed a bug that caused missing OS and IP information from Web Activity.

Immediate Feedback Campaigns – The 'reported' stat now works correctly on Immediate Feedback campaigns when using the Barracuda Email Protection Add-In.

Missing Activity – We encountered an outage that resulted in missing activity from campaigns in late April. The missing activity has been restored.

False Click Reduction

• All clicks that achieve a machine click score of 3 or above are now automatically ignored.

• All clicks that occur after an email is reported are now automatically ignored.

SSO Conversion – Users not previously logging in using Single Sign-On (SSO) have now been converted to SSO through Barracuda Cloud Control.

Total Emails Sent – Total Emails Sent stat no longer provides misleading information when training reminders are on.

Automated Campaign – Future start dates no longer cause errors.

Improved Performance – Completed phase 2 of 3 of database indexing performance improvements.

Improved Resource Allocation – Completed resource allocation improvements in a first step to making onboarding customers much faster.

Landing Page Publishing – Fixed an error related to multiple content groups in a single campaign.

Reports – Fixed an issue of blank send dates causing reports not to generate.

Improved Performance – The first phase of database indexing performance improvements have been completed.

Quick Launch Training – Campaigns can use Quick Launch training content from Advancing stage.

Dynamic Address Books – Updating the end date of a Dynamic Address Book works correctly.

Database Indexes – Performance enhancements have been made to database indexes.

Reserved Subdomains – 'dev' and 'qa' are now considered reserved subdomains in Security Awareness Training.

Activity Stats – Campaign activity stats are updated without delay.

Mail Sending – Emails are sent out without delay.

Required Cutoff Date – A cutoff date is required when updating a campaign.

Send Date – Fixed an error resulting in a blank Send Date for some emails.

Single Sign On – The manual login method for Security Awareness Training has been completely replaced by SSO (Single Sign On).

LDAP Connector – Fixed an issue that could prevent the creation of new connectors.

Training Start Date – Training start dates now appear in all situations.

Preview Images – Fixed an issue that sometimes resulted in missing preview images.

‘Reported’ Stat Change – The Outbound Analysis statistic previously called Activity Fw to Incident Response has been changed to Reported. This stat includes emails reported using the universal Barracuda Outlook button.

Migration to Cloud Completed – Security Awareness Training has finished migrating to a new cloud provider.

Between August 19 - 22 there were several one-time issues brought about by the cloud migration:

• Excessive Training Reminders – Some customers with active training campaigns using training reminders received additional reminder emails.

• Incorrect Campaign Stats – Campaign stats including training start date, training completed, and click statistics may have appeared incorrect for a few customers. Those stats have since been corrected.

• Inaccessible Training Links – Some customers may have experienced incorrect Security Violation errors when visiting training links. Access to those links has been restored.

Outbound Analysis API – There is a new API endpoint available for Outbound Analysis. Documentation is coming soon to Campus.

Continued Migration to Cloud – Work continues on the migration to a new cloud provider.

Timezones in Quick Launch – Quick Launch timezones are correctly matched.

Bounced Mail Optimization – Optimized the process that handles bounced mail in central mail match.

Migration to Cloud – Security Awareness Training continue the moves to a new cloud provider.

Training Results Delete – Fixed an error preventing the deletion of training results.

Report Generator Filtering  – Improved the Report Generator filter and sequence fields character handling.

Preview/Dry Run Training Messages – Fixed an error that sometimes resulted in ‘Training already completed’ messages in training preview and dry run sample messages.

Address Book Utility  – Added improved validation and error messaging when at least one campaign is not selected.

Web Template ‘Module not found’ – Improved the Web Template Manager module handling.

SSO Sign On – Single Sign-On (SSO) is now the only way to log in to Security Awareness Training (SAT). Users not already using SSO with SAT should create a Barracuda Cloud Control (BCC) account and then use the conversion button on the login screen. See Move to SSO for details.

Training Results – Training Results now tie back to campaigns for easier filtering. A Training Results button is also now available from Campaign Manager for education campaigns.

O365 Connector – A change in the Microsoft Graph API caused an error that is now corrected.

Manager Notifications and Reminders  – Adjusted notifications to recognize the ‘active’ flag and improved the training link layout in reminders.

SSO Sign On – Single Sign-On (SSO) will soon be the only way to log in to Security Awareness Training (SAT). Users not already using SSO with SAT should create a Barracuda Cloud Control (BCC) account in preparation for the transition to SSO.

Campaign Summary Overview – Addressed an error occurring after the send of the Campaign Summary Overview.

DOS Vulnerability – Addressed a potential DOS vulnerability by splitting notification sending into proper environments.

PDF Zip Error – Zipping sequenced reports in Report Generator now functions correctly.

LMS Player SQL Error – Fixed the rare occurrence of a SQL error received during callbacks to LMS.

New Machine Click Test – We added a new machine click test to our suite, which compares the click time to the sent time. The test is expected to catch a large number of machine clicks.

‘Allow’ Style Activity Filters – The ability to define ‘Allow’ style global activity filters has been removed. ‘Block’ style filters remain an option.

SMS and Voice Unavailable – We disabled SMS and Voice sending campaigns and added a message to Campaign Manager and Voice Application screens.

Domain Auth Error Link – Fixed a broken URL pointing to current unauthorized domains, which was linked to from a Domain Auth error message on the Dashboard and Address Books Manager screens.

New Quick Launch Content – The Quick Launch content library will grow over the next few months, including both testing and training content in multiple languages.

Quick Launch Speed Improvements – Quick Launch has been enhanced and optimized for improved performance.

Missing Buttons in New Browser Versions – Fixed a bug that caused the Web Server and Email Server buttons to disappear from Campaign Manager and Content Group Manager screens in newer versions of Chrome and Edge versions 105 and later.

Address Book Import – Address books can no longer be reimported while they are being used in live campaigns.

Training Overview Charts – Charts will render consistently in Training Campaign Results Overview reports.

Domain Selection – Fixed an issue preventing the selection of customer email domains from domain dropdowns.

Landing Page Preview – Landing page previews will now generate correctly in all cases.

New Login Landing Page  – We have developed a new style login landing page that simulates password fields in order to better prevent domain blocking during campaign runs.

Quick Launch Domains  – Quick Launch now has its own set of domains to help control blocked domains during campaign runs. Note: The switch will occur at the time of production roll in.

SMS & Voice Preview  – Preview is not available for SMS and Voice campaigns, so the button was removed from the screen. Dry Run functionality has not changed.

Inline Image Optimization – Fixed an inefficiency when sending emails containing inline images.

Landing Page Disclaimer – All landing pages now contain a non-removable disclaimer at the bottom of the page. In part this will help prevent our pages from being classified as phishing content by Google. A sample landing page with disclaimer can be viewed here.

HTTPS Protocol Support – The protocol selection for landing page domains has been removed. All new domains default to HTTPS.

Training Campaign Copy – Training reminder settings will now be copied during a campaign copy.

Automated Campaign Date Bug – Fixed an issue allowing stats to be captured after the cutoff date for automated campaigns.

Instance Selection from BCC – For users that belong to multiple SAT instances, we’ve added a new feature that displays a list of instances to choose to be redirected to from the [phishline.com/login]main SAT login page.  

Blocked Domain Messages – Fixed a problem with the messages indicating that a live campaign has a blocked.

Report Sequencing – Fixed an issue affecting the Report Sequencer when a campaign name contains a single quote.

Attachment Name  – Fixed an issue preventing Chinese characters from saving as part of a Smart Attachment name.

Campaign Sample Messages – Samples have been separated into two functions: Previews (for viewing content look and feel) and Dry Runs – meant to simulate a campaign before going live. More details are available in Barracuda Campus. 

O365 Connector Improvements – The O365 connector now offers the ability to block email addresses as well as map O365 attributes to address book fields.

Blocked Domain Messages – The messages indicating a live campaign has a blocked domain have been updated to send to the Campaign Status Updates notification setting list (previously sent to the creator of the campaign).

Multi-Select Filters – Fixed an issue that prevented certain multi-select field fields from working correctly.

Send Sample Improvements – Barracuda Networks partially completed a revamp of how the send sample process works, both behind the scenes as well as the sample UI. This feature will be finished in the next release.

OAUTH2 SSO API Support – Implemented OAUTH2 SSO support for APIs within BSAT.

Reporting Bugs – Fixed several bugs causing problems with report generation.  

Incident Response – Fixed an issue preventing certain emails from processing in Incident Response.

Transaction Errors  – Fixed an issue causing possible duplicate transactions resulting in errors.

Content Filtering in Quick Launch – Quick Launch content can now be filtered by category and language. This lays the groundwork for additional language support (coming soon).  

BCC SSO for Barracuda Users –  All Barracuda support users have been converted over to using BCC SSO with the BSAT app. BCC SSO is still optional (but supported) for all non-Barracuda employees.

Automated Campaign Date Fix – Fixed issue that was stopping automated campaigns that had been running for more than a year.  

Machine Click Score Global Filter – Fixed issue preventing the global machine click score filter from working consistently due to timing issues.

Single Sign-On (SSO) Using BCC – New ability to log into SAT using SSO via a BCC account. You will find messaging about this new feature in the most recent Click Thinking.

Language Support in Content Groups – New ability to set language fields (spoken and written) at a Content Group level. This feature will be leveraged for Quick Launch in upcoming releases.

SSRF Vulnerability – Fixed a blind server-side request forgery vulnerability.  

Address Book Utility – Fixed issue with the Remove Clicks by IP Address Book Utility.  

SDMA Error (FireFox)  – Fixed issue causing an SDMA error to appear on the screen during stage change in FireFox browsers.

Address Book Groups – New Address book group feature. You can now add multiple address books to a campaign at a time by selecting an address book group name. For more information, see How to Create an Address Book. 

New Landing Page Style – Added a new landing page, simulating 2-step authentication.

Several fixes in the back end to improve performance and security. 

Machine Click Filtering – Added two new features to filter out suspected machine click activity from campaigns:

• Address Book Utility – Remove Clicks by Machine Click Score. For details, refer to Address Book Utility.

• Global Activity Filter – Filter by Machine Click Score. For details, refer to Global Settings.

New Top-Level Domain Support – Added support for .io, .cloud, and .live domains.

Address Book Connectors –

• Added delete capabilities to the Office 365 connector. For details, refer to Microsoft 365 Connection Manager. 

• Improved error handling and messaging for both Office 365 and LDAP connectors. 

Filter Enhancements – Filter loading enhancements now decrease page load time and improve performance.

UI Improvements – Continued updates on user interface, focusing on informational and error panels, buttons, and loader rings.

Training Content Update – Added URL to the Basic browse view.

Address Book Utility Error Handling – Improved error handling for the address book utilities if user does not enter accurate filter data.

Report Chart Size Adjustment – Improved formatting of charts and screenshots in DOCX and PDF reports.

Increased Filter Length – Increased the filter max length for email address fields in Address Book Manage, Web Activity Analysis, and Inbox Analysis.

Account Information Notifications – New notifications inform you about license overages and upcoming account renewals or expirations. 

Address Book Utilities – Fixed issue so activity now populates correctly.

SAML SSO– Fixed issue so users can log in through SAML.

PDF Charts – Fixed issue so charts export to PDF correctly.

Account Information – You can now view information about your serial number, license count, and contract expiration date under your user icon in the upper right corner of any screen. 

Content Center Performance – Substantial performance improvements made to Content Center load time. Improvements will continue. 

Passed Statistic Removed– The Passed metric is no longer used. Training is either completed or not – there is no concept of passing a quiz. 

Fixed issues affecting email-only domain signatures, sending samples, and training links in Internet Explorer. 

User Interface Improvements – Improved hint text, filters, form zones, and consistency. 

Landing Pages – Fixed issues so landing pages remain published.

Security – Security enhancements in the back end. 

Security – Several fixes in the back end to improve security. 

Filter Enhancements – Expanded filter field character limit to 250 (previously 60) characters on all filter fields. Enhanced field name wrapping in filter field menu. 

Several fixes in the back end to improve performance and security. 

Several fixes in the back end to improve performance and security. 

Added new article with procedures to help stop users from seeing the pop-up warning message from Google. See Disabling Google Safe Browsing Warning Message Using Group Policy.

Activity Filters – Fixed issue with activity filters based on operating system (OS) that did not work correctly.

Automated Training Campaigns – Fixed issue that caused delays with Training Completed notifications.

Several fixes in the back end to improve performance and security.