Skip to main content
Welcome to Virtru's support portal. As we work to make this page more accessible to screen readers, please contact us at support@virtru.com for technical support.

Release Notes: Virtru Customer-Hosted Gateway

  • Updated

v2.55.0 - 12/4/24

Change Type

Description
Improvements Minor updates and improvements

 

v2.54.0 - 10/30/24

Change Type

Description
Improvements Minor updates and improvements

 

v2.53.0 - 10/2/24

Change Type

Description
Improvements Minor updates and improvements

 

v2.52.0 - 8/20/24

Change Type

Description
Improvements Minor updates and improvements

 

v2.51.0 - 7/30/24

Change Type

Description
Improvements Minor updates and improvements

 

v2.50.0 - 6/24/24

Change Type

Description
Improvement Resolved vulnerabilities (USN-6791-1, USN-6737-1, USN-6768-1, USN-6755-1, USN-6733-1)

Improvement

OS Package Updates

 

v2.49.0 - 5/24/24

Change Type

Description

Improvement

Resolved vulnerability (USN-6737-1)

Improvement

Dependency Updates

 

v2.48.0 - 4/26/24

Change Type Description
Improvements Dependency and vulnerability updates

 

v2.47.0 - 4/8/24

Change Type Description
Bug Fix Cleans up address rewriting for inbound topology so that the reply-to address is honored

 

v2.46.0 - 3/26/24

Change Type Description
Improvements Dependency Updates

 

v2.45.0 - 2/21/24

Change Type Description
Improvements Resolve SMTP Smuggling vulnerability
New Feature Control gateway log level with "GATEWAY_LOG_LEVEL" env variable 
Improvements Upgrade dependencies 
Improvements Minor updates and improvements

 

2.44.0 - 1/8/24

Change Type Description
Bug Fix Process content from multiple instances of an SMTP header

 

2.43.0 - 12/5/23

Change Type Description
Bug Fix Fix an issue in decrypt mode where unsecure content was stripped from the reply in some applications. 

 

2.42.0 - 10/25/23

Change Type Description
Bug Fix Fixed improper HTML formatting on emails where content type was not defined
New Feature Configuration option to split Java stack and postfix logs
Improvements Upgraded Java version
Improvements Minor updates and improvements

 

2.41.0 - 8/23/23

Change Type Description
Bug Fix Remove unencrypted content from logs in some errors 
Improvements Add Policy ID to gateway logs
Improvements Minor updates and improvements

 

2.40.0 - 8/8/23

Change Type Description
Improvements Preserve formatting for text-only emails

 

2.39.0 - 7/11/23

Change Type Description
Improvements Minor changes and improvements

 

2.38.0 - 6/22/23

Change Type Description
New Feature Compatibility with new O365 Gateway mode
Improvements Minor changes and improvements

 

2.37.0 - 5/30/23

Change Type Description
Improvements Java version update
Improvements Logging improvements to include SaaS response
New Feature Replace from: header with reply-to address
Bug Fix Properly characterize transient errors
Bug Fix Send encrypted message with only BCC or CC address populated
Improvements Minor changes and improvements

 

2.36.0 - 5/3/23

Change Type Description
Improvements Minor changes and improvements

 

2.35.0 - 3/21/23

Change Type Description
Improvements Minor changes and improvements

 

2.34.0 - 3/8/23

Change Type Description
New Feature DLP Block Function
Improvements Minor changes and improvements

 

2.33.0 - 2/3/23

Change Type Description
Bug Fix Better handling of small attachments
Improvement Improved logging
Improvements Minor changes and improvements

 

2.32.0 - 1/6/23

Change Type Description
Improvements Minor changes and improvements

 

2.31.0 - 12/8/22

Change Type Description
Bug Fix Fixed issues with recipient field specific DLP rules

 

2.30.0 - 11/7/22

Change Type Description
Improvement Resolved vulnerabilities (CVE-2022-42003, CVE-2022-42004, CVE-2021-43797, CVE-2022-38752, CVE-2022-36033, CVE-2022-24823, CVE-2020-29582, CVE-2020-26939, CVE-2022-24329)

 

2.29.0 - 10/10/22

Change Type Description
Improvement Minor changes and improvements

 

2.28.0 - 9/13/22

Change Type Description
Improvement Minor changes and improvements

 

2.27.0 - 8/17/22

Change Type Description
Improvement OS component upgrades
Fix Add In-Reply-To header to RCA metadata
Fix GW thread reconstruction un-secure attachments

 

2.26.0 - 7/25/22

Change Type Description
Improvement Minor changes and improvements

 

2.25.1 - 6/30/22

Change Type Description
Improvement Minor changes and improvements

 

2.25.0 - 5/27/22

Change Type Description
Improvement Minor changes and improvements

 

2.24.0 - 5/5/22

Change Type Description
Improvement Minor changes and improvements

 

2.23.0 - 4/18/22

Change Type Description
Improvement Minor changes and improvements

 

2.21.0 - 3/8/22

Change Type Description
Improvement Minor changes and improvements

 

2.20.0 - 1/20/22

Change Type Description
New Feature Decrypt Gateway: Ability to add headers to decrypted messages for full message and thread reconstruction
New Feature Encrypt Gateway: Ability to fully reconstruct messages and threads based on message headers added by the Decrypt Gateway
Improvement Resolved Apache Log4j2 vulnerability (CVE-2021-44832)
Improvement Other minor patches, changes, and improvements

 

2.19.3 - 12/21/21

Change Type Description
Hotfix Additional hardening for Log4j vulnerability (CVE-2021-45105)

 

2.19.2 - 12/14/21

Change Type Description
Hotfix Additional hardening for Log4j vulnerability (CVE-2021-45046)

 

2.19.1 - 12/10/21

Change Type Description
Hotfix Resolved Log4j vulnerability (CVE-2021-44228)

 

2.18.0 - 10/20/21

Change Type Description
Improvement Improved header preservation
New Feature Ability to turn off auto-encryption of a message if an attachment is not scannable
Improvement Connection caching
Improvement Better processing for invalid recipient headers
Improvement Other minor changes and improvements

 

2.17.1 - 9/27/21

Change Type Description
Bug Fix Properly process replies to old messages without an email chain attribute

 

2.17.0 - 9/13/21

Change Type Description
New Feature Set email chain attribute for Secure Reader threading support
Bug Fix Fixed issue where Decrypt Gateway sometimes cuts off messages early
Improvement Improved attachment scanning
Improvement Expanded DKIM support
Improvement Other minor changes and improvements

 

2.15.0 - 4/29/21

Change Type Description
Bug Fix Fixed issue processing some attached .eml files
New Feature Decrypt Gateway: Ability to add headers to decrypted messages that show the security settings that were on the original
New Feature Encrypt Gateway: Ability to apply security settings based on message headers added by the Decrypt Gateway
Improvement Other minor changes and improvements

 

2.14.0 - 2/24/21

Change Type Description
Improvement Added ability to run Gateway container as rootless
Improvement Removed unused New Relic calls and associated errors
Improvement Disabled continuous Amplitude errors when Amplitude is not configured by the admin
Improvement Other minor changes and improvements


2.12.0 - 11/13/20

Change Type Description
Improvement General patches and resiliency improvements

 

2.11.0 - 8/26/20

Change Type Description
Improvement Ability to apply custom x-header
Bug Fix Fixed issue causing some corrupt attachments
Bug Fix Fixed FIPS mode errors
Improvement Other minor changes and improvements

 

2.10.0 - 6/9/20

Change Type Description
Improvement Minor updates to decrypt mode

 

2.8.1 - 2/13/20 - GA

Change Type Description
New Feature Moving v2.8.1 from EA to GA 

 

2.8.1 - 1/10/20 - EA

Change Type Description
New Feature PFP Support
Bug Fix Fixed TLS issue in "High" mode
Improvements Other minor changes and improvements

 

 2.6.0 - 9/17/19

Change Type Description
New Feature

FIPS support for On-Premises Gateway. 

 

 2.5.1 - 7/16/19 - GA

Change Type Description
New Feature

Added support for PDF Watermarking' or 'Watermarking' as a DLP rule. 
Caveat - Control Center shall be releasing an update to the DLP Rules so these advanced security options are available for customer 'Admins' to be built as custom rules. 
New Feature

Add support for CNAME.
Support has been built so all Gateway links are updated to point to the new CNAME start url on sent emails and replies.

Improvement

For both inbound decrypt/inbound encrypt modes, Gateway changes the from address to keep DKIM compliance. Originally this was a "noreply" address which could cause confusion for end-users.  The email address has been improved to make it more clear who is the original sender. 
Changing the from address may break integrations with certain SaaS Apps. Now we can allow admins to disable this behavior to address situations where the changed from address might break the flow.

Bug Fix

Unsecured replies to a secure message that includes inline images weren’t showing correctly when passing through inbound decrypt gateway. This has been fixed now
Bug Fix

Secure messages with attachments sent from Secure Reader when processed via Inbound Decrypt were getting delivered without attachments. This has been fixed now
Bug Fix

Fixed an issue where the incorrect mail template would display
Backend

Various reliability updates and security vulnerabilities addressed

 

2.4.5 - 03/28/19

Change Type Description
Bug Fix

Gateway now properly respects the cache time that was entered by the person who installed Gateway. This cache time determines the amount of time it takes for Gateway to use new DLP rules after they are updated in Control Center.
Bug Fix

Fixed a bug that was blocking downstream SASL authentication

Updated Feature

DLP Audit on Control Center displays the name of each violated rule instead of all conditions that were tested

Bug Fix

Emails with only a single BCC recipient were incorrectly bouncing, this has been fixed now and messages are delivered as expected.
Bug Fix

Better handle an issue where a secure reply to an unsecure message was bouncing, this has been fixed now and messages are delivered as expected.
Bug Fix

Fixed an issue where the incorrect mail template would display
Backend

Various reliability updates and security vulnerabilities addressed

 

2.4 - 03/05/19

Change Type Description
Bug Fix

Inbound decrypt no longer fails with DMARC and DKIM
New Feature

Enabled the LOGIN mechanism for SASL authentication
Bug Fix

Resolved a rare issue where inbound decrypt would result in a blank message
Added support

Enable Client Side TLS Management
In the Gateway ENV a new field is exposed that pre-defines the "tags" representing compliance levels
Update 

Addressed security vulnerabilities

 

2.2.18 - 05/04/18

Change Type Description
1-Click

Allows recipients to open messages without verifying identity
SMTP Header

Enhanced SMTP Header evaluation and parsing
Internationalization
  • Better handling of Unicode
  • More internationalization
Upstream SMTP Authentication
  • Virtru Gateway supports inbound SMTP authentication (SASL)
  • Supported Modes:
    • CRAM-MD5
    • DIGEST-MD5
  • Multiple accounts supported
Inbound SMTP Header 
  • Virtru Gateway supports inbound SMTP Header authentication
  • Pre-shared passphrase
  • Header is removed upon processing

 

2.1.67 - 02/4/18

Change Type Description
DLP Rules
  • Encrypt outgoing emails based on DLP Rules configured in the Virtru Admin Control Center
  • Outbound Encrypt Only
Message Expiration
  • Automatically add Expiration Date to a message
  • Outbound Encrypt Only
Disable Forwarding
  • Automatically add Disable Forwarding to a message
  • Outbound Encrypt Only
Attachment Scanning
  • Expanded Interrogation of Attachments
  • Inspect almost any attachment file type
  • Outbound Encrypt Only
Transport Security

More granular control by domain over inbound and outbound TLS.
Logging

Enhanced logging.
Email Aliases

Gateway has support for alias email addresses as well as domain aliases.
Personal Intro

Gateway supports per-user personal introductions set on the Virtru Control Center.
Calendar Items

Gateway supports calendar items.  They are passed without modification.
DLP Cache Management

Gateway supports modification of the cache refresh interval.
Delivery

Gateway supports modification of the cache refresh interval.
New Relic

Customer's New Relic credential

 

2.0.14 - 09/04/17

Change Type Description
Outbound Encrypt Automatically encrypt all outgoing emails from your domain
Outbound Decrypt Automatically decrypt Virtru encrypted outgoing emails
Inbound Encrypt Automatically encrypt incoming emails from external users
Inbound Decrypt Automatically decrypt incoming emails from external users
DKIM Gateway can sign outbound emails with DKIM signatures to add authenticity.
Monitoring Gateway supports third-party monitoring service New Relic exposed via JMX.
Logging Gateway emits the logs in syslog format thus making it easy for organizations to consume logs.
Scaling

Gateway instances can be scaled horizontally behind a load balancer

TLS Gateway supports mandatory or opportunistic TLS.

Related articles