Tenable Identity Exposure 2023 On-premise Release Notes
Tenable Identity Exposure 3.42 (2023-04-06)

-
Dashboard data availability — Enables reporting on compliance score, deviances count, and users count values over a new maximum 1-year time span (from one month).
-
Scalability — Tenable Identity Exposure improved the performance of Indicators of Attack on the service side to handle events of interest on a greater scale for better IoA accuracy and latency.
-
Quicker and easier deployment of Indicators of Attack — Tenable Identity Exposure can now add or remove Indicators of Attack automatically from configured domain controllers without any manual intervention. For more information, see Install Indicators of Attack in Tenable.ad Administrator Guide.
-
Indicators of Attack
-
Inhibits the CPU consumption to limit the impact on the domain controller.
-
Improved resource footprint on domain controllers.
-
-
Attack Path — Introducing views of Tier 0 assets and the attack paths leading to them. For more information, see the Tenable.ad User Guide.
-
Accounts with never expiring passwords — A new option in this IoE allows whitelisting for entire organizational units (OUs).
-
Privileged Analysis — You can control whether or not to send privileged data collection to the Tenable Cloud service (default: do not send).

Tenable Identity Exposure version 3.42 contains the following bug fixes:
Bug Fixes | Defect ID |
---|---|
Indicators of Exposure and Related Fixes | |
|
N/A |
Indicators of Attack and Related Fixes |
|
|
N/A |
Tenable Identity Exposure Installer | |
|
N/A |
Attack Path | |
|
N/A |
Other Fixes | |
|
N/A |

Tenable Identity Exposure version 3.42.11 contains the following patches:
Patch | Defect ID |
---|---|
Tenable Identity Exposure can once again run with multiple listeners (Ceti) instances. | N/A |
Tenable Identity Exposure now generates the IoA GPO audit.csv file using results from Windows APIs instead of the auditpol.exe output (which is localizable). | N/A |
The customization of Tenable Identity Exposure IoAs now works as expected. | N/A |
An additional parameter, -EventLogsFileWriteFrequency X, in the Indicator of Attack deployment script allows you to address potential issues with slow or broken Distributed File System (DFS) replication that you may experience. For more information, see DFS Replication Issues Mitigation in the Administrator Guide. | N/A |
Update of the xml2js dependency to the latest version (from 0.4.23 to 0.5.0). | N/A |
Tenable Identity Exposure now limits the occurrence of Access Denied errors originating from the SYSVOL share to prevent excessive log disk usage. | N/A |

Tenable Identity Exposure on-premise version 3.42.11 offers significant enhancements to safeguard your Active Directory infrastructure. This release includes updates to certain dependencies to prioritize software security and ensure up-to-date components for improved protection.
Tenable Identity Exposure | Version 3.42.3 | Version 3.42.11 | |
---|---|---|---|
Software Name | File Name | Version | Version |
cUrl | curl.exe | 7.66.0 | 8.0.1 |
SysInternals Handle | handle.exe | 4.22.0 | 5.0.0 |
IIS URL Rewrite Module 2 | rewrite_amd64_en-US.msi | 7.2.1980 | 7.2.1993 |
.net Runtime |
dotnet-hosting-6.0.14-win.exe | 6.0.14 | 6.0.16 |
NodeJS | node-x64.msi | 16.19.1 | 16.20.0 |
MSSQL | setup.exe | 2019.150.2000.5 | 2019.150.4312.2 |
RabbitMQ | rabbitmq-server.exe | 3.10.11 | 3.10.19 |
ASP.NET Core | dotnet-hosting-win.exe | 6.0.14 | 6.0.16 |