Firewall for Artifactory Release Notes

Added REST API endpoints to allow admin users to change the configuration, reload the plugin, and to check the IQ Server connection

Fixed an issue with incorrect MODE selection

Fixed an issue when using cargo sparse indexes

Requires Sonatype IQ Server release 168.

Adding Fail Open Mode to enable users to ALLOW or DENY access to quarantined objects while IQ connection failures

Fixed an issue where new component audit/quarantine notifications were not sent

Added support for Policy Compliant Component Selection for npm

Added support for Namespace Confusion Protection

Improved logging during plugin initialization

Fixed an issue with the retrieval of version number for JFrogArtifactory

Fixed an issue with high availability cache strategy. The firewall.cache.quarantine.strategy configuration settings is deprecated and will now be ignored

Fixed issue with API incompatibility with JFrogArtifactory 7.38+

Added High-Availablity sections

Fixed issue with 'Repository Manager' name in the 'Repositories' view in Sonatype IQ Server. See the "1.x to 2.0 Migration" for more information.

Ability to re-quarantine a component

Fixed CSRF issue with IQ URL

Audit the entire repository when enabled

Improved how to access the IQ policy report URL

Improved IQ connection handling

More graceful handling if the firewall.properties configuration file goes missing

Fixed issue when using a web application path

Added support for proxies

Improved IQ summary report URL

Allow readers to access the Evaluation Summary

Initial release