WatchZit 1.3.4 is a security and reliability update for remote collectors and web scenarios, from a full QA, security and logic review of 1.3.3.
Install or update: VM images (OVA, qcow2, VHDX, ISO) or install.sh — see the README. A running console offers the update under Settings → Updates and server; agents update themselves.
Security
- Only administrators can make an agent a remote collector, assign devices or a discovery range to one, or set it in Change selected: a collector gets the passwords and SNMP keys of its devices.
- Removing an agent, or turning its collector role off, ends the role completely (devices, backups, discovery ranges); a computer enrolled later under the same name gets nothing. An agent the console no longer knows stops collecting and drops the passwords it held.
- A web scenario sends its password only to its own address, and a check whose address changes no longer keeps its stored password.
Fixed
- Devices of a collector that is offline (or never connected) now become unknown after a few intervals instead of staying green.
- Late or repeated results from a collector no longer overwrite newer ones; results are acknowledged only once stored.
- A collector's checks are sent again only when they really change.
- Editing a web scenario from its settings works again; errors in the steps are shown as they are.
- Very large numbers in list filters (devices, logs, problems, reports, audit) no longer cause a server error, and a malformed trigger or tool address shows "not found" instead of an empty form.
