Release Overview - Unimus 2.8.0

Unimus 2.8.0 is here, bringing one of the most anticipated features in recent releases — Compliance reporting. This is a major addition that opens the door to automated configuration validation, policy enforcement, and continuous oversight of configuration and runtime state across your entire infrastructure.

Alongside this headline feature, we’re shipping a host of smaller improvements, UI tweaks, fixes, and the usual batch of newly supported devices. Let’s walk through what’s new.

Compliance Reporting

This release introduces our brand-new Compliance module — a key tool for teams focused on security, governance, and operational stability. The module is available exclusively in the Advanced license tier.

With the new module, you can now define your golden configuration standards, internal policies, or industry standards, and have Unimus automatically validate your devices against them. Every time Unimus detects a configuration change, or a change in the runtime state of your network, your devices are re-validated, making it much easier to catch runtime surprises and configuration drift, before they escalate into security gaps or operational headaches.

Compliance rules can be as simple or as complex as you need — from straightforward text matching checks against your golden config, all the way to multi-condition regex logic linked together with logical operators. Results are presented clearly on preset and device levels and are ready for audits.

For a deeper look — from preset structure to practical examples — explore our full Compliance Overview article, along with our detailed wiki articles.

Enhancements, bug fixes, and new device drivers

Device CLI improvements

The Device CLI had a few issues when running "full-screen" programs like vim, mc, etc. We have changed it to use xterm by default, and implemented full handling for full-screen apps, resizing, changing window modes (full screen vs. partial), etc.

It should now be an even more capable terminal emulator :)

Saved search queues

Saved Searches received a small but handy improvement. When running multiple Saved searches in parallel, queued searches now correctly appear with a QUEUED state in the Saved Searches screen. The Saved Search detail view now also includes a state indicator for queued jobs.

You can additionally change the maximum number of Saved searches executed in parallel — which defaults to 5 — using the -Dunimus.server.config-search.query-page-size configuration property.

API v3: tag expiration

The API v3 documentation now includes expiration information for temporary tags across the POST, PUT, and GET endpoints, keeping the documentation fully aligned with the temporary tags feature introduced in Unimus 2.7.1.

Expanded device support

This release also adds and improves support for a variety of platforms:

• New driver for Arrcus ArcOS, DNVP and Ribbon devices
• Expanded support for NetGear GS-series switches
• Expanded support for Aruba Mobility Controller
• And more - check the full Changelog...

As always, these additions make Unimus more capable across the increasingly diverse networks deployed today.

For the complete list of changes, including all minor features, fixes, and newly supported devices, see the full 2.8.0 Changelog below:

= Version 2.8.0 =
Features:
  Improved Config Search / Saved Search queueing system that allows queueing and running many searches in parallel
  When running many Config Searches / Saved Searches in parallel, a proper "Queued" status will be displayed for queued Searches
  Various minor UI / UX improvements (help texts, styling, etc.)
  Added support for more types of login banners during SSH login
  Added support for more keyboard-interactive password auth variations during SSH login
  Added support for more variations of login prompts over Telnet
  On WatchGaurd firewalls, admin sessions will be properly released before a CLI session is closed

  Improvements to live Device CLI (Devices screen):
    - Device CLI could misbehave when opening "full-screen" programs like vim, etc.
    - the Device CLI will now use xterm as the default terminal type
    - the Device CLI will now automatically scale and rescale with CLI window size changes
    - this should fix CLI working correctly with full-screen programs, when being resized, etc.

  Added a new Config Compliance feature:
    - Compliance is the hero feature of the 2.8 release, and the largest new feature we have released in the last 2 years
    - you can now create Compliance presets which will report if you Configuration is compliant with your policies
    - Compliance also supports checking Runtime-state compliance of your devices - check for runtime port security violations, etc.
    - this is a large and complex feature, we look forward to your feedback and improvements will be coming in point releases in 2.8
    - Feature Overview: https://blog.unimus.net/config-compliance-unimus-2-8/
    - documentation: https://wiki.unimus.net/display/UNPUB/Compliance+Reporting

  Added support for:
    - Arrcus ArcOS
    - Aruba Mobility Controller running v8 firmware
    - Aruba AOS-8
    - DNWP Connection Master
    - DNWP Dyna Wiz
    - Netgate TNSR
    - Netgear GS-series switches (GS752TP)
    - Nokia Lightspan MF
    - Ribbon NPT

Fixes:
  Fixed strange characters could be printed in Device CLI if specific locales were used on the server
  Fixed 'Create another device' checkbox in device creation could sometimes not work
  Fixed Discovery failing on specific versions and models of Juniper JunOS devices
  Fixed Discovery failing on RuggedCom switches
  Fixed Discovery failing on Alcatel switches
  Fixed consecutive jobs on WatchGuard firewalls failing due to admin session count limitations
  Fixed jobs failing on SonicWall with enabled login banner
  Fixed jobs could fail on Fiberstore (FS.com) 32xx switch series with specific pagination variations
  Fixed Backup failing on Digi WR44 due to missing prompt after backup output
  Fixed Discovery failing on Nokia Lightspan due to Lightspan's command echo format

Embedded Core version:
  2.8.0