Our documentation site has moved. For the most current version, please see http://help.sonatype.com

TOC

IQ Server 1.20

Nexus Firewall
New User Interface for Configuration
Access Management
System Hierarchy
Component Data
Sonatype CLM for Bamboo
Performance

The 1.20 release has changes to the following features, which are described in more detail below:

Nexus Firewall
New User Interface For Configuration
Access Management
System Hierarchy
Component Data
Sonatype CLM for Bamboo
Performance

Nexus Firewall

The Nexus Firewall solution now has the ability to release a component from quarantine. Also, you can now override a vulnerability of a repository component. For more details, see the IQ for Repository Manager chapter.

New User Interface for Configuration

IQ Server configuration features have a new user interface designed to make it easier to configure policies, organize system hierarchy, and manage user access. In the Organization & Policy area, several items have been renamed:

The Security tab is now the Access button.
Tags are now called Application Categories.
Labels are now called Component Labels.

Access Management

There are a few additions to managing user access:

For security access, a new built-in group called Authenticated Users has been added. It contains any user who is authenticated by a realm integrated with IQ Server. You can assign Authenticated Users to roles in the same way as individual users or other groups.
For user roles, there’s a new permission called Add Applications. It allows you to grant users the ability to create applications within the scope of an organization without granting them full owner permissions. This new permission has been added to the CLM Administrator and Owner roles as well as any custom role that grants permission to edit an organization. You may want to review custom roles and their assignments to verify permissions are set as desired.
For the login process, feedback is now provided when a login fails due to LDAP issues.

For more information on managing user access, see the Security Administration chapter.

System Hierarchy

You now have the ability to move an application from one organization to another. This makes it easier to reorganize the IQ Server system hierarchy when needed. For more information, see Moving an Application in the Organization and Application Management chapter.

Component Data

For component data, there’s a new license type called Not-Supported. It indicates that Sonatype or the target ecosystem does not currently support automated license collection for a component’s format.

In addition, the Sonatype Data Research group is now providing the following data:

Common Vulnerability Scoring (CVSS) for security issues that have reserved CVEs as of February 23, 2016. See the Sonatype Support Knowledge Base article for more details.
Root Cause information in the vulnerability details view. See the Sonatype Support Knowledge Base article for more information.

Sonatype CLM for Bamboo

The Sonatype CLM for Bamboo plug-in has been updated to version 1.0.6. It fixes an error that can occur when connecting the Bamboo plug-in to IQ Server over SSL.

Performance

The loading times for the Dashboard, Reporting, and Organization & Policy areas have been significantly reduced, especially for systems with large data sets. If you have hundreds or thousands of organizations and applications, you should see faster loading of the Dashboard, reports, and configuration features. The Dashboard also has simplified summary results at the top, which makes it easier for you to focus on the Risk section.

TOC

Documentation Nexus IQ Server 1.20