This Service Pack delivers the latest fixes and new features.
It consolidates every hotfix previously released to customers, addressing specific requirements and resolving known issues.
These fixes have been compiled and will be replaced by Service Pack 9 for Artica v4.50 released on October 08, 2026.
- 20261008-17: Fix: in Artica Proxy, The memory pools setting is no longer overwritten with the memory limit each time the proxy configuration is built.
- 20261008-17: Fix: in Artica Proxy, The proxy configuration file is now replaced in one step, and two reconfigurations never run at the same time: a proxy process could stop on a half-written configuration line.
- 20261008-17: Fix: in Artica Proxy, HyperCache no longer uses refresh options that the proxy reports as obsolete.
- 20261008-17: Fix: in Artica Proxy, An empty memory cache mode no longer writes an invalid line in the proxy configuration, and a low disk usage mark above the high mark is no longer accepted.
- 20261008-17: Add: in Artica Proxy, The cache level page was redesigned: its settings are grouped in cards, each group is edited in its own dialog, values are checked before saving, and options given by the cache level are shown apart from the ones chosen by the administrator.
- 20261008-17: Fix: in Artica Proxy, The cache level and the freshness options now really reach the proxy: the default refresh rule never carried them, so the low, medium and strong cache levels behaved the same.
- 20261008-17: Fix: in Artica Proxy, In multi-CPU mode, the Caches Center no longer marks every disk cache as unsupported: only a cache assigned to a process the proxy does not run is, and the message gives that process.
- 20261008-17: Fix: in Artica, The web console reads again which settings exist since they became readable by the system only: the cache status page showed no cache, proxy actions were missing, and some settings were reset to their default value on each page.
- 20261008-17: Fix: in Artica Reverse Proxy, Let's Encrypt certificates requested by the AI assistant now get a name no other certificate can share, one request runs at a time, a failed request leaves no certificate behind, and the request is refused when Let's Encrypt is set to use port 80 itself, which would stop the reverse proxy.
- 20261007-17: Fix: in Artica Proxy, With several proxy workers (multi-CPU mode), the caches of the Caches Center are used again: each disk cache goes to the worker it is assigned to, rock caches are shared by all workers, and the cache status page no longer reports them as not supported.
- 20261007-17: Add: in Artica Reverse Proxy, The AI assistant can now request a Let's Encrypt certificate for a published site and attach it after approval; the request waits for the certificate, never deletes an existing one, and the attachment can be undone.
- 20261007-17: Fix: in Artica, Free disks offered for a proxy cache or a btrfs volume now include SSD and NVMe disks, such as virtual disks on an NVMe controller.
- 20261007-17: Fix: in Artica Proxy, The new cache disk wizard lists the free disks again: it relied on a disk scan that no longer exists and never found any disk.
- 20261007-17: Fix: in Artica Proxy, Adding a cache folder now applies the configuration right away: the folder used to show as active while the proxy never stored anything in it until the configuration was applied by hand.
- 20261007-17: Fix: in Artica Proxy, The button that temporarily disables or enables caching in the proxy Actions window now works: it used to open a page that did not exist.
- 20261007-17: Fix: in Artica, A translated label is no longer lost from the web console when the label registered just before it has no text at all.
- 20261007-17: Add: in Artica Reverse Proxy, The AI assistant can now enable or disable the web application firewall of a published site, choose its detection or blocking mode, add or remove a rule exception, and attach an existing certificate, after approval; every change is checked before it is installed and can be undone.
- 20261007-17: Fix: in Artica Proxy, The button that pauses or resumes HyperCache deduplication in the proxy Actions window now works: it used to open a page that did not exist.
- 20261007-17: Fix: in Artica Proxy, The HyperCache rule restore route now refuses rule identifiers far beyond those of the table, which could have blocked every later rule addition.
- 20261007-17: Fix: in Artica Proxy, Undoing a HyperCache rule change no longer reports a failure when an Artica update added a new default rule in the meantime.
- 20261007-17: Fix: in Artica Proxy, The AI assistant now refuses at once to enable a HyperCache rule that the deduplication helper bans, instead of failing after a timeout.
- 20261007-17: Fix: in Artica Proxy, A HyperCache deduplication rule that the AI assistant writes in place of an Artica default rule now takes the exact place of that default rule in the evaluation order.
- 20261007-17: Add: in Artica, Quarantine report recipients can release and allow a sender, or block it, directly from their report; allowed senders are delivered at once only when their identity is authenticated.
- 20261007-17: Add: in Artica, Users can forward a message as an attachment to spam@ or white@ on the release domain to block or allow its sender, and optionally train the anti-spam engine.
- 20261007-17: Add: in Artica, Messages released from quarantine carry who released them and when, with an optional warning banner that is never added to signed or encrypted mail.
- 20261007-17: Add: in Artica, The quarantine console can release or delete up to 50 messages at once and manage every user's allowed and blocked senders.
- 20261007-17: Add: in Artica Proxy, The AI assistant can now add, change, enable, disable, reorder and remove HyperCache deduplication rules after an administrator approves it, and proves that the proxy loaded them.
- 20261007-17: Add: in Artica Proxy, HyperCache refuses deduplication rules that could let one website take the cached content of another.
- 20261007-17: Add: in Artica Reverse Proxy, The AI assistant can now add, modify, drain, restore and delete the backends of a published site after approval; every change is checked by nginx before it is installed and can be undone.
- 20261007-17: Fix: in Artica, DNS Firewall queries on the DNS root no longer produce a warning in the daemon log.
- 20261007-17: Fix: in Artica, The hardware information sent with the license request is read correctly again instead of failing with an invalid data error.
- 20261007-17: Fix: in Artica, The certificate database is migrated to case-insensitive certificate names on appliances installed with the original schema, which also stops a warning repeated hundreds of times a day.
- 20261007-17: Fix: in Artica, The deprecated Tailon service no longer leaves a monitoring rule behind that relaunched it every two minutes.
- 20261007-17: Add: in Artica, The AI assistant can now enable, disable, pause and resume HyperCache deduplication after an administrator approves it, with an automatic return to the previous setting if the proxy rejects the change.
- 20261007-17: Fix: in Artica Reverse Proxy, A temporary error while reading the sites database no longer deletes the configuration of every published site.
- 20261007-17: Fix: in Artica, The memory watchdog of the Artica daemon now runs even when the system is overloaded, so a daemon whose memory use overloads the appliance is restarted instead of staying stuck.
- 20261007-17: Fix: in Artica, The DNS Firewall statistics are saved to the database again every 10 minutes; their in-memory buffer was never emptied and grew by hundreds of megabytes, which made the Artica daemon consume excessive CPU.
- 20261007-17: Add: in Artica Reverse Proxy, The AI assistant can now create, modify, enable, disable and delete published sites after approval; every change is checked by nginx before it is installed and can be undone.
- 20261007-17: Fix: in Artica, The Artica daemon no longer burns several CPU cores in continuous memory garbage collection when its memory usage reaches its internal ceiling; it now hands over to the memory watchdog instead.
- 20261007-17: Add: in Artica, The AI assistant can now apply HyperCache and take it out of its emergency mode, refusing while the cause is not fixed and putting the emergency back when the helpers do not start.
- 20261007-17: Fix: in Artica, A change of the super-administrator credentials no longer leaves them in clear text in a file of the web console; a file left by an earlier version is deleted when the service starts.
- 20261007-17: Fix: in Artica, The REST API no longer lets an account overwrite the authentication link of another account.
- 20261007-17: Add: in Artica Reverse Proxy, The AI assistant can now report the availability and SLA of the reverse-proxy backends, the WAF events of a published site and the expiry of the certificates the sites really serve.
- 20261007-17: Fix: in Artica, The appliance console screen now advertises the web interface address of the network card it actually listens on, instead of the first detected card.
- 20261007-17: Fix: in Artica, Only the super-administrator session can now change the super-administrator name or password; any other logged-in account was able to do it.
- 20261007-17: Fix: in Artica, A console account can no longer overwrite the authentication link of another account.
- 20261007-17: Fix: in Artica, A quarantine release reply that the anti-spam filter finds suspicious is now processed instead of being held in the quarantine itself.
- 20261007-17: Add: in Artica, The quarantine report e-mail now has a clearer layout, with a Release button for each message and a short explanation of how to release one.
- 20261007-17: Fix: in Artica, Messages released or deleted from the quarantine console now record the administrator who did it.
- 20261007-17: Add: in Artica Reverse Proxy, The AI assistant can now reload, start, restart and stop nginx, restart the reverse-proxy daemon and rebuild a published site, each change being checked on the real service; reload, start, restart and a site rebuild can run on their own when allowed.
- 20261007-17: Add: in Artica, The AI assistant can now read the real state of HyperCache (why it is inactive, helper version and updates, helpers running, emergency mode and when it can be left) and its deduplication rules.
- 20261007-17: Fix: in Artica Proxy, The Squid cache manager is now strictly loopback-only, closing cache-purge and manager-info access from any non-local address.
- 20261007-17: Add: in Artica Reverse Proxy, The AI assistant now reads the real state of nginx, the published sites, their backends, nginx memory and the configurations nginx refused.
- 20261007-17: Fix: in Artica Reverse Proxy, The AI assistant no longer reports the reverse-proxy status as unavailable, and its backend connectivity test now uses the backends declared for the published sites.
- 20261007-17: Add: in Artica, The AI assistant now knows how HyperCache works (deduplication, emergency mode, engine updates, troubleshooting) and can explain it in the chat.
- 20261007-17: Fix: in Artica, The AI assistant now picks the documentation that matches the question, including the relevant passage, instead of three arbitrary documents.
- 20261007-17: Fix: in Artica, The maintenance tasks that run every five minutes (proxy watchdogs, HyperCache engine update, log and service checks) no longer start five minutes late.
- 20261007-17: Add: in Artica, Messages scored as probable spam can now be held in a quarantine instead of being rejected, and each user receives a periodic report of their held messages.
- 20261007-17: Add: in Artica, Users can release a quarantined message by replying to their quarantine report; the reply must come from their own mailbox.
- 20261007-17: Add: in Artica, Administrators can list, download, release and delete spam and DLP quarantined messages from a single page.
- 20261007-17: Fix: in Artica Proxy, HyperCache is now configured by the Artica daemon: a configuration refused by the proxy is rolled back instead of being kept, and an updated HyperCache engine is now really used, because its processes are restarted after the update.
- 20261007-17: Fix: in Artica Proxy, HyperCache no longer gives the same cache key to every image that has a query string or to every jQuery version, which could make the proxy serve one site's image or script in place of another's.
- 20261007-17: Fix: in Artica Proxy, HyperCache now checks domain names in the host part of the address only, so a crafted address on another site can no longer have its content stored under the cache key of Microsoft, Windows Update or another trusted source.
- 20261007-17: Fix: in Artica Proxy, HyperCache no longer merges the cache of different customers of shared CDNs (CloudFront, Amazon S3, Akamai, Blogspot) and no longer deduplicates web pages or API answers, only static files.
- 20261007-17: Fix: in Artica Proxy, The HyperCache helper no longer stops on a short or malformed request or on a Netflix image, which made Squid restart it and drop the requests it was handling.
- 20261007-17: Add: in Artica Proxy, The HyperCache helper now uses about 40 times less CPU, no longer depends on the memcached service, and ignores invalid rules with a log line instead of producing wrong cache keys.
- 20261007-17: Fix: in Artica, A proxy member of a load-balancing cluster no longer reports every hour that the cluster DNS service uninstall was aborted, and no longer resets the DNS relay order pushed by its load-balancer.
- 20261007-17: Add: in Artica, The hard disk details dialog has been redesigned with tabs for hardware, partitions with their usage, SMART health and live disk activity, plus direct SMART test, disconnect and close buttons.
- 20261007-17: Add: in Artica, The web console now checks on the server that an account holds the privilege of a page before accepting a change from it; this first version only records the attempts it would refuse, so that the rules can be checked before they are enforced.
- 20261007-17: Fix: in Artica, The web console no longer rebuilds PHP objects from data sent by the browser, which closes a way for a logged-in user to delete files on the appliance.
- 20261007-17: Fix: in Artica, The "Ask Artica AI" entry of the top bar is now a text link and no longer overlaps the CPU gauge: when the bar is too crowded for the screen width, it now wraps onto two lines.
- 20261007-17: Fix: in Artica SIEM, Echelon IP reputation lookups are now sent in full batches under hourly and daily budgets that respect the provider's 2,000 requests per day limit.
- 20261007-17: Add: in Artica SIEM, New Echelon tag blocklists source: the threat lists are downloaded once an hour and matched locally instead of querying each address.
- 20261006-17: Add: in Artica, The hard disks page now shows one card per drive with its usage, mount points, SMART health and temperature, plus summary tiles and type, state and sort filters.
- 20261006-17: Fix: in Artica Proxy, Emptying a cache from the caches center now stops the proxy before erasing its content and never erases a directory that is not a proxy cache.
- 20261006-17: Fix: in Artica Proxy, The "Analyze caches" task of the stored objects page works again and can be scheduled daily from its settings.
- 20261006-17: Fix: in Artica Proxy, Disabling the proxy cache feature no longer stops with an internal error before restarting the proxy.
- 20261006-17: Fix: in Artica, The "empty" button of the reverse-proxy caches center is removed: it emptied the proxy cache that had the same number instead of the reverse-proxy cache.
- 20261006-17: Fix: in Artica Proxy, Cache usage figures, cache emptying, the new cache disk wizard and the stored objects analysis are now performed by the Artica daemon instead of separate background scripts.
- 20261006-17: Fix: in Artica Proxy, Enabling or disabling HyperCache dedup no longer fails with "failed to open /run/squid/squid.pid": the proxy is reloaded even when its PID file was lost, and started when it was not running.
- 20261006-17: Fix: in Artica Proxy, The caches center now manages disk caches through the Artica daemon: names with quotes no longer break the save, deleted caches are reliably marked for removal, and the order arrows keep a consistent order.
- 20261006-17: Fix: in Artica Proxy, The caches center shows the real usage percentage of each disk cache instead of a permanent 0%.
- 20261006-17: Fix: in Artica Proxy, Changing the outgoing interface of the internal port in the listening ports page no longer fails with "invalid id": the ports rebuild, check and reconfigure actions were no longer reachable.
- 20261006-17: Fix: in Artica, The AI assistant now carries out the cluster node operations allowed in its Autopilot list, such as disabling a node, instead of only proposing them for approval.
- 20261006-17: Fix: in Artica, The Autopilot list only offers skills that can really run without an administrator, shows for each one whether it runs at every pass or only when the assistant decides, and warns that a restart allowed this way is repeated every 10 seconds.
- 20261006-17: Fix: in Artica, The Autopilot no longer runs proxy configuration changes other than reload and cache purge, nor any operation of risk level 3 or above, even when they are listed.
- 20261006-17: Fix: in Artica, The AI assistant's answers now state which actions the Autopilot carried out or refused, instead of a fixed advisor-mode notice.
- 20261006-17: Fix: in Artica Proxy, The DNS service of the load-balancer gave its health checks only 3 milliseconds instead of 3 seconds, so after a reboot it marked every proxy DNS cache as down (red DNS status) and stopped answering.
- 20261006-17: Fix: in Artica, Saving the Web console settings (such as the XSS protection) no longer fails with "Could not find configuration" when the console uses its default certificate; the certificate is only checked when it is changed.
- 20261006-17: Fix: in Artica Proxy, On the load-balancer status page, the back-end servers tile now shows its listener and server count in a readable colour instead of white text on a light background.
- 20261006-17: Fix: in Artica Proxy, After a reboot, the load-balancer cluster service no longer stays bound to the local loopback when the network comes up late, which left every node stuck in synchronisation with a connection refused.
- 20261006-17: Fix: in Artica Proxy, On a load-balancer that serves DNS for the farm, the DNS cache page and the features list now show the HaCluster DNS service that really answers, instead of a disabled DNS cache with an install button.
- 20261006-17: Add: in Artica, The installation ISO now installs the iw and wpasupplicant tools so that a wireless network card can be configured on the installed system.
- 20261006-17: Add: in Artica, The DNS network restrictions list uses the new table design, shows the built-in private ranges as defaults and only offers deletion to DNS administrators.
- 20261006-17: Fix: in Artica Proxy, On a load-balancer that serves DNS for the farm, installing the local DNS cache is now refused with an explanation, instead of being installed and removed a few seconds later while DNS was briefly cut.
- 20261006-17: Fix: in Artica, The S.M.A.R.T. disk page now displays a proper "Wear" column title instead of a raw placeholder.
- 20261005-17: Add: in Artica, The SMART daemon page shows the service status on the left and its self-test schedule as a configuration card on the right; clicking that card opens the schedule settings.
- 20261005-17: Add: in Artica, The Your Networks page (firewall whitelist) has a redesigned table with searchable rows, status pills for trusted, VPN and DNS, action icons and summary cards for IDS, ARP discovery and access control.
- 20261005-17: Fix: in Artica, Reading disk health no longer closes files belonging to other tasks of the system daemon, which could leave disk pages and other requests waiting forever.
- 20261005-17: Fix: in Artica, NVMe disks now report their temperature in degrees Celsius instead of Kelvin, and unmounted partitions no longer show the size and usage of an unrelated system filesystem.
- 20261005-17: Add: in Artica, The storage management page now opens a detailed window for each disk: health, temperature, power-on time, wear, bad sectors and kernel I/O errors as tiles, full identity and SMART fields, and every partition with Mount and Unmount buttons.
- 20261005-17: Fix: in Artica, The storage management page now shows its "Format disk" button and its SATA command queuing (NCQ) settings in plain language instead of raw placeholders.
- 20261005-17: Fix: in Artica, The storage management page no longer shows "daemon unreachable" every few seconds: when a disk scan is slow the previous values stay on screen, flagged as such, while the scan completes.
- 20261005-17: Fix: in Artica Proxy, When the load-balancer serves DNS for the farm, its DNS service no longer uninstalls itself after a reboot while the proxies have not reported yet, which left the load-balancer without any DNS answer.
- 20261005-17: Fix: in Artica, Toggling a notification rule option can no longer be abused to alter an arbitrary column of the console database, and editing an existing rule now refreshes the list after saving.
- 20261005-17: Add: in Artica, The notification rules and notification events tables now use the modern table design, with a search box on the events list.
- 20261005-17: Fix: in Artica, The Network traffic analysis page now explains why the module is unavailable in proxy or HA cluster mode instead of showing a raw placeholder.
- 20261005-17: Fix: in Artica Proxy, Names that only exist because a workstation appended the local search domain (such as speed.cloudflare.com.yourdomain) are no longer sent to categorization, which wasted a lookup on every occurrence.
- 20261005-17: Add: in Artica Proxy, The proxy now warns when a DNS server used by the proxy or by the Web filtering engine does not answer, and says so explicitly when that address is a parent proxy.
- 20261005-17: Add: in Artica Proxy, The Internet access check of the load-balancer can be disabled from the HaCluster client settings.
- 20261005-17: Add: in Artica, Red, orange, grey, green, blue and cyan status tiles across the console now use a light tinted design with a watermark icon, coloured title and matching buttons; the green follows the appliance brand colours.
- 20261005-17: Add: in Artica, The System information page now shows the logo of the detected hypervisor (VMware, Hyper-V, XenServer, Nutanix, VirtualBox, KVM/QEMU, AWS, Google Cloud), and XenServer virtual machines get their picture again.
- 20261005-17: Add: in Artica, Service status cards across the console now use the same clean white design as the SMTP service status page, with real memory history bars and the appliance brand colours.
- 20261005-17: Fix: in Artica Proxy, The Wazuh events settings dialog is now translated into French.
- 20261005-17: Fix: in Artica, Installing or uninstalling a feature from Your System > Features now asks for confirmation before starting, so an accidental click can no longer launch the task.
- 20261005-17: Add: in Artica Proxy, Proxy access events can now be written to a JSON file collected by a local Wazuh agent, either in full or limited to security-relevant events.
- 20261005-17: Fix: in Artica, The request simulation page works again after a Service Pack upgrade: the check runs inside the Artica service instead of an external program, and a report is shown even when one of the DNS servers tested does not answer.
- 20261005-17: Fix: in Artica, Creating a DNS Firewall rule with the web browsing protection, web browsing cleaning, SafeSearch or Active Directory offloading wizard no longer fails with an "invalid json" error.
- 20261005-17: Add: in Artica, The progress of hotfix and Service Pack installations now shows the extraction percentage while the archive is being uncompressed.
- 20261005-17: Fix: in Artica, The progress bar of a software installation now follows the package download, with the amount already downloaded, instead of staying still until the download ends.
- 20261005-17: Fix: in Artica Proxy, Applying the Central Cache (Rock Store) settings is now performed by the Artica daemon: the proxy is restarted only when the Rock Store is created or resized, and a disabled Rock Store is removed from disk only if it really is a proxy cache directory.
- 20261005-17: Add: in Artica Proxy, The Central Cache (Rock Store) page now shows live proxy performance (requests and bandwidth served from cache, cache response time, Rock Store fill) and presents the Rock Store settings as clear capacity tiles.
- 20261005-17: Add: in Artica Proxy, The caching status page shows each disk cache as a card with its usage gauge, free space, partition and format, followed by the partitions holding the caches and the total cache capacity in the header.
- 20261005-17: Fix: in Artica Proxy, The caching status page no longer shows every disk cache as "Waiting": the usage of each cache is displayed again.
- 20261005-17: Fix: in Artica, The network interfaces page no longer keeps warning that network bridges were created when gateway mode is forced off and no bridge exists.
- 20261005-17: Fix: in Artica Proxy, A disk cache removed from the caches center now frees its disk space, including caches created by the wizards on additional disks; a directory that is not a proxy cache is never erased.
- 20261005-17: Fix: in Artica, Links to the DNS records page can no longer inject scripts into the console through the record type or a cached name.
- 20261005-17: Fix: in Artica, Restart and reconfiguration buttons of the DNS pages now require the DNS administrator privilege.
- 20261005-17: Fix: in Artica, DNS cache pages now say that Artica must be updated when its REST service is too old, instead of showing a raw error.
- 20261005-17: Fix: in Artica Proxy, The "Apply configuration" button of the disk caches center works again: caches are rebuilt, new cache directories created and the proxy restarted by the Artica daemon.
- 20261005-17: Fix: in Artica Proxy, Enabling or disabling HyperCache and changing the cache level now reload the proxy instead of restarting it.
- 20261005-17: Fix: in Artica AI, Disk cache changes made by the assistant now create the new cache directories before the proxy restarts.
- 20261005-17: Fix: in Artica, The DNS servers panel now requires the DNS administrator privilege for every change, saves only its own settings after checking them, and restarts the local DNS cache only on an explicit action.
- 20261005-17: Add: in Artica, The REST API can set a TSIG key typed by the administrator on a local domain, keeping the DHCP server aligned, checking it is really served and allowing the change to be undone, without ever writing the key in a log or a reply.
- 20261005-17: Fix: in Artica, DNS cache settings changed in the console (cache, security, DNS over TLS and HTTPS, interfaces, EDNS, Redis, SafeSearch) are now validated, checked by the DNS cache and rolled back if refused, and only DNS administrators can change them.
- 20261005-17: Fix: in Artica, DNS policy zones (RPZ) created, changed, reordered, enabled, disabled, refreshed or deleted in the console are now checked and applied by the DNS cache before being kept, and the DNS filtering whitelist page now fills the DNS cache whitelist and shows what it cannot override.
- 20261005-17: Fix: in Artica, Local DNS domains created, enabled, disabled or deleted in the console are now applied at once and checked by the DNS cache, and a domain that still holds records is no longer deleted with them silently.
- 20261005-17: Add: in Artica, The local DNS domains page generates TSIG keys inside the DNS cache, keeps the DHCP server key aligned, and shows only the key fingerprint, whether it matches the DHCP server and whether the DDNS agent runs.
- 20261005-17: Fix: in Artica, DNS forward zones created, changed or deleted in the console are now validated and applied at once by the DNS cache, and groups of domains, transparent and DNSSEC zones are saved safely and reloaded after each change.
- 20261005-17: Fix: in Artica, DNS cache records changed in the console are now validated, applied at once and checked by the DNS cache before being kept.
- 20261005-17: Add: in Artica, The AI assistant can list the DNS policy zones (RPZ) of the DNS cache and, after approval, add, change, reorder, enable, disable, refresh or delete them and manage the DNS whitelist, never on its own, and every such change except a list refresh can be undone.
- 20261005-17: Fix: in Artica, The scheduled refresh of DNS policy zones (RPZ) can no longer install a list that blocks the appliance itself, nor leave a list the DNS cache refused on disk where the next reload would stop the service.
- 20261005-17: Fix: in Artica, Removing the last DNS policy zone (RPZ) no longer stops the DNS cache.
- 20261005-17: Add: in Artica, The REST API can create, change, reorder, enable, disable and delete DNS policy zones (RPZ) of the DNS cache, checks each change with the DNS cache before applying it, and undoes it otherwise.
- 20261005-17: Fix: in Artica, The DNS filtering whitelist is applied again by the DNS cache: its entries had no effect since the DNS cache replaced the former filtering service.
- 20261005-17: Add: in Artica, The SMTP service status page has a new layout showing the deferred queue, the queue watchdog state, the main refusal causes and the Artica reputation switches at a glance.
- 20261005-17: Fix: in Artica, The dynamic DNS agent now starts with its current engine version: its configuration used an option that version no longer accepts, so dynamic DNS updates from the DHCP server were never served.
- 20261005-17: Fix: in Artica, A local domain with dynamic DNS updates now loads when the dynamic DNS agent listens on all addresses: its zone lacked the address of its own name server and was refused.
- 20261005-17: Add: in Artica, The AI assistant can enable dynamic DNS updates on a local domain and rotate its TSIG key after approval, without ever seeing the key, and a domain removal it performs can now be undone.
- 20261005-17: Fix: in Artica, On a DNS cluster slave the AI assistant no longer changes DNS cache settings that the next synchronisation would overwrite: it names the master and its console where to make the change.
- 20261005-17: Add: in Artica, Two Enterprise-license options use the Artica IP reputation service to exempt servers rated good from greylisting, the RBL Pack and the DNSBL lists (your own access lists still apply) and to refuse servers rated bad at connection time.
- 20261005-17: Add: in Artica, The former "Artica Tech RBL" option of the IP reputation page is replaced by the Artica reputation tile of the Postfix status page; appliances that had it enabled must switch the new options on from that tile.
- 20261005-17: Add: in Artica, The Postfix status page shows an Artica reputation tile with the number of servers allowed and blocked over the last 24 hours.
- 20261005-17: Fix: in Artica, A server whitelisted by the Artica reputation is no longer rejected by the RBL Pack or the DNSBL lists before the whitelist is checked.
- 20261005-17: Fix: in Artica, Messages accepted thanks to the Artica reputation are no longer counted as refused messages in the mail statistics.
- 20261005-17: Add: in Artica, The REST API can enable dynamic DNS updates on a local domain, generate a new TSIG key for it while keeping the DHCP server aligned, and undo a key change or a domain removal.
- 20261005-17: Fix: in Artica, Importing a reverse-proxy backup now requires the Web master privilege and only accepts a file that was really uploaded.
- 20261005-17: Fix: in Artica Reverse-Proxy, Restoring a configuration backup can no longer run a system command hidden in the backup file name, and importing, restoring, downloading or deleting a backup can no longer reach any file outside the backup and upload directories.
- 20261005-17: Fix: in Artica, The backup restore and image install task links refuse file names carrying shell characters, the website check of the proxy troubleshooting refuses IPv6 addresses it cannot test, and two simultaneous uploads with the same name can no longer overwrite each other.
- 20261005-17: Fix: in Artica, Uploaded files whose name contains spaces, parentheses or accents are accepted again by the keytab, legal logs and category imports, and the wifi and cluster node log pages can no longer be used to run system commands.
- 20261005-17: Fix: in Artica, A delegated administrator can no longer run system commands through the progress tasks of the Web console (log download, export, wifi scan, cluster node sync, imports and certificate tasks): every value is checked and passed to the system as plain data.
- 20261005-17: Fix: in Artica, The model server settings of the AI appliance now explain each value, and the page warns when the context length is too short for the Artica AI assistant.
- 20261005-17: Fix: in Artica, The progress page of the initial setup wizard can no longer be used without authentication to stop the firewall or restart the end of the installation, and it does nothing at all once the wizard has been completed.
- 20261005-17: Add: in Artica, The server card of the system information page now uses a light design and draws each physical drive with its type, size and current temperature.
- 20261005-17: Fix: in Artica, The task links of the Web console (service restarts, configuration builds and their progress bars) are now signed for the session that displayed them, so a crafted or altered link can no longer run a task or inject script, even for a logged-in administrator.
- 20261005-17: Add: in Artica, The system information page shows the manufacturer logo of physical servers (Dell, HP, Lenovo, Supermicro, Fujitsu, Cisco and other common brands).
- 20261005-17: Add: in Artica, Questions asked to the Artica AI assistant in the Web console terminal no longer stop after 5 minutes: the answer is prepared in the background and shown as soon as it is ready.
- 20261004-17: Add: in Artica, The system information page has been redesigned: summary cards for processor, memory, system and network, a server card showing the manufacturer and model of physical machines, and grouped sections for hardware, operating system and security options.
- 20261004-17: Add: in Artica, The hardware inventory now also reports the chassis type, serial number and BIOS version of physical servers.
- 20261004-17: Fix: in Artica, A remote RPZ server can no longer inject configuration into the DNS cache through its category index, and a remote policy list the DNS cache would refuse is no longer installed.
- 20261004-17: Fix: in Artica, The Artica AI assistant no longer reports a running proxy service as stopped because of a misleading field name in the service status.
- 20261004-17: Add: in Artica, The disk I/O metrics page has been redesigned like the system metrics page: summary cards with the most active process, a period selector in the header including 30 days, and chart cards for system activity, top processes and per-process history.
- 20261004-17: Fix: in Artica, A DNS policy zone (RPZ) can no longer inject configuration into the DNS cache or write files outside its folder, and a policy the DNS cache would refuse is no longer installed.
- 20261004-17: Fix: in Artica, The secret of a DNS dynamic update key is no longer written in clear text in the administration journal nor displayed again in the local domains page.
- 20261004-17: Fix: in Artica, Dynamic DNS updates of a local domain can no longer be enabled with an empty or default TSIG key, and only DNS administrators can change local domains.
- 20261004-17: Fix: in Artica, The DNS policy zones (RPZ) page refuses a name, file, address or CNAME that could alter the DNS cache configuration, and only DNS administrators can change the remote RPZ service or download a policy.
- 20261004-17: Add: in Artica, The system metrics page has been redesigned: four summary cards (database, CPU and memory, collector status, load average), a period selector in the header and one chart card per metric.
- 20261004-17: Add: in Artica, On physical servers, the disk health tools (smartmontools) are now installed automatically so that disk self-tests and disk failure detection work without manual setup.
- 20261004-17: Add: in Artica, The Artica AI assistant answers much faster with an AI appliance: it prepares the model when it starts and keeps it ready every 10 minutes, and its instructions are now reused from one question to the next instead of being read again each time.
- 20261004-17: Fix: in Artica, The Artica AI assistant now accepts small formatting slips of local language models instead of ending the investigation with a protocol error.
- 20261004-17: Fix: in Artica, The AI appliance now keeps its model in memory for 7 days by default, so the first question after a quiet weekend no longer waits for the model to reload.
- 20261004-17: Fix: in Artica, The installation ISO now always ships the latest Debian 13 kernel fetched during its build, instead of an older kernel left over from a previous build.
- 20261004-17: Add: in Artica, The installation ISO now carries every Debian 13 firmware package in its most recent version (backports included), so the installer and the installed system recognize recent network and storage hardware.
- 20261004-17: Fix: in Artica, The AI appliance now serves its model with a 32768-token context by default, so the investigations of the Artica AI assistant no longer end in a protocol error because their instructions were cut.
- 20261004-17: Fix: in Artica, The AI appliance status page now shows the host name, the IP addresses and the port to enter on the client appliances, matching the fields of their quick connection.
- 20261004-17: Fix: in Artica, The Artica AI status page now shows a connection to an AI appliance of the network as such, instead of the remote language model warning.
- 20261004-17: Fix: in Artica, The Artica AI assistant now reads the proxy cache manager counters instead of reporting this check as failed.
- 20261004-17: Fix: in Artica, The Artica AI language model settings now explain why the provider refuses to list its models (no API key saved yet, or the saved key was refused) instead of a bare HTTP 401.
- 20261004-17: Add: in Artica, The SMART monitoring page now detects failing disks that SMART reports as healthy: on physical machines it watches link resets, command timeouts, kernel read and write errors, file system errors and file systems switched to read-only every 5 minutes, and still sends an urgent alert by e-mail and to the SIEM when the system disk can no longer write.
- 20261004-17: Add: in Artica, The disk usage analyzer was redesigned: cards and a banner show the size, free space, reserved space and inode usage of the file system being browsed, with warnings at 85% and 95%.
- 20261004-17: Add: in Artica, The disk usage analyzer lists the file system type, permissions, owner and last modification date of every folder, and flags mount points and folders deleted since the scan.
- 20261004-17: Fix: in Artica, A disk usage scan now starts from the folder entered in the scan dialog instead of always scanning the whole system.
- 20261004-17: Fix: in Artica, Folder names containing quotes no longer break the navigation of the disk usage analyzer.
- 20261004-17: Fix: in Artica, The Nagios agent (NCPA) now starts again when its own process identifier file was left empty or corrupted, instead of refusing to start forever.
- 20261004-17: Fix: in Artica Proxy, A proxy without load-balanced parent proxies no longer has its parent load-balancing service restarted endlessly by the monitoring.
- 20261004-17: Add: in Artica, The storage page can disable SATA command queuing (NCQ) on a disk that freezes on queued commands; the option only appears when the disk supports it and the kernel log shows failures, applies immediately and is kept at every boot.
- 20261004-17: Add: in Artica AI, The assistant now reads the SATA command queuing state of each disk and recommends disabling it when a disk freezes on queued writes, the usual cause of a system partition switching to read-only while SMART reports no error.
- 20261004-17: Add: in Artica, The SMART monitoring page can now install and run the smartd service: on physical machines it checks every disk every 30 minutes, runs a daily short and a weekly long self-test, and reports new disk errors and failing sectors as Artica notifications without repeating alerts already sent by the hourly SMART check.
- 20261004-17: Fix: in Artica, The Activity tab of the AI appliance page shows the last request as a plain date and time, and labels authorized clients as allowed.
- 20261004-17: Fix: in Artica, The header buttons of the AI appliance page match the selected tab: New client no longer stays on the Status, Settings and Activity tabs.
- 20261004-17: Fix: in Artica, The services status reports the installed version of the AI appliance model server instead of 0.0.0.
- 20261004-17: Fix: in Artica, The remaining time of a download on the AI appliance page reads like ~2 min instead of 2m0s.
- 20261004-17: Fix: in Artica, The PostgreSQL watchdog now restarts the database through the lightweight service launcher, so repeated restart attempts can no longer pile up and exhaust memory when the system disk becomes read-only.
- 20261004-17: Fix: in Artica, DNS-over-TLS and DNS-over-HTTPS can now be enabled on the DNS cache: the generated configuration placed their options inside a forwarding zone, so the DNS cache refused it.
- 20261004-17: Fix: in Artica, Enabling DNS-over-TLS or DNS-over-HTTPS on the DNS cache with a certificate that does not exist in the certificates center is now refused before anything is written.
- 20261004-17: Fix: in Artica, When the DNS cache refuses a new setting and puts the previous values back, the AI assistant now says so instead of reporting that nothing was changed.
- 20261004-17: Fix: in Artica, During the installation of the AI appliance, the remaining time shown after a network interruption is computed from the moment the download resumes, instead of including the pause.
- 20261004-17: Fix: in Artica, The file sharing service no longer tries to restart the host Samba services every few seconds when the appliance has no host Samba configuration, and it waits longer between attempts when a Samba service keeps failing to start.
- 20261004-17: Add: in Artica, The language model settings of the AI assistant offer a quick connection to an Artica AI appliance (LocalIA): enter its address, port and certificate authority, and the endpoint, model, timeout and certificate are set in one save.
- 20261004-17: Fix: in Artica Proxy, The nightly re-categorization of proxy statistics no longer reports an error for a recorded website name that is not a valid host name.
- 20261004-17: Fix: in Artica Proxy, The proxy log helper no longer stops the proxy when its event queue directory cannot be created or its statistics module fails to start; it keeps the proxy running and recovers on its own.
- 20261004-17: Fix: in Artica, Storage changes made by the AI assistant are now refused when they could not be undone the same way (unmounting a hand-made mount, turning swap off while other swap is off), are followed even when the launch request times out, and long changes show their target and progress text.
- 20261004-17: Fix: in Artica, The AI appliance opens its service to the other appliances only once the model is installed, instead of as soon as the installation reaches the service setup.
- 20261004-17: Fix: in Artica, During the installation of the AI appliance, the download bar now says when no data has been received for a while instead of showing its last speed, and it no longer goes back when a part of the model is downloaded again.
- 20261004-17: Fix: in Artica Proxy, After a boot where the load-balancer started before its network address was ready, the HaCluster status no longer stays in error once the service runs; the load-balancer also waits for its listening addresses before starting.
- 20261004-17: Fix: in Artica, The Nagios agent (NCPA) is no longer restarted every minute and a half by the monitoring while it is running; its process is now found whatever its version.
- 20261004-17: Add: in Artica, The output of the Nagios agent (NCPA) at startup is now kept in a log file, included in the support package, to diagnose an agent that does not start.
- 20261004-17: Add: in Artica, The support package now includes the Nagios agent (NCPA) logs and process identifier files, to diagnose an agent that the monitoring keeps restarting.
- 20261004-17: Fix: in Artica, The su command no longer loses its setuid bit every few minutes, which made it unusable for non-root administrators part of the time.
- 20261004-17: Fix: in Artica, The firewall no longer rebuilds its trusted-network and Artica access rules every few minutes because it could not recognize its own rule.
- 20261004-17: Fix: in Artica, The firewall no longer adds a new copy of the loopback rule at each check; existing duplicates are removed automatically.
- 20261004-17: Fix: in Artica, Emptying the swap is skipped when the free memory cannot absorb it, instead of triggering the out-of-memory killer.
- 20261004-17: Fix: in Artica, The Suricata IDS now runs in its own system group: when it runs out of memory, it no longer causes the Artica service to be stopped.
- 20261004-17: Fix: in Artica, The SSH authorized keys of Active Directory accounts no longer fail to get their owner group every few minutes.
- 20261004-17: Fix: in Artica Proxy, Applying a change in the HaCluster status page no longer restarts the load-balancer twice; the configuration is reloaded only when it really changed.
- 20261004-17: Fix: in Artica Proxy, When the load-balancer serves DNS from the farm, notifying the nodes no longer installs then removes the local DNS cache each time.
- 20261004-17: Fix: in Artica Proxy, The HaCluster DNS relay can no longer be started twice at the same time.
- 20261004-17: Fix: in Artica Proxy, The logs of the HaCluster DNS relay are no longer rejected by the system logger at startup.
- 20261004-17: Fix: in Artica Proxy, The HaCluster load-balancer no longer fails to open its administration socket at boot.
- 20261004-17: Fix: in Artica Proxy, Cluster slave proxies no longer keep the master's outgoing address after a replication, which made their internal web requests fail and could set them down.
- 20261004-17: Fix: in Artica Proxy, Saving a setting with an unchanged value no longer reloads the Web filtering connector; on cluster proxies this happened three times every two minutes.
- 20261004-17: Fix: in Artica Proxy, The HaCluster real-time requests view no longer shows the category of the previous request on a request without category.
- 20261004-17: Fix: in Artica Proxy, The HaCluster backends page no longer logs missing include warnings.
- 20261003-17: Fix: in Artica Proxy, The proxy log helper no longer stops the proxy when it cannot read its settings file; it waits, discarding log lines, and resumes on its own once the file is readable again.
- 20261003-17: Add: in Artica, New versions of the software packages managed by Artica are now listed in a single "Artica packages" table under Update, where each one can be updated, ignored or restored.
- 20261003-17: Add: in Artica, The notification bell shows one "You have x packages managed by Artica to update" entry instead of one entry per package, and it comes back when a new version is published.
- 20261003-17: Fix: in Artica, The Docker new-version notice no longer reports the DNS cache service version under the name of the Zabbix agent.
- 20261003-17: Add: in Artica, An approved AI transaction that was not executed yet can now be cancelled from the transaction history.
- 20261003-17: Add: in Artica, The "AI appliance" page shows what to enter on the client appliances and offers its certificate authority as a file to download.
- 20261003-17: Add: in Artica, The "AI appliance" page lets an administrator allow client appliances by address or network, change the HTTPS port and the model server settings, and see the requests received by address.
- 20261003-17: Add: in Artica, The local AI server is published over HTTPS to the other Artica appliances, only to the addresses an administrator allows, with a certificate authority of its own.
- 20261003-17: Add: in Artica, Installing the AI appliance removes the Artica AI client from the same machine, and the client can no longer be installed there.
- 20261003-17: Add: in Artica SIEM, A new ClickHouse storage page shows where the statistics database keeps its data and can move it onto a dedicated empty disk, with an automatic rollback on failure.
- 20261003-17: Fix: in Artica Proxy, The cluster configuration package no longer carries the proxy log helper settings of the master: on the receiving proxies the helper could no longer read them and the proxy service restarted in a loop.
- 20261003-17: Fix: in Artica Proxy, Installing or updating the eCAP antivirus module no longer crashes the running proxy: its library was rewritten twice, in place, while the proxy was using it.
- 20261003-17: Fix: in Artica, Saving a DNS policy zone (RPZ) can no longer alter other policies through a crafted value, and only DNS administrators can change these policies.
- 20261003-17: Fix: in Artica Proxy, Installing the categories service no longer renumbers personal categories used by Web filtering rules or ACL objects, which silently stopped blocking them; the installation is refused with the list of references to remove, and unused categories are renumbered safely.
- 20261003-17: Add: in Artica, The DNS policy zones (RPZ) table uses the new table design, with every action on the right of each row.
- 20261003-17: Fix: in Artica, Changing the order of the DNS policy zones (RPZ) now rebuilds the zones immediately.
- 20261003-17: Fix: in Artica, Enabling a DNS policy zone (RPZ) that has a download error no longer shows it as active.
- 20261003-17: Fix: in Artica Proxy, Uninstalling the Web filtering service no longer deletes the contents of a databases folder moved to another disk through a symbolic link; the folder and the link are kept for a later reinstallation.
- 20261003-17: Fix: in Artica Proxy, The HA cluster agent no longer garbles error messages containing a percent sign when a local service call fails.
- 20261003-17: Fix: in Artica Proxy, The Statistics page opened from the HaCluster menu now shows its title header and buttons.
- 20261003-17: Fix: in Artica Proxy, The ranking and legend tables of the proxy statistics dashboard now show their column headers.
- 20261003-17: Fix: in Artica Proxy, With "Do not test the web sites", the load-balancer itself no longer contacts outside sites either: it only checks that each proxy port and its own port answer.
- 20261003-17: Fix: in Artica, The preview of multi-line text fields in forms no longer shows "<br>" instead of line breaks.
- 20261003-17: Add: in Artica Proxy, The AI assistant can put Web filtering into emergency mode and take it out after approval, and proves on the proxy itself that filtering stopped or resumed.
- 20261003-17: Add: in Artica Proxy, The REST API can turn Web filtering emergency mode on and off and proves that the proxy really stopped or resumed filtering.
- 20261003-17: Fix: in Artica Proxy, Enabling the Go Shield connector no longer disables the Web filtering service.
- 20261003-17: Fix: in Artica Proxy, The connector emergency mode is no longer overwritten by the normal configuration.
- 20261003-17: Fix: in Artica Proxy, Turning Web filtering into emergency mode now really disconnects the proxy from the filter.
- 20261003-17: Fix: in Artica, Building a support package with anonymization enabled is now about fifteen times faster on appliances with large log files.
- 20261003-17: Fix: in Artica, The anonymized support package now also hides DHCP client identifiers, HAProxy passwords, Samba passwords containing spaces, NTLM and Kerberos authentication tokens, MAC addresses embedded in IPv6 addresses and VLAN-tagged firewall logs, reverse DNS zones, addresses in packet captures and raw binary keys stored in databases.
- 20261003-17: Add: in Artica, The support package can now be anonymized: IP and MAC addresses are replaced by consistent pseudonyms, passwords, private keys and tokens are removed, and a correspondence table kept on the appliance translates the addresses quoted by the support team.
- 20261003-17: Add: in Artica SIEM, A new Connection tracking page shows the trends of connection-state logs over time and their breakdown by state, destination port, protocol and server.
- 20261003-17: Fix: in Artica Proxy, The HaCluster agent no longer asks the proxy to rebuild its authentication settings at every configuration push when Basic authentication is simply not used.
- 20261003-17: Fix: in Artica Proxy, When all the test URLs must be checked, the HaCluster agent now tests them together and considers the proxy healthy as soon as one answers, instead of waiting for each unreachable site in turn.
- 20261003-17: Add: in Artica Proxy, A new option of the HaCluster agent lets the cluster proxies stop testing the availability of web sites, so that an unreachable site no longer takes a proxy out of the load-balancer.
- 20261003-17: Fix: in Artica, Importing a certificate exported from another Artica appliance (certificate and private key in one file) now keeps its private key, so a root certificate is recognised as a root again and can be selected in the HaCluster SSL settings.
- 20261003-17: Fix: in Artica Proxy, Rebuilding the proxy authentication no longer reloads the proxy every time when the authentication whitelist holds several entries; on cluster nodes this caused a reload about every minute, restarting hundreds of authentication helpers and driving the load very high.
- 20261003-17: Fix: in Artica Proxy, The DNS servers entered in the HaCluster "DNS used by the farm" settings are now saved; changing the primary or secondary DNS server previously had no effect.
- 20261003-17: Add: in Artica SIEM, Connection-tracking (conntrack) system logs are now kept in detail for 3 days and summarised per hour and per day, so their trends remain available while they no longer fill the disk.
- 20261003-17: Add: in Artica, The AI assistant can read and change the DNS cache settings (cache lifetimes, DNSSEC, SafeSearch, EDNS, listening interfaces, DNS-over-TLS and DNS-over-HTTPS, outgoing interface, Redis, DNSCrypt, DNS firewall) after approval; it never opens the resolver to the world, refuses a change that would cut the load-balancer members, and puts the previous settings back when the DNS cache rejects the new ones or does not restart.
- 20261003-17: Fix: in Artica, Enabling DNS-over-HTTPS on the DNS cache now really works: the service no longer looks for certificate files named after the certificate content, and no longer needs a second certificate that it never used.
- 20261003-17: Fix: in Artica Proxy, Before installing a new Web filtering configuration, every newly used category database is now checked by the filtering service itself, and the check runs with the proxy user's rights from a protected location, so a damaged or future-dated database can no longer make the service let every request through.
- 20261003-17: Fix: in Artica Proxy, When the load-balancer serves DNS from the farm, the farm DNS servers can no longer point to the load-balancer itself or to 127.0.0.1; the console refuses them and shows a "DNS loop" warning, and the proxies ignore them, instead of sending every DNS query round in circles between the load-balancer and the proxies.
- 20261003-17: Add: in Artica Proxy, The AI assistant can create, change, reorder and delete Web filtering rules after approval, and undoes its change when the result cannot be proven.
- 20261003-17: Fix: in Artica Proxy, A filtering configuration that the Web filtering service would reject is no longer installed, so the service keeps filtering with the previous rules instead of letting every request through.
- 20261003-17: Add: in Artica Proxy, The REST API can create, change, reorder and delete Web filtering rules for the AI assistant.
- 20261003-17: Add: in Artica, While it investigates an incident, the AI assistant can add a missing DNS cache record or disable a faulty one without waiting for approval, only for names of the local domains, when the administrator allows it in the Autopilot settings and within a limit of 5 changes per incident.
- 20261003-17: Fix: in Artica Proxy, When the load-balancer serves DNS, the proxies no longer remove the local DNS cache it relies on, which left every DNS backend down and took all the proxies out of the cluster.
- 20261003-17: Fix: in Artica Proxy, The HaCluster health agent now tests its URLs through the local proxy service, on the same path as the users, instead of going out directly; an authentication request from the proxy counts as a success.
- 20261003-17: Fix: in Artica, DNS cache MX and SRV records created in the console are now written in the form the DNS cache accepts; they previously prevented it from loading its configuration. TXT records keep their spaces instead of being split into words.
- 20261003-17: Fix: in Artica, A disabled DNS cache record or local domain is no longer served.
- 20261003-17: Fix: in Artica, Removing one DNS cache record no longer stops the other records of the same name from being served.
- 20261003-17: Add: in Artica, The AI assistant can list and, after an administrator approves the change, add, change, disable or remove local DNS records, local domains and forward zones of the DNS cache.
- 20261003-17: Fix: in Artica Proxy, The HaCluster health agent on the proxies now uses the list of test URLs defined on the load-balancer instead of always testing the default Internet addresses.
- 20261003-17: Add: in Artica Proxy, The AI assistant can create personal Web filtering categories, add, remove or move their sites, compile and delete them, after approval, with an automatic undo when the compilation fails.
- 20261003-17: Add: in Artica Proxy, The REST API can create, fill, compile and delete personal Web filtering categories for the AI assistant, without emptying an existing category or leaving a deleted one behind.
- 20261003-17: Add: in Artica, The AI assistant can now mount and unmount a data partition, expand a partition, and turn the swap off, on, or remove its partitions, each time after an explicit approval.
- 20261003-17: Add: in Artica, Changes that cannot be undone are announced as such before they are approved, and long operations show their progress in the history.
- 20261003-17: Add: in Artica, A new "AI appliance" page checks the hardware, installs the local AI server and shows two progress bars, one for the whole installation and one for the current download or task.
- 20261003-17: Add: in Artica, The "AI appliance" page shows the state of the local AI server, its measured speed, and lets an administrator restart it, measure its speed again or uninstall it.
- 20261002-17: Fix: in Artica, When an action run by the AI assistant succeeds with a warning (for example a DNS cache that runs but resolves nothing), the warning is now shown after the execution and in the transaction history instead of being visible only in the transaction files.
- 20261003-17: Fix: in Artica Proxy, Restarting the Web filtering connector through the AI assistant is now refused for 30 seconds after a GoShield restart, because the proxy reload could stop the GoShield server that had just started.
- 20261003-17: Fix: in Artica Proxy, A GoShield restart requested by the AI assistant is reported successful only once the new GoShield server answers its API.
- 20261003-17: Fix: in Artica Proxy, Web filtering operations run by the AI assistant now fail and name the component when another filtering component stopped during the operation, instead of reporting success.
- 20261003-17: Fix: in Artica Proxy, The AI assistant now warns that an official categories update reporting no change may also mean that every download failed.
- 20261003-17: Add: in Artica, The AI assistant can restart the Web filtering services, rebuild their configuration and update the official category databases, with a proof of the outcome.
- 20261003-17: Fix: in Artica, Restricting the Web console to some network interfaces now really takes effect; the console kept listening on every interface, which also prevented the load-balancer error page from starting on the same port.
- 20261003-17: Add: in Artica, The REST API can restart the Web filtering services, rebuild their configuration and update the official category databases for the AI assistant, and reports the real outcome.
- 20261002-17: Fix: in Artica SIEM, Searching system logs now ignores case for accented characters too, so "CAFÉ" finds "café".
- 20261002-17: Fix: in Artica SIEM, Firewall alert rules based on a threshold or a template now record and notify their alerts; they were silently failing to be saved.
- 20261002-17: Fix: in Artica, The status collector no longer restarts the DNS cache service by itself nor raises a duplicate "service stopped" alert; the Artica daemon is the only watchdog of that service.
- 20261002-17: Add: in Artica, After the DNS cache service is installed, started or restarted by the AI assistant, a real name is resolved through it; an installation that resolves nothing is removed and reported.
- 20261002-17: Fix: in Artica Proxy, A whitelist entry changed or removed is now shown at once, instead of the former list being served for a short while.
- 20261002-17: Fix: in Artica, On an appliance managed by the Debian Agent, the AI assistant no longer installs or removes the DNS cache service locally; this is done from the central console.
- 20261002-17: Add: in Artica, The appliance can now install a local AI server (Ollama with the Qwen 2.5 model) after checking that the machine is powerful enough, including on virtual machines.
- 20261002-17: Add: in Artica, The download of the local AI server and of its model resumes where it stopped after a network interruption or a service restart.
- 20261002-17: Fix: in Artica Proxy, Changing the HaCluster relay port on the master is now applied on every node.
- 20261002-17: Add: in Artica, The AI assistant can now read the state of the Web filtering services, their events and statistics, the filtering rules and the categories.
- 20261002-17: Add: in Artica, The REST API now exposes a read-only view of the Web filtering services, rules and personal categories for the AI assistant.
- 20261002-17: Add: in Artica, The AI assistant can now report the disk inventory, the SMART and RAID health, the swap usage and whether a partition can be expanded.
- 20261002-17: Add: in Artica, The AI assistant now watches disk space and disk health, and collects a diagnostic when a filesystem fills up or a disk degrades.
- 20261002-17: Fix: in Artica, The AI assistant no longer offers to approve and execute a plan that only reads information.
- 20261002-17: Fix: in Artica SIEM, Reverse-proxy, DNS and system metrics batches sent by several appliances are now grouped by the statistics database for up to one second before being written, which reduces disk activity.
- 20261002-17: Add: in Artica, The DNS cache service can be paused: once stopped on purpose it stays stopped until it is started again or the appliance reboots, instead of being restarted by the watchdog.
- 20261002-17: Add: in Artica, The AI assistant can read the state of the DNS cache service and what depends on it.
- 20261002-17: Fix: in Artica Proxy, On HaCluster servers, applying kernel settings no longer reconfigures the network card when its offload features are already enabled.
- 20261002-17: Fix: in Artica Proxy, The Proxy PAC service events now include the rule builds and the remote PAC synchronizations, which were only written to the system log.
- 20261002-17: Fix: in Artica Proxy, The Proxy PAC service status now reports the real version of the service instead of 0.0.0.
- 20261002-17: Add: in Artica, The "Remote terminal" page of the Artica AI section now offers the Windows application "Artica AI Terminal" as a direct download.
- 20261002-17: Fix: in Artica, Approving an AI plan now executes exactly the plan that was displayed; if a newer answer replaced it meanwhile, the approval is refused.
- 20261002-17: Fix: in Artica, Creating a HaCluster node with the AI assistant now refuses an address already used by another node and reports certificate or load-balancer warnings.
- 20261002-17: Fix: in Artica Proxy, Enabling TCP BBR for a HaCluster no longer leaves the console waiting, the setting is applied in the background and its progress is shown.
- 20261002-17: Fix: in Artica Proxy, The TCP BBR status of a HaCluster node now says when the node agent is too old, instead of showing a synchronization that never ends.
- 20261002-17: Add: in Artica, A new Windows application, Artica AI Terminal, lets an administrator chat with the Artica AI assistant from a workstation through the remote terminal port, using a workstation certificate and a console account, and it remembers the last connection.
- 20261002-17: Fix: in Artica Proxy, The built-script view of a proxy.pac rule now shows the PAC actually served, including the copy synchronized from a central server.
- 20261002-17: Add: in Artica AI, The assistant can now read the Proxy PAC service (state, rules, served script, events, requests and statistics), rebuild the PAC files, synchronize a remote PAC and restart the service.
- 20261002-17: Add: in Artica, A mounted data partition can now be unmounted from the storage API, which also removes the boot entry created when it was mounted.
- 20261002-17: Fix: in Artica, Expanding the system partition no longer reports a success when the operation failed.
- 20261002-17: Fix: in Artica, Mounting a partition no longer fails with an internal error on a filesystem without identifier, and no longer leaves a boot entry behind when the mount fails.
- 20261002-17: Fix: in Artica, Removing the swap partitions now also removes their boot entries when they are referenced by identifier.
- 20261002-17: Fix: in Artica Proxy, The HaCluster agent no longer asks the proxy to rebuild its authentication every 35 seconds on clusters that do not use Active Directory.
- 20261002-17: Fix: in Artica Proxy, When Active Directory authentication is missing on a HaCluster node, the agent now spaces out its repair attempts instead of repeating them endlessly.
- 20261002-17: Fix: in Artica, A Gold license pushed by the HaCluster load-balancer is now applied on the node, the request was previously refused.
- 20261002-17: Fix: in Artica SIEM, Proxy and firewall events are now written to the statistics database in batches of a few seconds instead of many tiny writes, which reduces disk activity.
- 20261002-17: Fix: in Artica Proxy, A HaCluster node whose proxy listen ports carry another node's address is now repaired when its agent asks for it, instead of staying down.
- 20261002-17: Fix: in Artica Proxy, Rebuilding the proxy listen ports no longer reloads the proxy when nothing changed, and restarts it when a listen address changed.
- 20261002-17: Fix: in Artica Proxy, The HaCluster agent now reports an error when a repair request is refused by the local service, instead of considering it done.
- 20261002-17: Fix: in Artica Proxy, Setting a HaCluster node weight to 0 now also stops the node from serving clients through the no-authentication port.
- 20261002-17: Fix: in Artica, When the AI assistant undoes a HaCluster operation, a node that was draining goes back to draining, an unchanged rule is left untouched, and the cluster capacity checks still apply.
- 20261002-17: Fix: in Artica, The AI assistant no longer reveals node credentials in error messages when they appear encoded in a request.
- 20261002-17: Fix: in Artica Proxy, On a cluster slave, proxy listen ports bound to a network interface are now rebuilt with the local address after each synchronization, instead of keeping the address of the master, which made the proxy restart in a loop and the load-balancer see the backend going up and down.
- 20261002-17: Add: in Artica, A new "Remote terminal" page in the Artica AI section lets an administrator open or close the remote terminal port, choose the addresses allowed to reach it, and issue or revoke one certificate per workstation; each certificate file is delivered once, protected by a password.
- 20261002-17: Fix: in Artica, On a cluster slave, a replicated table whose data arrives incomplete or invalid is no longer emptied; the previous content is kept until a valid copy is received.
- 20261002-17: Fix: in Artica, On a cluster slave, DNS forward zones are now restored into the database the DNS cache actually reads, and a restored table always triggers a rebuild of the DNS cache configuration.
- 20261002-17: Fix: in Artica, Response Policy Zones (RPZ) policies defined on the cluster master are now replicated to the slaves.
- 20261002-17: Fix: in Artica, On a HaCluster or cluster master that does not publish DNS cache data, the periodic request of each backend no longer logs "cannot open file unbound.json: no such file or directory"; the master now answers that the data is simply not available.
- 20261002-17: Fix: in Artica SIEM, When the Echelon reputation service answers with a non-JSON error (for example a hosting provider page), the log now shows the reason returned instead of a bare HTTP code.
- 20261002-17: Add: in Artica, The AI assistant can bring a network interface down or change its address; the change stays provisional and is undone automatically unless an administrator confirms it within five minutes.
- 20261002-17: Add: in Artica, The AI transactions page shows a countdown and a Confirm button while a network change is waiting for its confirmation.
- 20261002-17: Add: in Artica, The AI assistant can now check console accounts for its remote terminal: the web console verifies the password, the Artica AI privilege and the two-factor policy on behalf of the AI service.
- 20261002-17: Fix: in Artica SIEM, Restarting the service no longer reports hourly DNS, system metrics, 404 inventory and reverse-proxy threat summaries as lost when those hours simply had no data.
- 20261002-17: Fix: in Artica, The AI assistant now requires the permissions of every step of a plan to execute an approved change, not only the right to execute.
- 20261002-17: Fix: in Artica SIEM, Restarting the service no longer reports threat-detection time slots as lost when they had simply produced no alert.
- 20261002-17: Add: in Artica, The AI assistant can now propose network changes for approval: rebuild or bring up an interface, start or stop a VLAN, add or remove a static route, and reconfigure the network, each one verified on the real state.
- 20261002-17: Add: in Artica, The network service can now add or remove a single static route and change the saved address of an interface without rebuilding the whole network.
- 20261002-17: Fix: in Artica Proxy, Creating a disk cache through the REST API no longer fails with a database error, and the cache size is now read and written by it while older clients keep the stored size.
- 20261002-17: Fix: in Artica, The AI assistant terminal is now refreshed in the browser right after an update, without having to clear the browser cache.
- 20261002-17: Add: in Artica Proxy, After approval, the Artica AI assistant can now manage the parent proxies (rules, peers and their credentials typed by the operator), the listening ports and the disk caches of the local proxy, and purge a site or a URL from the cache.
- 20261002-17: Add: in Artica Proxy, The REST API can now really purge cached objects of a site or a URL, restart the proxy synchronously after a port or cache change, and edit one parent proxy without rebuilding the whole parent list.
- 20261002-17: Fix: in Artica Proxy, Disabling an ACL object through the REST API no longer enables it.
- 20261002-17: Fix: in Artica SIEM, The IP reputation engine now reads the stored reputation of observed addresses in one batch per cycle instead of one database query per address, which greatly reduces the CPU used by the statistics database.
- 20261002-17: Fix: in Artica SIEM, The IP reputation engine no longer rescans the whole list of observed addresses every minute when a threat feed entry merely expires.
- 20261002-17: Add: in Artica, The AI assistant terminal now shows the answer last and hides the details (facts, checks performed, plan, objects found in the console) unless the new /verbose command is turned on.
- 20261002-17: Add: in Artica, The AI assistant can now read the system performance (load, CPU, memory, disk speed and disk usage) and the state and throughput of the network interfaces.
- 20261002-17: Fix: in Artica Proxy, The HaCluster nodes now only accept configuration and orders from the cluster master, authenticated by its certificate, and lock themselves automatically on the cluster authority once the standby load-balancer is upgraded too.
- 20261002-17: Fix: in Artica Proxy, The HaCluster agent no longer exposes the node private key, Active Directory settings or administrator accounts through its local API.
- 20261002-17: Fix: in Artica Proxy, The HaCluster master no longer sends its certificate database to the nodes when SSL decryption is enabled.
- 20261002-17: Fix: in Artica Proxy, Removing a node from the HaCluster farm now really disconnects it.
- 20261002-17: Add: in Artica Proxy, After approval, the Artica AI assistant can now create, change, enable, move or delete the access rules and ACL objects of the local proxy, its SSL inspection rules and whitelist, and its authentication schemes, each change being checked by reading it back and undone when it fails.
- 20261002-17: Add: in Artica Proxy, A synchronous proxy reconfiguration (rebuild, check and reload) is available to the REST API and reports its errors.
- 20261002-17: Fix: in Artica AI, An installation that fails no longer leaves the service marked as installed, so the menu and the Ask ArticaAI button do not appear for a service that is not there.
- 20261002-17: Add: in Artica AI, An incident now shows its support ticket, and a support ticket can be opened from the incident with a draft that can be edited before sending.
- 20261002-17: Add: in Artica AI, The number of support tickets the agent may open on its own each day can now be set in the Agent settings.
- 20261002-17: Fix: in Artica AI, The left menu and the top bar are now refreshed as soon as the service is installed or uninstalled.
- 20261002-17: Fix: in Artica, The web console no longer fills the PHP log with "Creation of dynamic property" warnings about Docker privileges on every page load.
- 20261002-17: Fix: in Artica AI, The assistant page no longer fails when an answer lists facts, inferences or hypotheses, and statements the agent could not verify are flagged as such.
- 20261002-17: Fix: in Artica, The top bar and the left menu no longer fail with an Internal Server Error when checking whether Artica AI is installed.
- 20261001-17: Fix: in Artica Proxy, Installing a Kerberos keytab no longer writes an unusable /etc/krb5.conf when the Kerberos realm is not set: the realm is taken from the keytab or the domain controller name, and the file is left untouched if it cannot be determined.
- 20261001-17: Fix: in Artica, The web console no longer fails to start when the system Kerberos configuration (/etc/krb5.conf) is broken or unreadable, since the console does not use Kerberos.
- 20261001-17: Fix: in Artica, The web console now recovers by itself when its configuration file was locked against changes and no longer allows the console to start, and it reports when a locked configuration prevents settings from being applied.
- 20261001-17: Fix: in Artica, The web console no longer triggers the nginx warning about the deprecated "listen ... http2" directive on recent versions.
- 20261001-17: Fix: in Artica Proxy, The Artica AI assistant no longer reports the proxy as stopped when it runs, Artica starting it outside of the squid system service.
- 20261001-17: Add: in Artica, The AI assistant can now tell whether a given site or address is whitelisted on a cluster node, following the same matching rules as the node proxy, without reading the whole list.
- 20261001-17: Add: in Artica, The AI assistant page marks the statements that could not be verified against the data read, and lists the names and addresses concerned.
- 20261001-17: Add: in Artica Proxy, A proxy.pac rule can now download its content from a central PAC server at a configurable interval and keeps serving the last valid copy when that server cannot be reached.
- 20261001-17: Fix: in Artica Proxy, A malformed website name (with spaces or a percent sign) is no longer sent to the categorization service, where it failed and was logged as a service error.
- 20261001-17: Fix: in Artica, The AI assistant no longer presents as facts domains or addresses that it never actually read; such statements are checked against what the tools returned and are shown as unverified hypotheses.
- 20261001-17: Fix: in Artica, The AI assistant no longer drops a question when it asks for two readings at once; the first one is performed.
- 20261001-17: Add: in Artica, The AI assistant now reports how many whitelist entries and ACL rules a cluster node holds, active or not, even when the list is too long to read in full.
- 20261001-17: Add: in Artica Proxy, The Artica AI assistant can now read the state, the statistics (top sites, users, bandwidth) and the configuration of the local proxy, and, after approval, add, change or remove whitelist entries and cache exclusions or reload the proxy, each change being checked and undone if it fails.
- 20261001-17: Add: in Artica, The shared folders of a file sharing instance now offer a "Wizards" button: its first wizard creates a public shared folder, open to everyone in read and write without a password, from a single name.
- 20261001-17: Fix: in Artica, The AI assistant no longer gives up with a protocol error when its answer about a long list (whitelist, ACL rules) exceeds the length of a single reply; it is asked to answer again, shorter.
- 20261001-17: Add: in Artica, The AI assistant now accepts a cluster node by its name (proxy1, proxyNoAuth1 or its hostname) as well as by its number.
- 20261001-17: Add: in Artica, The HaCluster load balancer can now send orders to each node over a new authenticated channel (mutual TLS with the cluster certificates, closed list of operations): node whitelist, ACL rules, ACL compilation and proxy reload.
- 20261001-17: Fix: in Artica, Reloading the proxies of all HaCluster nodes now really reloads Squid on each node; the previous order targeted a service the nodes never had.
- 20261001-17: Add: in Artica, The AI assistant can read and change, node by node, the whitelist and the ACL rules of a HaCluster, and edit the replicated ACL groups; each change is checked on the node and undone if its compilation fails.
- 20261001-17: Add: in Artica AI, Support tickets can now be listed, read, created with the diagnostic package and answered from the assistant, with or without a language model.
- 20261001-17: Add: in Artica AI, An incident left unresolved by the agent can now open a support ticket on its own when the administrator allows it in the Autopilot.
- 20261001-17: Add: in Artica, The support portal can now be reached by Artica AI to create a ticket, post a reply and send the diagnostic package.
- 20261001-17: Add: in Artica, When Artica AI is installed, the search field of the top bar becomes an "Ask ArticaAI" button: the AI terminal answers the question and also lists the matching console objects (computers, proxy objects, DNS records, members...), which open with a click; the /search command searches the console only.
- 20261001-17: Add: in Artica, The console search now answers directly without a progress bar, groups the results by type, reports the sources that did not answer, and no longer mixes up the results of two administrators searching at the same time.
- 20261001-17: Fix: in Artica, The console search no longer breaks on searched texts containing quotes or wildcard characters, which were inserted as is into the database, directory and documentation queries.
- 20261001-17: Add: in Artica, The Artica AI assistant can now look up objects of the console by name, IP address, MAC address or domain while it investigates a question.
- 20261001-17: Add: in Artica, The Artica AI status page no longer repeats the service details already shown in the service widget and opens directly on the language model settings.
- 20261001-17: Add: in Artica, The Artica AI page now presents the service and offers an Installation button when it is not installed, and reloads the console after an installation or an uninstallation so the left menu shows the Artica AI pages only when the service is installed.
- 20261001-17: Fix: in Artica, The Artica AI language model settings can now be saved before the service is installed; they are applied when it is installed instead of reporting an error.
- 20261001-17: Add: in Artica, The Windows agent icon now appears in the notification area as soon as the agent is installed, without waiting for the next logon.
- 20261001-17: Add: in Artica, A Windows workstation installed without a server can now be bound to the appliance from its icon with "Import the certificate", using the certificate authority exported from the console.
- 20261001-17: Add: in Artica, The AI assistant can now use GitHub Copilot models (through GitHub Models, with a personal access token) as its remote language model, and the model list of that service is read from its catalog.
- 20261001-17: Add: in Artica, The AI assistant can now run every HaCluster operation from the load balancer (drain, maintenance, weight, enable, add or remove a node, source ACLs, access limits, DNS rules, floating IP), each one checked against the real cluster state, and the routine ones can run without approval in agent mode when allowed.
- 20261001-17: Fix: in Artica, Putting a HaCluster node in maintenance or back in service now also applies to the unauthenticated pool, a new drain action lets sessions finish first, and an error is reported when the load balancer refuses the order.
- 20261001-17: Add: in Artica, Plans proposed by the AI assistant can be approved and executed from the console; the credentials needed to add a HaCluster node are asked at that moment and never stored.
- 20261001-17: Fix: in Artica Proxy, A remote C-ICAP antivirus service enabled by the administrator is now applied to the proxy even when the local C-ICAP service is not enabled.
- 20261001-17: Fix: in Artica Proxy, A HotSpot voucher can now be used on several devices at the same time: a second device signing in with a voucher already in use was told the login succeeded, then sent back to the login page.
- 20261001-17: Fix: in Artica, The bandwidth test is no longer run every hour by a default scheduled task that ignored the interval set in the console; this task is now created disabled, as an example.
- 20261001-17: Fix: in Artica, The Active Directory domain-controller resolution status no longer returns a malformed answer when the resolution fails, and a new LDAP check tests every configured Active Directory connection without disturbing the console LDAP test.
- 20261001-17: Add: in Artica, The AI assistant can diagnose and repair Kerberos and Active Directory authentication (ticket, keytab, credentials cache, clock) on appliances with an Enterprise license; keytab renewal and domain re-join always require an approval.
- 20261001-17: Fix: in Artica, The remediation plan proposed by the AI assistant now shows the target of each step (address, URL, name) and no longer displays an internal session reference as its goal; the terminal shows observations in full.
- 20261001-17: Fix: in Artica, The diagnosis, facts, inferences, hypotheses, checks performed and rejected steps of an AI answer are now shown across the full width, and a check shows its whole observation instead of the first 300 characters.
- 20261001-17: Add: in Artica, The "Ask Artica" page of the AI console lists the questions asked to the assistant (who asked, status, checks performed, duration), and each one opens its diagnosis, checks and plan.
- 20261001-17: Fix: in Artica, The language model settings of the AI console now offer the current DeepSeek models (V4.1 Flash and V4 Pro) instead of the retired DeepSeek V3 and R1.
- 20261001-17: Fix: in Artica, The AI assistant now always gets a last turn to give its diagnosis when its investigation budget runs out, instead of ending without an answer.
- 20261001-17: Add: in Artica, The "Ask Artica" window of the AI console is now a real terminal with question history and keyboard shortcuts, and a Detach button opens it in its own browser window with the conversation kept.
- 20260930-17: Add: in Artica, The Artica AI language model settings offer a provider list (OpenAI, Anthropic Claude, DeepSeek, OpenRouter, Qwen, Mistral, xAI Grok, Kimi, Z.ai, Zhipu and local Ollama, vLLM, llama.cpp) that fills in the endpoint and suggests the models of that provider.
- 20260930-17: Add: in Artica, The Artica AI model list now offers DeepSeek (V3 and R1) even before an endpoint is set; choosing it fills in the DeepSeek API address.
- 20260930-17: Add: in Artica, The Artica AI status page shows the engine, the language model, the agent budgets, the automatic-action switches, the HaCluster guard and the catalog as clear cards, each with its own settings button.
- 20260930-17: Fix: in Artica Proxy, Domains from third-party block lists whose name servers no longer answer are now filed under Reaffected after three checks at least a day apart, instead of waiting in the review queue forever.
- 20260930-17: Fix: in Artica Proxy, The cloud categorization service no longer files legitimate websites under Phishing on the sole guess of an external machine-learning service; such domains now go through the regular categorization review.
- 20260930-17: Add: in Artica Proxy, The cloud categorization service now keeps a trace of which engine filed each domain under a threat category, and on what evidence.
- 20260930-17: Add: in Artica Proxy, The cloud categorization service now imports a new community list of suspicious domains, keeping only valid domain names that resolve on the Internet and are not already categorized.
- 20260930-17: Fix: in Artica Proxy, Domains taken from third-party block lists are no longer stuck behind names whose DNS never answers, so newly imported lists are reviewed on the next cycle.
- 20260930-17: Add: in Artica, The Artica AI language model is now chosen from a drop-down list of the models offered by the configured server, reloaded when the endpoint changes.
- 20260930-17: Fix: in Artica Proxy, The HotSpot login page now appears on phones whose connectivity check goes through the proxy, instead of the phone being told it already has Internet access.
- 20260930-17: Add: in Artica, The Artica AI status page now configures the service: language model API (endpoint, model, key, timeout), trusted CA certificate for an internal model server, Autopilot allowed skills and maintenance windows, agent limits, HaCluster guard, safe mode, kill-switch and console key rotation.
- 20260930-17: Add: in Artica, Artica AI can now reach a language model server protected by an internal or self-signed certificate once its CA is imported.
- 20260930-17: Fix: in Artica, The DHCP service now checks every five minutes that it serves exactly the networks configured in the console, and stops serving a network that was removed instead of keeping it until the DHCP settings are saved again.
- 20260930-17: Add: in Artica, The Artica AI dashboard is merged into the Artica AI status page, which now shows the service, the engine, the automatic actions, the catalog and the activity in one place.
- 20260930-17: Fix: in Artica, The question field of Ask Artica is now always visible, instead of being hidden behind a "No data: Click here" link.
- 20260930-17: Fix: in Artica, The Artica AI service socket is now reachable by the web console, which could otherwise not talk to the assistant at all.
- 20260930-17: Add: in Artica, The Artica AI dashboard now shows when the service is not installed and offers an Install button with its progress bar.
- 20260930-17: Add: in Artica, Administrators can now set, per file-server instance, the drive letter of the Windows agent personal drive and optionally enforce it.
- 20260930-17: Add: in Artica, Administrators can now rename the browser search keyword and search engine name used by the Windows agent, for example @nas instead of @artica.
- 20260930-17: Add: in Artica, The Artica AI service now carries its skills, runbooks, prompts and help documents inside its own program, so an update can no longer start with catalogs from another version.
- 20260930-17: Add: in Artica, The Artica AI service can now be installed, restarted and removed from its new Status page (Your system > Artica AI), and it is watched and restarted automatically like the other Artica services.
- 20260930-17: Add: in Artica, The Artica AI console now has its own entry in the left menu, under Your system, with one link per page (dashboard, chat, incidents, transactions, runbooks, knowledge base, notifications, certificates, fleet, skills).
- 20260930-17: Add: in Artica, The Artica AI console pages now follow the standard console layout, with header buttons, searchable tables, detail windows, translated labels and their own addresses (/ai-dashboard, /ai-chat, /ai-incidents…).
- 20260930-17: Add: in Artica Reverse Proxy, The log search can report the real client address from X-Forwarded-For when the appliance sits behind a trusted front proxy (new Parameters button on the HotLogs page).
- 20260930-17: Fix: in Artica Reverse Proxy, A saved HTTP status or method filter containing unexpected characters no longer breaks the requests search page: invalid values are ignored and never stored.
- 20260930-17: Fix: in Artica Reverse Proxy, Searching requests for a time range earlier than the most recent log line (for example 22:00 to 23:00 on a log that continues past midnight) now finds the requests of the previous evening instead of returning nothing.
- 20260930-17: Fix: in Artica Reverse Proxy, With the regular expression mode enabled, the source IP filter still matches networks such as 10.0.0.0/8 and exact addresses no longer match longer addresses that contain them.
- 20260930-17: Fix: in Artica, The fleet appliance list no longer shows appliances as online without checking: each appliance is now contacted when the list is displayed and reported as online or offline with the reason.
- 20260930-17: Fix: in Artica, The AI assistant no longer sends proxy peer or directory passwords found in the Squid configuration to the language model or to its API.
- 20260930-17: Fix: in Artica, Only the web console can now talk to the AI service, and every request must be signed on behalf of an authenticated administrator.
- 20260930-17: Fix: in Artica, When a step of an AI action fails, the steps already applied are now undone, and only those.
- 20260930-17: Fix: in Artica, The AI assistant now lists the most recent notifications first, even when the event log holds thousands of other events.
- 20260930-17: Fix: in Artica, AI memory sessions are now private to the user who created them, and reading an unknown session no longer creates one.
- 20260930-17: Fix: in Artica, AI documentation and knowledge searches no longer fail on questions containing punctuation such as question marks or apostrophes.
- 20260930-17: Fix: in Artica, Enriching an incident from the SIEM now requires execution rights, refuses unknown incidents and no longer adds the same events twice.
- 20260930-17: Fix: in Artica, The AI service now refuses to start when another instance is already answering on its socket, and its service unit is hardened.
- 20260930-17: Fix: in Artica, A remote AI model endpoint must now use HTTPS, oversized model responses are rejected, and the model settings file is readable by root only.
- 20260930-17: Fix: in Artica, Fleet queries now report an unreachable or unconfigured appliance as a gap instead of returning simulated data, and peer responses are size-limited.
- 20260930-17: Fix: in Artica, Fleet appliance endpoints are restricted to an allowed list of sockets, appliance identifiers are validated, and fleet remediation is no longer exposed.
- 20260930-17: Fix: in Artica, The AI assistant safe mode and kill-switch now stop every change it could make (approvals, executions, rollbacks, automatic repairs, Autopilot and fleet actions) while diagnostics keep working, and a restarted service is now confirmed only when the service itself is running again.
- 20260930-17: Fix: in Artica, A failed automatic repair now counts against the circuit breaker of its action, and runbooks started manually now run with the rights and the name of the administrator who launched them, refusing callers who lack the permission of a step.
- 20260930-17: Fix: in Artica, The AI assistant now generates every change request identifier itself, rejects malformed identifiers, and guarantees that a change approved once is applied only once even when it is executed or cancelled several times at the same moment.
- 20260930-17: Fix: in Artica, The AI assistant pages of the Web console now act on behalf of the logged-in administrator with the rights of his profile, refuse visitors without an administration session, and protect their forms against cross-site requests.
- 20260930-17: Fix: in Artica, Only system administrators can now change the privileges of an administrator group.
- 20260930-17: Fix: in Artica, A Docker right given to a group no longer grants the generic administrator access used by other console pages; it opens the console and the Docker menu only.
- 20260930-17: Fix: in Artica, An administrator allowed to create Docker containers can now pick an image in the creation form.
- 20260930-17: Fix: in Artica, Docker pages no longer offer the Docker Hub tab, the category listings, or the network connect and disconnect actions to administrators who lack the rights they need.
- 20260930-17: Fix: in Artica, Administrators with the Docker network right can now create, connect and disconnect networks from the Networks page.
- 20260930-17: Add: in Artica, Docker rights are now granted per administrator group (Docker tab of the group), from full Docker administration down to single actions such as viewing containers or reading their logs, and every Docker page checks them.
- 20260930-17: Add: in Artica, The account page lists the Docker rights of the current session.
- 20260930-17: Fix: in Artica, Deploying or editing a Docker stack now requires the "stack secrets" right to set or change a secret value.
- 20260930-17: Fix: in Artica, Mail refusals by a DNS blocklist that were recorded before the latest update are now named after their blocklist in the daily report instead of appearing as "Unclassified".
- 20260930-17: Add: in Artica, The Windows agent page of the file-sharing module offers a direct download of the Windows agent installer (.MSI).
- 20260930-17: Fix: in Artica, The Windows agent activation dialog shows "All interfaces" instead of an empty interface name, and no longer repeats its explanation.
- 20260930-17: Fix: in Artica, The Windows agent page no longer names a non-existent "artica-wagent" service: the listener is part of the file-sharing service.
- 20260930-17: Fix: in Artica, Runbook diagnostic checks can no longer probe network addresses or pass options that are not part of the appliance configuration.
- 20260930-17: Fix: in Artica, The AI assistant chat page now shows the facts, hypotheses and every check the assistant ran, including any automatic fix.
- 20260930-17: Fix: in Artica, The Windows workstations page of the file-sharing module opens again instead of failing with an internal server error.
- 20260929-17: Fix: in Artica Proxy, A cache removed from the caches center is now really erased from the disk and its space released; a cache still used by the running proxy is kept until the next reload.
- 20260929-17: Fix: in Artica Proxy, When the proxy cannot open its SNMP port, SNMP is now set aside for 24 hours so the proxy can start, instead of failing again at every start.
- 20260929-17: Fix: in Artica Proxy, The proxy watchdog no longer runs an obsolete background task 27 times an hour, and old scheduled tasks calling removed scripts are cleaned up.
- 20260929-17: Fix: in Artica Reverse Proxy, Building the web firewall no longer hangs indefinitely when the cybercrime IP list export does not answer, and the reason of a failed export is now logged.
- 20260929-17: Fix: in Artica, The AI assistant no longer loses the record of an investigation or an audit entry when several investigations finish at the same time.
- 20260929-17: Add: in Artica Reverse Proxy, The requests search now filters by time range, backend address, backend status, cache status, server name, minimum duration and source network (CIDR), and tells which period of the log was examined.
- 20260929-17: Add: in Artica Reverse Proxy, The requests search reads the access log from the most recent line and stops as soon as enough results are found, instead of reading the whole file.
- 20260929-17: Fix: in Artica Reverse Proxy, The text typed in the requests search is no longer passed to a system shell.
- 20260929-17: Fix: in Artica Reverse Proxy, An invalid search criterion now shows which field is wrong instead of returning no result.
- 20260929-17: Fix: in Artica Reverse Proxy Manager, The status filter of the Requests page now returns 4xx and 5xx requests, and the most recent requests are shown first.
- 20260929-17: Add: in Artica, The Windows agent page has been redesigned into cards grouped by subject: listener, certificate infrastructure and personal-data retention. Each certificate now shows whether it is still valid and how many days it has left, instead of only a raw expiry date.
- 20260929-17: Add: in Artica, The public certificate of the Windows agent authority can be downloaded from the console, which is what a workstation needs in order to recognise this appliance.
- 20260929-17: Add: in Artica, The Windows agent listener can be restarted with its current settings, which reconnects it after the network of the appliance has changed underneath it.
- 20260929-17: Add: in Artica, The certificate authority of the Windows agent can be replaced from the console. The confirmation states plainly that every enrolled workstation loses its certificate and has to enrol again, and the number of workstations concerned is recorded.
- 20260929-17: Fix: in Artica, The Windows agent page now says when the module is enabled but not actually listening, instead of showing an enabled switch and no explanation.
- 20260929-17: Add: in Artica, The AI assistant now investigates by itself: it chains read-only checks until it can explain a problem, proposes a remediation plan for approval, and runs only the automatic fixes allowed by the Autopilot; it also investigates new incidents, within an hourly limit.
- 20260929-17: Fix: in Artica, Hosted PHP sites no longer store their visitor sessions in the same directory as the administration console. Each PHP-FPM pool now has its own session directory, created and restricted to the web server account.
- 20260929-17: Fix: in Artica, The web console session cookie is now marked secure and strictly validated by the console itself, instead of depending on each appliance PHP configuration for those protections.
- 20260929-17: Fix: in Artica, Logging out of the web console now removes the session cookie from the browser as well as the session on the server, and can no longer fail with an error page when the session store is unavailable.
- 20260929-17: Fix: in Artica, The automatic disconnection after a period of inactivity now works. It was cancelled by the default value of the session duration setting, and was in fact only applied while a browser tab kept polling the appliance, so a session left open in a closed tab never expired.
- 20260929-17: Add: in Artica, A service of a Docker Compose stack can now be published through the Artica reverse-proxy from its Services tab: the Docker Relay agent of the host offers it to the reverse-proxy as a backend, and the ports the service opens on the host are bound to the local address only by default.
- 20260929-17: Add: in Artica, On a HaCluster load balancer, the AI assistant now reports the state of every proxy node and can reload the load balancer or put a node in maintenance, refusing when the floating IP is held elsewhere or too few nodes would remain in service.
- 20260929-17: Add: in Artica, The cluster master page has been redesigned: the linked slave nodes are listed in one card with their online state, last contact and connection count, a New node button issues the client certificate of a new slave, and the settings are grouped by listening and replication.
- 20260929-17: Fix: in Artica, On the cluster master page, removing a slave node now asks for confirmation, the replication settings window closes after saving, and only administrators can reload or stop the cluster service.
- 20260929-17: Add: in Artica, The cluster slave page has been redesigned: a status column shows the link to the master with its response time, the last synchronization with the next cycle, and the client certificate expiry, next to the settings and events tabs.
- 20260929-17: Fix: in Artica, The cluster slave settings always show the outgoing interface, and only administrators can freeze or resume the replication.
- 20260929-17: Add: in Artica, A Docker Store application can be installed as a Docker Compose stack from a ready-made template, a running container can be converted into a stack (its environment carried over encrypted, never displayed), and a stack started outside Artica can be adopted.
- 20260929-17: Fix: in Artica, The cluster master page now offers the Remove button on client nodes that no longer connect, and nodes silent for more than 7 days are removed automatically.
- 20260929-17: Fix: in Artica, A cluster client node no longer loses its IP address and host name on the master page after downloading the cluster package.
- 20260929-17: Fix: in Artica Proxy, Starting the proxy or the web filtering service no longer logs an AppArmor error about a missing "local/usr.sbin.clamd" file, and AppArmor settings are skipped when AppArmor is disabled.
- 20260929-17: Add: in Artica, A Docker Compose stack can be started, stopped, restarted and removed from its window (its volumes are kept unless removing them is asked), and its services' logs are shown merged in time order, filterable by service and text.
- 20260929-17: Add: in Artica, The AI assistant can now use a local language model server (Ollama, vLLM, llama.cpp) configured in a single settings file, and the offline mode now fully disables the model.
- 20260929-17: Fix: in Artica, When the AI model is unavailable or too slow, the AI assistant now still answers with the collected facts and the recommended plan, clearly marked as produced without the model, instead of returning an error.
- 20260929-17: Add: in Artica, A Docker Compose stack can be edited from the console: the changes are shown as a diff with the plan before being applied, each application is kept as a revision, and any revision can be deployed again.
- 20260929-17: Add: in Artica, The Docker Manager checks each service of a stack for a newer image and updates it on request, going back automatically to the previous image when the new container does not start healthy.
- 20260929-17: Add: in Artica, The Docker Manager deploys applications described by a Docker Compose file: each file is analysed first (errors with their line, security review of every service, plan of the changes, port conflicts with the server) and its secrets are stored encrypted.
- 20260929-17: Add: in Artica, The Docker Compose stacks deployed by Artica are seen by docker compose on the server, and the stacks started outside Artica are listed in the console.
- 20260929-17: Fix: in Artica, Appliances where the proxy service is disabled (load balancers, SIEM) no longer log an error every five minutes while trying to read the proxy file descriptor usage.
- 20260929-17: Fix: in Artica Proxy, Snapshots of active proxy requests no longer pile up without limit in /home/artica/squid/squidclient/stats; they are now removed automatically every hour, which frees up to several tens of gigabytes on affected appliances.
- 20260929-17: Fix: in Artica, The self-test history of NVMe SSDs is shown again on the disk health page instead of the error "Read Self-test Log failed: Invalid Field in Command", and a self-test started from this page now checks the whole drive.
- 20260929-17: Fix: in Artica, The disk health page no longer shows NVMe SSD temperatures around 300°C and no longer raises a false critical alert: the temperature reported in kelvins by NVMe drives is now converted to Celsius.
- 20260929-17: Add: in Artica, The Docker Store search also looks for images on quay.io, shows their tags with digests and CPU architectures, and tells when quay.io must first be added to the allowed image sources before pulling.
- 20260929-17: Add: in Artica, The Processes tab of a Docker container shows the process count, CPU and memory usage, highlights the main process, refreshes itself every 5 seconds (can be paused) and exports the list as CSV.
- 20260929-17: Fix: in Artica, Installing a software package no longer removes the special permissions of system programs (sudo, su, passwd, the Postfix mail submission tools…); appliances already affected are repaired automatically within five minutes.
- 20260929-17: Fix: in Artica, Opening the details of a Docker Store application no longer fails with an internal server error.
- 20260929-17: Fix: in Artica, The details of an image opened from a Docker Store category now open above the category window instead of replacing it.
- 20260929-17: Add: in Artica, The Docker image details window shows its identity and its update check as colored tiles, with a status banner, a button to copy the image ID, a re-check button and shortcuts to pull the image again or run a container from it.
- 20260929-17: Add: in Artica, Running a container from the image details window preselects that image in the new container form.
- 20260929-17: Add: in Artica, Each Docker Store category now also lists the matching Docker Hub images, most downloaded first, with their stars and download counts and a button to load more.
- 20260929-17: Fix: in Artica, The Docker Store Categories tab no longer shows a redundant list of category links above its filter.
- 20260929-17: Fix: in Artica, The RBL Pack no longer uses the SpamCop blocklist, which rejected legitimate mail sent from Gmail servers.
- 20260929-17: Fix: in Artica, The daily mail report now classifies messages refused by a DNS blocklist as "RBL" instead of "Unclassified".
- 20260929-17: Fix: in Artica, The Categories tab of the Docker Store now lists its applications instead of showing an empty page, and opening a category no longer hides the Store tabs.
- 20260929-17: Add: in Artica, The Docker Store Categories tab shows one card per category with its applications; a category opens a window where each image can be filtered, given a tag and pulled directly.
- 20260929-17: Fix: in Artica, The Docker Store pages are now translated in every language.
- 20260928-17: Add: in Artica, The Docker Store also lists the applications of the local Artica catalog, which stays available when Docker Hub cannot be reached.
- 20260928-17: Fix: in Artica, Requesting a scan of an indexed shared folder while a scan of it is already running or waiting no longer scans the folder several times in parallel.
- 20260928-17: Fix: in Artica, A file-sharing index scan started while another scan of the same folder was still running no longer removes files that are still there from the search results.
- 20260928-17: Add: in Artica, The SMART monitoring page has been redesigned: four indicator tiles (drives detected, overall state, highest temperature, RAID controller visibility), a one-click filter that keeps only the drives reporting an anomaly, and the bus, serial number and running time of each drive.
- 20260928-17: Add: in Artica, Clicking a drive on the SMART page now opens every SMART counter the appliance reads from it, including the eight counters that were collected at each check and never displayed, together with the log of its past self-tests.
- 20260928-17: Add: in Artica, When a drive reports a problem, the SMART page now states what to do about it, one recommendation per diagnosis, instead of only naming the failing counter.
- 20260928-17: Fix: in Artica, SMART diagnostics are now shown in the language of the console. They were written in English by the monitoring service and displayed as such whatever the language selected.
- 20260928-17: Add: in Artica, A SMART self-test can be started on a drive from the console, and the search for a RAID controller utility can be run again on demand, reporting which paths were probed when none is found.
- 20260928-17: Fix: in Artica, The SMART monitoring page can be reloaded or bookmarked: its address was pushed to the browser bar without any matching route, so opening it again led nowhere.
- 20260928-17: Fix: in Artica, The SMART and RAID monitoring page no longer warns about a missing RAID controller utility on virtual machines and servers that have no hardware RAID controller.
- 20260928-17: Fix: in Artica Proxy, Compiling the proxy rules through the REST API now reloads the proxy, so a change made by an external application takes effect immediately, as with the "Apply rules" button.
- 20260928-17: Fix: in Artica Proxy, The hotspot HTTPS login page now sends the intermediate certificates of a Let's Encrypt or imported certificate, which Android devices need to open it.
- 20260928-17: Fix: in Artica, File search results now highlight matching words regardless of accents, so searching "reunion" or "reu" highlights "Réunion" in the extract.
- 20260928-17: Fix: in Artica, The "Act as Gateway" widget no longer claims that network bridges have been created on appliances that have none, and the gateway mode no longer re-enables itself for that reason.
- 20260928-17: Fix: in Artica Proxy, The hotspot answers the connectivity checks of devices not logged in yet with a real redirect to the login page, so the Microsoft Edge "sign in to network" tab opens the portal.
- 20260928-17: Fix: in Artica, The DHCP server no longer announces the portal login page or a proxy auto-configuration address as a captive portal API (option 114), which Android and iOS devices could misread.
- 20260928-17: Add: in Artica Proxy, The hotspot can announce itself to Android, iOS and other compatible devices through the standard Captive Portal API (RFC 8908/8910) when its HTTPS certificate is issued by a public authority.
- 20260928-17: Add: in Artica, A new Docker page enrolls, runs and configures the Docker Relay agent that publishes this host's containers through an Artica Reverse Proxy.
- 20260928-17: Add: in Artica, The Docker Relay agent binary is updated automatically when a new version is dropped on the appliance.
- 20260928-17: Add: in Artica, Let's Encrypt certificates that expired more than 30 days ago and are used by no service are now removed automatically from the certificates database, after a private backup copy is kept.
- 20260928-17: Add: in Artica, The SafeSearch page now shows one tile per search engine, with the DNS name each engine is redirected to, and a click on a tile turns that engine on or off straight away.
- 20260928-17: Fix: in Artica, Turning a SafeSearch engine on or off now reaches appliances served by the local DNS cache, and no longer only those running the Unbound DNS service.
- 20260928-17: Fix: in Artica, Youtube strict and Youtube moderate can no longer be enabled at the same time, a combination that silently applied the moderate policy while the page showed both as active.
- 20260928-17: Fix: in Artica, The SafeSearch page now names the DNS service that applies the rules, and warns when no DNS service is running on the appliance to apply them.
- 20260928-17: Fix: in Artica, Changing a SafeSearch option is now refused by the server itself when the account lacks DNS administrator rights, when the licence does not cover the feature, or when the cluster nodes run no DNS service. These conditions only greyed the page out before, and were not re-checked when saving.
- 20260928-17: Fix: in Artica, Scheduled tasks whose script no longer exists in the console are now removed automatically after 24 hours, instead of failing several times a day.
- 20260927-17: Fix: in Artica, The DHCP leases list no longer misses every lease whose device vendor is unknown (only 13 of 31 active leases were shown on a test server).
- 20260927-17: Fix: in Artica, A DHCP client sending a hostname with a quote can no longer empty the DHCP leases list, and clients without a hostname are no longer listed as "-na-".
- 20260927-17: Fix: in Artica, The DHCP reservations and leases pages no longer accept search text that could alter their database query
- 20260927-17: Fix: in Artica, Editing a computer now records its "updated" time in the same time zone as every other change.
- 20260927-17: Add: in Artica, The DHCP reservations page uses the new table design and flags reservations that the DHCP server does not serve
- 20260927-17: Add: in Artica, The DHCP leases page uses the new table design, shows active and expired leases and warns when the list is out of date compared with the DHCP server.
- 20260927-17: Fix: in Artica, The DHCP "Last computers" and "DHCP requests" pages no longer accept search text that could alter their database query
- 20260927-17: Add: in Artica, The DHCP "Last computers", "DHCP requests" and "DHCP events" pages use the new table design
- 20260927-17: Add: in Artica, The DHCP events page now pages through every event of the period instead of showing only the latest 250.
- 20260927-17: Add: in Artica, The DHCP statistics dashboard has been redesigned
- 20260927-17: Fix: in Artica, The log storage check no longer loads a whole compressed log in memory when its first line is very long.
- 20260927-17: Add: in Artica Reverse Proxy, the Docker Relay agent installs its own systemd service with the new install-service command, as the enrollment instructions now say.
- 20260927-17: Fix: in Artica Reverse Proxy, the Docker Relay pages now show the labels and never-enrolled badges.
- 20260927-17: Fix: in Artica, The network traffic statistics database is now limited to 1 GB and compacted at startup.
- 20260927-17: Fix: in Artica, The DHCP statistics pages now say that the Artica service is not answering instead of asking to enable the DHCP server.
- 20260927-17: Add: in Artica, The document search now also finds words from their first three letters, and the search box completes file names as you type.
- 20260927-17: Add: in Artica, The Docker Manager can open an interactive terminal inside a running container, in its own browser tab, from the containers list.
- 20260927-17: Add: in Artica, The DHCP statistics now track the occupancy of each DHCP pool over time and display it on the dashboard.
- 20260927-17: Add: in Artica, The DHCP service now notifies the administrator when a device renews its address in a loop
- 20260927-17: Fix: in Artica, The Docker containers list no longer shows two columns with the same title.
- 20260925-17: Add: in Artica, The Wazuh agent is now available as a ready-to-install package for Debian 12 and Debian 13
- 20260926-17: Fix: in Artica, All Docker Manager pages are now translated and follow the standard console layout (search, header buttons, confirmation windows).
- 20260926-17: Add: in Artica, The Docker permissions page shows which account the Docker Manager sees for you, whether it is allowed, and explains how to grant access.
- 20260926-17: Fix: in Artica, The Docker performance page no longer times out when many containers are running: statistics are loaded progressively.
- 20260926-17: Add: in Artica, Docker networks can now be disconnected from a container, and connecting one offers the list of containers instead of a free text field.
- 20260926-17: Add: in Artica, The Docker containers page can remove a running container after an explicit warning
- 20260926-17: Fix: in Artica, The Docker container console now states clearly that interactive execution is not available instead of pretending a command ran.
- 20260926-17: Fix: in Artica, The Docker Manager pages now escape container, image and volume names everywhere, so a crafted name can no longer inject code into the page.
- 20260926-17: Fix: in Artica Proxy, The PostgreSQL connection manager no longer reuses connections that PgBouncer has already closed for inactivity
- 20260926-17: Fix: in Artica Proxy, The nightly proxy statistics no longer fail with a closed database.
- 20260926-17: Fix: in Artica, Containers created from the Docker Manager now really get the memory and CPU limits.
- 20260926-17: Fix: in Artica, Opening a container that no longer exists in the Docker Manager now reports that it was not found instead of an engine error.
- 20260926-17: Fix: in Artica, The Docker Manager daemon no longer refuses to start after an interruption left its job history file damaged.
- 20260926-17: Fix: in Artica, An image download or build that the Docker engine refuses (authentication, network or corrupt layer) is now reported as failed instead of completed.
- 20260926-17: Fix: in Artica, The Docker Manager no longer shows container environment variable values (such as passwords) when a container is inspected.
- 20260926-17: Fix: in Artica, The Docker Manager no longer lets a container be mounted onto sensitive host paths ( through ".." sequences, symbolic links or the volumes field.
- 20260926-17: Add: in Artica, The Docker Manager page now has a Status tab showing the service state and version, with buttons to install, restart or uninstall the Docker Manager.
- 20260926-17: Add: in Artica, A Docker menu now gives administrators access to the Docker Manager pages when Docker is enabled.
- 20260926-17: Fix: in Artica, The Docker Manager pages can no longer crash when loaded alongside the existing Docker status components.
- 20260926-17: Fix: in Artica, Installing the Docker Manager pages no longer replaces the Docker library used by the system status and web server status pages.
- 20260925-21: Fix: SMTP mail log tracker memory leak on deferred messages.
- 20260925-21: Fix: in Artica SIEM, The statistics database is now restarted automatically when its logging stops working after the disk has been full
- 20260925-21: Fix: in Artica SIEM, The statistics database no longer writes its logs at trace level, which produced hundreds of kilobytes of messages per second.
- 20260925-21: Fix: in Artica SIEM, no longer reports hundreds of thousands of lost statistics buckets at each startup.
- 20260924-17: Fix: in Artica Proxy, A website is no longer dropped from the uncategorized queue when the categorization service fails to answer.
- 20260925-17: Fix: in Artica, The PostgreSQL connection manager no longer leaks a connection pool each time a health check fails.
- 20260925-17: Fix: in Artica Proxy, The nightly Kerberos renewal no longer reports an error on appliances where Kerberos authentication is not configured.
- 20260925-17: Fix: in Zabbix Agent, after a reboot or a sysctl reload the agent could announce the short hostname instead of the FQDN
- 20260925-17: Fix: in Zabbix Agent, the declared Hostname now always comes from the system hostname setting, whatever the kernel reports at that moment.
- 20260925-17: Fix: in Zabbix Agent, the watchdog now restarts the agent within 3 minutes when it runs under a hostname different from the configured one.
- 20260925-17: Fix: in System, the kernel hostname kept switching between the short name and the FQDN, at boot and after every sysctl reload.
- 20260925-17: Fix: in System, the sysctl configuration no longer writes the short hostname, and changing the hostname now sets the FQDN in the kernel.
- 20260925-17: Fix: in System, existing appliances are repaired automatically.
- 20260924-19: Fix: in Artica SMTP, The mail log tracker kept every retry of a deferred message in memory for up to 5 days;
- 20260924-19: Fix: in Artica SMTP, Repeated delivery retries of a message now collapse into a single timeline entry with a retry count.
- 20260924-19: Fix: in Artica SMTP, A message's timeline is now capped at 64 events, keeping the first 16 and the most recent ones.
- 20260924-15: Fix: in Artica SMTP, Saving a deferred message's history now writes a few rows instead of hundreds per message.
- 20260924-03: Add: TCP BBR feature on HaCluster service
- 20260924-03: Add: TCP BBR feature on proxy service
- 20260924-03: Fix TLS issue for smtpd CA file in Artica SMTP
- 20260924-01: Fix: The reputation service could lock itself up for good: leaving 34,000 stuck tasks, 1 GB of memory and 6 CPU cores busy for four days on one appliance.
- 20260924-01: Fix: One saturated database pool no longer blocks every other database of the Artica REST service
- 20260924-01: Fix: Reputation rules are now kept in memory and reloaded every 5 minutes and after every change
- 20260924-01: Fix: The reputation verdict cache was a single value rewritten on every request, which failed about 15,000 times a day
- 20260924-01: Fix: Reputation checks are now limited to one at a time per rule and address and 64 overall;
- 20260924-01: Fix: The Artica REST API now caps simultaneous connections at 4,096 per listener and closes idle ones after 120 seconds,
- 20260924-01: Add: The Artica REST service now watches its own task count: it saves a diagnostic dump above 1,500 tasks
- 20260924-01: Add: The support package now includes the Artica REST service's stuck-task dumps.
- 20260924-01: Add: New REST API /reputations/admin/* (20 routes) to manage reputation rules, groups and lists.
- 20260924-01: Fix: The reputation rules page no longer writes the database directly
- 20260924-01: Fix: The reputation rules page now loads its rule list in one request instead of one database query per rule.
- 20260924-01: Fix: The reputation rule form never saved its firewall, ports and ban-duration fields, and the group up/down buttons had no effect.
- 20260924-01: Fix: Names and URLs typed in the reputation rules page are no longer inserted unescaped into database queries or into the page.
- 20260924-01: Fix: A reverse-proxy site whose reputation rule is disabled or deleted no longer calls the reputation service on every request
- 20260924-01: Fix: Dangerous Paths banned ordinary visitors of WordPress sites with /wp-content/ and /wp-content/uploads/.
- 20260924-01: Add: The Dangerous Paths status now lists the rules neutralized by default on all sites.
- 20260923-00: Fix: misconfigurations in Active Directory acls groups.
- 20260922-18: Fix: Missing button in system tasks.
- 20260922-14: Fix: Memory leak on Proxy acls cache.
- 20260917-17: Fix: The daemon ignored SIGTERM and never ran its shutdown sequence; every stop ended in a kill.
- 20260917-17: Fix: Checking whether a firewall ipset exists no longer reads every entry of every ipset (320 MB per call, twice every 10 minutes)
- 20260917-17: Fix: Proxy memory is now measured from the Proxy processes only, instead of reading the memory map of every process on the machine.
- 20260917-17: Fix: Proxy memory was overstated: dirty memory was counted twice on kernels 5.14 and later.
- 20260917-17: Fix: The process tree is now read once per pass instead of once per service and per process.
- 20260917-17: Fix: Docker failed to start on sysvinit systems (cgroups not mounted) and the failure was reported as a success.
- 20260917-17: Fix: Docker is now reported as started only once it answers, and a failed start raises a notification once per hour instead of retrying silently.
- 20260917-16: Fix: Two identical antivirus detections in the same second were merged into a single SIEM event.
- 20260918-16: Fix: PostgreSQL work_mem could not be set below 50 MB — a clamp forced any lower value back to 200 MB
- 20260918-16: Fix: PostgreSQL effective_cache_size defaulted to 256 MB whatever the machine's size, making the query planner avoid index scans; it now defaults to 40% of RAM.
- 20260918-16: Fix: Writing to the filtering engine's in-memory cache concatenated values instead of replacing them.
- 20260918-16: Fix: The filtering engine's cache counters doubled the length of their value on every call and crashed the service when the key was missing.
- 20260918-16: Fix: Category clients synchronized from a categories server stored every category without its name; the "Categories" column of the categories page was empty.
- 20260918-16: Fix: PostgreSQL work_mem could not be set below 50 MB; any lower value was silently replaced by 200 MB (70 GB worst case with 350 connections).
- 20260918-16: Fix: PostgreSQL work_mem now defaults to 25% of RAM shared across connections (4 to 64 MB), and effective_cache_size to 40% of RAM instead of a fixed 256 MB.
- 20260918-15: Fix: "Purge obsolete packages" left old kernels installed (the previous kernel and any kernel marked manual), keeping about 600 CVEs reported by scanners
- 20260918-15: Fix: "Update softwares packages" marked every upgraded package as manually installed, so new kernels could never be removed automatically.
- 20260917-15: Feature: Antivirus (eCAP ClamAV) detections are now sent to the SIEM as WebFiltering events.
- 20260918-14: Fix: The uncategorized websites queue never drained: every pass resolved again the domains already queued or already categorized
- 20260918-14: Fix: The uncategorized websites queue is now re-checked in full at each pass (within 10 minutes) instead of 500 domains every 2 hours
- 20260918-14: Fix: Uncategorized websites are now submitted to the Artica cloud in batches of up to 5,000 per run, only once re-checked, instead of the same 100 domains.
- 20260918-14: Fix: Log rotation left every compressed copy behind, uncompressed: 248 files and 17.7 GB piled up in five days on one appliance
- 20260918-14: Fix: The interface watchdog ran a full `nginx -T` every minute — 0.40 s and 112 MB of peak memory, 1,440 times a day; it now runs only when the listen directives on disk change, or every 30 minutes, and keeps running every minute while a mismatch lasts.
- 20260918-14: Fix: The nightly master replacement waited 10 seconds for the old master to exit while nginx allows its workers 30 seconds to drain, so three nights out of fourteen were reported as "hot restart incomplete" although the replacement had succeeded; the wait now follows the configured drain time plus a margin.
- 20260918-14: Fix: WAF report ingestion was abandoned every 10 minutes with "driver: bad connection" — 3,401 times on one appliance — although PostgreSQL was answering normally; the entry check now reconnects instead of giving up.
- 20260918-14: Fix: The PostgreSQL pool kept connections idle for 5 minutes while PgBouncer closes them after 60 seconds, so every task spaced by more than a minute was handed a dead connection; connections through PgBouncer now expire after 30 seconds.
- 20260918-13: Fix: The console answered "Error Connecting to the REST API server 7" on the greylist page after every milter restart
- 20260918-13: Fix: Several passes over the uncategorized websites file could run at the same time, resolving the same domains again and truncating the file under each other.
- 20260918-13: Fix: Importing an uncategorized websites export no longer decompresses without limit (gzip bomb); the import is capped at 64 MB decompressed and fully rolled back on error.
- 20260918-13: Fix: The system metrics database kept one table file open per daemon restart (766 open files for 3.2 MB of data); it is now rebuilt at startup beyond 32 tables.
- 20260918-13: Fix: System metrics reserved 83 MB of memory for a 3.2 MB database.
- 20260918-13: Fix: The daemon restarted itself every 18 to 30 minutes
- 20260918-13: Fix: The uncategorized websites file was loaded entirely in memory (152 MB for a 97 MB file); it is now read line by line.
- 20260918-13: Fix: Converting a category ID to its name rebuilt a 240-entry table on every call, the daemon's largest memory allocator.
- 20260918-13: Fix: The system-metrics database accumulated one file per daemon start and never merged them
- 20260918-13: Fix: The system-metrics database reserved 83 MB of memory for 3.2 MB of data; it now uses the same 4 MB write buffer as the other metric stores.
- 20260918-13: Fix: The daemon was restarted by its own memory watchdog every 18 to 30 minutes because nothing capped the heap
- 20260918-13: Fix: The uncategorized-domains file is now read line by line instead of loaded whole; a 97 MB file held 152 MB of memory for the entire import.
- 20260918-13: Fix: The category-name table was rebuilt on every single lookup, making it the daemon's largest source of memory allocation — 3 GB in 20 minutes.
- 20260918-12: Fix: Each domain categorization opened a new connection to GoShield and never released it.
- 20260918-11: Add: New setting to keep the appliance's own DNS lookups out of /var/log/dns-queries.log
- 20260918-11: Add: The DNS collector status now reports how many events were counted but deliberately kept out of the log file.
- 20260918-11: Add: New setting : DNS queries made by the appliance itself (loopback) are no longer written to dns-queries.log by default (13.6 GB per day observed, 99.8% loopback).
- 20260918-11: Add: A pending greylist entry from a public IP gets an "Accept" button that permanently allowlists the /32 in the instance's greylisting rule
- 20260918-09: Add: New console page (milter sub-menu): lists the greylisting entries with their state (pending, accepted, authenticated, expired), attempts, retention
- 20260918-09: Add: A greylist entry can be edited in a modal (state and retention in hours from now) and deleted with confirmation;
- 20260918-09: Add: Milter API routes /greylisting/entries (search, state, paging, total) and GET/POST/DELETE /greylisting/entries/{id} for the console
- 20260918-01: Fix: Every greylisted message produced two smtplog rows, doubling the refusal statistic
- 20260918-01: Fix: The greylisting decision journal had been silent for six days: the milter's syslog writer cached a failed connection to /dev/log for the life of the process.
- 20260918-00: Fix: The SIEM had no GeoIP database at all: the mirror index publishes "date" as unix seconds and the decoder expected a string, so every sync failed before downloading anything.
- 20260917-17: Fix: The daemon ignored SIGTERM and never ran its shutdown sequence; every stop ended in a kill.
- 20260917-17: Fix: Checking whether a firewall ipset exists no longer reads every entry of every ipset (320 MB per call, twice every 10 minutes)
- 20260917-17: Fix: Proxy memory is now measured from the Proxy processes only, instead of reading the memory map of every process on the machine.
- 20260917-17: Fix: Proxy memory was overstated: dirty memory was counted twice on kernels 5.14 and later.
- 20260917-17: Fix: The process tree is now read once per pass instead of once per service and per process.
- 20260917-16: Fix: Two identical antivirus detections in the same second were merged into a single SIEM event.
- 20260917-15: Add: Antivirus detections (eCAP/ClamAV) are sent to the SIEM as Web Filtering events, under the "antivirus" category, with the signature name.
- 20260917-15: Fix: The proxy real-time page queried the category API with a full URL, which always failed.
- 20260917-15: Fix: The 3,666 fixed domain categories of categories.org were never used by the proxy real-time page.
- 20260917-14: Fix: A URL longer than 1 KB logged by the antivirus killed a Proxy worker (buffer overflow in the eCAP adapter).
- 20260917-14: Add: The eCAP antivirus adapter is now compiled from source by the Compilator and shipped in the Proxy package.
- 20260917-13: Fix: Load-balancer health and agent checks were never started on servers added at runtime; the load balancer routed traffic with no failure detection.
- 20260917-13: Fix: A failed read of the load balancer database produced an empty configuration (node disabled, weight 0, certificate lost).
- 20260917-13: Fix: Truncating an oversized cache.log no longer reloads proxy server.
- 20260916-18: Add: Possibility to purge old Debian packages trough the Web Console.
- 20260916-18: Fix: Remove diffie-hellman-group14-sha1 in OpenSSH SSH key-exchange algorithms
- 20260916-18: Fix: FTP protocol is allways allowed by default in the Artica proxy - new option to enable it.
- 20260916-12: Fix categories tempfiles download from the category server are not cleaned
- 20260916-01: Add: Watchdog for proxy service for Collapsed forwarding queue overflow
- 20260915-19: Redesign: Proxy Multi-core section
- 20260915-19: Fix: Unable to start the Fortigate feature in Proxy
- 20260915-19: Fix: Unspecified GSS failure. Minor code may provide more information. Permission denied on Artica Proxy → caused by CIS Hardening
- 20260915-19: Fix: NTP Service (Chrony): reinstall did NOT produce a matching systemd
- 20260915-19: Fix: Artica restarts when the Proxy session status is more than 32MB
- 20260915-19: Fix: Internet access error via proxy — Code 503 / ERR_CONNECT_FAIL 110 on the notifications bell when the defined outgoing address is wrong
- 20260914-16: Fix: Unable to install the OpenVPN server
- 20260914-16: Redesign: The proxy authentication whitelists
- 20260914-16: Add: Proxy accesses Realtime monitor in the SIEM web console.
- 20260914-02: Fix: Sometimes, Artica is unable to extend partitions.
- 20260914-02: Fix: Support for wildcard characters in proxy authentication whitelists.