This article provides an overview of new features and improvements in the Fortanix Key Insight 25.01 release.
1.0 New Features
Fortanix Key Insight now supports overly permissive usage and management keys for an Azure cloud connection (JIRA: KI-933).
Added Overly permissive keys [Usage] and Overly permissive keys [Management] in the Top Security Issues section of the Azure assessment report. When you click them, you will be redirected to the Keys list page, where filters will be automatically applied to display only overly permissive keys in the list.
On the Keys page, a new vulnerability type Overly permissive keys is added. Using this, you can filter the overly permissive usage and management keys.
For more details, refer to the following:
Added support to the Fortanix Key Insight on-premises connection to dynamically read and customize Fortanix Data Security Manager (DSM) cryptographic policies (JIRA: KI-2077).
You can now add the Key Insight Policy during the onboarding of on-premises connections and apply it to key scans and assessments.
The Fortanix Key Insight policies can be managed through Policy Center, where you can import policies from DSM, create user-defined policies based on the system's default policy, and duplicate, edit, or delete them as needed.
For more details, refer to the Fortanix Key Insight Getting Started Guide with On-Premises Connection.
Added support to mark cryptographic keys with specific algorithms and key sizes as non-compliant on on-premises connections, based on the NIST 800-57 standard (JIRA: KI-1260).
You can see a vulnerability message on the Keys page for non-compliant keys.
For more details, refer to Fortanix Key Insight - On-premises User Interface Components for Databases.
Added support for scanning keys in the following services within an Azure connection:
Azure Kubernetes Service (AKS) (JIRA: KI-1262)
Azure Container Instances (ACI) (JIRA: KI-1757)
Cosmos DB (JIRA: KI-1266)
For more details, refer to the following:
Added support to view key details, including key properties, rotation information, associated violations, and service/resources mappings, in the list view for both cloud (AWS and Azure) and on-premises keys (JIRA: KI-1755).
For more details, refer to the following:
Added a new Services GRAPH view for AWS and Azure cloud connections in Fortanix Key Insight (JIRA: KI-1752).
On the AWS Services GRAPH page, you can now group services by type, violation type, as well as by accounts and regions. Within each group, filtering services is possible using various criteria.
On the Azure Services GRAPH page, you can now group services by type, violation type, as well as by subscriptions and regions. Within each group, filtering services are possible using various criteria.
You can now view the service details, including service properties, associated keys, and violation details, in the AWS and Azure Services page list view.
For more details, refer to the following:
2.0 Improvements
Improved the overall user experience by optimizing text and ensuring consistent formatting across Fortanix Key Insight (JIRA: KI-1711).
For more details, refer to the following:Updated the Service Violations section in the Assessment page for Azure and AWS connections to display the list of violations associated with each service (JIRA: KI-1752).
You can now select any service to view the top 10 violations.
Clicking on any violation will take you to the corresponding service list with the violation filter applied.
For more details, refer to the following:
3.0 Installation
To install the latest Fortanix Key Insight on-premises scanner package, click here.