We’re pleased to announce a new version of Imunify360. Version 6.8 is now available. The following features are new in the v.6.8 release:

• Smarter Cloud Assisted Scan
  In version 6.8, we advanced the Cloud Assisted Scan with the accumulation of data about the files examined by the malware scanner. This wealth of information will benefit all of the servers that run Imunify products. 
  
  
• Rocky Linux 8 support
  Our Imunify products will now support the Rocky Linux 8 operating system. 
  
  
• Malware scanner speed increase
  We’ve increased the malware scanner performance from Imunify360 version 6.7. Upgrading to Imunify360 6.8 will make your malware scan run about 18% faster.
  
  
• Real-time scanner improvements:
  We are adding support for the File Change API watcher for CloudLinux 7 Hybrid and CloudLinux 8 to boost the performance of the Real-time scanner.
  We’re also adding support for mount namespaces for fanotify watcher to improve real-time event collection.

Smarter Cloud Assisted Scan

Imunify360 6.8 marks an imperative improvement in Cloud Assisted Scanning. Information on the scanned files will be processed and analyzed holistically, then used to pinpoint malicious files across the servers running Imunify products. Due to this change, an extensive increase in the number of known files for Cloud Assisted Scan will happen, and it will positively affect scan speed of scheduled and user scans. The benefit of the new logic can reach up to 30% in scan speed improvement.

Make sure that Cloud Assisted Scan is enabled to use all advantages of this feature. This can be done through CLI - the command to switch it on is:

imunify360-agent config update '{"MALWARE_SCANNING": {"cloud_assisted_scan": true}}’

And to switch it off:

imunify360-agent config update '{"MALWARE_SCANNING": {"cloud_assisted_scan": false}}’

Rocky Linux 8 support

Version 6.8 will  extend the list of operating systems supported by our products to include Rocky Linux 8. This change will provide even broader choice when deciding on a platform that suits, at times, very individual needs that our customers have to work with. 

We are striving to make sure that using Imunify360 to provide exemplary security to your system is easy and convenient, no matter what operating system you prefer to run. The panels supported are: cPanel and Plesk, a standalone installation option is also available.

To install Imunify360 on Rocky Linux 8, please follow the installation instructions in our documentation.   

More speed for malware scanner

In this release we are further improving the changes we made for the malware scanner in version 6.7. Now during the scan, the Malware Scanner will glue together thousands of complex regular expressions to become a highly optimized set. This will minimize the number of checks and shorten the scan time. The improvement of the scan speed will be 18% on average (according to internal tests).

Again, for this improvement to start working there is no need to tune or enable it – the scanner will just start working faster as soon as the server is updated to version 6.8.

Real-time scanner improvements

We are constantly seeking new ideas to make our security products run better and faster. In Imunify360 version 6.8, a couple of interconnected enhancements to the Real-time are introduced. 

Extend File Change API coverage

The performance of the Real-time scanner on CloudLinux 7 Hybrid and CloudLinux 8 will be increased with a File Change API, an even more effective way of collecting file events. This will save kernel usage and user memory, and it will allow the Real-time scanner to efficiently track changes in the file system, in comparison with resource-greedy inotify-based event tracking.

Mount namespaces for fanotify watcher

We added the support for mount namespaces as a smart way of collecting file events. This change will prove to be useful, whenever there are several mount namespaces present in the system at the same time. 

For example, a setup where PHP-FPM runs as a systemd service with `PrivateTmp` systemd unit option set to `true` (which is, for example, used by default in PHP-FPM on cPanel), PHP-FPM processes run in a separate mount namespace.

Introducing this change will allow us to collect file events coming from such processes and their mount namespaces, which, in turn, will work towards improved security.

Internal records

Please see the detailed description of the product changes we made in version 6.8 through our publicly available changelog for Imunify360.

Stay in touch

Please give our product team feedback on this version 6.8 release. Share your ideas and feature requests through feedback@imunify360.com or via our feedback form.

If you encounter any problems with this release, please send a comment or request to our Imunify support team via the Support Portal.

How to install

To install the new Imunify360 v.6.8, please follow the instructions in the documentation.

How to upgrade

If you want to upgrade to the new Imunify360 version 6.8 right now, you can use the updated script by running the following commands:

wget https://repo.imunify360.cloudlinux.com/defence360/imunify-force-update.sh -O imunify-force-update.sh
bash imunify-force-update.sh

For the regular and safe update to Imunify360 version 6.8 with a gradual rollout.

CentOS/CloudLinux systems:

yum update imunify360-firewall

Ubuntu 16.04, 18.04, and 20.04 systems:

apt-get update
apt-get install --only-upgrade imunify360-firewall

Debian 9 and 10 systems:

apt-get update
apt-get install --only-upgrade imunify360-firewall