Release Notes: ImunifyAV(+) v.5.11 beta

AV-beta-release-1

We’re pleased to announce that a new beta version of ImunifyAV, version 5.11, is now available. Learn about more features in Imunify360. The following features are new in the v.5.11 beta release:

Better Hyperscan
After extensive analysis, we are changing the status of the Hyperscan feature. Proven stability led to the removal of its experimental status.
We revised and improved our approach to the generation of the Hyperscan database. The new way is faster and more effective.
We designed the means for Hyperscan technology to be used during real-time scan. This significantly decreases CPU consumption while scanning.
Improved CPU utilization on cleanup
We took complex measures to enhance clean-up capabilities and minimize CPU utilization.

Better Hyperscan

Since Hyperscan's release in Imunify360 version 5.8, we have kept a close eye on its performance. While it was experimental, it did prove to be stable, functioning as expected by providing substantially improved speed. The improvement gained 3-4x times acceleration. Taking this into account we decided to no longer consider it experimental.
From v5.11 and above, Hyperscan is enabled by default for all new installations. The one exception is the low resource usage mode. Users who do not enable it will receive a dashboard recommendation call to enable Hyperscan.
Going forward, the Hyperscan database will be pre-built and delivered with every signature release. We will generate the database on our side and deliver it from the files server. This will allow the Hyperscan feature to become immediately effective after enabling, without any delay for signatures DB compilation. This frees up tons of CPU resources especially when Hyperscan runs on a full set of servers in the fleet.
Hyperscan is now employed as a part of a real-time scanner. The performance boost shown by Hyperscan on scheduled scans was so impressive that its implementation for real-time scans was just a question of time. This brought the challenge of adding new functionality while keeping RAM consumption even. We presented a solution to store an already deserialized Hyperscan database in a memory-mapped file in the system. So when there are two or more simultaneous scans, Hyperscan DB will be loaded into memory only once.

To switch on/off the feature through the UI, tick/untick Enable Hyperscan in Settings → Malware → Enable Hyperscan.

To switch on the feature through the CLI use the following command:

imunify360-agent config update '{"MALWARE_SCANNING": {"hyperscan": true}}'

To switch off the feature through the CLI use the following command:

imunify360-agent config update '{"MALWARE_SCANNING": {"hyperscan": false}}'

Improved CPU utilization on cleanup

This improvement reduces the consumption of server resources, ensuring smoother functioning.

By changing our malware scanner algorithms we are making the scan process smarter.

When a cleanup attempt happens repeatedly without success, it happens no more than four times in 24 hours. This avoids excessive server load and reduces the clutter of messages in the user interface in case of improper server configuration.

As a consequence of introducing this feature, we expect the user experience while working with the product to become better while overall CPU load will be reduced.

Additional information

ImunifyAV v.5.11 includes 7 tasks and 3 bug fixes.

Internal records

Important tasks and issues linked to support tickets:

DEF-17700: AI-Bolit 31.1.1 release
DEF-17694: Fix for unexpected behavior of minidaemon service after removing ImunifyAV from the server
DEF-17623: Fix for malware ignore filters

Stay in touch

Please give our product team feedback on version 5.11 release. Share your ideas and feature requests through feedback@imunify360.com or via our feedback form.

If you encounter any problems with this beta release, please send a comment or request to our Imunify support team via cloudlinux.zendesk.com.

How to install

To install the new ImunifyAV(+) v.5.11 beta, follow the instructions in the documentation.

How to upgrade

To upgrade ImunifyAV(+) on CentOS/CloudLinux systems, run the command:

yum update imunify-antivirus --enablerepo=imunify360-testing

To upgrade ImunifyAV(+) on Ubuntu 16.04, run the following command:

echo 'deb https://repo.imunify360.cloudlinux.com/imunify360/ubuntu-testing/16.04/ xenial main'  > /etc/apt/sources.list.d/imunify360-testing.list
apt-get update
apt-get install --only-upgrade imunify-antivirus

To upgrade ImunifyAV(+) on Ubuntu 18.04, run the following command:

echo 'deb https://repo.imunify360.cloudlinux.com/imunify360/ubuntu-testing/18.04/ bionic main'  > /etc/apt/sources.list.d/imunify360-testing.list
apt-get update
apt-get install --only-upgrade imunify-antivirus

To upgrade ImunifyAV(+) on Ubuntu 20.04, run the following command:

echo 'deb https://repo.imunify360.cloudlinux.com/imunify360/ubuntu-testing/20.04/ focal main'  > /etc/apt/sources.list.d/imunify360-testing.list
apt-get update
apt-get install --only-upgrade imunify-antivirus

To upgrade Imunify360 on Debian 9, run the following command:

echo 'deb https://repo.imunify360.cloudlinux.com/imunify360/debian-testing/9/ stretch main'  > /etc/apt/sources.list.d/imunify360-testing.list
apt-get update
apt-get install --only-upgrade imunify-antivirus

To upgrade Imunify360 on Debian 10, run the following command:

echo 'deb https://repo.imunify360.cloudlinux.com/imunify360/debian-testing/10/ buster main'  > /etc/apt/sources.list.d/imunify360-testing.list
apt-get update
apt-get install --only-upgrade imunify-antivirus