SafeLine-CE 9.4.1

Added

• Allowlist and denylist detection logs can now be filtered by Rule ID, making it easier to locate the corresponding logs directly from a specific rule.
• Abnormal data such as blocked requests, rate limiting, Anti-bot, and Auth in Statistics support one-click navigation to the corresponding lists for further handling.
• Applications support configuring the upstream health check interval separately (10–3600 seconds). When health checks are disabled, the existing interval is retained.

Improvements

• SSL compliance now enables only TLS 1.2 / TLS 1.3 by default. After upgrading, the global SSL protocols will be changed to these two versions. Application-level custom configurations are the same. If TLS 1.0 / TLS 1.1 is still required, re-enable them in the global SSL compliance settings. A warning about weak protocol risks will be displayed when saving.
• Add definitions for the Semantic Analysis detection modes including Audit Mode, Balance Mode, Strict Mode.
• Upstream health checks are now executed concurrently between applications. A failure or delay in one application will no longer block other applications. A health check will be performed immediately after saving the configuration, with a 30-second backoff retry after a failure.
• Enhanced the randomness of management console session keys to reduce the risk of session forgery.
• Updated the geolocation database.

Fixes

• Fixed an issue where ACME HTTP-01 certificate issuance and automatic renewal failed when Redirect HTTP to HTTPS was enabled.
• Fixed an issue where applying a new license could get stuck when the previous license was expired or invalid.
• Fixed an issue where the synchronization time was not displayed and synchronization could not be completed properly during an empty full synchronization between Master and Slave nodes.
• Fixed an issue where the Anti-bot Challenge service could exit unexpectedly during an upgrade, causing the update to fail.
• Fixed an issue where Custom Rule -> Detail display could overflow in narrow windows.
• Fixed an issue where rate-limit alerts could not be sent externally when the notification scope was set to All applications.