Release of WinCollect stand-alone agent V10.1.12

About WinCollect V10.1.12

WinCollect 10.1.12 is available for stand-alone only deployments.

Important: Beginning in V10.1.4, WinCollect now uses a virtual account to increase application security. If you are upgrading from 10.1.3 or lower, refer to the 10.1.4 release notes for upgrade instructions.

• Added support for Mutual TLS (mTLS) for HTTPS destinations.

• Fixed an issue where the originating computer value always sends hostname instead of IP for remote polled/forwarded events (Known Issue: DT393848)
• Fixed a UI issue where the password field is re-encrypted causing credential errors (Known Issue: DT391453)
• Fixed a UI issue in the "Issues" dashboard incorrectly displaying "Currently No Issues" when the total number of issues is greater than ~15 (Known Issue: DT319220)
• Fixed an issue where a source device can be added twice when differing capitalization is used (Known Issue: DT393287)
• Fixed an issue where the Source device maximum retry amount value is ignored. (Known Issue: DT393156)
• Fixed an issue where a Target format of SYSLOG is not recognized as a valid option.  (Known Issue: DT396042)
• Fixed an issue where the Query handle can crash when the agent is unexpectedly restarted.
• Updated OpenSSL third-party library to version 3.2.3
• Updated Curl third-party library to version 8.9.1

• Windows® Server 2022 (including Core)
• Windows® Server 2019 (including Core)
• Windows® Server 2016 (including Core)
• Windows® 10 (most recent)
• Windows® 11 (most recent)
   

IBM® Statement for WinCollect supported versions
Supported software versions for IBM® WinCollect are the latest version (n) and the latest minus one (n-1). Therefore, the two newest versions of WinCollect are the versions that QRadar® support suggests with any support tickets (cases) that are opened. To prevent issues, it is important that you, as an administrator, keep WinCollect deployments updated when new versions are posted to IBM® Fix Central. For questions related to this statement, ask in the WinCollect forum: http://ibm.biz/wincollectforums.
 

Prerequisites for the WinCollect V10.1.12 upgrade

Installation prerequisites

WinCollect 10.0.1 and WinCollect V7.3.0 or greater agents that are in stand-alone mode can be upgraded to WinCollect V10.1.12.

QRadar® version prerequisites
WinCollect V10.1.12 supports QRadar® V7.5.0 or later.

WinCollect version prerequisites

WinCollect V7.3.0 stand-alone is the minimum version required to upgrade to QRadar® V10.x (any patch level).

WinCollect upgrade procedure

For more information about installing or upgrading WinCollect 10, see IBM Documentation.

WinCollect Agent update links for 64-bit and 32-bit downloads:

• Download files for QRadar 7.5
  Full URL: https://www.ibm.com/support/fixcentral/swg/selectFixes?parent=IBM%20Security&product=ibm/Other+software/IBM+Security+QRadar+SIEM&release=7.5.0&platform=Linux&function=fixId&fixids=7.5.0-QRADAR-AGENT_x86_WINCOLLECT-10.1.12-15.msi,7.5.0-QRADAR-AGENT_x64_WINCOLLECT-10.1.12-15.msi&includeSupersedes=0&source=fc

For more information about stand-alone mode, see IBM Documentation.