### What's new - Custom Rules "JA4 Fingerprint" now supports "equals" and "not equals" matching modes - Traffic Analysis - Added views (PV) statistics - Separated 4xx errors and 4xx blocked statistics - [Pro] Response status now differentiates between WAF responses and origin server responses - [Lite] JA4 fingerprint intelligence supports upgrade to enhanced intelligence - [Pro] Data dashboard added dark theme - Optimized personal edition traffic analysis page styling - Improved site access log loading speed - Optimized rate limiting ban logic ### Fix - Fixed HTTPS auto-redirect failure with proxy_protocol - Fixed abnormal clearing of site access logs - Fixed rate limiting alerts not filtering sites correctly - Fixed slave node alerts not syncing properly

### What's new - Support for response detection - Custom rules now include new matching conditions: "Response Body", "Full HTTP Response Headers", and "Full HTTP Request Headers" - Rate limiting supports independent policies for different URL paths, enabling interface-level granular traffic control - Statistics for blocked counts now include blacklist quantity statistics - Lite application limit increased to 20 - PRO AUTH user seats increased to 5,000 ### Fix - Fixed occasional aggregation failures in attack events - Fixed form validation errors in custom rules - Fixed XSS injection issue in Custom HTML color schemes ### Semantic Analysis Engine Improvements #### Optimizations - CMD Inj, SQL Inj, XSS, File Uploading, File Including, Java Code Inj, Java Unserialize and PHP Code Inj detection logic - JSON, XML, Base64 and Hex decoding logic - HTTP protocol parsing logic #### Fixes - Detection bypass issues in certain malformed HTTP request scenarios #### Refactoring - SSRF detection module to support detection of more bypass techniques

#### Improvements * Supports JA4 fingerprint recognition, you can view attacker JA4 fingerprints in attack detai * Added official Malicious JA4 Fingerprint intelligence, with built-in Malicious JA4 Fingerprint intelligence Deny Rule by default * Pro edition supports editing auth blocking page title * Pro edition supports modifying SSO page icon and title, with support for light theme and dark theme selection * Pro edition supports manual switching of local Anti-Bot Challenge * SSO supports adding multiple listening ports, with support for Redirect HTTP to HTTPS configuration * Auth login page supports Enter key login * Custom rule parameter optimization * "Host" matching method adds "Regex Match", "Contains", and "Does Not Contain" * "Applications" matching method supports group display when Group Management is enabled * "Source IP" Geo location selection supports display by continent * Notifications supports configuring Allow & Deny type #### Fix * Fixed an issue where console cert could not be renewed properly * Fixed an issue where slave nodes could not exit normally * Fixed an issue where custom rule forms occasionally had validation errors

### What's new * IPv6 address location identification * Pro adds application-level data statistics, which needs to be manually enabled in application details. May increase system load, recommended to enable as needed. * Original [Attack Alert] upgraded to [Notifications] * Supports proxy access configuration * Event types expanded to include Anti-Bot, Auth, Waiting Room, and System notifications * Attack detection, rate limiting, and Anti-Bot types support configurable notification frequency (options: 10 minutes, 1 hour, 2 hours) * Supports selection of application range, allowing notifications for selected applications only * Attack detection type supports sending unblocked log notifications * Rate limiting type supports sending Error Limiting events * AUTH supports configuring mandatory 2FA (TOTP) when users access applications * Improved display of blacklist and whitelist names when exporting attack logs

### What's new - Pro Edition Auth now supports LDAP authentication, enabling unified user management and access control. Click to view [feature introduction](/reference/articles/Auth-LDAP). - Auth supports passing authentication information to application servers. Click to view [feature introduction](/tutorials/advanced/Auth). - Auth supports direct application access after authentication, without requiring approval. - Support for configuring general proxy settings, applicable to various system functions requiring proxy support. Currently, third-party login for Auth supports proxy configuration. - Personal/Lite Edition Auth users increased to 20, Pro Edition seats increased to 200. - Master-slave configuration synchronization logic optimized, resolving issues with delayed data synchronization in certain situations. ### Fix - Fixed the issue where plugins like APISIX couldn't correctly obtain the source IP when integrated. - Fixed the issue where the auth page would remain in a continuous loading state under specific circumstances. - Fixed the issue where Rate Limiting error rules for rate limiting were not taking effect.

### What's new - Auth supports OIDC integration, enabling unified user management and access control. Click to view feature introduction - Pro version enables [Group Management] feature in "Applications - Advanced" - Supports application grouping and drag-and-drop sorting - Allows specifying groups when adding applications - Pro version increases Auth seats to 100 - Applications optimized with card-style interface - Original application "Edit" button now displays basic info edit instead of application edit; application edit can be accessed from details page - Supports NTLM authorization authentication ### Fix - Fixed issue where scanners were not properly disabled in audited mode - Fixed issue where specific paths would not correctly return "website does not exist" response - Fixed issue where Anti-Bot incorrectly displayed IP filtering conditions when switching verification methods - Optimized UA display in data statistics

### Fix * Fixed an issue where the sl-session in the response header contained an extra space. * Minor UI styling improvements.

### What's new __This version involves automatic migration of AUTH-related data. Relevant users are advised to review the data migration rules and decide whether to upgrade at your discretion.__ - Modularization of Anti-Bot Functionality - Personal/Lite version supports viewing the latest 20 logs of Anti-Bot - Supports application-level configuration "Enable Anti-Bot for specific conditions" and custom whitelist conditions for Anti-Bot - Data migration rules - Original Custom Anti-Bot Rules - Rules configured with "Application" parameter will be migrated to specified applications and automatically enable Anti-Bot for those applications with BASIC selected by default - Rules without "Application" parameter will be migrated to apply to all applications and automatically enable Anti-Bot for all applications with BASIC selected by default - No rule migration will occur for applications with Anti-Bot already enabled - Custom Anti-Bot rules will not be migrated if they have been disabled - Slave Node supports viewing the data dashboard ### Fix - Fixed an issue where master-slave configuration could not synchronize rule disabled status - Fixed a style error issue when rate limiting triggers Anti-Bot