🔔 Release Announcement – SafeLine WAF v9.4.1 | CyberServal

Added

Allowlist and denylist detection logs can now be filtered by Rule ID, making it easier to locate the corresponding logs directly from a specific rule.
Abnormal data such as blocked requests, rate limiting, Anti-bot, and Auth in Statistics support one-click navigation to the corresponding lists for further handling.
Applications support configuring the upstream health check interval separately (10–3600 seconds). When health checks are disabled, the existing interval is retained.

SSL compliance now enables only TLS 1.2 / TLS 1.3 by default. After upgrading, the global SSL protocols will be changed to these two versions. Application-level custom configurations are the same. If TLS 1.0 / TLS 1.1 is still required, re-enable them in the global SSL compliance settings. A warning about weak protocol risks will be displayed when saving.
Added definitions for the Semantic Analysis detection modes, including Audit Mode, Balance Mode, and Strict Mode.
Upstream health checks are now executed concurrently between applications. A failure or delay in one application will no longer block other applications. A health check will be performed immediately after saving the configuration, with a 30-second backoff retry after a failure.
Enhanced the randomness of management console session keys to reduce the risk of session forgery.
Updated the geolocation database.

Fixed an issue where ACME HTTP-01 certificate issuance and automatic renewal failed when Redirect HTTP to HTTPS was enabled.
Fixed an issue where applying a new license could get stuck when the previous license was expired or invalid.
Fixed an issue where the synchronization time was not displayed and synchronization could not be completed properly during an empty full synchronization between Master and Slave nodes.
Fixed an issue where the Anti-bot Challenge service could exit unexpectedly during an upgrade, causing the update to fail.
Fixed an issue where Custom Rule → Detail display could overflow in narrow windows.
Fixed an issue where rate-limit alerts could not be sent externally when the notification scope was set to All applications.

If you are upgrading from v9.2.7 or earlier, please carefully review the v9.2.7 changelog and manually migrate the relevant Nginx configuration: