Release notes Tesorion Immunity

Immunity 2026.2 contains several new functionalities as well as updates and improvements that are not externally visible.

Principal new functionalities and changes

• RADIUS Events: Found under Insight; this feature allows one to follow RADIUS; rather than just successful session in the Trace, you will also be able to find Access-Rejects and the reason for rejecting.
• LAN Events: A similar feature to RADIUS Events, this will allow you to track changes to LAN ports and switches.
• Pause managed hardware: It is now possible to pause management by Immunity on Network hardware, to accommodate for instance software/firmware-upgrades on that hardware or other maintenances.
• The underlying database system (PostgreSQL) has been updated to version 18.

Other new features

• The device details page has been rearranged to accommodate for blocks of RADIUS/LAN events pertinent to that device.

Hardware support

• Siemens Scalance X200 Managed series switches are now supported.
• Fortinet FortiSwitch 124G en 148F series are now supported.
• Aruba CX6300 series switches are now also supported.
• An adjustment has been made to the Aruba CX-driver; ports in a Location where “Wired 802.1X” is NOT Allowed, will be switched to port-security from MAC-RADIUS for more resilient port-sessions for attached “silent devices”, which would lose their session due to inactivity on the port.

As usual, there are also several minor improvements and bugfixes that are not explicitly listed.

Immunity 2026.1 contains several new functionalities as well as updates and improvements that are not externally visible.

Principal new functionalities and changes

• ACME support for certificates: after a one-time configuration SSL certificates for Immunity can be automatically renewed and replaced.
• Export and import of switchports: to aid in switch migration the NAC state (e.g. Managed, Unmanaged, Never manage or Disabled (manually) can be exported from the “old” switch and imported to the “new” switch.
• The underlying OS (Debian) has been updated to Trixie (13).

Other new features

• When closing an incident, you can now enter a closing remark (this can be made obligatory).
• Under “Network Hardware > Switch ports” there is now also a tab showing all Managed ports.
• In the results of a Trace on username/account there is now a count of active session for that account.
• Enduser-languages added: French, German, Portuguese and Spanish. Enabling (one of) these languages is done by our Servicedesk.

Hardware support

• LAN-802.1X is now supported on Meraki MS Cloud managed series switches.
• Fortinet FortiSwitch 448 series are now supported.
• Some “B”-hardware revisions of Aruba CX6200 series switches are now also supported.

As usual, there are also several minor improvements and bugfixes that are not explicitly listed.

Immunity 2025.2 contains several new functionalities as well as updates and improvements that are not externally visible.

Principal new functionalities and changes

• When using the “reception”-pages, for creating activation codes outside of the regular Immunity web interface, it is now possible to allow bulk-creation of codes
• For several components of Immunity, where an authentication against Azure/Entra/OpenID take place, multiple tenants can now be used
• It is possible to have Immunity use the Microsoft Graph API / Exchange Online to send mail

Points of attention

• You might note a slight change in the looks of the Immunity webinterface due to a migration to Bootstrap 5, which involved quite some fixes by our frontend-developer.

Hardware support

• Netgear M4350-series switches are now supported
• TP-Link Omada (WLAN) is now supported
• Meraki MS-series switches are now supported
• Alcatel OmniSwitch 6360-series and 6560-series switches are now supported
• Support for several Fortigate FGT-models (WLAN) has been added
• Ubiquiti Unifi Access Points are now supported
• LAN-802.1X is now supported on Juniper EX 3400, EX 4100 and EX 4400 series switches

As usual, there are also several minor improvementsand bugfixes that are not explicitly listed.

‍

Immunity 2025.1 contains several new functionalities as well as updates and improvements that are not externally visible.

Principal new functionalities and changes

• Extended support for SurfWired where MAC-based authentications can also be checked against Surf’sRADIUS-servers in the normal MAC-based authentication flow
• Optimizations in the SNMP-daemon to better deal with simultaneous triggers to update trunk-ports (for connected Fat access points or Local LAN switches) and to better deal with unreachable/unresponsive devices upon startup.
• Automatic Host group selection, based on Azure group membership, when using Azure as an authentication backend on registration pages for end users.
• The underlying database system (PostgreSQL) has been updated to version 17.

Points of attention

• If you are receiving Syslog from the Immunity RADIUS-process, and are parsing that, then note that the field “Q-Qnid”, which holds the Incident ID is client has an active incident, has been renamed to “Q-Incident”.

Hardware support

• Aruba AP600-series access points are now supported.
• Aruba 9000-series Wireless Lan Controllers are now supported.
• Cambium XV2-23T access point is now supported.
• Juniper EX 4400-series switches are now supported.
• TP-Link SG3452P switch is now supported.

As usual, there are also several minor improvements and bugfixes that are not explicitly listed.