Unimus forum

Last year we wrote our first report on the security of Unimus codebase and releases. We have been putting a lot of focus on security in Unimus over the last year, and today we published a new "state of Unimus security" report on our blog summarizing the work done on security and introducin...

Unimus & Core version 2.2.3 are being released today! This is a minor feature release with heavy focus on security and bug fixing. This release fixes a single major security issue discovered in a recent Unimus penetration test. The pentest report will be posted publicly on https://blog.unimus.ne...

Just a small update that support for Opengear is now available starting with Unimus 2.2.3.

In planning some more complex operations in Mass Config Pushes we've run into scenarios where having an option to ignore failed command inputs would be very helpful. Currently any failed command will cause the script to fail or at least show invalid command in the device output where sometimes a sc...

The problem is definitly with the: :set PkgVer \"\$[/system package get system version]\"\r\n How I can correctly escape $ here in Unimus 2.2.2? Using %24 is not working :( Adding an additional "\" should work. Alternatively, update to 2.2.3-Beta3 and it should work without any ...

Ah, I was under impression (due to your earlier reply that I quoted), that Unimus sent "monitor stop". I am currently running 2.2.0-Beta3. I will find a device where I can reproduce the error and send you the logs. Actually you are right - I just checked our JunOS driver and we currently ...

As another note, I would also recommend testing with 2.2.3-Beta3. We fixed an edge-case where the "$" would need to be escaped even when it was not a part of an Unimus variable - which could break Tik scripts in specific scenarios. You might be running into that issue.

Hi Tomas, I have tried logging in to a device that routinely fails backup due to terminal syslog output (as confirmed by debug logs). It seems that the "monitor stop" command stops any actively started log monitoring, but ESC-q pauses all terminal syslog output. A lot of our devices have ...

Hi again, Thank for the quick reply, nice to know it's being worked on! Edit: please see later post for updates As a small update - the "ESC+Q" handling is currently implemented. Could you please test if that doesn't stop logging on your device (just log in to the device manually and sent...

Hi, Sadly this comes out to development resources (time) limitations. Due to massive amount of time spent on performance improvements, heavy focus on security, the new APIv3 and the new SSH client library (which was quite necessary since the lack of newer crypto algos in our old one was really start...