Current release: 5.5.1
Version 5.5.1 of Cequence Defender was released April 28, 2025.
Feature highlights
- Defender now supports Open Telemetry for metrics, logs and traces.
- The request-id header has been added to block responses. When a user is blocked or rate-limited, this information enables admins to check mitigation actions and, in the case of valid activity, respond appropriately.
- Cookie values can now be masked as sensitive data.
- The nginx version has been incremented from 1.22.0 to 1.26.2.
Enabling sensitive data masking for cookie values
To enable sensitive data masking for cookie values, set the value of the ENABLE_COOKIE_MASKING variable to True in the compose YAML file or Kubernetes extraVars.
Resolved Issues
Release 5.5.1
DEF-1675 Need log rotation and archive for otel logs
DEF-1665 Sensitive Data Masking is not happening based on Sensitive Data Expression response body fields
DEF-1664 CQ-Content-Type is not identified correctly; it gets the value from response content-type header
DEF-1661 Sensitive data masking for cookie values
DEF-1654 Fix for issues related to missing IP/FP datasets.
DEF-1652 Mitigation is not happening consistently on modified policies, and later nginx restarts
DEF-1629 Fixes issue with non-gzip encoded bodies
DEF-1615 Fixes nginx crash when clearing policies
DEF-1571 Updates nginx version to 1.26.2 from 1.22.0
DEF-1557 request-id in block responses
DEF-1553 SSL Fingerprinting support
DEF-1294 OTEL support for metrics, logs and traces
Release 5.5.0
There was no 5.5.0 release of Cequence Defender.
Upgrade considerations
Upgrading from any 5.3.x release of Cequence Defender to the 5.5.1 release is a standard Helm chart upgrade and requires no additional steps. Update the path to the image or update the Kubernetes image tag.
Image locations for on-premises deployments
Your Cequence team provides you with Gitlab credentials for the Cequence image registry. Before downloading Docker images, establish credentials by running the following commands:
export GITLAB_USER = <user provided by cequence>
export GITLAB_PASS = <token provided by cequence>
docker login registry.gitlab.com -u $GITLAB_USER -p $GITLAB_PASS
To pull an image from the registry, run the following Docker command.
docker pull <image repository URL>
| Package | Location | Version | State | MD5 Checksum |
| Defender Docker image x86 |
s3://xangent-packages/build/cq-defender/releases/5.5.1/defender-docker/x86_64/defender-latest.tar.gz |
5.5 | Released | |
| Defender Docker image arch64 | s3://xangent-packages/build/cq-defender/releases/5.5.1/defender-docker/aarch64/defender-latest.tar.gz | 5.5 | Released | |
| Helm chart | https://cequence.gitlab.io/helm-charts/ | 5.5 | Released | |
| Image repository | registry.gitlab.com/cequence/releases/defender:5.5.1 | 5.5 | Released |
Compatibility
| Defender (ARM and X86) | Cequence UAP platform | Compatible |
| 5.5.1 | 7.x releases prior to 7.5 | No |
| 5.5.1 | 7.5 and later releases | Yes |