What's New in Nullafi Shield v3.9.2

v3.9.2Released: June 26, 2026 · Container image: public.ecr.aws/nullafi/shield:v3.9.2

Overview

0

New Features
6

Improvements
3

Bug Fixes
0

Security Fixes

Version 3.9.2 delivers targeted enhancements to identity integration, policy management, and activity reporting, alongside quality and reliability fixes. Administrators gain more granular control over LDAP directory assignments, clearer rule ordering, and more robust regex validation — reducing the risk of misconfiguration and making day-to-day operations more predictable.

Improvements & Bug Fixes

Full list of resolved issues and quality improvements in this release.

Type	Description	ID
Improvement	LDAP directory integration now supports connecting to an LDAP Global Catalog, enabling Shield to automatically discover all domains across an Active Directory forest and retrieve group memberships and user information from each domain.	NS-654
Improvement	The Rules page now displays a Priority column showing the effective order in which rules are evaluated, making policy reviews faster and reducing the risk of unintended rule interactions.	NS-610
Improvement	Activity log CSV exports now include a unique record identifier, allowing exported files from different time ranges to be safely merged or cross-referenced without risk of undetected duplicates.	NS-661
Improvement	The ICAP configuration interface has been simplified: redundant fields have been removed, and the Username Header input now appears only when Proxy authentication is selected.	NS-641
Improvement	The LDAP directory Host field now automatically completes the scheme and port on entry — defaulting to `ldap://` and port `389` when not specified — and reflects the normalized value back to the administrator before saving, reducing misconfiguration.	NS-665
Improvement	Regex patterns are now validated at save time when configuring Data Types and App Definitions. Invalid patterns are rejected immediately with a clear error, preventing them from reaching the enforcement engine.	NS-663
Fix	Resolved an issue where an invalid regex pattern in the configuration could cause the enforcement engine to surface an error and block policy updates from being applied.	NS-662
Fix	Corrected a Snowflake response processing issue that could cause streaming content to be mishandled under certain response formats.	NS-664
Fix	Fixed misleading help text for the REQMOD Scanning setting in the administration UI, which incorrectly described the option as controlling activity log writing rather than request content inspection.	NS-651

Upgrade Instructions

Follow these steps before upgrading in production. Estimated time: 10 minutes.

Back up your database and configuration files Take a full snapshot of your database and export your current configuration — including your .env and any custom policy files. Store backups off-instance before proceeding.
Pull and deploy the updated container image
```
docker pull public.ecr.aws/nullafi/shield:v3.9.2
```
Configure your container runtime scripts or commands to use the new image. (If using Nullafi's sample Docker Compose files, modify the .env file so that SHIELD_IMAGE points to the new image.) Restart the Shield service after pulling the updated image.

nullafi.com · docs.nullafi.com · support@nullafi.com · Previous releases