25.3.0 - Release Notes - BlueCat LiveAssurance

Release date: November 12, 2025

Platform

New Features:

MongoDB upgraded to version 7.0—The database engine has been upgraded to MongoDB 7.0. During the upgrade to LiveAssurance v25.3.0, MongoDB will be automatically upgraded in stages. Once the upgrade to v25.3.0 is successful, LiveAssurance will use MongoDB 7.0 while preserving all existing database data. For details on the upgrade process, refer to Upgrades.
Warning: MongoDB 7 upgrade proceeds through MongoDB 5, which introduces a requirement for AVX (Advanced Vector Extensions) support. If your CPU does not support AVX, the upgrade will fail. For details, refer to Platform Support Notes in the MongoDB Docs portal.
- You must verify hardware compatibility before upgrading to LiveAssurance v25.3.0.
- If your CPU does not support AVX, you must first migrate the LiveAssurance VM to a cluster that supports AVX, and then proceed with the upgrade.
Note: Before upgrading to LiveAssurance v25.3.0, BlueCat recommends that you create a snapshot or backup of your virtual machine as a precaution.
gRPC support for LiveNX integration—Starting in v25.3.0, LiveAssurance uses gRPC as the transport protocol for the openTelemetry exporter instead of HTTP to forward alerts to LiveNX. Due to this change, LiveAssurance v25.3.0 must be integrated with only LiveNX v25.3.0 (or greater). Integrating LiveAssurance v25.3.0 with a LiveNX version earlier than 25.3.0, and vice versa, will fail. For details, refer to LiveNX Integration.

Knowledge

New Features – BlueCat Integrity Devices:

Support for bcia user account—Starting in Integrity v9.6.2 and v25.1.1, a predefined bcia user account with appropriate privileges is defined in Integrity for enhanced security. BlueCat strongly recommends using the bcia user account to connect cloud and on-premises BAM/BDDS v9.6.2 and v25.1.1 (and greater) with LiveAssurance v25.3 (and greater). For details, refer to Creating Users on Vendor Devices: BlueCat.

New Features – Check Point Devices:

Support for R82 software version—LiveAssurance now supports Check Point devices running R82 software version.
Note: Currently, ElasticXL architecture and VSNext mode are not supported.

New/Updated CVE Rules:

Cisco ASA

Severity	CVEs
Critical	CVE-2025-20333, CVE-2025-20363
High	CVE-2025-20127, CVE-2025-20133, CVE-2025-20134, CVE-2025-20136, CVE-2025-20239, CVE-2025-20243, CVE-2025-20244, CVE-2025-20251, CVE-2025-20253, CVE-2025-20263
Medium	CVE-2025-20135, CVE-2025-20219, CVE-2025-20224, CVE-2025-20225, CVE-2025-20237, CVE-2025-20238, CVE-2025-20252, CVE-2025-20254, CVE-2025-20362

Severity	CVEs
High	CVE-2025-41430, CVE-2025-46405, CVE-2025-46706, CVE-2025-47148, CVE-2025-48008, CVE-2025-48500, CVE-2025-52585, CVE-2025-53474, CVE-2025-53521, CVE-2025-53856, CVE-2025-53868, CVE-2025-54479, CVE-2025-54854, CVE-2025-54858, CVE-2025-55036, CVE-2025-55669, CVE-2025-58071, CVE-2025-58096, CVE-2025-58153, CVE-2025-59269, CVE-2025-59478, CVE-2025-59483, CVE-2025-59781, CVE-2025-60016, CVE-2025-61935, CVE-2025-61938, CVE-2025-61951, CVE-2025-61958, CVE-2025-61960, CVE-2025-61974, CVE-2025-61990
Medium	CVE-2025-54500, CVE-2025-54755, CVE-2025-58424, CVE-2025-58474, CVE-2025-59268, CVE-2025-59481, CVE-2025-61933

Severity

CVEs

High

CVE-2025-41430, CVE-2025-46405, CVE-2025-46706, CVE-2025-47148, CVE-2025-48008, CVE-2025-48500, CVE-2025-52585, CVE-2025-53474, CVE-2025-53521, CVE-2025-53856, CVE-2025-53868, CVE-2025-54479, CVE-2025-54854, CVE-2025-54858, CVE-2025-55036, CVE-2025-55669, CVE-2025-58071, CVE-2025-58096, CVE-2025-58153, CVE-2025-59269, CVE-2025-59478, CVE-2025-59483, CVE-2025-59781, CVE-2025-60016, CVE-2025-61935, CVE-2025-61938, CVE-2025-61951, CVE-2025-61958, CVE-2025-61960, CVE-2025-61974, CVE-2025-61990

Medium

CVE-2025-54500, CVE-2025-54755, CVE-2025-58424, CVE-2025-58474, CVE-2025-59268, CVE-2025-59481, CVE-2025-61933

Fortinet

Severity	CVEs
High	CVE-2025-24472, CVE-2025-58325
Medium	CVE-2025-22254, CVE-2025-22258, CVE-2025-22862, CVE-2025-24477, CVE-2025-25248, CVE-2025-25252, CVE-2025-25253, CVE-2025-31366, CVE-2025-53744, CVE-2025-54822, CVE-2025-57740
Low	CVE-2025-25255, CVE-2025-31514, CVE-2025-47890, CVE-2025-58903

Palo Alto

Severity	CVEs
High	CVE-2025-4615
Medium	CVE-2025-2182, CVE-2025-4614

Improved security:

LiveAssurance v25.3.0 includes updated third-party libraries and dependencies for improved security.

This release resolves the following issues:

Platform

LiveAssurance made erroneous DNS queries when a zone configuration was deployed with an empty forwarders statement.
The system backup files consumed excessive server storage due to a retention period of 30 days and a twice-daily backup frequency. Changing the backup retention duration to 7 days and backup frequency to once daily resolved this issue.
The LiveAssurance, installing.html page remained frozen even after the upgrade completed successfully. The installation page now accurately reflects upgrade progress and completion status.

Knowledge

LiveAssurance incorrectly registered the license type of Check Point devices running R82 version as Special instead of Standard because LiveAssurance versions earlier than v25.3 do not support Check Point devices running R82 version. LiveAssurance v25.3 introduces support for the R82 version, thereby resolving this issue.
The DHCP Pool Exhausted alert was falsely generated when only half of all available IP addresses were leased in an IPv4 network. Proper representation of free IP addresses resolved this issue.
Unintended active execution of the asg_ntp_update_time script on Check Point Maestro devices at frequent intervals, along with the devices' hourly execution, could cause CPU softlocks and make the devices unresponsive. The asg_ntp_update_time script has been removed to resolve this issue.