Skip to content

Release notes for the October, 25 2026 update

Update Version 4.1.202610231258

New features

Added file transfer support for WEB HTTP Sessions

Added support for secure file transfers during Zero Trust access to WEB Portals through WEB HTTP Sessions. The following capabilities are available:

  • File Upload: Upload single or multiple files to remote WEB Portals when enabled in the associated Access Profile.

  • File Download: Download files from remote WEB Portals when enabled in the associated Access Profile.

  • File Transfer Auditing: Record file transfer operations and associated metadata as session events, with the option to download transferred files from the Session Events report when file recording is enabled in the Access Profile.

Extensions

  • Added support for launching additional executables from Universal Application Launcher RemoteApp scripts, enabling multiple applications to run during Zero Trust access to thick-client applications through an RDS farm jump host.

  • Simplified the Peer node configuration and reporting to reflect the unified remote gateway supporting both WEB Sessions and sessions established through native clients.

  • Added a site event to notify site administrators of upcoming Peer node tokens expiration.

  • Improved the MFA experience when establishing remote WEB sessions by keeping the MFA control visible on the Access Launcher form after successful verification.

  • Added asset, member asset, and credential type information to the WEB Session information bar during endpoint connection process.

  • Added an on-screen warning and site event to notify site administrators that existing Peer node configurations must be updated to use the new authentication mechanism.

Security

Security Enhancements

  • Added a universal remote gateway with token-based authentication to secure session communications between Main and Peer nodes in distributed deployments, providing an additional layer of security beyond existing network firewall controls for both WEB Sessions and sessions established through native clients.

  • Added TLS encryption (HTTPS) to secure communications between Main and Peer nodes in distributed deployments, including double-hop access for WEB sessions and sessions established through native clients.

  • Fixed a security vulnerability that allowed unauthenticated users to execute code in the browser.

Components Update

  • Updated application WEB framework to the latest version.

  • Updated WEB HTTP Sessions driver to the latest version.

  • Updated code editor component to the latest version.

  • Updated MySQL driver to the latest version

  • Updated MariaDB driver to the latest version.

  • Updated dashboard charts component to the latest version.

  • Updated server side markdown toolkit to the latest version.

Fixes

  • Fixed an issue where Windows password reset scripts failed when the new password contained a double quotation mark.

  • Fixed an issue with error reporting when Windows password reset scripts failed because the new password began with a dash or slash.

  • Fixed an issue where generated passwords could begin with a dash or slash.

  • Fixed an issue where the first character of two-byte strings was missing when displayed in WEB SSH Sessions.

  • Fixed an issue that prevented Peer node communication errors from being displayed on the WEB Session status screen.

  • Fixed an issue with displaying long or multi-line messages on the WEB Session status screen.

  • Fixed the issue with resizing WEB sessions.

  • Fixed the issue with case sensitive login to the application.