Skip to content

Release notes for the November, 8 2026 update

Update Version 4.1.202611061020

New Features

Added Remote LDAP Integration Through Peer Nodes

Added support for integrating with LDAP and Microsoft Active Directory servers located in isolated remote networks through Peer node connections.

The integration enables user authentication and group-based authorization for access to vault resources, including sites, containers, and assets, as well as privileged operations such as site management, access request approvals, and endpoint access.

Added HTTPS Peer Tunnel Support

Added support for HTTPS Peer Tunnels, enabling Peer nodes to securely expose their services to Main nodes through a reverse tunnel, even when inbound network connections are blocked by firewall restrictions.

The Peer Tunnel uses a secure HTTPS WebSocket connection initiated by the Peer node inside the network perimeter to the Main node outside the perimeter. The connection is established, managed and monitored directly by the application without requiring additional tunneling software or network infrastructure.

This capability enables Main nodes deployed outside the protected network to securely access internal resources through Peer nodes, including:

  • Establishing WEB Sessions and sessions using native RDP, SSH, scp, sftp or PowerShell clients.
  • Executing scripts on internal endpoints.
  • Integrating with Microsoft Active Directory and other internal services.

The Peer Tunnel simplifies secure access to resources within protected networks without requiring inbound firewall ports to be opened or additional third-party server software to be installed or configured.

Extensions

  • Added support for securely uploading folders to WEB Portals during Zero Trust access through WEB HTTP Sessions.

  • Added a notification to inform WEB Session owners when another user joins their session, along with a list of joined users indicating their participation mode (view-only monitoring or active participation).

  • Added an option for Asset Viewers with the WEB Sessions access profile to see a list of active sessions on the Asset View screen.

  • Added support for establishing trust with the remote gateway through the Peer node connection.

Security

Security Enhancements

  • Added a Global Logout option allowing site administrators to terminate all active WEB and endpoint sessions for a selected user, or users to terminate their own sessions across all devices. This capability helps revoke active access to potentially compromised accounts after they have been locked or their authentication credentials or MFA settings have been reset.

Components Update

  • Updated application WEB framework to the latest version.

  • Updated WEB HTTP sessions driver to the latest version.

  • Updated MS SQL Server driver to the latest version.

  • Updated server side markdown processor to the latest version.

  • Updated client side markdown toolkit to the latest version.

  • Updated dashboard charts component to the latest version.

  • Updated WEB framework runtime toolkit to the latest version.

  • Updated network streaming component to the latest version.

  • Updated interactive graphics component to the latest version.

  • Updated terminal emulator component to the latest version.

  • Updated SSH proxy session player component to the latest version.

Build Components Update

  • Updated the build support component to the latest version.

  • Updated the Bill of Materials (BOM) component to the latest version.

Fixes

  • Fixed an issue with uploading multiple files in WEB HTTP sessions.

  • Fixed an issue with the expiration of the Web Console login page.

  • Fixed an issue with automatically filling TOTP codes on authentication pages where the MFA input field lacks an ID or name attribute, enabling Zero Trust access through WEB HTTP Sessions in these scenarios.

  • Fixed an issue where custom time filters in reports ignored zero values for hours, minutes, or seconds in the Date From and Date To fields, substituting the current time values instead.