Skip to content

Release Notes

Release notes for the June, 21 2026 update

Update Version 4.1.202606191213

New Features

Added the option to import accounts from Microsoft Entra ID

Added the ability to import accounts from Microsoft Entra ID, formerly Azure AD, into the asset database.

The import process can apply account policies, such as password reconciliation, to newly imported accounts. This simplifies adoption by reusing existing directory data and infrastructure to start managing accounts in the system.

Extensions

  • Improved RDP session performance for connections established through native desktop and mobile RDP clients when video recording is enabled.

  • Improved the request action time selection experience by allowing users to choose a duration in hours, days, or weeks, based on the selected workflow form configuration, while still supporting direct start and end time entry.

  • Added support for multi-line banners on the login screen.

Security

Components Update
  • Updated application WEB framework to the latest version.

  • Updated data binding component to the latest major version 3.x.

  • Updated MariaDB driver to the latest version.

  • Updated native code execution toolkit to the latest version.

  • Updated client side sanitation component to the latest version.

  • Updated terminal emulator component to the latest version.

Fixes

  • Fixed the issue with exiting application command line utility after backup operations.

  • Fixed the issue where the Save button on the action request form was enabled only after the user left the Reason field.

  • Fixed the issue where the Save button on the asset editing screen was enabled only after the user left the Asset Name field.

  • Fixed the issue where the Save button on the new tenant creation or editing screen was enabled only after the user left the Tenant Name field.

  • Fixed the issue that allowed saving an asset without a name after modifying other fields on the asset edit screen.

  • Fixed the issue with excessive volume of content written to the system log for the RDP Proxy connection resets events.

  • Fixed the issue with deleting an asset with the associated workflow selectors.

  • Fixed the issue with the error displayed when unlocking empty secret field.

  • Removed the Windows Password Reset by Account Itself and Windows Password Set by Shadow Account scripts from the default Windows Host asset type in favor of password reconciliation scripts.

Release notes for the June, 14 2026 update

Update Version 4.1.202606121824

Extensions

  • Added events recording support (including keyboard, mouse and cursor shape changing events) for the RDP sessions established from the latest native desktop RDP clients to the latest RDP servers, including Windows 11 24H2+ and Windows Server 2025.

  • Added support for RDP sessions established from the latest version of Mac OS Windows App RDP client.

  • Changed default action request completion time to 12 hours from the request start.

Security

Components Update
  • Updated application WEB framework to the latest version.

  • Updated GUI translation component to the latest major version 18.

  • Updated GUI icons repository to the latest version.

  • Updated database access component to the latest version.

  • Updated database connection pool component to the latest version.

  • Updated code editor view component to the latest version.

  • Updated client side sanitation component to the latest version.

  • Removed redundant 3rd party dependencies from the application WEB console.

  • Updated REST API Documentation component to the latest version.

  • Updated dashboard charts component to the latest version.

Fixes

  • Fixed the issue with Session Events report run by a user without site permissions.

  • Fixed the issue with downloading non-secured file field value from the asset view screen.

  • Improved platform resilience and reliability under heavy traffic conditions.

  • Improved Asset List and Asset View GUI screens responsiveness and performance.

  • Fixed the issue with availability of Video Manager on the GUI for the sessions that do not support recording conversion to video such as the sessions established using native SSH and PowerShell clients.

  • Fixed the issue with excessive volume of content written to the system log for the invalid RDP Proxy authentication events and for the events accessing non-existing site.

  • Fixed the issue with displaying connection time error messages from the endpoint in the sessions established using native desktop or mobile RDP clients.

  • Fixed the issue with initial sorting of access profiles, command filters, session intelligence configurations, taxonomy lists on search center, tagging configuration, and providers list on the AT Integrations.

  • Fixed the issue with calculating request end time on the request action form.

Release notes for the June, 7 2026 update

Update Version 4.1.202606051817

New Features

Added scriptable WEB Portal access through an RDS jump host

Added support for scriptable web portal access using a generic RDS RemoteApp that drives Microsoft Edge through a script selected in the asset configuration. The script can navigate HTML fields and type asset field values into selected or currently focused form elements.

This option enables zero trust web portal access with credential injection and full session recording through a secured Remote Desktop Services (RDS) jump host.

It complements the existing zero trust web portal access methods: Browser Extension and Web HTTP Sessions. For details about the benefits, advantages, and trade-offs of each method, see: https://docs.12port.com/introduction/faq/web-portal-access/

Extensions

  • Added support for zero trust connections from the latest native desktop RDP clients to the latest RDP servers, including Windows 11 24H2+ and Windows Server 2025.

  • Added an asset audit report for site administrators to view asset configuration, security settings, and access options as seen by a selected user, helping build consistent security policies and troubleshoot asset access issues.

  • Added the option to customize Page Schema for web portal access using the Browser Plugin or Web HTTP Sessions, allowing asset owners to define the fields used for entering user and password values.

  • Added secondary node support to service status reporting, allowing load balancers to keep traffic on the main node while it remains operational.

  • Added latest models to AI Integration.

Security

Components Update
  • Updated server side Run Time framework to the latest version.

  • Updated application WEB framework to the latest major version 22.

  • Updated network streaming component to the latest version.

  • Updated Native Platform Access component to the latest version.

  • Updated GUI icons repository to the latest version.

  • Updated client side sanitation component to the latest version.

  • Updated database connection pool component to the latest version.

  • Updated client side markdown toolkit to the latest version.

  • Updated dashboard charts component to the latest version.

Fixes

  • Fixed the issue with displaying session events in the WEB Session recording player.

  • Fixed the issue with terminating failed policy application jobs for newly created assets.

  • Fixed the issue with establishing RDP Proxy connections, completing deferred sessions, applying policies and deleting assets in the sub-sites.

  • Fixed the error reporting issue with the RDP Proxy connections for the non-existing assets.

  • Fixed the issue with duplicated backup names in the selection box when creating new tenants from backup.

Release notes for the May, 31 2026 update

Update Version 4.1.202605291345

New Features

Added Data Replication Between Application Nodes

The replication component maintains a journal of data changes, including create, update, and delete operations for configuration, management, and log data. The replication process then synchronizes these changes with configured peer nodes through the application REST API.

Node-to-node data replication supports advanced deployment scenarios, including:

  • Disaster Recovery (DR) — A backup node can be used when the Main node is unavailable and later synchronize the data collected during the outage back to the Main node.

  • Active Multi-Site — Two active Main nodes can serve endpoints in different regions or locations, such as isolated cloud virtual networks or disconnected datacenters, while sharing configuration, security policies, and audit data.

  • Autonomous Peer — A Peer node can be deployed in an isolated virtual private network or datacenter to access endpoints that are not directly reachable from the Main node. The Autonomous Peer can continue operating when connectivity between the Peer and Main nodes is unavailable or low quality.

  • Session Relay — Session performance can be improved by keeping session traffic local when the asset, user, and Peer node are in the same network, avoiding unnecessary routing through the Main node.

Extensions

  • Added the option to specify timeout parameters for AWS Console remote app.

Security

Components Update
  • Updated application WEB framework to the latest version.

  • Updated database access component to the latest version.

  • Updated terminal emulator component to the latest version.

  • Updated XML Mapping toolkit to the latest version.

  • Updated data binding component to the latest version.

  • Updated SSH server, client and proxy component to the latest version.

  • Updated SSH keys handling toolkit to the latest version.

  • Updated client side data sanitation component to the latest version.

  • Updated code audit component to the latest version.

Fixes

  • Fixed the issue with reduced screen size for WEB Sessions.

  • Fixed the issue with switching container to the selected non-container asset in the SSH command line shell.

  • Fixed the issue with translated error messages in the switch container operation of the SSH command line shell.

  • Fixed the issue with the real time permission verification when switching containers in the SSH command line shell.

Release notes for the May, 24 2026 update

Update Version 4.1.202605221614

New Features

Added Dark Mode Support to the WEB Console GUI

Dark mode improves usability in low-light environments, such as control rooms, overnight operations, shared workspaces, and after-hours administrative sessions. It helps reduce screen glare, lowers visual fatigue during extended use, and provides a more comfortable experience for operators who monitor or manage the WEB Console for long periods.

Added the option to provide endpoint credentials in native SSH clients.

Users can now initiate connections to remote Unix or Network Device endpoints from desktop or mobile SSH clients by providing endpoint credentials directly, while access remains securely mediated through the connection broker.

This feature enforces RBAC policies, approval workflows, and session monitoring with video and event recording, enabling secure, identity-based session management without requiring automated credential management.

This option complements the existing endpoint credential option available for WEB SSH clients.

Extensions

  • Added the option for asset managers to override credentials stored in the assets when connecting to the Windows endpoints using native desktop RDP clients.

  • Added a visual indicator in the assets list to identify assets that were recently created or updated.

  • Added an error message for Remote App connections through a jump host when the selected asset does not include the RDS jump host as a member.

Security

Components Update
  • Updated application WEB framework to the latest version.

  • Updated database access component to the latest version.

  • Updated WEB HTTP Sessions driver to the latest version.

  • Updated Informix driver to the latest version.

  • Updated dashboard chart component to the latest version.

  • Updated terminal emulator component to the latest version.

  • Updated client side data sanitation component to the latest version.

  • Updated client side markdown toolkit to the latest version.

  • Updated bill of materials monitoring component to the latest version.

  • Updated code audit component to the latest version.

  • Updated unit test toolkit to the latest version.

Fixes

  • Fixed the issue with accessing asset number fields with no defined values.

  • Changed the log level of the application trust manager initialization event to debug from information one.

  • Fixed the issue with creating new tenants from backup

  • Fixed the issue with restoring asset type container property.

  • Added debug logging for the WEB Sessions parameters to troubleshoot remote sessions.

  • Added debug mode for the AWS Console RDS jump host application to display received parameters to troubleshoot the remote application launcher.

  • Fixed an issue with error reporting for failed remote endpoint connections using native SSH clients.

Release notes for the May, 17 2026 update

Update Version 4.1.202605151622

New Features

Added the option to provide endpoint credentials in native RDP clients.

Users can now initiate connections to remote Windows endpoints from desktop or mobile RDP clients by providing endpoint credentials directly, while access remains securely mediated through the connection broker.

This feature enforces RBAC policies, approval workflows, and session monitoring with video and event recording, enabling secure, identity-based session management without requiring automated credential management.

This option complements the existing endpoint credential option available for WEB RDP clients.

Extensions

  • Added links to the release notes and to the application update guide to the home page message about the application update.

  • Added support to initialize deployment or to create a new tenant in the deployments that run inside containers such as Docker to remove the option to select embedded database as a backend storage.

  • Added the option to click on the site name in the site list to navigate to this site.

Security

Components Update
  • Updated application WEB framework to the latest version.

  • Updated database access component to the latest version.

  • Updated code audit component to the latest version.

  • Updated REST API documentation component to the latest version.

  • Updated client side data sanitation component to the latest version.

  • Updated logging API component to the latest version.

  • Updated Oracle RDBMS driver to the latest version.

  • Updated code editor legacy modes and view components to the latest version.

  • Updated dashboard chart component to the latest version.

Fixes

  • Fixed the issue with WEB HTTP sessions blurry remote screen visible on certain displays.

  • Fixed the issue with displaying user name when editing the form with the directory user of group selection control.

  • Fixed the issue with the process name for auto restore on the node processes screen.

  • Fixed the issue with adding previously deleted user to the tenant security scheme either by granting permissions directly, through a group, or by adding the user as a group member.

  • Fixed the issue with duplicated certificates reported in the certificate chain during trust verification process.

  • Fixed the issue with loading logger configuration.

  • Fixed the issue with redundant restore of the backup configuration at the end of restoring process in case there was no backups to restore.

Release notes for the May, 10 2026 update

Update Version 4.1.202605082044

New Features

Added support for configuring cryptographic settings for inbound SSH connections.

Enhanced SSH proxy security and interoperability by enabling configuration of supported cryptographic algorithms for inbound SSH connections made by native desktop or mobile SSH clients. This provides greater control over security policies and compatibility with enterprise SSH environments, including support for configuring:

  • Accepted Key Exchange (KEX) algorithms
  • Supported cipher algorithms
  • Supported MAC (Message Authentication Code) algorithms
Added configuration options for Web RDP session performance tuning

Introduced advanced performance settings for Web RDP sessions, allowing administrators to fine-tune the balance between usability, visual experience, compatibility, and bandwidth optimization.

These enhancements provide greater flexibility for optimizing Web RDP sessions across different network conditions and endpoint capabilities.

Supported configuration options include (with default values):

  • Color Depth (24)
  • DPI (default)
  • Enable Wallpaper (off)
  • Enable Theming (off)
  • Enable Font Smoothing (on)
  • Enable Full Window Drag (off)
  • Enable Desktop Composition (off)
  • Enable Menu Animations (off)
  • Disable Bitmap Caching (off)
  • Disable Offscreen Caching (off)
  • Disable Glyph Caching (on)
  • Disable GFX (off)
  • Force Lossless (off)

Extensions

  • Added the option to copy session URL to the clipboard from the WEB session launcher dialogue to automate direct access to the WEB session.

  • Added support to set password for non-root privileged user (non-root user with zero id) to "Unix Password Reset by Account Itself" script.

  • Added enhanced error feedback for Web Sessions to surface server-side issues, including connection failures, permission-related errors, and workflow block messages.

Security

Components Update
  • Updated application WEB framework to the latest version.

  • Updated database access component to the latest version.

  • Updated IP Address toolkit to the latest version.

  • Updated client side code auditing tool to the latest version.

  • Updated network streaming component to the latest version.

  • Updated terminal emulator component to the latest version.

  • Updated data binding component to the latest version.

  • Updated code editor view component to the latest version.

  • Updated server side logging framework to the latest version.

  • Updated internal scripting language component to the latest version.

  • Updated dashboard chart component to the latest version.

Fixes

  • Fixed the issue with access to policy preview dialogue.

  • Fixed the issue with access to the asset policy preview dialogue.

  • Fixed the issue with displaying service selection list on the service selector control in various parts of the application such as service request form or policy editing.

  • Fixed the issue with displaying term selection list on the term selector control in various parts of the application such as policy or tagging rules editing.

  • Fixed the issue with the mass un-tagging screen to allow operation to complete.

  • Fixed the issue with the client side activation action is enabled when there is no activation code provided.

  • Fixed the issue with confirmation messages about the policy actions on the policies list screen should reference the policy name instead of description.

Release notes for the May, 3 2026 update

Update Version 4.1.202605011636

New Features

Added clipboard transfer support to WEB HTTP Sessions

This feature enables bidirectional copy and paste between the local device and remote browser in Web HTTP sessions, improving usability and productivity when accessing web portals in zero-trust environments.

Added command enforcement for PowerShell client sessions

This option ensures that commands executed in sessions established via native PowerShell clients are restricted to approved directories, enhancing the security of remote operations on Windows endpoints.

Extensions

  • Added the option to drag-and-move clipboard dialog inside WEB session screen.

  • Added the option to configure the file system path for storing backup files.

  • Added the option to schedule automated restore from backup volumes placed in a designated folder, enabling Disaster Recovery (DR) node maintenance and offline node synchronization in multi-node deployments.

Security

Security Improvements
  • Added support for signing tenant backup files to ensure integrity and authenticity.

  • Added support to display backup signature status on the list of backups.

Components Update
  • Updated application WEB framework to the latest version.

  • Updated terminal emulator component to the latest version.

  • Updated JSON processing library to the latest version.

  • Updated REST API Documentation component to the latest version.

  • Updated PostgreSQL driver to the latest version.

  • Updated client side sanitation component to the latest version.

  • Updated client side markdown toolkit to the latest version.

Fixes

  • Fixed the issue with credentials override option for WEB HTTP Sessions.

  • Fixed the issue with host override option is available for the WEB Portal session launchers.

  • Fixed the issue with the password reset script "Unix Password Reset by Account Itself" to properly use the existing password for the new tenants.

  • Fixed the issue with "Unix Password Set by Shadow with no sudo Password" script to reuse the old password correctly for the new tenants.

  • Fixed the issue with respecting command filter configuration for the SSH sessions initiated from the command line shell.

  • Fixed the issue with using Firefox browser on Windows devices to access the application servicing traffic terminated by self-signed, expired or invalid certificate.

Development

  • Added the option to run multiple instances of the server on the same host. Introduced app.db.port and app.node system parameters to support multiple instances running on the same host.

  • Updated client side code auditing tool to the latest version.

Release notes for the April, 26 2026 update

Update Version 4.1.202604241240

New Features

Added support for filtering PowerShell session commands

Command filtering enables granular control of permitted and blocked commands within secure remote sessions initiated from native desktop or mobile PowerShell clients.

Added Support for Credentials Override Access through Connection Broker

Introduced the ability for users to initiate connections to remote endpoints by supplying their own credentials or destination details, while all access is securely mediated through the connection broker. This feature enforces RBAC policies, approval workflows, and session monitoring with video and event recording, enabling secure, identity-based session management without requiring automated credential management.

Key capabilities include:

  • Users can specify credentials or host details when connecting to assets without predefined values.
  • Asset owners can override stored credentials when initiating a connection.
  • Asset owners can override the target host for a connection.

Extensions

  • Added the option to search assets in the application command line interface shell.

  • Added the option to list only assets that allow SSH connection in the application command line interface shell.

  • Added the option to specify API token filter as a space-separated list of IP addresses and IP ranges.

  • Added event log message for successful and for failed REST API connections using API tokens.

Security

Security Improvements
  • Added the option to install, update and run the application on Linux hosts as a dedicated service user to enforce the principle of least privilege.

  • Added client side quality control tool to ensure code quality, consistency, and reliability across the WEB application.

  • Improved security, performance, stability and maintainability of the WEB application GUI by decoupling tightly linked components, simplifying expressions, lists and types management, enforcing strict compare and state maintenance, improving code reusability and notation as well as overall code cleanup.

Components Update
  • Updated application WEB framework to the latest version.

  • Updated client side markdown rendering component to the latest version.

  • Updated Code Editor View component to the latest version.

  • Updated HTML sanitization library to the latest version.

  • Updated MySQL Driver to the latest version.

  • Updated HTTP communication component to the latest version.

  • Updated FIPS cryptography utilities and certificate management components to the latest version.

  • Updated database access component to the latest version.

  • Updated database caching component to the latest version.

  • Updated data processing component to the latest version.

Fixes

  • Fixed the issue with early deployment of the application during Linux host OS startup by improving detection of system service management component.

  • Fixed the issue with error reporting and terminating the installation on the Linux hosts with no known service management components.

  • Fixed the issue with the incorrect type of the error exception generated for the SSH Script that cannot connect to the destination.

  • Fixed the issue with deleting an asset assigned as a reference to the import from LDAP.

  • Fixed the issue with dynamic issuer used in generated API token.

  • Fixed the issue with filtering REST API connections based on the client IP Address and API token filter.

  • Fixed the issue with the updating the application on Linux platforms with OpenRC service manager.

  • Fixed the alias command of the application command line interface to return sorted list of aliases.

  • Updated browser console messages about renewing a temporary authentication token to debug level.

Release notes for the April, 19 2026 update

Update Version 4.1.202604171651

New Features

Added secure transport support for native PowerShell client sessions

Enabled secure, zero-trust connections from native PowerShell clients to SSL-enabled Windows endpoints over HTTPS.

Extensions

  • Added the option to disable SAML signature security validation option when integrating with legacy IdP during SSO authentication.

  • Added the option to disable mail server host name verification when sending emails over secure channel.

Security

Security Improvements
  • Improved security of parsing protocol data and signature validation during SSO authentication, PowerShell script execution and integration with AWS.

  • Improved protocol security during PowerShell script execution.

  • Improves security of importing configuration objects.

  • Improved shared object initialization logic for parallel operations.

  • Improved error handling on WEB authentication pages.

  • Centralized access to the random number generator.

  • Improved encryption components through use of compliant random number generator.

Components Update
  • Updated application WEB framework to the latest version.

  • Updated database access component to the latest version.

  • Updated dashboard chart component to the latest version.

  • Updated REST API documentation component to the latest version.

  • Updated client side object sanitizer component to the latest version.

  • Updated client side markdown rendering component to the latest version.

Fixes

  • Fixed issue with Shadow Run-As role not being properly assigned for default shadow account tasks.

  • Fixed the issue with the context help for the SAML backend property on the editing screen.

  • Fixed the issue where invalid MFA code redirected users to login instead of allowing retry on the verification screen.

  • Fixed the issue with file system handler leaks when working with the files on the host file system.

  • Fixed the issue with archiving file system files on Windows hosts.

  • Fixed the issue with random access to encrypted files.

  • Fixed the issue with rendering zero height object during export to PDF.

  • Fixed stream resource memory leak issue affecting encrypted recordings, file transfers, and legacy integrations.

  • Fixed the issue with intelligent segmentation of specific disconnected networks.

  • Fixed the issue with generating full stack debug logs for specific REST API calls.

  • Fixed logger reuse issue in application authentication screens.

  • Fixed the issue with initiating WebSockets sessions in the cluster environment.

  • Fixed the issue with early error detection in malfunctioned deployments

  • Improved memory management when interacting with Duo Security MFA

  • Fixed the issue with individual export of Parsers by deferring the option to mass export of selected parsers.

  • Fixed potential performance issue when displaying errors in the system log.

  • Fixed the issue with exposing errors when pretty-formatting XML output.

  • Fixed the issue with unscheduling background processes.

  • Improved early detection of errors during error reporting.

  • Fixed the issue with terminating the application with currently run WEB HTTP session.

  • Improved stability of WEB Session auto-start command execution.

  • Improved stability of WEB HTTP and RDP Proxy Sessions.

  • Improved application stability by enforcing internal border condition verification, empty object values and object equality.

  • Fixed the issue with parallel submission of jobs to the Job Engine.

  • Fixed the issue with termination of background jobs.

  • Fixed the issue with the activation naming to follow the current year in the License Manager.