Release Notes

Latest Release Notes

Syteca® Master Panel v. 1.6 (Build: 1.6.0.36)

Improvements:

• Ekran System® Master Panel is now called Syteca® Master Panel (after Ekran System officially rebranded to Syteca in version 7.18).

Issues Fixed:

• Various vulnerabilities - fixed.

Notes:

• The Syteca Master Panel is a stand-alone component of Syteca that allows large organizations with multiple isolated Syteca Application Server deployments to view all Client sessions from all Management Tools in a single interface.

Previous Release Notes

Syteca® v. 7.18.50 (Build: 7.18.318)

Issues Fixed:

• [Password Management (PAM):] Various high-priority PAM issues - fixed.

Syteca® API Data Connector v. 1.9 (Build: 1.9.6)

Issues Fixed:

• Some references have been updated due to certain changes in the Application Server component - fixed.

• Various other high priority bugfixes - fixed.

Notes:

• Ekran System® API Data Connector is now called Syteca® API Data Connector (after Ekran System officially rebranded to Syteca in version 7.18 - see below).

• Syteca Data Connector is a stand-alone component of Syteca that is used for integrating a customer’s IT system via the Ekran System API.

Syteca® v. 7.18 (Build: 7.18.235)

Ekran System has officially rebranded - and is now called Syteca!

New Features:

• [Licensing:] Syteca has changed its licensing model to offer more flexibility to customers, by now allowing separate applications and features to be enabled in the product license serial key:

- Selected applications, and the features they contain, can now be enabled in different license types.

- ACTION REQUIRED! - New PAM seat licenses must be assigned to all the required users after installing (or updating to) Syteca version 7.18, for these users to be able to use any of the PAM (Password Management and Account Discovery) features:

- as shown in the Warning popup window displayed after installing (or updating to) Syteca version 7.18;

- by enabling the toggles in the PAM column for the required users (on the User Management page).

- New custom endpoint license types can include various combinations of the applications enabled:

• [Account Discovery (PAM):] Allows accounts to be discovered by performing a network scan and then onboarded into secrets by:

- Adding and running account discovery rules.

- Onboarding the accounts discovered into new secrets (either individually, or by using Bulk Action).

• [Password Management (PAM):] The new "Record user activity while the secret is in use" checkbox allows the activity of Syteca Connection Manager users to be monitored only when they are connected to the account in the corresponding secret.

Improvements:

• [Management Tool UI:] The Main Menu navigation pane has been redesigned, where some of the page names have been changed, and their order/groupings/layout has been rearranged.

• [Password Management (PAM):] Various UI/UX improvements have been made to the Password Management page, including to the columns displayed by default, new icons added (e.g. to show the secret type), and floating action buttons added to move secrets between folders more easily and audit secrets).

• [Password Management (PAM):] The View Password and Copy Password functionality permissions have been separated into 2 different advanced permissions (i.e. into 2 columns, when editing/adding a secret) to allow only one of them to be granted to users of a secret.

• [Password Management (PAM):] Google Chrome now opens in Incognito mode only when using a Web account secret (but not when otherwise opening the Google Chrome browser).

Issues Fixed:

• [Updating the System:] If the database was isolated from Clients before updating, the associated Warning popup window was not displayed after updating - fixed. 

• [Installing Clients:] The Client installation packages containing .ini files (Linux Client x64 Installation Package (.tar.gz + .ini)  and Windows Client Installation Package (.ini + .exe) could not be downloaded (due to the "Access to the path... ... is denied" error) - fixed.

• [Client Management:] The "Something Went Wrong" error was displayed in certain cases when opening the Client / Client Group settings (for all types of Clients) - fixed.

Ekran System® v. 7.17.60 (Build: 7.17.685)

Improvements:

• [Database:] The database structure has been optimized. Please note that after updating Ekran System, the data migration process will begin as soon as the Application Server starts up. Migration takes place in the background, and may take some time to complete and affect system performance while in progress. Recommendations for updating Ekran System can be found on the Updating the System (Checklist & Best Practices) page.

Issues Fixed:

• [Playing Windows Client Sessions:] In certain cases after updating to version 7.16.58, the Windows Client sessions recorded did not contain any screenshots or metadata (when playing them in the Session Viewer) - fixed.

• [Alert Rules:] Command (Linux) alert rules were not triggered after switching from the root user to a regular user - fixed.

• [Password Management (PAM):] The logic of remote password rotation for Active Directory accounts has been changed to now use the account secret credentials (instead of in the LDAP target domain admin credentials)- fixed.

• [Integration with Active Directory:] Logging in to the Management Tool by an Active Directory user in certain cases when using a manual LDAP target was slow - fixed.

• [Integration with Active Directory:] LDAP targets could not be deleted unless all the Active Directory users in the corresponding domain were first deleted (on the User Management page) - fixed.

• [Defining Database Management Settings:] The connection to an archived database could not be established (as shown when clicking the Test Database Connection button) until the browser's cache was cleared, in certain cases when using the MS SQL Server database - fixed.

• [Scheduled Reports:] "The process cannot access the file... ...because it is being used by another process" error was displayed (on the Health Monitoring transaction log) when scheduled reports were generated - fixed.

• [Viewing Archived Client Sessions:] Archived sessions of deleted Clients did not contain any screen captures (and playing them also caused the user to be subsequently logged out of the Management Tool) - fixed.

• [Enabling the Displaying of an Additional Message on Login:] It was not possible to save a customized message text that contained newline (i.e. line break) characters in the Enable displaying of additional message field - fixed.

Ekran System® v. 7.17.50 (Build: 7.17.583)

New Features:

• [Monitoring Linux Clients:] Monitoring of Ubuntu 22.04 Client computers using a Wayland desktop environment is now supported.

Ekran System® v. 7.17 (Build: 7.17.506)

New Features:

• [SIEM Integration:] A new checkbox is now available to allow adding events to the log file (which is forwarded to the SIEM system) about any Windows/macOS/Linux Client going offline / coming online.

• [Monitoring macOS Clients:] Application and URL filtering is now available for macOS Clients (and is similar to the same functionality for Windows Clients).

• [Integration with Venn:] Ekran System is now also integrated with the Venn app launcher for macOS Clients (in a similar way to Windows Clients), to monitor user activity only in applications opened in a Venn workspace on macOS Client computers.

• [Password Management (PAM):] Secrets can now be audited by clicking on the

Improvements:

• [Dashboards:] The way productivity dashboards are generated and filtered has been made more convenient (and various other improvements have also been made to the functionality of the dashboards).

• [Management Tool UI:] Translations have now been updated for the Polish (PL) language localization.

• [Monitoring Windows Clients:] The compression algorithm for screen capture recording on Windows Client computers has been improved to save space.

Issues Fixed:

• [Forensic Export:] The sessions could not be viewed on the Forensic Export History tab, in cases when they were exported from the Client Sessions tab (on the Monitoring Results page) – fixed.

• [User Filtering:] The "Monitor the activity of all users except" option did not work when domain groups were specified – fixed.

• [Monitoring Linux Clients:] The Linux Client could not record commands after a command reached the output size limit in cases when the Client was functioning as a Jump Server – fixed.

• [Editing Client Groups:] The "Something went wrong" error occurred in certain cases when attempting to save the Client group settings – fixed.

• [Monitoring macOS Clients:] In certain cases, macOS Clients could go offline after several days – fixed.

• [Blocking Users:] Endpoint users could not be blocked if the username contained Turkish characters – fixed.

• [Management Tool UI:] Slow Management Tool performance in certain cases – fixed.

• [Updating the System:] The PostgreSQL database server was occasionally stopped when updating Ekran System from version 6.61.342 to 7.7.62 – fixed.

Ekran System® API Data Connector v. 1.8 (Build: 1.8.3)

Issues Fixed:

• [Installation:] The Data Connector could not be installed if the Management Tool admin password used contained certain special symbols – fixed.

Notes:

• Ekran System Data Connector is a stand-alone component of Ekran System that is used for integrating a customer’s IT system via the Ekran System API.

Ekran System® v. 7.16.60 (Build: 7.16.58)

Issues Fixed:

• [Integrations:] An issue with the compatibility of ESET security software for use with Ekran System Clients (causing browsers to run slowly in certain cases when ESET Secure Browser is enabled) – fixed.

Ekran System® v. 7.16.50 (Build: 7.16.56)

Issues Fixed:

• [Integration with Active Directory:] In certain cases, some Active Directory users were not able to log in to the Management Tool after updating Ekran System – fixed.

• [Password Management (PAM):] Remote password rotation for Active Directory secrets stopped working after updating Ekran System to version 7.14.36 – fixed.

• [Database Management:] It was not possible to connect to an existing, or create a new, archived database after updating Ekran System to version 7.16.49 (when using the MS SQL Server database) – fixed.

Ekran System® v. 7.16.20 (Build: 7.16.49)

Improvements:

• [Installing Windows Clients:] The Client installation package, when used with the Venn app launcher (i.e. to monitor user activity only in applications opened in a Venn workspace), has been improved to make it more convenient to install Clients locally.

• [Monitoring SaaS Clients:] The "Capture active window only" user activity recording parameter is now available in SaaS deployments (in addition to on-premises deployments) for Windows, macOS, and Linux Clients.

Ekran System® v. 7.16 (Build: 7.16.35)

New Features:

• [Database Management:] The connection between the Application Server and the database (for both PostgreSQL and MS SQL Server) can now be configured to use SSL encryption, by selecting the new “Use encrypted connection” checkbox, either:

- while installing the Application Server:

- or after installing the Application Server, in the Database Parameters (DbSetupToolUI) application:

• [Alerts:] Regular expressions (regex) can now be used when defining alert rules (to trigger alerts on Windows Client computers), for greater flexibility.

Improvements:

• [Database Management:] If binary storage is used (i.e. if the screen captures recorded are stored in a binary data location), the new "Archive and clean up the database without archiving and deleting the binary data" checkbox can now be used to not delete the binary data whenever a Cleanup or an Archive & Cleanup operation is performed.

• [Anonymizer:] The screen captures of Linux Terminal and SSH sessions displayed in the Session Player are now hidden when anonymized (similar to Linux X Window System sessions, which are obfuscated).

• [Management Tool UI:] Translations have now been updated for the Polish (PL) language localization.

Issues Fixed:

• [Installing Windows Clients Remotely:] An issue with displaying the hostname during a network scan – fixed.

• [Blocking Users:] Blocking a user took several seconds longer than expected – fixed.

• [Health Monitoring:] "54000: index row size XXXX exceeds btree version 4 maximum 2704 for index "IX_URL_STATS_ITEMS_TIME_OF_DAY" errors were displayed on the Health Monitoring page in certain cases when using the PostgreSQL database – fixed.

• [Endpoint Access Control:] The user / user group name was replaced by an incorrect value after adding a user with endpoint access restrictions – fixed.

• [Configuration:] The default login message was displayed instead of the custom login message for blocked users – fixed.

• [Password Management (PAM):] "An endpoint computer with specified name does not exist" error was displayed when attempting to specify a custom port (after the endpoint computer IP address) while connecting to an Active Directory account secret – fixed.

• [Password Management (PAM):] The Ekran System Connection Manager was working slowly in certain cases when using the Search box to find secrets – fixed.

Ekran System® v. 7.15 (Build: 7.15.194)

New Features:

• [Monitoring Windows Clients:] The new "Record user activity only on alert or USB monitoring rule triggering" feature is now available, which allows user activity recording to be targeted to only before and after alert/USB events are detected, for efficient use of resources or for balancing the needs of security & compliance with privacy concerns:

- As displayed in the Client / Client group settings:

- As displayed in the Session Viewer:

• [Monitoring macOS Clients:] The new macOS Hidden Client type is now available (which can be used instead of the standard macOS Client) to hide the Client from the user to a maximum extent in a stealth mode, e.g. so that the Client's process names look like regular system processes.

• [Licensing:] The Terminal Server (Limited Sessions) license type is now also available for Linux Clients (in addition to for Windows Clients), to allow customers to only pay for the maximum number of concurrent sessions per Client that they require (rather that an unlimited number with a Terminal Server license).

Improvements:

• [Monitoring macOS Clients:] The deprecated ("CGWindowListCreateImage") API on macOS 14 (Sonoma) has been replaced (with the new "ScreenCaptureKit"), which is used when recording screen captures.

• [Third-Party Products:] ESET security software is now supported for use with Ekran System (including compatibility with ESET Secure Browser).

• [Syteca Encryption:] Ekran System can now be installed for connections between the Application Server and the PostgreSQL database (including when using Amazon Web Services RDS for PostgreSQL) to use SSL encryption.

• [Monitoring Linux Clients:] Various third-party libraries that are used by Linux Clients have been updated to fix vulnerabilities identified.

Issues Fixed:

• [Monitoring Linux Clients:]

- The SELinux Client did not record SSH sessions on AlmaLinux 9.4 with SELinux enabled in enforcing mode – fixed.

- A Linux alert could not be triggered with a parameter containing an upper case letter – fixed.

- Linux Client SSH connection delay occurred – fixed.

• [Tenant Management:] A tenant could not be deleted – fixed.

• [Access Management:] A "Wrong Request" error occurred when attempting to approve an Endpoint Access Control access request via an email link – fixed.

• [LDAP Targets:] Not all of the Active Directory user groups were synchronized when adding an LDAP target – fixed.

• [Keystroke Logging:] Keystrokes were not recorded if the Korean keyboard language was used – fixed.

Ekran System® v. 7.14.30 (Build: 7.14.54)

Issues Fixed:

• [Monitoring Windows Clients:] Only the initial screenshot of the Additional Message window was recorded when the Displaying of an Additional Message on Login was enabled (although all the metadata for the whole session was recorded) in certain cases when using a Windows 11 Client computer with Windows 365 – fixed.

• [Monitoring Windows Clients:] Only the initial screenshot of the Additional Message window was recorded when the Displaying of an Additional Message on Login was enabled (although all the metadata for the whole session was recorded) in certain cases when using a Windows 11 Client virtual machine, after a clean installation of version 7.14 of Ekran System – fixed.

• [Database Management:] Archiving & Cleanup could not be started in certain cases when the settings were inherited from a Client group after updating to version 7.14 of Ekran System (with the error displayed on the Health Monitoring page: "The incoming request has too many parameters. the Server support a maximum of 2100 parameters...") – fixed.

• [Database Management:] Archiving & Cleanup could not be started (either when scheduled or manually) in certain cases when attempting to delete large amounts of sessions after updating to version 7.14.10 of Ekran System – fixed.

Ekran System® v. 7.14.20 (Build: 7.14.48)

New Features:

• [Report Types:] 5 new "(Grouped)" report types are now available (for both the Report Generator and Scheduled Reports), which contain the same data as other report types of the same name, but have all the data grouped into a single grid instead of separate groups, for convenience of use when exported to MS Excel (XLSX and XLS) formats:

- Activity Summary Grid Report (Grouped).

- Clipboard Grid Report (Grouped).

- Detailed Activity Grid Report (Grouped).

- Session Grid Report (Grouped).

- URL Summary Grid Report (Grouped).

Ekran System® API Data Connector v. 1.7 (Build: 1.7.164)

Improvements:

• [System Requirements:] Ekran System Data Connector now works with new versions of Microsoft .NET Runtime (ASP.NET Core 8.0 Runtime (v8.0.4) - Windows Hosting Bundle or higher only) when using version 7.14 or higher of the Ekran System Application Server.

Notes:

• Ekran System Data Connector is a stand-alone component of Ekran System that is used for integrating a customer’s IT system via the Ekran System API.

Ekran System® Master Panel v. 1.5.5 (Build: 1.5.5.2)

Improvements:

• [Master Panel SSO Authentication:] Has been improved in a similar manner to Management Tool SSO Authentication (please refer to Ekran System® v. 7.14.10 (Build: 7.14.46) below), which needs to be configured in both the Master Panel and in all the Ekran System Management Tools (deployments) that it is connected to.

Notes:

• The Ekran System Master Panel is a stand-alone component of Ekran System that allows large organizations with multiple isolated Ekran System Application Server deployments to view all Client sessions from all Management Tools (deployments) in a single interface.

Ekran System® v. 7.14.10 (Build: 7.14.46)

Improvements:

• [SSO Authentication:] Adding new users automatically (who have not previously been added to the Management Tool) when they attempt to log in for the first time using SSO authentication:

- Can now be disabled, by deselecting the new "Auto-create a Management Tool account for a new user on the first SSO login" checkbox, so that new users are not able to log in to the Management Tool (until an administrator adds them on the User Management page, in the usual manner).

- Furthermore, if this checkbox is selected, new Active Directory users are now automatically added to the Management Tool as Active Directory users (instead of as internal users), and are therefore able to log in (in the usual manner).

• [Database:] The database structure has been optimized. Please note that after updating Ekran System, the data migration process will begin as soon as the Application Server starts up. Migration takes place in the background, and may take some time to complete and affect system performance while in progress. Recommendations for updating Ekran System can be found on the Updating the System (Checklist & Best Practices) page.

Issues Fixed:

• [Application Server:] The Ekran Server Application Server could not be started properly (where the Application Server logs indicated that it was stuck in the "Constructed server managed part", although the EkranServer service was running) in certain cases involving updating, migrating to a different computer, and re-installing the Application Server – fixed.

• [Updating the System:] The EkranServer service started to consume a significant amount of RAM in certain cases several hours after updating – fixed.

• [Viewing Alerts Events:] The Alerts tab (on the Monitoring Results page) was not loading the data in certain cases when using the PostgreSQL database – fixed.

Ekran System® v. 7.14 (Build: 7.14.36)

New Features:

• [Password Management (PAM):] The new Workforce Password Management (WPM) functionality is now available, to enable all PAM users (i.e. users of the Ekran System Connection Manager) to create their own private WPM secrets, which are hidden from other users (unless specifically shared with them), as follows:

- A new administrative PAM User Access permission has been added to the Management Tool, to enable PAM users who do not have the Management Tool Access permission to be granted limited access (to the Password Management page only).

- PAM users can now conveniently click the new Add Secret button in the Ekran System Connection Manager to log in to the Management Tool and create their own WPM secrets in their new WPM folder.

- After logging in, they can then add (and manage) their own WPM secrets (in the usual way) in their new WPM folder called "My Secrets (<username>)".

Improvements:

• [Client Management:] Active Directory user groups can now be specified to exclude all the users in these groups from needing to log in using Secondary User Authentication on a Windows Client computer (or Client group), which allows administrator users to save time and effort (instead of having to enter multiple usernames to exclude each user in each Active Directory group individually).

Issues Fixed:

• [Downloading Ekran System Logs:] The Application Server and Management Tool log files could not be downloaded in certain cases (e.g. when the log file was larger than 100 MB) – fixed.

• [Using Secrets:] An "Extension error" was displayed in Google Chrome when using a Web account secret (despite the secret working correctly) – fixed.

• [Viewing Client Sessions:] After clicking the Play button for a Client on the Client Management page, the Client sessions were not filtered (by the Where filter) for the Client on the Monitoring Results page that opens – fixed.

• [Scheduled Arching & Cleanup:] 

- Scheduled Cleanup operations ran despite the Auto-Cleanup Options being set to Never in certain complex cases (involving inheriting settings from multiple Client groups) – fixed.

- Some sessions were not deleted by scheduled Cleanup operations in certain cases – fixed.

• [Viewing the Forensic Export History:] The Forensic Export History tab did not display any exported sessions after updating to version 7.9 of Ekran System – fixed.

• [Migration Tool:] After using the Ekran System Migration Tool (to migrate the data from the Firebird database to the PostgreSQL database), it was not possible to view the screenshots in the Session Player that were initially recorded to the Client offline cache during migration – fixed.

• [Additional Message on Login to Windows Clients:] A blank screen was displayed, instead of the pop-up window containing the additional message, when this option was enabled (until the user re-logged in) – fixed.

Ekran System® v. 7.13.10 (Build: 7.13.39)

New Features:

• [Anonymizer:] A de-anonymization password can now be required for Supervisor users to approve Expose Requests, in order to e.g. improve security (or comply with corporate policies and contracts), as follows:

- The built-in default "admin" user of Ekran System sets a de-anonymization password on the new Anonymization tab (on the Configuration page):

- Supervisors then need to additionally enter the de-anonymization password, whenever approving Expose Requests from Investigator users to de-anonymize the personal data of a specific endpoint user:

- On approval, the personal data of the specific endpoint user (for all the endpoint user’s sessions on the specific Client computer) is temporarily de-anonymized and displayed to the Investigator who requested it (in the usual way):

Ekran System® v. 7.13 (Build: 7.13.34)

New Features:

• [Password Management (PAM):] For Active Directory account secrets, access can now only be allowed to specific computers in the domain:

- While editing/adding an Active Directory secret:

- Where the specific computers that are allowed to connect to are displayed under the secret (as "children" of the secret) in the Ekran System Connection Manager:

- And where the new Host column has been added, and the required columns can now be hidden/displayed in the Ekran System Connection Manager.

• [Monitoring Linux Clients:] A customizable Additional Message on Login to Linux Client Computers can now be displayed (in a similar way as to on Windows Client computers).

Improvements:

• [Monitoring Linux Clients:] The Secondary User Authentication message displayed on login to Linux Client computers can now be customized (in a similar way as to on Windows Client computers).

• [Licensing:] A new Terminal Server (Limited Sessions) license type is now available for Windows Clients, to allow customers to only pay for the maximum number of concurrent sessions per Client that they require (rather than an unlimited number with a Terminal Server license).

• [High Availability mode:] A new Node column (as well as a Node filter) is now displayed on the Client Management page to display which Application Server (as shown on the Cluster Settings tab) each Client is currently connected to when using a load balancer (where the node is not displayed if the Client is offline).

• [Monitoring Linux Clients:] Various third-party libraries that are used by Linux Clients have been updated to fix vulnerabilities identified.

Issues Fixed:

• [Configuration:] The user was forcibly logged out while attempting to open the System Settings tab without a license for the Enterprise edition of Ekran System v. 7.12.8 – fixed.

• [Administrative Permissions:] An issue with re-enabling permissions for the built-in default "admin" user of Ekran System after disabling the Management Tool Access administrative permission – fixed.

• [Updating the System:] After updating to Ekran System v. 7.6, some Clients stopped sending data to the Application Server in certain cases until they were rebooted – fixed.

• [Database Management:] The STATUS_OBJECT_NAME_INVALID error occurred while attempting to archive sessions in certain cases involving the use of binary data storage in a High Availability cluster environment – fixed.

Ekran System® v. 7.12.8 (Build: 7.12.37)

Issues Fixed:

• [High Availability mode:] High priority bugfix involving Clients not coming back online (on the Client Management page) after Isolation mode was disabled when using a load balancer – fixed.

• [High Availability mode:] A Live session was displayed on the Client Sessions tab (on the Monitoring Results page) despite all nodes being disabled and offline on the Cluster Settings tab when using a load balancer – fixed.

• [Application Server and Database:] The EkranServer service did not start after updating Ekran System from v. 7.9 to v. 7.12 when using the PostgreSQL database installed on Linux – fixed.

Ekran System® v. 7.12.5 (Build: 7.12.35)

Issues Fixed:

• [Application Server:] Significant RAM consumption by the EkranServer service in certain cases – fixed.

Ekran System® v. 7.12 (Build: 7.12.29)

New Features:

• [Dashboards:] The Interactive Monitoring page has been renamed to the Dashboards page, and a major revamp of this feature now allows 4 types of BI (business intelligence) productivity dashboards to be generated, which contain statistics on various measures of user productivity displayed in the form of convenient, interactive and individually-customizable charts (similar to when importing data from Ekran System into Power BI report templates by using Ekran System API Data Connector).

• [Reports:] The new Session Viewing Status Grid Report report type has been added, that allows whether all Client sessions have been viewed (by at least one user) to be conveniently checked (as well as who has viewed each session, and when).

• [Monitoring macOS Clients:] macOS users belonging to Active Directory domain groups are now integrated into Ekran System and can be detected, monitored, and alerted on as such (in a similar way to Windows AD users).

• [Monitoring macOS Clients:] macOS Clients now use AES-256 encryption to exchange the binary data with the Application Server (in a similar way to Windows and Linux Clients).

Improvements:

• [Monitoring Linux Clients:] The installation and monitoring of SELinux Clients has been improved in various ways, and with various bugfixes.

• [Database:] The database structure has been optimized. Please note that after updating Ekran System, the data migration process will begin as soon as the Application Server starts up. Migration takes place in the background, and may take some time to complete and affect system performance while in progress. Recommendations for updating Ekran System can be found on the Updating the System (Checklist & Best Practices) page.

Issues Fixed:

• [Installing Windows Clients Remotely:] In certain cases, options for network scanning stopped displaying available endpoint computers – fixed.

• [Installing Windows Clients Remotely:] The "Something went wrong" error was displayed if a space character was entered (e.g. accidently pasted) before the IP address when scanning for new Clients by using the Deploy Via IP Range option – fixed.

• [Installing Linux Clients:] The VS Code application displayed an error message after installation of the Linux Client – fixed.

• [Updating Linux Clients:] In certain cases, the Linux Client without a GUI interface displayed an error message when the Client was updated – fixed.

• [Client Management:] In certain cases, the columns on the Client Management page sorted incorrectly – fixed.

Ekran System® v. 7.9.8 (Build: 7.9.110)

New Features in SaaS Version:

• [Monitoring macOS Clients:] macOS Client computers can now also be monitored in SaaS deployments (in a similar way to Windows Client computers).

• [Monitoring Linux SaaS Clients:] Linux Client computers can now also be monitored in SaaS deployments (in a similar way to Windows Client computers).

• [Installing Windows SaaS Clients:] Windows Clients with the default configuration can now also be installed using the Windows Installer Setup Wizard (using the MSI file) in addition to using the command line.

• [Installing Windows SaaS Clients:] Windows Clients can now also be installed with custom monitoring parameters (using the new MSI+INI installation package), which are defined while generating the package.

Ekran System® v. 7.9.7 (Build: 7.9.109)

Issues Fixed:

• [Configuring Password Management (PAM):] The PAM gateway Client was offline and the sessions were not monitored in certain cases when deployed in a failover cluster – high priority bugfix.

Ekran System® v. 7.9.6 (Build: 7.9.90)

Improvements:

• [Database:] The database structure has been optimized. Please note that after updating Ekran System, the data migration process will begin as soon as the Application Server starts up. Migration takes place in the background, and may take some time to complete and affect system performance while in progress. Recommendations for updating Ekran System can be found on the Updating the System (Checklist & Best Practices) page.

Issues Fixed:

• [Application Server:] In certain cases, the EkranServer service was consuming a significant amount of RAM in recent releases – fixed.

Ekran System® v. 7.9.5 (Build: 7.9.86)

Issues Fixed:

• [Reports:] Terminal Server Grid reports could not be opened in any format when the report size was more than 100 MB – fixed.

• [Windows Clients:] Windows Clients crashed in certain cases – fixed.

• [Viewing Windows Clients:] An issue with displaying the Windows Client status in certain cases when using a VPN – fixed.

• [Anonymizer:] Users were logged out of the Management Tool when attempting to open the Client Sessions tab (on the Monitoring Results page) if the Anonymization feature was enabled – fixed.

• [Application Server:] The Ekran System Application Server was consuming a significant amount of RAM while generating reports – fixed.

• [Secondary User Authentication:] The Secondary User Authentication login window did not respond on Windows Clients when entering an incorrect password – fixed.

Ekran System® v. 7.9.1 (Build: 7.9.65)

Issues Fixed:

• [Management Tool UI:] High priority bugfix for various issues in recently released versions of Ekran System, in certain cases involving slow operation of the Management Tool, some Clients showing as offline and sending fewer sessions to the Application Server, etc. – fixed.

Ekran System® API Data Connector v. 1.6 (Build: 1.6.1)

Issues Fixed:

• The User Productivity (Get) API endpoint returned session information without the timezone on Azure SQL DB - fixed.

Notes:

• Ekran System Data Connector is a stand-alone component of Ekran System that is used for integrating a customer’s IT system via the Ekran System API.

Ekran System® Master Panel v. 1.5 (Build: 1.5.0.3)

Improvements:

• macOS Client sessions (incl. archived sessions) can now be viewed in the Session Viewer.

Issues Fixed:

• High profile bugfix.

Notes:

• The Ekran System Master Panel is a stand-alone component of Ekran System that allows large organizations with multiple isolated Ekran System Application Server deployments to view all Client sessions from all Management Tools in a single interface.

Ekran System® v. 7.9 (Build: 7.9.58)

New Features:

• [Password Management:] New File Transfer functionality by using the WinSCP application has been added, which allows a user of secrets to transfer files between the jump server computer (via the Ekran System Connection Manager) and the remote computers (which are accessed via the secrets).

• [Password Management:] A Management Tool user with the Owner or Editor permissions for an account secret can now allow specific users of the secret to view and copy the secret's password in a secure manner.

• [Viewing Alerts Events:] Alert events now have a Status, which can be changed manually (also by using the new Bulk Action functionality) at any time, and Notes can also now be added to alert events (with 2 associated new columns added to the Alerts tab).

Improvements:

• [Forensic Export:] The Forensic Export History page has been moved from the main menu pane (on the left) to a new tab on the Monitoring Results page.

• [Reports:] Calculation of Linux Client statistics on monitored data has been optimized to improve the performance of report generation.

• [Database:] The database structure has been optimized. Please note that after updating Ekran System, the data migration process will begin as soon as the Application Server starts up. Migration takes place in the background, and may take some time to complete and affect system performance while in progress. Recommendations for updating Ekran System can be found on the Updating the System (Checklist & Best Practices) page.

Issues Fixed:

• [Third-Party Libraries:] Various vulnerabilities identified with library components – fixed.

• [Reports:] Metadata and report data mismatches in some report types (incl. Keystroke Grid Report) – fixed.

• [Playing Client Sessions:] "Something went wrong" error while attempting to open a session on the Alerts tab – fixed.

• [Protected Mode:] An issue accessing a virtual drive when Protected mode is enabled – fixed.

• [Playing Exported Sessions:] An issue opening the Ekran Forensic Player, when using an account with restricted access to registry keys – fixed.

• [USB Monitoring:] Various issues with USB monitoring & blocking on Windows 10/11 computers – fixed.

• [Playing Client Sessions:] An issue with the session opening at an incorrect place (record) in the Metadata grid when opening an alert from an email alert notification – fixed.

• [Database Management:] Archiving failed in certain cases when using binary storage – fixed.

• [Updating Ekran System:] The Application Server took a long time to update in certain cases – fixed.

• [Updating Ekran System:] The data migration process took longer than expected when updating the system from 6.5.793 to 7.7.62 – fixed.

Ekran System® Master Panel v. 1.4.2 (Build: 1.4.2.3)

Improvements:

• Refactoring and backward compatibility implemented.

Issues Fixed:

• Major bugfix.

• Various issues fixed with viewing archived sessions (displaying sessions, filters, permissions, etc).

Notes:

• The Ekran System Master Panel is a stand-alone component of Ekran System that allows large organizations with multiple isolated Ekran System Application Server deployments to view all Client sessions from all Management Tools in a single interface.

Ekran System® v. 7.8 (Build: 7.8.263)

New Features:

• [Managing Client Sessions:] Bulk Action for managing multiple selected Client sessions simultaneously is now implemented (for the Export to CSV, Forensic Export, and Cleanup features).

• [Monitoring macOS Clients:] Clipboard Paste operations can now be monitored and alerted on for macOS Client computers (in additional to Cut/Copy operations, and in a similar way to Windows Clients).

Improvements:

• [Management Tool UI:] Translations have now been updated for Ukrainian (UA), Japanese (JA) and Polish (PL) language localizations.

• [Database:] The database structure has been optimized. Please note that after updating Ekran System, the data migration process will begin as soon as the Application Server starts up. Migration takes place in the background, and may take some time to complete and affect system performance while in progress. Recommendations for updating Ekran System can be found on the Updating the System (Checklist & Best Practices) page.

Issues Fixed:

• [File Upload:] Various issues in certain cases with File Upload alerts into the Viber messaging app – fixed.

• [File Upload:] Alerts created for a specific path were incorrectly triggered – fixed.

• [Health Monitoring:] Various non-critical system errors in the logs and in Health Monitoring – fixed.

• [Client Group Management:] When adding new Сlient groups, the default value for the "Sessions older than (days)" field (in the Auto-Cleanup Options section) was set to "0" instead of "30" (which was inconsistent with the "All Clients" group) – fixed.

• [Health Monitoring:] The Remove All button was disabled (so could not be used) in the Health Monitoring Transaction log – fixed.

• [Monitoring macOS Clients:] Logs were not added to the EkranInstall.XXX log file in cases when Full Disk Access permissions were disabled for the Terminal.app – fixed.

• [Reports:] Users without permissions to download reports could delete them – fixed.

• [Management Tool UI:] Performance issues when opening some Management Tool pages – fixed.

• [Secondary User Authentication on Windows Clients:] Active Directory domain users were locked out after only one failed login attempt when using secondary user authentication – fixed.

Ekran System® v. 7.7.6 (Build: 7.7.70)

Issues Fixed:

• [Moving the Master Certificate to HSM External Storage:] The data migration failed during an Ekran System update if the Thales CipherTrust Manager service is used to store the Ekran System Master Certificate – fixed.

Ekran System® v. 7.7.5 (Build: 7.7.66)

Issues Fixed:

• [Monitoring Linux Clients:] The Ekran System AIX Client failed to update to the latest version – fixed.

• [Password Management:] In some cases, the Ekran System Connection Manager did not respond when selecting a secret or clicking the Refresh button – fixed.

Ekran System® v. 7.7 (Build: 7.7.62)

Improvements:

• [Monitoring Linux Clients:] The OfflinePoolManager service has been refactored to improve performance and stability.

• [Monitoring Linux Clients:] Third-party libraries that are used by Ekran System have been updated to fix vulnerabilities identified in Ubuntu 20.04.

• [Migration Tool:] The Ekran System Migration Tool (which is used for transferring the data from the Firebird database to the PostgreSQL database) has been removed from the release package, and is instead now available on request from the Support Team.

Issues Fixed:

• [Viewing Windows Clients:] In some cases, after updating to version 7.4.68.0, Clients were shown as offline while idle – fixed.

• [Alert Management:] Some default alerts erroneously showed the "Invalid characters" validation error, when attempting to save the alert while editing it – fixed.

• [Health Monitoring:] "Sufficient free space" notifications were received repeatedly, instead of only being displayed once after fixing an "Insufficient free space" error – fixed.

• [Client Group Management:] The "Bad input data, Bad request" error page was displayed after updating to 7.6.140, when pressing the Finish/Next buttons while editing a Client group – fixed.

• [Reports:] User Productivity Chart reports showed some inconsistent information – fixed.

• [Password Management:] After updating to version 7.6.139, the Ekran System Connection Manager froze when selecting AD secrets – fixed.

• [Application Server Logs:] In clean installations of version 7.7.46, the server logs ("ServerLog.json") file was created in the wrong folder (i.e. in the "Server" folder instead of the "ServerLogs" folder) – fixed.

• [User Management:] Locked Active Directory users could log in to the Management Tool by specifying the NetBIOS name before their Login name (i.e. "<NetBIOS name>\<Login name>") – fixed.

• [Monitoring Linux Clients:] The Ekran System Client disrupted another application installed on the AIX server – fixed.

Ekran System® v. 7.6 (Build: 7.6.140)

New Features:

• [Reports:] Two new report types added:

- User Productivity Heatmap Report:

- User Active Time and Idle Time Chart Report:

• [USB Monitoring:] Rules for detection and alerting of USB devices plugged into macOS Client computers can now be configured (similar to for Windows Clients, but currently without some functionality, e.g. blocking USB devices):

- When configuring USB monitoring rules:

- When viewing in the Session Viewer:

• [Monitoring Windows Clients:] Two new options (with customizable text) added to the Enable displaying of additional message feature, which can now be displayed on login to Client computers:

- When configuring on the Client:

- When logging in to the Client computer:

Improvements:

• [Reports:] Some reports are now generated faster on macOS Clients (due to implementation of statistics gathering on the Client side).

• [Installing Windows Clients:] The parameters that can be configured in the Windows Client MSI package have now been extended (by using the parameters in the INI installation file).

• [Access Management:] The exact user name in the AD group (instead of the AD group name) who was granted endpoint access is now displayed on the Access Requests tab, so can be identified.

• [Health Monitoring:] Notifications about insufficient free space have now been added for the location of binary data storage.

Issues Fixed:

• [Management Tool UI:] Various minor inconsistencies and minor use cases in the UI – fixed.

• [Authentication Options:] Windows Task Manager was disabled in certain cases involving logging in to the Client computer with the Enable displaying of additional message option selected – fixed.

• [Installing Windows Clients:] An issue involving the installation folder after remote Client installation using the INI file – fixed.

• [Health Monitoring:] An error in the Health Monitoring Transaction log (Violation of UNIQUE KEY constraint 'IX_SESSIONS_2'. Cannot insert duplicate key in object 'dbo.SESSIONS') – fixed.

• [Configuration:] In certain cases (when configured prior to Ekran System version 6.0), it was not possible to open the Email Sending Settings tab after updating Ekran System to version 7.5 – fixed.

• [Password Management:] An issue when using secrets with the Password Check in automatically option disabled (involving "The password was checked in automatically" message window being displayed erroneously in certain cases) – fixed.

Ekran System® v. 7.5 (Build: 7.5.168)

New Features:

• [Monitoring Windows Clients:] Individual users can now be excluded from Secondary User Authentication on Windows Client computers (in the same way as for Linux Client computers).

• [Monitoring Windows Clients:] It is now possible to customize the text displayed in the Secondary User Authentication login window on Windows Client computers.

Improvements:

• [System Configuration:] Minor improvements (e.g. in the Password field) to the sections on the on Email Sending Settings tab.

• [Application Server:] Minor improvements (e.g. saving a new password) to reissuing the Master Certificate.

• [Monitoring macOS Clients:]: macOS Sonoma is now supported for both local and remote mass deployment on macOS Client computers (using VMware Workspace ONE UEM).

• [Monitoring macOS Clients:] Remote IPV4/IPV6 addresses of macOS Client computers are now detected and displayed on the Client Management page (while the Remote Public IP addresses are not currently supported).

• [Installing macOS Clients:] The installer has been refactored, and it is no longer possible to install or uninstall macOS Clients locally by using the Ekran System Client application.

Issues Fixed:

• [Management Tool UI:] Various minor inconsistencies and minor use cases in the UI (e.g. in Client groups, inputting decimal filter values in various filters, etc) – fixed.

• [Syteca Encryption:] The Application Server generated an SHA-1 (instead of an SHA-2) Master Certificate – fixed.

• [Monitoring Linux Clients:] User activity was not recorded in certain cases (e.g. some terminal commands not recorded after reaching the output limit, some X11 keystrokes not recorded, etc) – fixed.

• [Reports:] Certain issues with some report functionality after updating to recent Ekran System versions – fixed.

• [Monitoring Windows Clients:] Idle sessions were incorrectly registered in certain cases involving domain users who were active (rather than idle) – fixed.

• [System Configuration:] An issue with saving the Timeout settings on the System Settings tab after updating to Ekran System v. 7.4 – fixed.

• [Client Management:] An issue with saving IP addresses entered on the Remote Host IP Filtering tab – fixed.

• [Monitoring macOS Clients:] Issues with the frequency of user activity recording every 10 seconds for keystrokes – fixed.

• [Authentication Options:] Runtime error while attempting to log in to the Management Tool in certain cases when both Two-Factor Authentication and Secondary User Authentication were enabled– fixed.

Ekran System® v. 7.4.5 (Build: 7.4.110)

Improvements:

• [Alerts:] UI improved to show the OR/AND operators applied when defining alert rules.

Issues Fixed:

• [Information Security:] Various vulnerabilities – fixed.

• [Application Server:] Issues with restarting the EkranServer service in certain cases – fixed.

• [Database Management:] Issues with creating MS SQL archived databases – fixed.

• [Management Tool Localizations:] The descriptions in the User Filtering drop-down list contained translation errors in the Ukrainian language version – fixed.

• [Reports:] When using Multi-Tenant mode after updating to Ekran System v. 7.4 (Build: 7.4.68), manually generated reports could not be downloaded – fixed.

• [Password Management:] In certain cases for Active Directory users, the secrets were not displayed in the Connection Manager (in spite of the user having the required permissions for the secrets) – fixed.

• [Viewing Windows Client Sessions:] Various issues with viewing the session data of some Windows Clients on the Monitoring Results page – fixed.

Ekran System® v. 7.4.3 (Build: 7.4.102)

High-Priority Bugfix:

• [Updating Windows Clients:] In certain cases, Windows Clients were not updated automatically to the latest version if the Client did not have a Live session during a system update – fixed.

Ekran System® v. 7.4.2 (Build: 7.4.78)

Issues Fixed:

• [Monitoring Linux Clients:] Linux Clients did not record remote SSH sessions of AD users on Ubuntu v. 22.04 – fixed.

• [Updating Linux Clients:] In certain cases, some Linux Clients went into Rescue mode after updating to Ekran System v. 7.1.2 (Build 7.1.1170) – fixed.

Ekran System® v. 7.4 (Build: 7.4.68)

SaaS Version:

• A Software-as-a-Service cloud-based solution for Ekran System deployments is now available, with a new SaaS serial key type (for monitoring Windows Clients).

For more information, please refer to our website (https://www.ekransystem.com/en/product/saas-deployment), and to the Getting Started with a SaaS Deployment guide in this Knowledge Base.

NOTE: Some features are not currently supported in the SaaS version, and are marked on the appropriate pages in this Knowledge Base by: NOT AVAILABLE IN SAAS

New Features:

• [Password Management:] A Tree-View folder structure for secrets has been added to make the managing and usage of secrets more convenient.

• [User Management:] Management Tool user accounts can now be locked (and unlocked) manually at any time by any other user with the administrative User Management permission (by clicking on the Lock (

• [User Management:] Two-Factor Authentication is now available for Management Tool users.

• [Application Server Installation:] The default Login name of the "admin" user of Ekran System can now also be changed during installation of the Application Server.

Ekran System Data Connector v.1.5:

• New version 1.5 is now available, with various fixes and improvements, including some changes to 2FA.

NOTE: Ekran System Data Connector is a stand-alone component of Ekran System that is used for integrating a customer’s IT system via the Ekran System API.

Ekran System® v. 7.3.2 (Build: 7.3.35)

New Features:

• [Monitoring Windows Clients:] Ekran System is now integrated with the Venn app launcher, and can monitor user activity only in applications opened in a Venn workspace.

• [Monitoring Linux Clients:] Solaris x86_64 (Intel) 11.4 Clients – are now supported for monitoring (and installed as a separate Client type).

Improvements:

• [Updating Ekran System:] The hash values of Ekran System components are now published in the release package (in the Hash_values.txt file).

Issues Fixed:

• [Reports:] The date format was incorrect in the Session Grid Report – fixed.

• [Monitoring Windows Clients:] An issue involving Clients being displayed with Live status after they were disconnected from the Application Server when using a VPN – fixed.

Ekran System® v. 7.3 (Build: 7.3.26)

New Features:

• [Installing Windows Clients:] For Golden Image Clients, the Client Group can now be auto-detected (after configuration on the Application Server computer), so that the Client is automatically added to the specific Client Group after deploying the new image.

• [Password Management:] Jump Server mode can now be enabled for Clients with Workstation licenses (in the same way as with Terminal Server licenses) for the Windows desktop OS.

Improvements:

• [Dashboards on the Home Page:] Improved UI – the dashboards now have a new design (on the Home page and Health Monitoring page).

• [Viewing Archived Client Sessions:] Improved UX for managing archived databases being investigated – multiple databases can now be added and saved in profiles, to enable easy switching between them (in a drop-down list).

• [Management Tool UI:] Japanese language localization – updated.

Issues Fixed:

• [Viewing Client Sessions:] Live sessions were not sorted in the correct order (in the Finish Column) when using the MS SQL database – fixed.

• [Installing Linux Clients:] Extraction of the Linux Client's files from the installation package modified the folder permissions – fixed.

• [License Management:] It was not possible to assign a license to a Client in cases with certain time formats (due to regional settings) on a Windows Server OS machine where the Application Server is installed (when using the PostgreSQL database) – fixed.

• [Management Tool:] The Management Tool was not accessible in certain specific cases involving clean installation or updating the system – fixed.

• [Installing Windows Clients:] The Application Server crashed in certain cases during remote installation of a Windows Client using a .ini file – fixed.

• [Monitoring Linux Clients:] Some mouse clicks were not recorded while monitoring X Window System applications opened in remote SSH sessions – fixed.

Ekran System® v. 7.2 (Build: 7.2.104) 

New Features:

• [Monitoring macOS Clients:] Keystroke logging is now implemented for macOS Clients along with associated Keystrokes alerts.

• [Viewing Client Sessions:] The Time Zone (in UTC) of macOS Client computers is now displayed in this column (in addition to that for Windows and Linux Clients) on the Monitoring Results page.

• [Monitoring Windows Clients:] File upload operations can now be detected in additional applications on Windows Clients: Viber and Telegram messaging apps, and MS Edge browser.

Improvements:

• [Monitoring macOS Clients:] The offline cache size on macOS Client computers can now be configured in the Management Tool (in a similar way as for Windows and Linux Clients).

• [Playing Client Sessions:] Windows and macOS sessions which have restarted at midnight are now linked to each other, and can easily be switched between by clicking the new (Previous Session and Next Session) buttons in the Session Player (in a similar way as to when playing Linux SSH sessions).

• [Viewing Client Sessions:] New checkbox added to the search options on the Monitoring Results page to optionally enable searching by clipboard data.

• [Management Tool UI:] Performance has now been optimized when navigating between some additional pages (where the improvement in speed is due to migration to the Create React App stack), including Generated Reports (tab), Client Management, Monitoring Results, Applications (tab), SSO Integration (tab), User Access (tab), Alerts (tab), Editing Client Group, etc.

• [Encryption:] Data recorded from clipboard monitoring operations is now encrypted in the database.

• [Integration with Amazon S3 Storage:] Reports generated and Forensic Exports performed can now be saved in Amazon S3 storage (in a similar way as screen capture binaries).

• [Application Server:] OCR library components that are used by Ekran System have been updated.

• [Integration with Ticketing Systems:] Various improvements have been made to the logic of the Syteca API Bridge.

• [Client and Client Group Management:] The sections on the tabs on the Editing Client page and Editing Client Group page have been streamlined for consistency (since some sections on some tabs were previously displayed in different orders).

• [Database:] The database structure has been optimized. Please note that after updating Ekran System, the data migration process will begin as soon as the Application Server starts up. Migration takes place in the background, and may take some time to complete and affect system performance while in progress. Recommendations for updating Ekran System can be found on the Updating the System (Checklist & Best Practices) page.

Ekran System® v. 7.1.2 (Build: 7.1.1170) 

New Features:

• [Reports:] New Audit Session Grid Report type now added, which contains information on which Management Tool users have viewed which sessions.

• [Audit Log:] Can now be exported to a PDF file.

• [Management Tool UI:] A new Ukrainian language localization is now available.

• [Binary Data Storage:] Screen captures recorded can now be stored in an Amazon S3-like storage location.

• [Password Management:] Ekran System Connection Manager for using secrets has been updated, including changes in the UI design, and in the logic and technologies used (in preparation for the upcoming Tree-View folder structure feature).

NOTE: Requires .NET Framework 4.8.

• [Ekran System Data Connection v. 1.4:] New version released, with a new API endpoint added for getting a list of Endpoint Access Control access requests.

• [Monitoring Linux Clients:] Function call skipping now allows the amount of data received from Linux Clients to be reduced, by defining specific function calls to be skipped during monitoring.

• [Viewing Alert Events:]: Keywords (defined in alert rules) in Linux SSH sessions are now implemented and displayed on the Alerts tab (on the Monitoring Results page).

• [Installing macOS Clients:] New notification added about macOS Clients disabling on Ventura OS.

Improvements:

• [Installing Windows Clients:] The relevant information is now written to the Client logs during the install/update process.

• [Anonymizer:] Email notifications sent (when de-anonymization of an endpoint user's personal data is requested) now include "Requested by" with the name of the Management Tool user who requested the endpoint user's data to be de-anonymized.

• [Management Tool UI:] Performance optimized when navigating between some pages (where the improvement in speed is due to migration to the Create React App stack).

• [Monitoring Linux Clients:] Oracle Linux v. 8.5-8.7 and 9.1 Clients are now supported.

• [Monitoring Linux Clients:] Ubuntu v. 22.04 is now supported (for monitoring the GUI for X Window System).

• [User Management:] The Management Tool Access administrative permission of the default "admin" user – can no longer be revoked.

• [Viewing Monitoring Results:] The local IP address was in some cases displayed instead of the Remote Public IPV4 address (as in some cases, the latter could not be detected) on the Client Sessions tab (on Monitoring Results page).

• [Database:] The database structure has been optimized. Please note that after updating Ekran System, the data migration process will begin as soon as the Application Server starts up. Migration takes place in the background, which may take some time to complete and affect system performance while in progress. Recommendations for updating Ekran System can be found on the Updating the System (Checklist & Best Practices) page.

Issues Fixed:

• [Management Tool UI:] Not all text on some pages was completely translated in the Japanese language localization – fixed.

• [Monitoring Linux Clients:] In certain cases, Linux Clients went into Rescue mode – fixed.

• [Management Tool UI:] Improper "Internal server error" message was displayed when the session timed out – fixed.

• [Monitoring Windows Clients:] In certain cases, many short (5-20 second) empty sessions (with idle events only) were created – fixed.

• [Monitoring macOS Clients:] In certain cases, macOS Clients went offline despite the connection with the Application Server remaining established – fixed.

• [Monitoring Windows Clients:] In certain cases when using multiple monitors, some screen captures (on the second monitor) were not recorded – fixed.

• [User Management:] One Management Tool user was detected as 2 different users when logging in using different registers (upper case / lower case) – fixed.

• [Management Tool UI:] In certain cases, pages refreshed automatically – fixed.

• [Password Management:] In certain cases, the password could not be rotated automatically for Unix Account (SSH) secrets – fixed.

• [Management Tool UI:] Performance issues occurred when using the Management Tool in offline mode after updating to Ekran System version 7.1 – fixed.

• [Access Management:] In certain cases, users permitted to log in using 2FA were not displayed in the grid on the Two-Factor Authentication tab – fixed.

• [Application Server Configuration:] It was not possible to save a custom email subject for notifications in a non-default tenant – fixed.

• [Integration with Azure SSO:] Authentication error "X509, Multifactor" occurred when logging in to the Management Tool while using Azure SSO with Ekran System – fixed.

• [Viewing Linux Client Sessions:] When viewing remote SSH sessions, some session output was not displayed in the Metadata grid (of the Session Viewer) in certain cases (e.g. when setting the ID in the TERMINAL_OUTPUT database table to greater than int.MaxValue) – fixed.

• [Blocking Users] In certain cases, the user was not forcibly logged out when blocking a user during a live session – fixed.

Ekran System® v. 7.0.50 (Build: 7.0.932) 

New Features:

• [Master Panel v.1.4:] New functionality added (in an additional grid) for viewing all archived sessions from all Application Servers (in multiple deployments) in a single interface.

• [Health Monitoring:] The Transaction log retention period can now be modified from the default value of the last 30 days (by adding the HealthMonitoringCleanPeriod key to the EkranServer.Settings.config file).

• [Viewing Linux Clients Sessions:] Linux terminal keystroke inputs can now be monitored in SSH sessions.

• [Monitoring Linux Clients:] The amount of output recorded during monitoring from each command in SSH sessions can now be limited, to reduce the database space used.

Improvements:

• [Viewing Linux Client Sessions:] SSH sessions which restart at midnight are now linked to each other, and can easily be switched between by clicking the new (Previous Session and Next Session) buttons in the Session Player.

• [Database:] The database structure has been optimized. Please note that after updating Ekran System, the data migration process will begin as soon as the Application Server starts up. Migration takes place in the background, which may take considerable time to complete, and affect system performance while in progress. Recommendations for updating Ekran System can be found on the Updating the System (Checklist & Best Practices) page.

Issues Fixed:

• [Viewing Monitoring Results:] Incorrect user names were displayed on the Archived Sessions tab in certain cases after an Archive & Cleanup operation – fixed.

• [Viewing Monitoring Results:] Not all the sessions of the selected users were displayed on the Monitoring Results page when filtered by the Who filter (the default value of 1,500 sessions can now be modified) – fixed.

• [Viewing Linux Client Sessions:] In certain cases (involving long SSH sessions) opened in the Session Viewer, the session could not be played (and screen captures could not be not displayed) in the Session Player – fixed.

Ekran System® v. 7.0.46 (Build: 7.0.855)

Improvements:

• [Ekran System UI:] Ekran System now has a new logo (

• [Alert Management:] The Description field while adding a new alert (or editing an existing alert) now allows up to 500 characters to be entered (instead of 200 previously).

Issues Fixed:

• [Management Tool Localizations:] Various translation issues for Spanish and Japanese localizations – fixed.

• [Windows Clients:] Issue with Clients going offline in certain cases in Protected Mode – fixed.

• [Windows Clients:] Issue with recording Client sessions in certain cases on Terminal Servers – fixed.

Ekran System® v. 7.0.40 (Build: 7.0.785)

Improvements:

• [Licensing:] After activating a Subscription serial key, it is now possible to replace it with a different key (the Deactivate Selected, Activate Product Online, and Activate Product Offline buttons remain displayed).

• [USB Monitoring:] When defining USB rule exceptions, wildcards (using a single "*" character) can now be entered (which can also be used instead of any special characters contained in the Device Hardware ID which are not accepted by the system, e.g. "?").

Issues Fixed:

• [Password Management:] The password could not be remotely rotated for Unix Account (SSH) secrets on Linux Client computers in language localizations other than English – fixed.

• [Two-Factor Authentication:] The system prompted the user to enter the RDP credentials twice in certain cases when Mass 2FA was enabled – fixed.

Ekran System® v. 7.0.30 (Build: 7.0.683)

New Features:

• [macOS Clients]: File Upload operations performed by users on macOS Client computers can now be monitored (in the similar way as for Windows Clients), along with associated alerts.

Ekran System® v. 7.0.20 (Build: 7.0.611)

New Features:

• [Management Tool]: To enhance security (e.g. to prevent brute-force attacks), user accounts can now be temporarily locked automatically after incorrect login credentials are entered multiple times.

    Locked accounts can be unlocked at any time by an administrator on the User Management page.

Improvements:

• [Syteca Encryption]: SHA-1 has now been updated to SHA-2 in the Ekran System Master Certificate (EkranMasterCertificate) – for both new installations by default, and for existing installations after reissuing the Master Certificate.

• [Linux Clients]: Permissions for log files are now set to a minimum by default.

• [Third-Party Products]: Several components and libraries have been updated to improve security.

Issues Fixed:

• [Viewing Monitoring Results]: The sessions of some Clients had an incorrect timestamp due to different time zones – fixed.

• [Database Management]: Some sessions were archived despite no archive & cleanup rules being configured – fixed.

• [One-Time Passwords]: In certain cases, approvers did not receive access requests by email – fixed.

Ekran System® v. 7.0.0 (Build: 7.0.358)

New Features:

• [Anonymizer]: Enables compliance with data protection and privacy laws, standards and regulations (e.g. GDPR) by anonymizing personally identifiable information (e.g. User Name, Client Name, and Remote Host Name values are randomized) to protect it from being viewed, unless a request to expose a specific user's data is first approved.

• [macOS Clients]: Clipboard Copy/Cut operations performed by users on macOS Client computers can now be monitored (+ alerts configured), in the similar way as for Windows Clients.

• [Viewing Client Sessions]: New column was added to display the Time Zone (in UTC) of the Client computer (for Windows and Linux Client sessions).

Improvements:

• [Management Tool]: New improved UI design – please be aware of some changes in the layout, e.g. the Configuration (and Serial Key Management) pages have been moved, and now instead open from the 

• [Two-Factor Authentication]: Option added to disable the automatic Mass 2FA feature for a Client (or Client group).

• [macOS Clients]: macOS Ventura is now supported for remote mass deployment (using VMware Workspace ONE UEM).

• [Database]: The structure has been optimized. Please note that after updating Ekran System, the data migration process will begin as soon as the Application Server starts up. Migration takes place in the background, which may take some time to complete and affect system performance while in progress. Recommendations for updating Ekran System can be found on the Updating the System (Checklist & Best Practices) page.

Issues Fixed:

• [Hardware Security Module]: Various issues with HSM key rotation – fixed.

• [Tray Notifications application]: Various issues – fixed.

Ekran System® v. 6.63.1 (Build: 6.63.729)

New Features:

• [Password Management (PAM)]: The new Password Checkout functionality allows security to be enhanced in various ways, but primarily by preventing more than one user from using any specific secret at any one time.

Improvements:

• [Viewing Monitoring Results]: Various improvements have been made to the functionality and UI of this page, and the performance has been optimized.

• [Database]: The new Data Migration Progress Bar is now displayed (at the top of all Management Tool pages) after updating the system until data migration has completed if the database structure has been optimized (i.e. modified) since the previous installed version.

• [Database]: The structure has been optimized. Please note that after updating Ekran System, the data migration process will begin as soon as the Application Server starts up. Migration takes place in the background, which may take some time to complete and affect system performance while in progress. Recommendations for updating Ekran System can be found on the Updating the System (Checklist & Best Practice) page.

• [Windows Clients]: Various improvements have been made concerning restarting sessions (at midnight).

• [Windows Clients]: Custom credentials providers are now supported for user authentication (e.g. pGina and smartcard logins).

Issues Fixed:

• [Playing Client Sessions]: An issue with screen capture recording on multiple monitors in certain cases (when a monitor is connected/disconnected during a session) – fixed.

• [Playing Client Sessions]: An issue in certain cases with storing paths to folders containing screen captures recorded – fixed.

• [Scheduled Reports]: An issue in certain cases when adding scheduled report rules to Сlient groups and user groups – fixed.

• [PostgreSQL Database]: The Application Server would not start in certain cases involving creating PostgreSQL databases manually – fixed.

Ekran System® Data Connector v. 1.2 (Build: 1.0.107)

Improvements:

• [API endpoints]: A new endpoint has been added to the requests list to get alerts data (e.g. for use with Power BI).

Ekran System® v. 6.62.2 (Build: 6.62.872)

New Features:

• [Secondary User Authentication]: Now also works when the Client computer is offline (for users who have previously logged in to the Client computer using secondary user authentication when online).

• [Monitoring Linux Clients]: Deduplication of commands and parameters is now implemented to allow the amount of monitoring data generated to be reduced, where the time interval between which duplicate commands-parameter pairs are not recorded is specified in the server config file (in the LinuxDeduplicationPeriod value (in ms), which by default is "1500", where "3000" is the max. value, and "0" is disabled).

Improvements:

• [Viewing Client sessions]: Additional information about Alerts (Alert Name, Risk Level, What, and When) is now displayed in the Details area of the Session Viewer.

• [User Management]: The logic for User-to-User access (on the User Access tab) has been improved, which is used for restricting which endpoint users Management Tool users can view the sessions of, and includes a new "Sync Active Directory User Groups" button to allow user groups (in LDAP target domains) to be updated manually.

• [Database]: The structure has been optimized. Please note that after updating Ekran System, the data migration process will begin as soon as the Application Server starts up. Migration takes place in the background, and may take considerable time to complete, and affect system performance while in progress. Recommendations for updating Ekran System can be found on the Updating the System (Checklist & Best Practice) page.

Issues Fixed:

• [Configuration]: There was an issue with the use of a custom certificate when setting up Single Sign-On (SSO) – fixed.

• [Configuration]: Multiple Administrator Email addresses could not be specified (separated by semicolons) in the Email Sending Settings – fixed.

• [Viewing Monitoring Results]: Some sessions displayed were much longer than 24 hours and could not be viewed in the Session Player – fixed.

Ekran System® v. 6.62.1 (Build: 6.62.800)

New Features:

• [Installing macOS Clients]: Can now be performed by way of generating an INI file to define the settings (e.g. the Client Group that the Client will be installed in), including for remote mass deployment.

• [Client Group Management]: Client groups can now be cloned, to enable a new Client group to be created with the same settings (but with a different name) as an existing one.

• [Disaster Recovery for mac OS Clients]: New logic has been implemented whereby multiple Application Server IP addresses / hostnames can now be defined in the Client settings (for the Client to switch between Application Servers automatically if there is no response).

• [Viewing macOS Clients]: The serial number of macOS Client computers can now be displayed in a new column.

Improvements:

• [Updating macOS Clients]: Can now be performed either manually or automatically (i.e. the same as for Windows and Linux Clients).

• [Cluster Settings]: The logs from individual nodes in a cluster can now be downloaded.

• [Health Monitoring]: Users can now manage warnings about running out of free space by using a new setting ("DatabaseStorageSizePerClientWarning") in the "EkranServer.settings.config" file.

• [Alert Management]: Global Alert Settings can now be defined differently for every tenant.

• [Alert Management]: The functionality for importing alerts has now been made more user-friendly.

Issues Fixed:

• [The Tasks List]: In certain cases, tasks could not be cancelled – fixed.

• [Forensic Export]: In certain cases, Client sessions export tasks got stuck (and could not be cancelled) – fixed.

• [Viewing Archived Client Sessions]: A user with the appropriate permissions could not view archived sessions from other computers – fixed.

• [Installing Windows Clients]: There was an issue when installing Clients on Citrix – fixed.

• [Application Server Configuration]: There was an issue with authentication when using an AD global catalog – fixed.

Ekran System® v. 6.61.6 (Build: 6.61.402)

Improvements:

• [Reports]: A column has been added to now display Remote Public IPv4 values in those report types which also display Remote IPv4 values.

Issues Fixed:

• [Reports]: In certain cases, some statistics were displayed incorrectly in User Productivity reports and Activity Summary reports – fixed.

Ekran System® v. 6.61.5 (Build: 6.61.342)

Improvements:

• [User Behavior Analysis (UEBA)]: Performance optimized for environments that do not have UEBA configured (with the Risk Score now calculated only when UEBA rules are enabled).

• [Linux Clients]: CPU usage by Ekran System offline pool manager – optimized.

Issues Fixed:

• [Users and User Groups]: In certain cases, some users were not able to generate reports, etc. – fixed.

• [Viewing Monitored User Activity]: In certain cases, not all information was recorded (e.g. screen captures showed only partially rendered windows, etc.) – fixed.

Ekran System® v. 6.61.2 (Build: 6.61.224)

New Features:

• [Session Viewer]: Various UX improvements, including the left and right arrow keys can now be used to navigate between alerts triggered in the session (which switches between videos in the Session Player) – added.

Improvements:

• [Health Monitoring Transaction log]: Identical event records are now grouped into a single entry, with the number of identical events that have occurred displayed in the new Count column - added.

• [Management Tool]: Various aesthetic improvements to some UI pages – have been made.

• [Database]: The structure – has been optimized. Please note that after updating Ekran System, the data migration process will begin as soon as the Application Server starts up. Migration takes place in the background, and may take some time and affect system performance while in progress. Recommendations for updating Ekran System can be found on the Updating the System (Checklist & Best Practice) page.

Ekran System® v. 6.60.1 (Build: 6.60.62)

Improvements:

• Fingerprint authorization [Windows Clients]: in combination with 2FA, OTP, and secondary user authentication – now supported.

• Alerts tab [Monitoring Results]: Performance – optimized.

• Localizations [Management Tool]: Japanese translation – updated.

• Additional third-party system libraries and components – updated.

• Database structure – optimized. Please note that after updating Ekran System, the data migration process will begin as soon as the Application Server starts up. Migration takes place in the background, and may take some time and affect system performance while in progress. Recommendations for updating Ekran System can be found on the Updating the System (Checklist & Best Practice) page.

Ekran System® v. 6.59.1 (Build: 6.59.213)

New Features:

• Apple M1 devices [macOS Clients]: are now supported, so these machines can also be monitored.

Improvements:

• Viewing Clients [Client Management]: The Last User column can now be searched, filtered and sorted.

• Golden images [Client Management]: Duplicate Clients can now be avoided (so duplicates are no longer displayed on the Client Management page).

• Third-party system components and libraries: Various updates have been made.

Issues Fixed:

• Keystroke logging [Monitoring Results]: Certain keystrokes entered in the Polish language could not be detected – fixed.

Ekran System® v. 6.58.1 (Build: 6.58.141)

New Features:

• Alerts tab [Monitoring Results]: This new tab has been added to make all information about all alert events more easily accessible, and viewable in one place.

• Ekran System Data Connector: Microsoft Power BI templates can now be used to generate various custom reports using Ekran System data imported via its API.

Improvements:

• Viewing Linux Clients [Client Management]: New icon added to show Linux Clients installed with the X11 parameter.

• Alert Viewer: This feature has now been deprecated (and all links to open it on various pages have instead been removed / redirected to the new Alerts tab, since the same information is now available in a more convenient way by using this new feature – see above). 

• macOS Clients: New logic for connecting to the Application Server has been implemented to optimize the process.

• Database structure: has been optimized. Please note that after updating Ekran System, the data migration process will begin as soon as the Application Server starts up. Migration takes place in the background, and may take some time and affect system performance while in progress. Recommendations for updating Ekran System can be found on the Updating the System (Checklist & Best Practice) page.

Issues Fixed:

• Viewing macOS Clients [Client Management]: Showed the user's local IP address (instead of the IP address of the VPN) when connected to a VPN – fixed.

• Health Monitoring: The error "Unable to connect to Ekran System website to get current version number." was displayed in the transaction log when the system is used in offline mode – fixed.

Ekran System® v. 6.57.1 (Build: 6.57.176)

New Features:

• Mass Two-Factor Authentication [Access Management] using (Microsoft or Google) authenticator apps: 2FA can now be enabled for all users of all the Client computers in a Client Group at once. 

Improvements:

• Reports: New capability added to allow the users to be specified who can download and view all reports generated.

 • Scheduled Reports: The "Generate" (

Ekran System® v. 6.56.1 (Build: 6.56.105)

New Features:

• X-Forwarded sessions [Linux Clients]: are now supported for monitoring.

• Playing Client sessions [Monitoring Results]: A session can now be opened by:

- clicking the new Play button added.

- double-clicking (instead of previously single-clicking) on a session.

Improvements:

• The total number of clients [Client Management]: is now displayed.

• Remote installation of Windows Clients: The overall stability of the process has been improved.

• Database structure: has been optimized. Please note that after updating Ekran System, the data migration process will begin as soon as the Application Server starts up. Migration takes place in the background, and may take some time and affect system performance while in progress. Recommendations for updating Ekran System can be found on the Updating the System (Checklist & Best Practice) page.

Issues Fixed:

• Email notifications [Alert Management]: Multiple alert events were sent in one email in certain cases when configured to send separate emails for each alert event – fixed.

• Scheduled Archiving & Cleanup [Client Management]: Some sessions were not archived in certain cases (involving scheduling Archive & Cleanup for both a Client and its Client group separately) – fixed.

Ekran System® v. 6.53.1 (Build: 6.53.127)

Improvements:

• Database Management Archive Parameters [Configuration]: New option added for configuring the credentials of a user for a Network-Attached Storage (NAS) system.

• Localizations [Management Tool]: Translations added for extra pages/tabs for Japanese, German, Polish, and Spanish languages.

• Application Server: Storage of settings moved from system registry to config file.

Issues Fixed:

• Viewing Client sessions [Monitoring Results]: Session could remain in Live status (and be duplicated) after user logout in certain cases – fixed.

• High Availability mode [Application Server]: Isolation mode could not be enabled for an Application Server in a failover cluster – fixed.

Ekran System® v. 6.52.1 (Build: 6.52.114)

New Features:

• SIEM integration [Configuration]: can now be used with a secure TLS connection.

• Hardware Security Module (HSM) integration [Database Parameters]: new functionality added to allow the use of an existing private key when moving the Master Certificate to an HSM storage device.

Improvements:

• Cleanup of the sessions of deleted Clients [Database Parameters]: various improvements made.

• Playing Linux SSH sessions [Session Player]: performance improved.

• Report generation speed [Reports]: has been significantly improved for some reports.

Issues Fixed:

• Sessions Archiving & Cleanup tasks [Health Monitoring]: the statuses of tasks on the Tasks List were not shown correctly in certain cases – fixed.

• Alert email notifications [Alert Management]: were not sent to all users specified in the alert in certain cases – fixed.

• Dashboards customization: in some cases dashboards could not be resized correctly – fixed.

• Updating Windows Clients: stability improved.

• Updating the Application Server: an issue in cases where the database uses case-sensitive collation – fixed.

Ekran System® v. 6.51.1 (Build: 6.51.91)

Improvements:

• HSM integration (for storage of the Ekran System Master Certificate on Thales Hardware Security Module to enhance security):

- The frequency of requests for a key sent to SafeNet KeySecure – optimized.

- Support for Windows Core systems – added.

• Screen capture compression [Windows Client Management]: New option added to manage the compression level of screen captures from 1-9 (where the default value of 9 is the highest compression level which uses the least disk space, but with higher CPU consumption on the Client machine).

• Client Version column [Client Management]: Can now be sorted (first by the icon showing whether the Client is up-to-date, and then by the Client Version number).

• Windows Clients: Clients that are not up-to-date still monitor user activity, but they can now also send the data to the Application Server.

• Health Monitoring log records: Optimized to reduce the size of the database transaction log.

• Memory usage [Windows Client and Application Server sides]: Various optimizations implemented.

Ekran System® v. 6.50.1 (Build: 6.50.35)

New Features:

• New "Client Version" column [Client Management]: Added to display the current version of each Client (and whether it is up-to-date).

Improvements:

• Cleanup [Client Management]: No longer scheduled by default for new installations.

   NOTE: Existing deployments are not affected in any way when updated, with Cleanup remaining scheduled every 30 days by default.

• Authentication Options [Client Management]: If the Enable the displaying of additional message option is enabled, in the custom notification pop-up window displayed on login, for the convenience users, the Continue button is now selected by default (instead of the Cancel button).

• Archive & Cleanup [Client Management]: Retry Policy updated to improve stability in cases when attempting to copy the screen capture files to the archive folder multiple times.

Issues Fixed:

• Health Monitoring Notifications [Configuration]: Multiple email addresses could not be added – fixed.

• Monitoring Time Filtering [Monitoring Results]: Session status remained displayed as Live after monitoring of the Client finished at the end of the time period defined in the Monitor only during defined hours option – fixed.

• File Upload [Windows Clients]: Alert rules were not triggered in certain cases if the display language was not set to English – fixed.

• Scheduled Reports [Reports]: Generation failed in certain cases involving duplicate file names – fixed.

• Client uninstallation [macOS Clients]: Could not be carried out remotely by way of the Management Tool in certain cases – fixed.

• SUSE Linux Enterprise Server (SLES) v.15 [Linux Clients]: Issues when installing and rebooting – fixed.

Ekran System® v. 6.48.1 (Build: 6.48.33)

Improvements:

• Management Tool localizations – Spanish [ES] and Polish [PL] versions are now available.

Issues Fixed:

• Ekran System Master Certificate – in certain cases the certificate could not be moved to HSM external storage on the second node in a cluster – fixed.

• Application Server installation – in certain cases database installation failed when updating from very old versions after moving the Application Server to a different machine – fixed.

Notes:

• Windows Server 2022 – is supported for all Ekran System components.

Ekran System® v. 6.47.1 (Build: 6.47.38)

New Features:

• User Management – a new User Access tab has been added to allow Management Tool users to be restricted to only be able to view the monitored sessions of specific endpoint users.

   NOTE: The neighboring Client Access tab (previously called the Client Permissions tab) has also been renamed.

• Client Management – a new Last User column has been added to display the name (i.e. first name and last name) of the endpoint user who last logged in to each Client computer.

Improvements:

• Session Player – the Full Screen mode interface has been enhanced to provide a better user experience (now similar to that of YouTube), including hotkeys (F - enter full screen, Esc - exit full screen, Space - play/pause, Right arrow - next, Left arrow - previous).

• Application Server installation – a warning notification has been implemented to inform the user that installation cannot be performed if multiple Master Certificates (called EkranMasterCertificate) are detected in the certificate store.

• Password Management (PAM) secrets – a watchdog has been implemented for Ekran System Connection Manager to detect and recover from failure automatically.

• Multi-Tenant mode – different internal users in different tenants can now be given the same username.

• Database structure optimization. Please note that after an update of Ekran System, the data migration process begins as soon as the Application Server starts up. Migration takes place in the background, and may take some time and affect system performance while in progress.

   NOTE: Recommendations for best practice can be found on the Updating the System (Checklist & Best Practice) page.

Issues Fixed:

• Alerts – the sending of email notifications was delayed in certain cases – fixed.

• One-Time Passwords (OTPs) – Requests for one-time passwords would not be sent in certain cases when configured for a Client group – fixed.

• macOS Clients – after being offline, the sending of data to the Application Sever was delayed when the connection was restored in certain cases – fixed.

Ekran System® v. 6.45.1 (Build: 6.45.34)

New Features:

• AD Global Catalog integration – is now supported, which allows Management Tool users to be added from any domain within an Active Directory forest using a single global catalog LDAP target.

   NOTE: See also Release Notes 6.44.1.

Improvements:

• Linux Red Hat (RHEL) 8.4 Clients – are now supported for monitoring.

Issues Fixed:

• Archive & Cleanup would not switch from Scheduled to Never in certain cases – fixed.

Ekran System® v. 6.44.1 (Build: 6.44.28)

Improvements:

• Adding AD users (User Management) – Users / user groups from all domains are now added in the User / User group field. This change will support the upcoming integration with AD Global Catalog.

• Health Monitoring notifications – The severity levels of some event notifications have been changed.

• Database structure optimization. Please note that after an update of Ekran System, the data migration process begins as soon as the Application Server starts up. Migration takes place in the background and may take some time.

Issues Fixed:

• Forensic Export in certain cases contained fewer screen captures than when viewing sessions on the Monitoring Results page – fixed.

• Generated Reports could not be downloaded by users not belonging to the Administrators user group in certain cases – fixed.

Ekran System® v. 6.42.1 (Build: 6.42.46)

New Features:

• Alerts [on macOS Clients] – are now supported as for Windows Clients, with unique alert IDs, keywords, etc.

• Master Panel (v. 1.1) – Single-Sign On (SSO) is now also implemented for this stand-alone component of Ekran System for large organizations with multiple distributed Application Server instances. The Master Panel allows users to view all user sessions from all Management Tools in a single interface, and can be downloaded from our website: https://www.ekransystem.com/sites/default/files/ekransystem/EkranSystem_MasterPanel-en.zip

Improvements:

• Amazon Linux 2 Clients – UI sessions can now be monitored.

• AD users [on Linux Clients] – sessions can now be monitored.

• Ekran System Connection Manager (PAM) – installation is no longer supported on old Windows desktop computers.

• Audit log – now includes a full set of all actions performed with secrets in the Management Tool.

Issues Fixed:

• macOS Clients did not stop monitoring when free space on the computer was less than 500 MB – fixed. 

• One-time passwords (on the Access Management page) could not be generated for AD users – fixed.

• Client Management yellow exclamation mark would not disappear from the Management Tool in certain cases – fixed.

• Windows Clients did not detect the active windows title in certain cases – fixed.

• On a system with two NICs, Clients could go offline in certain cases – fixed.

Ekran System® v. 6.41.1 (Build: 6.41.46)

New Features:

• HSM integration – Ekran System is now integrated with the Thales SafeNet KeySecure hardware security module, thereby offering the capability to store the Master Certificate more securely in external storage.

• Application Credentials Broker (PAM) – This new stand-alone component of Ekran System is a REST API integration tool designed to allow customers to securely (with access token rotation) get PAM secrets data for applications, without needing to log in to the Management Tool, in order to use for their own business purposes.

Improvements:

• Name of the organization – is now displayed on the Management Tool Home page, based on the license information.

• Client Uninstallation key (in Multi-Tenant mode) – can now be different for different tenants.

Issues Fixed:

• Automatically send one-time passwords to Active Directory users feature did not allow user requests for a password in certain cases – fixed.

Ekran System® v. 6.40.1 (Build: 6.40.29)

Improvements:

• Administrators user group – the default administrator of the Management Tool can no longer be removed from this default user group.

• Multi-Tenant mode – the option to block users is now implemented for users of non-default tenants.

Issues Fixed:

• Solaris Clients going into Rescue mode in certain cases– fixed.

• Clients dashboard was showing an incorrect warning message about Clients not being licensed – fixed.

• Alert notifications were received in one email instead of separate emails for each alert, in certain cases - fixed.

Ekran System® v. 6.39.1 (Build: 6.39.51)

Improvements:

• Forensic export – additional validations added.

Issues Fixed:

• Non-persistent VDI master image host was reporting in console multiple times in certain cases – fixed.

Ekran System® v. 6.38.1 (Build: 6.38.19)

Improvements:

• Forensic Export History page – in the case of failure of any Forensic Export tasks, these tasks can now be deleted.

Issues Fixed:

• Activity Summary Grid Report issues with the time shown – fixed.

• Client Uninstallation key was reset to the default after updating the system – fixed.

Ekran System® v. 6.37.1 (Build: 6.37.13)

Improvements:

• Single Sign-On (SSO) and Two-Factor Authentication (2FA) – can now function together.

• Reissuing the Master Certificate – now also supported on Windows Server 2019 Core.

• User Administrative Permissions – a user is forcibly logged out from the Management Tool whenever their permissions are changed. The user then has the updated set of administrative permissions after re-logging in.

• Reports – new validation added.

• Embedded API Session Viewer – updated.

Issues Fixed:

• Remote Host IP Filtering – the Exclude local sessions option has been optimized.

• Audit log filters – fixed.

• Dashboard resizing – fixed.

• Export Filtered Clients feature (from the Client Management page) – fixed.

Ekran System® v. 6.35.1 (Build: 6.35.353)

New Features:

• New “Tasks List” tab on the Health Monitoring page – This new feature and interface is for providing transparency about what is happening on the server side. It shows various types of task queues, so users can check the progress of specific tasks, as well as cancel the tasks. This feature also includes:

- New “Generated Reports” tab on Reports interfaces added – so now users can download previously generated reports at any time.

- Load balancing – if used with multiple Application Server instances, the processing of tasks can now be divided between all the Application Server nodes.

   NOTE: If a scheduled report contains multiple report types, each type of report is sent in a separate email.

• Reissuing the Master Certificate – new functionality added to allow the Master Certificate to be reissued in case it expires.

• Detect Idle Events (on macOS Clients) feature, which is also used in some reports (for calculating user activity time, user productivity time, etc.) – added.

Improvements:

• Windows XP OS – no longer supported on Client machines (although previously installed Clients of this type will still function correctly).

• Option to specify network interface (on Windows Clients) – a specific network can now be selected on the Client machine for the connection between the Client and the Application Server if 2+ networks are available.

• Protected mode feature – now only supported on Client machines running Windows 10 and Windows Server 2016/2019.

• Performance of Reports and of Ekran System Data Connector – optimized significantly for processing of new sessions.

• Database structure optimization. Please note that after an update of Ekran System, the data migration process begins as soon as the Application Server starts up. Migration takes place in the background and may take some time.

Issues Fixed:

• Rescue mode (on Linux Clients) – this feature will now be automatically applied to stop monitoring whenever the critical free space threshold is reached on Client machines – fixed.

• Secrets (PAM) were not shown for users with certain domain settings – fixed.

Ekran System® v. 6.34.5 (Build: 6.34.126)

Issues Fixed:

• The Ekran System Connection Manager (PAM) could not connect when retrieving the list of secrets – fixed.

Ekran System® v. 6.34.3 (Build: 6.34.75)

Improvements:

• Alerts (on Windows Clients) – now include a unique Alert ID, and the specific keyword that has triggered the alert, in both email notifications and the Alert Viewer.

Ekran System® v. 6.34.2 (Build: 6.34.57)

Issues Fixed:

• Sorting and filtering of monitoring results by duration issue – fixed.

Ekran System® v. 6.34.1 (Build: 6.34.53)

New Features:

• Secondary user authentication (on Linux Clients) – capability to exclude individual users from checking secondary user authentication added.

• Password rotation for secrets (PAM):

- SSH key rotation for SSH secrets – added.

- Password rotation for all secrets –stability improved with transactional integrity check during rotation added.

• Alerts (on macOS Clients) – can now be shown to endpoint users (a warning message appears on the Client when an alert is triggered).

Improvements:

• Offline Client cache (on Linux and macOS Clients) – stability improved.

• Ekran System Connection Manager (PAM) – fixed for use on low resolution screens.

Ekran System® v. 6.33.2 (Build: 6.33.122)

Improvements:

• Application Server – can now be started by a non-admin user.

• Password Management page – improved search functionality.

• Database cleanup – stability improved (for cases when binaries are in folders).

Ekran System® v. 6.33.1 (Build: 6.33.92)

New Features:

• Ekran System Data Connector v.1.0 – new component released. This stand-alone component of Ekran System is used for integrating a customer’s IT system via the Ekran System API (downloadable from our website: https://www.ekransystem.com/sites/default/files/ekransystem/EkranSystem-DataConnector.zip).

• Remote Host IP Filtering – new capability not to record local sessions added.

Improvements:

• Single-Sign On (SSO) – HTTPS requests added.

• Audio recording – stability improved.

• Cleanup for screen captures in shared folders – stability improved.

• Audit Log (previously known as the Management Tool Log) – renamed.

• Database structure optimization. Please note that after an update of Ekran System, the data migration process begins as soon as the Application Server starts up. Migration takes place in the background and may take some time.

Ekran System® v. 6.32.1 (Build: 6.32.34)

New Features:

• macOS Clients URL Monitoring – alerts added.

Improvements:

• Session Player Metadata grid – UI simplified (dates removed from Activity Time column).

• Viewing Monitoring Results permission– archived sessions are now also included in this permission.

Ekran System® v. 6.31.2 (Build: 6.31.60)

Improvements:

• Remote Mass Deployment on macOS Clients. Mobileconfig files to support VMware Workspace ONE – added.

Ekran System® v. 6.31.1 (Build: 6.31.28)

New Features:

• macOS Clients URL Monitoring – added (Chrome and Safari browsers).

Improvements:

• Client Management user interface, including:

- Bulk action for more than 1,000 Clients – can now be applied.

- Filters and displaying number of Client groups – optimized.

• SIEM Integration. User’s comment on session in CEF and LEEF logs – added.

• Scheduled Reports. “Last day of the month” option for scheduling – added.

• Health Monitoring. “Send emails only to a specific domain” option – added.

• Password Management. Sorting of columns – added.

Issues Fixed:

• Customized logo was not applied (in certain cases) – fixed.

• Scheduled Reports tab search – fixed.

Ekran System® v. 6.30.2 (Build: 6.30.51)

Issues Fixed:

• Assigning kernel-level USB monitoring rules. USB blocking rules (temporarily) could not be assigned on Windows 10 Clients version 1909 or higher – fixed.

Ekran System® v. 6.30.1 (Build: 6.30.42)

Improvements:

• Access requests for secrets (PAM). A new capability to grant access for a specific period of time – has now been added to this feature.

• Client Management page. A re-designed, more user-friendly interface, with some new functionality added:

- Improved performance.

- Bulk action for working with Clients – added.

- The last activity time for Clients – is now displayed.

- The number of Client groups to which the Client belongs – is now displayed.

- Navigation to Client sessions in one click – added.

• Two-Factor Authentication tab. Sorting of rules – added.

Issues Fixed:

• The additional message modal window was not included in session recording (in certain cases) – fixed.

• SIEM Logs were not deleted according to a schedule (in certain cases) – fixed.

• Secrets in the Ekran System Connection Manager (PAM) were displayed only after clicking the Refresh button (in certain cases) – fixed.

Ekran System® v. 6.29.1 (Build: 6.29.58)

Improvements:

• Workstation licenses for Linux Clients. If you only need to monitor Linux GUI (X11) sessions on Linux Clients, you can now assign licenses of the Workstation type to them. All Workstations (Linux GUI, macOS and Windows) can now work from the same license pool. Note: only one Linux GUI session can be monitored at one time, and SSH sessions cannot be monitored.

• Load balancing. The following modifications have been made to facilitate the use of third-party load balancing software with Ekran System which is coming soon:

- The Application Server Installer. The installer has been modified to allow the adding of multiple Application Server instances to your deployment.

- License storage. Ekran System can now operate with a single common pool of activated serial keys for use with multiple Application Server instances.

• Database structure optimization. Please note that after an update of Ekran System, the data migration process begins as soon as the Application Server starts up. Migration takes place in the background and may take some time.

Known Issues:

• Assigning kernel-level USB monitoring rules. USB blocking rules (temporarily) cannot be assigned on Windows 10 Clients version 1909 or higher.

Ekran System® v. 6.28.1 (Build: 6.28.84)

Ekran System® Standard and Enterprise Editions now offer the following new features and improvements:

• Access requests for secrets (PAM) – new functionality added to this feature. The options on the new Restriction Types tab now allow administrators to choose a type of access (always allow, always require approval, or allow only during work hours defined).

• Multi-tenant mode for macOS Clients – added.

• ServiceNow integration – improved:

- Users can now decide what ServiceNow table to search for an incident in.

- A ticket number can now be more that 11 characters. 

• Management Tool translation into Japanese – updated.

• Archive and Cleanup functionality – performance improved.

• Remote mass deployment on macOS Clients – support for installing on macOS Big Sur now added.

• Database structure – optimized. Please note that after an update of Ekran System, the data migration process begins as soon as the Application Server starts up. Migration takes place in the background and may take some time.

Ekran System® v. 6.27.6 (Build: 6.27.221)

Ekran System® Standard and Enterprise Editions now offer the following new features and improvements:

• Linux Client cleanup – performance improved.

• Master Panel – new component added. This major new functionality allows large organizations with multiple isolated Ekran System deployments to view all user sessions from all Management Tools in a single interface.

Ekran System® v. 6.27.5 (Build: 6.27.197)

Ekran System® Standard and Enterprise Editions now offer the following improvement:

• Network consumption – optimized.

Previous Release Notes Prior to 2021

To see older Ekran System Release Notes (for releases prior to 1 January 2021), please download the following file:

Ekran System Release Notes Prior to 2021 (up to v. 6.27.4).pdf