Copyright Agreement Kaseya. All rights reserved.

Transcription

1 R9.4 Release Notes November 10, 2016

2 Copyright Agreement The purchase and use of all Software and Services is subject to the Agreement as defined in Kaseya s Click-Accept EULATOS as updated from time to time by Kaseya at If Customer does not agree with the Agreement, please do not install, use or purchase any Software and Services from Kaseya as continued use of the Software or Services indicates Customer s acceptance of the Agreement Kaseya. All rights reserved.

3 Contents Cloud Backup... 1 Live Connect on Demand... 1 Browsing Assets in Live Connect... 4 Searching the Asset Browser... 4 Tenant Management... 4 vpro Secure Erase... 4 VSA User Interface Changes... 5 Integration with BMS/Vorex... 5 REST API... 5 Custom Extensions - Beta Deploy Agent URLs - Beta Live Connect to SSH Assets - Beta Endpoint Logs - Beta Central Storage - Beta Recording and Storage of KRC Sessions - Beta OAuth Clients - Beta Additional Features Additional Features - Beta Additional Features - Beta Bug Fixes Bug Fixes - Beta Bug Fixes - Beta Deprecated or Obsolete Features i

4

5 VSA Release Notes - R9.4 Beta 3 Cloud Backup Cloud Backup provides backup and recovery of physical and virtual machines, files, and databases to local or cloud storage. Cloud Backup installs an Acronis Backup Service client on agent machines that enables backups to be uploaded to a selected Acronis data center. You manage backups and restores for client machines using the Acronis Backup Service website. All backup data is secured by the Acronis account assigned to you when you purchase Cloud Backup licensing through Kaseya. Your data is encrypted even before it is sent using AES-256 encryption. Access to the Acronis Backup Service website is SSL encrypted. Cloud Backup provides a quick, simple user interface for applying Acronis Backup Service technology to all of your agent machines. You only have to create "backup groups" then use Cloud Backup to install the Acronis client on agent machines within that backup group. After that, jump to the Acronis Backup Service website to manage all backups and recoveries for your agent machines. Supported Acronis Backup Service features using Cloud Backup include: The creation of multiple backup plans that can be applied to multiple machines Backups and recovery of entire disk images or individual files Recovery using bootable media (ISOs) Mounting of volumes from backups Universal restore of backups to dissimilar hardware from the original machine Replication of backups to second locations Backups by policy rules Backups of SQL Server databases, Exchange databases and mailboxes and Office 365 mailboxes Backups of system states Backups of ESXi configurations Backups of VMware, Hyper V and VirtualBox VMs This initial release of Cloud Backup does not support the following Acronis Backup Service features: Installing Acronis agents on devices independently of the Cloud Backup using the MSP account provided through Kaseya. Installing the Acronis agents on mobile devices. Installing Acronis agents on Apple and Linux devices. Installing Acronis agents in Azure and EC2 cloud environments. Live Connect on Demand Live Connect on Demand installs temporary agents on machines. Temporary agents allows Live Connect to be used temporarily on a machine, up to a maximum of 12 hours. After the temporary agent session ends, the temporary agent is automatically uninstalled from the machine. 1. Use the Agent > Live Connect on Demand > Configuration to configure settings that apply to all temporary agent deployments. 2. Start a Live Connect session using any agent. 1

6 3. Add a new tab to display the Asset Browser ('Start a new session') window listing all the machines you are authorized to manage. 4. Click the monitor icon on the far left of the control bar. 5. In the Live Connect On Demand optionally include a Customer Name and Notes. These display in reports using the Temporary Agent Audit report part. 6. Select one of three methods for sending the download link to the user to install the temporary agent on a machine. Note: The unique session code included with the download link is only valid for specified number of minutes. Send - Sends an to the specified customer address. The machine user clicks the link in the message to begin installing the temporary agent. The format of the message is based on the template maintained using the Agent > Live Connect on Demand > Configuration page. Copy to Clipboard - Copy a link to your clipboard. You can subsequently paste the link in a message sent to the machine user. The machine user clicks the link in the message to begin installing the temporary agent. Done - Before clicking this option, provide the machine user with the unique session code displayed with this option. Instruct the user to point their browser to the authentication request service URL. The machine user enters the unique session code you provided on that browser page to begin installing the temporary agent. 2

7 7. In the VSA look for agent icons with an hour glass symbol to identify temporary agents. 8. To select an existing temporary agent to work with in Live Connect return to the Start a new session tab. My Agents lists temporary agents created by the currently logged in VSA user. All agents lists all temporary agents your scope allows you to see. For each temporary agent listed you can: Connect - Starts a Live Connect session with a selected temporary agent. Cancel - Uninstalls a temporary agent from its remote machine before the maximum number of minutes allowed expires. 9. Review Live Connect on Demand activities in the following locations: Metrics on the Agent > Live Connect on Demand > Dashboard page. Publish a report that includes the Temporary Agent Audit report part. This includes both installed and uninstalled temporary agents. The creation of Live Connect on Demand install packages on the Agent > Administration > Application Logging page. 3

8 Browsing Assets in Live Connect All agents are automatically considered assets. But it is also possible to create additional non-agent assets using the Discovery module. A new drop-down filter has been added to the Start a new session window of Live Connect to browse assets, not just agents. For any listed asset agent or non-agent you can click the asset info icon to view basic information about the asset. Searching the Asset Browser A single search field has been added to the Asset Browser. You can use this single search field to search for agents and assets by: asset/agent name asset/agent machine group asset/agent organization currently logged in user last logged in user Two drop-down lists used for filtering--one for machine groups and one for views--have been removed. Tenant Management A new Tenant Management module enables a tenant manager to quickly create and deploy tenant partitions in a multi-tenant instance of the VSA. The Tenant Management module is separately licensed and does not display as a module in an on-premise-only deployment. This same functionality is already used by Kaseya internally to support its "Software as a Service" (SaaS) implementation of VSA services. In a SaaS implementation of the VSA, service providers contract to access a VSA hosted and maintained by a VSA tenant manager. Service providers are allocated a unique tenant partition of a shared Kaseya Server and database. Within their assigned partition, service providers can only see their own organizations, machine groups, agents, procedures, reports, tickets, and any other types of user-defined data. Service providers in a tenant partition have full access to most functions of the VSA except system maintenance, which is the responsibility of the VSA tenant manager. Only two pages are required to manage tenant partitions: Tenants - Creates and maintains tenant partitions. Role Types - Defines the role types that can be assigned to each tenant partition. vpro Secure Erase A new vpro > Secure Erase page completely erases the drives on a remote target vpro machine. This feature is used primarily for recycling and repurposing vpro machines. Warning: All data on the machine will be erased in a secure manner, and cannot be recovered. Any data not backed up will be lost forever, and the agent will cease communicating with the KServer. Requires AMT 11.0 on the vpro machine. Firmware on the vpro machine may need to be updated to support remote secure erase. 4

9 Requires manual configuration of the Hard Drive password in the BIOS of each machine. The computer must be directly accessible via the vpro Proxy or VSA in order to run Secure Erase. If the machine is no longer accessible such as if the machine has been stolen then Secure Erase will not be successful. Creating a backup prior to the erase is strongly recommended. VSA User Interface Changes The VSA user interface has been updated. Changes includes: Combining the machine search, notification bar, time tracking and user login buttons to maximize space in the main header panel. Reorganizing the user logon submenu. Modernizing the look and feel of all buttons. Modernizing the look and feel of the agent status icons displayed throughout all agent pages. Modernizing the look and feel of all legacy asp pages. Modernizing the look and feel of the navigation panel. Removing the add bookmark and bookmark buttons at the top of the navigation panel. Integration with BMS/Vorex Kaseya has greatly improved the method of integration between Kaseya BMS /Vorex and the VSA. The new method called RMM Integration - Kaseya v2 applies to both on premise and VSA SaaS users. As part of integration, three new navigation pages were added to the System module. Sync Configuration Sync Transaction Log BMS API Log When BMS/Vorex integration is activated, the BMS/Vorex cloud-based PSA server creates, manages and resolves tickets for alerts generated in the VSA. Based on your configuration preferences, BMS/Vorex integration can automatically create customer accounts for all corresponding organizations in VSA. It also provides visibility of all assets managed by the VSA. REST API The following new REST API resources were added in R9.4: DELETE /assetmgmt/customextensions/{agentid}/{path} DELETE /assetmgmt/documents/{agentid}/rename/{source}/{destination} DELETE /temporaryagent/{agentguid} DELETE /tenantmanagement/roletypes/{roletypeid} DELETE /tenantmanagement/tenant DELETE /tenantmanagement/tenant/modules/{tenantid} DELETE /tenantmanagement/tenant/roletypes/{tenantid} GET /agentfile/downloadurl GET /agentfile/patchdownloadurls GET /agentfile/scanfiles GET /assetmgmt/customextensions/{agentid}/endpointref/{path} GET /assetmgmt/customextensions/{agentid}/file/{path} GET /assetmgmt/customextensions/{agentid}/folder/{path} GET /assetmgmt/temporaryagents GET /authx GET /echossl GET /environment 5

10 GET /ismoduleactivated/{moduleid} GET /temporaryagent/config GET /temporaryagent/ping GET /tenantmanagement/licensing/module/{moduleid} GET /tenantmanagement/licensing/modules/{tenantid} GET /tenantmanagement/roletypes GET /tenantmanagement/roletypes/{roletypeid} GET /tenantmanagement/tenant/{tenantid} GET /tenantmanagement/tenants POST /agent/package POST /agent/packagelink POST / POST /temporaryagent POST /temporaryagent/{agentguid}/notes POST /temporaryagent/ POST /tenantmanagement/roletypes POST /tenantmanagement/tenant PUT /assetmgmt/customextensions/{agentid}/file/{path} PUT /assetmgmt/customextensions/{agentid}/folder/{path} PUT /assetmgmt/documents/{agentid}/file/move/{source}/{destination} PUT /temporaryagent/{agentguid}/name PUT /tenantmanagement/tenant PUT /tenantmanagement/tenant/modules/{tenantid} PUT /tenantmanagement/tenant/modules/licenses/{tenantid} PUT /tenantmanagement/tenant/roletypes/{tenantid} PUT /tenantmanagement/tenant/roletypes/limits/{tenantid} Custom Extensions - Beta 2 Custom extensions provide Live Connect users with a repository for uploading executables to the VSA. Stored executables can then be downloaded and executed during a remote control session using just a single click. If a remote control session is started, the executable runs under the user account associated with that remote control session. If a remote control session is not started, the executable runs under the system account. An executable can also be "run as administrator". In this case the executable is run as a service account, even if a remote control session is in progress. Procedure 1. Start a Live Connect session using any agent. 2. Add a new tab to display the Asset Browser ('Start a new session') window, listing all the machines you are authorized to manage. Click the "puzzle piece" icon on the far right of the control bar. 6

11 3. Upload executables to the repository. After the upload, the executables display in the Extensions list. 4. Optionally Execute as RC User. A user must must logged in before this option is clicked to run the executable after it is downloaded to the remote control machine. 5. Optionally Download executables from the repository to your local machine. 6. Optionally Delete executables in the repository and remove them from the Extensions list. Deploy Agent URLs - Beta 3 A new Deploy Agent URL link displays on the System > Orgs/Groups/Depts/Staff > Manage page. This link is specific for each organization in each partition. 1. You must click an organization's Deploy Agent URL link at least once to create that organization's corresponding agent package on the Agent > Packages > Manage Packages page. 2. Optionally edit organization-specific agent packages just as you would any other agent package. 3. an organization's Deploy Agent URL link to the machine users of that organization to prompt them to install an agent. 4. When an organization's users click on the Deploy Agent URL sent to them, a new download page with a modern look displays. This download page is different from the legacy download page shown on the Manage Packages page. You can customize this new download page using a New Deploy Header tab on the System > Customize > Site Customization page. Live Connect to SSH Assets - Beta 3 Discovery now automatically determines if certain discovered assets are SSH server enabled. If SSH is enabled, Live Connect provides a new SSH column on the Assets page you click to start an SSH session on that asset. Since you do not have to install an agent, you can use this feature to work with a non-agent device, such as a router or switcher. Prerequisites The asset must have SSH server installed on it. The SSH server must: Support tunneling. 7

12 Procedure Require password authentication. 1. Run a network scan in Discovery. SSH server detection is part of every Discovery scan. No option has to be set. The SSH target device must be discovered and promoted to an asset during the Discovery scan. An agent does not have to be installed on the SSH target device. At least one other device on the same discovered network must have an agent installed on it. 2. Start a Live Connect session. 3. Add a new tab to display the Asset Browser ('Start a new session') window. 4. Click Assets to display the list of discovered assets you are authorized to see. 5. Click any asset with SSH in bold to start a new SSH session. 6. When prompted, enter the credentials required by the SSH server. 8

13 Endpoint Logs - Beta 3 A new Endpoint Logs tab has been added to the Agent > Agents > Agent Logs page. The new tab lists endpoint logs generated by the agent for this machine. Click the link of any log type to display the list of available logs for that agent. Central Storage - Beta 3 A new System > Server Management Central Storage Configuration page has been added to partition 1 of the VSA. This page specifies where storage of log files are stored, for both partition 1 and all tenant partitions. Administrators can be notified when used space exceeds a specified storage limit. Stored logs are viewed using a new Agent > Agents > Storage Logs page. Recording and Storage of KRC Sessions - Beta 3 Kaseya Remote Control sessions can now be recorded. 1. Start a KRC session from Live Connect. 2. Click the new Recording... button in the control bar to start the recording. The recording ends when the KRC session ends. 3. View the KRC recorded sessions on the Agent > Agents > Storage Logs page. 4. Click any of the listed *.webm video recording files to download it. 5. Run the *.webm file using any Kaseya supported browser. 9

14 Note: You can associate the *.webm file extension with your preferred browser. OAuth Clients - Beta 3 A new System > Server Management > OAuth Client page registers clients to access your specific VSA. Registering an OAuth client ensures a customized app is authorized to provide users with extended access to VSA functionality and user data, without having any knowledge of the user's VSA credentials. A registered OAuth client delegates a user's initial logon to the VSA. The VSA then returns client-specific tokens back to the app server. The app server uses these tokens to authenticate the client app installed on the user's device. Because of OAuth delegation, neither the app server nor the client app ever has access to the VSA user's actual credentials. After the initial logon. the client app shows the VSA user a customized view of VSA functionality and user data, based on the developer's use of VSA APIs. Typically the client app does not need to re-authenticate unless the client-specific token elapses without being refreshed by repeated use. The default is 60 days. 10

15 Additional Features Agents SDP-1287 The previously hidden page called 'Set Proxy' has been added as a standard page to the Agent module. Use this page to direct agents to relay requests for Patch Management downloads through a proxy server specified by the user. Agents SDP-1264 Added a Set Credentials page to the Agent > Templates folder. The new page sets credentials for agent template accounts only. Agents SDP-1022 The Agent > Automatic Update screen is now available only to Master administrators in on premise VSAs. Agents AF-1792 You can now right-click a cell in a grid and copy its contents to the clipboard. For example if you right-click the name of an agent, the name of the agent is copied to the clipboard. Only pages using VSA presentation services support this feature. Discovery DISMON-1086 A new wizard on the Discovery > By Networks page enables users to create networks based on the connection gateway information provided by existing agents. Discovery DISMON-1187 Added a new "Promote 'unknown' devices to assets" checkbox to the Discovery > Networks > By Networks > Asset Promotion tab. When scanning does not return a host name for a discovered device, Discovery assigns the device a display name starting with the string 'unknown' on the Discovered Devices page. With this enhancement, by default discovered devices identified as 'unknown' are not, by default, promoted to assets, even if asset types are set to promote them. If you wish to promote unknown devices to assets, then check this checkbox. This setting is applied to the entire network, across all device types. Info Center APPF-1605 When printing the Executive Summary report to HTML output, a new 'Print to PDF' button displays in the report. When you click the button you can save the HTML report content as a PDF. Remote Control module Live Connect - OS X Terminal SDP-1049 KRC was added as a remote control option on the Remote Control > Select Type page. AF-1846 Live Connect now provides a command shell module (Terminal) for Mac endpoints, providing a full Bash shell experience. The shell defaults to an elevated privilege, so sudo is not required. Live Connect AF-1682 Added paging to the display of entries on the Live Connect > Registry page. Default Settings AF-1583 UI changes have been made to improve user experience with Quick View, Kaseya Remote Control and Live Connect as follows: You can override the default setting and launch Live Connect (Classic) from Quick View using a new option in the System > Default Settings page: 'Use new Live Connect when clicking the Live Connect button in Quickview'. Set this to 'No'. Clicking the Agent Status icon immediately launches a shared session of Kaseya Remote Control. QuickView has a similar look, feel and behavior as it has in previous versions. Default Settings ATTHREE-447 Clicking the agent icon in the endpoint machine now displays either new or old User Portal, depending on the value set for the System > Default Settings > 'Use new Live Connect when clicking the Live Connect button in Quickview' option. 11

16 Default Settings AF-1733 Ctrl + clicking an agent icon now launches Live Connect or Live Connect (Classic), depending on the value set for the System > Default Settings > 'Use new Live Connect when clicking the Live Connect button in Quickview' option. Default Settings SDP-1252 A new 'Use Fast Transfer option' has been added to the System > Default Settings page. If set to Yes, Fast Transfer is applied to files transferred in the Software Deployment and Update module. This option applies only to on premise VSAs, not to SaaS. Antivirus Antivirus (Classic) ATTWO-1741/ATTWO PROTECT-868, ATTWO-1853 Antivirus and now automatically stagger the install schedule of multiple machines when they are being installed concurrently. This applies both to an on premise VSA and across all VSA tenant partitions on the same SaaS server. The previous Distribution Window option in the install dialog was removed. Added Kaspersky support (KES10 SP1 MR3) for installing the new Antivirus client on Windows workstations running the Windows 10 Anniversary Update. Applies to both Antivirus and Antivirus (Classic). All new installs now use version Version installs continue to be supported. Endpoint Security ATTWO-1067 Added AVG 2013 support for Windows 10. Reapply Schema LI-2 Reapply schema no longer runs scripts on an existing VSA unless the scripts have changed. Reapply Schema can be forced to run all scripts by entering the following URL in the browser locally on the Kserver machine. eversion=true Master and System Roles APPF-1821 Master and System roles can no longer be modified. Additional Features - Beta 2 Agents SDP-1704 A Refresh button has been added to Agent > Manage Agents page. This page no longer refreshes automatically. System APPF-1821 Master and System roles can no longer be modified. Agents SDP-1559 Added a 'Copy Agent From' popup dialog within the Create Agent Package wizard to improve the selection of an agent or template to copy settings from. Once selected, the agent or template is identified for future reference. Notification Bar APPF-1466 When a new patch is available, the notification displayed to master users in the notification bar now includes a link to the release notes. Live Connect AF-1647 Added the ability for 3rd party software to start a Live Connect session via a URI handler. The URI includes authentication and agent information. Live Connect RC-1154 Added links on the Live Connect > Events page to the corresponding Microsoft documentation for each logged event ID. Live Connect AF-2075 VSA logging has been added to many Live Connect functions. This includes: Start session Each module navigation Custom Extensions Create a folder on the VSA Upload a file to the VSA Download a file from the VSA 12

17 Delete a file/folder on the VSA Execute a file on the endpoint Files Delete a file/folder on the endpoint Create a folder on the endpoint Rename a file/folder on the endpoint Make a copy of a file/folder on the endpoint Move a file/folder on the endpoint to a new location Upload a file to the endpoint Download a file from the endpoint Processes End process on the endpoint Registry Editor Create a key Create a new value on an existing key Modify an existing value Rename a key/value Delete a key/value Services Start a service on the endpoint Stop a service on the endpoint Restart a service on the endpoint Change the start up setting of a service (auto/manual/disabled) Documents Create a folder on the VSA Upload a file to the VSA Download a file from the VSA Delete a file/folder on the VSA Patch Status Scan now Set Ingore Schedule Cancel a schedule Procedures Dashlet Run procedure Procedures Run procedure Schedule a procedure Cancel a schedule Temporary Agents Create temporary agent Update customer name/notes Send Add notes Close/Cancel a temp agent session Live Connect API-412 Live Connect sessions now continue without user interruption, even if the VSA user logs out of the VSA or the VSA session times out., Antivirus PROTECT-907 If an Antivirus (Classic) machine is migrated to the new Antivirus module, Antivirus (Classic) shows the status of the machine as 'Installed'. 13

18 , Antivirus, Antivirus, Antivirus ATTWO-1902 ATTWO-1952 ATTWO-1951 If an (Classic) machine is migrated to the new module, (Classic) shows the status of the machine as 'Installed'. All Kaseya-related folders and Kaseya agent-related applications have been added to the Global Exclusions of the Antivirus and module. Previously, the only status states reported back during an Antivirus or install were: Downloading Files Installing This fix adds three additional status states: Downloading OEM files to the VSA Downloading Files to the endpoint Installing product on the endpoint The following columns were set as default columns in Antivirus and : For the Installation column set: Agent Status Machine Id Install Status Installed On Pending Actions Flags Database Date For the STATUS column set: Add Flags after has Active Threats In addition a new 'Kaspersky Antivirus Version' column was added to Antivirus grid and a new 'Malwarebytes Version' column was added to the grid. Antivirus ATTWO-1874 Added support for installing Antivirus on Microsoft Windows Small Business Server Antivirus ATTWO-1703 A filter icon now displays in the Flags column of the machines grid if the grid is filtered, on the Machines pages of the Antivirus and modules. Antivirus ATTWO-1784 Added a new 'client license deactivated' alert type to the Antivirus module. Discovery DISMON-1087 Added three new virtual machine labels to machine filter View Definitions. Virtual Machine Hyper-V Virtual Machine Other Virtual Machine VMWare Discovery DISMON-1082 You can now scan across subnets. An agent does not have to be part of the same subnet range being scanned by Discovery. 14

19 Additional Features - Beta 3 System AF-2135 A new 'Use Compact Navigation' checkbox was added to the System > Preferences page. Checking this option reduces spacing between items on the navigation panel. Changes take effect after the next logon. Bug Fixes Agent SDP-1086 Added a tooltip to the Agent Version column of the Manage Agents page, explaining the format to use when filtering by this column. Agent SDP-1110 Added back missing description and detail fields to the redesigned Alarm Log tab on the Agent > Agent Logs page. Agent SDP-1349 Added Delete Agents, Rename, Change Group, and Set Credentials to the Manage Agents branch of the System > User Roles > Access Rights tree. Agent VAKF-911 Added license auditing of MS Office Professional Plus 2016 to the Audit > Software Licenses page. Agent SDP-984 Added missing button icons on the Agent > Agents > Agent Logs > Alarm Log tab. Agent SDP-1004 Added missing event time columns to Alarm Log tab and Log Monitoring tab on Agents > Agent Logs page. Agent VAKF-983 Agents that were bound to the KServer would not reconnect if the agent account was deleted from the VSA, leaving the agent offline. This has been fixed. Agent SDP-1488 Corrected an issue causing long delay times when displaying a list of agents on VSAs with a large number of agents. Agent SDP-1030 Fixed a page selection issue on the Agent Packages page. Agent VAKF-958 Fixed an agent install failure that could occur when the Kaseya Agent service exists but the Kaseya Agent Endpoint service does not exist. Agent END-1623 Fixed an endpoint provisioning issue that could occur when agents were downloaded and installed concurrently. Agent SDP-1031 Fixed an error message that could display in IE and Firefox when clicking the 'Download Package' link from the Agent > Manage Packages page. Agent SDP-1020 Fixed an error message that could display when trying to delete an agent package from the Agent > Manage Packages page. Agent VAKF-950 Fixed an issue that could cause, based on a timing issue, Log History settings to be occasionally reverted by an agent check-in. Agent SDP-1061 Fixed an issue with copying agent settings from a template using the Agent > Manage Packages wizard. Agent APPF-1456 Fixed an issue with creating a new SHA-1 credential for a legacy external application. Agent SDP-1067 Fixed an issue with selected tabs on the Agents > Agent Logs page not respecting the browser time and server time settings in System > Preferences. Agent VAKF-972 Fixed an issue with the Kaseya agent reporting its IP address as in some cases when Kaspersky is installed. Agent END-1627 Fixed an issue with updating earlier versioned agents, if the agents were installed using a custom path. 15

20 Agent VAKF-1061 Fixed an issued that caused agents to occasionally become unresponsive during directory monitoring, requiring a manual restart. Agent SDP-1036 Fixed the help link for switch definitions in the edit dialog for Agent > Manage Packages. Agent SDP-1243 Improved the performance of listing agents on the Agent > Manage Agent page. Agent SDP-1275 On the second page of the Create Agent Package wizard, fixed an issue sorting and filtering the list of agents to copy agent settings from. Agent SDP-876 Re-sized and re-positioned the window used to install an agent when using the Chrome browser. Agent AF-1913 The drop-down list displayed by the machine group filter on agent pages now supports: arrow up and arrow down key navigation selection of a machine group using the enter key Agent SDP-1010 The 'Select All' option on the Agent > Manage Agents page now respects the column filtering you have selected. Previously items hidden by the filter would be selected as well. Agent SDP-1429 The 'Set System Default' button displayed in the Agent > Manage Agents > Working Directory dialog is now only visible to master users. Agent SDP-1153 The 'Use Date Filter' checkbox and date range fields have been removed from the Agent > Manage Agents > Delete Agent dialog. Agent SDP-1045 Two new columns were added to the Manage Agent page, identifying the Username and Domain used for the agent credential. Agent SDP-1001 Updated the Agent > Manage Agents > Agent Info column to show the time as well as the date of the last agent update. Agent SDP-1003 Updated the date/time format of the Last Active Time column on the Agent > Agent Logs > Kaseya Remote Control Log tab. Agent SDP-957 Updated the default view of the Agent > Agent Logs > Event Logs tab to list event entries by date in descending order. Agent VAKF-935 Windows agent upgrade could fail if Agent service did not stop in a timely fashion, leaving the agent disconnected from the VSA until manually restarted. This has been fixed. Agent LI-219 Improved the query used by the Agent > Manage Agents page to avoid duplicate rows and speed its performance. Agent - OS X VAKF-984 Fixed an issue with installing agents on Mac OS systems. Agent - OS X VAKF-947 Windows and Mac agents have been updated to version Agent - OX X END-1629 Fixed a certificate exception error when installing an 9.3 agent on OS X Lion. Agent Procedures SDP-1111 Fixed an error that occurred when attempting to run an agent procedure using a managed variable with a value set to 'null', without the quotes. Agent Procedures SDP-1017 Fixed an issue that deleted selected agent procedures after re-apply schema was run. Agent Procedures SDP-1258 Fixed an issue with showing the correct login name for the VSA user that ran the agent procedure for suspending/un-suspending alarms. Agent Procedures SDP-1329 Fixed an issue with the System > Import Center not automatically approving imported agent procedures for Master and System users. Fixed an issue with Import Center attempting to create the same folder twice in the agent procedures tree. Audit SDP-1159 Fixed an issue displaying the password of a credential in the Audit > 16

21 Asset > Manage Credentials page. Audit DISMON-1094 Fixed an issue that caused audit results to be misreported for some tables. Audit SDP-968 Fixed an issue with displaying data using the View Assets > Credentials tab > View button. Audit DISMON-1151 Fixed an issue with the latest audit not identifying installed applications correctly. Audit SDP-975 Removed the suffix '(Alpha)' from "Kaseya Remote Control" labels that display in drop-down lists in the VSA. Audit DISMON-1069 The "baseline" and "latest" audit processing failures on some systems recently upgraded to R9.3 have been fixed. Classic Monitoring DISMON-493 Fixed an issue that prevented MIB files from being uploaded and processed in the classic Monitor module for SNMP monitoring. Classic Monitoring DISMON-1047 Fixed an issue with some machines in the uptime history report showing 100% uptime, yet no corresponding chart was displayed. Live Connect RC-1888 Added a 'keep or replace' dialog when uploading a file with the same name but different case--case insensitive--to Live Connect from a Windows machine. OS X machines consider filenames case sensitive, so this dialog does not display. Live Connect RC-1864 Added a page selector to the Live Connect > Asset Summary > Agent Procedure selection screen used to add agent procedures. Live Connect RC-1814 Added CPU graph, memory graph, and system event list data to Live Connect for OS X machines. Live Connect APPF-1615 Added documentation for Live Connect minimum requirements. Live Connect RC-1745 Added missing default sort orders for the following lists in Live Connect: documents events files processes registry editor (nodes and values) services Live Connect AF-1682 Added paging to the display of entries on the Live Connect > Registry page. Live Connect RC-1757 Added the ability to cancel a download from the Live Connect > Files page. Live Connect RC-1748 Added the display of agent procedure folder paths to Live Connect pages that add or schedule agent procedures. Live Connect END-1658 Enhanced Live Connect to work correctly even when the server address configured in the VSA's System settings is not reachable. Live Connect END-1586 Fixed a gateway HTTP 405 timeout issue that, in rare circumstances, could cause an endpoint to not be successfully provisioned, affecting Live Connect, and. Live Connect API-382 Fixed an error that displayed when selecting the Live Connect > Log Viewer > Agent Logs page. Live Connect RC-1822 Fixed an error that occurred with new Live Connect if the agent is offline, but the VSA still thinks the agent is online. Live Connect RC-1968 Fixed an issue running Live Connect in a SaaS server configured with a "-cdn" (akamai) subdomain. Live Connect END-1579 Fixed an issue that could cause an intermittent peer-to-peer connection to terminate running Live Connect. 17

22 Live Connect END-1611 Fixed an issue that could cause the Admin Endpoint to terminate in the rare case an attempt to connect back to the Live Connect app failed. Live Connect RC-1744 Fixed an issue that could caused private remote control session to terminate unexpectedly. Live Connect END-1614 Fixed an issue that prevented Live Connect from authorizing an endpoint connection with an online agent when the VSA is installed on selected older Windows operating systems. Live Connect RC-1759 Fixed an issue that prevented new Live Connect from working when port 80 was blocked for incoming requests. Live Connect RC-1836 Fixed an issue with duplicate endpoint records causing Live Connect to get stuck on the "Start a new session" tab. Live Connect END-1824 Fixed an issue with Live Connect not working after a patch upgrade: ConnectedWithError - ChannelServerOffline. Live Connect RC-1767 Fixed an issue with Live Connect triggering an 'application error' when running a private or shared remote control session. Live Connect RC-1776 Fixed an issue with opening Live Connect in Firefox unless linked to 'KaseyaLiveConnect.exe' file. Live Connect END-1581 Fixed an issue with the CPU graph in Live Connect not displaying for some Windows machines. Live Connect RC-1766 In some circumstance if there was a network outage that caused a Live Connect connection to fail, it would not fall back to relay connectivity. This has been fixed. Live Connect RC-1755 Now possible to set the default value for registry keys. Live Connect END-1610 On some installations using Live Connect to the VSA machine would fail. This has been fixed. Live Connect AF-1849 Opening a new Live Connect session no longer closes an Agent Procedure editor opened on another tab, nor prompts the user with: 'Are you sure you want to leave this page?' Live Connect RC-1816 Running Live Connect on Mac agents hides unsupported menus and options. Live Connect RC-1772 The file source on the Patch Status page of Live Connect now displays the 'friendly name' specified for file source, instead of the agentguid. Live Connect AF-1776 The Live Connect > Commands page now supports commands using an extended character set. Live Connect RC-1831 The volumes dashlet in new Live Connect now only displays a drive in red if the drive is nearly full. Live Connect RC-1810 This fix address an issue that didn't allow users to use Kaseya Live Connect with a VSA that was configured with self-signed or insecure certificates, over HTTPS. Kaseya Live Connect now warns users if the connection cannot be verified to be secure, but allows the users to proceed forward. Live Connect RC-1773 This fix resolves an issue that causes a 'Failed to launch Kaseya Live Connect' dialog to show up, when launching Kaseya Live Connect from a VSA with a secure connection. Live Connect RC-1805 This fixes an issue where Kaseya Live Connect installers may be detected as corrupt, invalid or signed by an unknown publisher, causing a security risk notification on certain Windows machines. Live Connect RC-1892 Updated the agent status icon in Live Connect to not show a user when no user is currently logged into the machine or has been inactive, matching the conventions of the status icons in the VSA web interface. 18

23 Live Connect API-360 Updated the API for Live Connect to display the correct Patch Scan Recurrence interval and Windows Automatic Update status. Live Connect RC-1783 When displaying a list of machines in a Live Connect session, you can now enter a machine group search string to filter the list, up to a maximum of 100 machine groups. Live Connect RC-1723 When using the Kaseya Live Connect application to connect to multiple VSAs, you are only prompted to upgrade if the version offered by any VSA is later than the one already installed on your computer. Previously in 9.3, you were always prompted if the version did not match. Live Connect API-354 You can now control VSA user access to new Live Connect menus and options based on the VSA user's assigned user roles. For a given user role, set Live Connect and Quick View options using the System > User Roles > Access Rights tab to control access to Live Connect menus and options. User Portal API-356 Fixed an issue with displaying hourly-scheduled agent procedures on the User Portal > Agent Procedures > Pending page. User Portal ATTHREE-450 Fixed an issue with the User Portal page shown by clicking the agent icon in the system tray being redirected to HTTP, even if the default web server address is HTTPS. User Portal ATTHREE-447 Launching User Portal on the agent will now connect to the old Live Connect portal if the Default Settings in the VSA specify to do so. User Portal ATTHREE-443 User Portal now checks access to ticketing before loading the ticketing module. User Portal ATTHREE-467 User portal now honors the machine role permissions for agent procedures for the default machine role. Kaseya Remote Control Kaseya Remote Control Kaseya Remote Control Kaseya Remote Control Kaseya Remote Control Kaseya Remote Control Kaseya Remote Control Kaseya Remote Control Kaseya Remote Control Kaseya Remote Control AF-2033 RC-1824 END-1584 AF-1749 VAKF-940 RC-1684 RC-1724 RC-1775 RC-1669 RC-1819 Corrected the message text displayed when alt+clicking an agent that has remote control disabled. Fixed a connection issue running Kaseya Remote Control. Fixed two issues with remote control logging that could cause an RC session to terminate unexpectedly. Localized German keyboard layout issues are fixed in 9.4 release of Kaseya Live Connect's Remote Control feature along with other performance improvements. Installer scripts were updated to install the correct version of Kaseya Remote Control used by Live Connect (Classic) in 9.3. When running Live Connect (Classic) in 9.3, a warning message that KRC was written by an unknown publisher no longer displays when launching KRC. In some cases, KRC could fail to launch because of this issue. This update fixes a potential issue that can cause a live Remote Control stream to end with a "Decoder Error", in the next generation Kaseya Live Connect introduced in R9.3. This update fixes an issue that can cause an active Remote Control stream to get delayed when it's tab or window is hidden in the background. When a machine user selects the 'Disable Remote Control' option, using the agent in the system tray, the thumbnail view in Live Connect and Remote Control sessions are disabled. This bug fixes choppiness and improves the performance of the Remote Control feature of the next generation Kaseya Live Connect. This fix addresses a memory leak that might happen during Remote Control inside Kaseya Live Connect on a few Windows machines. This issue was caused because of incompatibility of a few Intel driver 19

24 Kaseya Remote Control Remote Control module Remote Control module Remote Control module Remote Control module versions on certain chipsets. RC-1845 Starting a KRC remote control session from within Live Connect now runs as a separate window and process instead of using the embedded viewer window introduced in 9.3. The user will now have the same experience whether KRC is launched from the VSA or from Live Connect. RC-1865 When using RDP and K-VNC on Internet Explorer, it would display a warning message saying that 'ActiveX control kaxremote.dll failed to load'. This was due to the digital signature using SHA-1, which has been deprecated by Microsoft. It is now signed using SHA-256. SDP-1049 KRC was added as a remote control option on the Remote Control > Select Type page. ATTHREE-408 Remote Control Policy now sets the default user notification type to "Silently take control" and disallows an empty notification type. SDP-999 The User Role Policy and the Machine Policy pages in the Remote Control module now support single and double quotation marks in the messages displayed to machine users when starting or ending a remote session. Logon APPF-860 Fixed an issue that allowed disabled VSA user accounts using a domain logon to still log into the VSA. Logon IAMV-248 Updated the message displayed on the VSA logon page when a VSA user's assigned hours policy prevents access. Logon IAMV-3534 Updated a dll related to an issue that prevented domain users from logging in when the domain controller has a slow response time. Notification Bar APPF-1642 Enabled the access right to hide or show the notification bar, which affects all options on the notification bar. In 9.4, the notification bar background has been set transparent, but still serves as a access rights container for all its member options. Notification Bar APPF-1614 This fix ensures that when alarms are scheduled to be suspended at a future time, the notification bar only generates notifications at that future time and not before then. Executive Report APPF-1648 An extraneous javascript console.log was removed from the Executive Summary report. Executive Report APPF-1653 Corrected a spelling error and removed the numbers 1, 2, 3 from License Summary > Servers > Summary Statistics depending on OS Type. Executive Report ATTWO-1511 Data for the new Antivirus and modules has been added to the Executive Summary report. Executive Report APPF-1644 Fixed a spelling typo in the section of the Executive Summary report. Executive Report PROTECT-531 Fixed an Executive Summary report error for machine group/organisations using the '_' character. Executive Report PROTECT-864 Fixed an issue that caused the Executive Summary report to fail to be generated when Security parts were enabled. Executive Report APPF-1647 Fixed an issue with generating reports that display the report logo in SaaS tenant partitions. Executive Report PROTECT-825 Fixed an issue with generating the executive summary report when Antivirus (Classic) and (Classic) is not installed in the VSA. Executive Report APPF-1703 Fixed an issue with the calculating the OS score with Windows 10 machines. Executive Report PROTECT-570 Fixed the display of Antivirus performance statistics on the Executive Summary report. 20

25 Executive Report PROTECT-659 Updated the executive summary report to include Office 365/Office 2016 in the License section. Executive Report PROTECT-862 Fixed an issue with incorrect counts on the Executive Summary report for (Classic) > 'Protection not running' and 'Updates Completed'. Executive Report PROTECT-863 Fixed several issues in the Security section of the Executive Summary report regarding inaccurate counts for Antivirus (Classic) and (Classic) machines. InfoCenter APPF-1616 A validation message now displays in custom report dialogs when the user enters an invalid date range. System APPF-1455 Added validation to the System > License Manager > Update Code > *Enter License Code' field to ensure a minimum length license code is submitted. System APPF-1654 Adjusted the allowed time zone offset on the System > Local Setting page to a range of -12 to +14. System APPF-168 Both the code and process for 'Change DB' has been updated. The new process requires a re-logon to the VSA, and reapply schema must now be kicked off manually after that. Please review instructions for 'Change DB' in the help topic for the System > Configure ( page. System APPF-1810 Fixed a bug selecting the user in the System > User History page when the selected user is not in the same scope. System API-392 Fixed a issue that allowed special characters in Org IDs and Org Names to prevent editing or renaming the organizations. System APPF-1452 Fixed an error that displayed when selecting the Dispatching link on the page, then clicking the MSMQ tab. System APPF-1483 Fixed an error that displays when maintenance is about to expire and the administrator attempts to select the System > Configure > 'Hide maintenance warning' > 'select user' option. System APPF-1550 Fixed an issue with System Management configuration not properly installing the content pack. System APPF-1602 Fixed an issue with the Statistics Page reporting incorrect information because the DB file names were different than the default names. System APPF-1482 Fixed several issues with the System Statistics page. System APPF-1727 Updated the Outbound edit dialog to ensure required fields have data, before allowing the user to save the dialog. Ticketing PROTECT-527 Filtering the Ticketing > View Summary page, then using the Set Field button to update selected tickets now updates just the selected tickets. Ticketing LI-157 Fixed an error message that displayed when trying to view the Ticketing / View Summary page in a high volume environment. Ticketing PROTECT-860 Fixed an issue with opening a file attachment in a ticket created using the Ticketing reader if the filename contained spaces. Ticketing PROTECT-837 The 'Ticket Summary' field in tickets displayed in the Ticketing > Create/View page no longer shows encoded HTML when special characters are included. Edge Services END-1770 Downloading files via HTTP from the VSA could be slow under some circumstances. This has been fixed. Edge Services END-1609 Edge Services could terminate if it encountered a SQL deadlock. Now the SQL statement will be retried. 21

26 Edge Services END-1804 Edge Services now processes TLS handshakes significantly faster than before. In addition if it receives a flood of TLS connections, it will no longer use 100% CPU while processing them. Edge Services END-1826 Edge Services would occasionally terminate when it lost connectivity with SQL Server. This has been fixed. Edge Services END-1604 Edge Services would terminate if it lost connectivity with SQL Server. It will now attempt to reconnect, and continue to run if that attempt is successful. However it will still terminate if it is unable to reconnect to SQL Server. Edge Services END-1599 Fixed an issue that denied Kaseya Edge Services access to SQL Server after a password change. Edge Services END-1593 Fixed an issue with the redirection of http To https for Edge Services. Edge Services END-1605 This fixes intermittent crashes at the Edge Services when it's attempting to process large number items on the Windows Message queue. Edge Services END-1603 Updated the way log files are managed for Edge Services. Endpoint END-1765 Fixed an endpoint provisioning error that occurred if the secondary kserver address did not resolve to a VSA server. Endpoint END-1653 In rare circumstances, the KaseyaEndpoint and Kaseya.AgentEndpoint processes could use large amounts of CPU. This has been fixed. Kinstall END-1626 Fixed an issue with the VSA certificate user permissions during installation. KServer VAKF-928 Fixed an issue with an uninitialized agent procedure variable causing the Kserver process to terminate when compared with a registry key value. KServer VAKF-966 Fixed an issue with long event log messages on agent machines stopping the KServer process. KServer VAKF-994 Fixed an issue with the Kserver service when processing large memory allocation requests. KServer VAKF-917 Fixed issue where an agent procedure cause the KServer process to terminate if the agent is using LAN cache and the file name is incorrect and too long. KServer VAKF-991 Reduced the memory requirement for auditing server machines with a high number of users to avoid memory allocation issues. KServer VAKF-956 Some redundant KServer log messages are now being suppressed, if nothing significant has happened in the last 30 seconds. Kserver APPF-1477 This fix resolves a performance issue on aging event Instances that could result in a timeout. Licensing APPF-1608 Running GetCheck.asp no longer overwrites the loadfunclist.sql file. REST API APPF-1645 Fixed a parameter setting typo in the REST API documentation. REST API API-397 Fixed validation for the presence of the $top parameter in REST API requests. REST API API-390 Improved the performance of the GET /assetmgmt/assets/{assetid} request. Security APPF-1817 A security vulnerability was removed. Vulnerability Security APPF-1435 A security vulnerability was removed. Vulnerability Security Vulnerability IAMV-3999 A security vulnerability was removed. 22