3.1.1. Version 5 F2 - 5 F3

Changes in product: 

  • PSM's RESTful API has been enhanced with the following new functionalities:

    • New content endpoint: /api/audit/sessions/<session-id>/content. It enables you to search in the contents of individual connections. For details, see Section 13.4, Searching in connection content in Using the Balabit’s Privileged Session Management, Shell Control Box REST API

    • Filter events: The filtering functionality is now added to the api/audit/sessions/<session-id>/events endpoint, too. You can now search in the events of individual connections. For more information, see Section 13.6, Session events in Using the Balabit’s Privileged Session Management, Shell Control Box REST API

  • In order to better integrate PSM with Privileged Account Analytics, some architectural changes have been introduced. For more information, see Using the Balabit’s Privileged Session Management, Shell Control Box REST API. For more information, see Using the Balabit’s Privileged Session Management, Shell Control Box REST API.

  • Enabling TLS-encryption in an RDP connection policy has been simplified. When the connection is encrypted, PSM has to show a certificate to the peer. You can define the type of certificate to show to the peers. For details, see Procedure 10.6, Enabling TLS-encryption for RDP connections.

  • You can now configure the required minimum version of the default web listener. The default setting is TLS 1.2. For details, see Procedure 4.3.1, Configuring user and administrator login addresses.

  • You can now select the depth of indexing: lightweight and full indexing. Lightweight indexing is now enabled by default, you only have to configure it if you want full indexing. Lightweight indexing is faster than full indexing, and indexes only Command and Window title events. It does not index any other screen content (for example, text that is displayed in a terminal or that appears in an RDP window). For details, see Procedure 15.1, Configuring the internal indexer.

  • RDP 4 and RDP 5 have been removed from Procedure 10.2, Creating and editing protocol-level RDP settings.

  • The Balabit Desktop Player application can now replay audit trails that contain graphical X11 sessions (the contents of the X11 Forward channel of the SSH protocol). For further details, see Section 12, Replay X11 sessions in Balabit Desktop Player User Guide.

  • Plugin configuration files in debug bundle: When creating debug bundles for troubleshooting purposes, PSM now includes the configuration files of any plugins installed. For details, see Procedure 23.5, Collecting logs and system information for error reporting.

Changes in documentation: