Endpoint Privilege Management (Cloud and Pathfinder) 25.5
June 24, 2025
✨ Enhancements
Analytics: Improvements to the analytics download on the Users tab
Now, when you download the CSV, it runs smoothly in the background and can handle up to 5 million rows of data. This means you can get even more detailed insights without any hassle.
The data provides you with a clearer view of when users log on to managed endpoints and what privileges they use, whether standard or administrator.
You'll find the data displayed just like it is on the Users page, with the top-level aggregate row and expandable rows of data for easy access.
Policy Editor: Block executables bypassing PowerShell restrictions
Added a built-in BT managed Application Group ((Recommended) Block - Microsoft Recommended Blocks) to help you block Microsoft-recommended .exe files that could bypass PowerShell restrictions.
For those using the Windows QuickStart Low Flexibility Workstyle, this app group has been added to the block rule to keep things secure and running smoothly. You must update your QuickStart template to 25.5 to see the new application group.
The app group cannot be edited or deleted.
The app group is available when creating or editing Windows application rules and on-demand application rules, and is added to the Windows QuickStart template Low Flex workstyle.
Webhooks configuration: Added link to template variables section
Added a convenient link to the BeyondTrust Product Documentation so you can easily check out the template variables for the webhook configuration.
Analytics: UX improvements
- Removed the dropdown from the Application Requests tile on the Dashboard and tweaked the padding for a better focus border.
- Improved the Applications page filters so you'll only see options relevant to the selected application type.
🛠️ Issues resolved
| Product area | Description | Resolution |
|---|---|---|
| Computers page | Range filter throwing 500 error on Computers page. | Fixed an issue that was causing errors when the Created On filter was used on the Computers list. |
| Package Manager | Package Manager settings not applied on initial install of EPM-M | Resolved an issue where the client settings applied to computer groups with Package Manager for Mac enabled were not being correctly applied on initial install of EPM-M. |
| Entra ID integrations | HAProxy primary app backend can become overwhelmed with AAD integration requests. | Fixed an issue that was causing Entra ID integrations to fail and cause EPM to be inaccessible. |
| JIT admin access | Some filters are missing when you first log in or use Incognito mode, and open Analytics from a ticket’s Details page. (JIT Admin > select ticket details > View Session Events) | Now, when accessing Analytics via the View Session Events link on a ticket’s Details page, filters display as expected. |
| Analytics | Events tab not loading when Ad Blocker is in use. | Analytics pages can now load successfully when Ad Blocker is in use. |
🧩 EPM Components
- PM Reporting Database: 23.9.13
- Policy Editor: 25.5.188
- PMR UI: 25.5.72
- Event Collector: 25.5.6
- PM Cloud: 25.5.440
📝 Requirements
Microsoft .NET Framework 4.6.2 (required to use PM Cloud Windows Adapter)
🔄 Compatibility
🔃 Supported product versions for EPM
PM Windows adapter
Recommended: 25.5.440
Supported: 25.4.598 | 25.3.671 | 25.2.485 | 24.8.446 | 24.7.831 | 24.6.697 | 24.5.1037 | 24.4.361 | 24.3.766 | 24.2.499 | 24.1.581 | 23.9.578 | 23.8.515 | 23.7.356 | 23.6.562 | 23.5.516| 23.4.424
PM for Windows
Recommended: 25.4.221.0
Supported: 25.4.184.0 | 25.2.1.0 | 24.8.98.0 | 24.7.425.0 | 24.5.361.0 | 24.5.351 | 24.3.294.0 | 24.1.108.0 | 23.9.225.0 | 23.7.150.0 | 23.6.76.0 | 23.5.212
PM Response Generator for Windows
Recommended: 25.4.221.0
Supported: 25.4.184.0 | 25.2.1.0 | 24.8.98.0 | 24.7.425.0 | 24.5.361.0 | 24.5.351.0 | 24.3.294.0 | 24.1.108.0 | 23.9.225.0 | 23.7.150.0 | 23.5.212
PM for macOS
Recommended: 25.4.1.2
Supported: 25.2.0.1 | 24.8.0.1 | 24.7.0.1 | 24.5.2.3 | 24.5.1.1 | 24.5.0.1 | 24.3.0.1 | 24.1.0.1 | 23.9.0.1 | 23.7.0.3 | 23.5.0.3
PM macOS adapter
Recommended: 25.4.1.2
Supported: 25.2.0.1 | 24.8.0.1 | 24.7.0.1 | 24.5.2.3 | 24.5.1.1 | 24.5.0.1 | 24.3.0.1 | 24.1.0.1 | 23.9.0.1 | 23.7.0.3 | 23.5.0.3 | 22.5.1.1
PM Rapid Deployment Tool for Mac OS
Recommended: 25.4.1.2
Supported: 25.2.0.1 | 24.8.0.1 | 24.7.0.2 | 24.5.0.1 | 24.3.0.1 | 24.1.0.1 | 23.1.0.1 | 23.9.0.1 | 23.7.0.1 | 23.5.0.1
PM Response Generator for MacOS
Recommended: 25.4.1.2
Supported: 25.2.0.1 | 24.8.0.1 | 24.7.0.1 | 24.5.2.3 | 24.5.1.1 | 24.5.0.1 | 24.3.0.1 | 24.1.0.1 | 23.9.0.1 | 23.7.0.3 | 23.5.0.3
