Privileged Remote Access 25.1.1 release notes

April 3, 2025

Requirements:

Requires Base 7.4.0.
Requires ECM 1.6.2.
Requires Integration Client 1.7.5.
Supports upgrades from PRA 24.2.4+.
Before upgrading, ensure any SSL certificates used are either from a trusted Certificate Authority, or, for self-signed certificates, the certificate is either trusted on all endpoints or explicitly included in their installation.

New features and enhancements

Endpoint automation enhancements
- PowerShell scripts now default to "-ExecutionPolicy Unrestricted".
- Tags have been added to jobs, allowing you to filter by tag from the main Jobs page.
- Jobs can now be archived using the Hide option.
Admins can now download or email Jump Clients from the Jump Client installer listing, making deployment easier.
SHA-256 checksums are now displayed in the Session Details report for transferred files, allowing for easy verification against standard hash tools.
The Access Console installer now includes an option to install the Network Tunnel service, eliminating the need for a separate download.
The name of the credential used to initiate a Jump Item session is now displayed, making it easier to track and reuse credentials for subsequent sessions.
Installed application patches are now displayed on the Status page, providing visibility into applied updates.

Issues resolved

Product Area	Description	Resolution
Administrative interface
API		Increased the API version to 1.25.0.
API		Corrected several issues with attributes in the following Configuration APIs: /config/jump-group /config/vault/account(ssh-key) /config/jump-item/web-jump /config/jump-item/remote-vnc /config/jump-client /config/group-policy /config/jump-policy /config/jumpoint /config/vault/account-group
API		Added three status codes to the Failover Command API: Code: 200 with a response of "Status: Primary" Code: 300 with a response of "Status: Backup" Code: 307 with a response of "Status: Traffic"
API	Some links to OAuth authentication information in the integrated Configuration API documentation were outdated.	Updated the links in openapi.yaml and /login/apidocs.html to ensure they point to the correct information.
Atlas	The web access console experienced slowness when connected to traffic nodes.	The connection handling to traffic nodes was optimized, improving performance and reducing lag.
Atlas	Traffic node hostnames were being changed after upgrading or reinstalling version 24.3.1 on Cloud Atlas sites, altering the original traffic node names.	The process was updated to preserve the traffic node names during upgrades or re-installs, ensuring the correct hostnames are maintained.
Atlas	Intermittent data sync failures could occur across traffic nodes when multiple primary nodes were used.	A networking issue was resolved, which corrected the data sync failures.
Text Updates	The "Start the Shell" button in the web access console was inconsistent with the other buttons.	The button has been updated to "Start Shell".
Text Updates	The example External Tools tool tip did not include file extensions for Windows applications, which could cause confusion for Windows users.	Updated the tool tip to include .exe for Windows applications putty.exe and cmd.exe to ensure they work correctly.
Text Updates	The Configuration API documentation lacked details on which fields must be unique within each object or API endpoint.	The Config API documentation has been updated to specify which fields are required to be unique, clarifying the schema for both users and automated tests.
Text Updates	The help text in the tooltips on the Jumpoint creation screen was unclear.	Tooltips on the Jumpoint creation screen were updated for clarity.
What's New		The What's New section in the administrative interface now points to the release notes page at docs.beyondtrust.com.
Clients
Access Console	Network tunnel stats were not displayed when switching from infrastructure access console mode to full console mode.	Now, network tunnel stats are displayed after switching to full console mode.
Access Console	When joining a shared Shell Jump session, invited users saw the OS icon instead of the Shell Jump icon in the queues tab of the access console.	Now, the correct Shell Jump icon displays for all users.
Access Console	If a user started a screen-sharing session with app sharing enabled and restricted apps blacked out, logging into the same user account on another computer caused all restrictions to be removed.	App sharing restrictions now remain in place when the user logs in from another computer.
Access Console	Key presses were sent to multiple detached screen sharing windows if the mouse was hovered over them, causing actions like opening the Start menu on all sessions simultaneously.	Now, key presses go only to the intended window, even if multiple detached sessions overlap.
Access Console	The infrastructure access console window sometimes did not display again after losing focus in System Tray mode on Ubuntu 22.04 and 24.04.	The infrastructure access console window now remains accessible after clicking away.
Access Console	The comments field in the Invite External User window allowed more than 256 characters to be entered but then displayed an error upon submission.	Now, the field enforces the 256-character limit while typing.
Access Console	SFTP connections were not being blocked in bring-your-own-tool SSH sessions when file transfer permissions were restricted.	SFTP connections are now blocked in SSH Tunnel sessions if file transfer rules are set to Deny, Upload Only, or Download Only.
Access Console	The Vault Accounts tab sometimes displayed notification messages when other users sent chat messages.	Message notifications no longer appear on the Vault tab when users send messages to each other.
Access Console		The What's New section in the access console now points to the release notes page at docs.beyondtrust.com.
Jumpoint	Running multiple Network Tunnels through a Jumpoint could fail due to conflicts with existing rules and address assignments.	Now, the Jumpoint verifies existing rules before creating new ones and removes conflicts to ensure proper connection.
Jumpoint	Network Tunnels remained accessible for copying and attempted use even after being disabled through an update.	When the Network Tunnel feature is disabled via an update, existing Network Tunnel Jump Items now remain visible but are entirely non-functional, preventing copying or use.
Shell Jump	When transferring files during a Shell Jump session, if a file was successfully transferred to the remote system but the same transfer was attempted again and canceled when prompted to overwrite, the file would be deleted from the remote system.	Canceled file transfers no longer result in the deletion of previously transferred files on the remote system.
Shell Jump	Authentication failure during a bring-your-own-tool Shell Jump session was not displaying an error message to the user.	Now, when authentication fails during a Shell Jump session, an error message is displayed in the session chat to inform the user why the tunnel was closed.
RDP	When using the "Use all my display sizes" setting during an RDP session on a system with multiple displays, white space appeared on smaller monitors when clicking "View All".	Smaller monitors no longer display white space when the "View All" button is clicked during a multi-monitor RDP session.
Linux	Clicking the Key icon to bring up the credential window could cause the access console to freeze or fail to load the window properly on Ubuntu 24.04.	The credential window now loads properly without freezing the access console on Ubuntu 24.04.