Softpedia >Windows >Security >Keylogger / Monitoring >Ekran System >  Changelog

Ekran System Changelog

What's new in Ekran System 6.52.1

Jan 12, 2022
  • New Features:
  • SIEM integration [Configuration]: can now be used with a secure TLS connection.
  • Hardware Security Module (HSM) integration [Database Parameters]: new functionality added to allow the use of an existing private key when moving the Master Certificate to an HSM storage device.
  • Improvements:
  • Cleanup of the sessions of deleted Clients [Database Parameters]: various improvements made.
  • Playing Linux SSH sessions [Session Player]: performance improved.
  • Report generation speed [Reports]: has been significantly improved for some reports.
  • Issues Fixed:
  • Sessions Archiving & Cleanup tasks [Health Monitoring]: the statuses of tasks on the Tasks List were not shown correctly in certain cases – fixed.
  • Alert email notifications [Alert Management]: were not sent to all users specified in the alert in certain cases – fixed.
  • Dashboards customization: in some cases dashboards could not be resized correctly – fixed.
  • Updating Windows Clients: stability improved.
  • Updating the Application Server: an issue in cases where the database uses case-sensitive collation – fixed.

New in Ekran System 6.51.91.0 (Dec 1, 2021)

  • Improvements:
  • HSM integration (for storage of the Ekran System Master Certificate on Thales Hardware Security Module to enhance security):
  • The frequency of requests for a key sent to SafeNet KeySecure – optimized.
  • Support for Windows Core systems – added.
  • Screen capture compression [Windows Client Management]: New option added to manage the compression level of screen captures from 1-9 (where the default value of 9 is the highest compression level which uses the least disk space, but with higher CPU consumption on the Client machine).
  • Client Version column [Client Management]: Can now be sorted (first by the icon showing whether the Client is up-to-date, and then by the Client Version number).
  • Windows Clients: Clients that are not up-to-date still monitor user activity, but they can now also send the data to the Application Server.
  • Health Monitoring log records: Optimized to reduce the size of the database transaction log.
  • Memory usage [Windows Client and Application Server sides]: Various optimizations implemented.

New in Ekran System 6.50.35.0 (Nov 15, 2021)

  • New Features:
  • New "Client Version" column [Client Management]: Added to display the current version of each Client (and whether it is up-to-date).
  • Improvements:
  • Cleanup [Client Management]: No longer scheduled by default for new installations,
  • Authentication Options [Client Management]: If the Enable the displaying of additional message option is enabled, in the custom notification pop-up window displayed on login, for the convenience users, the Continue button is now selected by default (instead of the Cancel button).
  • Archive & Cleanup [Client Management]: Retry Policy updated to improve stability in cases when attempting to copy the screenshot files to the archive folder multiple times.
  • Issues Fixed:
  • Health Monitoring Notifications [Configuration]: Multiple email addresses could not be added – fixed.
  • Monitoring Time Filtering [Monitoring Results]: Session status remained displayed as Live after monitoring of the Client finished at the end of the time period defined in the Monitor only during defined hours option – fixed.
  • File Upload [Windows Clients]: Alert rules were not triggered in certain cases if the display language was not set to English – fixed.
  • Scheduled Reports [Reports]: Generation failed in certain cases involving duplicate file names – fixed.
  • Client uninstallation [macOS Clients]: Could not be carried out remotely by way of the Management Tool in certain cases – fixed.

New in Ekran System 6.48.33.0 (Nov 1, 2021)

  • Improvements:
  • Management Tool localizations – Spanish [ES] and Polish [PL] versions are now available.
  • Issues fixed:
  • Ekran System Master Certificate – in certain cases the certificate could not be moved to HSM external storage on the second node in a cluster – fixed.
  • Application Server installation – in certain cases database installation failed when updating from very old versions after moving the Application Server to a different machine – fixed.
  • Notes:
  • Windows Server 2022 – is supported for all Ekran System components.

New in Ekran System 6.47.38.0 (Oct 21, 2021)

  • New Features:
  • Adding (and Editing) User / User Group pages – a new User Access tab (see Step 9) has been added to allow Management Tool users to only view the monitored sessions of specific endpoint users.
  • Client Management pages – a new Last User column has been added to display the name (i.e. first name and last name) of the endpoint user who last logged in to each Client computer.
  • Improvements:
  • Session Player – the Full Screen mode interface has been enhanced to provide a better user experience (now similar to that of YouTube), including hotkeys (F - enter full screen, Esc - exit full screen, Space - play/pause, Right arrow - next, Left arrow - previous).
  • Application Server installation – a warning notification has been implemented to inform the user that installation cannot be performed if multiple Master Certificates (called EkranMasterCertificate) are detected in the certificate store.
  • Multi-Tenant mode – different internal users in different tenants can now have (i.e. be added with) the same username.
  • Database structure optimization. Please note that after an update of Ekran System, the data migration process begins as soon as the Application Server starts up. Migration takes place in the background, and may take some time and affect system performance while in progress.
  • Issues fixed:
  • Alerts – the sending of email notifications was delayed in certain cases – fixed.
  • One-Time Passwords (OTPs) – user requests for OTPs would not be sent in certain cases when configured for a Client group – fixed.
  • macOS Clients – after being offline, the sending of data to the Application Sever was delayed when the connection was restored in certain cases – fixed.

New in Ekran System 6.45.34.0 (Oct 6, 2021)

  • New Features:
  • AD Global Catalog integration – is now supported, which allows Management Tool users to be added from any domain within an Active Directory forest using a single global catalog LDAP target.
  • Improvements:
  • Linux Red Hat (RHEL) 8.4 Clients – are now supported for monitoring.
  • Issues Fixed:
  • Archive & Cleanup would not switch from Scheduled to Never in certain cases – fixed.

New in Ekran System 6.42.46.0 (Sep 9, 2021)

  • New Features:
  • Alerts [on macOS Clients] – are now supported as for Windows Clients, with unique alert IDs, keywords, etc.
  • Improvements:
  • Amazon Linux 2 Clients – UI sessions can now be monitored.
  • Ekran System Connection Manager (PAM) – installation is no longer supported on old Windows desktop computers.
  • Audit log – now includes a full set of all actions performed with secrets in the Management Tool.
  • Issues Fixed:
  • macOS Clients did not stop monitoring when free space on the computer was less than 500 MB – fixed.
  • One-time passwords (on the Access Management page) could not be generated for AD users – fixed.Client Management yellow exclamation mark would not disappear from the Management Tool in certain cases – fixed.

New in Ekran System 6.41.46.0 (Sep 3, 2021)

  • New Features:
  • HSM integration – Ekran System is now integrated with the Thales SafeNet KeySecure hardware security module, thereby offering the capability to store the Master Certificate more securely in external storage.
  • Application Credentials Broker (PAM) – This new stand-alone component of Ekran System is a REST API integration tool designed to allow customers to securely (with access token rotation) get PAM secrets data for applications, without needing to log in to the Management Tool, in order to use for their own business purposes.
  • Improvements:
  • Name of the organization – is now displayed on the Management Tool Home page, based on the license information.
  • Client Uninstallation key (in Multi-Tenant mode) – can now be different for different tenants.
  • Issues Fixed:
  • Automatically send one-time passwords to Active Directory users feature did not allow user requests for a password in certain cases – fixed.

New in Ekran System 6.36.1 (Aug 5, 2021)

  • Improvements:
  • Single Sign-On (SSO) and Two-Factor Authentication (2FA) – can now function
  • Together.
  • Reissuing the Master Certificate – now also supported on Windows Server 2019 Core.
  • User Administrative Permissions – a user is forcibly logged out from the Management
  • Tool whenever their permissions are changed. The user then has the updated set of
  • Administrative permissions after re-logging in.
  • Reports – new validation added.
  • Embedded API Session Viewer – updated.
  • Issues Fixed:
  • Remote Host IP Filtering – the Exclude local sessions option has been optimized.
  • Audit log filters – fixed.
  • Dashboard resizing – fixed.
  • Export Filtered Clients feature (from the Client Management page) – fixed.

New in Ekran System 6.34.53.0 (May 8, 2021)

  • New Features:
  • Secondary user authentication (on Windows Clients) – capability to exclude individual
  • Users from checking secondary user authentication added.
  • Password rotation for secrets (PAM):
  • O SSH key rotation for SSH secrets – added.
  • O Password rotation for all secrets – stability improved with transactional
  • Integrity check during rotation added.
  • Appears on the Client when an alert is triggered).
  • Improvements:
  • Offline Client cache (on Linux and macOS Clients) – stability improved.
  • PAM Connection Manager – fixed for use on low resolution screens.

New in Ekran System 6.33.92.0 (Apr 15, 2021)

  • New Features:
  • Ekran System Data Connector v.1.0 – new component released. This stand-alone
  • Component of Ekran System is used for integrating a customer’s IT system via the Ekran
  • System API (downloadable from:
  • Https://www.ekransystem.com/sites/default/files/ekransystem/EkranSystemDataConnector.zip).
  • Remote Host IP Filtering – new capability not to record local sessions added.
  • Improvements:
  • Single-Sign On (SSO) – HTTPS requests added.
  • Audio recording – stability improved.
  • Cleanup for screen captures in shared folders – stability improved.
  • Audit Log (previously known as the Management Tool Log) – renamed.
  • Database structure optimization. Please note that after an update of Ekran System, the
  • Data migration process begins as soon as the Application Server starts up. Migration
  • Takes place in the background and may take some time.

New in Ekran System 6.32.34.0 (Mar 26, 2021)

  • New Features:
  • MacOS Clients URL Monitoring – alerts added.
  • Improvements:
  • Session Player Metadata grid – UI simplified (dates removed from Activity Time Column).
  • Viewing Monitoring Results permission – archived sessions are now also included in this permission.

New in Ekran System 6.29.56.0 (Feb 12, 2021)

  • Improvements:
  • Load balancing. The following modifications have been made to facilitate the use ofthird-party load balancing software with Ekran System which is coming soon:
  • The Application Server Installer. The installer has been modified to allow the adding of multiple Application Server instances to your deployment.
  • License storage. Ekran System can now operate with a single common pool of activated serial keys for several Application Servers.
  • Database structure optimization. Please note that after an update of Ekran System, the data migration process begins as soon as the Application Server starts up. Migration takes place in the background and may take some time.
  • Known Issues:
  • Assigning kernel-level USB monitoring rules. USB blocking rules (temporarily) cannot be assigned on Windows 10 Clients version 1909 or higher.

New in Ekran System 6.13.1 (Apr 14, 2020)

  • After the update, the Management Tool log will migrate when the Ekran System Server starts. The migration process will be in the background and may take some time.

New in Ekran System 6.8.168.0 (Jan 15, 2020)

  • Bandwidth usage reduction: In this version of Ekran System, you can control the traffic sent to Ekran Server by adjusting the size of the recorded screenshots.
  • Improvements in Client licensing.

New in Ekran System 6.7.1 (Dec 27, 2019)

  • Ekran System Enterprise Edition introduces the following changes:
  • Password Management improvements: Now Ekran System Password Management provides the ability to share Secrets with internal user groups.
  • Ekran System Standard and Enterprise Editions introduce the following changes: Custom alert messages have been improved.

New in Ekran System 6.6.274.0 (Dec 9, 2019)

  • Alerts for X Window System Sessions have been added: Now, during monitoring of graphical interface for X Window System, you can configure the alerts to be triggered whenever the user performs any of the following actions:
  • Enters certain commands or parameters in the terminal.
  • Launches a potentially illicit or not work-related application.
  • Opens a document with sensitive data.
  • The user whose work must be monitored starts using the machine.
  • UX/UI enhancements: In this version of Ekran System, the Monitoring results page has been redesigned to improve user experience and usability.
  • Live sessions performance enhancements.

New in Ekran System 6.5.785.0 (Nov 18, 2019)

  • Improvements to High Availability Mode: Now, PostgreSQL database is supported in High Availability mode

New in Ekran System 6.5.482.0 (Nov 5, 2019)

  • Ekran System Enterprise Edition introduces the following changes:
  • Multi-tenant mode improvements: In the new version of Ekran System, ability to register an Active Directory user group as a tenant administrator has been added. Now, during tenant creation, there is no need to register each user separately, just add the domain group they belong to.
  • Password Management improvements: Now Secrets can be shared with Active Directory user groups.
  • Ekran System Standard and Enterprise Editions introduce the following changes:
  • Linux Client performance improvements.

New in Ekran System 6.5.339.0 (Aug 26, 2019)

  • Ekran System Enterprise Edition introduces the following changes:
  • Database Archiving & Cleanup improvements: In the new version of Ekran System, you can configure custom archiving and cleanup settings for Client groups and separate Clients depending on your needs. For example, you can select different types of cleanup operation or set different retention period of monitoring data for different Client groups.
  • Password Management (Beta feature): Ekran System password management functionality provides you with full control and visibility over privileged user access. Managing privileged accounts and implementing role-based access control is critical for enterprise security teams. With Ekran System, you can securely store credentials, provide granular access to them, and manage passwords without interfering privileged users workflow.
  • Ekran System Standard and Enterprise Editions introduce the following changes:
  • Offline activity recording: Now, you can limit Ekran parameters to record specific data (metrics of user activity). For example, by disabling offline activity recording, you will configure Ekran Clients to record on-screen activity only when users are at work.
  • Enhancing Linux Clients Protection: The offline cache feature for Linux Clients has been improved.

New in Ekran System 6.4.357.0 (Jul 24, 2019)

  • INI file encryption during Client installation: From now on, the ini file with the predefined Client configuration can be easily encrypted during creation of an installation package. Thus it will be protected from any modifications during distribution and deployment.

New in Ekran System 6.4.122.0 (May 17, 2019)

  • Ekran System® Enterprise Edition v. 6.4 introduces the following changes:
  • User and Entity Behavior Analytics (Beta feature): Ekran System is now entering the world of User and Entity Behavior Analytics (UEBA) to protect our clients against user-based attacks more effectively. Ekran System UEBA baselines user behavior against behavioral factor to further detect abnormal user activity and possible account compromise. You can easily view the sessions with the detected behavioral anomalies and respond to risky user activity. Moreover, you can get a report on all risky sessions. To make our UEBA feature more efficient, more behavioral factors will be added in future versions.
  • SWIFT Username Monitoring: For additional security check of the SWIFT environment, Ekran System introduces the SWIFT Username Monitoring feature. With this new feature, you can easily associate the users logged into the SWIFT network. The user name that was used for logging into the SWIFT network can be viewed in a log file on the Ekran System Server computer or in the SIEM system.
  • Ekran System® Standard and Enterprise Editions v. 6.4 introduce the following changes:
  • Two-Factor Authentication (2FA) for Linux Clients: In the new version, Ekran System allows you to increase the security of your Linux Client machines with the help of two-factor authentication tool. When the critical endpoint is protected with 2FA, the user is required to provide not only user credentials, but also a time-based one-time password sent to a verified mobile device owned by this user.
  • Full Support of Monitoring of Non-Persistent VDI: Ekran System allows automatically unassigning licenses from the disconnected non-persistent virtual desktops with further removing these virtual desktops from the database.
  • Endpoint Support Simplification: To simplify the endpoint support, Ekran System provides an ability for an easy one-click collection of Client log files via Management Tool. Just click the link and the log files of the required Client machine will be downloaded to your computer.
  • Usability improvements

New in Ekran System 6.3.4.0 (Apr 22, 2019)

  • Multi-tenant mode improvements: In the new version of Ekran System, you have an ability to add the Linux Client machines to the strongly isolated tenants. So, their data will not be accessible to other tenants.
  • Approving USB access by administrator: With this new feature, you can protect sensitive data on the end-points and prevent potential data leakage by forbidding access to the USB device until the administrator approves it.

New in Ekran System 6.3.22.0 (Feb 14, 2019)

  • Restricting user access by time:
  • With the help of this new feature, you can protect the Client
  • computers from access at undesired time, e.g. outside working hours. The restricted users will be able to log in to the Client computers only during the defined time period and will be forcibly logged out after it.
  • Overall performance has been improved

New in Ekran System 6.2.3 (Jan 28, 2019)

  • X Window System Monitoring (Beta feature): Now Ekran System remote SSH session monitoring provides the ability to monitor not only the commands executed in the terminal but also the X Window forwarded applications. Monitoring of the Linux sessions started locally via the graphical interface is supported as well.

New in Ekran System 6.2 (Nov 6, 2018)

  • Ekran System Standard and Enterprise Editions v. 6.2 introduce the following changes:
  • PostgreSQL database support: Now you can benefit from all advantages of the PostgreSQL database, the most advanced open source database system that supports large deployments.
  • ServiceNow ticketing system integration: An integration with the most popular ticketing system is now available in Ekran System. This allows you to prompt users to enter valid ticket numbers to start working with Windows Client machines associating session record with a particular ticket accordingly.
  • Sessions out of work hours grid report: A new report type with information on time users spent out of their work hours is introduced.
  • Linux user filtering: A new feature will help you to reduce the amount of information received from the Linux Client by defining users, whose activity will be monitored or, on the contrary, skipped during monitoring.
  • Linux Client cache limit: Now you have an ability to control the Linux Client disk space usage by adjusting the cache size you need.
  • Session grid report improvement: A new Comment column, which contains comments entered by users on login, has been added to the Session grid report.
  • Updating predefined alerts database: Now Ekran System contains more predefined alerts to be triggered on potentially harmful or forbidden actions performed on the Client computers.
  • Report Generator page redesign.
  • Pseudo graphic for Putty and Ubuntu terminal in the Session Player has been improved.
  • Usability and performance improvements.
  • Notification about expiration of Ekran System update & support subscription: Now you will receive a reminder about Ekran System update & support subscription expiration beforehand so you can renew your subscription in time and continue having access to the new releases.
  • Ekran System Enterprise Edition v. 6.2 additionally introduces the following changes:
  • Isolating database from Clients: Now you have an ability to disconnect all Clients from the database and send them offline so that you can fix issues with the database, run database cleanup and maintenance without stopping the Ekran Server. Once database work is restored, you can return all Clients online in one click.

New in Ekran System 6.1.99.0 (Aug 21, 2018)

  • Standard and Enterprise Edition:
  • New Interface: The new design of the Ekran System interface will ensure more comfortable and pleasant work with the Management Tool.
  • Linux Clients Protection: If the Linux Client process is killed, the monitoring will continue and data will be saved to the offline cache. As soon as the Client gets online, all monitored data will be sent to the Server.
  • Detection of remote IP in VMware Horizon Environment: Now you can use IPs of VMware Horizon Clients to search sessions.
  • IPv6 full support: The columns with IPv6 data are displayed for each session, so now you can see the public IPv6 and private IPv6 for the remote hosts, from which sessions were started, along with the IPv6 address of the computer, on which the Client is installed.
  • New types of alerts for clipboard events: Two new types of alerts are added – now the platform can notify you and bookmark each episode when the user copies/cuts information or pastes it.
  • Enterprise Edition:
  • Easier access to remote computers via PASM: Now you can open the Ekran System Remote Access window using the shortcut on your desktop.
  • System Health Monitoring: Now you can get detailed information about the database storage usage and errors occurring in the Ekran System both in the Management Tool and via email.
  • Server Resource Monitoring: On interactive dashboards, you will see the resource usage by the Ekran System Server process at the moment as well as average speed of insertions to the database and the number of records waiting in the queue.
  • Offline Clients detection: The new option for offline Client detection will help you to timely detect Clients that have stopped transmitting monitoring data. Just define the time period after which the Clients will be considered “lost” and get notified about such incidents.
  • IP Filtering feature is added: The ability to filter out sessions from certain remote IP addresses or monitor only sessions from certain IP addresses is available in the current version.
  • Restricted Users feature improvements: Now you have an ability to define the computer groups for the restricted users. So, the restricted user will need the admin’s approval for login on the computers from the defined computer group and will be able to login without approval to computers outside the group.
  • Improvements to High Availability Mode: The licensing implementation has been simplified as we´ve removed a separate license server component.

New in Ekran System 6.0.101.0 (Apr 20, 2018)

  • Privileged Account and Session Management (PASM): Now you can manage, control, and monitor privileged accounts in your IT infrastructure. With this feature, you can provide users with temporary RDP access to the protected computers using the privileged accounts whose credentials are stored in the secure password vault.
  • Multi-tenant mode is added: The Multi-tenant mode allows multiple strongly isolated tenants to operate in Ekran System environment. Data of each tenant including monitored data, user credentials, Client names, System configuration, etc. is independent and not accessible to other tenants.
  • Keystroke filtering: In the new version, you can disable keystroke monitoring within specified applications launched on the Client or monitor keystrokes only inside the selected applications.
  • Product customization: Now you can use a custom logo and customize output of the generated reports.
  • Client and Server performance improvements

New in Ekran System 5.6.535.0 (Feb 28, 2018)

  • Enterprise Edition trial: Now you try not only Standard Edition but also all Enterprise Edition features for free during 30 days.
  • User Daily Activity Grid Report: This report provides information about generalized user’s activities without idle time allowing you to see how much time exactly the user has spent at work.
  • Sensitive data encryption: We’ve introduced important improvements to encryption of stored keystroke and screenshot data.
  • Saving your credentials on trusted machines: Now, you do not have to enter your login every time you sign in Management Tool.
  • Using Server IP as additional parameter for remote Client installation and ClientServer connection: You are now able to add several Server IP addresses during the remote Client installation to prevent situation with server connection lack. If there is no connection with the server by the first IP, the next IPs or names are checked.
  • Usability and performance improvements.

New in Ekran System 5.4.420.0 (Aug 31, 2017)

  • macOS Clients: You are now able to monitor the user activity on computers with the macOS operating system. macOS Clients capture screenshots and collect such data as user name, host name, application names, active window titles, activity time, and visited URLs.
  • New, more flexible licensing scheme for Windows Servers: With the new licensing scheme for Windows Servers, you are now able to license different types of server endpoints according their role in your infrastructure.
  • More powerful and proactive alerts: Ekran System alerts on events continue notifying you about potentially critical events, but now they can do much more than that. Now you are able to configure alerts to show a warning message to the user, who triggered an alert, and then optionally block this user or forcedly close the corresponding application.
  • Alerts on keystrokes: Now, Ekran System allows you to create alerts that will be triggered when a user types specified text.
  • Password hiding: Our new password hiding feature enhances security and allows skipping sensitive data from recording in accordance with the international requirements. Passwords that a user has entered both in the Windows forms and on the web sites are displayed as asterisks in the metadata pane.
  • User blocking for non-server machines. Now you can manually block a user when reviewing their live session whether it is a server or desktop endpoint.
  • Management Tool Log records saving to the CEF log: You can save the information about all security supervisor actions performed in the Ekran System Management Tool to the CEF log, which can be analysed by the Splunk or ArcSight monitoring software.
  • Screenshot data encryption. This data protection feature allows you to securely store Ekran System monitoring data outside your corporate perimeter, in the cloud.
  • Usability and performance improvements.

New in Ekran System 5.3 (Jul 19, 2017)

  • Date and time format customization: You can now define the custom date and time format for displaying monitoring results, such as monitored sessions, reports, forensic export result, email alert and USB rules notifications, email USB alerts, and more.
  • Additional information about remote connections: Ekran System now collects additional information about remote connections to Clients, allowing you to track a remote computer, from which the connection to the Client computer is established.
  • Search by dictionary: The search by dictionary function allows you to search for sessions using a list of keywords. In such a way, you can load a large number of keywords at once, without having to enter them one by one.
  • Multiple session export: You can now export multiple sessions simultaneously after filtering them.
  • User interface optimization for Session Player: The Session Player interface has been optimized to make it more user-friendly and responsive.
  • New, more flexible licensing scheme for Windows Servers: With the new licensing scheme for Windows Servers, you are now able to buy serial keys containing different types of server licenses for the corresponding types of endpoints in your network.
  • Memory usage optimization for Firebird databases: The Firebird database memory usage has been optimized, which provides you with a smoother user experience.
  • Usability and performance improvements.

New in Ekran System 5.2 (May 12, 2017)

  • Administrator’s Approval on Login: Using a new Administrator’s approval on login access management feature, you can restrict users’ access to certain critical endpoints in your network by adding the required users to a special restricted list. Restricted users will be able to start working with the system on Client machines only with approval of the administrator. This allows you to better protect Ekran Client machines from undesired access.
  • Monitoring During Defined Hours: Using a new Monitoring during defined hours feature, you can reduce the amount of information received from Ekran Clients by defining certain days of the week and hours during which Clients will record all user onscreen activity.
  • Recording User Activity without Screenshots: Using a new Recording user activity without screenshots feature, you can configure Ekran Clients to record only metadata such as active windows title, URL, text data, etc. to reduce the amount of data sent by Ekran Clients to Ekran Server.
  • Custom Path for Client Installation Folder: Ekran System allows you to define the custom path for the Client installation folder making the installation process of the Client more flexible. You can either define the full path or use Windows environment variables.
  • Limitation of Offline Data Storing: Now Ekran System allows you to limit the amount of offline data stored by the Client locally when the connection with the Ekran Server is lost. In such a way, you can prevent the Client computer from running out of space on the hard drive.
  • Manual Client Update: Now Ekran System allows you to update the Windows Clients manually. In such a way, you can control the update of the critical endpoints in your network yourself.
  • Search in Linux Commands Output: Now Ekran System allows you to search in the output of executed commands in Linux terminal. In such a way, you can quickly find out if any potentially harmful or forbidden actions have been performed on Linux Client machines.
  • User Interface Optimization for Large Amounts of Clients: The Management Tool user interface has been optimized to allow you to work with large amount of Ekran Clients in effective and efficient way.
  • Usability and performance improvements

New in Ekran System 5.1 (Feb 21, 2017)

  • Two-Factor Authentication: Using a new Two-Factor Authentication feature, you can enable an extra layer of security to better protect the critical endpoints in your network. When this feature is enabled, the Client will require the users to additionally enter the time-based one-time password generated on their smartphone to log in to the Client machine with Windows Server operating system.
  • Integration with Active Directory: Now you can integrate Ekran System with Active Directory by adding multiple LDAP targets. In such a way, you can use a wizard to detect and add domain users and user groups to the system allowing them access to the Management Tool and Client computers with enabled Forced User Authentication.
  • New Active Directory related alert parameters: With new Active Directory User Group and Active Directory Computer Group alert parameters, you can configure alerts to be triggered each time when users belonging to the target domain group perform suspicious actions on the Client machines and monitor activity on the computers belonging to certain domain groups.
  • Monitoring remote IP of third-party remote desktop software: Now Ekran System allows monitoring the remote IP-addresses used to log into the Client machines via such third-party remote desktop applications as DameWare, Radmin, UltraVNC and TightVNC
  • Clipboard monitoring: Using a new clipboard monitoring feature, you can enable monitoring of text data, which has been copied or cut and then pasted on the Windows Client machines. Moreover, you can generate a new Clipboard grid report to quickly view the clipboard text data captured on the Client machines within the specified time interval.
  • Integration with SysAid ticketing system: Using a new integration with the SysAid ticketing system, you can prompt users to enter valid ticket numbers to start working with Windows Client machines. This allows you to better protect Client machines from the undesired access and make security audit more transparent.
  • Signing monitoring data with certificate: This mechanism allows signing of each screen capture and metadata record received from Windows Clients with the trusted certificate. In such a way, you can verify that data integrity in the database has not been altered.
  • Detailed activity report: A new Detailed Activity Report focuses on user activities. It provides the complete information on all user actions performed on any Client machine in the network within the specified time interval. With the help of this report, you can perform the in-depth analysis and investigation of user behaviour thus detecting highrisk users.

New in Ekran System 5.0 (Aug 29, 2016)

  • Alert Export and Import: The ability to export a set of configured alerts into the .xml file allows using these alerts on other Ekran Servers so the user can quickly enable the necessary alerts without having to create them manually.
  • Predefined Alerts: When a new Ekran System is deployed, it contains a set of predefined alerts prepared by the vendor security experts and specifically configured to be triggered by potentially harmful or dangerous actions performed on the Client computers.
  • Managing Multiple Alerts: The ability to manage multiple alerts simultaneously makes the process of alert editing more usable and efficient.
  • Alert Risk Level: The alerts are highlighted in different colours according to the risk level assigned to them. This allows you to spot the most important alerts immediately in the Monitored Sessions List, in the Session Viewer, and on the Recent Alerts Dashboard.
  • Forced user action acknowledgement: Now the users can be required to enter their comments on login to inform the system administrator about the activities they intend to perform on the Client computers.
  • Digital signature and validation of monitoring data: When enabled, the mechanism allows to digitally sign each monitored session (screenshots and metadata received from Windows Clients) and then check that data integrity in the database has not been altered.
  • Monitoring triggered by keyword: Now the monitoring of the user activity can be started automatically on detecting a suspicious keyword in typed keystrokes. This allows the Ekran System administrator to get the information only on the suspicious activities performed on the Client computers.
  • New reports: A new Session Report focuses on the monitored endpoints. With it you can get the detailed information on all user logins to the Client computers and on the total time spent on working with them. A new User Statistics Report focuses on your users. It provides you with a summarized information on the computers to which they logged in, on the remote IPs from which they logged in, and the total time spent by the users on all the computers. A new USB Storage Grid Report provides the information on all USB storage events, which occurred during the defined time period.
  • XML report format: The ability to save the Ekran reports to the .xml format allows the Ekran System users to use the report information in the third-party software.
  • Enterprise features: With an activated Enterprise serial key, you get access to the following valuable features of the Ekran System:
  • Database Archiving & Cleanup: The ability to archive and then delete the old monitored data allows you not to run out of space on the Server computer while saving the monitored data in a secure external storage so you can view the archived sessions in the Session Viewer any time.
  • Advanced SIEM Integration: Now you can get access to the Ekran System alerted events and monitored data via the integral ArcSight or Splunk interface.
  • One-time password feature: Now Ekran System administrators can manage access to the critical endpoints with Windows Server OS by generating one-time passwords for users by request. The users can request one-time passwords directly from the secondary authentication window displayed on their login to Windows.
  • High Availability: The High Availability mode provides a high level of operational performance, which allows minimizing downtime and service interruptions.

New in Ekran System 4.4.52.0 (Apr 4, 2016)

  • Interactive Analysis: The information on all applications and URL addresses monitored by the Clients is now displayed in the form of two easy-to-use column charts generated on user request. You can filter the information by user name, Client name, and time period and receive the list of the most or least used applications and visited web-sites. Such lists can assist you when assessing user efficiency and detecting malicious activity on the user computer.
  • Client Group Configuration: When you add Clients to the group, their settings can either be left unchanged or inherited from this group. When the group settings are changed, the inherited settings of all Clients belonging to the group are changed as well.
  • Active window monitoring: The Clients installed on computers with Windows OS can now be configured to make screen captures of the active window only.
  • USB storage monitoring: You can get detailed information on all USB storages being plugged in and see which mass storage devices are used.
  • Usability and performance improvements.

New in Ekran System 4.3.83.0 (Mar 21, 2016)

  • User blocking: Now you are able to block users performing potentially harmful and forbidden actions (for Windows-based and Citrix-based Servers). You can block users when reviewing their Live sessions. The blocked users are forcedly logged out and not allowed to log back in.
  • Quick alert preview: Navigate across alert events quickly with a special viewer. It allows you to view detailed information on all alert events together with screen captures in one place.
  • New powerful and user-friendly session search and filtering: Now, you can easily filter the session list by specific criteria and perform searches in the metadata limiting the search scope to a particular number of sessions.
  • Special alert mark-up has been added to the Session Viewer: Now you can easily navigate to the Alert events during session viewing in the Player.
  • Now the IP addresses of the machines remotely connected to Client computers are monitored
  • Usability and performance improvements.