Skip to content

Changes in Release 1.133 (2026/10/18)

Admin Console

  • New: Assets running as an Active Directory domain controller get a Domain Controller setup in their side panel. It prepares the server for use over XplicitTrust Network Access in one step: reserves the DNS ports, keeps the tunnel address out of the published DNS addresses, makes the DNS server listen on the tunnel address, and sets the server up as split DNS server for the selected domains. Steps already in place are skipped. Requires agent version 1.133 or later. See Active Directory Domain Controllers.
  • New: The Admin Console has a new design, supports light and dark mode, and works better on mobile devices.
  • Fixed: Creating a machine group was refused with Choose at least one service unless the Access tab had been opened. New groups now offer ALL services by default.
  • Fixed: Machine groups and clients in a saved policy were shown by ID instead of name on the policy canvas.
  • Fixed: In the Topology Explorer, the assets of a machine group used as policy destination were shown without connections.
  • Fixed: The Insights pages could stay empty or show an error for policies with machine groups or clients, and the explorers took minutes to load policy insights.
  • Fixed: The side panel on the Connections page was empty for connections to a client.
  • Fixed: Connections of a client with access through a machine group disappeared from the Connections page while no user was signed in.
  • Fixed: With Microsoft Entra ID, users could lose their group memberships, and with them their access, at every sign-in until the next group sync.
  • Fixed: After editing a policy, a user's groups or a group's members, access through a machine group could be missing while no user was signed in, or access through a user group could remain after sign-out.

Agents

  • Fixed: A DNS server reached through a machine group was not used for name resolution while no user was signed in.
  • Fixed: On Windows machines where Hyper-V, WSL or WinNAT reserve ports, connections could never be established directly and always went through a relay.
  • Fixed: After duplicate machines were merged, some agents could no longer connect.
  • Fixed: A malformed packet on a relayed connection could crash the agent service.