The VSA 9.5 release is the culmination of our commitment to quality and customer-driven feedback. VSA 9.5 includes over 300 enhancements and bug fixes. The fixes contribute to greater synergy across the platform improving robustness, performance, stability, and scaling. The new features are focused on a more capable user experience in the most important areas determined by our customers. The VSA has also been enhanced to support Technology Alliance Program partners in creating robust, fully integrated modules that support both on-premises and cloud instances.
Features
Live Connect
Live Connect with Traverse
Support for PowerShell including shortcuts
Enhanced File Management
Transfer both files and folders in the File Manager
Improved file transfer performance
Kaseya Antivirus
Control over how KAV reboots and when so that the user experience is not impacted by administration
Support for Kaspersky Endpoint Security SP2
Kaseya Cloud Backup
Backup Plans
Creation & Deployment
Many flexible configuration options
Support for Policy Management (Plan Deployment) to improve onboarding process without navigating to Acronis’ management console
BMS Integration
Automatic Ticket Deduplication
Automatic Ticket Close (initially only available for on premises)
Improved SQL query performance involving database maintenance such as deleting events.
Fixed an issue with similar names being visible under the Private cabinet under Monitor Sets, when logging on as two different VSA users.
Select All under System > Check-in Policy will now properly select all machine groups.
Corrected an issue where Policy Deployment would fail based on an incorrect license key.
Corrected an issue where, in some environments, the Agent and Agent Endpoint services would crash when a dependent registry key is missing.
Resolved an issue with portal users ability to view agent procedures.
Executive Summary reports are now properly aligned in the center.
The default MAC address gateway incorrectly captured only the first 10 characters of the MAC address. This has been corrected and it now captures the full 12 character MAC address gateway length.
Enhanced agent procedure usability so that large log entries committed by agent procedures can now be reviewed through row expanders.
In some environments, Audit would incorrectly identify which country an IP address is associated with. This has been corrected. IP records will need to be imported again to correct any stored IP information in the database.
Corrected an issue where the agent installer package does not retain the /s (silent) switch once saved and closed.
Corrected an issue where particular non-alphanumerical characters were used when uploading files to the Managed Files directory prevented deleting such files.
Corrected a rare instance where downloading a Mac agent would display as a previously released version than the current released version (i.e., 9.4.0.x).
Removed trimming whitespace for parameters and test condition when exporting agent procedures.
Added the ability to edit the warranty and purchase date fields in the Audit module.
Changed the agent procedure icon on the user portal to reflect a more accurate icon.
User preferences now shows the proper VSA server time when browser time is selected.
Fixed an issue with logging the reason for a Kaseya Remote Control session, when starting the session by clicking the agent icon.
Improved SQL performance associated with Software Deployment queries.
Fixed an issue that caused a custom Date field type to decrement itself by one day every time the custom field was opened for editing and saved.
Resolved an issue with the Endpoint mechanism creating large numbers of packages found in the EndpointUploads and EndpointDownloads directories on agents.
Updated tooltip to accurately reflect wildcard function in ticket searching. Refer to http://help.kaseya.com/WebHelp/EN/VSA/9040000/index.asp#414.htm.
After updating an agent, the Kaseya system tray icon will now be restored.
Added restrictions to how users can edit their own role and access rights so users would not be able to unintentionally promote themselves.
Fixed a performance issue where very large numbers of views associated with policies can cause the View Compliance process to time out.
Corrected a timing offset issue where the Quick View window will show the correct offset time but the Agent module would follow the UTC convention.
Taking ownership of an install package will no longer remove the original admins and roles assigned to the package.
Implemented a method to clean up remaining Classic KAV and Classic KAM files when uninstalled from the VSA server.
Resolved an issue where custom field names would show up as generic name (i.e., “Custom Field 00”) in report parts. This is now corrected to show the actual custom field names to allow for easier reporting.
Resolved an issue where agents would appear to be offline but is in fact online. The agent state is now correctly updating.
Using localhost (i.e., http://localhost) will no longer cause the iFrame control to “go outside of the bounds of the array.”
In rare circumstances, a memory leak in Kaseya Network Monitoring would occur over time causing stability issues. The root cause was found and has been fixed.
Added Purchase Date and Warranty Expire Date as available columns to the Manage Agents page.
Refactored a query for ticketing that would otherwise result in frequent interim hang ups at the database level.
Endpoint fabric will now prioritize local machines (i.e., on the same network) in order to enable peer to peer connection.
Replaced WebPages\install\subScripts.xml file with stubbed out file since these procedures are now loaded from WebPages\ManagedFiles\VSASystemScripts\subScripts.xml.
Fixed a query issue preventing some agents from being updated.
Fixed an issue associated with ticketing where the creator’s name returns empty.
Our REST API now supports querying by Incident Number.
When special characters in custom fields are queried via the SOAP API, it will now return values in valid escaped XML format.
Added a new field in Executive Summary configuration containing “How To Read Notes” for KAV and KAM.
When running an API call utilizing GET /automation/agentprocs, it would return null IDs. We’ve added a check to ensure that no null values are returned.
It is now possible to perform agent management tasks (i.e., set credentials) while having a custom field column filtered.
Improved performance of small file downloads for endpoints.
Corrected help documentation link for the deleteFile step in the Agent Procedure Editor.
Portal users running Internet Explorer will now see the scroll bar in Agent Procedures.
Fixed an issue where running a Missing Patches report would return blank release dates.
Discovered that the vSystemInfoManual view, created on demand based on custom fields, are not being created in versions VSA 9.4+. This is now corrected.
Debugging features for the Kaseya Agent and Agent Endpoint services are added. This will take effect for new agent installs and updates starting with 9.4.0.15. If one of the services crashes, mini-dump files will be automatically created in C:\ProgramData\Kaseya\data\crashdumps. Only the most recent dump file is retained at any given time. Support may request for such file if crashes are occurring on a particular machine.
In the Manage Agents page, viewing the Portal Access Login can be done by adding the column. However, when editing the column set, the equivalent label is called Login Name. This has been modified to be Portal Access Login to maintain consistency.
Corrected scheduling logic where repeating agent procedures will run from the last completed time instead of the selected start time.
Corrected an issue where scheduled reports do not run according to the local VSA browser time.
Kaseya Edge Service now gracefully handles the messaging queue service restarting, which would previously cause endpoint message processing to halt.
Reduced the length of time P2P files are cached on endpoints.
Improved Endpoint fabric performance where managing backend tasks will be quicker.
Improved security where a check takes place to determine if a user falls under the Master or System role before attempting to return all organizations in Audit > Manage Credentials. If the user is in a limited role or scope, only specific organizations are returned.
Corrected an instance where agent procedures will run on incorrect days when scheduled for weekend days.
Get Agents in Agent View queries would not honor machine filters and return all agents instead. This had been corrected to honor filters.
Agents may now be suspended if a custom filter is enabled as a column.
There is now an option for portal users to update their contact details.
Quick View will now work in Service Desk tickets which will allow you to launch Remote Control and Live Connect.
Agents may now be deleted or moved if a custom filter is enabled as a column.
Corrected how disk space is measured when running audits on Linux endpoints to provide more accurate results.
When upgrading to VSA 9.5.0.2, running any report except for Executive Summary will result in an error referencing an ambiguous column name. This is now corrected.
Fixed an issue where Ticketing > Migrate Tickets would display all tickets regardless of scope.
Live Connect
Resolved an issue where Live Connect would fail to connect to agents due to disassociated scopes. Routine checks are made to ensure these scopes are in compliance.
Updated SQL database maintenance for on-premises VSAs to include clearing orphaned rows that could cause Live Connect sessions to return a 500 error.
Subsequent remote control sessions will no longer preventing typing in text fields.
Live Connect will no longer improperly invalidate its token after a certain period of time requiring logging in frequently.
VSA SaaS users of Live Connect will no longer receive an error with “Could not connect to server” when logged on the VSA with the -cdn.kaseya.net suffix.
Remote control sessions will now properly relinquish keyboard control whenever a key is held down while switching window focus.
Live Connect will no longer receive an application error when connecting to an agent protected by security applications such as AVG (KES).
Agent status icons are now properly visible on the main Live Connect interface.
If a policy requires a reason be entered before starting a remote control session, clicking the agent status icon while a Live Connect session is running no longer requires you to enter an administrative reason twice.
Configured PowerShell to start in Insert mode following latest Windows PowerShell convention.
When clicking on the Transfer Status icon in File Manager while no transfer is occurring, it will properly inform the user that no pending transfers are running.
Improved UI responsiveness while transferring a large number of files (i.e., 1,000 or more).
When attempting to close a Live Connect session from which a remote control session originated, it will remind the user whether they would wish to close remote control as well.
If transferring files to a destination that has reached capacity, it will now properly notify users that it is no longer able to write to the disk.
Corrected an issue where a user would not be able to individually cancel files from transferring.
If a folder has restricted privileges and a download is attempted, Live Connect will properly notify the user with an error instead of leaving a blank window.
Added a new option to toggle control between the remote keyboard layout and local keyboard layout during a remote control session. The previous method was to purely run in remote keyboard. This now allows users, especially those who deal with international clients, to gain greater access to special characters available to both layouts.
When chatting with end users, you can now hover the cursor over the user name initial that identifies each chat balloon and see a tooltip of the entire username. This ensures you can distinguish the usernames for each side of the conversation, even if their usernames happen to have the same initial (i.e., Administrator and Allen).
Corrected an issue where the sidebar menu would remain expanded after clicking on the main window such as PowerShell.
File Transfer will now recall the last save to location.
Corrected an issue where nested folder uploads would result in files being randomly placed rather than following the original structure.
Corrected an issue where uploading in a repeated fashion would result in the file dialog continuously adding the last uploaded files to the File Name text field.
Fixed a specific circumstance where exporting an agent procedure would result in an “unauthorized access” error.
When a Live Connect on Demand agent uninstalls, it now removes any supporting folders, files, event logs, and registry settings it created when the temporary agent was installed.
Special characters such as ampersands and spaces are now supported in advanced searches.
The generic error of 403 when a user does not have enough permissions to use Live Connect is replaced with a permission denied notification.
Tooltips will now appear when clicking on the bar graph of disk volumes.
Resolved an instance where uploading a larger number of files would cause the application to crash.
Addressed an instance where remote control sessions would sometimes fail to release the shift key when switching focus.
Fixed an issue where downloading a folder in Live Connect would trigger an incorrect warning.
Users will now be able to sign on Live Connect using their domain tied to their AD.
An end user denying a remote control request will no longer trigger an application error.
The Live Connect launcher on the VSA is now updated to improve user experience. It will no longer attempt to wait for an endpoint connection to be successful. It will no longer remain on the screen for excessive amount of time. It will no longer provide false positive claims that you may not have Live Connect installed if it takes longer than usual for Live Connect to fully load.
Live Connect on Demand will now properly enforce HTTPS, when enabled, and redirect to https://mspname.com/gethelp/ regardless of how the URL is typed.
Added a horizontal scollbar to the Events tab to allow for ease of review without maximizing the window.
Fixed an issue where downloading a large number of files will cause the UI to slow down or the download to fail.
Chat messages from the same user will now be grouped together in order to facilitate better readability.
Fixed circumstances to allow Live Connect to handle events with proper message formatting errors.
Improved download speeds from SaaS servers for Live Connect on Demand agent installers.
Added support for managing Live Connect log retention under Agent > Agents > Log History.
Searching for agents using org: or group: will no longer return with an undefined error.
Live Connect will now properly display a prompt with a working link to download the newest version of Live Connect. It will also no longer prompt multiple times -- only the first time.
Software Management
Added function to support private profiles which will allow partitioning profiles by organization.
Added a status icon indicating that an endpoint is waiting for packages.
The Machines > Clear > Pending Actions button will now stop selected scans in progress.
Added a deployment progress indicator for Software Management patch and software deployments.
Updating the list of vulnerabilities can include removing superseded vulnerabilities. When an update causes an override profile to contain no vulnerabilities, the override profile is now removed.
A new 'Ignore 3rd party patches' checkbox was added to the Settings page. This provides customers who only want to scan for OS patches to do so. This would preclude 3rd party patches from scanning and deploying.
You can now use the Cancel Pending Actions button to cancel deployments in progress.
Improved overall performance for scans.
Patches that are ready to be deployed will now appropriately display “Ready” instead of “Scheduled”.
Failed third party patch deployments will now properly display an error icon.
Improved performance of scans when override profiles are in use.
Improved performance of patch analysis results by reducing amount of cycles needed to report back to messaging queue.
Improved performance of Software Management scans by restructuring queries required when overrides are used.
Fixed an issue with duplicate entries which may interrupt scanning.
Corrected an issue where duplicate software updates and patches appeared.
Added Architecture and Language columns for third party software profiles.
Further improved performance by reducing messages required to be sent back to the VSA server from agents.
Software Management now adds the ability to review deployment progress in real time (i.e., “Installing 1 of 3”).
Improved performance of scans by increasing thread usage.
Fixed an issue that could cause scans not to detect recent OS patches.
Deploying patches will now properly deploy without an error when combined with filters in columns.
Corrected an instance where daily imports from the Lumension Cloud Service would remove vulnerability overrides.
The percentage of machines vulnerable in the dashboard will now correctly take into account only Software Management-enabled agents.
Closing the pending actions dialog will now refresh the page to ensure the latest update is available for viewing.
Corrected a behavior where canceling a pending deployment, it would not properly clear the Patch In Progress flag.
Improved efficiency by initially creating packages for available OS versions already installed on the VSA.
Corrected a query issue where an error is being thrown when updating the patch impact the very first time that product titles are being imported into the database.
SaaS environments will now allow view of all 10 vulnerable machines on the Top 10 Vulnerable Machines chart in the dashboard.
When a batch of patches are importing and if an unknown error occurs with a single patch, it will no longer halt the entire operation.
Implemented maintenance to clean up Software Management jobs older than 60 days.
Deployments will now honor selected views so that agents outside of such scope are not erroneously deployed as well.
Added a check to prevent JSON files from being deleted during active deployment which would otherwise lead to “File Not Found” errors.
Improved initial scan and deployment load management to allow for improved server responsiveness.
Added the ability to configure how many days an error is shown before being automatically deleted.
Endpoints now download Software Management scan files in zip format. This leads to improved performance in initial scanning.
Corrected an issue that caused policy overrides not to be registered correctly from Software Management.
Corrected an issue where a deployment schedule being independent of a blackout window schedule would improperly report being overlapped.
Resolved an instance where patch scans would not work correctly on all machines.
Added the ability to assign third party licenses through Policy Management.
Improved clarity regarding disconnecting agents that are already disconnected from Patch Management. It will state, “This machine is already disconnected.”
Suspending an agent will no longer throw an error if no third party licenses are provisioned.
Outstanding scans and deployments that do not complete within 24 hours will now be cleared.
Corrected an instance where disconnecting an agent from Patch Management would be prevented despite having no Patch Management settings applied.
Corrected an instance where retrieving new title updates will no longer work if the Plugin Host service was restarted during the title import process.
Filters will now be respected when assigning profiles.
Improved overall performance with the inclusion of indexing.
Software Deployment
You can now create 3rd Party Software profiles by adding individual titles or by adding multiple titles. Adding individual titles uses a search field to locate and add a single title. Adding multiple titles provides a checkbox next to each title in a list. You check the titles you want and add them all at the same time.
Pending procedures for scheduled latest audit scan will now show its proper name in Quick View.
Corrected an instance where unapproved third party software would appear and approving them would not have any effect.
Anti-Malware
Fixed an issue with Malwarebytes scans not reporting back to the VSA properly.
Reboot flags will no longer appear erroneously if KAM does not require a reboot.
Corrected an instance where reported detections in KAM would end up in KAV reports.
Fixed performance issues with loading profile dialogs where such profiles are associated with large numbers of assigned agents.
Resolved some instances where CPU usage would remain high when running in headless environments.
Corrected an instance where closing remote control sessions would prevent users from typing in Live Connect afterwards.
Antivirus
Fixed an issue which cause the "Could not parse response from server" error while added a global exclusions.
Excluding a trusted application will now also globally exclude network traffic settings.
Corrected an issue where it would erroneously claim all KAV installs were “removed by user” after upgrading from 9.4 to 9.5.
Added report parts for Antivirus and Anti-Malware to indicate whether they are not installed or had never been installed on agents. This will meet GDPR compliance requirements.
Corrected an instance where private profiles would allow a scoped user to see an incorrect number of profiles or duplicated profiles.
Scanning removable drives is now supported. It is visible under Antivirus > Configuration > Profiles > Advanced Settings tab > Scan Removable Drives on Connection. It is configurable to run quick scan, detailed scan, or do nothing. It is turned off by default.
Corrected an issue with Executive Summary reports showing incorrect Antivirus data.
Removed dependency on certain KAV components that are not installable on server-based OS machines and replaced it with an equally capable method. This allows compliance to remain valid.
Added an "Hourly" option to the profile scheduling section of Antivirus.
Fixed an issue where an updated KAV installer caused a conflict with Windows patching.
Corrected an instance where no errors are reported back to the VSA server when KAV tasks fail on the endpoint due to a specific missing registry key.
Compliance is checked against only online agents so policies are not forced to re-apply on offline agents causing them to reschedule scans.
Fixed an issue that prevented Antivirus alerts for 'Definition not updated in X days' from being generated.
Cloud Backup
The Acronis Cloud Backup agent version is updated to 12.0.4492.
Fixed an issue that prevented failed Cloud Backups from generating alarms and tickets.
Cloud Backup will now properly detect virtual machines running on QEMU as actual virtual machines.
Updated the method of detecting Active Directory on an agent machine to support detecting AD on SBS 2011 x64 Edition servers.
Clicking the Machines > Manage Backup page no longer displays a transitional 404 error page before logging into the Acronis Cloud Backup website.
Updated Cloud Backup to work with the latest Acronis API release.
Added support for private profiles.
Citrix Xenserver guest machines are now correctly licensed as virtual machines.
Fixed an invalid column in the Monthly Storage Usage report for Cloud Backup.
Implemented automatic logging and cleanup of bad data so subsequent Cloud Backup alerts would not be prevented from being sent.
Having a filter set such as Last Backup Status and Installed On while attempting to click on Manage Backups will no longer throw an invalid column name error.
Fixed an issue that prevented installing Cloud Backup on an agent after a prior install failed and could not be uninstalled.
Added the ability to view each backup group's associated storage location. This is viewable when going to Cloud Backup > Configuration > Backup Groups.
Backup
In the event of defining a network path without setting credentials, the Set Credentials link will now properly redirect the user to the Agent module in order to set credentials.
Discovery
The device rename dialog in Discover > Discovered Devices will now display text properly.
Fixed text captions for Add Dashlets and Delete Icons buttons that display when editing or creating a new dashboard on the Monitor > Dashboard List page.
Fixed an issue auto-deploying a large number of agents concurrently from the Discovery module.
Corrected an instance where renaming an organization would result in removing classic monitoring alerts such as New Agent Installed.
Fixed an issue that caused no networks to display on the grid of the Discovery > By Networks page when filtering or sorting by status.
Corrected an issue associated with new VSA installations where if an account was locked due to multiple login tries, it would not send an alert.
Prior to running a scan, the built-in version of nmap.exe will now always be updated ensuring that the scan results are reliable.
Corrected an issue where user created views appear duplicated on Saas environments.
Discovery By Network will now properly take into account of IP exclusions when running a network scan.
Fixed an issue with Discovery deployment of agents eventually consuming all available disk space in the Kaseya Installation directory, causing service outages.
Corrected a query that would fail to insert a discovered device’s MAC address despite having picked up the correct MAC address.
Corrected an issue where if the Status and Org Name was sorted, navigating away and returning to the page would cause the populated data to go blank.
Fixed an issue in Alert Monitoring where the Run Script option would fail to save if the agent selected was different from the alerting agent.
Network Discovery
Uploading an invalid .MIB file will now throw an informational error for the user.
When a policy is removed from an agent, it will now properly delete associated monitor objects from the endpoint disk.
Network Monitor
Corrected a rare issue where the current VSA session would fail to be parsed preventing a user from accessing Network Monitor.
Fixed an issue causing non-ASCII characters to display in Service Desk tickets generated by Network Monitor.
Fixed an issue causing the “Exception has been thrown by the target of an invocation. Incorrect syntax near ‘Management’” error to pop up when removing a policy from a machine.
Corrected an instance where CPU utilization monitoring will incorrectly report high CPU usage on Linux agents.
Service Desk
Corrected an issue where closing Service Desk tickets would not unlock the ticket properly.
Fixed an issue where HTML e-mail content were being stripped by the e-mail reader.
Service Desk ticket counts will now be properly calculated in search results in the notification bar.
Running Service Desk reports no longer require the master role.
Service Desk will no longer automatically send out e-mails to submitters if only user names are entered as part of the Submitter details.
Corrected an issue where incoming tickets did not comply with the coverage schedule when using the Time Measured Against Coverage option.
Policy Management
Fixed an issue with Software Management profile settings such as schedules and scans not being applied when assigned by Policy Management policies.
Inactive policy objects in the effective policy view for an agent are no longer listed this view.
Improved a method of checking policies for compliance to ensure it does not go out of compliance when using any type of scheduled process.
Added data validation to ensure that KServer IP is valid when configuring agent check in policy.
Corrected scheduling logic where the distribution window of Update List by Scan was not applying properly.
Removed the ability to add the Set Account agent menu item for Saas tenants.
Corrected an issue where Systems Management configuration settings will return despite having removed them.
Improved reliability of policy management deployment logic.
Patch schedules will now properly handle monthly recurring schedules and keep original start dates across multiple creation instances.
Creating and then suspending an alarm-based policy will no longer throw a null error.
Corrected an issue where LAN cache details are not seen under the Machine Effective Policy Settings tab.
Added a notification regarding using Force Update in Policy Management. A dialog will inform you that Force Update will ignore any blackout window and reboot options configured.
Tenant Management
Whenever a module’s activation state is changed, it will now register report parts properly.
Technology Alliance Program
Corrected an issue where TAP applications could not be removed.
Corrected an issue where TAP applications would error out whenever requesting a page.
Corrected an issue where adding a TAP application would not insert the application identifier properly.
Removed pop up errors when no TAP applications are enabled.
Added support for admins to run updates for TAP applications.
When uninstalling a TAP application, there is now a REST call that is made to the third party server to deregister the application.
TAP applications that fail will now properly reverse all created records.
Updated the TAP registration process to create an additional alert from the manifest.
Corrected an issue where inactive apps that may be in the middle of installing or is incomplete would be visible in the VSA module menu.
Added support to allow agent procedures get updated when updating a TAP application.
Added support for admins to manage permissions for agent procedures created by TAP applications.
Updated REST call where status will report whether TAP is enabled or disabled.
Added support for agent procedures imported via the TAP module to be exposed to any privileged user. This will allow users to execute these agent procedures via API.
AuthAnvil
Fixed an issue that prevented selecting multiple machines using the AuthAnvil > Remote Control Authentication page
VSA users with spaces in the username can now be whitelisted in the AuthAnvil module.
SSO logons now respect disabled accounts and allowed logon hours specified in the VSA.
Server and agent alerts will now save properly if the alert is deselected and an invalid e-mail list was previously inputted into the e-mail recipients list.
Whenever a VSA agent name is changed, that change will now be properly displayed in the AuthAnvil module.
Kaseya® BMS™
Updated SQL database maintenance to include BMS integration tickets.
Corrected an issue where deleting a ticket in BMS would not be known from the VSA end. Added a REST API to allow for synchronization of ticket status.
When setting up integration between BMS and VSA, additional validation is put in place to enforce HTTPS only.
Fixed an information leak issue -- removed web server HTTP headers to improve security by exposing fewer details about the web server and set the X-Frame-Option header to tell web browsers not to load iFrame content from any site other than the VSA server domain.
Removed the "suggest a password" button in the GUI so the suggested password is never shown in the GUI in plain text.
Changed the user password complexity rules to prohibit passwords matching user names, even if they contain a complex set of numbers, characters, and special characters.
Fixed an information leak issue -- removed ASP error logging from being exposed to the browser.
Fixed a fingerprinting issue -- removed specific server information from response headers.
Fixed an insufficient transport layer protection issue -- added Strict-Transport-Security response header across the entire domain to enforce HTTPS communication at all times.
Fixed a potential URL redirector abuse issue -- ensures that if there is an invalid page, it redirects the user to a page that exists within the VSA site and not a random URL.
Fixed a predictable resource location issue.
Fixed a insufficient transport layer protection issue -- Removed all 3DES cipher suites from the web server to improve security of the SSL/TLS web interface.
Fixed an information leak issue -- in a multi-tenant environment, authenticated users would be able to see all available assignees when creating tickets. Scopes and roles are now being validated whenever creating tickets.
Fixed an information leak issue -- in a multi-tenant environment, an unconfigured agent package would automatically check into a default partition. We now ensure that only configured packages specific to each partition are downloadable.