Privileged Remote Access

In Remote Support and Privileged Remote Access, some binaries will undergo a name change. Client name changes for Windows took place in 25.1. In 25.2, files for Mac/Linux clients as well as Jumpoints for all operating systems will be changed. In addition, directory name changes will take place, changing from Bomgar, to BeyondTrust for new installations. Existing installations will not be impacted. No action is necessary for these changes to occur, but if you are currently whitelisting directories or binaries by name with your endpoint security, you may need to update your whitelist configuration to accommodate the name changes.  Old Name New Name bomgar-scc sra-scc bomgar-pec sra-scc bomgar-rep sra-con bomgar-acc sra-con bomgar-jpt sra-jpt bomgar-sjt sra-sjt bomgar-sjp sra-sjp bomgar-rfb sra-rfb bomgar-rdp sra-rdp bomgar-rdt sra

Is there a way to make sure, that SAML sessions (used to logon to PRA) are deleted after disconnecting from PRA (Access Console / Web Console)?Thank you!

The following articles were published last week. New Knowledge Base Articles: KB0022108 - Privileged Remote Access and Remote Support 25.1 operating system certification matrix KB0022514 - Kubernetes cluster tunnel greyed out "No Protocol Tunnel Jumpoints Available" KB0022737 - Can web jumps be used for web apps that have Java popups? KB0022797 - Unable to delete Jump Items in the Representative Console or Access Console list KB0022802 - Error when adding new traffic node in existing setup "The authentication step failed"

The following articles were published last week. New Knowledge Base Articles: KB0021961 - How to create a Service Principal in an Entra ID domain services Account KB0022748 - Local users are unable to log in to the Representative Console. Error "418 Failed to decrypt" KB0022771 - PRA Registration links fail in Microsoft environments due to Safe Links rewriting

The following articles were published last week. New Knowledge Base Articles: KB0022238 - How does licensing work in Privileged Remote Access ? - License usage and how to add more licenses KB0022737 - Can web jumps be used for web apps that use Java popups? KB0022738 - Can session recordings be turned off per user?

Hi guys, i cannot find a button for “ Create Policy” , anything i can do?

Create more than one Integration with Service now ITSM tool, if a customer has different entities and has different ITSM tools like Servicenow and Fresh Desk. 

The following articles were published last week. New Knowledge Base Articles: KB0022212 - Unable to copy and paste from the Web Console" to "Unable to copy and paste from the Web Console using Web Shell to SSH KB0022714 - Which ports are required for ad-hoc sessions in Remote Support? KB0022717 - What network traffic does an active Jump Client send and can this be configured or inspected? KB0022718 - Network tunnel stuck on "Setting up server endpoint" KB0022727 - Remote Support and Privileged Remote Access Atlas certificate requirements

We're extracting the team activity reports and add this to our BI reporting to monitor usage.On the event type we see several events and I'm looking to filter the ones to connect and disconnect from a session.I think the below are the ones that I'm looking for but not sure: Conference Member Added -> connecting to a workstation Conference Member Departed -> disconnecting from a workstation Am I correct in this assumption?

Can we connect to SQL DB with a different instance example sqlserver\abc. how can I use on the SQL Server Tunnel in the PRA to connect.

we are planning to move from PRA B-200 physical to VM. the article below doesn’t explain that how many concurrent jump sessions (RDP/Shell/WEB) a VM can handle in Active-Passive configuration. ( considering not jump client installed)Virtual Appliance installation  

we have linux server in which XRDP is installed. from console I cannot RDP the linux but I can do RDP from a server (jumpoint host).what am I doing wrong here? 

The following articles were published last week. New Knowledge Base Articles: KB0022081 - Approval emails for sessions have stopped working error - SMTP error [450] Service unavailable KB0022647 - How to download the SIEM Q radar plugin for Remote Support or Privileged Remote Access integration KB0022705 - Does a live update require downtime?

Vendor user is facing issues while trying to launch a shell jump session (via Jumpoint) from Mac endpoint. User is typing the below command to invoke the web console on the shell jump session but getting display error. Target Endpoint: Rocky Linux 8.9, 64-bitsystemctl enable --now cockpit.socket~]$ DataEditorError: DataEditor: Can't Open Display They also want to know if PRA shell jump supports X window forwarding using the X11 protocol. Any suggestions to resolve this problem?

Does anyone know if we can leverage inspect /dev tools on a Web Jump on PRA? We have developers trying to inspect and open dev tools on the web page but looks like it doesn’t work?

The following articles were published last week. New Knowledge Base Articles: KB0021472 - Sync failed. Unable to bind as account@domain.com Can't contact LDAP server. Verify hostname and port. KB0021941 - TCP Tunnel, Web Jump and Remote RDP connection types show as unavailable after upgrade KB0022595 - How to register a different device for MFA in RS or PRA KB0022666 - Is Remote Support or Privilege Remote Access vulnerable to CVE-2022-22978 Spring Security? KB0022667 - Unable to make custom certificate default in RS or PRA /appliance KB0022669 - How to get crash dump logs for Remote Support and Privileged Remote Access KB0022673 - Tabs missing from /login for some users in RS and PRA KB0022677 - RS and PRA Jump Client switches and command line parameters glossary KB0022685 - Issues connecting to macOS Sequoia - Connection failed error

Hello, we have set up PRA web jump for multiple websites including some Cisco device GUIs. With Cisco DNA / Catalyst center website it is timing out. This website uses HTML tags that change for each page refresh. Based on the jump point logs , PRA successfully detects the tags for username, password and submit button but at the end it gives credential injection timed out error. We have the timeout set to max value of 30 seconds. PRA version is 23.1.2. If we select no credential the website opens fine as PRA web jump. I can log in by manually entering the password. The webpages before and after login are different\. (I see a KB that says it may timeout of URL doesnt chnage after password injection). I read in another post that the ‘inject credentials in current URL’ doesn’t work for web-jumps .Is there any workaround method using PRA. Like RDP to a server , open browser and click on inject creds button. Or anything needs to be changed in web jump backend config on jump-point which can p

Hi everyone,I have an problem when configuring Jump Approval in my PRA and I would like to know if it’s a bug or if I missed something.I've created a Jump Policy requiring users to request approval to access machines.In the approvers, I've set up a team called the “IT Team” and I've indicated that they can't approve their own requests.There are two members in “IT Team”.When one of the members tries to connect to a machine, a form asks him to enter a reason and a duration. In the Remote Access Console, the user who made the request does not see any notification and cannot self-approve. The second team member can. It works in the other way round.The problem here is that the user who made the request, who normally can't self-approve, still receives an approval link by e-mail, and this link works. The parameter is half-operational, so. Please note that these are Entra users and not local users of the solution (I'm pointing this out even though I don't think it's related).

Has anybody got any experience of upgrading PRA from 23.3.3 to 25.1.2 with regards to the jumpclient on Windows 2008R2 and 2012R2.  We have a few legacy servers which for various reasons we don’t want to switch to RDP Jumps.  I appreciate running the jumpclient on 2008R2 and 2012R2 is officially unsupported but I’d be interest if anyone has the experience of running the client on these OS’s.

Hello! is there any documentation that includes example parameters/strings that should be used while launching apps using PRA BT desktop agent. Admin guide has details of configuration options but nothing further e.g. example strings. I am able to connect to RDP using first set of  credentials , at one time was able to launch web browser but later started seeing error in chat windows that says file name/path could not be found. 

The following articles were published last week. New Knowledge Base Articles: KB0022312 - How to set up a CNAME with Remote Support and Privileged Remote Access in Pathfinder KB0022641 - How to configure shared IP failover KB0022643 - Jump client add button missing for adminstrators KB0022650 - How to add additional traffic nodes to an existing Atlas cluster KB0022660 - Is it possible to change the resolution of RDP Jumps within the Web Access Console?

Hello,I have a customer who is having a question about the Vendors section of the PRA.In the customer's environment, there is only one group of Vendors, and they are complaining that they can only perform Web Jumps in 3 sessions simultaneously. Is this the limit or is there a way that can be configured so that they can perform more jumps?