ISL Conference Proxy 4.4.2335.35 for Windows and Linux (2023-10-19)


On 19th of October the following was released:

  • ISL Conference Proxy 4.4.2335.35 for for Windows 64bit (Platform=win64, Revision=2548a2383d483b304d5986283558d463b6767deb, release_date=2023-10-17, req_os_version=0x06011db1-0x7fffffff)
  • ISL Conference Proxy 4.4.2335.35 for for Linux 64bit (Platform=linux64, Revision=2548a2383d483b304d5986283558d463b6767deb, release_date=2023-10-17, req_os_version=0x0206200000-0xffffffffff)

 Important: ISL Conference Proxy module interface version was raised from 441 to 442. New modules will not load anymore on ISL Conference Proxy 4.4.2240.136 or older!

 Important: SAML settings were redesigned and users are required to adjust them to prevent errors. Please see "Platform specific behaviour" in release notes of ISLCONFPROXY-3126 and adjust settings depending on your platform.


  • Administration 4.4.2335.35 (revision=2548a2383d483b304d5986283558d463b6767deb, release_date=2023-10-17)
  • Audit 4.4.2335.35 (revision=2548a2383d483b304d5986283558d463b6767deb, release_date=2023-10-17)
  • Authentication 4.4.2335.35 (revision=2548a2383d483b304d5986283558d463b6767deb, release_date=2023-10-17)
  • Backup 4.4.2335.35 (revision=2548a2383d483b304d5986283558d463b6767deb, release_date=2023-10-17)
  • Core Login 4.4.2335.35 (revision=2548a2383d483b304d5986283558d463b6767deb, release_date=2023-10-17)
  • DNS 4.4.2335.35 (revision=2548a2383d483b304d5986283558d463b6767deb, release_date=2023-10-17)
  • GeoIP 4.4.2335.35 (revision=2548a2383d483b304d5986283558d463b6767deb, release_date=2023-10-17)
  • Integrator 4.4.2335.35 (revision=2548a2383d483b304d5986283558d463b6767deb, release_date=2023-10-17)
  • ISL AlwaysOn 4.4.2335.35 (revision=2548a2383d483b304d5986283558d463b6767deb, release_date=2023-10-17)
  • ISL Groop 4.4.2335.35 (revision=2548a2383d483b304d5986283558d463b6767deb, release_date=2023-10-17)
  • ISL Light 4.4.2335.35 (revision=2548a2383d483b304d5986283558d463b6767deb, release_date=2023-10-17)
  • ISL Pronto 4.4.2335.35 (revision=2548a2383d483b304d5986283558d463b6767deb, release_date=2023-10-17)
  • Locale 4.4.2335.35 (revision=2548a2383d483b304d5986283558d463b6767deb, release_date=2023-10-17)
  • NTP 4.4.2335.35 (revision=2548a2383d483b304d5986283558d463b6767deb, release_date=2023-10-17)
  • PostgreSQL 4.4.2335.35 (revision=2548a2383d483b304d5986283558d463b6767deb, release_date=2023-10-17)
  • Reports 4.4.2335.35 (revision=2548a2383d483b304d5986283558d463b6767deb, release_date=2023-10-17)
  • SSL 4.4.2335.35 (revision=2548a2383d483b304d5986283558d463b6767deb, release_date=2023-10-17)
  • Storage 4.4.2335.35 (revision=2548a2383d483b304d5986283558d463b6767deb, release_date=2023-10-17)
  • System Monitor 4.4.2335.35 (revision=2548a2383d483b304d5986283558d463b6767deb, release_date=2023-10-17)


  • administration_20231017_20231017_110525.translation
  • backup_20231017_20231017_110525.translation
  • core_login_20231017_20231017_110525.translation
  • integrator_20231017_20231017_110525.translation
  • isl_alwayson_20231017_20231017_110525.translation
  • isl_conference_proxy_20231017_20231017_110525.translation
  • isl_groop_20231017_20231017_110525.translation
  • isl_light_20231017_20231017_110525.translation
  • isl_pronto_20231017_20231017_110525.translation
  • reports_20231017_20231017_110525.translation
  • ssl_20231017_20231017_110525.translation

Translations (newer translations, released on 2023-11-09)

  • administration_20231108_20231108_111545.translation
  • backup_20231108_20231108_111545.translation
  • core_login_20231108_20231108_111545.translation
  • integrator_20231108_20231108_111545.translation
  • isl_alwayson_20231108_20231108_111545.translation
  • isl_conference_proxy_20231108_20231108_111545.translation
  • isl_groop_20231108_20231108_111545.translation
  • isl_light_20231108_20231108_111545.translation
  • isl_pronto_20231108_20231108_111545.translation
  • reports_20231108_20231108_111545.translation
  • ssl_20231108_20231108_111545.translation

Update availability

All updates have release date set to 2023-10-17. Your ESS will need to be  same or higher to be able to update your server. This release is available to all countries except Japan.

Upgrading to new version

This are server side updates so hosted service users do not need to do anything.

Server license users please check Upgrading Server License


ISL Conference Proxy - Core - Upgrade OpenSSL to 1.1.1w (SECURITY) [ISLCONFPROXY-3134] More


OpenSSL was updated to 1.1.1w.

ISL Conference Proxy - Core - Add extra_check_user when calling session/query/2 webapi for ISL Light sessions (FEATURE) [ISLCONFPROXY-1818] More


Join page will now add extra_check_user when calling session/query/2 for ISL Light module. This results in additional cmd line parameter in link for line for ISL Light Client: "--check-user true" resulting user has to manually click "Join" to establish a session (session does not start automatically anymore).

ISL Light - Module - Parse simple metrics data from client program (FEATURE) [ISLCONFPROXY-2721] More


Performance messages from client will now be parsed and logged in log subsystem "[ISL Light] Performance messages from client".

ISL Conference Proxy - Core - Feedback when admin account attempts to login to user pages (FEATURE) [ISLCONFPROXY-2915] More


In previous versions, when user with admin rights tried to login as regular user, he was shown general "Incorrect username or password" error message. This was redesigned and admin user will now be shown more specific error message: "This user is only able to access ISL Conference Proxy administration, because it's enabled as an Administrator account."

ISL Pronto - Module - Decrease log severity of 404 on events handler (FEATURE) [ISLCONFPROXY-2922] More


Log severity was reduced from "critical" to "notice" when responding with 404 from the events handler.

ISL Conference Proxy - Core - Limit number of started ISL AlwaysOn actions (FEATURE) [ISLCONFPROXY-2957] More


Starting ISL AlwaysOn actions is now limited to 20 actions in 10s by default.

ISL Conference Proxy - Core - Add dictionary support to ISL Network Start (FEATURE) [ISLCONFPROXY-3031] More


Support for dictionaries was added to ISL Network Start program. Dictionaries are then used to effectively compress query parameter.

ISL Conference Proxy - Core - Add support for extra file in launch and launchpkt (FEATURE) [ISLCONFPROXY-3033] More


Support for extra file was added to launch. Extra file can be used to reduce size of unauthenticated blob. When extra file is used, UA blob only contains command to jump to extra file (has same name as main file but ends with ".extra"). Hashing algorithm in packet generator was upgraded from MD5 to SHA256.

ISL Conference Proxy - Core - TLS 1.2 v2 profile without CBC and with forward secrecy (FEATURE) [ISLCONFPROXY-3037] More


"TLS 1.2 v2" was added to settings "Security > Default SSL profile" with the cipher suite: - 0x1302 0x1301 0x1303 0xc02c 0xc02b 0xcca9 0xc030 0xc02f 0xcca8

v2 removes the following ciphers from "TLS 1.2" cipher suite:


Note: It is suggested to use ECDSA key instead of RSA when "TLS 1.2 v2" is selected to stay compatible with IE 11 on Windows 7 and Windows 8.

ISL Conference Proxy - Core - Reduce webtoken size for start new session link (FEATURE) [ISLCONFPROXY-3052] More


Webtokens no longer contain/use "detected_time_zone" field. It was replaced with "time_zone_enum" field that instead of full timezone string stores enum of this timezone. Webtokens used in ISL Light start new session and ISL Groop join session link no longer contain "post_token" field. Together with removal of "detected_time_zone" and "time_zone_enum" this reduces size of webtokens.

ISL Conference Proxy - Core - Compress modules with LZMA2 (FEATURE) [ISLCONFPROXY-3055] More


ICP modules are now compressed with LZMA2. Module interface was raised to 442, new modules can only be loaded on new ISL Conference Proxy.

ISL Conference Proxy - Core - Implement ICE registry, APIs and Cloudflare TURN support (FEATURE) [ISLCONFPROXY-3086] More


ISL Conference Proxy now supports STURN/TURN local registry and API functions. This functionality is used by ISL Light module to return STUN/TURN server addresses via RPC calls. New settings are available in /conf -> Configuration -> ICE Configuration.


Set "List of ICE servers for RPC" to define the list of ICE (Interactive Connectivity Establishment) servers used by ISL Light RPC to establish direct connections. You can list explicit TURN servers, define the registered TURN servers by using {{turn_servers}} and/or define Cloudflare's RTC servers by using {{cloudflare}}. Each item in list is url with protocol stun or turn and following valid attributes:

  • username&password: uses simple authentication specified by username and password
  • secret: third party authentication as defined in rfc7635
  • turn_servers
  • cloudflare


If item specified is "{{turn_servers}}", the list is appended with known turn servers from registry. The servers in registry will return authentication parameters from rfc7635. If "{{cloudflare}}" is used, than Cloudflare settings must also be valid.

For example:

stun://, turn://, turn_servers, cloudflare

It is suggested to use only two stun/turn items. More items listed in this setting can increase connection times.

[INTERNAL] ISL Conference Proxy - Core - Add support for .ase and .less allowed staticresource file extensions in sdk (FEATURE) [ISLCONFPROXY-3091] More


Support for .ase and .less file extensions was added to allowed staticresource file extensions.

ISL Light - Module - Implement ICE RPC handler (FEATURE) [ISLCONFPROXY-3092] More


RPC call was added to ISL Light module that returns the list of ICE servers supported by ISL Conference Proxy. Additional RPC call returns the settings used to to calculate the quality of ICE connection when deciding on which connection to use in ISL Light session.

ISL Conference Proxy - Core, Core Login - Per-domain SSO/SAML settings and IdP metadata URL support (FEATURE) [ISLCONFPROXY-3096] More


Per-domain SSO/SAML settings are now supported, thus enabling SAML to be configured just for some domains and not the entire server/GRID. New settings:

  • "Open URL after logout" (previously server, now per-user)
  • "Single sign-on user to domain cache max" (new server-wide, short term cache with a default 1000 entries)
  • "Enable single sign-on SAML" (previously server, now per-domain)
  • "SAML configuration cache max" (new server-wide, cache with default 10000 entries, affects medium term cache for SP/IdP metadata and long term cache for SP/IdP certificate checker)
  • "SAML service provider PEM cert file" (previously server, now per-domain)
  • "SAML service provider PEM key file" (previously server, now per-domain)
  • "SAML service provider PEM key file passphrase" (previously server, now per-domain)
  • "SAML identity provider XML metadata URL" (new per-domain, automatically download IdP metadata when needed by login, higher priority than setting "SAML identity provider XML metadata file")
  • "SAML identity provider XML metadata URL expire in seconds" (new per-domain, medium term cache expiry with default 300, long term cache for certificate checker is hard-coded to 7*86400)
  • "SAML identity provider XML metadata file" (previously server, now per-domain)
  • "SAML sign authentication request method" (previously server, now per-domain)
  • "SAML authenticate on every login" (previously server, now per-domain)
  • "SAML identity provider initiated login" (previously server, now per-domain)
  • "SAML login settings rules ([[rule...], ...])" (previously server, now per-domain)


Domain specific service provider metadata XML is located on:

https://subdomain.server/sso/saml/sp/domain/DOMAINNAME/metadata.xml (in case Subdomain is configured in web administration and Default user domain is set)

DOMAINNAME is escaped using URL path escape, just using "~" instead of "%" as escape character (dom/x is escaped as dom~2Fx).

Domain specific "SAML login settings rules ([[rule...], ...])" should not include the rule ["key", "domain", "sso"], because the domain is already implied.


User and password dialog will detect that SAML should be used for a specific user and single sign-on web based login will be started (password may be left empty):

\\somedomain\validuser (if somedomain is configured for SAML, web SSO will be started; if user is logged in already with a different account, the existing login session will be logged out)
\\somedomain\. (if somedomain is configured for SAML, web SSO will be started) (alternative form for \\somedomain\validuser if email is set correctly in the account, but it will only work if account already exists on ISL Conference Proxy)

ISL AlwaysOn - Module - Extend session/query/2 to handle Android query for ISL AlwaysOn (FEATURE) [ISLCONFPROXY-3106] More


Webapi2 session/query/2 was extended to check if user agent is Android. In this case "startProgramURL" in response is an Android intent containing grant blob.

ISL Light - Module - Extend Light RPC get_session_info with visible name (FEATURE) [ISLCONFPROXY-3107] More


Light RPC call "get_session_info" was extended with an additional parameter, controlling whether or not visible name of session creator should be returned.

ISL Conference Proxy - Core - Delete flags for ICP 4.4.2044 branch (FEATURE) [ISLCONFPROXY-3117] More


All flags from 4.4.2044 branch were deleted. These flags are now considered as enabled and can not be disabled by user anymore. Deleted flags:

  • 2020-05-28 ISLCONFPROXY-2232 reduce dt function cost
  • 2020-05-28 ISLCONFPROXY-2232 remove multicolumn indexes
  • 2020-09-01 ISLCONFPROXY-2295 Fix Join page download bubble in firefox and close span tags inside translate
  • 2020-08-18 ISLCONFPROXY-2292 use IE9 supported regex constructor
  • 2020-08-10 ISLCONFPROXY-2280 disable sanitizeHTML for objects
  • 2020-06-17 ISLCONFPROXY-2253 extract template data from url on /users/start/ios
  • 2017-04-20 ISLCONFPROXY-1418 remove /start/ios
  • 2017-04-20 ISLCONFPROXY-1418 serve /users/start/ios
  • 2020-08-20 ISLCONFPROXY-2306 prevent multiple clicks on create meeting button
  • 2020-06-23 ISLCONFPROXY-2259 enable tr recoding for light not licensed
  • 2020-09-02 ISLCONFPROXY-2309 mac osv 11.x
  • 2020-09-02 ISLCONFPROXY-2310 skip invalid wol_group
  • 2020-09-10 ISLCONFPROXY-2240 register islcp_core app
  • 2020-05-26 ISLCONFPROXY-2229 register jwt webhook settings
  • 2020-05-26 ISLCONFPROXY-2229 use jwt webhook
  • 2020-06-16 ISLCONFPROXY-2247 call user create delete api
  • 2020-06-16 ISLCONFPROXY-2247 register user create delete api
  • 2020-09-02 ISLCONFPROXY-2308 email apos
  • 2020-08-11 ISLCONFPROXY-2290 deprecate tv1 in core admin
  • 2020-06-01 ISLCONFPROXY-2267 check all events
  • 2020-06-05 ISLCONFPROXY-2267 queue action updates
  • 2020-07-02 ISLCONFPROXY-2265 use hsrv and preview when querying actions
  • 2020-06-24 ISLCONFPROXY-2262 normalize newlines in translate handler
  • 2019-08-29 ISLCONFPROXY-2013 htmldl rejected decode
  • 2020-09-24 ISLCONFPROXY-2325 grid_sync order by
  • 2020-09-24 ISLCONFPROXY-2325 sync category delete trigger order
  • 2020-09-24 ISLCONFPROXY-2325 sync category dt write reorder
  • 2020-09-16 ISLCONFPROXY-2317 register internal/utils/send/http/object/changed/1
  • 2020-09-16 ISLCONFPROXY-2317 trigger http events from core admin
  • 2020-06-05 ISLCONFPROXY-2242 expose recording files conf pages
  • 2018-02-27 ISLCONFPROXY-1647 dt replicator stats interval setting
  • 2018-11-30 ISLCONFPROXY-1825 increase webapi client timeout to 30 in core_admin
  • 2019-01-21 ISLCONFPROXY-1856 disable password set for external users
  • 2019-01-21 ISLCONFPROXY-1856 register and use admin/domain/user/is/external/1 to mark external users
  • 2019-01-16 ISLCONFPROXY-1708 register webapi2 method admin/domain/user/create/1
  • 2019-01-16 ISLCONFPROXY-1709 register webapi2 method admin/domain/user/update/1
  • 2020-09-30 ISLCONFPROXY-2331 use regex_valid_email in administration module
  • 2020-09-29 ISLCONFPROXY-2322 send lang and use translated description with jwt integration
  • 2020-10-19 ISLCONFPROXY-2337 release setting batch 5 to core admin
  • 2020-08-31 ISLCONFPROXY-2305 mail template output txt
  • 2020-08-31 ISLCONFPROXY-2305 mail template output txt (aon)
  • 2020-08-31 ISLCONFPROXY-2305 mail template output txt (groop)
  • 2020-08-31 ISLCONFPROXY-2305 mail template output txt (light)
  • 2020-08-31 ISLCONFPROXY-2305 webchat / mail template output txt (pronto)
  • 2020-09-11 ISLCONFPROXY-2313 do not show disabled program download
  • 2020-10-01 ISLCONFPROXY-2333 use owner customization in ISL Groop download link
  • 2019-07-17 ISLCONFPROXY-1988 http event LICENSE_LIMIT_HIT
  • 2020-06-18 ISLCONFPROXY-2255 add single actions and delete option to registered users
  • 2020-06-18 ISLCONFPROXY-2255 register webapi2 method islgroop/sessions/users/registered/delete/list/1
  • 2020-04-02 ISLCONFPROXY-2172 neutral proc color
  • 2020-04-02 ISLCONFPROXY-2172 no scaling for storage
  • 2020-09-03 ISLCONFPROXY-2311 LIB-1134 xml attr apos
  • 2020-09-03 ISLCONFPROXY-2311 html5 attrs
  • 2020-09-03 ISLCONFPROXY-2311 html5 attrs (groop)
  • 2020-10-12 ISLCONFPROXY-2339 handle broken group owner on computer migrate
  • 2020-10-23 ISLCONFPROXY-2346 check platform when doing push upgrade from conf
  • 2020-09-15 ISLCONFPROXY-2316 set notify owner when creating meeting
  • 2020-09-11 ISLCONFPROXY-2314 register webapi2 method islgroop/sessions/get/single/2
  • 2020-09-11 ISLCONFPROXY-2314 show survey to registered users without login
  • 2020-09-14 ISLCONFPROXY-2314 register webapi2 method islgroop/sessions/users/extinfo/get/single/2
  • 2020-09-14 ISLCONFPROXY-2314 register webapi2 method islgroop/sessions/users/extinfo/update/single/2
  • 2020-09-14 ISLCONFPROXY-2315 do not use user name in survey link
  • 2020-07-01 ISLCONFPROXY-2261 register webapi2 method islgroop/sessions/users/registered/get/single/1
  • 2020-07-09 ISLCONFPROXY-2261 register webapi2 method islgroop/sessions/users/registered/update/list/2
  • 2020-07-01 ISLCONFPROXY-2261 add option to edit registered users
  • 2020-09-23 ISLCONFPROXY-2321 check mandatory fields for registered user
  • 2020-06-23 ISLCONFPROXY-2260 simplify configuration inconsistency error message and add log line
  • 2020-04-02 ISLCONFPROXY-2169 dt grid meta data fast lock
  • 2020-04-02 ISLCONFPROXY-2169 remove locks from grid db handler
  • 2020-08-14 ISLCONFPROXY-2236 fix isl light session info set handler
  • 2020-11-11 ISLCONFPROXY-2361 query users by username and realname and email
  • 2020-11-12 ISLCONFPROXY-2363 use full_match for email and password regexp
  • 2020-11-05 ISLCONFPROXY-2355 dt sync write timing
  • 2020-11-06 ISLCONFPROXY-2355 report DT notify storage offload errors
  • 2020-11-09 ISLCONFPROXY-2357 dt sync replication timing
  • 2020-11-12 ISLCONFPROXY-2362 separate GRID DT sync queue
  • 2020-11-13 ISLCONFPROXY-2367 move disconnect_rpc to separate executor
  • 2020-11-10 ISLCONFPROXY-2359 add error message and commit timestamp to Audit log
  • 2020-11-10 ISLCONFPROXY-2359 register webapi2 internal/audit/event/commit/1
  • 2020-11-10 ISLCONFPROXY-2359 use transaction like Audit logs
  • 2020-11-17 ISLCONFPROXY-2351 use audit transaction events
  • 2020-11-19 ISLCONFPROXY-2378 reload audit logs when tab is opened
  • 2020-11-24 ISLCONFPROXY-2381 use onmouseenter and onmouseleave for conf tooltip
  • 2020-03-13 ISLCONFPROXY-579 handle webtoken logoff grid
  • 2020-03-13 ISLCONFPROXY-579 init webtoken logoff
  • 2020-03-02 ISLCONFPROXY-2147 check creation time in webtoken
  • 2020-03-02 ISLCONFPROXY-2147 creation time in webtoken setting
  • 2020-03-02 ISLCONFPROXY-2147 dump token age in webapi
  • 2020-03-02 ISLCONFPROXY-2147 store creation time to webtoken
  • 2020-11-10 ISLPRONTO-1223 execute leave chat from client grid object
  • 2020-10-23 ISLPRONTO-1223 check if client exists on other server before leaving chat
  • 2020-10-30 ISLCONFPROXY-2353 use http client without Keep-Alive
  • 2020-10-23 ISLCONFPROXY-2347 order by for max age
  • 2020-10-23 ISLCONFPROXY-2347 deleted index for max age
  • 2020-10-23 ISLCONFPROXY-2347 lt notnull query for max age
  • 2020-10-23 ISLCONFPROXY-2347 lt/le notnull support
  • 2020-11-16 ISLCONFPROXY-2369 set jwt integration error description as error in wa2 response
  • 2020-11-10 ISLCONFPROXY-2360 save changes on enter in dialog
  • 2020-11-27 ISLCONFPROXY-2386 mac osv 27.x
  • 2020-12-02 ISLCONFPROXY-2390 add translation tags on registered user actions
  • 2020-12-08 ISLCONFPROXY-2399 save and reload selected audit log columns
  • 2020-12-11 ISLCONFPROXY-2405 ISL Light RPC packet timing
  • 2020-12-11 ISLCONFPROXY-2405 reduce ISL Light RPC reque
  • 2020-09-24 ISLCONFPROXY-2326 right align dropdowns
  • 2020-11-13 ISLCONFPROXY-2366 close file access before opening new
  • 2020-12-03 ISLCONFPROXY-2394 LIB-1145 secure http header encoder
  • 2020-12-03 ISLCONFPROXY-2394 pass dbhefa http encoder error to web transport
  • 2020-12-03 ISLCONFPROXY-2394 report http encoder internal error
  • 2020-12-02 ISLCONFPROXY-2391 do not reschedule same backup
  • 2020-11-16 ISLCONFPROXY-2371 implement manual reconnect
  • 2020-11-16 ISLCONFPROXY-2371 use grid sender
  • 2020-03-13 ISLCONFPROXY-579 check user logoff
  • 2020-09-25 ISLCONFPROXY-2327 invalidate webtoken on change password or email
  • 2020-09-29 ISLCONFPROXY-2327 redirect to login page when reset password login fails
  • 2020-10-14 ISLCONFPROXY-2343 invalidate webtoken on web logout
  • 2020-11-12 ISLCONFPROXY-2364 clear invalid CPSESSID on web request
  • 2020-11-18 ISLCONFPROXY-2376 register utils/logout/2 webapi
  • 2020-12-14 ISLCONFPROXY-2408 allow empty user extra data when registering for meeting
  • 2020-11-16 ISLCONFPROXY-2368 register webapi2 method domain/admin/computergroup/changeowner/1
  • 2020-11-16 ISLCONFPROXY-2368 register webapi2 method domain/admin/computergroup/list/1
  • 2020-11-16 ISLCONFPROXY-2368 use internal error on missing audit module
  • 2020-12-17 ISLCONFPROXY-2414 LIB-1149 linux glibc in os_version
  • 2020-12-22 ISLCONFPROXY-2414 LIB-1149 support linux glibc in os_version
  • 2020-12-23 ISLCONFPROXY-2415 fix ios version display
  • 2020-12-23 ISLCONFPROXY-2415 handle android min tgt
  • 2020-12-08 ISLCONFPROXY-2400 send registered email by join UID
  • 2020-12-10 ISLCONFPROXY-2403 use Filter Builder library for audit logs
  • 2020-12-14 ISLCONFPROXY-2403 add timerange to Filter Builder
  • 2020-12-16 ISLCONFPROXY-2411 register webapi2 domain/admin/audit/event/list/2
  • 2020-12-22 ISLCONFPROXY-2413 show audit log transactions with error
  • 2020-01-16 ISLCONFPROXY-2106 http host for cookie_domain
  • 2020-11-16 ISLCONFPROXY-2370 enable computer group management view
  • 2020-11-26 ISLCONFPROXY-2370 add client filter support to list table
  • 2020-03-20 ISLCONFPROXY-2156 register webapi2 system/groups/optimize/1
  • 2020-03-24 ISLCONFPROXY-2162 expose groups optimize
  • 2020-12-14 ISLCONFPROXY-2406 filter out normal chars from special chars
  • 2020-12-14 ISLCONFPROXY-2406 invert passwords blacklist permission
  • 2020-12-14 ISLCONFPROXY-2406 numeric bounds for password requirement settings
  • 2020-12-16 ISLCONFPROXY-2407 add supporter for numeric bound flags
  • 2020-09-05 ISLCONFPROXY-2149 reduce number of DB queries in utils/group/query/1
  • 2020-03-06 ISLCONFPROXY-2150 add Limit groups to domain setting
  • 2020-03-06 ISLCONFPROXY-2150 limit utils/group/query webapi2 to domain
  • 2020-03-09 ISLCONFPROXY-2151 add Maximum number of groups in domain setting
  • 2020-03-09 ISLCONFPROXY-2151 add support to limit number of created groups
  • 2020-08-07 ISLCONFPROXY-2288 login settings external groups
  • 2020-08-12 ISLCONFPROXY-2288 allow info handle user groups (aon)
  • 2020-08-12 ISLCONFPROXY-2288 groups type and domain index
  • 2020-08-14 ISLCONFPROXY-2288 handle user groups
  • 2020-08-14 ISLCONFPROXY-2288 return group type in webapi
  • 2020-08-17 ISLCONFPROXY-2288 groups external_id column
  • 2020-08-20 ISLCONFPROXY-2298 restrict type utils/groups/query/1-2
  • 2020-09-15 ISLCONFPROXY-2323 dont write owner
  • 2020-09-15 ISLCONFPROXY-2323 implement group acl in privileges
  • 2020-09-15 ISLCONFPROXY-2323 keep group acls in deprecated api
  • 2020-09-15 ISLCONFPROXY-2323 limit resolve to user_groups
  • 2020-09-15 ISLCONFPROXY-2323 refactor resolve user in group
  • 2020-09-15 ISLCONFPROXY-2323 refactor resolve user in privileges
  • 2020-09-15 ISLCONFPROXY-2323 register utils/group/info/2
  • 2020-09-15 ISLCONFPROXY-2323 register utils/group/query/3
  • 2020-09-15 ISLCONFPROXY-2323 register utils/group/security/3
  • 2020-09-15 ISLCONFPROXY-2323 register utils/group/update/2
  • 2020-09-15 ISLCONFPROXY-2323 register utils/groups/create/2
  • 2020-09-15 ISLCONFPROXY-2323 return all groups in webapi query
  • 2020-09-15 ISLCONFPROXY-2323 switch privileges api
  • 2021-01-28 ISLCONFPROXY-2448 allow existing member
  • 2021-01-28 ISLCONFPROXY-2448 allow existing privileges
  • 2021-01-28 ISLCONFPROXY-2450 fix hag warning for owner
  • 2019-01-16 ISLCONFPROXY-1711 register webapi2 method admin/domain/group/list/1
  • 2019-01-16 ISLCONFPROXY-1712 register webapi2 method admin/domain/group/create/1
  • 2021-02-03 ISLCONFPROXY-2452 respond with new public code when creating new user group
  • 2019-01-16 ISLCONFPROXY-1713 register webapi2 method admin/domain/group/update/1
  • 2019-01-16 ISLCONFPROXY-1714 register webapi2 method admin/domain/group/remove/1
  • 2019-01-16 ISLCONFPROXY-1715 register webapi2 method admin/domain/user/list/group/membership/1
  • 2019-01-16 ISLCONFPROXY-1762 enable group management view
  • 2021-02-01 ISLCONFPROXY-2437 update user group management views
  • 2021-01-28 ISLCONFPROXY-2439 release user_domain_admin_edit_groups setting to administration
  • 2020-11-02 ISLCONFPROXY-2354 read audit data from ISL Light programs
  • 2020-12-02 ISLCONFPROXY-2380 isllight File Manager gui features
  • 2021-02-01 ISLCONFPROXY-2449 change external_group into user_group with external flag
  • 2021-02-02 ISLCONFPROXY-2451 read and use external column in group dt
  • 2020-10-02 ISLCONFPROXY-2335 add user groups to share
  • 2020-10-06 ISLCONFPROXY-2335 return allowed group type
  • 2020-11-26 ISLCONFPROXY-2358 unify computer and computer group share dialogs
  • 2020-10-05 ISLCONFPROXY-2332 register integrator_jwt_api_access_public_rsa_keys
  • 2020-10-05 ISLCONFPROXY-2332 register webapi2 integrator/user/create/1
  • 2020-10-12 ISLCONFPROXY-2332 register webapi2 integrator/domain/create/1
  • 2020-10-12 ISLCONFPROXY-2332 register webapi2 integrator/domain/set/concurrent/limit/1
  • 2020-10-26 ISLCONFPROXY-2348 register integrator lb service
  • 2020-10-26 ISLCONFPROXY-2348 register integrator/lic/user/custom/get/1
  • 2021-02-10 ISLCONFPROXY-2426 adjust severity for user errors in computer groups webapis
  • 2021-02-11 ISLCONFPROXY-2465 allow vertical overflow in modals
  • 2021-01-21 ISLCONFPROXY-2430 add new computer group owner search
  • 2021-01-28 ISLCONFPROXY-2445 support lowercase order by
  • 2021-02-12 ISLCONFPROXY-2467 use correct no results template
  • 2021-03-02 ISLCONFPROXY-2443 order groups by name lowercase
  • 2021-02-05 ISLCONFPROXY-2455 distinguish templates for filters
  • 2021-02-01 ISLCONFPROXY-2446 register webapi2 method domain/admin/computergroup/list/2
  • 2021-02-02 ISLCONFPROXY-2446 show invalid group members error
  • 2020-10-21 ISLCONFPROXY-2336 register internal/utils/password/forgot/custom/1
  • 2020-10-26 ISLCONFPROXY-2336 register integrator/utils/password/forgot/custom/1
  • 2021-01-26 ISLCONFPROXY-2441 expose started from module to http events
  • 2018-12-04 ISLCONFPROXY-1827 device name
  • 2019-08-05 ISLALWAYSON-1482 add support for non saving options
  • 2019-09-18 ISLCONFPROXY-2029 remove / from static_core_path_min_430
  • 2020-11-27 ISLCONFPROXY-2385 use decode_email func with support for display name for from addresses
  • 2021-02-22 ISLCONFPROXY-2473 allow sharing by default
  • 2021-02-22 ISLCONFPROXY-2473 dont use spolicy
  • 2020-12-07 ISLCONFPROXY-2398 strict error checking in relaxng mail check
  • 2017-02-16 ISLCONFPROXY-1279 prevent webapi2 call registration
  • 2018-11-13 ISLCONFPROXY-1814 domain redirect
  • 2018-11-13 ISLCONFPROXY-1814 domain redirect setting
  • 2021-02-24 ISLCONFPROXY-2474 allow all domain user groups
  • 2021-02-24 ISLCONFPROXY-2474 register user_list_user_groups_domain permission
  • 2021-02-12 ISLCONFPROXY-2471 backup restore SetDir instead of tar -C
  • 2021-02-12 ISLCONFPROXY-2471 confproxy_proc innosetup main dir
  • 2021-02-10 ISLCONFPROXY-2462 wrap long text in computer popup
  • 2021-02-09 ISLCONFPROXY-2461 ignore empty packets
  • 2021-01-05 ISLCONFPROXY-2420 set errors in internal/utils/password/forgot/custom/1
  • 2021-01-05 ISLCONFPROXY-2420 pass lang to internal/utils/password/forgot/custom/1
  • 2019-08-26 ISLCONFPROXY-2009 replace escape
  • 2019-08-26 ISLGROOP-1128 replace escape
  • 2019-08-26 ISLALWAYSON-1623 replace escape
  • 2020-12-01 ISLCONFPROXY-2388 devflags xsum GRID feature
  • 2019-08-26 ISLCONFPROXY-2028 replace escape (reports)
  • 2019-08-26 ISLPRONTO-1300 replace escape
  • 2020-12-02 ISLCONFPROXY-2389 config.json remove std www
  • 2020-12-14 ISLCONFPROXY-2409 remove www root meta files
  • 2020-12-03 ISLCONFPROXY-2099 force_geoip in map_path_to_http_backend
  • 2019-05-10 ISLCONFPROXY-1929 register internal/utils/public/url/get/1
  • 2019-06-05 ISLCONFPROXY-1964 LIB-1028 http request myself ipv6
  • 2021-03-09 ISLCONFPROXY-2487 allow domain user groups
  • 2021-03-09 ISLCONFPROXY-2487 check group type in resolve
  • 2021-03-09 ISLCONFPROXY-2487 ignore grant action errors
  • 2021-01-28 ISLCONFPROXY-2432 email rng xslt v2
  • 2021-03-17 ISLCONFPROXY-2494 prevent keep_allow_on_computer_groups
  • 2020-07-09 ISLCONFPROXY-2271 add BOM and remove escaping from exported CSV
  • 2020-12-02 ISLCONFPROXY-2392 LIB-1144 use EnumPageFiles
  • 2020-08-10 ISLCONFPROXY-2289 translate fields without supplied translation
  • 2019-08-26 ISLLIGHT-5375 replace and html escape
  • 2021-03-19 ISLCONFPROXY-2497 pg notify table

ISL Conference Proxy - Core - Upgrade to Go 1.20.8 and latest Go packages (FEATURE) [ISLCONFPROXY-3121] More


Go was upgraded to version 1.20.8. Go packages were updated to latest versions.

ISL Conference Proxy - Core Login - SAML new settings (FEATURE) [ISLCONFPROXY-3126] More


New SAML settings are supported:

  • SAML request binding method: Automatic (HTTP-POST, HTTP-Redirect) - default; HTTP-POST; HTTP-Redirect
  • SAML response binding method: HTTP-POST - default; HTTP-Artifact
  • SAML logout from identity provider: Automatic (Yes if available) - default; Yes; No
  • SAML logout NameID attribute: $SubjectNameID - default


Changes in default behaviour:

  • when redirecting from ISL Conference Proxy login page to identity provider, the redirect will be done with HTTP POST instead of 303 redirect to avoid passing sensitive information through browser location bar
    • the behaviour can be adjusted with "SAML request binding method"
  • if identity provider supports single logout, it will be used instead of potentially configured "Open URL after logout"
    • the behaviour can be adjusted with "SAML logout from identity provider"
    • unlike Yes, Automatic mode will only log critical errors and not outright stop the login/logout process in case of errors to ease the upgrade process
  • ["key", "user_profile::password", "0"] is not strictly necessary anymore in "External authenticator login settings rules" because "Change Password" button will be now blocked even without this setting
  • default username key in "External authenticator login settings rules" is set to $SubjectNameID
    • if identity provider sets Subject NameID correctly, the setting "External authenticator login settings rules" can be left completely empty in the per-domain SAML setup for a basic test


Platform specific behaviour:

  • Microsoft ADFS:
    • set "SAML logout NameID attribute" to the same value as username key:
    • set "SAML sign authentication request method" to RSA-SHA256
    • response binding method HTTP-Artifact is not supported yet
  • Azure AD:
    • remove "Open URL after logout"

ISL Light - Module - Add ice allowed to spolicy (FEATURE) [ISLCONFPROXY-3127] More


When returning ICE settings to client, ISL Light will now also read software policy. Policy name is "light::ice::allowed".

ISL Conference Proxy - Administration - Use descriptive errors on lack of permissions (FEATURE) [ISLCONFPROXY-3131] More


More descriptive error messages are now used on lack of permissions on several places:

  • login page and login webapi2 calls
  • Administration web page

[INTERNAL] ISL Conference Proxy - Core - Dev flag to set certificate checker recheck interval, flush recheck files (FEATURE) [ISLCONFPROXY-3136] More


New features:

  • dev flag "License and certificate expiry check interval (seconds)", default 3700 (expiry warning emails will be resent quicker when preconditions change, but not more often)
  • recheck files are displayed in Certificates panel
  • Debug > "Flush certificate expiry info" to delete recheck files (expiry warning emails will be resent after delete if necessary)

ISL Conference Proxy - Core - LibXML 2.11.5 (FEATURE) [ISLCONFPROXY-3138] More


LibXML was updated to version 2.11.5.

ISL Conference Proxy - Module GeoIP - Update database to GeoLite2-City 2023-10-10T09:42:47Z (FEATURE) [ISLCONFPROXY-3150] More


Updated GeoIP to use the database GeoLite2-City 2023-10-10T09:42:47Z.

ISL Light - Module - Add extra_check_user handling in session/query/2 webapi (FEATURE) [ISLLIGHT-5190] More


Extra_check_user handling was added in session/query/2 webapi. Please see also ISLCONFPROXY-1818.

ISL Pronto - Module - Add cmd line for extra step before connecting to ISL Light session (FEATURE) [ISLPRONTO-1255] More


Extra_check_user handling was added in session/query/2 webapi. Please see also ISLCONFPROXY-1818.

ISL Pronto - Module - Convert pronto grid legacy logs to AKV and fix client grid obj destroy on domain expiry (DEFECT) [ISLCONFPROXY-2908] More


Legacy logs in Pronto module were converted to AKV logs and are now logged under new "[ISL Pronto] Grid" log subsystem. Furthermore, client grid object destroy procedure was redesigned.

The defect was fixed.

ISL Light - Module - Fix JS error in invite operator modal when viewing revoked invite (DEFECT) [ISLCONFPROXY-3059] More


In previous version when user tried to modify session invite and invite was already revoked or used, JS error was shown. This was redesigned, modal is closed and error message that invitation was already revoked or used is shown.

The defect was fixed.

ISL Conference Proxy - Core - Editing of user profile is not possible if not all permissions for editing account are granted (DEFECT) [ISLCONFPROXY-3113] More


In previous version when updating profile in My profile and missing some of the permissions, user would get error even if the field (for which user does not have permission to edit) was not changed. This was redesigned, My profile page now has inputs disabled for fields/actions that are not allowed to be changed by current user. Individual fields are updated so specific disabled inputs no longer block change of allowed fields. Issue should not happen anymore.

The defect was fixed.

ISL AlwaysOn - Module - ShowMessage fails when sending add remote computer email (DEFECT) [ISLCONFPROXY-3128] More


In previous version, when user opened "Set Unattended access" in Computers pages, entered email in "Add remote computer tab" and clicked "Send", error was shown. This was redesigned, green success message is shown, when email is correctly sent and issue should not happen anymore.

The defect was fixed.

ISL Conference Proxy - Core - WebAPI2 errors leak raw internal exceptions (DEFECT) [ISLCONFPROXY-3129] More


In previous version when WebAPI2 call would fail, it would sometimes expose internal error. This was redesigned and explicit string error should now be returned.

The defect was fixed.

ISL Conference Proxy - Core - Protect login form against leaking secrets in URL bar (DEFECT) [ISLCONFPROXY-3135] More


In previous version in case of a bug (accidental submit), login form would show private data in browser's URL bar. This was now redesigned and issue should not happen anymore.

The defect was fixed.

ISL Conference Proxy - Core, Administration - Broken and missing translations, broken cancel button in modal (DEFECT) [ISLCONFPROXY-3139] More


In previous versions some of the translations were broken, resulting in untranslated string. This was redesigned, strings "Start New Session", "New Password" and "Cancel" button in Administration module modals should now be correctly translated.

The defect was fixed.

Tags: windows linux, isl proxy

Was this article helpful?