The VSA 9.5.7a (9.5.7.2994) release includes enhancements and fixes described in the topics below. For minimum system and agent requirements, see these topics in the Kaseya R95 System Requirements Guide: Kaseya Server Minimum Requirements & Configuration and Agent Minimum Requirements. 

Migrations and Temporary Unavailability of some Functionality 

We have advanced the release of some new capabilities in VSA.  The corresponding legacy VSA functionality has been removed from this release to improve the usability and security of the platform.  

User Portal and Portal Access 

The User Portal page, previously accessible using the Contact Administrator from Agent system tray icon, has been removed from the product but will be replaced in a future release. Additionally, machine-based accounts created from Agent > Configure Agents > Portal Access accounts will no longer be able to log into VSA. 

The ability for end-users to submit tickets directly from an endpoint, and to remote control the endpoint from another location, is temporarily unavailable and will be restored in a future release.   

We will provide a short-term solution for end-users to access alternate portals for either BMS and VSA Service Desk in a subsequent release. More details will be available via a KB article in the near future.  

For the immediate term, end-users should submit tickets directly from email, or by using the BMS User Portal, or Service Desk Login through the main VSA interface. 

Classic Ticketing 

This module has been replaced with an advanced ticketing capability that is derived from the ticketing and service desk function within our BMS product.  This was planned for later in 2021, but we are releasing it early as part of this security-focused update.    

The Classic Ticketing capabilities are removed from the product, except for these functions: - 

• Migrate Tickets – this can be used to migrate tickets to a Service Desk. For more information, please review the help topic. 
• Email Reader – allows access to configuration and log. Email reader will be disabled on the installation of the patch to prevent any further tickets from being read into the system. 

All existing ticket data will be retained in the database. 

To initiate the process of enabling the VSA NextGen Ticketing module, you can submit a request either through our portal at helpdesk.kaseya.com or via email at support@kaseya.com. Please include in the subject line “Kaseya Classic Ticketing Migration”.  If you are also using Service Billing and/or Time Tracking – please include that in the body of the email as well. 

Remote Control 

Customers should migrate to the most current version of Remote Control.  All past-generation remote control connection types have been removed from the product. All functions have been removed from the Remote Control tab, except for the following, which will remain:

• Reset Password 
• User Role Policy 
• Machine Role Policy 

On the System > Server Management > Default Settings page, the “Use new Live Connect when clicking the Live Connect button in Quickview” option has been set to Yes and cannot be changed. 

All remote control sessions started from the agent status icon or Quickview will now use the latest generation of Remote Control functionality in Live Connect. 

Live Connect (classic) 

Customers should migrate to the most current version of LiveConnect.  The past-generation “classic” (browser plug-in-based) version of Live Connect has been removed from the product.  

On the System > Server Management > Default Settings page, the “Replace KRC with RC in KLC to allow you to enforce all screen sessions getting recorded” option has been set to Yes and cannot be changed. 

All Live Connect sessions will now use the latest generation of the Live Connect application. 

Desktop Management (KDPM) 

This module’s primary use case was enabling migration from Windows XP to Windows 7.  This use case is no longer relevant and the module has been removed from the product.  

Agent Procedures 

The following duplicative function has been removed from the product: - 

• Distribute File 

More comprehensive, secure, and capable options for this functionality are available in the current release of VSA.  A video demonstrating how to perform this task with currently available capabilities will be available in a future KB article. 

Info Center 

Some past-generation dashboard functionality has been removed:

• View Dashboard 

• Layout Dashboard 

The Info Center > Dashboard > Management Dashboard page has a more modern dashboard. 

Mobility (EMM and MDM) 

These modules have been removed from the product. They are being superseded by next-generation Mobile Device Management capabilities which are planned for a future release. 

All customer data has been retained. 

Service Billing 

This module has been replaced as part of the advanced next-generation VSA NextGen Ticketing capability that is derived from the ticketing and service desk function within our BMS product.  This was planned for later in 2021, but we are releasing it early as part of this security-focused update. 

Service Billing requires the new next-generation VSA NextGen Ticketing module to be enabled.  To obtain it, you can submit a request either through our portal at helpdesk.kaseya.com or via email at support@kaseya.com. Please include in the subject line “Kaseya Classic Ticketing Migration”.  Please include in the body of the email that you are also using the Service Billing capability.  

All customer data has been retained. 

Time Tracking 

This module has been replaced as part of the advanced next-generation VSA NextGen Ticketing module that is derived from the ticketing and service desk function within our BMS product.  This was planned for later in 2021, but we are releasing it early as part of this security-focused update.  This module has been removed from the product, except for these functions: - 

• Time Tracking > Timesheet History (Summary) 
• Time Tracking > Timesheet History (Details) 

Time tracking requires the new next-generation VSA NextGen Ticketing module to be enabled.  To obtain it, you can submit a request either through our portal at helpdesk.kaseya.com or via email at support@kaseya.com. Please include in the subject line “Kaseya Classic Ticketing Migration”.  Please include in the body of the email that you are also using the Time Tracking capability.  

All customer data has been retained. 

VSA SOAP API 

This has been replaced with a hardened REST API.  A notice of deprecation was published in June 2020 and this capability was planned to be removed in November 2020.

Classic User Interface 

A notice of deprecation was published in June 2019 and this capability was planned to be removed in August 2019.  This has now been completed. 

Known Issues 

This release introduces some functional defects that will be corrected in a future release. They will be listed here prior to release. 

 Agent 

• The following pages do not display agent machines:
  • Agent > Templates > Rename, Delete, Change Group and Set Credential 
  • Agent > Configure Agents > Check-in-Control – page displays some HTML elements and a Whoops error. 

 Agent Procedures  

• Error with importing procedures through Agent Procedure > Manage Procedures > Schedule/Create page - “The file to import could not be located and there is no text to import”.  
• The following pages fail to load:
  • Agent Procedures >Manage Procedures > Distribution 
    
  • Agent Procedures > Installer Wizards > Patch Deploy 
  • Agent Procedures > Installer Wizards > Application Deploy  
  • Agent Procedure > File Transfer > Get File  

Audit 

• Audit > View Individual Data > Machine Summary - "Remote Control" tab still shows UI elements from deprecated Remote Control technology. This tab is no longer relevant and will be removed in a future release.  

Discovery  

• All references to User Portal functionalities within the Discovery module will be removed, in a future release, as part of deprecating the Kaseya User Portal page.
• Quick View for a device on Discovery > Summary Discovered Devices page fails to load.

Remote Control 

• When the “Record all shared remote control session” option is applied through User Role Policy, but not Machine Policy, screen recording is not initiated when starting RC session.

Service Desk 

• The Service Desk > Desk Configuration > Desk Definition > Import functionality may fail to import the Template.

Live Connect 

• An error may appear while navigating from the Ticketing module in Live Connect.
  
• It may not be possible to add or view Service Desk tickets directly in Live Connect.

New Features 

Remote Control: Disable End-user Peripherals

In this release, we added new functionality for a VSA admin to control certain end-user inputs so that the VSA admin can work on the remote device without disruption by an end-user. This is especially useful when working with devices where the VSA admin may not have direct contact with an end-user and needs to prevent the end-user from interacting with the device while the remote session is in progress. 

1. Feature to lockout keyboard and mouse from being able to be used by End-User.
   
   
   • • A new toolbar item is added to Remote Control Windows ‘Block End-User Input’. 
     • The feature is currently limited to Windows (Implemented for Windows VSA Agent only). 
     • If the end-user clicks Control+Alt+Delete, the End-User will regain control automatically. 
     • If ‘Block End-User Input’ is enabled and the remote session is closed, the End-User will regain control automatically.
       
       
2. Removed menu Items from the Remote-Control toolbar if the feature is not supported for a given VSA Agent type (Eg: if a feature is not supported for macOS Agents we will not show the menu item for the feature). 

End-User Input is not disabled

UI state (RC window) when Remote Control is initiated. 

End-User Input is disabled

UI state (RC window) when we click on 'Block End-User Input.' 

Remote Control window for a VSA macOS Agent (we do not display the menu icon for features that are not supported/implemented for the macOS Agent) 

The ”Show Mouse” and ”Block End-User Input" features are not displayed for macOS as they are currently unsupported. 

Live Connect: 1-Click Windows Security Enhancements 

In this release 1-Click activity will now be audited such that when a technician acts on any of the prompts, the actions will be captured and available in the VSA Remote Control log. 

During 1-Click sessions and Private Sessions, we present the following dialogue to allow for permanent or temporary configuration changes of RDP (Remote Desktop Protocol) and NLA. With this enhancement, the details of these changes are captured in the VSA Remote Control log: 

NLA/RDP setting response dialogue. 

There are three primary enhancements: 

•  VSA will log technician responses to the prompts presented in the Remote-Control Window along with information about what configuration changes will be made to the endpoint, if any. 
• There are new fields in the Technician, Remote Control Log so that we can capture more information about File Transfer activities in the future. 
• The type of authentication will be logged, whether Native 1-Click was used, or a specific credential from the integrated list of IT Glue credentials. 

Change in File Transfer Logging 

1. Change in Remote Control Log Table 
2. Removed Activity column. 
3. The detail of the message column is changed from x Files/Folder (s) Transferred to x Events Recorded. 

Old View 

Figure 2: Old view of Remote-Control Log table 

New View 

Figure 3: New View of Remote-Control Log table 

1. Change in Log Details table. 
2. Removed the columns: File/Folder Name, Direction of Transfer, Result columns from this UI. 
3. Added Event Type column. The value on this column can:

• • File Transfer 
  • ConfigChange and 
  • 1-ClickLogin 

1. Added Message column.

• • For File Transfer Event Type Message format: 
    

<file name> was <Download/Uploaded> <Successfully/but failed> 
AspNetSomething.exe was Downloaded Successfully.
Abc.exe was Uploaded but Failed. 

• • For ConfigChange Event Type, Message Format: 
    

<vsa-admin-name> <Temporarily/Permanently> < Disabled/Enabled> <NLA/RDP> 
Administrator Permanently Disabled NLA. 
Administrator Temporarily Disabled NLA. 

• • For 1-ClickLogin Event Type Message format: 
    

Authentication was performed using <Native 1-Click/ IT GLUE <it-glue account name>> 
Authentication was performed using Native 1-Click 
Authentication was performed using IT GLUE Test_Account 

Old View

Old view of Remote-Control Log Detail table 

New View

New view of Remote-Control Log Detail table 

Enhancements

Discovery 

• We are happy to share that our support for 'Organizations' within the VSA data model will continue to grow. We know that this will give you the freedom you need to review environments the way you want. As a part of this direction, we've added an organization filter to both the Discovered Devices and Topology Map.
• In anticipation of some upcoming, exciting changes to the Discovery module we've moved the Topology Map to a more central location. It can now be found within Discovery > Summary > Topology Map.
• SNMP plays a large role in monitoring; you know it and so do we. In this spirit, we've enhanced our existing SNMP implementation to make it even more reliable so you can trust it to provide the visibility you need. 

Info Center 

• In this release, we are introducing Personal Access Tokens for VSA Users. They are used to access specific VSA APIs. The first API to support such tokens is the Data Warehouse API. To create the new token, go to the System > User Security > Users, then select a user and choose the Tokens tab to manage tokens for a given user. 
• Added a new data set called "Agent Procedure Logs including archived" which is the same as the existing "Agent Procedure Logs" data set, but includes archived log entries. This data set is useful for reports that need to include sub-steps older than 3 days. 
• Data Warehouse API : 
  • A set of endpoints to query data from Info Center's Antivirus data sets.
  • A set of endpoints to query data from Info Center's Anti-Malware datasets.  
  • A set of endpoints to query data from Info Center's Agent Procedures datasets.
  • A set of endpoints to query data from Info Centre’s Service Desk datasets. 
  • A set of endpoints to query data from Info Centre’s Ticketing datasets.  
  • A set of endpoints to query data from Info Centre’s Discovery Data Sets. 
  • A set of endpoints to query data from Info Center's Software Management datasets.  
  • A set of endpoints to query data from Info Center's Monitoring datasets. 
  • A set of endpoints to query data from Info Center's Patch datasets.

Live Connect 

• Added additional free text search filters for Source Name, Description, and Event ID columns in the Event Log viewer. To activate the filter, enter the required text in the filter box and press Enter. In the example below, only events with ID containing “916” are displayed.
  
  

Remote Control 

• When connecting to an endpoint with Private Remote Control or 1-click session, a VSA admin can now temporarily override GPO enforced Network Level Authentication (NLA) settings to facilitate the connection. The ability to permanently override will not be available.  The configuration will be reverted to its original state at the end of the session. 

Bug Fixes  

Auth Anvil (Passly) Integration 

• Fixed an issue where the Configure Auth Anvil Settings page displayed an error after applying the initial setup. 

BMS Integration  

• Fixed an issue where discovered machines/assets in the VSA were not pulling into BMS. 

Discovery 

• Fixed an issue where a customer was unable to scan devices in a desirable range of IP (Internet Protocol) addresses.
• Fixed an issue where deploying agents fail if the password contains DOS special characters. 
• Fixed an issue where a customer was unable to deploy agents. 
• In this version, an appropriate image is shown on the topology map for the virtual switch in case the discovery scan was performed with VMware or WMI (Windows Management Instrumentation) credentials specified.

Info Center 

• Fixed an issue where legacy Ticketing reports would fail to render. 

Service Desk 

• Fixed an issue where Service Desk tickets would not auto close when the associated device exits alarm condition. 
• Fixed an issue where users were not able to submit tickets through the legacy Ticketing portal. 

Software Management 

• Fixed an issue where the monthly schedules were incorrect when the distribution window runs into the following day. 
  • NOTE: Monthly schedules should be reapplied on endpoints (via policy management and/or locally in the module)
• Fixed an exception error when suppressing patches if a filter was applied. 

Live Connect 

• Fixed an issue where Live Connect on Demand failed to send an email containing a link to the temporary agent installation package. 

Remote Control 

• Fixed an issue where the Remote Control session would not request user permission again after VSA admin ends a session and then re-connects to the same machine, while the Live Connect session is still active. 
• Fixed an issue where the VSA admin could not see the end-user mouse cursor in the Remote Control session on a macOS agent. 

Ticketing 

• Fixed an issue where a combination of single and double quote characters caused truncation of ticket summary. 

User Portal 

• Fixed an issue where the secure flag was not being used for User Portal session cookies. 

VSA UI 

• Fixed an issue where icons would not be displayed in the left navigation bar for certain third-party integration (TAP) modules.