What’s New

ISL Light 4.4.2332.175 for Desktop and ISL Light Client 4.4.2332.32 for Linux and macOS provide bug fixes.

Bug Fixes

Resolved password retrieval

The application’s signing process has been updated so that only the binaries are signed, rather than the entire bundle. This change resolves the password retrieval issue. When initiating password retrieval, macOS users will see a dialog box asking for permission to retrieve the password. It is recommended to select the “Always Allow” option to streamline the process.

Disabled support for gestures

In the previous version of ISL Light, macOS users controlling a remote computer with a touchpad encountered issues due to gesture support. Specifically, touchpad inputs were sometimes mistakenly interpreted as gestures. For instance, attempting a right-click with two fingers could inadvertently cause the remote screen to zoom, leading to mouse offsets and a truncated screen view. To resolve this, gesture support has been removed, ensuring that touchpad use no longer triggers these issues.

Fixed icon on sessions dashboard

Previously, when an operator connected to a remote device, a grey line appeared at the top of the monitor icon. This issue has been resolved, and the icon should now display correctly without any grey line.

Fixed separator selection in the stream quality dropdown

When an operator attempted to connect to a remote ISL AlwaysOn computer, selecting separators in the stream quality dropdown caused unexpected behavior. The dropdowns have been redesigned to prevent separators from being selectable.

Session list showing correct information

Previously, when entering information in the “Invite operator” or “Edit session” dialog, it was not displayed correctly in the session list. The update process has been redesigned to ensure that information is now accurately reflected in the session list.

Improved accessibility features

Various accessibility features were fixed and improved.

Other fixes & improvements

Some other minor bug fixes and improvements.

ISL Light 4.4.2332.169 for Desktop and ISL Light Client 4.4.2332.31 for Linux and macOS provide new features and some bug fixes.

New Features

Optimized Quality is enabled by default

For remote desktop sessions the default color depth is now “Quality Optimized” instead of “Speed Optimized”.

Speed Optimized vs Quality Optimized (Default)

Users can set the default color depth via the “Settings > Remote Desktop” menu. When starting a session, users have the option to set the color depth for that specific session via the “Session Invitation” or “Edit Session” dialog. Additionally, quality settings can be accessed and modified from the main toolbar during the session.

For unattended sessions, the option to choose a quality optimized color depth is now integrated into local settings, allowing users to specify their preferred color depth configuration via “Access Password” dialog.

Virtual background

Users now have the option to modify their video background by applying an image background or blur effect.

Note: Initiate a call first in order to load the settings.

ISL Light > Settings > Talk

When “Blur Background” is specified as a Virtual Background Mode, it will activate the blur functionality. The Virtual background privacy level slider is used to fine-tune the background separation.

When “Use Background Image” is specified, the behavior will be as follows:

• If an image is set as part of a customization, that specified image will be used.
• If an image is set in the registry (indicating user preference from settings), that registry image will be used.
• If no image is set anywhere, the application will fallback to the blur mode.

Increased resolution for video calls

The resolution for video calls in ISL Light is now supported up to 480p (640×480 pixels). This can be changed by right-clicking on the video panel.

ISL Light Client > In Session > Video Call

Create desktop shortcut for a computer

An option to create a desktop shortcut for ISL Light has been added. Running the shortcut will launch ISL Light and attempt to connect to a remote computer by prompting for login credentials, followed by the access password for the specific computer.

To create a desktop shortcut, users need to select a computer and click “Create Shortcut” from the menu. The shortcut will be named after the computer’s alias if set, or its original name if no alias is provided.

ISL Light > Computers > Menu > Create Shortcut

Add server address to instructions

The text labels for the Session Invitation dialog, Set Unattended Access dialog, and Start New Session window have been updated to include the server address (islonline.net or the server address for self-hosted setups) in the usage instructions.

ISL Light > Start New Session > Session Invitation

Updated icons in Session and Computers Dashboard

A mobile icon has been added to the “Sessions” and “Computers” dashboards for easier identification of mobile devices. The large icon indicates the client’s device, and the small icon indicates the operator device.

ISL Light > Sessions

Settings available at program startup

ISL Light settings for “Remote Desktop”, “File Transfer”, “Recording” etc. are now available at program startup. This allows users to modify ISL Light settings prior to creating a session.

Bug Fixes

Remember window position with maximized window

Window coordinates are now only modified when the window is not maximized, ensuring that the window consistently returns to its last known location before it was maximized. This maintains the window’s position and size accurately across different window states.

Session pauses when exiting ISL Light during RDP connection

When the dashboard window is closed while an RDP session is active, the application will now prompt the user to confirm if they want to terminate the session. This prevents the RDP session from being left in a hanging state, and an ISL Light session from being left in a paused state.

Camera not started when video call is initiated

In some cases, when an operator initiated a video call from ISL Light to ISL Light Client (Windows), there was an issue where the camera did not display correctly on the first call. Additionally, the camera button incorrectly indicated an active state even when the camera was not active. The initialization process for video calls to ISL Light Client (Windows) has been redesigned to ensure the camera starts correctly on the first call and that the camera button accurately reflects the camera’s state. This issue has now been resolved.

Computer history chat transcript fix

Computer history now loads the chat transcript correctly and has been updated to match the web version.

Other fixes & improvements

Security updates, bug fixes and other improvements.

ISL Conference Proxy 4.4.2335.124 provides new features and bug fixes.

New Features

OAuth2 authorization: Integration for external services

OAuth2 Authorization is now integrated into ISL Conference Proxy, providing a secure and standardized protocol for enabling integration with external services. This feature allows third-party applications to securely access resources on ISL Conference Proxy without exposing user credentials. In upcoming releases, users can expect full compatibility with popular platforms like Freshdesk and ServiceNow, among others.

A new dashboard in Security > Authorized Apps offers improved control over OAuth2 integrations. It displays a list of OAuth2 authorizations, with an option to revoke each one.

https://[ICP_SERVER_ADDRESS] > Security > Authorized Apps

Here’s an overview of the implementation:

1. User Authorization Request

A new endpoint is opened at https://[ICP_SERVER_ADDRESS]/users/authz/oauth2/grant. This URL requires a valid user session. Upon a GET request, the user is redirected to the login page if they don’t have an active session. Subsequently, the user is presented with a confirmation dialog where they can inspect the access request and then choose to grant or reject access to their account. If the user clicks “Reject Access,” they are redirected to /users/main/logout, which logs them out.

2. User Authorizes Application

If the user clicks “Authorize Access,” a POST request is sent to the same endpoint at https://[ICP_SERVER_ADDRESS]/users/authz/oauth2/grant.

3. Authorization Code Grant

Upon confirming access to their account, an authorization code is prepared by ISL Conference Proxy. The user is then redirected to the pre-registered redirect URI with the prepared authorization code in the URI.

4. Access Token Request

In the subsequent step, the OAuth2 client exchanges the authorization code received in the previous step for an actual access token. For this, another endpoint was opened at https://[ICP_SERVER_ADDRESS]/authz/oauth2/token, which does not require a user session. The authorization code is validated, and if successful, the process continues to the next step.

5. Access Token Grant

A new access token is generated, stored in the database, and ISL Conference Proxy responds with it to the OAuth2 client. The access token is set to expire after one year or after 90 days of not being used.

Additionally, a new table “integrator_oauth2_user_authorizations” was registered, which stores users’ OAuth2 authorizations. The existing integrator table “integrator_jwt_api_access_public_rsa_keys” is expanded with OAuth2 client columns: oauth2_app_description, oauth2_app_homepage_url, oauth2_client_redirect_urls, oauth2_client_secret_hash, and oauth2_require_pkce.

Integration with external cloud Hardware Security Module (HSM) for code signing

ISL Conference Proxy now integrates with external cloud Hardware Security Module (HSM) code signing providers like Google Cloud HSM. This enhancement introduces support for external certificates and keys within the authenticode tools, utilized for code signing Windows executables.

Administrators can configure the following settings in Server Administration:

Use an external certificate and key for Authenticode: when enabled local certificate file, key file and passphrase will not be used
Authenticode tool environment: can be used to set environmental variables for authenticode tool (process)
Authenticode tool arguments: can be used to provide additional command line arguments for authenticode tool
Platform specific lines can be used in environment and arguments setting (“{platform=linux}”).

Example of setup for Google HSM:

New options in “Set Unattended Access” dialog

The “Set Unattended Access” dialog now mirrors the ISL Light program, ensuring a unified experience across platforms.

New options for adding remote computers via “Link” and “Code” have been incorporated. Furthermore, users can specify the computer group, name, and tags when adding a new computer using either the “Email” or “Link” method.

ISL Conference Proxy Web Portal > Computers > Set Unattended Access

Chat notifications in ISL Pronto

ISL Pronto’s web client now supports sound and native notification functionalities, ensuring users are promptly notified about new chat messages when the chat window is minimized.

Customers now have the ability to manage chat notification settings through a new modal, accessible via the “Settings” button in the ISL Pronto web client. Furthermore, an option to enable notifications has been integrated into the web client, providing users with access to notification settings when starting a chat. These settings are stored locally in the user’s browser.

New Server Administration Settings:

• Link to Notification Icon: Customize the notification icon for chat notifications.
• Enable Notifications by Default: This setting enables notifications by default when users enter a chat session. By default, this setting is disabled. Enabling it overrides the user’s preference checkbox when starting a chat.

Regardless of server settings, live chat users can enable/disable notifications by clicking on the “Settings” button in ISL Pronto web client.

ISL Pronto web client > Settings

Option to disable SSL certificate auto-renewal

A new feature now allows users to disable the automatic renewal of SSL managed certificates. This option can be set either during the initial installation of certificates or later via the GUI. By default, certificates retain their automatic renewal functionality, maintaining consistency with previous versions.

Improvements to CSV export formatting

Previously, when exporting reports, CSV fields containing special characters were URL-encoded, resulting in them being displayed incorrectly. Additionally, fields were always enclosed in quotes, trailing delimiters were present, and special characters were not correctly displayed. To address these issues, the CSV export functionality has been redesigned. Now, CSV exports are properly formatted, with fields enclosed in quotes only when necessary. Quotes are escaped, trailing delimiters are removed, and special characters are correctly displayed.

Speed optimizations

We’ve made several improvements to ISL Conference Proxy, focusing on speed enhancements. These optimizations include using cache on product page levels, accessing XPP variables on demand, optimization of legacy logs and deprecating exceptions to speed up error handling. Additionally, we’ve optimized HTTPS connection times by caching SSL context objects and improved DNS request speed by logging failed attempts differently.

Upgrade to OpenSSL 3.0.13

The OpenSSL library has been upgraded to version 3.0.13.

Upgrade to LibXML 2.11.7

Library LibXML2 has been upgraded to version 2.11.7.

Bug Fixes

Add reported direct transferred bytes to total transferred bytes

Bytes transferred by Direct Connection are now added to “totalTransferredBytes” when reported by the client. Before, only data transferred through ISL Conference Proxy was counted and data was inaccurate when direct connection was used. Clients now report the number of transferred bytes since the last report of transfers (30s), a log is also created every time that new number of transferred bytes is received.

Safari JavaScript errors resolved

In the previous version, the Sessions and Computers tabs were not rendered correctly on older versions of the Safari browser due to script errors and incompatibilities. This issue has been addressed, and both affected tabs should now display correctly.

Introduce separate server position cache for use in load balance calls

In previous versions when load balancing a server call on a grid of ISL Conference Proxy servers, server’s location was not used correctly when server had service disabled, which resulted that load balance score was not computed correctly. This was redesigned, server’s location should be correctly retrieved and correct server should now be selected by load balancer.

Custom Deployment Link page fixes

In the previous version, computer groups on the Custom Deployment Link web page were unordered. This has been redesigned, and now groups are ordered alphabetically by name. Additionally, in the previous version, tags in the text area could only be separated with commas. Support for separating them with a new line has been added.

Session History bug fixes

In previous versions, the “Duration” field in ISL AlwaysOn computer session history details would inaccurately grow even after the session had finished. This issue has been resolved, ensuring that the correct value is now returned.

Additionally, the “Location” field has been fixed and will be set to “/” when not available for clients. Previously, it would display as “undefined” in such cases. Missing translations for status have also been added.

Email authorization timer fixes

In the previous version, there were instances where the countdown timer failed to appear when waiting for email authorization in the connection dialog. This issue has been addressed, ensuring that the timer is now consistently displayed as expected.

Email authorization fixes for Android devices

Previously, older clients lacking support for newer protocols faced difficulties initiating remote access when email authorization was set as required. We’ve addressed this by redesigning the system to check session status based on the client’s protocol compatibility. This fix resolves issues affecting Android and older pre-2018 desktop clients, ensuring seamless session initiation.

Other fixes & improvements

Security updates, bug fixes, added missing translations and log improvements. These changes are aimed at improving the stability, security, and performance.

ISL AlwaysOn 4.4.2332.78 provides a bug fix.

Fixed issue with “Stream in best quality” selection

User experienced an issue with reduced desktop sharing performance when connected to an ISL AlwaysOn machine and having the option to stream in best quality. The issue was that the streaming side chose to stream in “Full Quality (ZRLE codec)” instead of using the “Quality Optimized (ISSC codec)”.

When direct connection functionality was introduced this issue also became apparent. There are two special channels -1 and -2 which are used for program initialization, status and reliability messages. The special channels should have priority when sent over the network, however due to an issue they were not prioritized.

When desktop streaming is initialized it sends its init messages to remove side on channel -1 and when remote side received init messages it starts desktop streaming on desktop channel. This caused an issue because desktop stream was sent to other side before all desktop init messages were received, causing to start streaming with incorrectly selected codec.

The issue was fixed.

ISL Light > Computers > Connect to Computer > Connect Options

ISL AlwaysOn 4.4.2332.75 provides new features and bug fixes.

New Features

Hefa watchdog functionality updates

• Main Thread ID Switch: The new functionality now allows the main thread ID to be switched to the ID of the current thread. This adjustment is crucial for correctly associating the main thread when watchdog crash dumps are generated.
• Timing Adjustment for Main Thread Checks: The initial check of the main thread was previously set to occur after 60 seconds. This has been corrected to happen after 90 seconds.
• Timeout Extensions: Both the scheduler and watchdog timeouts have been extended from 90 seconds to 120 seconds. This increase aims to provide more leeway in processing before a timeout condition is triggered.
• Default Timeouts Update: Similarly, the default timeout settings have been increased from 90 seconds to 120 seconds, enhancing the system’s tolerance to longer task durations before flagging an error.

These changes are designed to improve the robustness and reliability of the watchdog mechanism in handling process monitoring and error detection.

Switch watchdog main thread on Windows

New version of ISL AlwaysOn features the following watchdog functionallity changes:

• Updated watchdog functionality to include longer timeouts.
• Watchdog crashes occurring in services are now categorized as service crashes instead of GUI crashes.
• Added a new parameter, sys:1, to crash reports. This parameter indicates that ISL AlwaysOn was launched under a system account and is running as an application, not as a service.

Bug Fixes

Crash when a grid is removed in registry with granted connection on

If users accidentally delete the registry key that ISL AlwaysOn relies on (specifically the grid key), the application will no longer crash when attempting to connect to the server. We’ve implemented a new check for the presence of this key. Now, if the key is missing, the application will simply ignore its absence and continue to operate without crashing. This update ensures better stability in cases where the registry configuration might be altered or corrupted.

Move tray handler to separate threadpool

In the previous version of ISL AlwaysOn, the tray handling operated on the main thread. This could occasionally lead to memory corruption when the service was terminated. To address this issue, the tray handling process has been restructured to operate within a separate thread pool.

Deadlock in main app on Windows

The ISL AlwaysOn watchdog experienced crashes under specific conditions when the main thread was blocked waiting for a resource. This issue also prevented the ISL AlwaysOn service from being terminated as expected. The service’s waiting loop has been restructured to avoid using locks, allowing the service to be stopped as needed.

ISL AlwaysOn 4.4.2332.70 provides new features and bug fixes.

New Features

Improvements for optimizing client connections in single address GRIDs

Several changes were implemented to optimize client connections in single address GRIDs where client DNS servers do not properly transfer the client’s IP address to ICP:

• The “Check-Address: 1” header will be sent to ICP during geo-reconnect to notify ICP that geo-reconnect with the server address in “Address-Reconnect” is supported.
• The “Service-Reconnect: 1” header will be sent to ICP during service reconnect to notify ICP that service reconnect with geo-reconnect is supported.
• The “Address-Reconnect” response header will be handled as the new server address in the reconnect.
• Service reconnect and geo-reconnect are now combined into the same event and executed simultaneously: Update the service address in the configuration, then reconnect to the new server address.

Improvements for Direct connection

The direct connection setup in ISL Light has been optimized for better performance. Changes include reducing the MTU size from 1400 bytes to 1200 bytes and increasing the connection timeout from 20 to 35 seconds.

Additionally, the system now automatically disables direct connections if the network startup detects oversized packets. Logs have been enhanced to indicate when direct connections are disabled or fail to gather the external address. Metrics have also been updated to detect issues during direct connection establishment.

Close email notification windows when no longer relevant

The notification dialog in ISL AlwaysOn, shown on the computer when an operator initiates a session while the setting to require email authorization is enabled in ISL AlwaysOn, previously failed to close when it was no longer relevant. This resulted in the dialog persisting even after the user had already granted the connection. Now, enhancements have been made to ensure the dialog closes appropriately. Specifically, it now closes under the following conditions:

• When the connection is denied by the operator.The “Service-Reconnect: 1” header will be sent to ICP during service reconnect to notify ICP that service reconnect with geo-reconnect is supported.
• If the connection is denied via email authorization.
• When the connection is granted via email authorization.
• When the authorization timeout occurs.

Switch to common crash framework

The latest update of ISL AlwaysOn incorporates unified crash functions to generate various types of crashes. Furthermore, the application now offers support for crashing via command line argument:

–isl-crash-test

Bug Fixes

Fix wrong RAM info on windows

In specific scenarios, the RAM utilization and size was displayed inaccurately within the system information window when connected to a remote Windows ISL AlwaysOn computer. We’ve revamped the process for verifying RAM size and usage, ensuring that accurate values are now displayed.

Fix crash when there is a change in ISL AlwaysOn computer status

If the ISL AlwaysOn system experienced a delay of 2 seconds in updating the computer status, it could lead to application crashes. To address this issue, the process for updating computer status has been redesigned. The application has been modified to handle delays in execution, ensuring that it no longer crashes under such circumstances.

Install sys deps during installation on Linux

In certain scenarios, when setting up ISL AlwaysOn on a Linux system, users may encounter missing libraries necessary for installation. To address this, we’ve introduced a new command line argument: install_missing. By including this argument during ISL AlwaysOn installation, users prompt the installer to automatically identify and install any missing libraries. If this argument is omitted, the installation process will fail and notify the user about the specific missing library.

Crash report is not sent to ISL Conference Proxy on Linux

The crash reporting functionality of ISL AlwaysOn on Linux failed to send reports to ISL Conference Proxy. The root cause was the absence of the StaticConfiguration.ini file, which provides crucial connection address information to the crash reporting system. To address this issue, the StaticConfiguration.ini file is now included in the installation process of ISL AlwaysOn. Consequently, crash reports are successfully transmitted to ISL Conference Proxy as intended.

Fix crash in cim reading on Windows

In certain instances, the ISL AlwaysOn process crashed while querying system information to construct the constant UID. We’ve redesigned the handling of these queries, ensuring that the application no longer experiences crashes.

Fix potential crash when invoking user action

In certain scenarios, the ISL AlwaysOn application experienced crashes when users clicked on the “Add access” menu item, as well as when deleting connections while the menu item was open. We have redesigned the handling of both cases to prevent application crashes.

Fix a crash in ICE direct connection when calling stop function

In certain instances, there were occurrences of ISL AlwaysOn crashing on Linux when ending sessions. This was attributed to a flaw in managing the conclusion of direct connections. We have since redesigned this aspect, thereby resolving the underlying cause of the crashes. Users should no longer encounter this issue.

Other fixes & improvements

Security updates, missing translations, bug fixes and other improvements.

ISL Light Client 4.4.2332.44 for Windows provides new features and some bug fixes.

New Features

Improvements for optimizing client connections in single address GRIDs

Several changes were implemented to optimize client connections in single address GRIDs where client DNS servers do not properly transfer the client’s IP address to ICP:

• The “Check-Address: 1” header will be sent to ICP during geo-reconnect to notify ICP that geo-reconnect with the server address in “Address-Reconnect” is supported.
• The “Service-Reconnect: 1” header will be sent to ICP during service reconnect to notify ICP that service reconnect with geo-reconnect is supported.
• The “Address-Reconnect” response header will be handled as the new server address in the reconnect.
• Service reconnect and geo-reconnect are now combined into the same event and executed simultaneously: Update the service address in the configuration, then reconnect to the new server address.

Improvements for Direct connection

The direct connection setup in ISL Light has been optimized for better performance. Changes include reducing the MTU size from 1400 bytes to 1200 bytes and increasing the connection timeout from 20 to 35 seconds.

Additionally, the system now automatically disables direct connections if the network startup detects oversized packets. Logs have been enhanced to indicate when direct connections are disabled or fail to gather the external address. Metrics have also been updated to detect issues during direct connection establishment.

Bug Fixes

Fix wrong RAM info on Windows

Checking the system information window when connected to ISL Light Client on Windows would, in certain cases, show the incorrect values for RAM usage and RAM size. The checking of RAM size and usage was redesigned, and the correct values should now be displayed.

Direct connection setting text is split into multiline in certain languages

In some languages, the “Enable direct connection” setting was divided into multiple lines, causing text truncation as it only anticipated single-line input. We’ve revamped the setting, ensuring it now displays correctly even in languages that have multiple lines of text.

Other fixes & improvements

Security updates and missing translations.

ISL Light 4.4.2332.117 for Desktop and ISL Light Client 4.4.2332.16 for Linux and macOS provide new features and some bug fixes.

New Features

Redesgined login window

The login window of the ISL Light application has been redesigned. Additionally, support for “Sign in to an organization” (Single Sign-on) has been added, which is displayed if the server supports this type of login functionality.

ISL Light > Login window

Improvements for Direct connection

The direct connection setup in ISL Light has been optimized for better performance. Changes include reducing the MTU size from 1400 bytes to 1200 bytes and increasing the connection timeout from 20 to 35 seconds.

Additionally, the system now automatically disables direct connections if the network startup detects oversized packets. Logs have been enhanced to indicate when direct connections are disabled or fail to gather the external address. Metrics have also been updated to detect issues during direct connection establishment.

Improvements for optimizing client connections in single address GRIDs

Several changes were implemented to optimize client connections in single address GRIDs where client DNS servers do not properly transfer the client’s IP address to ICP:

• The “Check-Address: 1” header will be sent to ICP during geo-reconnect to notify ICP that geo-reconnect with the server address in “Address-Reconnect” is supported.
• The “Service-Reconnect: 1” header will be sent to ICP during service reconnect to notify ICP that service reconnect with geo-reconnect is supported.
• The “Address-Reconnect” response header will be handled as the new server address in the reconnect
• Service reconnect and geo-reconnect are now combined into the same event and executed simultaneously: Update the service address in the configuration, then reconnect to the new server address.
• Addition of Subject Field in “SET Unattended Access”

The unattended access modal has been redesigned to align with the web modal interface. A subject field has been added to allow for custom email subjects, and labels and placeholders have been integrated into the interface for improved usability.

ISL Light > Computers > Set Unattended Access dialog

Bug Fixes

Fix keyboard navigation in modals, dashboard and login view

The predictability and logic of keyboard navigation cycling were inconsistent in certain scenarios. Consequently, improvements have been made to keyboard navigation (utilizing the ‘Tab’ key) in login, dashboards, and modals.

IP Address incomplete on linux

Users encountered an issue where certain IP addresses were incompletely displayed in ISL Light on Linux. The display of IP addresses has been redesigned to consistently show the complete IP address. The defect was fixed.

Other fixes & improvements

Security updates, missing translations, bug fixes and other improvements.

ISL Light 4.4.2332.100 for Desktop and ISL Light Client 4.4.2332.30 for Linux and macOS provide new features and some bug fixes.

New Features

Enhanced speed: Direct Connection feature

Introducing the “Direct Connection” feature, a significant enhancement to our remote desktop platform in ISL Light.

Direct connections are known for their speed advantages compared to routed connections. ISL Online now automatically chooses the most effective connection technique, either by establishing a session tunnel directly between the local and remote computer or via a routed connection.

Important: To utilize the direct connection feature, it’s essential that the remote side also uses the latest versions of ISL Light, ISL Light Client, or ISL AlwaysOn. For remote support initiated via the website (code, link, or email invitation), the latest ISL Light Client is automatically downloaded on the client side. However, if customers previously downloaded and saved ISL Light Client to their computer, please ensure that the client obtains the latest version. For remote access, ensure that all remote computers are upgraded to the latest version of ISL AlwaysOn (4.4.2332.54). Please refer to the Bulk Action manual to update ISL AlwaysOn on multiple computers with one click.

Once a direct connection is established, it will be indicated in the status bar for user visibility.

ISL Light > In Session > Status Bar > “Direct Connection”

Upon session establishment, ISL Light conducts ICE (Interactive Connectivity Establishment) candidate checks.

ICE (Interactive Connectivity Establishment) candidates are potential network addresses that a device can use to establish a communication channel with another device. ICE candidates include various types of addresses, and their purpose is to help devices discover the most suitable path for communication, especially when dealing with Network Address Translation (NAT) and firewalls. The original connection to the ISL Conference Proxy (using MUX transport) remains necessary for sending metadata, while the actual data is offloaded to the direct connection if available.

During the ICE process, devices exchange their lists of candidates, and connectivity checks are performed to determine the optimal path for communication. The negotiation and selection of candidates are part of the ICE protocol, allowing devices to adapt to different network environments and establish a reliable communication channel. ISL Light assesses the quality of MUX (Multiplexing) transport versus ICE transport. This evaluation considers factors such as ping time, with quality determined based on the latency in communication. The system selects the connection with the lower ping time to ensure optimal performance.

The main types of ICE candidates are:

• Host candidates
• Server-reflexive candidates
• Relay candidates

Host candidates

These are the local IP addresses of the device itself. Host candidates represent the device’s actual network interfaces and are used for direct connection when both devices are on the same local network.

Direct Connection diagram via Host candidates in Local Area Network (LAN)

For the host candidate, the connection initiates (blue line) within the Local Area Network (LAN), originating from the operator’s computer. It traverses NAT to reach the ISL Conference Proxy (ICP). Similarly, the client’s connection follows a comparable route. From there, the connection proceeds (red line) from the operator’s computer, passing through NAT to a STUN server, with the same process occurring from the client’s end. Following this route, the direct connection session (green line) is established between the operator and client computers.

Server-reflexive candidates

Server-reflexive candidates are acquired through STUN (Session Traversal Utilities for NATs) servers. STUN servers reflect UDP (User Datagram Protocol) packets back to the device, allowing it to discover its external address and port visible to the internet. This helps in establishing communication with devices outside the local network, overcoming NAT (Network Address Translation) barriers.

Direct Connection diagram via Server-reflexive candidates (STUN Server(s))

Relay candidates

Relayed candidates are obtained through a TURN (Traversal Using Relays around NAT) server. In cases where direct communication is not possible due to restrictive firewalls or symmetric NAT, devices can use a relay server to relay their data through a third-party server. TURN candidates help in establishing communication when other methods fail.

Direct Connection diagram via Relay candidates (TURN Server(s))

For Relay candidates, the connection starts (blue line) with the operator’s computer passing through NAT, then to the ISL Conference Proxy (ICP). Likewise, the client’s connection follows a comparable route. From there, the connection proceeds (red line) from the operator’s computer, passing through NAT to a STUN server. The same process occurs from the client’s end.

The key difference from server-reflexive candidates is that the direct connection (green line) is established via a TURN server between the operator and client.

Standard Connection

Without direct connection enabled in ISL Light, the connection pathway follows a standard route from the operator’s computer to the network address translation (NAT) point, then to ISL Conference Proxy (ICP). Likewise, the client’s connection follows a comparable route. This route relies on ISL Online’s network of servers for relaying the data stream between the operator and client computers.

Standard Connection diagram via ICP Server(s)

Enabling ISSC Daemon on Windows

ISL Online programs (ISL Light, ISL AlwaysOn, …) utilize the ISSC Daemon framework to efficiently manage processes across different sessions, supported by a consistent API across desktop platforms. However, the initial version of ISSC Daemon faced some issues, such as missing callback functions.

With the new version of ISSC Daemon, we addressed these issues and provided a unified implementation across platforms. This update allows us to utilize the ISSC Daemon infrastructure in ISL Light, ensuring consistency across all platforms. Previously, ISL Light had separate implementations for Mac, Windows, and Linux.

Computer History

We’ve introduced a new Computer History functionality in ISL Light, providing users a view of the activity of selected computer. To access this feature, navigate to the “Computers” tab, click on the hamburger icon of the desired computer, and select “Computer History”.

Upon triggering the search, sessions will populate the table along with relevant session information. Clicking the “More” button grants users access to the chat transcript and basic session information of each session.

ISL Light > Computers > Computer History

File Transfer dialog

In ISL Light, when transferring files from the operator side to the client side, a confirmation dialog was previously missing for remote users. We have implemented a file transfer confirmation dialog, ensuring consistent user experience across all platforms. Now, remote users will receive a prompt to confirm file transfers, enhancing security and user control during the transfer process.

ISL Light > Sessions > Send File > File Transfer dialog

Add “Keyboard is/is not captured” feedback to status bar

Feedback for the keyboard being captured was added to the main window while viewing the remote desktop. This can be seen on the bottom right in the status bar.

The “Right Ctrl” button can be used to switch focus between whether the “Keyboard is/is not captured”.

ISL Light > In Session > Status Bar > “Keyboard is/is not captured (Right Ctrl)”

Upgrade QT to 5.15.11

QT version was upgraded to 5.15.11 in ISL Light application.

Bug Fixes

Screen resolution issues

Previously, in certain cases when connected to a remote ISL AlwaysOn computer, the remote resolution menu was disabled. We redesigned the condition for showing the menu entry, ensuring that the remote resolution menu is now correctly displayed. Additionally, when streaming is not present, the menu is also disabled.

Some users experienced crashes when connecting to an ISL AlwaysOn computer and opening the Change Remote Resolution dialog. We redesigned the dialog’s opening mechanism, eliminating application crashes.

The setting for optimizing resolution based on the first local monitor found in ISL Light settings under the Remote Desktop section was not functioning correctly when connecting to a remote computer. The issue stemmed from parsing errors in the monitor data received from the remote side. We redesigned the parsing mechanism, ensuring that remote monitors’ resolutions are automatically changed to match the resolution of the first local monitor.

Display dialog on top when requesting remote desktop control

We’ve addressed an issue where the dialog for requesting remote desktop control could appear behind other windows. To resolve this, we’ve redesigned the display mechanism for the message box. The topmost property, which ensures the message box is positioned in front of all other windows, is now consistently set across all platforms.

Message box text visibility issue on macOS

We have addressed an issue encountered post-Qt upgrade on macOS where the message box text was not visible. Sometimes the button lacked its blue color, and due to the white font colour, the button’s text was unreadable. To resolve this, we have restored its blue colour to improve readability.

Improved accessibility for dashboard computer icons

Previously, some dashboard computer icons were missing accessibility features. These accessibility names are crucial for users who rely on accessibility tools like screen readers such as Windows Narrator. They enable users to effectively understand and interact with the interface. This issue has been addressed and fixed.

Call ringing issue on the client side

We’ve resolved an issue where calls initiated by operators continued to ring on the client side even after the operator ended the call. This inconsistency occurred when the operator stopped calling, but the client’s device continued to ring. Now, when the operator stops calling, the client will no longer ring, ensuring that calls are properly terminated on both ends.

Login error

We’ve resolved an issue where the login procedure could unexpectedly restart even after a previous login was successfully completed. This issue led to error messages appearing on the login screen.

QML warning/error metrics issues

We’ve resolved QML warning/error issues detected by the metrics system. The problems have been addressed, and these warnings/errors should no longer appear, ensuring smoother performance.

Hidden columns in computers tab

We’ve addressed an issue where hidden columns in the computers tab did not persist after logging out and logging back in. Specifically, if users hid the status column in the list of computers, this column reappeared upon logging out and logging back in. To resolve this, we redesigned the hiding of columns functionality. Now, hidden columns remain hidden even after the logout and login procedure.

Other fixes & improvements

Security updates, missing translations, bug fixes and other improvements.

ISL Light Client 4.4.2332.30 for Windows provides new features and some bug fixes.

New Features

Support for Direct Connection

Direct connections are now supported on ISL Light Client and ISL Light Desk for Windows. Direct connections allow connections through ICE servers.

A new command line argument was introduced which can be used to disable the direct connections functionality:

–on-connect “main?direct_connection=false”

Note: To utilize the direct connection feature, it’s essential that the you use also the latest version of ISL Light (4.4.2332.100).

Bug Fixes

Other fixes & improvements

Security updates and missing translations.