This release contains the following updated components:
Windows Agent 25.5
Mac Agent 25.06
Web 25.10.1
Server 25.7
BI 24.52
New Aggregation Tab on the Instant Messages Report
Category: BI Reports
A new Aggregated tab has been added to the BI Reports > Instant Messages report. This tab lets you see IM activities grouped by conversations, which will help you identify chat sessions easily instead of viewing them by timestamps only.
BI Filter for Empty Values
Category: BI Reports
A new “Empty” filter option is now available for filtering fields on the BI Reports.
Previously, you had to select all values and then check the Exclude option to do something similar, but it wasn’t quite as powerful, because you couldn’t use this workaround for the Exclude field itself.
This will help you filter empty values easily in both the include and exclude fields.
Showing the Reasons for Disabled Monitoring
Category: Monitoring
A warning text on the Computer’s Details screen will now show the reason why the monitoring was disabled for a computer. Clicking the version will take you to the Notifications screen.
Block Messages in Content Sharing Rules
Category: Behavior Rules
The Block action now includes the MESSAGE option in Content Sharing rules, previously limited to Activity rules and certain Agent Schedule rules.
This upgrade allows for clear communication with users by providing instant feedback on why their action is blocked. This reduces confusion and reinforces company policies during critical tasks.
Automatic Update Channels (Cloud)
Category: Deployment
Update channels to schedule automatic deployments of specific Agent versions. Choose which versions are applied to different computers for better control. Easily delay updates on specific machines for compatibility while keeping others current. Updates happen during a set timeframe to minimize disruption for end-users.
For more technical information, check out the Settings > Autoupdate section of the User Guide.
OCR Mining Information (Cloud)
Category: Settings
We’ve enabled the OCR tab on the Settings screen on Cloud deployments.
The screen will show when the OCR data was last mined and the current mining delay (how long it takes for the OCR engine to process text on the video recordings).
Previously, the OCR mining information was only available for On-Premise deployments.
Having this information will help you understand why the OCR search might not return the expected results and identify any potential issues (e.g., higher screen activities than normal).
Support for External Users Options on the Employee Profile (Cloud)
Category: Employees, Integration
If you have Active Directory integration set up, the External user and Don't synchronize from LDAP options will now be available on the employees’ profiles. Previously, these options were only available on the On-Premise deployments. These options will help you control how the users are synced with the Active Directory.
For more information, check out the Employees > Account Information section of the User Guide.
[Mac] Support for the Edge Browser
Category: Monitoring, Behavior Rules
Previously, the Mac Agent supported Safari, Chrome, Brave, Firefox, and Opera browsers. Now, support for the Microsoft Edge browser is added extending the monitoring and behavior rules capabilities covering most of the major browsers on Mac.
Browsing activities will be available on reports like BI Reports > Applications & Websites, Monitoring > Web Pages & Applications, etc. The browser will also be detected on Webpages-based rules.
[Mac] Support for Proxy Certificate in Edge Browser
Category: Monitoring, Behavior Rules
In Mac Agent 24.47, we introduced support for the Edge browser, allowing you to track common web activities and use some of the Webpages rule’s criteria.
Now, the Teramind Proxy Certificate (SSL injection) will be supported on the browser.
This will allow you to monitor secure web activities and use Webpage URL and Request Type criteria in Webpages rules:
The default name of the Teramind proxy certificate on Mac is, “Internet Widgits Pty Ltd”. However, you can change it by following the instructions here.
[Mac] Support for Remote Troubleshooting
Category: Computers
We have introduced support for the Remote Troubleshooting feature on Mac. You can launch the remote troubleshooting window by clicking the TROUBLESHOOTING button on the Computers > Computer’s Details screen.
The remote troubleshooting feature allows you to troubleshoot a computer and collect diagnostics logs. This feature allows you to troubleshoot from the dashboard instead of accessing the computer locally or through a separate remote session (such as TeamViewer). It works without interrupting the Agent or revealing the troubleshooting to the user.
Note that the EMPLOYEES field is currently not supported on Mac. Even if specific employees are selected, logs will be collected for all computer users.
For more information about remote troubleshooting, check out the Computers > Remote Troubleshooting section on the User Guide.
Improvements
Improved Detection of Payment Cards
Category: Behavior Policies & Rules
We’ve updated the detection mechanism for financial data, especially how payment card information is recognized - Bank Identification Number (BIN) identification has been improved.
The Agent can now detect 2.8 million identification types, resulting in greater accuracy when using the Predefined Classified Data > Financial Data in Content Sharing rules, like the one below.
Self-Unlock for Admins
Category: Employees
Administrators can now unlock themselves from the Employee Action Menu.
Previously, if an administrator got locked due to the “Lock” action by another administrator or due to the “Lock Out User” rule action, they wouldn’t be able to unlock themselves. This will make it more convenient for administrators to manage their access.
Ability to View Screen Recordings of Deleted Employees
Category: Session Player
Previously, if you deleted an employee and tried to view their past screen recordings, you would get an error, “Can’t load video” on the Session Player.
Now, the video will play as usual.
This will allow you to investigate a deleted employee without restoring them. In some cases, you don’t want to restore an employee but still want to access their records. For example, the employee has already left, and you don’t need to monitor them. Or you already reassigned the license to another employee and restoring them will go over your license limit. You don’t want to restore the employee in both cases but still need to access their video recordings for investigation or compliance purposes.
Validating SSO XML Export
Category: Settings
The system will now automatically disable the EXPORT AS XML FILE button under the Single Sign On Authentication section on the Settings > Security screen if the settings aren’t saved after changes, or the settings contain any invalid value.
This will help prevent misconfigurations and any potential errors arising from invalid XMLs.
Camera Usage Tracking for MS Teams
Category: Monitoring
Added support for MS Teams in Camera Usage reports allowing you to track video conferences in granular details.
Improved OCR Mining and Storage
Category: OCR
We have improved the OCR mining process so that it will handle the cache better, eliminate duplicate indexes, and reduce storage usage overall.
Performance Improvements
Category: Monitoring
Improved performance while using conference tools like Zoom, Slack, MS Teams, etc. enhancing the user experience.
Optimized Windows Event Processing
Category: Monitoring
The Agent now processes window activities only when a change event is detected, reducing unnecessary operations and improving system performance.
Enhanced File Size Detection for WeTransfer
Category: Behavior Rules
We’ve optimized how the Upload File Size criterion is evaluated in Files behavior rules, ensuring accurate rule triggers for WeTransfer. This improvement enhances your ability to monitor and enforce file-sharing policies with precision.
Enhanced File Size Detection for TransferNow
Category: Behavior Rules
The Upload File Size criterion in behavior rules is now more accurate, ensuring precise enforcement of file-sharing policies, especially for TransferNow.
Seamless Integration with the New Zoom Web API
Category: Monitoring
We’ve adapted our platform to align with the latest Zoom API updates, ensuring all Zoom messages are accurately captured and reported in Monitoring > Instant Messaging and BI Reports > Instant Messages. Stay ahead with comprehensive communication tracking.
Improved Island Browser Tracking
Category: Monitoring
Web activity tracking for the Island browser has been refined, ensuring accurate reporting in Monitoring > Web Pages & Applications and BI Reports > Applications & Websites. This ensures you have full visibility into user activity across all browsers.
Upgraded Screen Capture Performance
Category: Monitoring
We’ve enhanced the handling of locked sessions to ensure continuous video history, even when the screen is locked. This ensures no gaps in visibility, improving session review and security.
Update Access Control Policy
Category: Access Control
Shared Lists are now removed from the Privileges to list when creating or editing an Access Control Policy. Since you cannot create shared lists for users or departments anyway, removing them from the Privileges to list will make it cleaner and more relevant.
Better Handling of Large AD Groups
Category: Active Directory
The Remote Deployment Dashboard will now process large AD Groups more efficiently.
This will improve the UI performance and prevent the webpage from freezing or getting locked in some browsers.
Support for TLS 1.3
Category: Security
What’s New: We’ve added support for TLS 1.3 protocol with TLS_AES_256_GCM_SHA384 cipher to the Teramind Server (terasrv).
This improvement enables higher security and performance while ensuring compatibility with proxy servers like Zscaler, which requires both integration parties to support specific protocol and encryption standards.
Support for Email Addresses with the ‘+’ Symbol
Category: Web, API
Email addresses containing a ‘+’ (plus) sign are now supported both for the web interface and API endpoints. For example, you can now use an email like “[email protected]” when creating an employee or use it with /tm-api/token.
This will allow you to use special email addresses without encountering any errors.
Updated Notification Email
Category: Alerts
The alert notification email will now render large URLs in a better format.
Optimized Load Balancing
Category: Deployment
We changed how the upstream servers are connected so that the load balancer can better optimize the use of history servers.
Improved Support for Azure Government Cloud
Category: Deployment
External Blob storage containers are now supported on Azure Government Cloud. This will provide more flexibility when using storage buckets.
Updated Nginx Cypher Suite
Category: Security
Nginx configurations suite is updated to support the ECDH protocol allowing for a more secure server configuration.
Better URL Handling
Category: Deployment
We’ve updated the Nginx configuration to properly handle URLs for the agent installer/uninstallers. This will enable on-premise users to use router ports as an alternative method of downloading.
Extended Agent API Endpoint
Category: API
The GET methods of the /tm-api/agent and /tm-api/agent:id endpoint responses are updated to include the Last Login Time (last_con_time) and Last Login From computer ID (last_con_computer_id) extending the API capabilities and giving you access to more information about users’ login sessions.
API Cleanup
Category: API
We have removed all EOS/deprecated endpoints, preventing any potential improper neutralizations.
[Mac] Application Title Monitoring Support
Category: Monitoring and BI Reports
Application titles will now be displayed in the Monitoring > Web Pages & Applications and BI Reports > Applications & Websites sections.
This improvement enables you to track open application windows, websites, and documents with greater visibility.
[Mac] Improved Event Processing
Category: Monitoring
We have improved the processing of Windows events so that issues like lagging in the Opera browser when scrolling bookmarks will be prevented.
[Mac] Enhanced Auto-Update Functionality
Category: Update
The auto-update downloader now automatically resumes failed downloads, ensuring a smoother and more stable update experience, particularly on slower network connections.
[Mac] Adding Support for the Auto Wakeup Event
Category: Monitoring
The Screen > RECORD LOCKED SESSION monitoring setting is updated to account for the macOS Wake for network access option being turned on. The Agent will no longer try to reconnect to the server or record activity during such an event. This will ensure accurate activity rate and session time calculation and prevent screen recording gaps when the computer wakes up periodically due to network activities.
[Mac] Better Handling of the Session States
Category: Monitoring
The Stealth Agent will now handle different session states such as the lock and sleep states intelligently to optimize activity monitoring, and network connectivity and prevent the Agent from quitting unexpectedly.
[Mac] Updated Uninstaller for macOS Sequoia
Category: Deployment
The Uninstall Script is updated so that on the macOS Sequoia (version 15.1); after uninstalling the Stealth Agent, all related screen and audio recording permissions will be revoked, and no further permission requests will occur.
Other Updates
Accurate Total Time Calculation in Behavior Rules: Applications rules that are based on total time (e.g., Total Time Active, Total Time Idle, Total Time Focused) will now accurately sum up the time spent on all specified applications and trigger the rule once the total time exceeds the defined threshold.
Complete Records Deletion: Deleting time records from reports like the Time Cards will now remove all the selected time slots, resulting in better records management.
Better Time Cards Report: Fixed two issues with Time Tracking > Time Cards report: missing columns on the DAY tab and incorrect start day on the WEEK tab.
Improved BI Filtering: The BI filtering mechanism is improved so that the LDAP Attributes filter will be properly applied to automatically exported (BI Reports > Export > Scheduled Export) PDF reports.
Accurate Display of Function Keys: Function keys (like F1, F2) are now hidden when the "Hide Symbols" option is selected in Monitoring and BI reports, providing a cleaner, more streamlined report view.
Correct Labels in OMNI: Previously, OMNI would label all insights with “Falsification occurred…” text. Now, it will label them correctly.
Improved RBAC Permissions: The RBAC permission is improved so that a user with the right RBAC permission will be able to stop the web tracker (Time Tracking > Tracker) of another user under their supervision.
Better Access Control Policy: Users with the right permission will now be able to access the Alerts settings and the remote Deployment report giving you more flexibility in configuring access control policies.
Better Access Control Policy: Employee with the right access permissions will be able to access the custom BI Reports giving you more flexibility in configuring access control policies.
Improved Handling of Role Changes: The Role column on the Employees screen will now properly update if a user is reassigned from an access control-based role (role assigned through the Configure > Access Control screen) to a built-in, account-based role (e.g., Administrator).
Better Admin Control: Admin will be able to edit the Monitoring Profiles without incurring any errors.
Updated Daily Digest Emails: Daily Digest emails will be sent according to the local time zone set on the Dashboard instead of UTC. This will ensure the correct delivery timing of the email.
Special BI Reports Exports: Scheduled BI Reports with the LDAP Attributes filter will now correctly send the export email with complete details.
Accurate Activity Tracking: Fixed mouse/keyboard events not being captured in some cases after Windows session resumed from unlock/sleep/hibernation.
Accurate Alerts: Fixed activity rule generating multiple alerts for a single file upload.
Uninterrupted Video Playback: Resolved "Video Error" message shown on the Session Player instead of playing the video.
Support for Shared Lists in Network Host: Resolved an issue that prevented the use of Shared Lists in the Network Host criterion of Files rules.
Enhanced Exclude Condition for Shared Lists in Network Host: Improved functionality to ensure that IPs listed under the EXCLUDE condition in the Files rule are now correctly handled, enhancing accuracy.
Correct Detection of Recording Disks: The system will now properly detect a second mounted volume instead of showing “No recording volume found” error message.
Correct BI Data Sync: BI Reports are now properly synced so there will be no missing data on the reports.
Content Sharing Rule Accuracy: Content Sharing behavior rules are improved so that the Agent will not misidentify download events as uploads, eliminating false positives.
Screen Capture Reliability: Improved screen capture so that the Screen Snapshots report will not get stuck or make video recordings inaccessible in the Session Player.
Expanded Detection of File Downloads: Detection now includes websites with non-standard download methods, providing better oversight of file-download policies and increasing security.
Optimized Screen Recording Performance: Screen recording mechanisms, both regular and modern, have been optimized to boost performance while reducing CPU usage, ensuring smoother operation.
Proper Encoding of Exported Videos: Exported videos now have the correct duration, with perfectly aligned audio and video streams, resulting in smoother playback and optimized MP4 files.
Better Employees Report: Fixed a selection bug on the Employees report that would cause the previous selection to remain active when applying filters.
Improved Loading of Settings: We have improved the loading mechanism of the Settings screen so that the different sections will now load separately depending on the tab. This will prevent page timeouts and load failures.
Notification Report/Integration Cleanup: SIEM integration is improved so that there will no longer be any empty rows on the Notifications report.
Improved Offline Notification: The NOTIFY WHEN OFFLINE option under the Computer’s Settings window will now correctly send email notifications when a computer is offline.
Improved Agent Update Process (On-Premise): The update process now avoids configuration file corruption during deployment via the Dashboard or command line. On-premise customers will enjoy smoother, more stable updates with reduced downtime.
Support for Custom Directory During Agent Auto-Update: The auto-update process now accurately detects custom installation directories (TMROOTDIR), ensuring seamless, error-free updates for cloud customers.
Optimized OCR Mining: When the OCR monitoring option is off, screen recordings are no longer processed, improving CPU efficiency and boosting overall performance.
VDI Connectivity: Improved connectivity in VDI environments so that there will be no random drops in connections.
Enhanced Protection for HA Cluster: The Redis database will now support password protection for multi-node deployments.
[Mac] Correct Detection of Secure Sites: Fixed an SSL detection bug that would cause all secure websites visited on the Chrome and Brave browsers to be shown as HTTP URLs on the Monitoring > Web Pages & Applications and BI Reports > Applications & Websites reports.
[Mac] Better Monitoring Exclusion: The Agent will no longer ignore the Applications > SUSPEND MONITORING WHEN THESE APPLICATIONS ARE USED monitoring setting and stop capturing activities and screen recordings for the suspended apps.
[Mac] Better Lock State Monitoring: The Agent will refrain from tracking webpage activities when the computer is locked.
[Mac] Accurate Activity Measurement: Mouse wheel tracking will work correctly to avoid any abnormal activity levels being reported on monitoring reports.
[Mac] Enhanced Task Sync for Revealed Agent: The "Refresh tasks" feature now ensures tasks sync seamlessly from the server, even with the Search filter applied, preventing missing tasks and boosting user efficiency.
[Mac] Correct Crash Dump Folder: Fixed a bug that would cause crash dumps to be saved in the wrong location.
[Mac] More Accurate Auto-Updates: We’ve improved auto-updates by including the instance parameter in the update request URL, ensuring the Agent applies the correct update for your system.