ISL Conference Proxy 4.4.2424.78 New Features
Faster Remote Desktop with Cloudflare Calls and Google STUN
The latest update to ISL Conference Proxy (ICP) optimizes remote desktop performance through improved ICE functionality, enabling faster and more efficient connections with expanded connectivity options.
By default, direct connections will use the Cloudflare Calls STUN address.
ICE functionality has been updated in ISL Conference Proxy to support Cloudflare Calls and Google STUN. The following updates were made:
- “List of ICE servers for RPC” setting under
/conf -> ICE Configurationnow defaults to:{{google}}, {{cloudflare}}, {{turn_servers}}. - “Use Cloudflare Calls STUN Address” is enabled by default, so direct connections will use the Cloudflare Calls STUN address when the ICE server list includes
{{cloudflare}}. - “Use Google STUN Addresses” is disabled by default. When enabled, direct connections will use Google STUN addresses if included in the ICE server list.
The DB settings section has been renamed from “Cloudflare API Settings” to “Cloudflare Spectrum API Settings”. Error levels when Spectrum query credentials are not set have been reduced, and faster queries for Spectrum credentials are now performed.
Notify user about email or password change
ISL Conference Proxy now supports sending email notifications to users when their email or password is changed (whether by the user, a domain admin, or a server administrator). New server and domain-level settings have been added under /conf -> Configuration -> General -> Mail -> Templates, allowing you to customize email templates:
- Account name: This setting allows you to personalize the service name that appears in the email subject and body. For instance, the subject could display “[Account Name]: Reset Your Password”. If no name is specified, the installation or server name will be used, in that order of priority.
- Customer service URL: Define a support URL (e.g.,
www.support.company.com) or an email address (support@email.com) to use as the[customer_service_url]parameter in system emails. By default, this parameter is only included in the “Email Change Notification” template, but it can be added to other emails. If you don’t want to include a customer service URL, leave this field empty. - Password change notification: When enabled, users receive email notifications when their account password is changed. These notifications do not include the new password for security reasons. If disabled, users will not receive any notifications for password changes. This setting is enabled by default.
- Email change notification: When enabled, users are notified when their account email is changed. These notifications help users stay informed about unauthorized changes. If disabled, users won’t receive any notifications for email changes. This setting is enabled by default.
- Mail template for password change notification
- Mail template for email change notification
Additionally, existing email settings have been reorganized into new groups, renamed, and enhanced with updated descriptions.
Email change notification > Password change
A new log subsystem, [Core] Change User Email (User Action), was added to record user email changes (whether by the user, a domain admin, or a server administrator).
Add icon for mobile platforms in computer and sessions list
Support has been added for displaying a mobile platform status icon for computers. When the platform is “Android”, a mobile icon is shown for connection status. If all connected clients are mobile, a mobile icon will be displayed, otherwise, a computer icon will be used. The icon for the number of connected clients has also been updated.
ISL AlwaysOn – ISL Light integration has been modified so ISL Light reports the operator’s platform.
ISL Conference Proxy > Sessions
Icons on the Sessions page have been updated as follows:
- Icons now adjust based on the client/operator platform.
- Sessions in the “Waiting for Client” state now display the operator’s icon (mobile/desktop).
- Sessions in the “Waiting for Operator” state now show the active icon (previously a grey icon).
File type check for web-based uploads
A file type check was added to ISL AlwaysOn for remote file uploads and downloads via the web. If a file type is not allowed, uploads or downloads will fail. Blocked and allowed file extensions are defined by the existing settings: “Blocked file extensions for user upload” and “Allowed file extensions for user upload”.
Configurable password history
A password history feature was added, preventing users from reusing recently used passwords. The default history size is 24 passwords, with a maximum of 100. Password history is updated only when users change their own passwords; administrative changes do not affect it. When a new password is added, older entries are removed to maintain the defined history size.
The following settings were added under /conf -> Security -> Password:
- Password history size: Specifies how many of a user’s recent passwords will be stored. Default: 24.
- Maximum password history size: Upper limit for the password history size. Default: 100.
- Minimum password age: Defines the minimum time between consecutive password changes. Default: not set.
- Password expiration interval (renamed to “Maximum password age”): Sets the maximum time allowed between password changes before the user is forced to change their password. Default: not set.
Emphasize join session warning
The warning “Only join sessions with people you recognize and trust!” has been emphasized across all session types (ISL Light, ISL AlwaysOn, ISL Groop), including older versions of the session pages and the mobile join page.
ICP > Join Page > Thank you for downloading (Client)
Customization .zip upload support
Support for uploading customizations as .zip files was added. The .zip must contain a manifest.json file and customization files (files listed in the manifest), following this format:
{
"type": "customization",
"name": "my_customization",
"default": "1", //This is set to 1 only if you want to apply this customization as default server wide
"spec": [
{
"key": "program_setting::ISL+Light::grid_nice_name::system",
"value": "Example ICP Grid"
},
{
"key": "program_setting::ISL+Light::icon",
"value": "icon.png"
}
]
}Limit GRID file transfers file size
File transfers via GRID storage are now limited to a maximum of 256 MB. Attempting to transfer files larger than this will fail.
Android Device Limit
A new setting, “Maximum number of owned remote access Android devices within a domain”, was added to limit the number of Android devices that can be owned for remote access within a domain. This setting can be found under /conf -> ISL AlwaysOn -> Owned Remote Access Devices Limit.
If users attempt to add more Android devices than allowed, an error message will appear, indicating that the maximum number of owned devices has been reached. Note that Android devices shared with the user do not count toward this limit.
Minimum window size in ISL Pronto
New settings for ISL Pronto have been added to enforce a minimum size for the browser chat window. The new settings are:
- Minimum chat window width: This setting specifies the minimum width of the chat window in pixels, including the width of the vertical scroll bar (if present). It excludes any toolbar, window chrome, or resizing borders/handles. The chat window will automatically resize to this minimum if reduced below the set width.
- Minimum chat window height: This setting specifies the minimum height of the chat window in pixels, including the height of the horizontal scroll bar (if present). It also excludes any toolbar, window chrome, or resizing borders/handles. The chat window will automatically resize to the minimum height if reduced below this size.
Use consistent subjects in ICP system mail
The email subject prefix “ISL CP” has been replaced with “ISL Conference Proxy” for consistency. Subsystem emails now include the prefix “ISL Conference Proxy: “ to ensure uniformity across all emails.
ICP Go TLS Client
TLS client support with public certificate checking using the trusted system certificate store has been added. Two features were introduced:
- A new SMTP connection type, “SSL/TLS”.
- existing types were renamed to “STARTTLS without certificate check” and “SSL/TLS without certificate check”
- Existing types were renamed to “STARTTLS without certificate check” and “SSL/TLS without certificate check”.
Additionally, the Map Path to HTTP Backend now includes the option ssl=1 to enable HTTPS (e.g., {path=/test123&remote=www.google.com&ssl=1}).
Added Authorization header to HTTP event sender
A new setting, “Global HTTP Events Authorization Bearer Token”, was added under /conf -> Integration. Similarly, the “Per-domain HTTP Events Authorization Bearer Token” was introduced in the domain settings. When set, the Authorization header will be added to HTTP event senders with the value Bearer VAL, where VAL is the value of the setting.
Require Windows 10 / Windows Server 2016
The minimum required version for running ISL Conference Proxy on Windows has been raised to NT 10.0, meaning Windows 10 or Windows Server 2016 is now required.
Introduce new web version v2400 and switch default to v2400
A new web version, “v2400”, has been introduced and is now the default. Web pages from version v2200 were copied to v2400.
Update database to GeoLite2-City 2024-11-01T16:05:45Z
Updated GeoIP to use the database GeoLite2-City 2024-11-01T16:05:45Z.
Upgrade OpenSSL to 3.0.15
OpenSSL was updated to 3.0.15, osslsigncode tool was updated to version 2.8.
Upgrade to Go 1.22.1
Go was upgraded to 1.22.1.
Upgrade to libxml2 2.12.9
Libxml2 was upgraded to version 2.12.9. Libxslt was upgraded to version 1.1.40.
Bug Fixes
Bulk delete of computers in computer group
In previous versions, bulk deletion of computers was not allowed if some computers were shared. This has been redesigned—deletions are now performed in a loop, and failed attempts are tracked. If a computer cannot be removed due to insufficient permissions, its name will appear in the error message. If all succeed, a success message will be shown.
The defect was fixed.
Do not show computer or computer group owner in the list of shared users/user groups
In previous versions, the computer owner was shown in the “Share Computer” modal under the “Selected” tab. The owner is no longer shown in the “Selected” tab and is disabled in the “Users” tab. The “Selected” table now displays “No results” when the computer or group is not shared with any users or groups.
The defect was fixed.
Users and user groups lists does not load additional items when bottom of list is reached
In previous versions, the list of users did not always load fully when sharing groups. This has been redesigned to ensure additional items load when the bottom of the list is reached.
The defect was fixed.
Show actual reason for killed session instead of generic concurrent error
In previous versions, when an ISL Light session was terminated before starting, a generic error message indicated that the concurrent limit was reached. The error message has been redesigned to display the correct reason for the termination, such as being terminated by the user or server.
The defect was fixed.
Administration – Use FixPublicCodeAPI
In previous versions, creating external groups did not set the public code, causing the group to be invisible in the Administration pages. This has been redesigned so that public codes are always set.
The defect was fixed.
Operator end chat permission
A new setting was added to allow or disallow ISL Pronto operators to end chats. The new setting is “Allow operator to end chat”.
Other fixes & improvements
Security updates, bug fixes, added missing translations, and log improvements were made to enhance stability, security, and performance.
ISL Light 4.4.2332.92 for Android 
ISL Light Integration 1.0 for Freshdesk by Freshworks 
ISL Light Client 4.4.2332.59 
ISL AlwaysOn 4.4.2332.78 