Linux

Linux agent 9.0.0.832

April 24th, 2024

New Features:

• The Perimeter 81 agent is now rebranded to Check Point - Harmony SASE. This includes new logos and a new color scheme.
• Secure Web Gateway (SWG) now includes Malware Protection. SWG users now have an additional layer of protection against malicious software, on top of the existing web filtering functionality. Malware Protection actively scans content before it reaches the user's browser, blocks multiple types of threats, and notifies the user. Admins can view logs of blocked malware in a new page under the Monitor & Logs section.

Enhancements:

• The agent supports the new European Data Residency instance of Harmony SASE, launched earlier in April. The data residency region can be configured when installing the agent using a new 'region' parameter, or by switching to it from the platform sign-in page when signing in to the agent.
• The agent now reports the exact Linux distribution (i.e., Ubuntu 23.04) in the Device Inventory page. Also, the agent version number now has a lin_ prefix to align the versioning with the other operating systems.

Resolved Issues:

• P81-37246 - Agent not displaying DPC failure notifications
• P81-34266 - SWG bypass rule not being respected
• P81-40066 - Issue connecting to shared networks with openVPN protocol
• P81-41876 - RHEL & Fedora - issue connecting with split tunneling enabled

Linux agent 8.1.0.778

Download Now

Nov 23rd, 2023

Enhancements:

• Deprecated IKEv2 protocol as a method of agent connection and removed it from the agent UI.

Resolved Issues:

• P81-24634, P81-26185 - Agent is stuck while connecting
• P81-26613 - Connection takes too long
• P81-27881 - Agent disconnects and connects constantly
• P81-27963 - Agent crashes after 8 hours
• P81-28239 - Unable to connect to network until restarting helper service + crashes
• P81-29403 - Agent is failing to launch on Fedora 38
• P81-28797 - When returning from sleep, agent does not reconnect to VPN
• P81-34181 - Issue when updating UI to latest version on RHEL

Linux agent 8.0.4.735

Resolved Issues:

• P81-16355 - Permission denied while trying to write a log file
• P81-18631 - The startup icon disappears after upgrading, on Ubuntu 20.04
• P81-18780 - A black screen is displayed upon return from Quit option to to Settings/Networks, on Fedora
• P81-19535 - The agent is stuck on connecting when moving from a private to a public network while connected via IKEv2 protocol
• P81-19562 - The agent is unable to connect to network with Wireguard protocol, on RHEL
• P81-19758 - The user is not logged back in after performing an upate using apt-get install
• P81-22823 - The agent is stuck on connection. Once connected, it displays the public IP of the ISP instead of the Gateway IP

Linux agent 8.0.4.719

ֿ
New Features:

• The agent can now remain connected while P81 SDP backend is restarted/offline, for better connection stability

Enhancements:

• Refactored VPN module and SDP connection for better connection stability.
• In the Protocols section, relabeled 'Automatic' protocol to 'Default'
• Improved mechanism for fetching Public IP

Resolved Issues:

• P81-8414 - Issue refreshing SWG Web Filtering rules
• P81-15126 - Error events are sent without build version
• P81-16235 - Agent does not connect back to Active gateway after trying to connect to Inactive one
• P81-17086 - Agent can't connect to network via ikev2 protocol
• P81-17087 - Getting JS error while trying to connect to network via OpenVPN protocol
• P81-17337 - Managing user's active devices - after 'log out' for a specific active session, console gives an error and Internet connection is not working
• P81-17621 - Daemon error in terminal while disconnecting from the network
• P81-17622 - Fixed round robin logic for SDP IP manager
• P81-18391 - Running docker compose causes the network to disconnect
• P81-18468 - Ubuntu - After update the agent doesn't seem logged in to the tenant
• P81-18471, P81-18474 - Error while trying to connect to network
• P81-18505 - perimeter81helper.log is missing from the /var/log/ folder
• P81-18536 - The app doesnt start on startup with AntiVirus enabled on startup
• P81-18800 - SWG certificate installed even though SWG was not enabled
• P81-18914 - Agent Tray logic isn't resolved properly on ubuntu os
• P81-19025 - Agent is not working on Ubuntu 22.04 LTS (Stuck on loading screen)
• P81-19139 - Disconnecting the agent from the network on a physical device causes the internet connection to stop working
• P81-19229 - Stopping and restarting wifi, the agent network is stuck on connecting
• P81-19417 - Agent stuck on reconnecting when changing to wired connection

Linux agent 8.0.3.654

New features:

• Added 'Quit' button to the agent's quick-UI for easier access
• Added 'Reset Agent' button to the loading screen if it does not connect within 60 seconds
• Added 'Reset Agent' button to the full UI (under the Support tab) to provide the ability to reset the agent at any time

Enhancements:

• Agent version is now displayed before login, for easier troubleshooting
• P81-13068 - Refactored Round Robin logic when connecting to internal SDP sockets, resulting in a more stable agent
• P81-12930 - Agent SWG library improvements, resulting in more stable agent

Resolved Issues:

• P81-13422 - resolve.conf reverts back to local DNS after disconnecting from client
• P81-13263 - Possible command injection vector via DPC

Linux agent 8.0.2.628

New features:

• Agent sign-out brute-force prevention

Enhancements:

• P81-7848, P81-7849, P81-7850, P81-7851, P81-7852 - Internal logging improvements

Resolved Issues:

• P81-12211 - SWG: Rules do not block traffic
• P81-11533 - SWG: Fixed handling of invalid certificates from server
• P81-12518 - Agent logged out after machine shut down
• P81-12794 - Agent 'Collect Logs' button fails to collect logs
• P81-13328 - Wireguard protocol issues on Redhat / Fedora distributions
• P81-11883 - Agent crashed on Ubuntu 22.04 running proprietary nVidia drivers
• P81-12283 - Failure to lunch agent on Ubuntu 18.04 and lower

Linux agent 8.0.1.592

New features:

• Added support for Secure Web Gateway (SWG)
• Disable Sign-Out (enforce Always On) - this feature is being gradually rolled out and will be available to all customers in a few weeks. Requires this version of the agent and above.
• The Quit button has been re-added to the agent extended UI, allowing users to shut down the agent application and the Harmony SASE service in case they need to.

Enhancements:

• Better handling of SAN field in certificates via new SDP endpoint
• Changed MTU for Wireguard to 1380 to improve connectivity in low-MTU scenarios

Resolved Issues:

• P81-8118 / P81-8118 / P81-2265 Agent disconnects unexpectedly
• P81-4038 Agent disconnects as helper tool does not load
• P81-7809 Failed to connect after a device restart - Wrong packet length
• P81-6362 Agent stuck on connecting and is unable to connect
• P81-5621 User unable to connect with Ubuntu
• P81-4792 Connection delay after the sleep period
• P81-3727 Improved message when the session ends and the user is logged out
• P81-7565 Events filling up Syslog
• P81-7502 Sign in button isn't clickable
• P81-4872 Mass amount of phantom 'IP monitor' Processes
• P81-2269 Linux agent deployment on Arch Linux distribution
• P81-3977 Remove legacy Collect Logs action
• P81-3286 P81 When there are no available licenses, no error message is shown when attempting to login
• P81-6864 Logs export - log file doesn't have 100MB limit

Linux agent 8.0.1.520

Enhancements:

• Added support for Secure Web Gateway (SWG)

Resolved Issues:

• P81-8118 / P81-8118 / P81-2265 Agent disconnects unexpectedly
• P81-4038 Agent disconnects as helper tool does not load
• P81-7809 Failed to connect after a device restart - Wrong packet length
• P81-6362 Agent stuck on connecting and is unable to connect
• P81-5621 User unable to connect with Ubuntu
• P81-4792 Connection delay after the sleep period
• P81-3727 Improved message when the session ends and the user is logged out
• P81-7565 Events filling up Syslog
• P81-7502 Sign in button isn't clickable
• P81-4872 Mass amount of phantom 'IP monitor' Processes
• P81-2269 Linux agent deployment on Arch Linux distribution
• P81-3977 Remove legacy Collect Logs action
• P81-3286 P81 When there are no available licenses, no error message is shown when attempting to login
• P81-6864 P81 Logs export - log file doesn't have 100MB limit

Linux agent 0.2.28

Fixed issues:

• OpenSSL 1.0.2g used in Linux client binaries P81-1614
• Linux Agent deb. DPC. DPC error still exists even if we log in with positive DPC rules and then logout P81-2793
• Linux Agent deb. DPC. DPC error message isn’t changed when we change DPC rule. P81-2794
• Linux Agent deb. TWN. The agent doesn’t connect to VPN when we move from Trusted Network to Untrusted. P81-2807
• Linux Agent deb. TWN. Web client. Disabling the main toggle of TWN doesn’t trigger the agent to use AlwaysOn mode P81-2808
• Linux Agent deb. AlwaysOn reconnects Wifi<->4G Ikev2 protocol. The agent doesn’t connect to VPN while connected to 4G hotspot via Ikev2 protocol. P81-2809
• Linux Agent deb. Ikev2 protocol. Agent can’t connect to VPN when we disconnected and then reconnected to network P81-2810
• Linux Agent deb. Wireguard/IKeV2 protocol. Agent can’t connect to VPN when we move from WIFI connection to Wired one. P81-2816
• Linux Agent deb. TWN. Moving from Untrusted network to Trusted does not trigger TWN feature and the agent is still in AlwaysOn mode P81-2827
• P81 Linux deb. Update. Without an Internet connection, the agent should show a proper error message. P81-3031
• Linux Agent deb. TWN. Agent disconnects from VPN after awake from sleep mode. P81-3114
• P81 Linux deb. Networks. English correction and Description fixes P81-3271
• P81 Linux deb. Always-On hover text. Fix the hovered text of Always-On. P81-3272
• P81 Linux deb. Add text description on hovering the ‘Always-On VPN’ lock. P81-3273
• P81 Linux deb. No Error message shown to Azure AD user attempting to log in with agent if there no available licenses in web P81-3286
• Add BI events for latency measurements when connected to GW P81-3292
• P81 Linux deb. Application Upgrade. Forcing the upgrade, the agent starts to download .rpm version. P81-3418
• P81 Linux deb. There is no Description tooltip for almost all ‘Setting’ attributes as on Win Agent P81-3509
• Linux Agent Fedora - agent fails to start after install manually latest version above outdated P81-3617
• Linux Agent Fedora - Private DNS - Private DNS not works P81-3646
• Linux Agent Fedora - The Public IP of the previous network displayed to user P81-3647
• Linux Agent Fedora - DNS filtering - DNS filtering not works P81-3653
• Linux Agent Fedora - Connect On Lunch does not work P81-3658

Linux agent 0.2.28

Fixed issues:

• Linux Agent rpm - Session Expiration - Wrong Error and device displayed as logged in P81-2002
• Handling for ERR_EXPIRED_ADDON SDP error code
• Agent can’t be closed when it can’t find used tenant P81-2423
• Fixes for often reconnects of the agent
• Remove python dependency
• Fixes for rarely happening exceptions

Linux agent 0.2.26

• Redesigned UI
• Automatic silent updates
• Linux Agent rpm - The internal IP displayed in agent is same as Public IP P81-874
• Linux Agent rpm - disabling Always On VPN - Wireguard - connection aborted and not attempt to reconnect when disabling Always On VPN in enforced state in Web P81-904
• Linux Agent rpm - Public/Private - The gateway location displayed wrong in agent P81-872
• Linux Agent rpm - Ikev2 - Reconnect with no end - General Not able to connect P81-1225
• Linux Agent rpm - Ikev2 - User unable to disconnect from VPN P81-868
• Linux Agent rpm - Enabling and enforcing AlwaysOn VPN on Web - Wireguard - Fail to Connect - connection switches between “connecting...” - “connect” P81-1258
• Linux Agent - Ikev2 - Notification of disconnection from network “user switches to” displayed when user change network while connected P81-1356
• IKEv2 reconnecting P81-1377
• Linux Agent rpm - After Autoupdate the app not restarts and stuck P81-1195
• Linux Agent - Ikev2 - No internet access while connected P81-1227
• Linux Agent - Ikev2 - No “Connecting” state when change network while connected P81-1351
• Linux Agent - AlwaysOn - WireGuard - Switching from WIFI to 4G/vise versa - after user change network agent stuck in connection P81-1355
• Linux Agent - AlwaysOn - Ikev2 - Switching from WIFI to 4G - incorrect agent behavior P81-1357
• Linux Agent rpm - Enabled and enforced AlwaysOn VPN on Web and Enforced upgrade - agent not connected P81-1446
• Linux Agent - Error after logout with code P81-1448
• Linux Agent - Ikev2 -Real location displayed and No internet access while connected P81-1451
• Linux Agent - 4g - Ikev2 - Spontaneous reconnects without end P81-1477
• Linux Agent rpm - Disabling Always On VPN - Ikev2/OpenVPN - connection aborted and not reconnects back P81-1493
• Linux Agent rpm - After Autoupdate the app shows “reconnecting” in UI while actually connected P81-1677
• Linux Agent Redesigned - Quit/Sign Out with code - Pressing “Enter” does nothing P81-1683
• Linux Agent Redesigned - First Run - The Private network selected is not first in Alpabetical order P81-1728
• Linux Agent rpm - Upgrade while connected P81-1729
• Linux Agent Redesigned - OpenVPN - Connection not Restored after Split Tunneling Activated/disactivated for network agent was connected to P81-1731
• Linux Agent RPM - Changes in workspace - Logged in user Connects after changes in workspace P81-1735
• Linux Agent Redesigned - Always On VPN- OpenVPN - Agent not reconnects to available network after network deleted P81-1750
• Linux Agent Redesigned - Always On VPN- User not able to Enable Always On in App while he connected P81-1751
• Linux Agent rpm - Automatic WIFI security - logged out user - On connecting to unsecured wifi no notification with “protect me” button shown P81-1754
• Linux Agent rpm - Automatic WIFI security - User Connects back after he manually disconnected from VPN P81-1755
• Linux Agent Redesigned- OpenVPN - Agent reconnects all the time P81-1776
• Linux Agent Redesigned - No “DNS filtering” icon present on Network having DNS filtering enabled P81-1788
• Linux Agent RPM - OpenVPN - Split Tunneled Network - The public IP displayed in agent is not real, but VPNed P81-1795
• Linux Agent rpm - Upgrade while connected - WireGuard - Always ON - Auto Login Fails (internet blocked) P81-1825
• Linux Agent RPM - WireGuard/Ikev2/OpenVPN - Switching from WIFI to 4G/vise versa - after user change network connection while disconnected agent stuck in “connectiing” on attempt to connect P81-1831
• Linux Agent rpm - Automatic WIFI security - After user logged in in app the VPN connection not Auto-Established P81-1839