Meet Us at Gartner® Security & Risk Management Summit | 10-11 March 2025 | Grand Hyatt, Mumbai | Booth 319
Meet us at Gartner® Security & Risk Management Summit  | 10-11 March 2025 | Grand Hyatt, Mumbai | Booth 319

Update Version 5.4.0

Sectona continues to build robust access security with the release of PAM version 5.4.0. The latest update brings a host of new features and improvements designed to enhance functionality and security across various modules.  

With these updates, Sectona aims to provide a smoother, more efficient experience for users and PAM administrators alike. Below is a detailed overview of what’s new in this release. 

Important!
  1. Please note that the Sectona Authenticator is no longer supported, and respective apps on the Play Store and the App Store have been removed.
  2. The support for PAM v4 releases will end on December 31, 2025.
Asset Management Updates

Support has been added for Unix-based asset types to customize the asset-level username format specifically for domain-based Active Directory (AD) accounts.

Configuration Enhancements
  • A new option in the Appearance settings enables CAPTCHA on login and forgot password screens after a set number of failed attempts, enhancing security.
  • A configurable watermark in Video Export Parameters allows exporting session video logs with logos and timestamps.
  • A new configurable feature displays the framewise recording timestamp on exported session video logs.
Discovery

The system now includes a feature to discover SSH key pairs from Unix/Linux-based servers. It searches defined locations, including the user’s home directory, to find public and private keys, simplifying the management and discovery of SSH credentials. 

Notification Features

  • Notifications have been added to alert users about the commencement and completion of asset and account discovery and inform administrators about the discovery processes’ status.
  • A new notification feature triggers email alerts when a configured session time limit is exceeded. This helps monitor session durations and maintain compliance with organizational policies.

Policy Management Updates 

The Active Mapping page now includes a feature to display detailed information about the mapping type and its status. 

Reports and Dashboards 

  • Users can now edit user-defined dashboards, providing more customization options for reporting and monitoring.
  • A new report is available to view discovered SSH keys for detailed insights into SSH key usage and configuration.
  • The introduction of a “User Session Trail” report allows administrators to view historical data of session video logs, including details of played and exported logs.
  • The Asset and Account Reports now include a “Last Session On” field, providing a useful reference for tracking the most recent activity of each asset or account.

Satellite Vault Features 

Satellite Vault now supports synchronizing certificate—and secret-based account credentials, which were introduced in previous versions. 

Session Management Enhancements 

  • A new feature allows the Session View page to display details about the access type, providing more transparency on session configurations.
  • The system can now create session history logs, which help track and audit session activities for better accountability.
  • New configuration options for user access policies now allow the redirection of USB, sound, audio (mic), and SmartCard devices during launcher-based RDP sessions.
  • A feature has been added to configure a centralized video log server to store session video logs on one of the application servers, especially when multiple application and application proxy servers are in use.

System Performance & Security Updates 

  • The ability to archive video logs on AWS and Azure cloud storage has been added. This feature allows video logs to be stored in the cloud, with online playback disabled to ensure secure handling and retrieval.
  • New popup notifications alert administrators when the HA or DR vault node is out of sync, improving awareness and prompt action in high-availability setups.
  • The latest SSH protocol ciphers are now supported for user sessions and password rotation processes, enhancing security and encryption standards.
  • The MyAccess page has been redesigned for improved server performance, reducing memory utilization for a more efficient user experience.
  • Optimizations in the launcher API communication with the Vault server have reduced CPU and memory utilization, boosting overall system efficiency.
  • A new “Session Video Log” permission has been added under the Session Management role. This permission allows users to manage and control access to session video logs for security and compliance.

User Management Updates 

A feature has been added to assign a product license to new users during onboarding, either manually or through bulk import, simplifying licensing management. 

Workflow Enhancements 

  • Users can now view previous parameters (before modifications) of assets, accounts, and users within the maker-checker approval interface. This ensures approvers have complete visibility when making decisions.
  • Support for maker-checker functionality has been expanded to approval users with only platform configuration permissions, ensuring more flexible approval workflows.
  • A new feature has been added to the Approval Log, displaying whether changes were “Approved by Peer” or “Rejected by Peer.”

DevOps Secrets Management (DSM) 

  • DSM now supports the addition of an External Vault as an option within a secret group.
  • Integration with external password vaults has been added to allow requesting secrets from DSM, which are stored and managed by a password vault, providing broader support for enterprise security solutions.

General Updates 

  • A new configurable option allows the system to automatically close the launcher application after a target asset session is disconnected.
  • The “Remote Session Host” component has been deprecated and removed, with its functionality now integrated into the “Route Over Browser Sessions” for better browser access support.

For more information about Sectona product version 5.4, please visit our documentation portal and release notes.