What’s New in UserLock 12
What's new in UserLock 12.1
- New: Enable MFA and access management for all RemoteApp applications
- New: Configure MFA by session type
- New: Configure MFA frequency for every n minutes/hours/days
- New: Configuration wizard
- Improved: Support proxy for UserLock Anywhere
- Improved: View notification history for UserLock Push
New: Enable MFA and access management for all RemoteApp applications
UserLock is now compatible with all RemoteApp applications (before this, only RemoteApp applications with a desktop were supported). You can protect RemoteApp sessions with all of UserLock’s access management capabilities as well as MFA using all available MFA methods: push notifications, OTP codes and USB keys.
MFA for RemoteApp allows you to reduce lateral movement by allowing you to control which apps users can access via Remote App.
Note: You need to enroll users in MFA before you can apply MFA to RemoteApp sessions. If you have remote users, follow these instructions to enroll remote users in MFA.
New: Configure MFA by session type
You now configure MFA by session type, including:
- Workstation
- Server
- IIS
- VPN
- SaaS
When you enable MFA, you’ll see two edit modes available for modifying the MFA settings. In each case, make sure you’ve read the documentation for the use case on each type of session to ensure MFA will be prompted.
- All session types at once: By selecting this option, you can apply the same policy for all session types that are protected by UserLock.
- By session type: Select this option to apply different MFA policies for each session type.
For example, you can create different policies for local Server sessions and IIS sessions connecting from outside the network.
New: Configure MFA frequency for every n minutes/hours/days
You now have more granularity to choose how often you want to prompt for MFA. You can prompt users for MFA after a specific time period defined by minutes, hours, or days.
This means that, for each session type, you have new options to select how often you want to prompt the user with MFA (see current options for UserLock 12.0 here):
- After a given time: prompt users with MFA at their next logon after a specific time period defined by minutes, hours, or days (the option to choose minutes or hours is new in UserLock 12.1).
- After a given time since the last logon from each IP address: Same as the above, except the amount of time will be counted from the last connection to that IP address, not the last connection.
- Not configured: MFA will not be prompted unless another policy is applied through another protected account.
New: Configuration wizard
With UserLock 12.1, a new configuration wizard guides you step-by-step to configure the following features:
- UserLock server: server type, protected zone, etc.
- UserLock Web App
- MFA for IIS applications
- UserLock Anywhere
Improved: Support proxy for UserLock Anywhere
UserLock Anywhere now supports HTTP Proxies. Now, UserLock allows you to validate a list of trusted proxies to recover the real client IP address for the agents communicating through UserLock Anywhere.
Improved: View notification history for UserLock Push
Now users can view the notification history in the UserLock Push app. This allows users to show admins what IP address notifications are coming from, to more easily spot suspicious behavior. It also builds end-user awareness (and responsibility).
This update concerns only Push notifications. OTP accounts do not have history.
What's new in UserLock 12.0
- New: MFA push notifications & the UserLock Push App
- Improved: UserLock SSO
- Improved: UserLock Web App
- New: UserLock MSP Console
- New: UserLock VPN Connect
- Download UserLock
New: MFA push notifications & the UserLock Push App
UserLock push notifications are a subscription-only feature.
You can now choose to enable push notifications as the main or as an additional MFA method, giving you more flexibility to select the MFA method that works best for your team.
The all-new UserLock Push app provides safe, secure push authentication synced directly with UserLock.
Learn more about onboarding end users with push notifications
Learn more about setting up the UserLock Push app
Improved: UserLock SSO for Microsoft 365 and Google Workspace
- Federate to multi tenants for Microsoft 365 with UserLock SSO. Learn more.
- Use Google Profiles to configure MFA for Google Workspace with UserLock SSO. Learn more.
Improved: New features added to the UserLock Web App
The new features in the UserLock Web App include:
- Reporting: Access even more reports now added to the Web app from the UserLock Desktop app, get powerful filtering capabilities, and easily export reports in .csv, .pdf and .xsl format. Learn more.
- Server properties: Modify server properties from the UserLock Web app. Learn more.
- An improved user dashboard: Easily see primary and secondary MFA methods configured for each user along with the number of recovery codes available. Learn more.
To use the Web App in parallel to your use of the full-feature desktop software, download UserLock 12.
New: UserLock MSP Console
A web-based licensing management platform, the UserLock MSP console offers customized licensing and pricing options that align with an MSP business model.
Learn more about the UserLock MSP Console.
New: UserLock VPN Connect
The UserLock VPN Connector allows users to select their VPN, enter their credentials and complete MFA on Windows VPN connections without leaving the easy-to-use interface. You can access this tool when you download UserLock 12, or you can download it separately here.
Learn more about UserLock VPN Connect.