CVE-2023-33298: MacOS - Agent

Share feedback

Thanks for sharing your feedback!

MacOS agent 10.0.0.19

May 7th, 2023

New Features:

• The agent now supports the new Exclude configuration option for Split Tunneling (so that all traffic except specific addresses will go through the tunnel).

Resolved Issues:

• P81-23365 - Mac agent launching twice, 2 different instances running at the same time
• P81-26071 - OpenVPN connection sometimes taking too long

MacOS agent 9.0.1.9

New Features:

• You can now switch between protocols while the agent is connected to a network! Simply select a protocol in the Protocols tab to switch to it.
• When the user session expires (according to the session length set by the administrator), the agent will be automatically logged out during local night time, in order to avoid disconnections during the workday. This applies to session lengths of 2 days and above.

Enhancements:

• Logging improvements
• Agent installation will be prevented on unsupported MacOS version 10.14 and below

Resolved Issues:

• P81-18590 - On macOS 13.0, sometimes the quick access UI and Full agent UI were displayed simultaneously when changing networks
• P81-20543 - Incorrect icon state after silent upgrade of the agent
• P81-23034 - Agent disconnection after OS upgrade to Mac OS 13.2
• P81-23462 - SWG Web Filtering not working when a rule is set with two custom URLs that one is contained within the other
• P81-7337 - Agent logs show that user is using macOS 10.16 when it is actually a higher version

MacOS agent 9.0.0.28

New Features:

• Secure Web Gateway (SWG) now includes Malware Protection! SWG users now have an additional layer of protection against malicious software, on top of the existing web filtering functionality. Malware Protection actively scans content before it reaches the user’s browser, blocks multiple types of threats, and notifies the user. Admins can view logs of blocked malware in a new page under the Monitor and Logs section.

Enhancements:

• Log file size decreased, implemented log rotation
• Added support for long-life certificates for SDP sessions
• Updated internal frameworks to support minimum target OS of 10.15
• Improved SWG module behaviour, increased reliability of Proxy module
• Improved memory usage of agent and fixed issues with memory leaks
• Improved stability
• Improved connectivity

Resolved Issues:
P81-21296 - Fixed an issue related to the Disable Sign-out feature
P81-22039 - Fixed issue when agent UI was out of sync with Daemon
P81-14902 - Fixed Trusted Wired Network MAC address case-insensitive comparison

MacOS agent 8.0.6.166

Resolved Issues:
P81-16293 - Excessive memory consumption when using SWG

MacOS agent 8.0.6.163

New Features:

• The agent can now remain connected while P81 SDP backend is restarted/offline, for better connection stability

Enhancements:

• Added additional logging events on VPN reconnection and Probe failure
• In the Protocols section, relabeled ‘Automatic’ protocol to ‘Default’
• Improved mechanism for fetching Public IP
• Increased shared codebase between MacOS and iOS agents for better compatibility

Resolved Issues:
P81-12527, P81-12562 - Unplanned disconnections
P81-12869, P81-6732 - Sporadically cannot login to the agent - ‘your session was not established’
P81-14787 - Routing table not updated on Split Tunneling update until user disconnects
P81-13988 - Agent User Interface is cut off when it’s the rightmost icon in the macOS tray
P81-7450 - Fixed sorting in Quick Access networks list
P81-14953 - Install update prompt appears without user interaction
P81-16096, P81-16864 - DPC failed although conditions passed, until reboot
P81-16189, P81-16949 - While connecting to VPN on unsecured WiFi, Internet is unavailable for 40-60 seconds

MacOS agent 8.0.5.143

New Features:

• New wake from sleep mechanism logic
• Added ‘Quit’ button to the agent’s quick-UI for easier access
• Added ‘Reset Agent’ button to the loading screen if it does not connect within 60 seconds
• Added ‘Reset Agent’ button to the full UI (under the Support tab) to provide the ability to reset the agent at any time

Resolved Issues:

• P81-14321 - Infinite connection attempts
• P81-14317 - The loading screen does not disapear
• P81-13962 - Agent says it’s connected but loses all Internet connectivity
• P81-13257 - Possible command injection vector via DPC
• P81-13188 - DPC stuck after machine reboot
• P81-12978 - Proxy communication issue
• P81-12749 - Presented with a “You have reached your pre-configured connection time limit” error
• P81-12698 - DPC: Device Activity Log does not appears in web console at admission time, only after DPC scheduled recheck time (20 minutes)
• P81-12360 - Agent log files take too much space (0.4 GB)
• P81-7128 - The Device Activity log shows ‘No Hostname’ instead of the device name
• P81-6628 - The user is not signed out properly after the agent receives a new token

MacOS agent 8.0.4.132

New Features:

• Disable Sign-Out (enforce Always On) - this feature is being gradually rolled out and will be available to all customers in a few weeks. Requires this version of the agent and above.
• Agent sign-out brute-force prevention
• Allow admins to control whether using the internal DNS is enforced or not, in order to support co-existing with products that require control over DNS

Enhancements:

• Agent version is now displayed before login, for easier troubleshooting
• The Quit button has been re-added to the agent extended UI, allowing users to shut down the agent application and the Perimeter 81 service in case they need to
• P81-11453 - SWG bootstrap certificate enhancement

Resolved Issues:

• P81-13378 - Changing settings on the console would cause the agent to Reconnect
• P81-12977 - RegionName always showed N/A
• P81-12747, P81-12674, P81-12571, P81-12525, P81-12164 - Issues connencting after sleep
• P81-12746 - Connectivity issue when using SWG
• P81-12417, P81-12618 - Connectivity issues
• P81-12560 - Sign-in failing to open browser
• P81-12539, P81-12519 - Websites unreachable
• P81-12536 - SWG rules issues
• P81-12461 - Internet connection issue after session timeout
• P81-12419 - Reconnection process takes too long
• P81-12269 - Public IP stuck in “Refreshing” and losing Internet connectivity
• P81-11170, P81-11171, P81-12807 - Internal log fixes
• P81-6859 - Silent Upgrade improvements
• P81-6467 - UI bugs
• P81-11531 - Better handling of ProtocolFilters in regards to certificates
• P81-12720 - SWG bug fixes

MacOS agent 8.0.4.124

Enhancements:

• Changed MTU for Wireguard to 1380 to improve connectivity in low-MTU scenarios

• The Perimeter 81 certificate is now installed only if using Secure Web Gateway. If needed, users are referred to a webpage on how to complete the certificate and add-on setup

• ‘Start Minimized’ removed from Settings screen

Resolved Issues:

P81-11830/P81-10601 Connection is not restored after sleep
P81-11673 Sometimes the app Signed Out incorrectly
P81-11251/P81-11163 Agent stuck with connect button not responding
P81-11211 DNS fails after sleep on latest Mac version (Monterey 12.3)
P81-11074/P81-10889 Constant disconnections
P81-11071 Connection issue with IKE protocol
P81-11035/P81-11034/P81-8381Connection issue with Wireguard
P81-11027/P81-11026/P81-10631 Internet connection blocked/unstable
P81-10922/P81-10916 After sleep, the agent is connected but there is no internet connectivity
P81-10874 Sign In button not working after session timeout
P81-10556 Network adaptor changing every several minutes
P81-9987 Split tunneling configuration didn’t updated till Agent reconnection
P81-9804 Client generates certificate errors
P81-8032 “Connected to Network” notification doesn’t hide automatically
P81-7340 After upgrading XPC between Daemons, Proxy is not starting
P81-6312/P81-3930 “Private DNS” icon not displayed on network with “Regional Private DNS”
P81-6080 Closed Mac agent pops up every time Firewall rule is changed

MacOS agent 8.0.4.116

Fixed Issues:

• P81-9839/P81-9833/P81-9795 - App crash
• P81-9794/P81-9493 Connection issue - agent stuck in ‘Reconnecting’
• P81-9500 Failed to connect while returning from sleep mode
• P81-9181 Agent takes a while to reconnect after sleep
• P81-9152 Sign Out pop-up header displayed incorrectly
• P81-8233 Device Activity Log - MacBook still appears as Healthy even though found Not Healthy
• P81-8048 Apple M1 Pro - Disconnect during Zoom
• P81-7340 SWG - Proxy not starting after upgrading XPC between Daemons
• P81-5273 .pkg error - ‘The Package is unsigned’
• P81-910 .pkg installer file - Unsupported file format in MobileIron
• P81-8236 Icons for Support, Settings, Sign Out are blurred

New features:

• P81-9985 When installing using pkg file, the P81 certificate will not be installed unless specified by admin
• P81-7551 The agent now allows admins to pre-populate the workspace value during installation via CLI.

MacOS agent 8.0.4.108

Fixed Issues:

• P81-6326 - Failed to login after agent upgrade.
• P81-4795 - DNS lost randomly when using split tunneling + custom DNS.
• P81-7608 - IPv6 behavior is unpredictable.
• P81-5029 - Improved messaging when pre-configured connection time limit is reached.
• P81-2455 - agent UI pops up upon changing firewall rules.
• P81-5034 - renamed ‘diagnose issues’ button to 'Send logs to support’.

New Features:

• The Perimeter 81 agent now runs as a service in the background! There is no need to keep the agent UI open - it is always up and available via an icon in the system tray.
• Connectivity and stability have been improved.
• The agent now has a brand new “quick access” UI, which allows you to perform most operations from a single screen by clicking on the tray icon. The classic UI is still available, and can still be accessed in order to configure settings, contact support etc.
• This agent version supports Secure Web Gateway (SWG).

MacOS agent 7.0.3.37

Fixed issues:

• P81-2389 - Helper tool installation requires admin permissions
• P81-5385 - Crash on changing networks while OpenVPN connected on TWN
• P81-5332 - Post connection loss authentication issue
• P81-4796 - Correction of description for Automatic Protocol
• P81-4764 - Agent stuck in reconnecting when coming out of sleep mode
• P81-4368 - Agent stuck in Reconnecting state

New features:

• P81-5029 - Improve the output message after "Automatically log out Client "
• P81-5026 - Remove “contact support” suggestion when failing DPC
• P81-5034 - Rename “diagnose issues” button
• P81-4699 - Compatibility with MacOS 12.0 Monterey

MacOS agent 7.0.3.28

Fixed issues:

• P81-3293 - Added latency measurements BI events
• P81-3312 - Fixed device register issue caused by UDID non-escaping

MacOS agent 7.0.2.21

Fixed issues:

• P81-1995 — Device posture check says that disk is not encrypted when it actually is encrypted
• P81-2021 — Incorrect VPN status on Home screen if Start Minimized=ON and VPN has connected automatically
• P81-2532 — Agent stuck on reconnecting
• P81-3111 — DPC failed for all the rules that should pass
• P81-3179 — App hanging during TWN check processing

MacOS agent 7.0.2.19

Fixed issues:

• P81-2680 — Trusted Wired Networks - Agent user still needs to enter code on Quit/sign out while connected to TWN
• P81-2198 — User still needs to enter code on Quit/Sign Out while on TWNP81-2198
• P81-2633 — The Always On Not restored 0n turning Netwotk’s toggle if Network above in list is Disabled
• P81-2231 — Attempt to connect to the VPN is made on setting AlwaysOn by user
• P81-2199 — No “Connected to Trusted Network” badge on Home screen when computer on TWN
• P81-2198 — User still needs to enter code on Quit/Sign Out while on TWN
• P81-2215 — The app connected to VPN on user setting AlwaysOn=ON while connected to TWN
• P81-2550 — Show appropriate text when hovering over the “Connected to Trusted Network” badge
• P81-2798 — MacOS P81 DPC: Condition “AND” for “Process Running” doesn’t work

MacOS 7.0.1.12

• Silent upgrade feature imlemented

MacOS 7.0.1.7

• Fixed issue when agent app pops up with every ZTA change — P81-1117, P81-1115
• Fixed wrong Device Name documented in Device Activity — P81-1364
• Fixed Internal IP Not Defined issue, when VPN get connected — P81-1347
• Moved Snowplow session cache file outside of the user’s Documents folder — P81-937

MacOS 7.0.1.6****New features:

• Device Posture Check feature implemented

Resolved Issues:

• Fixed app crash issue — P81-726
• Fixed app re-connect issue when losing WiFi — P81-906
• Fixed Run on StartUp issue — P81-914
• Fixed Sign Out” and “Quit” option from doesn’t work if app is not in foreground — P81-1027
• Fixed app re-login when DPC check has failed — P81-1452
• Fixed Disconnect/Connect notifications showing — P81-1110
• Fixed high CPU consumption issue when the app is in background — P81-438
• Fixed SDP socket re-connect issue after sleep-mode

MacOS 7.0.0 (7):****Bug fixes:

• Application complete re-design, Main view, Settings page, Support page, OnBoarding page
• Implemented new login flow using default browser with SSO support
• Implemented accessToken token rotation before performing Logout call – #MAC-1056
• Added timeout for LoginSucceeded event – #MAC-1075
• Added full username showing inside of the Main view (if it’s available) – #MAC-1083
• Added support ticket number for the user if it’s available from Troubleshooting – #MAC-1074
• Change user’s email address fetching from JWT to channel.OnUpdated data payload – #MAC-1066
• Fixed Connection/Reconnection initiated from Connect on Launch can’t be interrupted – #MAC-1079
• Fixed Hide Automatic Location from Icon/Dock menus – #MAC-1086
• Fixed issue when Admin can’t enforce upgrade to the latest version – #MAC-942
• Disable KillSwitch by default for AlwaysON – #MAC-1081
• Fixed Sleep/awake re-connect issue – #MAC-1061
• Fixed Disconnect button non-responsiveness when agent connecting/reconnecting – #MAC-1078
• Fixed expand/collapse Shared Networks issue, when hover stopped to work – #MAC-1062
• Fixed issues when “Change Network” button displayed incorrectly when “Upgrade Application” is enforced – #MAC-1111
• Added BI events sending support
• Added osVersion as a part of channel.open payload
• Implemented automated Troubleshooting script, now avg processing time is ~1 min – #MAC-1093
• Fixed “Sign Out” and “Quit” options from notification area context menu when app is in background mode – #MAC-1100, #MAC-1099
• Fixed “Automatic Location” network option – #MAC-1096
• Added tooltips for SignOut / Exit Settings buttons, Main + OnBoarding windows appear at the same time – #MAC-1088
• Fixed “Automatic Location” network option – #MAC-1096
• Fixed UI blinking when switching between Home tab and any other – #MAC-1073
• Fix network selection logic – #MAC-1087

Was this article helpful?