🍂Secure your targets using the onboarding tool

16 November 2022

zli v. 6.12.7

Fixes

• SSH proxy. Resolved issue with error messaging when using BastionZero to proxy SSH sessions

• SSH known hostnames. Resolved issue with "host key changed" errors stemming from host.environment naming convention

• SSH known hosts. Resolved issue with hosts appearing as new if using a non-RSA key

• Quickstart. Resolved issue with tip provided in Quickstart that had not been updated since the policy command refactor

bzero v. 7.2.6

IMPORTANT REMINDER

For those who use Helm to install the Kubernetes bzero agent, you must update the Helm repository to chart version >= 1.1.3 before doing a fresh install of the bzero agent. You can do this with helm repo update.

This action updates the bctl-agent role to include permissions for retrieving logs from pods within the deployed namespace for the zli send-logs feature. Even if you do not intend to use send-logs, you must be using chart version >= 1.1.3 for any new Helm installations to be compatible with the new backend changes. We strongly recommend everyone who uses Helm takes this action.

Fixes

• Cancel registration requests. Resolved issue where registration requests could not be cancelled. Use ctrl+c to cancel a request

• Bzero upgrade through APT/Yum. Resolved issue where bzero agent did not restart when upgraded if it was already running

• Web target connections. Resolved issue causing dropped connections for web targets

• Personal Gmail and Microsoft organizations. Resolved issue preventing personal Gmail and Microsoft organizations from registering a bzero agent

• Agent backwards compatibility. Resolved issue with backwards compatibility between our current agent and older versions

Web app & backend

New

• Onboarding tool. To help aid users in onboarding targets to BastionZero, a self-serve, interactive onboarding guide is available within the web app underneath the support (?) icon in the top right corner. Presently, guides for remote hosts, databases, and Kubernetes clusters are live with web and SSH tunnels debuting in December. If you give it a try, let us know what you think!\

For questions or to give us feedback on how we can make our updates better, reach out to [e-mail].