New quality of user management
and monitoring in nVision® 10
New version of software is available
Meet nVision 11What's new in nVision® 10?
In the latest version, the system user becomes the most important element, as the data are gathered and assigned to the user, regardless of the device or devices on which they are working at a given time. In this way all access rights, authorizations, application and website policy and monitoring policy automatically follow the employee.
Many devices = Many profiles
working on 3 different devices
Many devices = One user's profile
working on 3 different devices
nVision 10
nVision 9See nVision 10 in action
- Easy user management
Full user management based on security groups and policies. This is to replace profiles and access to data based on network devices. This means it is easy to search for users, quicklyaccess information and configuration.
- Integration with Active Directory
nVision synchronizes the list of groups and users with the company's AD database. This enables the easy and flexible creation of a security policy and monitoring at the level of groups and users.
- User rights under control
A group or user profile that defines all the rights related to pen drives, portable devices, application and website blockade policy, as well as the monitoring policy – all those settings automatically follow the employee, regardless of the computer on which they are working.
- Support for user monitoring in virtual desktop infrastructure (VDI)
In organizations which use servers of virtual machines, nVision 10 allows the easy and automatic management of monitoring profiles, as well as the data of monitored employees, without the need to perform additional actions in the case of periodical changes of virtual machines.
- Greater data security
Default monitoring and security policy is automatically assigned to every new employee. This ensures the effective implementation of security principles in the organization without the risk of a new employee accidentally being granted excessive rights or not properly monitored.
- New interface
Ordered views, options and settings. Enhanced navigation – the addition of a ribbon and side menu for the Dashboard to provide the view of a device and user will ensure quick and easy access to key information.
GDPR in nVision 10
nVision 10 was designed with great care for information security, with particular consideration given to personal data. In the new version, we have added a number of mechanisms that will ensure the security of data storage and processing in your company.
- Separation of personal data
All personal data (also data from the monitoring of employee activity) are separated from information about the configuration of the device used by the user. This enables access to data and protection against unauthorized access to be effectively controlled.
- Time limitation for data storage
Personal data are stored for a time specified by the administrator, in line with the requirement of the limitation of data storage for a period not longer than necessary. Data can be managed absolutely independently – in version 9 and earlier versions data were connected to the computer object.
- Control of access to data
Access to personal data and data from the monitoring of employees is subject to access control at the level of selected administrators and specific groups of employees. This allows for the adaptation of access to personal data in line with the rights granted to specific persons in the organization.
- User data in one place
Data about one employee are gathered in one place, regardless of the number of computers the employee has logged on to. This helps to preserve the integrity of data, to provide insight into all data concerning the employee, and to guarantee the effective deletion of all data about a given employee upon request.
- SSL/TLS encryption
All the connections between the agents, server and console, as well as browser access are subject to full SSL/TLS encryption.
- Deletion of user data
nVision 10 enables the full deletion of the data of a selected user (independently of the devices), which helps to meet one of the GDPR requirements concerning the “right to be forgotten.”
- Broader scope of access control for administrators
nVision 10 offers a broader scope of access control for system administrators, with special consideration given to potential access to sensitive data, e.g. via control of authorizations regarding remote access and user view.
Changelog
- nVisionintroducing consistent with the GDPR, integrated data access based on the object of User – in place of access to data based on network devices
- nVisioncollecting and displaying data in reference to a User – data remains assigned to the selected User regardless of User devices status (merged, archived, removed)
- nVisionintroducing group and user profile which defines all permissions considering flash drives, portable devices, applications and websites blocking policies, as well as monitoring policy
- nVisionintroducing default monitoring and security policies which are automatically assigned to each employee (both Windows local account and ActiveDirectory synchronized)
- nVisionall permissions automatically follow the employee on all computers where the employee works,
- nVisionrestricted access to personal data and employee monitoring data (GDPR compliance) – possibility of granting access to a group of users only to selected Administrators
- nVisionpossibility to fully remove data of a selected user (GDPR compliance)
- nVisionintelligent users groups – collections of Users fulfilling specific set of rules
- nVisiongenerating reports for groups – reports for Users’ activity for maps and devices can be created by choosing a User or a group
- nVisionnew graphic design and new icons
- nVisionmain menu replaced by the ribbon and sidebar, new options layout
- nVisionnew layout of the device information window
- nVisionuser search in the program main window
- nVisiongroups and subgroups management in the main program window
- nVisiondrag-and-drop option for transferring Users from User’s grid to groups
- HelpDeskticket list automatic reload
- HelpDeskmulti-processing actions for tickets
- HelpDesknew automatization condition: “requester belongs to a group X”
- Chatcontent search in chat conversations
- Chatsupport for unicode-emoji and lenny face
- nVisionincreased security of Server-Agents-Console communication - using TLS1.2 protocol which replaced the previous encryption model
- HelpDeskadding global views configuration to tickets lists (for Administrators)
- HelpDeskviews configuration development - the ability to select multiple condition arguments
- HelpDeske-mail notification details development
- HelpDeskmodifying e-mail notifications of new comments in tickets
- HelpDeskadding new warning message indicating closing other assignee’s ticket
- HelpDeskdisplaying information about the requester for ticket’s observers
- HelpDeskdisplaying information about the loss of the HelpDesk/Administrator role by the assignee in the event log
- HelpDeskswitching between screenshots previews in tickets by using keyboard cursors
- Chatsupport for keyboard shortcuts on chat contact list
- HelpDesksystem loading optimization
- Chatmessage loading optimization
- Chatchanges and improvements of chat layout
Migration from nVision 9
Due to the importance of the migration process, we have prepared a step-by-step manual on how to migrate from an older version of nVision. Should you have any questions, please contact our technical department.
- In nVision 10 we have changed the way settings for monitoring (Users) operates, therefore, the mirroring of the structure of authorizations from the atlas, map and devices after migration might reduce the monitoring of the user who has worked on more than one computer.
- The users who, in nVision 9, belonged to more than one profile (by working on many computers) may be granted higher authorizations after migration (which means that fewer websites will be blocked).
- The nVision 9 settings from all profiles for blocking applications and extensions of downloaded files will be merged to one item of default settings, and will apply to all users. If you have been using different Agent profiles on many devices, the software configuration will have to be adjusted manually.
- In view of the fact that the system will now be centered around the user and not the device, the possibility to define DataGuard rules at the level of the device will be disabled. Thus, it will not be possible to block and audit users only on selected devices. This may lead to an increase in the authorizations of a user who has been working on more than one computer (e.g. if, in nVision 9, one user worked on a computer with blocked pen drives and on another computer with the same hardware unblocked, in nVision 10 they will be able to use them).
- If the administrator accounts did not have authorizations to all the maps in nVision 9 after migration to nVision 10, they will not be able to manage users in the new groups. It will be necessary to adjust the configuration of administrator authorizations.