Tanium Cloud Jump Gate Updates & Release Notes

Features

Linux terminal sessions can now run as a per-request ephemeral user instead of always landing as root. Group membership is configured with the new linux_groups setting — available globally in Settings and overridable per policy in the Policy Wizard.

Access methods can now be managed from a single matrix, both globally in Settings and per-policy, with per-cell overrides.

Jump Gate's global settings can now be viewed and edited natively in Atlas.

Improvements

UX polish for the Atlas jump request card.

Resolved Issues

Fixed inconsistent header styling between session panel types in Atlas.

The request status panel now shows when a request was closed, not just who closed it.

Fixed the request-scoped audit history endpoint returning no results.

Run command no longer carries state between commands. A directory change or environment variable set by one command no longer affects later commands.

Fixed a bug where clicks landed in the wrong place in the Atlas RDP session panel.

Features

The Jump Gate audit log component is now available in Tanium Atlas, with filters for event type, entity ID, and date range.

Access policies can now be built and edited natively in Atlas, including reordering policy priority.

Jump Gate approvals are now integrated with the Activity Center: pending-approval notifications open the jump request card, where approvers can approve or reject the request from Atlas.

Improvements

The Atlas jump request card now supports closing a request and running commands directly from the card,
Sessions in Atlas open in a dedicated session panel beneath the request card. The terminal session component can now share recent terminal output with the Atlas agent, so users can ask about what's happening in an active session.

The content set applied to a request is now visible on the request details page, in the request and activity lists, and in the audit log.

Resolved Issues

Fixed "Session Open in Another Window" appearing when no other session was open; sessions can now be opened from multiple windows or tabs without blocking each other.

The session monitoring panel is no longer shown to users who lack permission to view a request's sessions.

Features

Jump Gate policies, requests, and audit/activity logs can now be scoped to Tanium content sets, with a content set picker in the policy form and Tanium Console RBAC management, so different teams can manage their own policies and see only their own requests and audits.

Improvements

The connect dialog now checks RDP security posture before opening a session and shows a clear error when RDP is disabled.

The Atlas jump request card now shows why a request was rejected or closed.

The Audit page's Event filter is now searchable, matching the Activity page.

Resolved Issues

Fixed a Ctrl-C issue in interactive remote-exec sessions.

Security Updates

Applied several third-party security patches.

Features

Added RDP readiness checks to the connection dialog. Before establishing a session, Jump Gate now queries the target endpoint to verify its RDP configuration and surfaces any relevant information — such as RDP being disabled or the endpoint being a Domain Controller — as a warning so users have context before connecting.

Added a native Windows logon connection type for RDP sessions. When Network Level Authentication is not required on the target endpoint, users can now choose to authenticate directly at the Windows login screen.

Features

Added clipboard support in RDP sessions. Copy and paste now works bidirectionally between the local machine and the remote Windows desktop during RDP sessions.

Administrators can disable clipboard copy out of RDP sessions, configurable at the global level or as a per-policy override.

Added configurable Windows group membership for ephemeral RDP users. Administrators can now specify which Windows local groups ephemeral RDP users are added to, configurable at both the global level and as a per-policy override.

Added a detailed request view panel in Atlas. Users can now inspect request details and start a jump session directly from the single-request panel. For more information about Atlas, see Tanium Atlas User Guide.

Resolved Issues

Fixed an issue where downloading the Jump Gate CLI from the in-product help menu on Apple Silicon Macs using Firefox returned the Intel (x86_64) binary instead of the ARM64 binary.

Features

The Jump Gate CLI is now generally available, fully supported on macOS, Linux, and Windows. It supports creating, viewing, approving, rejecting, and closing requests; starting interactive jump sessions; running, listing, and inspecting commands; and managing authentication profiles — all from the terminal.

Added AI-generated summaries for terminal sessions. After a session ends, an AI summary of the session activity is available directly in the UI, including each command run and its output.

Added a global and policy level override setting that can disable RDP ephemeral/supplied credentials access.

Improvements

Improved RDP authentication to correctly handle Windows domain credentials.

Updated the create request modal to show a more user-friendly message when the maximum scheduling window is exceeded.

Resolved Issues

Fixed visual regressions on the Access Policies page where section backgrounds appeared with incorrect coloring.

Fixed an issue where RDP session recordings were corrupted with pink bands.

Fixed an issue where RDP connections were blocked by incorrect User Rights Assignment check.

Improvements

Updated the RDP window to automatically adjust the session resolution when resized.

Improved the RDP pre-flight check to read Group Policy Object settings before falling back to local registry values.

Improved the RDP pre-flight check to detect when Windows User Rights Assignment prevents a connection.

Automatically focused the text input when opening the Run Command modal.

Resolved Issues

Fixed an issue where custom ports for AWS zone servers migrated from OCI prevented jumps.

Fixed an issue where Export Session Data failed after a fresh Jump Gate installation.

Fixed an issue where the incorrect user was attributed to settings changes in the audit log.

Fixed an issue where the Create Request modal made it difficult to correct form mistakes after the first submission attempt.

Fixed an issue where the Overview page displayed duplicate section headers.

Fixed an issue where right-click and paste did not work correctly in Firefox.

Features

Added RDP (Remote Desktop Protocol) support. Jump Gate now supports RDP sessions, enabling remote desktop access directly through the platform. RDP connections work on any port when the feature is enabled.

Added support for terminal jumps in pop-out mode.

Improvements

Updated prioritize policy page UI.

Updated create request modal UI.

Resolved Issues

Fixed an issue where canceling the create request modal required two clicks.

Fixed an issue where duplicate error toasts appeared when navigating to inaccessible or invalid routes.

Fixed an issue where closing a request while a session was open caused the session recording to be temporarily unavailable.

Features

Added the ability to filter the Audit list by a specific entity ID.

Improvements

Modernized the styling of the multiple elements and page views.

Isolated settings updates to only those whose values have changed to reduce audit noise.

Removed request settings override tooltips in the Request Details panel.

Removed the Applied Policy panel on the Request Details page.

Reworded the description for the Maximum Command Duration setting.

Trimmed empty space in the Create Request Justification field before submission.

Updated the Jump Gate endpoint search bar to use the standard endpoint search bar used elsewhere in the application.

Updated the My Endpoints page to use the standard endpoint search bar.

Updated the error message shown when an endpoint ID is not available.

Validated that the Justification field is not empty when creating a request.

Resolved Issues

Ensured deleted user groups appear in the Access Policies wizard.

Fixed Ctrl+C copy and Ctrl+V paste shortcuts in Windows endpoint sessions.

Fixed an issue where Ctrl+C did not interrupt long-running processes in PowerShell.

Fixed an issue where filter lists were cut off.

Features

Introduced the request settings override feature, which allows access policies to override request settings they match to (Jump Request Expiration, Maximum Session Time, Maximum Command Time, and Maximum Session Inactivity Timeout).

Jump Gate request approvals and rejections now result in a Guide notification.

Added a single audit record for prioritizing policies, rather than generating multiple Update Policy audit records.

Updated the privilege for Jump Gate Write Request to grants user access to invoke the Tanium Data Service plugin API.

Improvements

Modernized the styling of the View Requests modal.

Updated success toast notification text.

Updated to render Users using the standard user rendering pattern, rather than rendering usernames as plain strings on the Request page.

Updated to surface “No Computer ID” errors in the UI.

Updated logic to hide the Jump Gate UI only for incompatible endpoints.

Updated to reduce excessive API calls to Jump Gate settings.

Updated the My Endpoints page so closing requests from the View Requests modal behaves consistently with other pages.

Resolved Issues

Fixed an issue where closing requests from the View Requests modal no longer worked.

Fixed an issue where command icons would not always render a tooltip.

Fixed an issue where the Run Command modal did not validate that input is non-empty.

Fixed an issue where the Computer Name field on the Request page could link to the Single Endpoint View page even when the user did not have access.

Fixed a UI issue in the Applied Policy panel on the Request page where requester badges would not wrap.

Feature

Updated to display error output from commands directly within the Request Details UI, improving visibility and troubleshooting.

Added the missing StopCommand audit event to ensure complete audit coverage for command lifecycle actions.

Improvements

Restored page titles on both the Activity and Audit pages for consistent navigation and clarity.

Standardized terminology for Maximum Session Time to ensure consistency across UI and documentation.

Removed System User Service as a Jump Gate requirement.

Resolved Issues

Fixed an issue where Request Details failed to load if an access policy could not be found or if the endpoint was offline.

Fixed an issue where the Applied Policy section would infinitely load for users with the Jump Gate User role.

Corrected inconsistent terminology when referring to a request’s maximum session duration.

Feature

Export Command Data now includes both executed commands and their output, improving auditability.

Improvements

Updated to remove access type selection when creating a request. Where multiple access types are available, users will now select an access type when starting jump sessions.

Improved the Request Details page with updated visual styling, a simplified Jump Request Status section, and a dedicated Session Monitoring area for recordings.

Updated the Request Details page to clearly display when a request was automatically closed because the endpoint was offline.

Updated to hide the Jump Gate UI in integrations where the endpoint is likely incompatible.

Reduced unnecessary back-end load by preventing excessive API polling on the Request Details page and settings API calls when the Create Request modal is not open.

Updated to highlight a newly-favorited endpoint on the My Endpoints page.

Improved the jump request modal and the Audit and Activity pages with updated visual styling.

Resolved Issues

Fixed an issue where the “Request Approved” Guide notification was no longer being sent.

Feature

Added the scheduling feature, which allows users to schedule requests for a future time.

Added the "Maximum Request Scheduling Time" setting to configure how far into the future requests can be scheduled.

Improvements

Added a Stop Command button to allow a user to interrupt a command that the user issued from a jump request.

Added the ability for a user to Close All Requests from Overview → My Open Requests.

Added a tooltip for commands that have timed out to provide additional clarity.

Updated to display the targeted endpoints section of the expanded Access Policy view in a dedicated row for improved readability.

Added a recording acknowledgement for Run Command.

Updated to load fresh target data when opening the Create Request dialog.

Resolved Issues

Fixed an issue where commands would time out after one minute of running.

Fixed an issue where users with the Jump Gate role assigned to a non‑default persona were disconnected shortly after starting a terminal session.

Fixed an issue where users with Requests Read permission could not view other users’ command history.

Fixed a bug where cloning a policy would briefly display an inline error message.

Features

Added the create request mutation to Tanium Gateway.

Improvements

Updated to allow the user to click steps in the policy wizard to navigate directly between steps.

Adjusted wording when starting a session to clarify situations where the session does not fully establish or is still waiting to connect.

Added Jump Gate workbench and service versions to the Jump Gate Help page.

Updated the minimum data retention age to 3 months (previously 1 month). For customers who had previously configured retention less than 3 months, the setting has been updated to 3 months.

Resolved Issues

Fixed an issue where "My Closed Requests" incorrectly included open requests.

Fixed an issue where the "Remember me" option on the recording acknowledgment modal might not function correctly.

Fixed an issue where the Run Command button did not properly handle errors.

Fixed an issue where the Audit page did not load more records when scrolling.