2610.08.046
Version / Release: 2610.08.046
Release date: 27 October 2026
Improvements
New: Secure Browser in the Marketplace
Secure Browser is a new Marketplace license. To request it, click Account and then Licenses in the menu, click the Plus icon, and select Marketplace and then Secure Browser. For more information, see Marketplace license.
In the app configuration of a Secure Browser, you can set the following:
- Start page: the website that opens when the Secure Browser starts.
- Proxy server: the address of a proxy server, if required.
- Isolate the browser session: removes saved passwords from the browser profile.
- Website access: which websites users can open. Choose No restriction, Allow only these addresses, or Allow all addresses except these.
- Keep session open after closing the app: how long the session stays open after a user closes the app. Choose between Default (1 minute), 2 minutes, 10 minutes, 1 hour, and 2 hours. If users start the app again within this time, they continue where they left off.
- Browser data between sessions: whether Every session starts fresh (default) or the browser keeps cookies, logins, and open tabs with Keep cookies, logins and tabs. With this option, open tabs come back when users start the app again later, also on the next day.
Web Shield: separate license for internal websites and Website Access Protection
Web Shield is now a separate app license type. To request it, click Account and then Licenses in the menu, click the Plus icon, and select App and then Web Shield.
Internal websites and public websites with Website Access Protection now require a Web Shield license. With Standard and High Performance app licenses, you can no longer create app configurations of this kind. Existing apps keep working.
New functions in Secure Browser and Web Shield
- Webcam: Users can use their local webcam in video conferences in the browser. Enable Webcam redirection in the app configuration. The license needs the Webcam redirection add-on. For the microphone, also enable Redirect audio from local to remote system.
- Images in the clipboard: Users can copy and paste images between their local device and the browser in both directions. Copying files this way is not supported.
- Printing: Printing creates a PDF that is downloaded to the user's local browser. You enable printing per app configuration with oneclick™ Hybrid Printer (print via PDF download). Users need oneclick™ Hybrid Drive or the session-only file storage for this.
- Downloads: For users with Hybrid Drive or the session-only file storage, downloaded files arrive directly in their local browser, including large files. Without either, Web Shield shows a save dialog inside the session. You enable uploads and downloads per app configuration.
- Context menu in Web Shield: Right-clicking in Web Shield opens a context menu with back, forward, cut, copy, paste, select all, copy link address, copy image, copy image address, save image as, reload, and print.
- Language: The session uses the language of the user.
- Small screens: On small screens, the buttons in the taskbar collapse into a menu.
Changed settings in an app configuration only apply to a new session. To test a change, close the app, wait until the time set under Keep session open after closing the app has passed plus about one minute, and then start the app again.
Webcam redirection as a paid add-on
Webcam redirection is now also a paid add-on for Standard and High Performance app licenses. Licenses that already use webcam redirection keep it.
Limit Web Shield to approved addresses
Web Shield app configurations for public and internal websites now offer Website access, just like Secure Browser. Choose No restriction, Allow only these addresses, or Allow all addresses except these. The address of the app itself is always allowed. Links to other websites now open in the same window instead of a new one. If a link is not approved, the mouse pointer shows that it cannot be clicked, and the tooltip reads "Not allowed in this app". The download and print settings of the app configuration now also apply to Web Shield.
Replace or remove ports that are still in use
Ports of a destination are now entered as tags. If you remove a port that a destination pool or an app configuration with a single destination still uses, the form shows which pools and app configurations are affected and asks you to decide for each port:
- Replace with port …: The pools, app configurations, and app instances switch to the selected remaining port. Nothing changes for your users.
- Remove the port: The port is removed from the pools. App instances of these pools switch to load balancing or to the default destination of the pool. Only if the pool has neither do they lose their destination and their saved credentials. App configurations with a single destination lose their destination and must be assigned again.
You can only save once you have made a choice for every port. If you remove all ports, a warning asks you to keep at least one. If you don't have read access to the affected pools or app configurations, a warning explains what happens when you save.
Bulgarian and Greek keyboard layouts
For streaming apps, you can now also select Bulgarian (bg-BG Typewriter) and Greek (el-GR Qwerty) as the keyboard layout on the remote system.
Hybrid Drive updated
Hybrid Drive has been updated to Nextcloud 35. Federated Cloud has been turned off. If a file with the same name already exists when uploading, the conflict dialog now points out that you can restore the previous version under Versions.
Save buttons show progress
In dialogs with the standard Save and Cancel buttons, the button shows a loading indicator and "Saving…" or "Deleting…" while the change is processed.
Bug Fixes
- "Image" column shows the current image: After a VM was rebuilt on a new image, the "Image" column of the destinations still showed the old image name. Affected destinations are corrected with the next VM synchronization.
- Drive starts reliably in a new browser: The first start of Hybrid Drive in a new browser no longer ends with a timeout.