What’s New in Virtel 4.64?

Stronger session security and web hardening

Virtel 4.64 introduces reinforced 2FA session tokens, designed to reduce the risk of session hijacking. This is enabled through the TCT parameter HDRSEC (SESSCOOKIE/SECURE options) and relies on HttpOnly cookies to reduce exposure in the browser.

Additional security hardening includes:

• Customizable HTTP security headers (via TCT), to align the Virtel web server with modern browser security expectations.
• Option to hide the server header (HIDESERVER) for a reduced information footprint.

👉 The result: a platform that is harder to compromise, easier to align with security policies, and better aligned with current web practices.

Better user experience, especially for Japanese environments

Virtel 4.64 significantly upgrades the experience for Japanese users and mixed-encoding environments:

• Improved IBM1390 support and full support for IBM1399.
• On-the-fly codepage switching without disconnecting, via ALTUTF8 plus an optional UI switch (w2hparm.encodingSwitch = true).
• Support for multiple JIS display modes (JIS78/JIS83/JIS90/JIS97) and the ability to enable Japanese fonts (e.g., Yu Gothic).

Usability fixes also include:

• An optional keyboard beep when typing into a protected field (without freezing the keyboard).
• Display fixes for some 3270 screens (including OMVS/CICS cases) and a correction for a rare freeze after multiple screenlocks.

Easier administration and cleaner operations

Virtel 4.64 reduces admin friction with several refinements:

• Dynamic refresh after transaction deletion (less manual rework).
• Multiple VIRCONF UNLOAD fixes (TIOA/URL export consistency, long addresses, etc.).
• Improvements and cleanup in Correspondents and Security Admin sub-applications.
• A new Rename button in the macro administration UI.

Performance, stability and interoperability

This release also includes a series of robustness fixes aimed at high-demand environments:

• Removal/inhibition of a non-actionable TCP READ message with LPKALIVE.
• Resource-release and stability corrections (including NFORCEIP=YES scenarios).
• Fix for startup failure caused by a trailing comma in JCL PARM.
• DDI-related correction involving CRYPTS, plus default-value adjustments (BFVSAM recommendation).
• Fix for terminal release on browser close in specific Microsoft Edge cases.