• Fixed an issue where signing in with certain OpenID Connect (OIDC) identity providers could fail due to how the local authentication callback (loopback) URL was constructed.

Fixed a stability issue where the AppGate driver service could crash when it received malformed JSON-RPC data on the deploy control channel. The service now handles unexpected or invalid control data gracefully without terminating. The client now supports QUIC for the signal channel used during NAT traversal. In network environments where UDP and TCP traffic are routed through different paths, this improves connection reliability. Addressed a security issue where the desktop client's local communication channel could be accessed without proper authentication. Fixed an issue in which clients using NAT traversal failed to reconnect when receiving certificate errors during the initial direct connection attempt. WolfSSL was updated to version 5.9.1. Resolved an issue in which bulk transfers over QUIC would stall. Fixed an issue where the client failed to start when launched from a URL link.

Memory constraints in iOS mean that the number of sites and entitlements should be kept low (i.e., four sites with average entitlements). Client sometimes crashes on iOS version 18.3 or earlier due to a bug in iOS. Please upgrade to iOS 18.4 or later.

Fixed an issue where the “Create Profile” page popped up unexpectedly on start-up while applying a new profile configuration defined by the administrator. Fixed an issue where Client would unnecessarily close the connection to the Controller between MFA initialization and MFA attempt, which could then end up in another Controller. Users no longer have the option to not display the Message of the Day at every subsequent login to the Client. The Client now automatically blocks DNS server auto-discovery over tunnels.

Fixes a bug that makes profiles created before 6.3 disappear.

Client: Failover now triggers on any Controller/sign‑in failure; users get logout alerts and fallback profile banners. Mobile: Android uses default browser for OIDC/SAML; ChromeOS stays on WebView. iOS can override to Safari via MDM; appgate:// used for OIDC. Updates: MOTD can be hidden; fixes for auto sign‑in, Device Claim sleep timeout, “Keep Me Signed In,” and high CPU on unstable connections.

Security The client now displays the profile verification page during the first profile creation. Stability Fixed an issue where network interruptions, with the Fallback Site feature enabled, led the client to send too many messages to gateways.

The new list mode allows for a more compact way of showing app shortcuts. It also enables longer app shortcut names to be displayed without truncation. App shortcuts can now be grouped from the admin UI. This allows allows the end user to more easily navigate when there are a lot of app shortcuts. It is now possible to search for app shortcuts. This is very useful if there are a lot of app shortcuts. Pinned app shortcuts are now in a separate tab. Support for Browser auto sign-in is now available. The details in the Entitlements list were moved to individual sub pages, making the list easier to view. Fixed an issue where the Client stopped retrying to sign-in on start-up on a specific type of connectivity error. Fixed a rare issue where client sent empty device claims to a Gateway after removing a Profile. Fixed an issue where CA migration was not triggered when the CA switch occurred while the Client was running but wasn’t signed in. Fixed an issue where the "Configure OTP" button would not launch the relevant app.

The new list mode allows for a more compact way of showing app shortcuts. It also enables longer app shortcut names to be displayed without truncation. App shortcuts can now be grouped from the admin UI. This allows allows the end user to more easily navigate when there are a lot of app shortcuts. It is now possible to search for app shortcuts. This is very useful if there are a lot of app shortcuts. Pinned app shortcuts are now in a separate tab. Support for Browser auto sign-in is now available. The details in the Entitlements list were moved to individual sub pages, making the list easier to view. Fixed an issue where the Client stopped retrying to sign-in on start-up on a specific type of connectivity error. Fixed a rare issue where client sent empty device claims to a Gateway after removing a Profile. Fixed an issue where CA migration was not triggered when the CA switch occurred while the Client was running but wasn’t signed in. Fixed an issue where the "Configure OTP" button would not launch the relevant app.

Fixed issue where the user interface was missing CSP element. Fixed issue where special URIs (like rdp://...) would crash the client. Fixed issue where roaming under certain circumstances would log out user.

Fixed issue where the Client gets stuck on MFA renewal when OIDC ID token expire. Fixed issue where Client under certain conditions could crash. Fixed issue where Profile configuration from 6.2 Collective would fail to be received by 6.4 Client. Fixed issue where some device settings (Add and Remove Profiles, Keep me signed in) did not apply after restarting the client. Fixed issue where Client would fail to communicate with IPv6 address gateway.

The UI and menu system are all new.

Better behaviour when connecting to Sites. Improved logging. Logs can now be saved to files/folders. Various other minor improvements and bug fixes.

Improved IP address change detection and fixed a few minor bugs.

Updated on-boarding behaviour. Fixes for several errors and crashes.

Various minor improvements to operation and user experience.

Default language - en-US New language support (Portuguese and Spanish). Favourite app shortcuts can now be pinned. Profiles can now be managed centrally. Help is customisable. Logs have been enhanced. Various further fixes and small improvements.

Minor bug fixes.