General Bug fixes and Improvements. Classic VPN : Supporting SAML as secondary authentication when primary authentication is Certificate. TLS 1.3 support Enabling Touch ID / Face ID for secondary Authentication when  certificate as Primary. Migration from URL Connection to URL Session for Network Requests ZTA : None

General Bug fixes and Improvements. Classic VPN : Supporting SAML as secondary authentication when primary authentication is Certificate. TLS 1.3 support Enabling Touch ID / Face ID for secondary Authentication when  certificate as Primary. Migration from URL Connection to URL Session for Network Requests ZTA : None

General Bug fixes and Improvements. Classic VPN : Supporting User/Pass first factor TOTP second factor auth with cert restriction at realm level. ZTA : None

General Improvements and Bug Fixes New Features: Classic: Hide Add Connection and Delete Unmanaged profiles for ISAC managed by MDM. ZTA: None

General Improvements and Bug Fixes: New Features: Classic: None ZTA: None

General Improvements and Bug Fixes Classic VPN : Logging arch improvement Intune MDM support: Intune MDM is now qualified for Ivanti Secure Access Client for Mobile ZTA : None

General Improvements and Bug Fixes Classic : Conditional Access support on ISAC iOS Client. ZTA : None

General Improvements and Bug Fixes New Features: Classic: DNS request handling Optimization. ZTA: None

Bug Fixes and general improvements

General Improvements and Bug Fixes New Features: ZTA: Ivanti NMDM Integration with Ivanti ZTA

General Improvements and Bug Fixes ZTA: Enrol to ZTA: Allow users to add ZTA profile from Add connection screen. Classic: Supporting HMAC on to address Host Checker by-pass vulnerability IOS. (Note: HMAC for iOS will be supported in ICS Server Release 22.5R2 and onwards) Derived Credentials Support iOS Classic with MI as MDM and Entrust as Cert Provider.

IFTTLS support for Classic VPN: Ivanti has changed the Client Server Communication protocol for Mobile Clients from NCP to IFTTLS with no expectation of change in VPN functionality. Note: ICS Server Release 9.1R18 and onwards supported Pre-auth Device Validation with MobileIron MDM for VoD and Per-App VPN Split Tunnel support of 1024 routes: Maximum number of split tunnel routes per tunnel for iOS-1024. General Bug fixes and improvements

General Improvements and Bug Fixes Classic VPN: - Dark Mode support - Updated Voice Over support - Option to switch between UI Modes (Classic / New- UX)   Zero Trust Access: - Actionable insights based on user risk score analysis

* Product Stabilisation * NEUX For Pulse iOS Client * ZTA: MFA support
 IFTTLS for PZT * VPN: Device ID Validation Support ( 9.1R16 ICS requires to enable this feature)

Classic VPN : Host Checker support for iOS VOD Per-App VPN PZT : Handle the CNAME Record for resources for PZT Bug fixes and VPN stability improvements.

ZTA Statistics ( Advanced Diagnostics). Bug fixes and VPN stability improvements.

ZTA : Multiple Sign-in URL Support ZTA : Tenant CA Certificate Rotation. Classic : Integrate WkWebView Support and UIWebView Deprecation. Bug Fixes and VPN Stability Improvements.

Bug fixes and VPN stability improvement.

Proxy Pac file support for Client and MDM configuration. Bug fixes and VPN stability improvement.

Add host to header field support. PCS Manual and Automatic proxy support . Supporting New enrolment flow for PZTA. IP+FQDN based split tunnelling for PZTA. Bug fixes and VPN stability improvement.

PZTA : Mobile client changes to support multiple IP addresses for gateway and IP address failover PZTA : SAP edit should allow to change GW attribute PZTA : Support uploading client logs to ZTA controller VPN stability.

Bug fixes and VPN stability improvement.

Bug fixes and VPN Stability improvements.

- IPV6 ESP mixed mode support. - VPN stability and improvements

Key highlights of this release are : 1. SAML Single Log out fix 2. Transition from MDM managed Classic profile to PZTA profile 3. Bug fixes to improve quality of the product.