VPN profile support for MDM. This version adds support for setting up and deploying the Zero Trust Client VPN profile through your MDM solution. With this feature, when you deploy Zero Trust Client with an MDM, the VPN profile is installed automatically and users are no longer required to approve the VPN profile installation when they first start the app. Note that if you deploy the VPN profile through an MDM solution, users can’t disable Threat Protection in the client. See Distribute the mobile client with Microsoft Intune to learn how to add a VPN profile for Zero Trust Client in Microsoft Intune.

Email Threat Protection activation codes to users- This release supports activating Threat Protection with one-time use SIA activation codes. To learn how to send activation codes to users, refer to the Threat Protection documentation. Full diagnostic results sharing- After running a full diagnostic of the client, you can now share the results with your administrator or save the log file on your device. Threat Protection statistics- The mobile client now lets end users view the number of requests that are scanned and the number of requests that are blocked by the client. Users are also given graphical data to show the top domains or applications that are scanned and blocked in the past seven days and four weeks. Activate Threat Protection via MDM solutions- You can now activate Threat Protection in Zero Trust Client by distributing the entitlement code with MDM solutions. TCP optimization support- EAA applications using HTTP or HTTPS protocols now support TCP optimization. To use this feature, enable TCP Optimization in Enterprise Center and contact Akamai support.

Resolved an issue with the VPN connection experiencing delays after successfully authenticating with the identity provider (IdP). VPN connection is now established promptly once authentication is complete.

Made improvements to backend security handling to increase the reliability of device posture features.

New features and improvements (Beta) Secure Web Gateway (SWG) support. The mobile client now supports SIA Proxy, enabling you to protect your enterprise network from threats that target HTTP or HTTPS traffic. To learn how to select a proxy type for mobile devices in SIA, refer to the SIA documentation. You need to set up a SIA Proxy MITM certificate on your mobile device to use SIA Proxy. This feature is available in beta. Activate Threat Protection via MDM. With this release, you can specify the Threat Protection activation or entitlement code when deploying the mobile client with MDM solutions. Threat Protection now supports both IPv4 and IPv6 networks.

New features and improvements OS notifications. Notifications alert you when you attempt to access a blocked website or resource, or when your Access session expires and reauthentication is required. Ensure notifications for Zero Trust Client are enabled in your device settings. If they are turned off, an in-app banner provides a quick option to turn them on in your OS settings.

DNS over TLS (DoT) support. You can enable DoT to secure traffic between Zero Trust Client and SIA DNS resolvers. Without DoT, DNS queries from the Internet are unencrypted and available in plaintext as they travel from a DNS client to a DNS resolver. DoT secures this information with TLS encryption by adding privacy and preventing threat actors from spoofing traffic or hijacking DNS from the local network. For instructions, see Configure DoT settings in the SIA documentation. Local bypass support. Local bypass settings in Enterprise Center let you configure the Zero Trust Client traffic that you don’t want directed to the SIA cloud. The traffic you specify bypasses SIA and is directed to another resolver, such as a local or public resolver. Threat Protection in Zero Trust Client doesn’t forward this traffic to SIA. To learn how to configure domains and DNS suffixes that you don’t want directed to SIA, see SIA documentation. Remote Access toggle. Go to Settings to enable or disable the Access service on your mobile device. Debug logging toggle. When enabled in Settings, debug logging lets you capture detailed information about the client, including Access and Threat Protection status, VPN activity, and visited hostnames or IP addresses. Note that debug logging may negatively impact the client’s performance. You can review client logs in Enterprise Center. Threat Protection remediation. Attempts to access a host or resource that is blocked by the current SIA policy setting are now displayed on the Activity screen. Fixed issues. Fixed an issue with accessing case sensitive hostnames. Fixed an issue with syncing client and policy settings with Enterprise Center.

Fixed client connectivity issues when more than two connectors are deployed in the environment.

Improved Access performance. Resolved an issue causing extended loading times for web applications.

Threat Protection (beta). ​This release adds a new feature that lets you enable or disable Threat Protection within the app settings.

New features and improvements Threat Protection (beta). Zero Trust Client extends Secure Internet Access Enterprise (SIA) protection to mobile devices. Threat Protection directs DNS traffic to SIA​ for analysis. With Zero Trust Client​, you can apply ​SIA​ policies to requests that are made inside and outside the corporate network.

New features and improvements Device Posture remediation. The Activity screen now displays information about blocked attempts to access applications or resources when the device doesn’t meet the required risk assessment criteria dictated by the access policy. Remediation messages suggest actions the user can take to fix the problems that were detected. EAA Applications with Device Posture criteria. EAA Applications that enforce Device Posture criteria in their Access Control are now accessible by devices using the mobile client. Zero Trust Client Mobile is now available in Japanese. To switch languages, set your device’s operating system language to Japanese. Distribute the mobile client with MDM solutions. Refer to the MDM section in the client documentation to learn how to distribute Zero Trust Client Mobile with MDM solutions. Fixed issues Entering the IDP URL with a http or https protocol prefix no longer results in an error. IDP hostnames that contain numbers are now supported. Various UI fixes and improvements.

Fixed issues - Fixed an issue with overlapping wildcard and CIDR configurations which resulted in the mobile client being unable to access some applications. - Fixed an issue that caused the app to crash when trying to connect to VPN from Settings on iOS. - The Send Report button no longer disappears from the Diagnostics tab when switching between tabs on iOS. - The client now informs the user that they need to reinstall the app to switch to a different IdP after logging out. - Multiple UI updates