--- title: Overview slug: isac/admin-guide/android docTags: createdAt: 2026-07-23T05:01:25.007Z --- The [Ivanti Secure Access Client Mobile Supported Platforms Guide](https://www.ivanti.com/support/product-documentation#96), lists the mobile device OS versions supported by Ivanti Secure Access Client and the security features supported on each mobile device OS. The Ivanti Secure Access Client Android app supports the following features: | Product | Features List | | ------------ | --------------------------------------------------------------------------------------------------------------------------------------------------------------- | | ICS Features | - Web Proxy. See [Web Proxy Server Support](docId\:AhYmmeXJdgFipGnLEHHjL). | |   | - Per-App VPN, with one VPN tunnel shared by all apps that need VPN (Layer 3). See [Mobile Device Management (MDM) Configuration](docId:2RTQrOpHtG_-KFwWgTfFQ). | | | - Host Checker validation for VPN On-demand. See [Host Checker Feature](docId\:j5OwYez8fHFKBjQH1Oo9u). | | | -Split Tunneling (IP-based). See [Split Tunneling](docId:2RTQrOpHtG_-KFwWgTfFQ). | | | - Split Tunneling (FQDN-based) - Layer 3. See [Fully Qualified Domain Name (FQDN) based Split Tunneling](docId:2RTQrOpHtG_-KFwWgTfFQ). | | | - Configurable DNS search order. See [VPN Tunneling Connection Profiles Search device DNS only](docId:2RTQrOpHtG_-KFwWgTfFQ). | | | - Launch from Browser. See [Launch From Browser](docId\:X5hZSxtkbj5Uuc2PdT39_). | | | - Always-On VPN. See [Always-on VPN](docId:2RTQrOpHtG_-KFwWgTfFQ). | | | - SSL VPN. See [VPN Tunneling](docId:2RTQrOpHtG_-KFwWgTfFQ). | | | - ESP VPN. See [VPN Tunneling](docId:2RTQrOpHtG_-KFwWgTfFQ). | | | - SSL VPN over IPv6. See [VPN Tunneling](docId:2RTQrOpHtG_-KFwWgTfFQ). | | | - ESP VPN over IPv6. See [VPN Tunneling](docId:2RTQrOpHtG_-KFwWgTfFQ). | | | - ESP VPN Mixed Mode (IPv4-in-IPv6 and IPv6-in-IPv4). See [VPN Tunneling](docId:2RTQrOpHtG_-KFwWgTfFQ). | | | - FIPS Compliance. See [FIPS Compliance](docId:2RTQrOpHtG_-KFwWgTfFQ). | | | - Configure VPN through MDM. See [Mobile Device Management (MDM) Configuration](docId:2RTQrOpHtG_-KFwWgTfFQ). | | | **Authentication Features** | | | - SAML support. See [SAML Support](docId\:D1k-PgXfzrcBBRx7VhP2w). | | | - SAML Single Logout. See [SAML Single Logout](docId\:D1k-PgXfzrcBBRx7VhP2w). | | | - RSA Token Code. See [RSA Token Code](docId\:D1k-PgXfzrcBBRx7VhP2w). | | | - RSA Soft-token Integration/Automation. See [RSA Soft-token Integration ](docId\:tu8YAsDkuWn7SCbYfdnEQ). | | | - Time-based One-Time Password (ICS Only). See [Time-based One-Time Password (ICS Only)](docId\:D1k-PgXfzrcBBRx7VhP2w). | | | - Certificate Authentication. See [Certificate Authentication](docId\:D1k-PgXfzrcBBRx7VhP2w). | | | - Certificate Authentication with IKE and ESP. See [Certificate Authentication with IKE and ESP](docId\:pVlaR360WgI2-0m8vfO4P). | | | - Stealth Mode Tunnels ((Per-App VPN). See [Mobile Device Management (MDM) Configuration](docId:2RTQrOpHtG_-KFwWgTfFQ). | | | - VoD / Per-App VPN. See [Mobile Device Management (MDM) Configuration](docId:2RTQrOpHtG_-KFwWgTfFQ). | | | **Host Check Features** | | | - OS Version support. See [Host Checker Feature](docId\:j5OwYez8fHFKBjQH1Oo9u). | | | - Play Integrity. See [Play Integrity](docId\:QnpPJFvu4jPowSYbjP1AC). | | | **Security Features** | | | - Server Certificate Trust Enforcement. See [Server certificate](docId\:kFWyWUw5PPLU_GB3H4e4c). | | | - HTTP-only Cookie. See [HTTP Only Device Cookie](docId\:SaJ8hSNoEz6xHxvmgvxWa). | | | - Minimum Client Version Enforcement. See [Minimum Client Version Enforcement](docId\:lkhok1ol5bYaRuk4y21HA). | | | **Other Features** | |   | - Android Interface Definition Language (AIDL). See [APIs using Android Interface Definition Language (AIDL)](docId\:KjrRrAb8DUzEP1pEdM9_Y). | | | - Conditional Access on Android ISAC Client. See [Other Features](docId\:WPEZJruD-JkYJncKOBZq0). | | | - Device Validation Support for VoD and Per-App VPN. See [Other Features](docId\:WPEZJruD-JkYJncKOBZq0). | | | - Device ID Validation. See [Other Features](docId\:WPEZJruD-JkYJncKOBZq0). | | | - OS Version Support. See [OS Version Support](docId\:ZO4OUxlR6vHfXq4OkwWUq). | | | - Minimum Client Version Enforcement. See[Minimum Client Version Enforcement](docId\:lkhok1ol5bYaRuk4y21HA). | | | - HTTP Device only Cookie. See [HTTP Only Device Cookie](docId\:SaJ8hSNoEz6xHxvmgvxWa). | | | - Derived Credential Support. See [Other Features](docId\:WPEZJruD-JkYJncKOBZq0). | | | - VPN Configuration. See [Other Features](docId\:WPEZJruD-JkYJncKOBZq0). | | | - Dark Theme Support. See [Other Features](docId\:WPEZJruD-JkYJncKOBZq0). | | | - RSA Soft-token Integration. See [RSA Soft-token Integration ](docId\:tu8YAsDkuWn7SCbYfdnEQ). | | | - Voice Over Support. See [Other Features](docId\:WPEZJruD-JkYJncKOBZq0). | | | - UI Mode Switching. See [Other Features](docId\:WPEZJruD-JkYJncKOBZq0). | | | - Certificate Authentication with IKE and ESP. See [Certificate Authentication with IKE and ESP](docId\:pVlaR360WgI2-0m8vfO4P). | | | - Launch from Browser. See [Launch From Browser](docId\:X5hZSxtkbj5Uuc2PdT39_). | | | - Multi-factor authentication with realm level certificate. See [Multi-factor authentication with realm level certificate](docId\:z_G55w85SpJYZU1mmoQCa). | | | - Adding Granular Control for Manual Profiles. See [Adding Granular Control for Manual Profiles](docId\:GkElZhJb-3wm4ITX1YSTm). | | | - Smart Connection. See [Smart Connection.](docId\:g_jOHJtLBbbMk4037-fVz). | | | - Chrome OS MTU Support. See [Chrome OS MTU Support](docId:1MbhwpZ9IaXkPvAeSU_T3). | | | - Knox Service Plugin. See [Knox Service Plugin (KSP)](docId\:TCfM0AitnNsq9WPEvrboD). | | | - Biometric Support. See [Biometric Authentication Support](docId\:WPEZJruD-JkYJncKOBZq0) | | | - Samsung KNOX MDM support. See [Samsung KNOX MDM Support for ICS](docId\:WPEZJruD-JkYJncKOBZq0). | | ZTA Features | - NZTA Enrollment. See [Enrolling for nZTA Connections](docId\:VyPa1kKZos7QPYMtTVhr6). | | | - On Demand. See [ZTA Supported Features](docId\:VyPa1kKZos7QPYMtTVhr6). | |   | - Multiple Tunnels. See [ZTA Supported Features](docId\:VyPa1kKZos7QPYMtTVhr6). | | | - Dynamic Policy Update and CARTA. See [Dynamic Policy Update and CARTA](docId\:VyPa1kKZos7QPYMtTVhr6). | | | - Transition from Classic to nZTA. See [Transition from Classic to nZTA](docId\:VyPa1kKZos7QPYMtTVhr6). | | | - Split Tunneling (IPv4 FQDN based app access). See [Split Tunneling (IPv4 FQDN based app access)](docId\:VyPa1kKZos7QPYMtTVhr6). | | | **Authentication** | | | - SAML Authentication. See [Authentication Methods and Policies](docId\:VyPa1kKZos7QPYMtTVhr6). | | | **Host Check** | | | - OS Version Support. See [OS Version Support](docId\:ZO4OUxlR6vHfXq4OkwWUq). | | | **Other Features** | | | - Minimum Client Version Enforcement. See [Minimum Client Version Enforcement](docId\:VyPa1kKZos7QPYMtTVhr6). | | | - Integrating NMDM with nZTA (22.6R1). See [Integrating NMDM with nZTA](docId\:VyPa1kKZos7QPYMtTVhr6). |