--- title: What's New slug: ps/help/en_us/ics/25_1_1_2/rn/whats-new docTags: createdAt: 2026-08-02T14:57:48.295Z --- :::ExpandableHeading ## Version 25.1.1.2 | Product Version | Build | | ------------------------------------- | ------------------------------------------ | | ICS 25.1.1.2 | 25911 | | ISAC 22.8R5
Mobile Client 22.8R6 | 41063
17079 (Android)
5717 (iOS) | | WAF Default CRS | 1.0.4 | | Default ESAP | 4.6.4 | This release includes security enhancement and [bug](docId\:zQfDnVcuI7cel21_iq-yM) fixes. Ivanti encourages customers to upgrade to this latest version. - **RSA Authentication Manager 8.8**: Support for RSA Authentication Manager 8.8 is qualified as part of the validation for ICS 25.x. As a result, users who have upgraded to RSA Authentication Manager 8.8 will be able to use this functionality with ICS 25.1.1.2. For RSA Authentication Manager 8.8 and newer versions, Ivanti recommends using the new RSA (REST API) authentication server, see see [Using a RSA Server (REST API)](docId\:xspmMKlIYdJkGpv_mrnQI). ::: :::ExpandableHeading ## Version 25.1.1.1 | Product Version | Build | | ------------------------------------- | ------------------------------------------ | | ICS 25.1.1.1 | 15763 | | ISAC 22.8R5
Mobile Client 22.8R6 | 41063
17079 (Android)
5717 (iOS) | | WAF Default CRS | 1.0.4 | | Default ESAP | 4.6.4 | This release includes security enhancement and [bug](docId\:zQfDnVcuI7cel21_iq-yM) fixes. Ivanti encourages customers to upgrade to this latest version. ::: :::ExpandableHeading ## Version 25.1.1.0 | Product Version | Build | | ------------------------------------- | ------------------------------------------ | | ICS 25.1.1.0 | 11811 | | ISAC 22.8R5
Mobile Client 22.8R6 | 41063
17079 (Android)
5717 (iOS) | | WAF Default CRS | 1.0.4 | | Default ESAP | 4.6.4 | - Feature parity with ICS release [22.8R2.3](https://help.ivanti.com/ps/help/en_US/ICS/22.x/22.8R2.2/rn/landingpage.htm) and [22.7R2.12](https://help.ivanti.com/ps/help/en_US/ICS/22.x/22.7R2.11/rn/landingpage.htm) - **Citrix Support**: ICS now supports the use of Device ID as a unique identifier in Citrix Xendesktop LTSR 2507, enabling enhanced device-based authentication and tracking. - **Secure Boot and vTPM Support**: Hyper-V, Openstack KVM, Azure platform now provides secure boot support with vTPM functionality, enhancing security and integrity for virtual machines, see [Deployment Guide](https://help.ivanti.com/ps/help/en_US/ICS/25.1.x/sb-ug/introduction.htm). ::: :::ExpandableHeading ## Version 25.1.0.1 | Product Version | Build | | ------------------------------------- | ------------------------------------------ | | ICS 25.1.0.1 | 10387 | | ISAC 22.8R5
Mobile Client 22.8R6 | 41063
17079 (Android)
5717 (iOS) | | WAF Default CRS | 1.0.4 | | Default ESAP | 4.3.8 | There are no new ICS features in this release. This release includes patch for OpenSSL CVE-2025-15467. Feature parity of this release remains same as 25.1.0.0. Refer the [KB](https://forums.ivanti.com/s/article/Resolution-of-OpenSSL-CVE-2025-15467-in-Network-Security-Products) for more info. ::: :::ExpandableHeading ## Version 25.1.0.0 | Product Version | Build | | ------------------------------------- | ---------------------------------------- | | ICS 25.1.0.0 | 5663 | | ISAC 22.8R2
Mobile Client 22.8R3 | 33497
14 (Android)
95033 (iOS) | | Default ESAP | 4.3.8 | - **Secure Boot with TPM/vTPM**: The Secure Boot feature offers protection against unauthorized bootloader and kernel images, malware, and rootkits, and ensures compliance with security by design principle while improving boot time. For more information, see [Secure Boot with TPM/vTPM](https://help.ivanti.com/ps/help/en_US/ICS/25.1.x/sb-ug/landingpage.htm). - **Rotate Internal Storage Key**: This process encrypts sensitive information like passwords when storing them internally and ensures the encryption key is unique and random for every ICS instance, see [Rotate Internal Storage Key](https://help.ivanti.com/ps/help/en_US/ICS/25.1.x/ag/security-hardening.htm#Rotate). - **Security Enhanced WAF Operation**: This feature protects Connect Secure gateway web applications by filtering and monitoring HTTP traffic, preventing attacks such as SQL injection, cross-site scripting (XSS), and other web exploits, see [Configuring Web Application Firewall UI](https://help.ivanti.com/ps/help/en_US/ICS/25.1.x/ag/security-hardening.htm#Configur) and [Security Enhanced WAF Operation console](https://help.ivanti.com/ps/help/en_US/ICS/25.1.x/ag/security-hardening.htm#Configur2). - **Shared Secret key**: This feature configures a Shared Secret for each source/target pair at time of creation of Push Config Target, see [Configuring Targets](https://help.ivanti.com/ps/help/en_US/ICS/25.1.x/ag/config_file_admin.htm#configuration_file_administration_293578963_1016669). - **Password key Generation**: New API's introduced to generate and fetch the password key, see [APIs](https://help.ivanti.com/ps/help/en_US/ICS/22.x/apig/rest_api_soln_guide/ics_spec_configs__using_restapis.htm#Generate2). - **Next Generation Web server**: The Next Generation Web Server has been developed to enhance the performance and scalability of web server infrastructure, see [Next Generation Web Server](https://help.ivanti.com/ps/help/en_US/ICS/25.1.x/ag/security-hardening.htm#Next). Web server logs are implemented for web-related event codes with debug severity, see [Using the Debug Log](https://help.ivanti.com/ps/help/en_US/ICS/25.1.x/ag/troubleshooting_tools.htm#Web). - **SELinux Security Policy**: The ICS system provides an Enforcing only SELinux capability, ensuring that even the root user or admin cannot switch SELinux to permissive mode without rebooting the system, See [SELinux Security Policy](https://help.ivanti.com/ps/help/en_US/ICS/25.1.x/ag/security-hardening.htm#SELinux2). - **Verbose Log**: Administrators can toggle SELinux verbose logging to control the detail level of SELinux-related logs, see [SELinux Verbose Log](https://help.ivanti.com/ps/help/en_US/ICS/25.1.x/ag/security-hardening.htm#SELinux3). :::