Revision History

the following table lists changes to this document from the previous release feature add/update effective release updated authentication with rsa server using a rsa server (rest api) docid\ xspmmkliydjkgpv mrnqi 25 1 3 1 updated host header validation in security hardening updated oauth group claims role mapping in authentication realms updated whbs updated certificate with acme server updated specifying certificate access restrictions updated logging and monitoring updated all the internal, external, management port updated using ikev2 security updated http protocol configuration updated fido2 support for mobile isac host header validation docid\ wif9nf5azei8keco6sizv oauth group claims role mapping docid\ njc3m md5dcwo94zhduxq windows hello for business sso server docid\ xspmmkliydjkgpv mrnqi acme server docid\ q5tn0rv6w3ngbn7wg4tge specifying certificate access restrictions docid\ nlmek44 rtzxgrnbf7dv3 rest api diagnostic logs healthcheck diagnostic logs docid l4b156w5wogzec2josty default vlan id docid\ fca2 nllsvwvdtbtpizvf configuring ikev2 ports docid\ fca2 nllsvwvdtbtpizvf http protocol configuration docid\ fca2 nllsvwvdtbtpizvf fido2 support for mobile isac docid\ fca2 nllsvwvdtbtpizvf 25 1 3 0 updated miscellaneous security options with enforce secondary session id verification updated proxy servers updated authentication realm updated source ip restrictions updated mdm server configuring miscellaneous security options docid\ fca2 nllsvwvdtbtpizvf proxy servers for psam connection docid\ iixfpddqb3weawsarzoal / / /22 7r2 11/ics adminguide/content/auth realms htm#select docid\ uriupej9k c tmrg6i2qh fallback authentication server docid\ njc3m md5dcwo94zhduxq / / /22 7r2 11/ics adminguide/content/general access management htm#general access management 28561674 1012043 docid\ uriupej9k c tmrg6i2qh specifying source ip restrictions at the realm level docid\ fca2 nllsvwvdtbtpizvf configuring an mdm server docid\ xspmmkliydjkgpv mrnqi 25 1 1 0 update security hardening added selinux security policy added security enhanced waf operation added next generation web server added web server debug log settings update configuring targets security hardening docid\ wif9nf5azei8keco6sizv selinux security policy docid\ wif9nf5azei8keco6sizv configuring web application firewall ui docid\ wif9nf5azei8keco6sizv security enhanced waf operation console docid\ wif9nf5azei8keco6sizv next generation web server docid\ wif9nf5azei8keco6sizv using the debug log docid e 11 dzbhgfjweit0nz configuring targets docid\ l7wkyx0b0ax0kejqyud6t 25 1 0 0