The following limitations apply to this release:

nZTA controller 22.8R1.11 supports ZTA Gateway 25.1.0.1 only for fresh deployments. You must deploy a new gateway instance and migrate your configuration since direct upgrade from ZTA Gateway 25.1.0.0 to 25.1.0.1 is not supported in the current release.

Dynamic IP Pool is not supported for 22.8Rx and 25.1.0.0, to be supported from ZTA gateway version 25.1.1.0.

Upgrade from version 22.8Rx or 22.7Rx to 25.x is not supported in ZTA gateway.

 - Currently supported platform is VMware ESXi Platform in 22.8R1.10. Other Cloud form factors like GCP, Azure and AWS will be supported in upcoming releases.

TLS 1.3 Support currently supported and validated only for ISAC Windows and Mac Platforms. For Mobile clients (iOS and Android), support will be planned in the upcoming releases.

: The Search Domain field is limited to a maximum of 255 characters.

Short Domain DNS Suffix is not supported.

nslookup is not supported on Windows and Mac OS.

RBAC: If the tenant has both nSA and ZTA gateway, setting any common permissions while creating an Custom RBAC Admin Role applies to both nSA and ZTA gateway. For example, if custom admin role has modify permission for ZTA gateway then the same applies to nSA gateway also.

Okta and PingID SAML authentication methods are supported for MacOS and Windows variants only.

Each application can only be accessed with ping/SSH using the addressing method specified when registering it. That is, if you registered the application using an FQDN, you cannot access it using an IP address.

PZT-24825: Tenants wanting to use their own Public Key Infrastructure with device certificates (known in this document as BYOC - Bring Your Own Certificate), the following limitations apply:

For existing tenants, to convert from a non-BYOC tenant to a BYOC tenant is not supported. This is supported only for newly-created tenants.

For existing tenants, to convert from a BYOC tenant to a non-BYOC tenant is not supported as the tenant needs at least one customer CA.

A CA is not permitted to be used by more than one BYOC tenant.

Known Issues

Limitations

Primary.Product

Primary.Product-ISA6500-Hardware-Guide

Primary.Product-Ivanti-Secure-Access-Client

Custom.PDC_long

Custom.PDC_short

Custom.Company_Name

Custom.PCS_long

Custom.PPS_long

Custom.PCS_short

Ivanti Secure Access Client Supported Platforms Guide

Custom.Doc_PDC_SPG

Primary.Company

Primary.Product-Neurons-iPaaS

Primary.Product-Neurons-for-ITSM

FRS_VARS_Self.Service_Catalog

FRS_VARS_Self.Neurons_ITSM_-_Administrator

FRS_VARS_Self.Self_Service_Mobile_portal

FRS_VARS_Self.Neurons_for_Facilities

FRS_VARS_Self.Neurons_for_GRC

FRS_VARS_Self.Self_Service_Portal

FRS_VARS_Self.Neurons_ITSM_-_Self_Service_User

FRS_VARS_Self.My_Items

FRS_VARS_Self.Request_Offering

FRS_VARS_Self.Service_Requests

Primary.Version

FRS_VARS_Self.AutoDate

Primary.Year

Primary.Product-Security-Controls

Primary.SecondaryProduct

Primary.ProductFull

https://forums.ivanti.com/s/contactsupport

Custom.Org_Support_URL

https://www.ivanti.com/support/product-documentation

Custom.Org_TechPubs_URL

Custom.Org_KnowledgeBase

https://forums.ivanti.com/s/searchallcontent?language=en_US#t=KNOWLEDGE%20BASE&sort=relevancy

Custom.Org_KnowledgeBase_URL

Custom.Org_Community

Custom.Org_Community_URL

Custom.Org_Support

Custom.IPS_short

Custom.IPS_long

Custom.Pulse_Secure_Profiler

Custom.ICS_short

Custom.ICS_long

Neurons for Secure Access Tenant Administration Guide

Custom.Document_Title

Custom.Version_X.X.X

Custom.Build_Number

Custom.Company_Name_full

Custom.Org_URL

Custom.Copyr_Date

(Undefined variable: Custom.Company_Name)

Custom.Company_Name-(Undefined-variable:-Custom.Company_Name)

Ivanti Secure Access Client for Mobile Android 22.2.1-22.8.8 Release Notes

Primary.TitleLine

Custom.Publication_Date

Primary.Product-Ivanti-Secure-Access-Client-for-Mobile

Ivanti Secure Access Client for Mobile Supported Platforms Guide

Primary.TitleLine-Ivanti-Secure-Access-Client-for-Mobile-Supported-Platforms-Guide

Custom.Version_X.X.X-iOS-22.8.8-Android-22.8.8

Ivanti Secure Access Client for Desktop Supported Platforms Guide

Custom.Doc_PDC_SPG-Ivanti-Secure-Access-Client-for-Desktop-Supported-Platforms-Guide

Ivanti Secure Access Client for Mobile iOS 22.2.1 - 22.8.8 Release Notes

Custom.Document_Title-Ivanti-Secure-Access-Client-for-Mobile-iOS-22.2.1-22.8.8-Release-Notes

Primary.Product-Ivanti-Secure-Access-Client-Mobile-iOS

Custom.Version_X.X.X-22.8.8

(Undefined variable: pmc_ios_adminguide.PCS_long)

pmc_ios_adminguide.PCS_long

Custom.Document_Title-Neurons-for-Secure-Access-REST-API-Guide

Custom.Version_X.X.X-22.8R1.9

Custom.PPS_long-Ivanti-Policy-Secure

Custom.PPS_short

Custom.ICS

Custom.IPS_short-Ivanti-Policy-Secure

Primary.PulseConnectSecureTechpubsURL

Primary.TechpubsURL

Custom.Org_KnowledgeBase-Knowledge-Center

Custom.Org_Community-Pulse-Community

Custom.Org_Support_URL-https:support.pulsesecure.net

Custom.Org_KnowledgeBase-Pulse-Secure-Knowledge-Center

Custom.Org_KnowledgeBase_URL-https:kb.pulsesecure.net

Custom.Org_Community_URL-https:community.pulsesecure.net

Custom.Company_Phone_USA

Custom.Org_Support-Pulse-Secure-Technical-Support

Print.Guide

Custom.Org_Support_URL-https:forums.ivanti.com

https://forums.ivanti.com/s/searchallcontent?language=en_US

Custom.Org_KnowledgeBase_URL-https:forums.ivanti.comssearchallcontentlanguageen_US

Custom.ICS_short-Ivanti-Connect-Secure

Custom.PPS_short-Ivanti-Policy-Secure

Custom.PCS_long-Ivanti-Policy-Secure

Custom.ICS-IPS

PPS_Profiler_Deployment_Guide.PPS_short

PPS_Profiler_Deployment_Guide.PCS_short

PPS_Profiler_Deployment_Guide.Version_X.X.X

PPS_Profiler_Deployment_Guide.Doc_PPS_AG

https://forums.ivanti.com/s/searchallcontent