What's New
1 min
Build : 1399
- Day-0 support for Windows 11 26H2: Ivanti Secure Access Client is qualified with Windows 11 26H2.
- Day-0 support for macOS 27: Ivanti Secure Access Client is qualified with macOS 27.
- Support for Post-Quantum Cryptography (PQC): ISAC desktop now supports PQC. This feature uses hybrid key exchange following a crypto-agile architecture by supporting multiple cryptographic algorithms to prevent vulnerability to future quantum computers. This supports SSL, TLS, and ESP connections only. This is supported for VPN clients only.
- Support for Default DNS gateway in ZTA: This feature ensures all unmatched DNS queries are routed via a default DNS gateway during ZTA deployments ensuring no DNS leakage if resolved via physical adapter. This feature is similar to the VPN's Search Device DNS only feature.
- Proxy PAC File Size: Changed the default size from 250KB to 1MB to support complex routing logic.
- Fallback Authentication support for WHFB Single Sign-on: This feature is used to enable automatic fallback to a SAML/OAuth based identity provider, if the Windows Hello For Business authentication fails. This ensures uninterrupted service. For more information, see Windows Hello for Business (WHfB).
- ISAC Diagnostic Viewer Enhancements: The diagnostic viewer now displays:
- Active/Inactive connections
- Group ZTA/VPN connection gateways
- Search
- Error display
- Native Packet Capture Support for ZTA: ISAC now includes built-in packet capture functionality, eliminating the need for third-party tools and local administrator privileges.
- Native Packet Capture Support for L3VPN and ZTA
- Supports both Tunneled (including ZTA) and non-tunneled traffic
To enable this feature, see Windows Registry.
- Offline Mode Support: When the ZTA Controller is unreachable, the feature ensures business continuity by applying last-known policies to active sessions during outages within a defined grace period.