---
title: What's New
slug: releasenotes/whats-new
docTags: 
createdAt: 2026-09-24T04:41:02.860Z
---

::::ExpandableHeading{isOpen="true"}
## Release 25.1.0

**Build : 1399**

- **Day-0 support for Windows 11 26H2**: Ivanti Secure Access Client is qualified with Windows 11 26H2.
- **Day-0 support for macOS 27**: Ivanti Secure Access Client is qualified with macOS 27.
- **Support for Post-Quantum Cryptography (PQC)**: ISAC desktop now supports PQC. This feature uses hybrid key exchange following a crypto-agile architecture by supporting multiple cryptographic algorithms to prevent vulnerability to future quantum computers. This supports SSL, TLS, and ESP connections only. This is supported for VPN clients only.
- **Support for Default DNS gateway in ZTA**: This feature ensures all unmatched DNS queries are routed via a default DNS gateway during ZTA deployments ensuring no DNS leakage if resolved via physical adapter. This feature is similar to the VPN's Search Device DNS only feature.
- **Proxy PAC File Size**: Changed the default size from 250KB to 1MB to support complex routing logic.
- **Fallback Authentication support for WHFB Single Sign-on**: This feature is used to enable automatic fallback to a SAML/OAuth based identity provider, if the Windows Hello For Business authentication fails. This ensures uninterrupted service. For more information, see [Windows Hello for Business (WHfB)](https://docs.ivanti.com/whfb).
- **ISAC Diagnostic Viewer Enhancements**: The diagnostic viewer now displays:
  - Active/Inactive connections
  - Group ZTA/VPN connection gateways
  - Search
  - Error display
- **Native Packet Capture Support for ZTA**: ISAC now includes built-in packet capture functionality, eliminating the need for third-party tools and local administrator privileges. 
  - Native Packet Capture Support for L3VPN and ZTA
  - Supports both Tunneled (including ZTA) and non-tunneled traffic**
**

:::Paragraph{indent="1"}
To enable this feature, see [Windows Registry](https://help.ivanti.com/ps/help/en_US/ISAC/vNow/cg_ics_client/windows_registry.htm).
:::

- **Offline Mode Support**: When the ZTA Controller is unreachable, the feature ensures business continuity  by applying last-known policies to active  sessions during outages within a defined grace period.
::::