More flexible controls have been introduced for scheduling discovery scans, including; hourly, daily or weekly options, configurable to start on a specific date and time.

Schedules can be applied to multiple scans simultaneously or on an individual scan basis, e.g. SNMP scan only.

Learn more about schedule scans.

Agent Policy now provides the ability to configure bandwidth utilization to allow organizations to manage Wide Area Network (WAN) and Local Area Network (LAN) bandwidth usage when downloading or distributing Ivanti Neurons agents and capabilities, so as not to exhaust network resources.

Organizations can throttle WAN bandwidth using intuitive percentage controls, for example, when distributing agents to a specific set of endpoints. For example, set to 75% so the process can’t utilize any more than 75% of available WAN bandwidth.

This also works in conjunction with previously released peer-to-peer download support to ensure LAN utilization can also be throttled.

This ability to configure bandwidth utilization is ideal for metered or low bandwidth connections or satellite offices located in remote locations with poor connectivity.

Learn more about Bandwidth Utilization.

In Ivanti Neurons 2022.3 release, Agent Policy Peer-to-Peer Downloads for Windows devices was introduced. In this release, the same capabilities for macOS devices has been introduced. Allowing devices on a network to share agent, engine and configuration installations between one another.

Client-server networks tend to perform less effectively when many devices are requesting services. A peer-to-peer network is far more efficient in this scenario, as the file transfer load is shared between all the participating devices on the network.

Also, as a client-server network has the potential to fail if the server malfunctions or the WAN connection is lost, a peer-to-peer network will remain functional allowing agent and policy distribution to continue uninterrupted.

So, this will provide more efficient options to our customers for agent distribution on macOS devices.

The Lenovo Warranty connector is designed to get warranty details for Lenovo devices in a given environment. This connector queries for Lenovo devices within a tenant that either don’t have any warranty information or are nearing warranty expiration and will gather warranty information directly from Lenovo for those devices.

Learn more about the Lenovo Warranty Connector.

The Dell Warranty connector is designed to get warranty details for Dell devices in a given environment. This connector queries for Dell devices within a tenant that either don’t have any warranty information or are nearing warranty expiration and will gather warranty information directly from Dell for those devices.

Learn more about the Dell Warranty Connector.

Users can now run connectors in the cloud for cloud-based products. This means that you no longer need to install or configure an on-premises connector server to import data from Microsoft Azure AD, Intune, CrowdStrike, Jamf Pro, and more.

Learn more about Setting up Connectors.

The Service State query now includes Startup Type and Description. Additional actions to change the startup type have also been added.

You can now query the Update Settings of your endpoints. In detail, using Windows Update Settings or macOS Update Settings. Or combined and high-level, using Operating System Update Settings.

This newly added query provides insight into the applications and binaries set as user/login startup items.

A new bundle of macOS sensors has been added to Edge Intelligence. You will see various new entries on the suggestion’s page that provide additional health, inventory, and security insights.

Starting in our 2022.4 release we are beginning to enable and solicit feedback on our all-new next-generation automation experience which has been architected from the ground up to provide powerful low-code/no-code based remediation across the issue lifecycle.

This incorporates over 10 items of user feedback as well as the following features:

• Consolidated UI – all bots are now stored in one place.
• Next-Gen UI – modern design.
• Version control – ability to navigate between different versions of a config and view metadata.
• Unbatched workflow engine – use interactive automation at scale.
• Embedded triggers – consistent approach to trigger configuration.
• Pass variables between stages – unlock hundreds more use cases by fully leveraging collected information and passing into actions.
• Filter Stage Enhancement – combined with stage UID, easily filter on any property from any stage.
• PowerShell Core support – PowerShell queries and actions now support PowerShell Core.
• PowerShell Query - Run As – PowerShell queries can now be Run As the logged on user.
• Time-bound/de-duplicated visual results – all new result view, using patent pending approach, to de-duplicate and show last results per stage of each device across a specified time frame, to easily identify specific devices that might need attention.
• New out-of-the-box templates – new template based approach, allows for a more refined OOB experience, with descriptive templates that can be deployed into fully functioning bots.

Quickly identify the patches related to a list of CVEs with the ability to upload a list of CVEs from a text file. When a list of CVEs is uploaded in Patch Intelligence, the CVEs are extracted to determine which patches are related to each CVE and then those patches are displayed for your review. Select which patches to add to a patch group and then use that patch group in your patch deployments to quickly remediate vulnerabilities by CVE.

CVE Upload in Patch Intelligence allows patch administrators to quickly identify patches associated with a list of CVEs provided by the Security team, vulnerability solution or any other source of threat insight to help reduce the time to patch against these vulnerabilities.

Learn more about CVE Upload.

The Apple macOS Agent will perform periodic scans to detect all missing patches. Missing patch insights for macOS devices will be displayed in Patch Intelligence and Endpoint Vulnerability.

The ability to deploy patches to macOS devices with the Ivanti Neurons Agent, in order to remediate vulnerabilities, is planned for a future release.

The Patch Configuration Deployment Behavior options; Create and Edit View, have been updated to improve the configuration experience and understanding of which deployment option(s) have been enabled for the Patch Configuration. The new Deployment Options tab includes toggles to enable the ability to deploy by severity or patch group. In addition, a toggle has been added to limit the patches for deployment to only include a selected set of vendors/products.

Learn more about Deployment Behavior enhancements.

New Availability column added to the Configuration Summary table in Patch Settings. The Availability column shows the current status of the configuration. Values in this column indicate the creation status, status of edits and association of the Patch Configuration to a Policy Group.

Learn more about the Availability column.

The Agent Client now shows detailed information about patch downloads, installations, successes, and failures.

Recommended Products is now giving recommendations based on the software inventory of devices from the Intune environment. Previous versions gave recommendations based on applications in the Intune console. This update significantly increases the recommendations and their relevance to the user.

Learn more about Recommended Products enhancements.

Selecting a managed Product now displays Device and User Status cards. The Devices Status card is similar in nature to the Patched Devices count on the Recommended Products page, but this chart shows the detailed status of the product/application for all the devices. The User Status card shows the same application by user.

The Product View page now allows you to navigate to and edit the deployment options for applications that are already being managed. Selecting Configure Management will open the Advanced Deployment Options flyout, with the warning the changes will take effect with the next published version.

Learn more about Product View and Navigation enhancements.

Configuration Management has been expanded to include several new options on the Advanced Deployment Options if the product is assigned to a group. There are multiple options for toast notifications, administrators can now set a deadline for when the application update must be installed, and administrators can now provide additional options for users to interact with their systems restarts following an active update. A grace period can be assigned with additional countdown and snooze options.

New RBAC UI enhances browsing experience.

Internationalization and localization improvements. To change locale; go to user initials in the top right of the UI and select Profile >Settings .

This release has focused on improving the recognition rates for discovered software, in particular the ability to target the recognition of high-value and high-importance software titles.

The Digital Experience Score page adopts a new responsive, row-based design that displays texts better in small screens.

A new control has been introduced to switch between Warning and Normal Indicators for all four Domains – Device, Application, Security and Service Insights - at the same time.

The Anti-virus Protection and Anti-virus Realtime Monitoring indicators now support CrowdStrike Falcon Sensor and Windows Defender.