New features summary

These are cumulative release notes. If a release does not appear on this section, then there were no associated new features and enhancements.

  • Support for provisioning two Sentry certificates: To mitigate service disruptions caused by certificate expiration, a provision is being provided in Ivanti Neurons for MDM to upload 2 certificates for TLS handshake between Sentry and Tunnel. To support this, a new app restriction, ReservedSentryCertificate, is added to Android Enterprise for configuring up to two Ivanti Standalone Sentry certificates for TLS handshake with Tunnel and Sentry.

    This feature will be available starting from the following product versions — Ivanti EPMM: 12.6, Ivanti Neurons for MDM: 118, Standalone Sentry: 10.4, and Ivanti Tunnel for Android: 4.18.

    For more information, see Ivanti Tunnel configuration field description for Android Enterprise.

  • Support for Android 16: Ivanti Tunnel 4.18.0 now supports Android 16 operating system version.

  • Support for FQDN-based Split Tunnel: Added the FqdnAllowedList functionality, which enables FQDN-based traffic management by allowing administrators to specify FQDN names instead of IP addresses. It enhances flexibility and efficiency by eliminating the need to manage multiple IP entries.
    For more information, see Ivanti Tunnel configuration field description for Android Enterprise.

  • Android Version 9 – Minimum Support: Ivanti Tunnel 4.17.0 now supports devices running Android 9 and above.

  • Support for SDK Version 5.5.59: Ivanti Tunnel has been upgraded to Zimperium SDK version 5.5.59, improving security by resolving the Chrome Anti-Phishing issue.

  • Added Tunnel logs to Client logs: Ivanti Tunnel 4.16 now incorporates Tunnel logs in the client logs (generated as a zip file) when installed with Mobile@Work client version 12.4 or later in the same profile. These logs are marked with the prefix "tunnel-".

  • Enhanced DNS Configuration: Enhanced the behaviour of DnsResolverIP when AllowedAppList is configured in Sentry + MTD mode.
    For more information, see Ivanti Tunnel configuration field description for Android Enterprise.

  • New restriction added: New app restriction IsSplitDomainsListisPriority is added to Android Enterprise to select between SplitDomainsList and DNSResolverIP configuration for DNS resolution.
    For more information, see Ivanti Tunnel configuration field description for Android Enterprise.

  • Support for Android 15: Ivanti Tunnel 4.15.0 now supports Android 15 operating system version.

  • Support for SDK version 5.4.53: Ivanti Tunnel is upgraded to Zimperium SDK Version 5.4.53.

  • New restriction added: New app restriction enableOpenssl, is added to Android Enterprise to enable/disable to support OpenSSl for N/W component which decreases the overall processing time and hence reduces the CPU/battery load.
    For more information, see Ivanti Tunnel configuration field description for Android Enterprise.

  • Support for Captive Portal: Ivanti Tunnel now supports Captive Portal Wi-Fi Authentication.
    For more information, see Mobile@Work for Android.

  • Support for SDK version 34: Zimperium version 5.3 SDK now supports target SDK version 34.
  • Support for Exclude route added to Tunnel configuration: Added the ‘Exclude Route’ feature to the Android VPN configuration for devices running Android version 13 and above. This functionality allows exclusion of specified IP routes from VPN traffic, directing them through the device’s native network. For more information, see Ivanti Tunnel configuration field description for Android Enterprise.
  • TLS versions deprecated: Starting from Ivanti Tunnel for Android 4.11 0 and later the TLS 1.0 and TLS1.1 versions will not be supported. The default supported TLS version is TLS 1.2.
  • Clear logs option: The Clear Logs option is now added to Ivanti Tunnel for Android apps Settings section app. For more information, see the Troubleshooting section.
  • Ivanti End User License and Services Agreement updated: Ivanti has updated the End User License and Services Agreement in the About section of the Ivanti Tunnel for Android app. The users will be redirected to this agreement from the Ivanti Tunnel application
  • Support for Android 14: Ivanti Tunnel for Android 4.11.0 now supports Android 14 operating system version.

  • Day Zero compatibility for Android 13: Day Zero compatibility for Android 13 is now available on Ivanti Tunnel for Android.

  • Support for updated Ivanti Tunnel application configuration values to be reflected on device Tunnel application: The Ivanti Tunnel application configuration values for UI NotificationsLevel and DebugLog in the device Tunnel application (Tunnel User Interface) are now reflecting with updated values. Any modification that are made on the server overrides the manual modification made on the device Tunnel.

  • Support for rebranding MobileIron Tunnel to Ivanti Tunnel: MobileIron Tunnel is now rebranded to Ivanti Tunnel. The MobileIron logo is also replaced with Ivanti logo in the Ivanti Tunnel application and Google play store. MobileIron Tunnel is now called Ivanti Tunnel.

  • Support modern Android features: Ivanti Tunnel for Android includes a dark mode version of the Android GUI.

  • Support for self-signed CA certificates: Self-signed CA certificates or private CA certificates are now supported with Ivanti Tunnel for Android 4.6.2 release.

  • Support for Hungarian language: Hungarian language is now supported with Android for Ivanti Tunnel 4.6.2 release.

  • Access Control List now applicable for Android devices on Ivanti Tunnel: The access control option in the MTD management console released for iOS devices in Ivanti EPMM 11.5.0.0, is now also compatible with Android devices running over the Ivanti Tunnel VPN. You can apply the threat category as either Phishing or Safe to websites from an Access Control List (ACL) in the Management > Access Control tab. Administrators can add URLs one at a time, or use the Comma Separated Values (CSV) file template to import a bulk list. For more information, see "Allow or block device access to specific URLs" in the Mobile Threat Defense Solution guide for [Ivanti EPMM/Ivanti Neurons for MDM].

  • Support for anti-phishing with MobileIron Threat Defense (MTD): Ivanti Tunnel VPN supports anti-phishing with a MobileIron Threat Defense (MTD) setup that is enabled for anti-phishing. For additional information, see "Support for anti-phishing with MobileIron Threat Defense" in the Ivanti Tunnel for Android Guide.