New features summary

• Support for MacOS 15: Ivanti Tunnel (4.8.0) for MacOS supports MacOS version 15.

• Bug fix: General bug fixed.

• Support for saving Tunnel logs locally: Ivanti Tunnel for macOS logs are now saved locally and the debug info is shared as an email.
• Support for M2 and M3 Mac hardware: Support for Ivanti Tunnel on M2 and M3 Mac hardware.

• Support to update End User License Agreement: The End User License Agreement (EULA) is updated and the users will be redirected to this agreement from the Ivanti Tunnel application.

• Day Zero Support for macOS14: Ivanti Tunnel for macOS now supports macOS14 version.

• Support for enhanced log level information: The logging configuration is enhanced to include the following categories of log levels. These log levels are listed in the order of priority.
  
  
  

• Support to provide a banner and a notification for updates: Ivanti Tunnel now displays information regarding compliance actions, connection status, and other error messages as a banner in the Ivanti Tunnel application and as a notification in the iOS notification center.

The notifications are not displayed in the notification center if the Ivanti Tunnel application is running in foreground mode; else, only the banner is displayed.

• Split tunnel enhancement: This feature is introduced to enhance browsing the websites when Sentry is down. The following conditions must be configured:

  • Split Tunneling must be enabled on Access.

  • Split Tunneling rule with action "Send direct to destination" for the domain.

  • The websites are cached. This means if the website is visited at least once when the Sentry is up, then all the websites are accessible on the managed devices.
    If Sentry is down and if any rule is set to "Send to destination via Sentry", then those websites are not accessible. However, the public websites with rule set to "Send directly to destination" are still accessible as these websites are cached.
    For example:
    stash.mobileiron.com is not accessible by users when sentry is down as the rule is set to "Send the destination via Sentry".However, www.cnn.com is a public site and is accessible when Sentry is down as the rule is set to "Send directly to destination" and is also visited once when Sentry is up.
    
    This feature is applicable only for CRT environment with App Proxy Tunnel.

• Support for email debug information: When Ivanti Tunnel is disabled, the existing logs can now be emailed to the user.

• Re-branding MobileIron Tunnel to Ivanti Tunnel: MobileIron Tunnel is re-branded to Ivanti Tunnel.

• Support to attach STCache files: The STCache files can now be added as part of email for better debugging.

• macOS 12 compatibility: Ivanti Tunnel 4.1.3 is now compatible with macOS 12.

• Tunnel support on macOS with Apple Silicon: Ivanti Tunnel now works on macOS devices with Apple M1 hardware without the need for Rosetta library.

• Support for macOS 11: This release supports macOS 11.

  For more information, see Ivanti Guidance on macOS 11 (Big Sur) compatibility.

• Support for M1: Support for Mac devices using the M1 chip with Rosetta installed. For information about installing Rosetta on M1 hardware, see

  • https://support.apple.com/en-us/HT211861

  • https://derflounder.wordpress.com/2020/11/17/installing-rosetta-2-on-apple-silicon-macs/.

• Rebranding: Ivanti has updated the Ivanti Tunnel icons and user interface color scheme. For more information see the Knowledge Base article Coming Soon - UX changes Tunnel Android and iOS App.

  See also "What users see in Ivanti Tunnel for iOS" in the Ivanti Tunnel for macOS Guide.

• User experience updates: The Tunnel logo is seen on the top menu bar. Users can click on the icon to view the Tunnel status and to access additional options.

  For more information, see "What users see in Tunnel for macOS" in the Ivanti Tunnel for macOS Guide.

  These updates also resolve the issue where users saw multiple prompts to authorize the keychain for Ivanti Tunnel.

• Access IP address update: If you have a Access deployment, ensure that you upgrade Ivanti Tunnel to this release to consume any changes in Access IP addresses and to continue to successfully connect to your enterprise cloud resources through Access.

  For information about the Access IP address updates, see Action Required: Access Infrastructure Maintenance requires update to Firewall Rules to avoid service outage.