New features summary

General features and enhancements

• Enhanced status update in Azure: The Intune Device Compliance status now displays Compliant status as "No" in the Azure portal for Retired or Wiped state devices.

• Support to migrate Microsoft Intune device compliance integration: As part of Ivanti EPMM to Ivanti Neurons for MDM migration, iOS and Android devices shall start reporting the device compliance state to the Microsoft Azure after migrating to Ivanti Neurons for MDM. Contact Ivanti Support to enable this feature. For more information, see Ivanti EPMM to Ivanti Neurons for MDM Migration Portal Guide.

• SCIM API updates for Users and User Groups: Administrators can now use externalDs to search SCIM Users and User Groups. For more information, see User Provisioning with SCIM.

• Enhanced User Provisioning: During the provisioning process, administrators can now use the Custom Attribute option to map custom attributes to Managed Apple IDs. For more information, see User Provisioning for Entra ID IdP.

Android features

• Support for Preventing Users from Uninstalling In-House Apps: The option Blocks the user from uninstalling the app. is now available for in-house apps. For more information, see Managed Configurations for Android.

iOS, macOS, watchOS, visionOS, and tvOS features

• Additional Skip Keys for iOS 17+ devices: The Action Button and Enable Lockdown Mode Skip Keys are now supported on iOS 17+ devices. For more information, see Device Enrollment.

• Device Enrollment Profile updates: Administrator can now view the changes made to any Device Enrollment Profile from the Audit Trials page. For more information, see Device Enrollment.

Windows features

• Auto MDM Enrollment for Entra Hybrid-Joined Devices via Group Policy: Devices that are Hybrid-joined to Azure AD can now be auto-enrolled into Ivanti Neurons for MDM by enabling the "Enable automatic MDM enrollment using default Azure AD credentials" Group Policy. For more information, see Group Policy Enrollment.

Mobile Threat Defense features

Mobile Threat Defense (MTD) protects managed devices from mobile threats and vulnerabilities affecting device, network, and applications. For information on MTD-related features, as applicable for the current release, see the Mobile Threat Defense Solution Guide for your platform, available under the MOBILE THREAT DEFENSE section on the Ivanti Product Documentation page.

Each version of the MTD guide contains all Mobile Threat Defense features that are currently fully tested and available for use on both server and client environments. Because of the gap between server and client releases, new versions of the MTD guide are made available with the final release in the series when the features are fully functional.

General features and enhancements

• Enhanced Rule and Account Groups Limit: Limits have been increased for rule and account group evaluations, capping them at 200 rules. This can resolve issues caused by large rule sets, prevent object mapper failures, and improve elastic search performance. .

• Dual Certificate Support for Sentry-Tunnel Communication: To mitigate service disruptions caused by certificate expiration, a new Add second certificate field has been introduced. This enhancement allows administrators to upload and link two certificates—a primary and a secondary (reserve)—to a Sentry profile. Additionally, the expiry date of each certificate is now displayed, enabling proactive tracking and timely renewal, ensuring uninterrupted Tunnel-to-Sentry communication.

  For more information, see Setting Up AppTunnel.

• Enhanced Audit Trail Export Security: The Audit Trail Export feature now supports additional secure algorithms for SFTP connections:

  • Key Exchange: Added support for curve25519-sha256

  • HMAC: Added hmac-sha2-256 and hmac-sha2-512

  These enhancements improve connection security. For more information, see Exporting Audit Trails.

• Notification support for Sentry: Ivanti Neurons for MDM now periodically monitors the Sentry service connection availability. Ivanti Neurons for MDM displays notifications from Sentry versions 10.4 and supported new versions. For more information, see Working with Widgets.

Android features

• Support to Hide and Suspend Apps: From the App Configuration section, apps can now be hidden or suspended on fully managed devices.

  For more information, see App Configuration.

• Support for Secondary SIM Attributes on Android devices: The system now captures and displays Phone Number 2 and ICCID 2 for dual-SIM Android devices. For Android devices on version less than 13, NA for Phone Number 2 and ICCID2 will be shown. In case of devices in Work Profile mode, the ICICD2 value will also be shown as NA. These attributes are visible in Device details, Advanced search, and Custom reports in Fully managed device mode and Work profile on company-owned device mode.

• App Deployment Workflow for Android Enterprise: Administrators can now initiate app installations and updates using step-by-step workflow in the App Catalog. The process includes targeted delivery based on app presence, user group selection, and compatibility, with real-time confirmation and visibility into actions via audit trails. For Public and Private apps, only installation (not updates) can be triggered through this interface.

  For more information, see App Configuration.
  

iOS, macOS, watchOS, visionOS, and tvOS features

• Apple DDM Filter for DDM Configs: A new filter Apple DDM (Declarative Device Management) with the option Supported has been added under Configurations > Add Configuration to help identify DDM-related configurations more easily in the UI. This enhancement improves the user experience by enabling better differentiation of DDM configuration types.

For more information, see Working with Configurations.

• Web Content Filter Configuration support for macOS devices: The Web Content Filter Configuration is now supported for macOS devices.

  For more information, see Web Content Filter Configuration.

• Support for AppConnect Certificate Configuration in Pulse Secure App (iOS): AppConnect Certificate Configuration for Ivanti Secure Access Client (iOS) is now supported in Ivanti Neurons for MDM settings. The “AppConnect Certificate Configuration” section is visible for the App Store Ivanti Secure Access Client (iOS) in Ivanti Neurons for MDM.

• Beta Management in Device Enrollment Profile: Device Enrollment Profile now supports Beta Management on iOS 17 and macOS 14 devices. A new field is added for beta programs under Require minimum OS version for enrollment selection for iOS and macOS devices. For more information, see Device Enrollment.

• View Platform Information for Licenses: Administrators can now view platform information for license details in the VPP details page. For more information, see Apple Apps and Books.

• Support Tab in Ivanti Go Client: Ivanti Go Client Privacy is now renamed to Ivanti Go Client Settings. A new field Enable Support Tab is added in Ivanti Go Client Settings Configuration. For more information, see Ivanti Go Client Settings.

• Support for Apple Access Management: Ivanti Neurons for MDM now supports Apple Access Management for Supervised and Managed devices. For more information, see Apple Access Management.

Mobile Threat Defense features

Mobile Threat Defense (MTD) protects managed devices from mobile threats and vulnerabilities affecting device, network, and applications. For information on MTD-related features, as applicable for the current release, see the Mobile Threat Defense Solution Guide for your platform, available under the MOBILE THREAT DEFENSE section on the Ivanti Product Documentation page.

Each version of the MTD guide contains all Mobile Threat Defense features that are currently fully tested and available for use on both server and client environments. Because of the gap between server and client releases, new versions of the MTD guide are made available with the final release in the series when the features are fully functional.