New features summary

This section provides summaries of new features and enhancements that are available in this release. References to documentation describing these features and enhancements are also provided, when available.

General features and enhancements

Android features

iOS, macOS, watchOS, visionOS, and tvOS features

General features and enhancements

  • Enhanced Device Grouping Capabilities: A new Device Name attribute has been added to device groups, allowing you to create groups based on device names and assign them to configurations and policies. For more information, see Device Groups.

  • Added Space Name to Audit Trail Logs: Audit Trail logs now include the Space Name, making it easier to identify the space associated with an event. You can also filter Audit Trail records by Space Name using Advanced Search and include Space Name in CSV exports for improved reporting and analysis.
    For more information, see Audit Trails.

  • Read-Only Support Administrator Access: Newly created Support Administrator accounts now have read-only access by default. Custom roles are not automatically assigned, helping reduce the risk of unintended configuration changes. Additional roles and permissions can be granted later by an administrator as needed.
    For more information, see Support Administrators.

  • Space Management Enhancements: The Spaces page has been redesigned to improve navigation and management. Administrators can now create, view, edit, delete, prioritize and bulk-delete spaces, search for specific spaces, access recently viewed spaces, and maintain a consistent multi space selection across pages, except app page. Spaces are also displayed in alphabetical order for easier access.
    For more information, see Managing Spaces.

  • Introduction of Audit Trails in Reporting: Ivanti Neurons for MDM now supports Audit Trails in Reporting. Administrators can create, export, and download audit trail reports to review user and system activities across managed devices. For more information, see Working with Widgets.

Android features

  • Improved Device Enrollment for Android Enterprise devices: You can now use Managed Google Domain Account (BTE) to manage the registration flow more effectively. This enhancement supports account registration with and without authentication, providing greater flexibility during device enrollment. For more information, see Managed Google Play Accounts (Android Enterprise Accounts).

  • Support for Global Proxy Configuration: Added support to create and apply Global Proxy configuration on Android devices enrolled in Device Owner (DO) and AOSP modes. This enhancement enables enforcement of a device-wide HTTP proxy, ensuring that all network traffic from system components and managed applications is routed through the configured proxy server for consistent control and monitoring. For more information, See Global Proxy Configuration (Android) .

  • Enhanced Single App Kiosk Mode Settings Access: Administrators can now allow users to access Ivanti agent settings without exiting Single App Kiosk Mode. This enhancement provides controlled access to agent settings while maintaining kiosk restrictions. For more information, see Lockdown & Kiosk: Android Enterprise. For more information, see Lockdown & Kiosk: Android Enterprise.

  • Audit Trails logging for Clear App Cache requests: After a Clear App Cache request is completed, the Audit Trails page now logs the application's details, including version, name, platformAppId, displayVersion, and bundleVersion. For more information, see App Configuration.

  • Managed Google Domain Account and Device Migration: Administrators can now upgrade Android Enterprise deployments from Managed Google Play to Managed Google Domain and migrate eligible enrolled devices using a dedicated migration configuration. The feature includes migration status tracking and supports filtering and grouping of devices based on migration state to simplify large-scale migration management. For more information, see Managed Google Play Accounts (Android Enterprise Accounts) and Upgrade to managed Google domain.

  • Integrated Tunnel Experience in Ivanti Go: Ivanti Tunnel functionality is now integrated directly into the Ivanti Go app for Android, eliminating the need for a separate Tunnel app and providing a more streamlined user experience. For more information, see Managed Configurations for Android.

iOS, macOS, watchOS, visionOS, and tvOS features

  • Support for new DDM Configurations: Ivanti Neurons for MDM now supports the following new Apple Declarative Device Management (DDM) configurations for iOS 26.4+, macOS 26.4+, watchOS 26.4+, visionOS 26.4+, and later devices and these configurations help administrators manage supported Apple device settings through DDM:

    • External Intelligence Settings

    • Intelligence Settings

    • Siri Settings

    • Keyboard Settings

    • Migration Assistant Settings

    For more information, see Managing Configurations.

  • Declarative Device Management (DDM) App Management: Ivanti Neurons for MDM now supports Declarative Device Management (DDM) App Management for Apple devices. With DDM, the management server sends app management declarations to the device, and the device independently applies, monitors, and reports its state. This reduces the need for continuous server-initiated MDM commands. This feature is currently supported on iOS / iPadOS 26.0 or later, with Go Client 126.0.0 or later only. For more information, see Declarative Device Management (DDM) App Management.

  • App Version Pinning: Apple DDM App Management now supports app version pinning for iOS applications. Administrators can specify and enforce a target app version, preventing updates beyond the pinned version until the pin is modified or removed. App downgrades are not supported. For more information, see DDM App Management Settings.

  • App Updates via Cellular: Apple DDM App Management now supports configuration of cellular data usage for iOS application deployments. Administrators can allow app downloads and updates over cellular networks, restrict them to Wi‑Fi connections, or defer to the device's App Store settings, providing granular control over application delivery. For more information, see DDM App Management Settings.

Mobile Threat Defense features

Mobile Threat Defense (MTD) protects managed devices from mobile threats and vulnerabilities affecting device, network, and applications. For information on MTD-related features, as applicable for the current release, see the Mobile Threat Defense Solution Guide for your platform, available under the MOBILE THREAT DEFENSE section on the Ivanti Product Documentation page.

Each version of the MTD guide contains all Mobile Threat Defense features that are currently fully tested and available for use on both server and client environments. Because of the gap between server and client releases, new versions of the MTD guide are made available with the final release in the series when the features are fully functional.