New features summary

This section provides summaries of new features and enhancements that are available in this release. References to documentation describing these features and enhancements are also provided, when available.

General features and enhancements

Android features

iOS, macOS, and tvOS features

Windows features

Mobile Threat Defense features

General features and enhancements

  • Support to exclude or distribute apps from a device: The administrator can now exclude or distribute apps for Windows devices. For more information, see Exclude or Distribute apps.

  • New roles are added for reports: The following new roles are added for Reporting:

    • Report Management (System Role)

    • Report Retrieval (System Role)

    • Report Management - (Custom Role - Cross Space)
      For more information, see Roles Management.

  • Custom attribute names are sorted: The field names of the following custom attributes are sorted in the applicable rule builders:
    • Custom LDAP Attribute
    • Custom User Attribute
    • Custom Device Attribute
    • Custom IdP Attribute
    • Custom App Attribute

    For more information, see Attributes.

  • Delegation with custom distribution is extended to few more configurations: The delegation with custom distribution option is now available for the following configurations:
    • Wi-Fi Configuration
    • VPN Configuration
    • Apple_SCEP
    • Windows_SCEP
    • Web Clip

    For more information, see Distributing the configuration topic in Working with Configurations.

  • Advanced Search is added to Audit Trail page: The Audit Trail page now has the Advanced Search field. The Advanced Search lets you create and save a query for future searches. For more information, see Using Advanced Search for Audit Trails on the Working with Widgets page.
  • Filter application actions from the application device logs: Detailed logs are available for application actions at the device level. For more information, see Getting Started with Devices.

Android features

  • Enhanced Unlock command: Administrators now have the option to specify a specific unlock code, using 6 to 8 alphanumeric characters. For more information, see Unlocking a Device.
  • App updates during app installation: App updates using the Auto Update option can be done even without selecting the Silent Install option. This is applicable to Public, Private, and In-house apps. For more information, see App Configuration.
  • Making the Google Device Account as default for new registrations: All the new registrations will have Google Device Account as default in place of the User Account. For more information, see Adding Users.
  • Shared Kiosk Logout configuration during registration: Starting this release, direct registration as a "kiosk worker user" will be allowed. However, the "Logout" feature of the lockdown configuration will NOT be applied. The device will receive all configurations and apps, but not as a shared kiosk or a kiosk device. A regular Work Managed Device mode will be registered to the "work profile user."

iOS, macOS, and tvOS features

  • Device information query updated for iOS devices: Starting from iOS 17, Apple has announced the deletion of a few settings from the Device Information Response section. However, the devices return the settings in a different section. To minimize the impact of this change, the values are populated from the SIM Service Subscription section on the Device details > Overview tab to the missing fields.

  • DNS Proxy configuration can be associated to an app from App Configuration: The App Configuration page of an app has an option to select a DNS proxy. The app traffic will pass through the DNS proxy if configured. For more information, see App Configuration.
  • Option added for iPhone Widgets: The following option is added for iOS Restriction Configuration for devices that contain iOS 17.0+:
    • Allow iPhone Widgets on Mac - If false, does not allow iPhone widgets on a device with macOS that has signed in the same AppleID for iCloud. This is applicable only for devices that are Supervised.

      • For more information, see iOS Restrictions.

  • Support for Apple Silicon Device: The following option is introduced for macOS device group creation:

  • Route network traffic through iOS application installed on M1 macOS devices: Application traffic from iOS apps that are installed on macOS and are running on Apple silicon can now be routed through Per-App VPN.

Windows features

  • Support to configure reboot options post app installation: The administrator can now configure Reboot Device after Install with various options for an app from the App Configurations section. For more information, see App Configuration.
  • Support for Win32 store applications: Starting this release, Ivanti Neurons for MDM now supports Win32 store applications to import, install, uninstall, and add the apps to inventory collection. For more information, see App Inventory.

Mobile Threat Defense features

Mobile Threat Defense (MTD) protects managed devices from mobile threats and vulnerabilities affecting device, network, and applications. For information on MTD-related features, as applicable for the current release, see the Mobile Threat Defense Solution Guide for your platform, available under the MOBILE THREAT DEFENSE section on the Ivanti Product Documentation page.

Each version of the MTD guide contains all Mobile Threat Defense features that are currently fully tested and available for use on both server and client environments. Because of the gap between server and client releases, new versions of the MTD guide are made available with the final release in the series when the features are fully functional.