New features summary

This section provides summaries of new features and enhancements that are available in this release. References to documentation describing these features and enhancements are also provided, when available.

General features and enhancements

Android features

iOS, macOS, and tvOS features

Windows features

New features summary

Mobile Threat Defense features

General features and enhancements

  • Restriction on assigning users to a SCIM provisioned group: The administrator cannot assign users to an existing SCIM provisioned group. When the administrator tries to assign one or more users to the existing SCIM group, a pop-up appears on the screen indicating that the selected user or users cannot be assigned to the SCIM group.

  • Enhanced delegation options for Custom distribution: Starting with this release in Ivanti Neurons for MDM, you can now enable or disable Ivanti Tunnel configuration across spaces for User/User Groups and Device/Device Groups using the Custom distribution option, which helps the administrators manage the distribution for a specific space. For more information, see Tunnel.

  • Enhancement to Connector and SCEP CA requests and responses: If an on-premises certificate request fails for any configuration utilizing Identity Dynamically Generated (IDDG) at the Connector or SCEP server, the following actions take place:

    • No additional requests will be sent to the SCEP server for the subsequent 5 minutes.

    • If on-premises certificate failure persists, further requests will be blocked for 50 minutes, and then for 500 minutes, if the issue persists.

    This feature operates at the IDDG level, and configuration retries happen on receiving a retriable error code from Connector. Configuration retries will be attempted for a maximum of 5 times. If the certificate request fails for a specific IDDG after a request blockage of 500 minutes, the whole process restarts from the beginning.

  • Support to automatically add SID to DigiCert ONE certificates: Support to automatically add SID to DigiCert ONE certificates: Starting from this release, if any of the following certificates expire, the SID will be automatically added to the certificate during the automatic renewal for LDAP users:

    • Local Certificate Authority
    • On-premise SCEP Certificate Authority
    • Intermediate Certificate Authority

    This option is supported on Ivanti Neurons for MDM Connector 93 and later versions only.

  • Improved search results for App Catalog: The App Catalog search results will now exclude the app results based on the App Description, Developer name, and What's New.

  • Enhanced certificate revocation list (CRL) capability: The CRL capability is now enhanced and is always available including the downtime during upgrades.

Android features

  • No dependency between AOSP and Android Enterprise: Starting with this release in Ivanti Neurons for MDM, there is no dependency to enable Android Enterprise on your Ivanti Neurons for MDM tenants for work managed devices Non-GMS mode (AOSP).

  • Enhanced configuration settings for Android Enterprise devices: Starting with this release in Ivanti Neurons for MDM, you can efficiently manage the Android Enterprise device distribution settings by selecting the checkbox before confirming the distribution changes in Android Enterprise deployment settings, which may cause devices to retire or wipe. For more information see, Editing the Android Enterprise default configuration.

  • Bulk Enrollment token expiry setting: The administrator can refresh the Bulk Enrollment token to extend the validity for a maximum of 999 days or it can be set to Never expires. The default timeline of a token continues to be 7 days. For more information see, Bulk Enrolling devices using CSV file upload.

iOS, macOS, and tvOS features

  • New column added for Apple devices: New column Device Type (Apple) is added to the Device Listing page to display the pretty model name for all Apple devices.

Windows features

  • Enhanced configuration settings for Windows 11 Start menu and Task Bar: Starting with release in Ivanti Neurons for MDM, you can efficiently configure to enable and disable various option in the Windows 11 Start menu and Task Bar. For more information, see Start menu and Taskbar.

  • Improved Windows Update Configuration: Starting with this release in Ivanti Neurons for MDM, you can specify the details for Product Version and Target Release Version while updating the Windows version on the device. For more information, see Software Updates.

  • Enhanced classifications to manage Windows updates: Starting with this release in Ivanti Neurons for MDM, you can classify the Windows update into Driver Updates and Upgrade in the Classification column. For more information, see Windows 10 Update Management.

  • Additional support for HoloLens2 devices: Starting with this release in Ivanti Neurons for MDM, you can now prevent users from manually configuring the Wi-Fi settings for HoloLens2 devices operating with the Windows 10+ operating system.

  • Improved capabilities for Ivanti Bridge: Starting with this release in Ivanti Neurons for MDM, administrators can now view the latest version of Ivanti Bridge with version 2.1.419.0 after importing it into the tenant's catalog. For more information, see Ivanti Bridge.

  • New configurations added for PolicyDrivenUpdateSource: Added the following configuration options for PolicyDrivenUpdateSource to enable the ability to choose Windows Update sources by update type:

    • SetPolicyDrivenUpdateSourceForDriverUpdates

    • SetPolicyDrivenUpdateSourceForFeatureUpdates

    • SetPolicyDrivenUpdateSourceForOtherUpdates

    • SetPolicyDrivenUpdateSourceForQualityUpdates

      For more information, see Software updates for Windows 10+ devices in the Software Updates section.

Mobile Threat Defense features

Mobile Threat Defense (MTD) protects managed devices from mobile threats and vulnerabilities affecting device, network, and applications. For information on MTD-related features, as applicable for the current release, see the Mobile Threat Defense Solution Guide for your platform, available under the MOBILE THREAT DEFENSE section on the Ivanti Product Documentation page.

Each version of the MTD guide contains all Mobile Threat Defense features that are currently fully tested and available for use on both server and client environments. Because of the gap between server and client releases, new versions of the MTD guide are made available with the final release in the series when the features are fully functional.