New Features

Release 9.1R15.4

No new features in this release.

Release 9.1R15.2

No new features in this release.

Release 9.1R15.1

Pulse Client uses Microsoft Edge as external browser by default on all Windows platforms.

Pulse Client uses Microsoft Edge WebView2 based Embedded browser, on all Windows platforms, for Captive portal, SAML, Custom sign-in, and SAML Single Logout (SLO).

Ensure Enable FIDO2 U2F for SAML authentication is disabled on Ivanti Connect secure--> Connection Set for the Edge WebView2 to use as the Embedded Browser.

Ivanti recommends to download the Evergreen Bootstrapper software and run it on the endpoints. Software Download available at: https://developer.microsoft.com/en-us/microsoft-edge/webview2/#download-section.

Note: SAML Login fails for a credential provider with Microsoft Edge Webview2 based embedded browser.

Release 9.1R15

This feature allows to split the DNS traffic between Physical Adapter (PA)'s DNS server and Virtual Adapter (VA)'s DNS server. This feature is disabled by default.

To enable this feature, navigate to System --> Configuration --> Advance Client Configuration and set the value as: <enable-SplitDNS-driver>true</enable-SplitDNS-driver>.

This feature supports Windows Edge as default external browser. Add a DWORD “EnableMSEdgeAsExternalBrowser” and set the value to 1 under Computer\HKEY_CURRENT_USER\SOFTWARE\Pulse Secure\Pulse to set user settings and/or Computer\ HKEY_LOCAL_MACHlNE\SOFTWARE\WOW6432Node\Pulse Secure\Pulse to set machine settings to launch Windows Edge as default external browser.

Pulse Secure client supports Secure Application Manager (SAM) for MacOS. Ensure the system extensions option is enabled. 

Pulse client now supports Windows 10 21H2.

Pulse client now supports Ubuntu 20.04.03.

Release 9.1R14

This feature provides an option for the admin to force upgrade the client version when Minimum Client Version is configured.

Windows 10/Windows 11 systems on ARM64 processors supports PDC.

Release 9.1R13.1

Pulse client now supports Windows 11.

Pulse client now supports Mac OS 12.

Release 9.1R13

This feature supports proxy when using FQDN based split tunnel. This feature is supported both on Server-side and Client-Side Proxy.

Note: DNS Alias Names are not supported with proxy. This feature is available for Windows and MAC only.

A FQDN over IP precedence flag is set in the PSAM configuration such that PSAM honors FQDN policy over IP based policy in case of resource conflicts. This feature is available for Windows only.

Release 9.1R12

This feature provides an option for the administrators to disallow Pulse Client Upgrade prompts for the end users.

This feature provides an option to enable/disable the NetBIOS configurations.

Pulse client supports universal binary for macOS for Intel and ARM.

This feature allows to install RHEL7 Package on RHEL7 or Centos7 machines.

The Pulse Client installer for RHEL 7/Centos 7 is not available by default in Pulse Connect secure server. The RHEL 7/CentOS 7 installer is available for download at https://my.pulsesecure.net.

This feature allows Unified Pulse Client to use Chromium Embedded Framework (CEF), to support FIDO2 security key (for example, YubiKey) authentication using FIDO2 U2F protocol. Qualified with Okta and Azure AD as IdP.

FQDN based split tunnel support is now extended to Linux platforms.

Release 9.1R11.5

No new features in this release.

Release 9.1R11.4

No new features in this release.

Release 9.1R11

This feature allows Unified Pulse Client to use Chromium Embedded Framework (CEF), to support YubiKey authentication using U2F protocol on MacOS.

Pulse Client now supports Windows 20H2.

Pulse Client now supports MacOS BigSur.

Pulse Client supports Apple Silicon (M1) Support on Rosetta 2.

SAML Single Logout (SLO) is the protocol that allows users to logout from Service Provider (SP) as well as Identity Provider (IdP) and requiring users to provide credentials again upon next SAML authentication.

This feature allows the PCS to populate the list of core access rules depending on the platforms. Administrators can modify and reorder the list.

Release 9.1R10

No new features for this release.

Release 9.1R9

This feature allows Unified Pulse Linux Client to use Chromium Embedded Framework (CEF), to support YubiKey authentication using U2F protocol.

This feature provides Unified Pulse Linux Client for download, for supported Linux platforms. The download links for DEB and RPM packages are provided in the Installers page.

This feature allows Unified Pulse Linux Client to support various IPV6 scenarios like, IPV6 in IPV4, IPV4 in IPV6, and IPV6 in IPV6. The feature also supports IPV6 split tunnel rules, Route Precedence, and IPV6 route monitoring.

This feature supports Source IP Enforcement through a Pulse Policy Secure (PPS) gateway.

This feature allows the PCS to use ESP tunnel for 6in4 and 4in6 traffic.

SAML Single Logout (SLO) is the protocol that allows users to logout from Service Provider (SP) as well as Identity Provider (IdP) and requiring users to provide credentials again upon next SAML authentication.

Release 9.1R8.2

System Extensions/Network Extensions allow to extend the functionality of macOS without requiring kernel-level access.

Pulse macOS client installer allows notarization to support future macOS releases and improve security on macOS and its applications.

Release 9.1R8

No new features for this release.

Release 9.1R7.1

No new features for this release.

Release 9.1R7

No new features for this release.

Release 9.1R6

No new features for this release.

Release 9.1R5

This feature allows the PSAM users to view the active session information of the configured applications and destinations.

Added support to handle the HTTPOnly session cookies in pulse client as part of security enhancement.

The feature runs a script/workflow to disable JNPRNS driver every time the user establishes a VPN connection and prevents reattaching of JNPRNS driver on restart. This process results in slight increase in time taken for establishing the VPN connection.

Pulse Linux Client on Windows now supports Fedora 30, Ubuntu 19.10 and Debian 10 platforms.

Release 9.1R4.2

No new features for this release.

Release 9.1R4.1

No new features for this release.

Release 9.1R4

This allows the PSAM users to see the details of the applications which are tunneled via SAM client.

This allows to launch JSAM and HOB from Linux browser after deprecation of NPAPI support..

Yubikey can be used as PIV smart card for VPN authentication.

Accept certificates with smartcard logon Enhanced Key Usage option should be enabled on PCS.

Pulse Desktop Client will now support Windows Hello for business using certificate trust.

Release 9.1R3.1

Pulse Desktop Linux Client will now automatically attempt to reconnect in case of an interrupted connection, such as temporarily losing the Wi-Fi connection.

Release 9.1R3

Pulse Clientnow provides the administrator an option to specify EKU Text or EKU OID for filtering the certificates displayed in the certificate selection prompt during Cert-Auth. Pulse Client filters the certificates automatically, so that only relevant certificates are displayed.

Pulse Client on macOS nows load KEXT component only if Traffic Enforcement or Lockdown mode options are enabled. Otherwise, the KEXT component, which requires high privilege access, is not loaded.

Pulse launcher tool (pulselauncher.exe), which is a standalone client-side command-line program, can now access certificates located in system store allowing for certificate-based authentication from the tool.

Release 9.1R2

PCS supports both FQDN-based and IP-based split tunneling capabilities. When a customer uses both split tunneling rules, PCS now provides flexibility for the customer to choose which rules to give precedence, and ensures the resource access is not impacted when there are conflicting rules.

PCSnow supports the ability to enforce a minimum client version that can connect to the VPN. Administrators have the flexibility to provide a minimum version requirement separately for desktop and mobiles to enforce different client versions.

Pulse Clienton Windows now supports Windows 10 Version 1903 (OS build 10.0.18362.207) Enterprise, 64 bit and Windows 10 Version 1903 (OS build 10.0.18362.207) Professional, 64 bit.

Apple mandates that all macOS applications are notarized by Apple. The Pulse Client for macOS KEXT component is now notarized by Apple.

Release 9.1R1

Pulse Client can now be launched using a URL. Customers can insert the URL in any tools (For example: Support ticket management tool), so that when a user clicks on the URL, Pulse Clientis invoked and connects to the VPN.

The Allow saving logon information option must be enabled in the Ivanti Connect Secure server settings to use the Launching Pulse Desktop Client using URL feature. (Enable Allow saving logon information > Users > Pulse Client > Connections > <connection name>).

Pulse Client now supports IPv6 traffic tunneling in Pulse SAM mode on Windows 10, Windows 8.1 and Windows 7 platforms.