Windows$$$Updated on 28 Jul 2025$$$$$$Windows agent 11.7.0.2606$$$July 28th; 2025$$$$$$Currently under gradual rollout to all customers (usually takes 2-3 weeks).$$$$$$Enhancements:$$$$$$Transparent Internet Access protection now supports deployment through Mobile Device Management (MDM) for domain users; even if you do not provide the users email address.$$$Switch user event tracking and monitoring allows better security event tracking and accurate policy enforcement on shared devices.$$$Agent anti-tampering mechanism now also protects Harmony SASE agent processes and services from being terminated (Available in Early Availability mode)$$$Added Data Loss Prevention (DLP) support for file uploads to detect and block sensitive data exfiltration (Available in Early Availability mode)$$$Introduced Tenant Restrictions to control user access to approved Office 365 and Google Workspace tenants. This helps to prevent data leaks and shadow IT (Available in Early Availability mode)$$$Enhanced Application Control granularity with new actions to block file uploads to Box and Google Drive (Available in Early Availability mode)$$$Resolved Issues:$$$$$$P81-67078 – Similar Device ID causes fail in multiple devices sign-in$$$P81-67952 – Uninstallation code request pop-up not presented$$$P81-69474 – Resources connectivity issue when failing to disable IPv6

Windows agent 11.6.0.2555$$$May 21st; 2025$$$$$$Currently under gradual rollout to all customers (usually takes 2-3 weeks).$$$$$$Enhancements:$$$$$$A new option allows Harmony SASE agents Internet Access protection to be disabled when the device is connected to a secured trusted network; to avoid duplicate traffic inspection. (Available in Early Availability mode)$$$Device isolation from Local Area Network (LAN) is now available as a new option to enhance device security. (Available in Early Availability mode)$$$Customization of Block/Warn pages is now available; allowing tailored messages for end-users. (Available in Early Availability mode)$$$Resolved Issues:$$$$$$P81-62620; P81-62633 – Private DNS resolve issues$$$P81-65145 – User can disconnect while always-on mode in enabled$$$P81-69416 – Split Tunnel FQDN entries resolve issues

Windows agent 11.6.0.2555$$$May 21st; 2025$$$$$$Currently under gradual rollout to all customers (usually takes 2-3 weeks).$$$$$$Enhancements:$$$$$$A new option allows Harmony SASE agents Internet Access protection to be disabled when the device is connected to a secured trusted network; to avoid duplicate traffic inspection. (Available in Early Availability mode)$$$Device isolation from Local Area Network (LAN) is now available as a new option to enhance device security. (Available in Early Availability mode)$$$Customization of Block/Warn pages is now available; allowing tailored messages for end-users. (Available in Early Availability mode)$$$Resolved Issues:$$$$$$P81-62620; P81-62633 – Private DNS resolve issues$$$P81-65145 – User can disconnect while always-on mode in enabled$$$P81-69416 – Split Tunnel FQDN entries resolve issues

Enhancements:$$$$$$A new option is available to install the Harmony SASE agent; enabling Internet Access security to start working out of the box without user interaction.$$$The new Application control security engine allows managing and restricting applications on end-user protected devices.$$$(Available in Early Availability mode)$$$URL Filtering Allow logs - Harmony SASE now collects and stores Allowed end-user browsing history in Admin portal.$$$(Available in Early Availability mode)$$$The Agent anti-tampering feature now allows administrators to enforce an admin code requirement to uninstall the Harmony SASE agent.$$$URL Filtering; Malware Protection; URL Reputation; and Threat Emulation logs are now available on Infinity Events and in a new Unified Log viewer screen. These logs can also be exported to SIEM systems via Infinity Events.$$$Resolved Issues:$$$$$$P81-56886; P81-61354 – Unable to access specific internal resources (DNS resolve error)$$$P81- 62195 – Agent connectivity problems with local Wi-Fi network

Windows agent 11.2.1.2378$$$January 22nd; 2025$$$Enhancements:$$$New URL Reputation security engine detects and prevents access to malicious URLs.$$$(Available in Early Availability (EA) mode)$$$New Threat Emulation engine uses connected sandboxes to prevent multi-stage attacks at the earliest available stage.$$$(Available in Early Availability (EA) mode)$$$Resolved Issues:$$$P81-53008 – Long VPN connection time post device reboot$$$P81-53330 – DNS connectivity loss post network connection$$$P81-54570 – Some deny logs does not appear in management platform$$$P81-55316 – Trusted environment users are presented in platform as VPN connected users

November 12th; 2024$$$$$$Enhancements:$$$$$$Enhanced Trusted Network capability; now supporting the use of an HTTPS server and a TLS certificate$$$Implemented a comprehensive update to our Malware protection engine$$$Resolved Issues:$$$$$$P81-47954 - Users experience BSOD$$$P81-51792 - Device status does not updates after sleep when connected to trusted router

Windows agent 11.0.11.2205$$$October 16th; 2024$$$Resolved Issues:$$$P81-54903 - User gets stuck in obtaining an IP address mode

Windows agent 11.0.10.2177$$$September 30th; 2024$$$$$$Currently under gradual rollout to all customers (usually takes 2-3 weeks).$$$$$$Enhancements:$$$$$$Added support for wildcards in URL filtering rules (feature to be released gradually)$$$Resolved Issues:$$$$$$Updated vulnerable library (CVE-2024-21907)$$$P81-48205 - Unable to remove configured default DNS

Windows agent 11.0.1.2083$$$August 28th; 2024$$$Resolved Issues:$$$Mitigation for OpenVPN vulnerability (CVE-2024-1305)$$$P81-50980 - Custom URL SWG allow rule mismatch

Windows agent 11.0.0.2050$$$July 30th; 2024$$$$$$Currently under gradual rollout to all customers (usually takes 2-3 weeks).$$$$$$Enhancements:$$$$$$Implemented a comprehensive update to our Web filtering security engine.$$$Rebranded the task bar icons.$$$Rebranded Block; Warn; and Malware Protection pages$$$Bug fixes and stability improvements.$$$Resolved Issues:$$$$$$P81-36415 - Agent not opening channel$$$P81-38160 - Unexpected Timeout On Agent$$$P81-38285 - Stuck in Connecting State when on Trusted Routers$$$P81-42138 - Windows 10.5 Web activity doesnt log events when signed out$$$P81-42248 - Windows agent installer deploys with older .net8 version$$$P81-46702 - Windows agent connected to EU platform is not showing the GW IP but the native IP address$$$P81-47192 - SWG not blocking site