New: Advanced Tables are now generally available in the Partner Portal. Across all tables columns are resizable and pinnable, render faster, highlight global-search matches inline, and offer per-column filter menus.
Admin Console
New: Advanced Tables are now generally available to all tenants, graduating from limited-audience preview. Across all tables columns are resizable and pinnable, render faster, highlight global-search matches inline, and offer per-column filter menus.
New: Asset and User Client Isolation is now generally available to all tenants, graduating from limited-audience preview. Enabling it configures the endpoint host firewall to block inbound traffic, with the option to set an explicit allow-list of exceptions.
New: Added support for Cisco Duo as a single sign-on identity provider, with automatic role assignment based on the user's group membership — regardless of the group-name format your identity provider uses.
New: Directory groups can now be created directly on the User Groups page for tenants using single sign-on — enable the IdP Group switch in the Create User Group form and reference the matching group from your identity provider to keep its membership in sync automatically.
New: Security products for macOS devices now appear in the Device Inventory and the client insight side panel, matching the existing Windows view.
New: The client insight side panel now shows which policies a client does not match and why. Each failing condition (group membership, OS and security posture, location, sites and public IP, or time window) is displayed side by side with the client's current state.
New: OS conditions can now reject end-of-life and outdated versions on iOS and Android, matching the existing Windows, macOS, and Linux controls.
Changed: End-of-life countdowns in the compliance view now read in natural units (for example in 2 years 7 months instead of in 960 days), and already-passed end-of-life is shown as a date.
Agents
New: xtna-util -status now lists the configured DNS servers and their domains.
Fixed: A relayed connection could appear active while no traffic actually passed through it until it reconnected.
Fixed: On GL.iNet RK-firmware devices, the agent now reliably starts after a reboot.