Review past release notes here.

Current limitations (and workarounds) of the Cloud Secure Edge can be found here.

Generally Available Features

• Edit Points of Presence (PoP):

  • Admins with orgs created before March 27th 2026 can now edit PoP locations in their org.
  • Legacy PoP assignments are maintained in old orgs (i.e., orgs created before March 27th 2026) until an admin edits their PoP locations, at which point the new maximum is 4.

• New Auto Update Toggle:

  • Admins can now enable silent auto updating of apps in their org.
  • This setting is enabled by default for new orgs and disabled for existing orgs.
  • Note: Desktop app version 4.2.0+ is required for auto update on next restart.

• New Event Hooks for Post-Connection Scripts on macOS devices:

  • Admins can now use events generated by user connection to Service Tunnel as hooks to scripts that can automate various aspects of their workflows on macOS devices, as well as Windows devices.

Early Preview Features

• New Malware Download Protection:

  • Malware Download Protection (File Analysis in the console) adds real-time file inspection for users that have an Internet Threat Protection (ITP) policy applied to their devices.
  • When enabled, downloaded files are analyzed in a sandbox powered by SonicWall Capture ATP before reaching the endpoint and automatically blocked if deemed malicious.
  • Malware Download Protection is disabled by default.

Enhancements and Updates

• New mobile app support for Active Service Tunnels:

  • Active Service Tunnels on mobile devices are now reflected in the total Active Service Tunnels count.

• New Service Tunnel Disconnect Logs:

  • CSE now generates an event for Service Tunnel disconnections, helping admins to track Service Tunnel usage.
  • Disconnect events include user-initiated disconnections and session timeouts.

• Mac Installer Package Versioning (MDM):

  • Mac installer package receipts now reflect the packaged app version.

• Persistent Service Tunnel over TCP Toggle:

• When enabled, the Enable Service Tunnel over TCP toggle now stays on indefinitely, unless toggled off.

Bug Fixes

• fix Access Tier was removing quotes from cookies on hosted websites.
• fix Security policy attachment was lagging, blocking users from accessing resources via Service Tunnels.
• fix Domain name rules were not allowing users to include dashes in internal domain names.
• fix Service Tunnel access logs were flooded with duplicate entries.
• fix Service Tunnel was not reconnecting after login when installed using an MDM script.

Component Versions

* Updated in the latest release