MacOS
  • 19 Sep 2023
  • 11 Minutes to read
  • Contributors

    MacOS


      Article Summary

      Mac agent 10.2.0.512

      September 19th, 2023
      Enhancements:

      • Improved WireGuard session keep-alive mechanism
      • Updated menu bar icons

      Resolved Issues:

      P81-24554 - SWG bypass rule not working with 'Any' in destination
      P81-30568 - Agent logs filling up hard drive space when system extension not properly configured
      P81-30849 - Proxy installation requested even when not required
      P81-31326 - Conflict between agent proxy and external tool (Gradle) causes timeout errors

      Mac agent 10.1.3.322

      Resolved Issues:

      P81-30327 - NEProxy logs rapidly consuming space when FQDN-ST is enabled

      Mac agent 10.1.2.318

      July 25th, 2023
      Resolved Issues:

      P81-30262 - Fix for agent local privilege escalation vulnerability (CVE-2023-33298)
      P81-30255 - Multiple system request popups to enable Proxy configuration

      Mac agent 10.1.0.293

      July 19th, 2023

      New Features:

      • Support for split tunneling configuration by domains (FQDN)!

      Enhancements:

      • Improved agent log collection mechanism, supporting larger payloads and more detailed logging
      • Using updated Wireguard and OpenVPN versions
      • IKEv2 protocol deprecated as a method of agent connection - removed from agent UI

      Resolved Issues:
      P81-24626 - Posture check for disk encryption failing despite fulfilling criteria
      P81-25528 - Disconnects on Wireguard
      P81-26232 - SWG not blocking access to restricted websites in Kill Switch scenario
      P81-29636 - Failed to Fetch public IP address intermittently


      MacOS agent 10.0.0.19

      May 7th, 2023

      New Features:

      • The agent now supports the new Exclude configuration option for Split Tunneling (so that all traffic except specific addresses will go through the tunnel).

      Resolved Issues:

      • P81-23365 - Mac agent launching twice, 2 different instances running at the same time
      • P81-26071 - OpenVPN connection sometimes taking too long

      MacOS agent 9.0.1.9

      New Features:

      • You can now switch between protocols while the agent is connected to a network! Simply select a protocol in the Protocols tab to switch to it.
      • When the user session expires (according to the session length set by the administrator), the agent will be automatically logged out during local night time, in order to avoid disconnections during the workday. This applies to session lengths of 2 days and above.

      Enhancements:

      • Logging improvements
      • Agent installation will be prevented on unsupported MacOS version 10.14 and below

      Resolved Issues:

      • P81-18590 - On macOS 13.0, sometimes the quick access UI and Full agent UI were displayed simultaneously when changing networks
      • P81-20543 - Incorrect icon state after silent upgrade of the agent
      • P81-23034 - Agent disconnection after OS upgrade to Mac OS 13.2
      • P81-23462 - SWG Web Filtering not working when a rule is set with two custom URLs that one is contained within the other
      • P81-7337 - Agent logs show that user is using macOS 10.16 when it is actually a higher version

      MacOS agent 9.0.0.28

      New Features:

      • Secure Web Gateway (SWG) now includes Malware Protection! SWG users now have an additional layer of protection against malicious software, on top of the existing web filtering functionality. Malware Protection actively scans content before it reaches the user's browser, blocks multiple types of threats, and notifies the user. Admins can view logs of blocked malware in a new page under the Monitor and Logs section.

      Enhancements:

      • Log file size decreased, implemented log rotation
      • Added support for long-life certificates for SDP sessions
      • Updated internal frameworks to support minimum target OS of 10.15
      • Improved SWG module behaviour, increased reliability of Proxy module
      • Improved memory usage of agent and fixed issues with memory leaks
      • Improved stability
      • Improved connectivity

      Resolved Issues:
      P81-21296 - Fixed an issue related to the Disable Sign-out feature
      P81-22039 - Fixed issue when agent UI was out of sync with Daemon
      P81-14902 - Fixed Trusted Wired Network MAC address case-insensitive comparison


      MacOS agent 8.0.6.166

      Resolved Issues:
      P81-16293 - Excessive memory consumption when using SWG


      MacOS agent 8.0.6.163

      New Features:

      • The agent can now remain connected while P81 SDP backend is restarted/offline, for better connection stability

      Enhancements:

      • Added additional logging events on VPN reconnection and Probe failure
      • In the Protocols section, relabeled 'Automatic' protocol to 'Default'
      • Improved mechanism for fetching Public IP
      • Increased shared codebase between MacOS and iOS agents for better compatibility

      Resolved Issues:
      P81-12527, P81-12562 - Unplanned disconnections
      P81-12869, P81-6732 - Sporadically cannot login to the agent - 'your session was not established'
      P81-14787 - Routing table not updated on Split Tunneling update until user disconnects
      P81-13988 - Agent User Interface is cut off when it’s the rightmost icon in the macOS tray
      P81-7450 - Fixed sorting in Quick Access networks list
      P81-14953 - Install update prompt appears without user interaction
      P81-16096, P81-16864 - DPC failed although conditions passed, until reboot
      P81-16189, P81-16949 - While connecting to VPN on unsecured WiFi, Internet is unavailable for 40-60 seconds

      MacOS agent 8.0.5.143

      New Features:

      • New wake from sleep mechanism logic
      • Added 'Quit' button to the agent's quick-UI for easier access
      • Added 'Reset Agent' button to the loading screen if it does not connect within 60 seconds
      • Added 'Reset Agent' button to the full UI (under the Support tab) to provide the ability to reset the agent at any time

      Resolved Issues:

      • P81-14321 - Infinite connection attempts
      • P81-14317 - The loading screen does not disapear
      • P81-13962 - Agent says it's connected but loses all Internet connectivity
      • P81-13257 - Possible command injection vector via DPC
      • P81-13188 - DPC stuck after machine reboot
      • P81-12978 - Proxy communication issue
      • P81-12749 - Presented with a "You have reached your pre-configured connection time limit" error
      • P81-12698 - DPC: Device Activity Log does not appears in web console at admission time, only after DPC scheduled recheck time (20 minutes)
      • P81-12360 - Agent log files take too much space (0.4 GB)
      • P81-7128 - The Device Activity log shows 'No Hostname' instead of the device name
      • P81-6628 - The user is not signed out properly after the agent receives a new token

      MacOS agent 8.0.4.132

      New Features:

      • Disable Sign-Out (enforce Always On) - this feature is being gradually rolled out and will be available to all customers in a few weeks. Requires this version of the agent and above.
      • Agent sign-out brute-force prevention
      • Allow admins to control whether using the internal DNS is enforced or not, in order to support co-existing with products that require control over DNS

      Enhancements:

      • Agent version is now displayed before login, for easier troubleshooting
      • The Quit button has been re-added to the agent extended UI, allowing users to shut down the agent application and the Perimeter 81 service in case they need to
      • P81-11453 - SWG bootstrap certificate enhancement

      Resolved Issues:

      • P81-13378 - Changing settings on the console would cause the agent to Reconnect
      • P81-12977 - RegionName always showed N/A
      • P81-12747, P81-12674, P81-12571, P81-12525, P81-12164 - Issues connencting after sleep
      • P81-12746 - Connectivity issue when using SWG
      • P81-12417, P81-12618 - Connectivity issues
      • P81-12560 - Sign-in failing to open browser
      • P81-12539, P81-12519 - Websites unreachable
      • P81-12536 - SWG rules issues
      • P81-12461 - Internet connection issue after session timeout
      • P81-12419 - Reconnection process takes too long
      • P81-12269 - Public IP stuck in "Refreshing" and losing Internet connectivity
      • P81-11170, P81-11171, P81-12807 - Internal log fixes
      • P81-6859 - Silent Upgrade improvements
      • P81-6467 - UI bugs
      • P81-11531 - Better handling of ProtocolFilters in regards to certificates
      • P81-12720 - SWG bug fixes

      MacOS agent 8.0.4.124

      Enhancements:

      • Changed MTU for Wireguard to 1380 to improve connectivity in low-MTU scenarios

      • The Perimeter 81 certificate is now installed only if using Secure Web Gateway. If needed, users are referred to a webpage on how to complete the certificate and add-on setup

      • 'Start Minimized' removed from Settings screen

      Resolved Issues:

      P81-11830/P81-10601 Connection is not restored after sleep
      P81-11673 Sometimes the app Signed Out incorrectly
      P81-11251/P81-11163 Agent stuck with connect button not responding
      P81-11211 DNS fails after sleep on latest Mac version (Monterey 12.3)
      P81-11074/P81-10889 Constant disconnections
      P81-11071 Connection issue with IKE protocol
      P81-11035/P81-11034/P81-8381Connection issue with Wireguard
      P81-11027/P81-11026/P81-10631 Internet connection blocked/unstable
      P81-10922/P81-10916 After sleep, the agent is connected but there is no internet connectivity
      P81-10874 Sign In button not working after session timeout
      P81-10556 Network adaptor changing every several minutes
      P81-9987 Split tunneling configuration didn't updated till Agent reconnection
      P81-9804 Client generates certificate errors
      P81-8032 "Connected to Network" notification doesn't hide automatically
      P81-7340 After upgrading XPC between Daemons, Proxy is not starting
      P81-6312/P81-3930 "Private DNS" icon not displayed on network with "Regional Private DNS"
      P81-6080 Closed Mac agent pops up every time Firewall rule is changed

      MacOS agent 8.0.4.116

      Fixed Issues:

      • P81-9839/P81-9833/P81-9795 - App crash
      • P81-9794/P81-9493 Connection issue - agent stuck in 'Reconnecting'
      • P81-9500 Failed to connect while returning from sleep mode
      • P81-9181 Agent takes a while to reconnect after sleep
      • P81-9152 Sign Out pop-up header displayed incorrectly
      • P81-8233 Device Activity Log - MacBook still appears as Healthy even though found Not Healthy
      • P81-8048 Apple M1 Pro - Disconnect during Zoom
      • P81-7340 SWG - Proxy not starting after upgrading XPC between Daemons
      • P81-5273 .pkg error - 'The Package is unsigned'
      • P81-910 .pkg installer file - Unsupported file format in MobileIron
      • P81-8236 Icons for Support, Settings, Sign Out are blurred

      New features:

      • P81-9985 When installing using pkg file, the P81 certificate will not be installed unless specified by admin
      • P81-7551 The agent now allows admins to pre-populate the workspace value during installation via CLI.

      MacOS agent 8.0.4.108

      Fixed Issues:

      • P81-6326 - Failed to login after agent upgrade.
      • P81-4795 - DNS lost randomly when using split tunneling + custom DNS.
      • P81-7608 - IPv6 behavior is unpredictable.
      • P81-5029 - Improved messaging when pre-configured connection time limit is reached.
      • P81-2455 - agent UI pops up upon changing firewall rules.
      • P81-5034 - renamed 'diagnose issues' button to 'Send logs to support'.

      New Features:

      • The Perimeter 81 agent now runs as a service in the background! There is no need to keep the agent UI open - it is always up and available via an icon in the system tray.
      • Connectivity and stability have been improved.
      • The agent now has a brand new “quick access” UI, which allows you to perform most operations from a single screen by clicking on the tray icon. The classic UI is still available, and can still be accessed in order to configure settings, contact support etc.
      • This agent version supports Secure Web Gateway (SWG).

      MacOS agent 7.0.3.37

      Fixed issues:

      • P81-2389 - Helper tool installation requires admin permissions
      • P81-5385 - Crash on changing networks while OpenVPN connected on TWN
      • P81-5332 - Post connection loss authentication issue
      • P81-4796 - Correction of description for Automatic Protocol
      • P81-4764 - Agent stuck in reconnecting when coming out of sleep mode
      • P81-4368 - Agent stuck in Reconnecting state

      New features:

      • P81-5029 - Improve the output message after "Automatically log out Client "
      • P81-5026 - Remove "contact support" suggestion when failing DPC
      • P81-5034 - Rename "diagnose issues" button
      • P81-4699 - Compatibility with MacOS 12.0 Monterey

      MacOS agent 7.0.3.28

      Fixed issues:

      • P81-3293 - Added latency measurements BI events
      • P81-3312 - Fixed device register issue caused by UDID non-escaping

      MacOS agent 7.0.2.21

      Fixed issues:

      • P81-1995 — Device posture check says that disk is not encrypted when it actually is encrypted
      • P81-2021 — Incorrect VPN status on Home screen if Start Minimized=ON and VPN has connected automatically
      • P81-2532 — Agent stuck on reconnecting
      • P81-3111 — DPC failed for all the rules that should pass
      • P81-3179 — App hanging during TWN check processing

      MacOS agent 7.0.2.19

      Fixed issues:

      • P81-2680 — Trusted Wired Networks - Agent user still needs to enter code on Quit/sign out while connected to TWN
      • P81-2198 — User still needs to enter code on Quit/Sign Out while on TWNP81-2198
      • P81-2633 — The Always On Not restored 0n turning Netwotk's toggle if Network above in list is Disabled
      • P81-2231 — Attempt to connect to the VPN is made on setting AlwaysOn by user
      • P81-2199 — No "Connected to Trusted Network" badge on Home screen when computer on TWN
      • P81-2198 — User still needs to enter code on Quit/Sign Out while on TWN
      • P81-2215 — The app connected to VPN on user setting AlwaysOn=ON while connected to TWN
      • P81-2550 — Show appropriate text when hovering over the "Connected to Trusted Network" badge
      • P81-2798 — MacOS P81 DPC: Condition "AND" for "Process Running" doesn't work

      MacOS 7.0.1.12

      • Silent upgrade feature imlemented

      MacOS 7.0.1.7

      • Fixed issue when agent app pops up with every ZTA change — P81-1117, P81-1115
      • Fixed wrong Device Name documented in Device Activity — P81-1364
      • Fixed Internal IP Not Defined issue, when VPN get connected — P81-1347
      • Moved Snowplow session cache file outside of the user’s Documents folder — P81-937

      MacOS 7.0.1.6

      New features:

      • Device Posture Check feature implemented

      Resolved Issues:

      • Fixed app crash issue — P81-726
      • Fixed app re-connect issue when losing WiFi — P81-906
      • Fixed Run on StartUp issue — P81-914
      • Fixed Sign Out” and “Quit” option from doesn’t work if app is not in foreground — P81-1027
      • Fixed app re-login when DPC check has failed — P81-1452
      • Fixed Disconnect/Connect notifications showing — P81-1110
      • Fixed high CPU consumption issue when the app is in background — P81-438
      • Fixed SDP socket re-connect issue after sleep-mode

      MacOS 7.0.0 (7):

      Bug fixes:

      • Application complete re-design, Main view, Settings page, Support page, OnBoarding page
      • Implemented new login flow using default browser with SSO support
      • Implemented accessToken token rotation before performing Logout call -- #MAC-1056
      • Added timeout for LoginSucceeded event -- #MAC-1075
      • Added full username showing inside of the Main view (if it’s available) -- #MAC-1083
      • Added support ticket number for the user if it’s available from Troubleshooting -- #MAC-1074
      • Change user’s email address fetching from JWT to channel.OnUpdated data payload -- #MAC-1066
      • Fixed Connection/Reconnection initiated from Connect on Launch can’t be interrupted -- #MAC-1079
      • Fixed Hide Automatic Location from Icon/Dock menus -- #MAC-1086
      • Fixed issue when Admin can’t enforce upgrade to the latest version -- #MAC-942
      • Disable KillSwitch by default for AlwaysON -- #MAC-1081
      • Fixed Sleep/awake re-connect issue -- #MAC-1061
      • Fixed Disconnect button non-responsiveness when agent connecting/reconnecting -- #MAC-1078
      • Fixed expand/collapse Shared Networks issue, when hover stopped to work -- #MAC-1062
      • Fixed issues when “Change Network” button displayed incorrectly when “Upgrade Application” is enforced -- #MAC-1111
      • Added BI events sending support
      • Added osVersion as a part of channel.open payload
      • Implemented automated Troubleshooting script, now avg processing time is ~1 min -- #MAC-1093
      • Fixed “Sign Out” and “Quit” options from notification area context menu when app is in background mode -- #MAC-1100, #MAC-1099
      • Fixed “Automatic Location” network option -- #MAC-1096
      • Added tooltips for SignOut / Exit Settings buttons, Main + OnBoarding windows appear at the same time -- #MAC-1088
      • Fixed “Automatic Location” network option -- #MAC-1096
      • Fixed UI blinking when switching between Home tab and any other -- #MAC-1073
      • Fix network selection logic -- #MAC-1087

      Was this article helpful?

      What's Next