November

  • Updated on Dec 3, 2025
  • Published on Dec 2, 2025
  • 1 minute(s) read
  • k
 Prev Next

Early Availability

  • Agent UI Controls

    Administrators can now hide the Reset Agent button from end-users on SASE Windows and macOS agents.

New Features

  • Operational Events – General Availability (GA)

    Operational events and tunnel logs are now available across all regions in Infinity Events, giving administrators unified visibility and faster troubleshooting for their Harmony SASE deployment.

  • Tenant Restrictions – General Availability (GA)

    Tenant Restrictions are now in GA, enabling organizations to limit access to approved SaaS tenants only. This feature prevents users from signing in to personal or untrusted tenants. The supported applications are:

  • Data Loss Prevention (DLP) for File Uploads – General Availability (GA)

    DLP for file uploads is now in GA on all environments. Administrators can detect and block sensitive data being uploaded to cloud services, helping protect confidential information and support regulatory compliance. For more information, see Data Loss Prevention.

Enhancements

  • Improved Split Tunnelling Resilience

    When Split Tunnelling is enabled, network configuration changes now occur more smoothly, significantly reducing the chance of VPN interruptions during maintenance operations.

    Note: This feature is available on Windows and macOS agents, version 12.2 or higher.

  • Scalability and Performance for Large Deployments
    Multiple backend and UI optimizations improve performance and responsiveness in large environments, including:

    • Faster loading of route tables and network routes.

    • More efficient handling of tenants with very large firewall rule sets.
      These improvements help administrators manage complex environments with less waiting and fewer timeouts.

  • Stronger Device Posture

    Device Posture Check - Added Microsoft Defender to the list of supported Endpoint Security products for macOS, improving device compliance validation options.

  • Better Renewal Experience

    The in-product renewal banner now appears 45 days before subscription renewal, giving administrators more time to plan renewals and avoid service disruption.