2024

• Enhanced admin experience for managing groups – While assigning new members to a group, the Assign new members pane now supports improved search and scrolling, enabling easier navigation and management of groups with a large number of members.

• The Internet Access policy is now distributed to end users more efficiently and at a larger scale, ensuring quicker updates and improved performance.

• Introduced an enhanced Get Started wizard for Private Access Onboarding.

• Admins can now view the workspace name from the main dashboard. For example, a workspace name is required for agent installation.

N/A

• IDP Okta integration supports EU region - IDP Okta now supports tenants and workspaces configured in the EU region. For more information, see here.

• Customer Admin Role - MSP admins can now create and manage granular access policies for child accounts.

N/A

• MSP Child Tenant Allocation - Managed Service Providers (MSPs) can now manage access permissions for specific child tenants within their partner organization. This allows MSPs to control and allocate access for team members, ensuring that only authorized personnel can manage designated child tenants, enhancing security and streamlining tenant administration.

• You can now avail a 30-day free trial of the complete SASE platform.

N/A

• Configuring members' image is now deprecated.

• Native RDP support - This feature enables users to connect to agentless applications through their native RDP client. It now offers improved performance, multi-monitor support, and clipboard and printing controls for a more seamless experience.

• Personal RDP for agentless application access – Generates personalized RDP access based on the user’s IDP attributes. It is available for beta customers.

• Copilot available for Harmony SASE - Administrators can now consult the Infinity AI Copilot within the Infinity Portal for topics related to Harmony SASE. We have trained our LLM model on our SASE documentation and it currently supports queries on an array of Harmony SASE topics, including setup, configuration, features, best practices, and more.

• Allow usage of single IP Address in Redundant IPSec tunnel.

N/A

• Bundle of SASE with Browser Security is now GA. The service is available with a new SKU.

• Enhanced session synchronization with the Check Point Portal.

N/A

• MSPs Support:

  • Support for PAYG plan for sub-tenants.

  • Support for MSPs with a large number of sub-tenants.

• Added new regions:

  • New York 3, USA

  • London 3, UK

  • Sao Paulo 3, Brazil

• Improved network operations infrastructure in APAC.

• Sign In page now shows the data residency region in the Workspace drop-down list.

• Updated the Wireguard connector script to support Ubuntu 24.04 LTS and future versions.

N/A

• Added a new Remove Device action on the Device Inventory page, allowing Administrators to optimize device inventory by removing unused devices.

• Partners can now create trial tenants for their customers with a 30-day free trial to evaluate SASE. When a partner creates a new trial workspace for a customer, select the Premium+30 Day trial plan.

• Improved Gateway geographic location announcements (RFC 9092)

SASE now supports EU data residency, using a separate new instance of the platform.

• Aligned Web Filtering category names to Check Point standard categories.

• Added support for Specific Service Roles in the Check Point Check Point Portal, so users with a Read-Only role in the portal can be given an Admin role specifically for SASE.

• Implemented minor UI fixes.

N/A

• Zero trust applications - Added an Access for Members button for admins to display the URL to be sent to users to allow access.

• Further platform scalability improvements.

• SWG certificates for macOS can now be installed using MDM tools. This allows administrators to configure SWG (Internet Access) seamlessly for macOS devices using MDM tools without user intervention. The certificate can be generated and downloaded from the tenant Downloads page. Check Point SASE Agent for macOS version 10.4 and above supports this functionality.

• Two-Factor authentication improvements:

  • Added support for Duo Security Universal Prompt.

  • Changed verbiage to better reflect the support for different TOTPs such as Microsoft Authenticator and Google Authenticator.

• IDP/SCIM Integration - Added support for syncing user names which include commas.

• Web Activity page:

  • Log data in the table is now updated when changing selection in the widgets.

  • Improved display for deleted users.

• Scalability improvements in the web platform to support large customers.

• Rebranded to Check Point SASE and changed to the Harmony pillar in Check Point Infinity Portal.

• SCIM Group Sync for Okta is now available to all customers.