2024

December

New Features

  • Enhanced admin experience for managing groups – While assigning new members to a group, the Assign new members pane now supports improved search and scrolling, enabling easier navigation and management of groups with a large number of members.

  • The Internet Access policy is now distributed to end users more efficiently and at a larger scale, ensuring quicker updates and improved performance.

  • Introduced an enhanced Get Started wizard for Private Access Onboarding.

  • Admins can now view the workspace name from the main dashboard. For example, a workspace name is required for agent installation.

Feature Enhancements

N/A

Resolved Issues

  • P81-55727 - Retrieving custom properties for ZTA Dynamic RDP can end up with a timeout.

November

New Features

  • IDP Okta integration supports EU region - IDP Okta now supports tenants and workspaces configured in the EU region. For more information, see here.

  • Customer Admin Role - MSP admins can now create and manage granular access policies for child accounts.

Feature Enhancements

N/A

Resolved Issues

  • P81-50352 - Deleted user groups are now visually distinguished on the User Groups page.

  • P81-54824 - Positioning of addresses combo box and drop-down list is fixed, ensuring the appropriate controls’ layout.

  • P81-55740 - Resolved an issue that caused a "Cross origin login not allowed" error, blocking platform access after sign-up.

October

New Features

  • MSP Child Tenant Allocation - Managed Service Providers (MSPs) can now manage access permissions for specific child tenants within their partner organization. This allows MSPs to control and allocate access for team members, ensuring that only authorized personnel can manage designated child tenants, enhancing security and streamlining tenant administration.

  • You can now avail a 30-day free trial of the complete Harmony SASE platform.

Feature Enhancements

N/A

Deprecations

  • Configuring members' image is now deprecated.

Resolved Issues

  • P81-51616 - Clicking on Device Name leads to the proper page, based on the tenants’ licensing.

  • P81-52473 - Logging out when using Google SSO, logs out Google account entirely.

  • P81-52796 - Auto logout at 3am, doesn’t work when session duration is set to 24 hours.

  • P81-54660 - Firewall logs not generated for rules created by API

  • P81-54685 - Disable Sign-out option not available

  • P81-51935 - ZTA application fails to load after gateway upgrade

September

New Features

  • Native RDP support - This feature enables users to connect to agentless applications through their native RDP client. It now offers improved performance, multi-monitor support, and clipboard and printing controls for a more seamless experience.

  • Personal RDP for agentless application access – Generates personalized RDP access based on the user’s IDP attributes. It is available for beta customers.

  • Copilot available for Harmony SASE - Administrators can now consult the Infinity AI Copilot within the Infinity Portal for topics related to Harmony SASE. We have trained our LLM model on our SASE documentation and it currently supports queries on an array of Harmony SASE topics, including setup, configuration, features, best practices, and more.

  • Allow usage of single IP Address in Redundant IPSec tunnel.

Feature Enhancements

N/A

Resolved Issues

  • P81-51169 - Improved policy editing for a smoother user experience.

  • P81-51040 - Allow the admin to unblock a user when the user is signed in to multiple tenants.

  • P81-51187 - Active sessions now accurately display detailed user information for VPN-connected sessions, while addressing previous discrepancies.

August

New Features

  • Bundle of Harmony SASE with Harmony Browse is now GA. The service is available with a new SKU.

  • Enhanced session synchronization with the Infinity Portal.

Feature Enhancements

N/A

Resolved Issues

N/A

July

New Features

  • MSPs Support:

    • Support for PAYG plan for sub-tenants.

    • Support for MSPs with a large number of sub-tenants.

  • Added new regions:

    • New York 3, USA

    • London 3, UK

    • Sao Paulo 3, Brazil

  • Improved network operations infrastructure in APAC.

  • Sign In page now shows the data residency region in the Workspace drop-down list.

  • Updated the Wireguard connector script to support Ubuntu 24.04 LTS and future versions.

Feature Enhancements

N/A

Resolved Issues

  • P81-47263 - iPad agent is signed out the next day, in case it remained connected overnight

  • P81-48176 - SAML 2.0 IDP URL configuration now supports all valid domain extensions, allowing for broader customization

June

New Features

  • Added a new Remove Device action on the Device Inventory page, allowing Administrators to optimize device inventory by removing unused devices.

  • Partners can now create trial tenants for their customers with a 30-day free trial to evaluate Harmony SASE. When a partner creates a new trial workspace for a customer, select the Premium+30 Day trial plan.

  • Improved Gateway geographic location announcements (RFC 9092)

Feature Enhancements

N/A

Resolved Issues

  • P81-46499 - Active user sessions, accessible from the dashboard, now display the correct country under Session Origin.

  • P91-46780 - Device posture check (DPC) for Mac agents is compatible with Check Point’s End Point process names.

May

New Features

A new Browser Security menu is now available (in Beta). It supports the new Internet Security Essentials+ offering which includes the Harmony Browse browser extension.

Feature Enhancements

N/A

Resolved Issues

  • P81-42112 - Can't create a group where the name contains ":"

  • P81-46478 - Can't create a network with /22 subnet

  • P81-39418 - Can't update Configuration profile

April

New Features

Harmony SASE now supports EU data residency, using a separate new instance of the platform.

Feature Enhancements

  • Aligned Web Filtering category names to Check Point standard categories.

  • Added support for Specific Service Roles in the Check Point Infinity Portal, so users with a Read-Only role in the portal can be given an Admin role specifically for Harmony SASE.

  • Implemented minor UI fixes.

Resolved Issues

N/A

March

New Features

N/A

Feature Enhancements

  • Zero trust applications - Added an Access for Members button for admins to display the URL to be sent to users to allow access.

  • Further platform scalability improvements.

Resolved Issues

  • P81-38343 - Networks tab - 'undefined' error

February

New Features

  • SWG certificates for macOS can now be installed using MDM tools. This allows administrators to configure SWG (Internet Access) seamlessly for macOS devices using MDM tools without user intervention. The certificate can be generated and downloaded from the tenant Downloads page. Harmony SASE Agent for macOS version 10.4 and above supports this functionality.

Feature Enhancements

  • Two-Factor authentication improvements:

    • Added support for Duo Security Universal Prompt.

    • Changed verbiage to better reflect the support for different TOTPs such as Microsoft Authenticator and Google Authenticator.

  • IDP/SCIM Integration - Added support for syncing user names which include commas.

  • Web Activity page:

    • Log data in the table is now updated when changing selection in the widgets.

    • Improved display for deleted users.

  • Scalability improvements in the web platform to support large customers.

Resolved Issues

N/A

January

New Features

  • Rebranded to Harmony SASE and changed to the Harmony pillar in Check Point Infinity Portal.

Feature Enhancements

  • SCIM Group Sync for Okta is now available to all customers.

Resolved Issues

N/A