MacOS

17 March 2026

• Indicator of Compromise (IOC) - Infinity Portal Management

  The agent now supports Indicator of Compromise (IOC) management through the Infinity Portal. This enables centralized IOC policy handling across the organization. (Available in Early Availability mode)

• Split Disable Sign-Out and Block Uninstall into Two Separate Controls

  Disable Sign-Out and Block Uninstall are now independent controls, each with its own dedicated code and prompt, giving administrators more granular control over endpoint restrictions. (Available in Early Availability mode)

• Tenant Restrictions - Failed Login Attempt Logs
  Logs are now generated for failed login attempts, giving administrators better visibility into unauthorized access attempts.

• HTTPS Inspection Allow Logs
  Administrators can now enable logs for traffic bypassed from HTTPS inspection, making it easier to track what is excluded from inspection policies.

• Security Profiles

  • File types are now grouped under file handling, with no constraints on using the Strict and Optimized built-in profiles.

  • Administrators can now log all Threat Emulation verdicts, including non-malicious files, for full inspection visibility.

• P81-105963 - Unable to collect logs when the agent is in signed-out state.

• P81-87418 - Keychain corruption affecting agent connection.

05 March 2026

• Block Websites with Invalid Certificates

  Administrators can now enforce blocking of websites with invalid certificates (Expired, Revoked, Self-Signed, Untrusted), strengthening endpoint security and preventing end users from accessing potentially unsafe sites. (Available in Early Availability mode)

• Security Events Pop-Up Notification Control

  Administrators can now disable and enforce security event pop-up notifications across their organization. By default, end users continue to receive notifications and can toggle this setting in the agent settings screen. (Available in Early Availability mode)

• Updatable Objects Support for Internet Access

  Internet Access policies now support dynamically maintained network objects that automatically update based on vendor-managed feeds. (Available in Early Availability mode)

13 February 2026

N/A

20 January 2026

N/A

• Threat Prevention Security Profiles - These profiles introduce flexible security enforcement. Administrators can now define enforcement behavior and configure key Threat Prevention blades—including Malware Protection, Anti-Bot, and Threat Emulation—to align with their security posture and operational needs (Available in Early Availability mode)

• Data Loss Prevention (DLP) Enhancements

  DLP now includes:

  • Data Type Manager for fine-tuning data types.

  • A new Services column in the DLP policy for applying rules based on URL categories, applications, and custom URLs.

    These enhancements provide greater granularity and more precise enforcement.

• Threat Prevention Exceptions - Administrators can now define granular exceptions for specific URLs or files, using SHA-256 identifiers. This provides precise control to handle trusted resources and to reduce false positives.

19 November 2025

N/A

29 October 2025

N/A

• Idle Device Detection and Automatic Sign-Out - The SASE agent now detects unattended devices and disconnects those users from your private resources, thereby protecting company's resources.

• Renamed application name from Perimeter81.app to Harmony SASE.app

29 September 2025

N/A

N/A

8 September 2025

N/A

• Multi-language Support - The agent now supports multi-language mode and is fully localized in French. Users can set the language through:

  • User settings

  • Automatically by the OS language

  • Installation parameters

• Device Posture Check (DPC) - A new DPC feature offers full device certificate validation. Administrators can now verify authenticity, validity, and private key matching to strengthen overall device security and compliance

• Granular DLP Policy Control - Enhanced DLP policy granularity by adding a new dimension - service. It allows administrators to select web categories, URLs or applications (Available in Early Availability mode)

6 August 2025

N/A

N/A

4 August 2025

N/A

• Added Data Loss Prevention (DLP) support for file uploads to detect and block sensitive data exfiltration (Available in Early Availability mode)

• Introduced Tenant Restrictions to control user access to approved Microsoft Office 365 and Google Workspace tenants. This helps to prevent data leaks and shadow IT (Available in Early Availability mode)

• Enhanced Application Control granularity with new actions to block file uploads to Box and Google Drive (Available in Early Availability mode)

• Agent to Platform communications have transitioned to port 443, enabling user policy updates and usage monitoring even on restricted networks.

10 June 2025

N/A

N/A

28 May 2025

N/A

• A new option allows SASE agent's Internet Access protection to be disabled when the device is connected to a secured trusted network, to avoid duplicate traffic inspection.

• Device isolation from Local Area Network (LAN) is now available as a new option to enhance device security. (Available in Early Availability mode)

• Customization of Block/Warn pages is now available, allowing tailored messages for end-users.

1 April 2025

N/A

• A new option is available to install the SASE agent, enabling Internet Access security to start working out of the box without user interaction.

• The new Application control security engine allows managing and restricting applications on end-user protected devices.

• URL Filtering Allow logs - SASE now collects and stores Allowed end-user browsing history in Admin portal.

• The Agent anti-tampering feature now allows administrators to enforce an admin code requirement to uninstall the SASE agent.

• URL Filtering, Malware Protection, Anti-Bot, and Threat Emulation logs are now available on Events & AIOps and in a new Unified Log viewer screen. These logs can also be exported to SIEM systems via Events & AIOps.

22 January 2025

N/A

• Enhanced Trusted Network capability, now supporting the use of an HTTPS server and a TLS certificate.

• Implemented a comprehensive update to the Malware protection engine.

• New Anti-Bot security engine detects and prevents access to malicious URLs.

• New Threat Emulation engine uses connected sandboxes to prevent multi-stage attacks at the earliest available stage.

21 October 2024

N/A

• Added support for wildcards in URL filtering rules

• Renamed installation file from Perimeter81_10.x.x.xxxx.pkg to Harmony_SASE_11.x.x.xxxx.pkg

28 August 2024

N/A

N/A

7 August 2024

N/A

• Implemented a comprehensive update to our Web filtering security engine.

• Rebranded the taskbar icons.

• Rebranded Block, Warn, and Malware Protection pages.

29 March 2024

Secure Web Gateway (which includes Web Filtering and Malware Protection) now stays active even when the user is signed out of the agent, using the most recently cached web filtering policy. The user interface has been updated to show that the SWG is enabled in this situation. If allowed by the admin, the SWG can be turned off by quitting the agent.

• The agent supports the new European Data Residency instance of Harmony SASE, which will be launched in April. The data residency region can be configured when installing the agent using a new 'region' parameter, or by switching to it from the platform sign-in page when signing in to the agent.

• Agent logging events have been moved to a new, robust and more scalable infrastructure.

29 January 2024

N/A

The Perimeter 81 agent is now rebranded to Check Point - Harmony SASE.