Windows

23 March 2026

• Indicator of Compromise (IOC) - Infinity Portal Management

  The agent now supports Indicator of Compromise (IOC) management through the Infinity Portal. This enables centralized IOC policy handling across the organization. (Available in Early Availability mode)

• ARM64 Agent Support - Private Access

  The agent now supports ARM64 devices (Windows on ARM), enabling Private Access connectivity on ARM-based hardware.

• Split Disable Sign-Out and Block Uninstall into Two Separate Controls

  Disable Sign-Out and Block Uninstall are now independent controls, each with its own dedicated code and prompt, giving administrators more granular control over endpoint restrictions. (Available in Early Availability mode)

• Tenant Restrictions - Failed Login Attempt Logs
  Logs are now generated for failed login attempts, giving administrators better visibility into unauthorized access attempts.

• HTTPS Inspection Allow Logs
  Administrators can now enable logs for traffic bypassed from HTTPS inspection, making it easier to track what is excluded from inspection policies.

• Security Profiles

  • File types are now grouped under file handling, with no constraints on using the Strict and Optimized built-in profiles.

  • Administrators can now log all Threat Emulation verdicts, including non-malicious files, for full inspection visibility.

• P81-105963 - Unable to collect logs when the agent is in signed-out state.

• P81-87418 - Keychain corruption affecting agent connection.

02 March 2026

• Block Websites with Invalid Certificates

  Administrators can now enforce blocking of websites with invalid certificates (Expired, Revoked, Self-Signed, Untrusted), strengthening endpoint security and preventing end users from accessing potentially unsafe sites. (Available in Early Availability mode)

• Security Events Pop-Up Notification Control

  Administrators can now disable and enforce security event pop-up notifications across their organization. By default, end users continue to receive notifications and can toggle this setting from the agent settings screen. (Available in Early Availability mode)

• Updatable Objects Support for Internet Access

  Updatable Objects, which are dynamically maintained network objects that automatically update based on vendor-managed feeds, are now supported in Internet Access policies. (Available in Early Availability mode)

9 February 2026

N/A

Pre-Login Tunnel Creation

Allows users to establish a secure tunnel before OS login using a second device authentication. This enables seamless access to private organizational resources, such as Active Directory, even when working remotely or outside the corporate network. (Available in Early Availability mode)

11 February 2026

N/A

N/A

26 December 2025

N/A

N/A

10 December 2025

N/A

• Threat Prevention Security Profiles

  These profiles introduce flexible security enforcement. Administrators can now define enforcement behavior and configure key Threat Prevention blades—including Malware Protection, Anti-Bot, and Threat Emulation—to align with their security posture and operational needs (Available in Early Availability mode)

• Data Loss Prevention (DLP) Enhancements

  DLP now includes:

  • Data Type Manager for fine-tuning data types.

  • A new Services column in the DLP policy for applying rules based on URL categories, applications, and custom URLs.

  These enhancements provide greater granularity and more precise enforcement.

• Threat Prevention Exceptions

  Administrators can now define granular exceptions for specific URLs or files, using SHA-256 identifiers. This provides precise control to handle trusted resources and to reduce false positives.

18 November 2025

N/A

• Admins can now hide the Reset Agent button in the agent UI, preventing end-users from resetting the agent themselves

21 October 2025

N/A

• Idle Device Detection and Automatic Sign-Out - The SASE agent now detects unattended devices and disconnect those users from your private resources, thereby protecting the company resources.

29 September 2025

N/A

• Multi-language Support - The agent now supports multi-language mode and is fully localized in French. Users can set the language through:

  • User settings

  • Automatically by the OS language

  • Installation parameters

• Device Posture Check (DPC) - A new DPC feature offers full device certificate validation. Administrators can now verify authenticity, validity, and private key matching to strengthen overall device security and compliance

• Granular DLP Policy Control - Enhanced DLP policy granularity by adding a new dimension - service. It allows administrators to select web categories, URLs or applications (Available in Early Availability mode)

28 July 2025

N/A

• Transparent Internet Access protection now supports deployment through Mobile Device Management (MDM) for domain users, even if you do not provide the user's email address.

• Switch user event tracking and monitoring allows better security event tracking and accurate policy enforcement on shared devices.

• Agent anti-tampering mechanism now also protects SASE agent processes and services from being terminated (Available in Early Availability mode)

• Added Data Loss Prevention (DLP) support for file uploads to detect and block sensitive data exfiltration (Available in Early Availability mode)

• Introduced Tenant Restrictions to control user access to approved Office 365 and Google Workspace tenants. This helps to prevent data leaks and shadow IT (Available in Early Availability mode)

• Enhanced Application Control granularity with new actions to block file uploads to Box and Google Drive (Available in Early Availability mode)

21 May 2025

N/A

• A new option allows SASE agent's Internet Access protection to be disabled when the device is connected to a secured trusted network, to avoid duplicate traffic inspection.

• Device isolation from Local Area Network (LAN) is now available as a new option to enhance device security. (Available in Early Availability mode)

• Customization of Block/Warn pages is now available, allowing tailored messages for end-users.

27 March 2025

N/A

• A new option is available to install the SASE agent, enabling Internet Access security to start working out of the box without user interaction.

• The new Application control security engine allows managing and restricting applications on end-user protected devices.

• URL Filtering Allow logs - SASE now collects and stores Allowed end-user browsing history in Admin portal.

• The Agent anti-tampering feature now allows administrators to enforce an admin code requirement to uninstall the SASE agent.

• URL Filtering, Malware Protection, Anti-Bot, and Threat Emulation logs are now available on Events & AIOps and in a new Unified Log viewer screen. These logs can also be exported to SIEM systems via Events & AIOps.

22 January 2025

N/A

• New Anti-Bot security engine detects and prevents access to malicious URLs.
  

• New Threat Emulation engine uses connected sandboxes to prevent multi-stage attacks at the earliest available stage.
  

12 November 2024

N/A

• Enhanced Trusted Network capability, now supporting the use of an HTTPS server and a TLS certificate

• Implemented a comprehensive update to our Malware protection engine

16 October 2024

N/A

N/A

30 September 2024

N/A

• Added support for wildcards in URL filtering rules

28 August 2024

N/A

N/A

30 July 2024

N/A

• Implemented a comprehensive update to our Web filtering security engine.

• Rebranded the task bar icons.

• Rebranded Block, Warn, and Malware Protection pages.

• Renamed installation file from Perimeter81_10.x.x.xxxx.msi/exe to HarmonySASE11.x.x.xxxx.msi/exe

• Bug fixes and stability improvements.

28 June 2024

N/A

N/A

20 May 2024

N/A

N/A

29 March 2024

Secure Web Gateway (which includes Web Filtering and Malware Protection) now stays active even when the user is signed out of the agent, using the most recently cached web filtering policy. The user interface has been updated to show that the SWG is enabled in this situation. If allowed by the admin, the SWG can be turned off by quitting the agent.

• The agent supports the new European Data Residency instance of Harmony SASE, which will be launched in April. The data residency region can be configured when installing the agent using a new 'region' parameter, or by switching to it from the platform sign-in page when signing in to the agent.

• Improved, simplified connection logic and refactoring for speed.

• Agent logging events have been moved to a new, robust and more scalable infrastructure.

• Improvements to the Web Filtering category resolving mechanism.

• .Net version updated to 8.0.

• The agent is now signed with a Check Point certificate instead of a Perimeter 81 certificate.

27 February 2024

N/A

N/A

29 January 2024

N/A

The Perimeter 81 agent is now rebranded to Check Point - Harmony SASE.