Updated the fyde.com domain to Barracuda.

Fixed a UI crash issue on macOS when trying to perform the trouble-shooting menu during v6 enrollment.

Support new API for non-TPM enrollment.

Back up the existing enrollment information and make a recovery file. [BNCGA-6023]

Fixed a stability issue in the enrollment database.

Fixed the Captive portal page from being displayed.

Fixed issue where device was unenrolled during boot up.

Updated language on app enrollment screen.

New Device classification type is now reflected on the Tenant Details / Company Name screen after device re-classification.

Fixed issue where, with the agent version 2.5.2, the user remained enrolled even after they were deleted from the console.

Feature: Debug mode is now enabled during the enrollment phase and gathers logs in case the administrator runs into issues enrolling users. Includes a way to report issues during enrollment.

Fixed issue where the agent continued to poll /enrollment after authentication.

Clarified messaging about what information is tracked on user's device based on Device Classification (personal, managed, or supervised).

Fixed an issue where CloudGen Access creates multiple certificates on start-up.

Optimized agent tunnel communication.

Now cache web policies response.

Made a AAAA DNS response for the resource.

Retry to fetch certificate due to the failure of network.

Fixed an issue where tunnel restarts every few minutes.

Fixed tunnel error notification logic.

Fixes app catalog loading when no data is available.

Fixed an issue where Authentication screen did not display as expected.

New multi-tenancy feature.

IP-based resources: Now allow users to specify a public host with an IP address (not just a hostname).

Increased security posture in handling SaaS resource.

Addressed an issue where tunnel crashed during certificate clean up.

Fixed OneSky issue (a bug related to OneSky API url).

BNCGA-5190: Fixed certificate refresh issue.

Clear old enrollments more often.

Fixed unhandled C++ exception issue.

Don't override DisableDnsRestrict.

Changed failure_cool_down from 60s to 10s.

Fixed a Linux crash upon shutdowns.

Fixed access-interface crash on Linux VM.

New Device Classification feature allows IT administrators to classify end user devices as Personal, Managed, or Supervised in order to better manage and secure corporate devices. See Device Classification and How Device Classification Works for details.

Cleaned up old certificate on certificate renewal.

Fixed an issue where user could not turn on notifications on Android 13.

Improve certificate handling with TPM support.

Extended support for macOS and iOS Tamperproof.

Fixed crash issue on iOS when the agent tries to fetch the resource DB.

Enhanced control of 'On Demand VPN' flag for macOS / iOS.

Fixed the polling time issue for the enrollment update.

Fixed an issue with enrollment through the universal link within the email.

Fixed an issue where default web policies did not apply as expected.

Fixed an issue on Android that filled up troubleshooting logs with errors when enabling the Tamperproof feature.
​

Fixed issue where notifications were turned off upon upgrade.

Tamperproof feature – Works with the CloudGen Access Console settings for the Tamperproof feature. P rovides the option to protect against unauthorized or accidental tampering with the app installation, security policy, and app settings on endpoints. When enabled in the console, this feature hides the Quit, Un-enroll and Stop/Start options on the CloudGen Access App. See Tamperproof for details and OS support.

Removes the Overview screen.

Implements universal links for iOS and Android.

Fixes the auto-start issue on Android.

Handles the deadlock monitor properly for sleep/wakeup operations.

Hides the message box if the tunnel is crashed.

Handles libcurl's initilization properly.

Fixes an issue of loading the resource database due to the cached etag.
​

The agent no longer performs a category lookup for special local domains such as ARPA, local, Corp, lan, etc.

Fixed a stability issue when the DNS request is invalid or malformed.

Fixed a bug regarding loading the category database if the file path includes multi-byte characters.

Fixed an issue where the CloudGen Access agent failed to load the category database.

Fixed a suspend/resume issue on Windows by restarting the tunnel properly.

Fixed a stability issue when a malformed DNS request comes in.

Fixed a bug where the agent failed to check the category lookup queue, and multiple HTTP requests for the same domain were being sent to the backend.

Fixed an issue where the agent may crash on certain machines.

Added a missing category string.

Fixed an issue to support the zh-Hant locale.
​

Fixed an issue with the tunnel for when the system local isn't English.

Introduces new DNS filtering (Web Policy) based on web categories.

Enhanced troubleshooting output to include more detailed information.

Web Policy rules are updated when the Settings -> Enterprise Enrollment -> Update button is clicked.

Fixed a deadlock issue with updating enrollments.

Fixed a connection hang issue for the long-lasting connections.

Fixed an issue with Android where the user was unable to access the Overview screen after unenrolling the device.

Removed the UseLessCellularData feature for iOS and Android.

The DNS Security page has been replaced by the Web Security page. You can still create policies for users/groups as described in Configure Web Security Policies. For details about migration of policies from the old agent to version 2.0, see DNS Security Upgrade to Version 2.0.
To get the Windows agent version 2.0, see How to Get and Install the CloudGen Access Agent 2.0 and Higher.
​
​Note: All new customers will get version 2.0 for Windows, and the new version will be slowly rolled out to existing customers.

The agent works as expected when it encounters CJK (Chinese-Japanese-Korean) characters in account names.

Fixed a delayed notification issue on mobile devices.

Android works as expected when the notifications pop up.

Added support CloudGen Access-as-IdP feature.

Fixed a case sensitive domain bug in the troubleshooting menu.

Fixed the initial window positioning issue on macOS.

Fixed an issue where root CAs were not fetched in a timely fashion.

Fixed a notification issue with macOS.

The CloudGen Access agent driver will stop if the tunnel isn't running.

Fixed an issue with the troubleshooting menu when the resource IP address is a fixed private IP address.

Added Delete Account button for iOS and macOS.

The cgaccess-service.exe process runs as expected for Windows.

Enhanced the issue report feature by supporting the routing table and network interface dump.

Adds new Enterprise Console API domains.

Holds the connection when re-authentication is required.

The progress indicator now displays while the package update is progressing.

Fixed a bug related to macOS that caused the secondary DNS server (192.0.2.5) for Barracuda CloudGen Access to not work correctly.

Enhanced IPv6 support for Windows.

Now updating the resource database when the user clicks the 'Update' button under the Enrollment menu.

Fixed a notification issue on macOS and iOS.

Enhanced the Troubleshooting menu.

Added support for Windows agent updates within the app.

Added support for Windows 2016 server.

Improved the Windows installation UI.

Fixed a performance bug in the UDP proxy.

Fixed a memory consumption issue when the access policy is denied by multiple threads.

Fixed a process hang issue of the tunnel for Windows.

Fixed multiple crash issues when exiting the agent.

Fixed an issue that resulted in the BSOD on some Windows machines.

Fixed an issue where macOS would stop, in some instances, when stopping the tunnel.

Fixed an issue where the agent would not send an issue report if unenrolled.

Improved troubleshooting reports by sending more context data.

Fixed issue where CPU usage would go up when the agent was offline.

Improved Enrollment Settings button behavior.

Addressed issue where an authorization denial could cause the tunnel to stop.

Windows: addressed issue where the UI would not start on new installations.

Added application catalog feature.

iOS: Fixed logic that made othervpn pop-up appear when only CGA was running.

Addressed window positioning/visibility issues.

For macOS, added native support for Apple Silicon

For Windows:
​

Added support for DNS over resource.

Added new on-boarding flow.

Improved bug reporting flow.

Fixed issue where UI would not start if database was corrupted.

Windows Desktop: addressed an issue where the order of the system DNS servers was not honored.

Added support for UDP resources.

Added support for resources on fixed IP addresses.

Synthesized HTTPS and SVCB DNS queries for resource's domain names.

Full chain of certificates used on mTLS connections.

Android: Tunnel marked as unmetered on Android 10 and higher.

Implemented automatic device certificate renewal.

Android: To work around a Download Manager defect, do not exclude apps from the tunnel on Android 10 and higher. Google reported fixing this defect in Android 10 and higher.

Windows: fixed an issue that caused the agent to block when the machine wakes from sleep/hibernation.

macOS: fixed an issue in Big Sur where the system DNS resolver first queried the SOA record of a domain name.

Fixed caching of proxy configurations.

Fixed conflicting VPN warning appearing during on-boarding.

Fixed clear button appearing even if text input field is empty.

Fixed tunnel not being correctly shutdown when quitting app.

Added ability to send analytics events to different servers.

Windows: app now differentiates between Store, Store sideload, and MSI environments.

Windows Desktop: fixed service reinstall.

Windows Desktop: DNS addresses of disconnected interfaces are now discarded.

Chrome OS: fixed handling of enrollment URL.

Chrome OS: fixed crash on x86_64 machines.

Several GUI improvements and bug fixes.

Added display information and link to troubleshooting menu for internal errors.

Blocked threat notification message leads to correct path.

DNS security exceptions are no longer created from the app when user is enrolled.

Data now gets saved after enrolling and quitting the app.

Linux: reconnect RPC channel has been fixed.

Linux: ignore link-local IPv6 addresses has been fixed.

Linux: issue with broken app icons has been fixed.

Android: editable text input has been fixed.

Android: internal domains can now be resolved.

Do not override resolv.conf if the file is empty.

Fixed long delays when making several asynchronous HTTPS requests.

Fixed deadlock in the network stack.

Linux: ignore link-local requests.

Linux: set system nameservers when computer leaves sleep/hibernation.

Fixed HTTPS request contention.

Added support for wildcard exceptions.

Added magic domain to signal tunnel is running (“running.tech.fyde.com”).

Added option to reset activity.

Several improvements and bug fixes.