MaaS360 Cloud 10.68 Release Summary

Content

iOS / macOS MDM

Configure Apps Purchase Program from Settings page >>

MaaS360 includes Apps Purchase Program settings under App Settings in the Settings page to allow administrators to easily access and configure all required settings including Volume Purchase Program (VPP) from this page.

Auto upload Apple VPP applications to the MaaS360 portal by using VPP token >>

MaaS360 introduces capabilities to automatically upload all Volume Purchase Program (VPP) applications associated with a VPP token to MaaS360 App Catalog in the portal. Previously, applications associated with a VPP token had to be manually uploaded to the MaaS360 App Catalog in application portal. 

New Classroom Restrictions supported in iOS Supervised Settings >>

MaaS360 introduces Classroom Restrictions to manage Apple Classroom. Join Classes Automatically, Request Permission to Leave Classes, Allow App and Device Lock without Prompt, and Allow Screen Observation without Prompt Classroom Restrictions are introduced. You can enable these restrictions from iOS MDM policy > Supervised Settings > Restrictions & Network > Classroom Restrictions.

Handle inactive devices mapped as User Removed Control from Apple Feedback Service >>

MaaS360 introduces a mechanism to recover inactive devices that are marked as User Removed Control by Apple Feedback Service. New methods to handle inputs from Apple Feedback Service is introduced in this release wherein devices that are not available to receive the push notification from Apple or MaaS360 are marked as Unreachable. Previously, such devices were marked as User Removed Control.

New settings in macOS Wi-Fi configuration >>

MaaS360 introduces additional Wi-Fi settings such as Disable Captive Network Detection and Enable QoS  Marking for Apps in macOS MDM policy. You can configure these settings from macOS MDM policy > Configuration > Wi-Fi.

Option to skip setup of parameters during DEP Profile configuration >>

MaaS360 includes FileVault, iCloud Diagnostics, iCloud Storage, and Registration parameters under 'Skip Setup Items' in DEP Profile configuration. Customers can enable these parameters in  DEP profile configuration and choose to skip configuration of these settings during macOS DEP device enrollment process.

New restrictions added in macOS Passcode settings >>

MaaS360 introduces additional passcode restrictions in macOS MDM policy such as Grace Period for Device Unlock without Passcode in Minutes, Number of Unique Passcodes Required Before Reuse Allowed (1-50, or blank), and Reset Passcode on Next Authentication. You can enable these settings from macOS MDM policy > Restrictions > Password.

New restrictions added in macOS Device Functionality Restrictions >>

MaaS360 introduces additional device functionality restrictions in macOS MDM policy. You can enable these settings from macOS MDM policy > Restrictions > Functionality. The restrictions are supported on macOS 10.12+ devices only. Allow use of Camera and Configure Delay for Software Updates are supported on macOS 10.11+ and macOS 10.13+ devices respectively.

Encrypt all outgoing messages >>

MaaS360 adds support for S/MIME on Exchange ActiveSync with options to individually enable or disable signing and encryption on all outgoing messages by default. In the previous releases, all the messages were automatically encrypted and signed on pushing down the signing and encryption certificates to the devices.

CalDAV enhancements >>

MaaS360 allows the administrators to set up CalDAV to sync enterprise calendar so that all the users access the same calendar on macOS devices. Previously, macOS users could only sync personal calendars using the corporate username and password. 

Support for Provider Type for Pulse Secure VPN profile >>

MaaS360 allows administrators to deploy Provider Type value in the Pulse Secure VPN profile. With this support, administrators can tunnel the VPN traffic either at the application layer or at IP layer. 

Android

Support for secure TeamViewer unattended access (beta) >>

MaaS360 adds support for secure TeamViewer unattended access, allowing the administrators to set up permanent access to remote devices by using the TeamViewer Host app for Android. With this support, administrators can silently install the host app on the remote devices and initiate unattended remote support without any action to be taken on the remote side. In the previous releases, MaaS360 added support for TeamViewer attended access.

The list of supported devices is provided here.

Support for disablement of passcode on MaaS360 agents through Android Configurator >>

Background: MaaS360 users can use passcode settings in the MaaS360 agent to lock the MaaS360 application, even though the passcode is not enforced through Secure Policies.

In 10.68, MaaS360 enhances the bulk enrollment feature to allow the administrators to disable the passcode settings on the device. As a result, the passcode settings are unavailable in the MaaS360 agent after the enrollment.

Support to disable device reset on failed passcode attempts >>

Background: Administrators can use Maximum Failed Passcode Attempts policy to specify the number of times a user can enter an incorrect passcode before the device is completely wiped. In Android Enterprise devices, the Android Enterprise profile is erased on maximum failed passcode attempts.

In this release, MaaS360 now allows administrators to specify 0-16 values in the Maximum Failed Passcode Attempts field as opposed to previously allowed 4-16 values. The value 0 (zero) indicates that the policy is disabled, and the devices are not wiped on any number of failed passcode attempts.

OEMs

Build number validation before performing OS upgrade on Bluebird and Zebra devices >>

MaaS360 now validates the target build number against the current build number before performing an OS upgrade on the Bluebird devices. With this enhancement, the download is initiated only if the target build number is different from the build number already available on the device. Previously, the validation was performed after the OS update zip files were downloaded. 

Support for new group-level action to copy files from a remote server >>

MaaS360 adds a new group-level dynamic action to allow the administrators to easily copy a file to a group of Zebra and Bluebird devices from a remote server.

Support for new push profile actions on Bluebird devices >>

MaaS360 adds support for real-time actions, allowing the administrators to deploy predefined profiles that take specific action on the managed Bluebird devices.

M3 Device Management >>

MaaS360 announces a partnership with M3 to manage ruggedized SM10 devices in the MaaS360 platform. This release marks the first phase of a series of enhancements to be made to the MaaS360 platform to integrate with M3 SM10 devices. MaaS360 adds support for silent installation/upgrade of apps and new policies to enforce device restrictions on M3 devices. Requires Android 6.20+ agent. Note: MaaS360 only supports SM10 devices in this release. 

Windows

BETA Windows 10 Bulk Provisioning Tool >>

MaaS360 introduces Windows 10 Bulk Provisioning Tool that allows administrators to automatically enroll Windows 10 Laptops when using standard imaging process followed in their organization. 

Use Patch Source Category for effective Patch Distribution >>

In order to power administrators to make decisions on what patches need to be distributed to Windows and Mac devices, patch category is displayed as Source Category. For each patch, Source Category is now displayed which identifies the category of the patch.  Patches can be filtered based upon the type of Source Category. Multi-select filter option is also supported for the category selection so that a bunch of patches of a certain category can be distributed to devices. This capability is available for both type of patches - OS Patches and App Updates on Windows and Mac devices.

Windows Phone App updates >>

MaaS360 announces updates for Windows Phone Email, MaaS360 Docs, and MaaS360 Browser. A new version 2.8.1 is now available in Windows Marketplace that contains minor bug fixes.

Support for new real-time actions for Windows devices on MaaS360 End User Portal (EUP) >>

MaaS360 adds support for new real-time dynamic actions in MaaS360 End User Portal (EUP), allowing the end-users to easily perform actions such as lock device, wipe, locate, remove control, etc., on Windows 10 enrolled devices. Previously, EUP supported these actions for Android and iOS platforms.

Support for viewing app installation status and canceling app installation in Windows App Catalog >>

MaaS360 allows users to view all the stages of the app installation on Windows App Catalog. MaaS360 also provides an option to cancel the installation, just in case end-users no longer want to download the app.

Support to enable debug logging for MaaS360 Windows agents >>

MaaS360 adds debug logging support, allowing the administrators to produce a detailed log of application activity captured from supported Windows agents. The diagnostic logs help the support team to troubleshoot issues by pinpointing the cause of the problem. Previously, the options to enable debug logs and upload logs were restricted to MaaS360 support team.

MaaS360 Platform

General availability of Unified Enrollment >>

MaaS360 announces the general availability of Unified Enrollment for all new and existing MaaS360 customers.

Support for filter option for all columns in Policies user interface >>

MaaS360 enhances Policies usability for customers by introducing filter options across all columns in the Policies page. The filter option enables customers to easily search the required policies based upon various search criteria that is supported for all columns in the Policies page.

Availability of new user interface for application portal for all MaaS360 customers and partners >>

MaaS360 offers an improved user interface (UI) for administrators. The new UI that was released a few months back is now enhanced to show more content on the UI pages and offers a consistent experience across the MaaS360 portal.

Support to register a device without requiring a Flash player >>

MaaS360 removes the dependency on Flash player to register a device. With this feature, if strong authentication is enforced, administrators can seamlessly register a device and avoid security checks to access the MaaS360 portal. However, with 10.68, the administrators that already registered their devices will need to go through the additional security check once again to re-register their devices. Previously, when the Flash is blocked, administrators had to go through security checks even though the devices were successfully registered. 

Swedish language support >>

MaaS360 adds Swedish language support across the MaaS360 portal, End User Portal, and MaaS360 agents.

Support for time-based two-factor authentication for FedRAMP compliance >>

MaaS360 reinforces security by adding a time-based two-factor authentication support for portal administrators to meet the requirements of US Federal Risk and Authorization Management Program (FedRAMP). With this support, administrators must use a time-based one-time passcode in addition to their login credentials for authentication. In the previous releases, MaaS360 supported OTP via email and SMS.

Device group evaluation mode label change >>

The Real-time field in Evaluation Mode column that is used to filter the device groups based on device group evaluation has been renamed to Batch and Enrollment.

Misc>>

Various bug and security fixes. Thanks to Cody Wass of NetSPI for responsible disclosure of an XXE issue.

Analytics

Enhancements in Software Overview reports >>

MaaS360 includes additional customization columns such as Platform Serial Number and Device Serial Number in the App Inventory reports also known as Software Overview reports.

Apps

Support to add the same app from different sources in MaaS360 App Catalog >>

MaaS360 adds support to upload the same app from different sources in MaaS360 App Catalog. For example, if an app is uploaded as a Google Play Store, the same app (with the same bundle ID and version) can be uploaded as an Enterprise app from MaaS360 App Catalog. With this feature, customers that do not have access to Google Play Store can upload apps through other channels without conflicting the apps already available in MaaS360 App Catalog. Note: Contact MaaS360 support team to enable this feature for your account. 

Cloud Extender 2.94

Enhancements to certificate updates in the MaaS360 Portal (Update Device Certificate) action >>

MaaS360 now allows administrators to update a single certificate or multiple certificates on devices that are enrolled in the MaaS360 Portal that use the MDM policy and the Persona policy.