MaaS360 Cloud 10.65 Release Summary

Content

iOS / macOS MDM

Support for adding any iOS 11 device to DEP >>

With iOS 11, Apple introduced the ability to add any iOS device to a DEP account. The iOS device need not have been procured through the traditional DEP channel. MaaS360 introduces new capabilities to support this new iOS 11 functionality. Administrators now have the capability to add such devices to their DEP account using MaaS360 workflows. MaaS360 supports authenticated and unauthenticated enrollment of devices into MaaS360 while still requiring DEP authentication for new device additions. Users have the ability to leave DEP management for a period of 30 days post addition after which the device will be permanently associated with the corporate DEP account.

Support for Unified Enrollment for macOS >>

macOS devices enrollments now support the new MaaS360 Unified Enrollment experience. Previously, macOS enrollments started with users downloading the MaaS360 agent on the device. With this change, customers currently using the new Unified Enrollment workflows on iOS and Android will now see a new experience on macOS devices. Users will start the enrollment from a Safari browser and complete the enrollment process. MaaS360 agent will get installed post enrollment, just like iOS. With the unified enrollment support on macOS, customers can leverage other features like Enroll on behalf of, the new two-factor authentication based enrollment and SAML authentication for macOS devices. Customer that are not leveraging the Unified Enrollment experience will see no changes in the enrollment experience on macOS.

De-couple application allowlist and VPN configuration for per-app VPN configuration >>

In this release, MaaS360 has de-coupled the configuration of VPN and the application allowlist for per-app VPN configuration. Previously, if a new app needed to be added to the application allowlist for participation in per-app VPN, the entire VPN configuration would be re-loaded on the iOS device. This would also include re-issuing a certificate to the device. With this release, administrators can now add new apps to the app allowlist without re-issuing certificates or reloading their VPN configurations. This will result in faster policy changes and no impact to the end user and enterprise PKI infrastructure.

Support for OS Patch Compliance for macOS devices >>

With this release, administrators can now enforce automated actions on macOS devices missing critical, important and moderate patches. macOS devices that enroll into MaaS360 start reporting the patches that are missing based on severity. Administrators can now define a compliance rule that can enforce actions like alert, corporate wipe, change policy, remove MDM control or factory reset on devices missing a defined number of patches per severity. This feature is also supported on Windows devices.

Support for world’s first official iOS screen sharing solution with MaaS360/TeamViewer integration >>

MaaS360 announces support for TeamViewer integration for iOS 11 and later, allowing the administrators to see a user's device in real-time for remote support. With this feature, administrators can kick off sessions via MaaS360 workflows and speed up the troubleshooting process.

Windows

Support for new quick start actions for Windows laptops and desktops >>

As part of the MaaS360 Quick Start workflow that shows up on initial account sign-up, MaaS360 adds three new quick start actions: Lock, Send Message, and Locate for Windows laptops enrolled through DTM. Previously, the quick start actions were only supported for Windows devices enrolled through MDM.

Custom OMA (Open Mobile Alliance) support to deploy configuration settings on Windows devices >>

MaaS360 introduces a way for administrators to push custom policies in the form of OMA configuration files to Windows devices. When Microsoft releases new APIs as a part of their OS release, customers can use this new workflow to push custom policy settings without having to wait for MaaS360 policies UI to be updated. Contact MaaS360 customer support team to enable this feature for your account.

Localization support and redesigned user interface for Windows App Management Utility >>

MaaS360 adds localization support for Windows App Management Admin Utility app to make the app available in 14 new languages. The app also gets a rich and reorganized user interface.

Support for new MaaS360 DTM v3.93 installer >>

MaaS360 introduces DTM installer version 3.93 with updated code base for seamless enrollments. MaaS360 automatically uninstalls BigFix agent on removing device control and is the agent which supports TLS 1.0 deprecation.

UEM Windows/macOS

Support for role-specific access rights for patch distribution >>

In this release, MaaS360 introduces four new access rights for administrators to view/enable patch distribution capabilities at organization level or device level. With this approach, the patch distribution access rights can be restricted to authorized users. Existing administrators with appropriate levels of access will continue to be able to distribute patches. Administrators can then assign this new access right to newly created administrators and also include them as a part of custom role definitions.

Legacy BigFix menus hidden on enabling UEM or BFLTM and other UI changes >>

MaaS360 hides menu items pertaining to legacy BigFix patch management when the latest UEM services are enabled. With the new UEM service for laptops and desktops, administrators can access real-time patch management reports and distribute patches from these screens thereby not requiring the legacy reports. In this release, the laptop and desktop management service options in Setup menu are reorganized.

New system restart delay options for patch download

Previously, MaaS360 patching for Windows or Mac allowed for a delay in a restart for up to 1 day after a patch is applied. The system restart delay options are enhanced to support more granular frequencies from 1 minute to 30 days.

Platform

New navigation bar in MaaS360 portal >>

MaaS360 introduces a new navigation bar to the MaaS360 portal in this release. The navigation bar has been redesigned to accommodate new menu items and the options have been reorganized for ease of access. This is a part of the enhancements around usability and user experience that will be introduced in MaaS360 in multiple upcoming releases.

Enhancements to reset MaaS360 portal login password >>

MaaS360 enhances the password reset workflow for administrators logging in to the MaaS360 portal. With changes to the workflow, administrators can unlock their locked accounts with the Forgot your password link. The administrators will receive an email to a link to set a new password. This will also unlock the account, which previously required a call to MaaS360 Customer Support.

SAML authentication and portal session passcode for MaaS360 actions >> 

With SAML based authentication for MaaS360 portal administration, administrators had to previously enter a unique one-time passcode to approve any action during their logon session. This passcode used to be unique per action and then would be emailed to the administrator each time. In this release, MaaS360 enhances usability to customer administrators logging into the portal via SAML authentication by introducing a Portal Session Passcode for actions. The administrator receives one passcode for an active logon session and this Portal Session Passcode can be used to authenticate all actions in MaaS360.

       Display supporting platforms and version labels for Compliance Rules >>

MaaS360 has enhanced its compliance rule engine to add support for various device platforms and new compliance rules being supported. In this release, each compliance rule uses labels to identify the supported platforms (iOS, Android, Windows, and macOS). Hovering over the labels displays specific version requirements for these rules.

Support for renaming portal administration roles >>

MaaS360 now allows administrators to edit Role Name when editing an existing role. Previously for existing roles, only the Role Description and Grant Access Rights were editable. With this change, administrators can easily edit names without having to recreate a role with a new name.

Support pages help links in MaaS360 portal >>

MaaS360 portal now contains links to the IBM MaaS360 Knowledge Center, IBM developerWorks, and other IBM support pages for quick and easy access to relevant documentation. The portal Help icon also points to helpful links for documentation about MaaS360 product and usage.

Android

Support for location based policies for offline devices and more >>

MaaS360 extends the location based policy support to offline devices. When the device is online, MaaS360 agent automatically downloads all the policies and locations that are assigned to the device. When the device checks into the defined location, an appropriate policy is applied even though the device is offline. Also, MaaS360 adds a new policy to configure Wi-Fi proxy on Samsung devices.

Support for restricting logon hours to company working hours >>

MaaS360 adds logon hours support to make it easier for administrators to configure the days and hours when users can access the email server. When the logon hours expire, MaaS360 automatically stops syncing from the email servers.

Enhancements to Trusteer Threat Management >>

MaaS360 enhances Trusteer Threat Management with new features to detect Wi-Fi security level, root hider software installed on devices, and allowlisted app details.

Android Enterprise

Support for new Android Enterprise policies >>

MaaS360 adds new policies for Bluetooth sharing, factory reset protection, and allowed idle time for stronger authentication.

Support for passing multiple app configurations through App Catalog >>

MaaS360 adds support for passing multiple app configurations using bundles within a bundle array. With this feature, administrators can define a maximum of 5 app restrictions for an app in the form of key and value pairs. Previously, MaaS360 allowed administrators to configure one app restriction for an app.

Analytics

Insights Advisor for Unified Endpoint Management >>

In this release, MaaS360 extends Insights Advisor functionality to UEM customers and provide insights about macOS and Windows devices that are missing critical OS patches. These Insights allow administrators to access all devices missing certain critical patches recommended by the Insights Advisor with a click of a button and initiate patch deployment to relevant devices in real-time. 

Cloud Extender 2.93

Upgrade core Cloud Extender agent directly from Cloud Extender Configuration Tool >>

Cloud Extender version 2.93 release introduces enhancements to the Cloud Extender Configuration Tool where administrators can upgrade the Cloud Extender core to the latest version with a click of a button. The Cloud Extender Configuration Tool automatically checks for newer versions of the code and notifies administrators about the new core availability for download and install. The Cloud Extender core installer typically packages basic communication libraries and it is recommended to upgrade this core to the latest version to receive important security and functionality updates.

Use HTTPS URL for internet connectivity check >>

Cloud Extender version 2.93 release now supports the Internet Connectivity check on a HTTPS URL. This was previously an HTTP URL and was only used to check internet access and no other communication against this URL. Organizations might have to allow outbound HTTPS access against this new URL if it is being blocked for any reason.

Support for multiple S/MIME certificates from Active Directory >>

Cloud Extender version 2.93 release supports retrieval of all S/MIME encryption certificates from Active Directory, regardless of whether a matching certificate has expired. This allows end users to be able to read older messages encrypted with an older / expired S/MIME encryption certificate in MaaS360 Secure Mail. 

Easy lookup of OU's from Corporate Directory during Cloud Extender Configuration >>

Enhancements have been made to the Cloud Extender configuration tool to simplify configuration of User Authentication and User Visibility modules. The tool now allows administrators to connect to Active Directory / LDAP and lookup Organization Units (OU's) and Distinguished Names (DN's) required for configuring them in Cloud Extender. User Search base, User and Group filters can now be selected from a pop-up screen instead of having to type them out during configuration.