o stay informed about important updates to our product, subscribe to our monthly Release Notes. You may also review past release notes here and current limitations (and workarounds) of SonicWall Cloud Secure Edge (formerly Banyan Security) here.
fix CSE app couldn’t identify devices via Serial Number.
Download:
New Enable Auto Login toggle on the app; when enabled, this feature automatically re-authenticates user sessions on app start up; Available on macOS and Windows devices.
fix After re-authenticating in the CSE app, infra services are sometimes binding to random ports even when the specified listening port is available.
New Enable Service Tunnel over TCP toggle for end users who require internet access temporarily on restrictive networks; this toggle is for Private Edge traffic only.
fix Admins were experiencing delayed updates when toggling ITP on or off on macOS versions of the desktop app; ITP updates are now reflected within 15 minutes.
new Fedora 40 support
Download:
fix In some cases, end users running desktop app versions 3.21+ were unable to log in while connected to non-CSE VPNs.
Download:
Support for macOS Sequoia.
Download:
hotfix Internet connectivity issues encountered when devices were waking from sleep.
Download:
fix End users were being prompted twice for credentials during login.
Download:
fix Serial number casing changed, which made the app unable to recognize registered devices.
fix The app was facing technical issues calculating Trust Score directly after a device awakened from sleep.
Download:
hotfix Search Domains: Domain names and FQDNs are now case insensitive.
Download:
RDP file properties support.
Previous versions of the app (3.8.2 and older) were able to handle registrations for machines that did not have a serial number by creating a serial number. This functionality was restored.
Support for Oracle Linux in OS Version Trust Factor.
Download:
new Device-side DNS resolution now defaults to resolving over TLS, which is encrypted.
fix The admin-server did not have access to the http proxy on the user context for the desktop app. The app now supports HTTP proxy setting consistently across app components (including the admin server).
Download:
fix Desktop app no longer enforces automatic retry for sending features and TrustScoring.
Download:
fix Refreshed TrustScoring on reawakening devices
Download:
fix End users were receiving a ‘Could not fetch devices’ error when switching networks on the desktop app.
new Session expiration timer in app.
Download:
fix Enabling ITP was misrouting DNS in Ubuntu.
Download:
fix The Banyan client will use the host DNS server for any DNS requests until captive portal authentication is complete and internet access is available.
Download:
fix Launching the desktop app (from the Windows start menu) when the app was already running was causing the tunnel to disconnect.
Download:
new OS version and Bios serial number update on app start up.
Download:
wmic commands.fix When users connected to Service Tunnel on Windows devices, the IP address without mask defaulted to /8.
Performance improvements for cases in which there are large numbers of public domains in a Service Tunnel.
Download:
new Internet Threat Protection (ITP) policies and functionality.
fix Registered 10ZiG devices were showing up as a single device in the Command Center
new Property List Check Trust Factor
Download:
the WireGuard Service now only listens on Port 53 (default port) when Service Tunnel for public domains is enabled.
Download:
new Banyan App Version and File Check Trust Factors.
fix Firewall Trust Level Factor now supports Group Policy settings for Windows devices.
fix WireGuard interface now sets the correct MTU size of 1380, allowing Service Tunnel traffic to pass through faster.
new macOS ARM build (in Early Preview).
The support link has been removed from the desktop app.
Enhanced support for Zero-Touch Installation
Download:
fix Device Trust Verification issues on Linux devices have been resolved.
Download:
fix Service Tunnel issues on Windows devices have been resolved.
Download:
new Service Tunnel interface with an Autorun option, so that Service Tunnel connects when an end user logs into the desktop app.
Full support for Fedora (34 and later) in Banyan’s desktop app.
Download:
new Expiration notification when a user’s login token is 2 hours away from expiring. The expiration notification time is configurable.
Download:
new Keychain explainer prompt to notify macOS users that Banyan needs access to their keychains.
new The Banyan Service Tunnel feature is now available in Early Preview.
Download:
Added filters for service types within the service catalog.
fix CMD+W shortcut was not usable with other applications when Banyan App running.
Download:
Performance and stability improvements
(Bug fix) Devices enrolled via Zero Touch installation were unable to favorite services or set services to autorun.
fix Certificate selection pop-up was not suppressed on Windows.
(Bug fix) The one-time passcode exclusion feature was not working for policies configured for individual roles and only worked for policies configured with the ANY roles option.
(Bug fix) Fixes related to wildcard TCP services.
Download:
When tunneling to a collection of TCP services with the Domains to Proxy feature, the banyanproxy did not properly start.
Download:
Service descriptions now support clickable links.
Download:
(Bug Fix) Token size limit reached due to having a large group claims.
(Bug fix) Kubernetes services configured without a specific port did not connect because the Desktop App used a random port (as expected) while banyanproxy expected port 8080.
(Bug fix) The RDP Gateway mode did not work in Banyan DesktopApp for Windows.
banyanproxy mode options (HTTP_CONNECT and HTTP_CONNECT_BASTION).--unregister and --remove-staging) for command line when distributing the Banyan Desktop App using a device manager.HTTP_CONNECT_DAISY_CHAIN mode, can be configured to only proxy certain IncludeDomains using MTLS. All other domains will be passed through transparently.(Bug fix) banyanproxy did not initiate auth flows for some TCP services when the certificate expired.
(Bug fix) Fixed issue involving Zero Touch installation and excessive token length.
Download:
(updated Jan-14-2021)
banyanproxy did not inform the end user that the configured local port was already in use.(Bug fix) mdm-config.json was deleted when Desktop App was upgraded.
(Bug fix) If a user is a member of many groups, the resulting login token became excessively long which caused logins to fail.
Download:
Desktop App now uses an include command to incorporate SSH configs written to ~/.ssh/banyan.config.
(Bug fix) Desktop App for Linux was not properly collecting and reporting preferred apps running on the device.
Improved implementation and management of connectivity to SSH services.
Improved feature collection.
HTTP_CONNECT_DAISY_CHAIN mode for banyanproxy to forward the client’s HTTP CONNECT request to the given proxy host and port. (This feature requires Banyan Netagent v1.27.0+)Added configuration to not write to SSH Config.
For devices managed by Workspace ONE UEM, device TrustScore calculation accounts for Workspace ONE UEM factors.
Device Manager configurations are no longer contained in config.json; instead these should be in a mdm-config.json file in the Desktop App installation directory. If you configured Device Manager settings with Banyan Desktop App v.1.5.0, you must move the existing configurations from config.json to mdm-config.json.
banyanproxy now has an HTTP Connect Mode for TCP Services(Bug fix) Devices where SerialNumber is “0” (such as VirtualBox VMs) are now treated the same as devices that do not have a serial number.
certutil installed.(Bug fix) Implemented fixes to Root & Intermediate Cert install/uninstall.
Added support for organizations with Intermediate CA certificates (existing capability supported Root CA certificates).