Previous release updates

Android platform expansion

This release extends the Forcepoint Mobile Endpoint Agent to Android devices, in addition to iOS and iPadOS.

The following are the key updates included in this release:

Mobile Endpoint Agent for Android

  • Extends secure mobile web traffic inspection through the Forcepoint Data Security Cloud to Android devices running Android 11 or later.
  • Applies the same security policies used for desktops, laptops, and iOS and iPadOS devices to Android devices.

Microsoft Intune based deployment for Android

  • Supports deployment of the application from managed Google Play using Microsoft Intune as the Mobile Device Management (MDM) solution.
  • Enables provisioning of devices with an app configuration policy and deployment of the Forcepoint certificate authority (CA) certificate.

Certificate-free authentication for iOS and iPadOS

  • Introduces a certificate-free authentication method for iOS and iPadOS devices that identifies users without a client certificate.
  • Delivers the user's User Principal Name (UPN) from Microsoft Intune through an app configuration policy, without requiring Simple Certificate Enrollment Protocol (SCEP) infrastructure.
  • Simplifies deployment for organizations that do not have an existing Public Key Infrastructure (PKI).

Application bypass and SSL/TLS protection

  • Forcepoint managed agent bypass list allows administrators to exclude specific applications from VPN inspection.
  • Certificate-pinned applications and SSL/TLS bypass domains can be configured to accommodate applications with strict certificate validation requirements.
  • Provides granular control over which applications and domains are inspected versus bypassed.

This is the initial release of the Forcepoint Mobile Endpoint Agent for iOS and iPadOS. This release delivers foundational capabilities that enable administrators to securely manage and protect mobile devices using Forcepoint cloud‑based security controls.

The following are the key updates included in this release:

Mobile Endpoint Agent for iOS and iPadOS

  • Introduces secure mobile web traffic inspection through the Forcepoint Data Security Cloud.
  • Extends the same security policies used for desktops and laptops to mobile devices.

Microsoft Intune based deployment

  • Supports deployment and management using Microsoft Intune as the Mobile Device Management (MDM) solution.
  • Enables automated installation of the application, virtual private network (VPN) profile, and required certificates.

Certificate‑based authentication

  • Supports certificate issuance using SCEPman Enterprise Edition integrated with Intune.
  • Enables secure device identity validation and encrypted communication without manual user setup.

Centralized policy enforcement

  • Mobile traffic is governed by existing Secure Gateway policies, including URL filtering, SSL inspection, and data protection rules.
  • Policies are applied automatically based on user group assignments.

Endpoint profiles and configuration

  • Introduces configurable profiles to manage mobile endpoint behavior and security settings.
  • Allows administrators to define settings such as VPN behavior, bypass rules, and inspection controls.

Agent uninstallation

  • Supports secure removal of the Mobile Endpoint Agent from managed devices.
  • Provides both manual uninstallation (device-level) and remote uninstallation through Microsoft Intune.
  • Ensures complete cleanup of application data and VPN profiles.

Logging and visibility

  • Provides detailed visibility into mobile web traffic through transaction viewer, reports, and web logs.
  • Tracks Secure Gateway administrative actions and policy configuration changes through admin logs.