What's in the Release Notes?

Workspace ONE Tunnel for Android Release Notes describe the new features and enhancements in each release. This page contains a summary of the new capabilities, issues that have been resolved, and known issues that have been reported in each release over the last 12 months.

Workspace ONE Tunnel 23.09

New Features

  • In this release, we’ve made a few updates containing general quality and performance improvements with the following new features:

    • Phishing and Content Protection is enforced for all applications in the Work container independent of the Full-Device or Per-App Tunnel VPN mode.

    • Technical Preview: Block Private DNS

      • We have noticed that with the recent Android OS updates, the Private DNS setting on the devices is set to ‘Automatic’ by default. This setting encrypts all DNS requests from the device, which may impact DNS requests from applications and destinations that are managed by the Tunnel.

      • This release introduces a Managed Configuration (KVP) to manage Private DNS in the the Work container.

        • BlockPrivateDNS | Type: Boolean | Default Value: False

        • Set this value to True to block Private DNS over port 853. The Android OS should default back to regular DNS over port 53.

      • Note: Regardless of the Private DNS settings, DNS destined for your internal DNS is always encrypted by the Tunnel.

Minimum Requirements

  • The following are the minimum requirements for this release.

    • Android 8.0 and later

    • Workspace ONE UEM Console 2204 or later

Resolved Issues

  • PPAT-15469 Tunnel does not reconnect after a network switch event.

Known Issues

  • We haven’t identified any notable known issues in this release. If you’re facing any problems, feel free to reach out to our support team.

Workspace ONE Tunnel 23.06

New Features

  • In this release, we’ve made a few updates containing general quality and performance improvements with the following new features:

    • Improve Tunnel setup time during device checkout

    • Added support for sending hostname in the PROXY action for Device Traffic Rules

Minimum Requirements

  • The following are the minimum requirements for this release.

    • Android 8.0 and later

    • Workspace ONE UEM Console 2203 or later

Resolved Issues

  • We made a few updates to the general quality with no issues to resolve at this time.

Known Issues

  • We haven’t identified any notable known issues in this release. If you’re facing any problems, feel free to reach out to our support team.

Workspace ONE Tunnel 23.01

New Features

  • In this release, we’ve made a few updates containing general quality and performance improvements with the following new features.

    • Workspace ONE Mobile Threat Defense - Integrated Phishing & Content Protection

      This Tunnel release supports a new feature, Phishing and Content Protection, which will be made available as part of the upcoming Android HUB release.

    • Session MFA - Technical Preview

      We are happy to announce an exciting update to our Workspace ONE Tunnel solution. Workspace ONE Tunnel on Android now supports Session MFA with SAML in Managed Mode.

      To facilitate user-interactive authentication for Tunnel, in addition to the existing certificate-based authentication, VMware is pleased to extend our Session Authentication feature to the Android Tunnel client in Managed mode. This leverages your enterprise Identity Provider where you may also configure additional entitlement restrictions and Conditional Access policies.

      Session MFA is available for the Windows client in both Managed and Unmanaged modes and for the macOS client in Unmanaged mode. This feature is also in Technical Preview for the iOS client in Managed mode. For more information, see the Tunnel guide.

      Minimum Requirements for this Technical Preview:

      • Workspace ONE UEM 2302 or later

      • Unified Access Gateway 2303 or later

Minimum Requirements

  • The following are the minimum requirements for this release.

    • Android 8.0 and later

    • Workspace ONE UEM Console 2109 or later

Resolved Issues

  • PPAT-13666 Fixed printer plugin issue on Android 12 and higher devices

Known Issues

  • We haven’t identified any notable known issues in this release. If you’re facing any problems, feel free to reach out to our support team.

Workspace ONE Tunnel 22.11

New Features

  • In this release, we’ve made a few updates containing general quality and performance improvements with no new features.

Minimum Requirements

  • The following are the minimum requirements for this release.

    • Android 8.0 and later

    • Workspace ONE UEM Console 2105 or later

Resolved Issues

  • PPAT-12827 Fixed intermittent issues with Trusted Network Detection on the network switch.

  • PPAT-12827 Fixed intermittent DNS resolution issue when Tunnel is running in Full Device mode.

Known Issues

  • We haven’t identified any notable known issues in this release. If you’re facing any problems, feel free to reach out to our support team.

Workspace ONE Tunnel 22.09

New Features

  • Introducing Standalone Enrollment

    To facilitate secure remote access on unmanaged devices, VMware is pleased to introduce Standalone enrollment for the Android Tunnel client. Standalone enrollment supports Full Device Tunnel mode with Per-app mode planned for future release. There is no requirement for MDM enrollment or Workspace ONE HUB on the device. Basic and SAML authentication is supported for user enrollment. This client version will support both MDM and Standalone workflows.

    Technical Requirements for Standalone Enrollment

    • Workspace ONE UEM Console 2209 or later

  • Introducing Improved mechanism for Device Traffic Rule Sync - General Availability

    Minimum Requirements for this feature:

    • Workspace ONE UEM 2209 or later

    Once UEM has been upgraded to version 2209, a new Tunnel VPN profile version needs to be added and published. Once the device receives the updated profile, all subsequent DTR updates will be processed independent of the VPN profile.

    Please refer to the Application Configurations section in the VMware Tunnel guide for more details.

Minimum Requirements

  • The following are the minimum requirements for this release.

    • Android 8.0 and later

    • Workspace ONE UEM Console 2105 or later

Resolved Issues

  • PPAT-11808: Resolved intermittent connection delays on Tunnel profile installation.

  • PPAT-11093: Removed Android permission dependency that caused intermittent Tunnel client installation failures.

Known Issues

  • We haven’t identified any notable known issues in this release. If you’re facing any problems, feel free to reach out to our support team.

Workspace ONE Tunnel 22.03.1

New Features

  • In this release, we’ve made a few updates containing general quality and performance improvements with no new features.

Minimum Requirements

  • The following are the minimum requirements for this release.

    • Android 8.0 and later

    • Workspace ONE UEM Console 2004 or later

Resolved Issues

  • We are always working to improve Workspace ONE Tunnel with every release. There are no major bug fixes to report.

Known Issues

  • We haven’t identified any notable known issues in this release. If you’re facing any problems, feel free to reach out to our support team.

Workspace ONE Tunnel 22.03

New Features

  • Technical Preview Feature

    • Improved mechanism for Device Traffic Rule Sync

      • Decoupling certificate regeneration from DTR updates.

        • Certificates will not be regenerated when updating DTRs

      • DTR updates are now processed independent of the VPN profile

        • No requirement to save or publish Tunnel profile

      • Periodic check-in interval with Workspace ONE APIs

        • Every 4 hours and on App launch

        • Ability to manage check-in interval with API through KVP

    Minimum Requirements for this Feature:

    • Workspace ONE UEM 2203

    • Requires enabling FeatureFlag: DeviceEndpointToGetDtrPayloadFeatureFlag

    Please refer to the Application Configurations section in the VMware Tunnel guide for more details

  • Introducing Container-wide Tunnel for Android Enterprise

    • Introducing application exemption list while in Full Device mode

      • Please refer to the Application Configurations section in the VMware Tunnel guide for details.

Minimum Requirements

  • The following are the minimum requirements for this release.

    • Android 8.0 and later

    • Workspace ONE UEM Console 2004 or later

Resolved Issues

  • We are always working to improve Workspace ONE Tunnel with every release. There are no major bug fixes to report.

Known Issues

  • We haven’t identified any notable known issues in this release. If you’re facing any problems, feel free to reach out to our support team.

Workspace ONE Tunnel 21.12

New Features

  • Technical Preview: Introducing Container-wide Tunnel for Android Enterprise

    • Tunnel on Android now supports tunneling all device traffic within the AE container regardless of the source application in both Work Managed and Work Profile modes. This can be used by customers still transitioning to Zero Trust access architectures enabled with per-app tunneling.

    • Enabling container-wide tunneling on Android devices requires UEM console version 2111. Administrators can create new device traffic rules and select the “Full Device” mode. The device traffic rules policy can be selected within a Tunnel profile for Android.

Minimum Requirements

  • The following are the minimum requirements for this release.

    • Android 8.0 and later

    • Workspace ONE UEM Console 2004 or later

Resolved Issues

  • RNA-13203 Fixed DNS routing logic in split-tunnel mode.

  • RNA-13202 Fixed SSL certificate validation workflow for outbound proxy.

Known Issues

  • We haven’t identified any notable known issues in this release. If you’re facing any problems, feel free to reach out to our support team.

Workspace ONE Tunnel 21.09

New Features

  • Android 12 readiness.

Minimum Requirements

  • The following are the minimum requirements for this release.

    • Android 8.0 and later

    • Workspace ONE UEM Console 2004 or later

Resolved Issues

  • RNA-12771 Improved split DNS handling when using an outbound proxy with server traffic rules.

  • RNA-10516 Improved stability during network change events on Android 11 devices.

Known Issues

  • We haven’t identified any notable known issues in this release. If you’re facing any problems, feel free to reach out to our support team.

Workspace ONE Tunnel 21.07

New Features

  • Added the ability to override device traffic rules for split DNS. Internal DNS resolution can now be specified through the use_internal_dns_for_domains key-value pair. The domains specified here are resolved internally and all other domains are resolved externally.

Minimum Requirements

  • The following are the minimum requirements for this release.

    • Android 8.0 and later

    • Workspace ONE UEM Console 2004 or later

Resolved Issues

  • We are always working to improve Workspace ONE Tunnel with every release. There are no major bug fixes to report.

Known Issues

  • We haven’t identified any notable known issues in this release. If you’re facing any problems, feel free to reach out to our support team.

Support Contact Informaion

Submit a ticket via the My Workspace ONE portal for support.

Download Instructions

  • If the prior version is installed: Direct end users to update the app when prompted. The application seamlessly updates over the existing application version without disrupting device enterprise functionality.

  • If the prior version is NOT installed: Direct end users to download it from the PlayStore.

check-circle-line exclamation-circle-line close-line
Scroll to top icon