What's in the Release Notes?

Workspace ONE Tunnel for Windows Release Notes describe the new features and enhancements in each release. This page contains a summary of the new capabilities, issues that have been resolved, and known issues that have been reported in each release over the last 12 months.

Workspace ONE Tunnel 23.09

New Features

  • In this release, we have made two feature improvements, an enhancement, and added a technical preview.

    • Feature: Improvements for syncing Device Traffic Rules.

      • DTR and Tunnel configuration updates will now be decoupled from certificate issuance management.

        • Tunnel certificates will not be regenerated when updating DTRs and Tunnel configuration.

        • There is no requirement to save or publish Tunnel profile.

      • Periodic check-in interval with Workspace ONE APIs.

        • Every 4 hours and on App launch.

        • Ability for user to initiate on-demand sync from client.

      Feature Requirements:

      • Enable FF: RemoveWindowsTunnelProfileDependencyFeatureFlag at tenant level or Global OG.

      • Add the following key under the Custom Configuration section in the Windows Tunnel VPN profile.

        • Key: EnableRapidDtr

        • Value: True

        • Post UEM upgrade to 2310, a one-time republish of the Windows Tunnel profile is required to enable this feature.

        • All subsequent Tunnel configuration changes will not require a profile save or publish.

      Minimum Requirements for this feature:

      • Workspace ONE UEM 2310 or later

      • Workspace ONE HUB 2310 or later

    • Feature: Tunnel client authentication certificates are stored in the user certificate store.

      • Administrators will have the option to store the Tunnel client certificate in the user certificate store on the device.

        • This will limit Tunnel access only to enrolled users and restrict other logged-in users to the same machine from connecting via Tunnel.

        • As before, the Tunnel server certificate will continue to be stored in the device certificate store by default.

        • You may continue to store both certificates in the device store through the current device profile.

    • Use the ‘User Profile’ option instead of the ‘Device Profile’ option to create a Windows Tunnel User profile.

      • For pre-logon workflow, it is required that the client certificate be available in the device certificate store and a ‘Device Profile’ is required.

    Feature Requirement:

    • Enable FF: TunnelCertificateInUserStoreForWindowsFeatureFlag at tenant level or Global OG.

    Minimum Requirements for this feature:

    • Workspace ONE UEM 2310 or later

    • Workspace ONE HUB 2310 or later

    NOTE: UEM 2310 is currently available on UAT environments and will be rolled out to other environments soon. Also, Workspace ONE Hub 2310 is currently in beta. Further information on Hub is available on the Early Access portal.

  • Simplified log collection: Logs can now be collected and saved to a user-defined location by clicking on the new ‘Collect Logs’ button under the ‘About’ section of the client.

  • Technical Preview:

    • Introducing performance improvements which enables optimized implementation for client <> server communication.

    • This optimization provides improvements to network throughput and smaller total memory footprint.

    • This improvement will be enabled by default in a future Tunnel release.

    Technical Requirement:

    • Add the following key under the Custom Configuration section in the Windows Tunnel VPN profile.

      • Key: UseNativeDataPlane

      • Value: True

Minimum Requirements

  • The following are the minimum requirements for this release.

    • Windows 10+

    • Workspace ONE UEM 2206+

Resolved Issues

  • PPAT-15039 Windows Tunnel MFA does not work with Azure Conditional Access

Known Issues

  • We haven’t identified any notable known issues in this release. If you’re facing any problems, feel free to reach out to our support team.

Workspace ONE Tunnel 23.07

New Features

  • In this release, we have made updates containing general quality and performance improvements with no new features.

Minimum Requirements

  • The following are the minimum requirements for this release.

    • Windows 10+

    • Workspace ONE UEM 2203+

Resolved Issues

  • PPAT-14647: Tunnel setup will not timeout in Registered mode.

  • PPAT-14428: Files can now be copied via RDP over the UDP channel.

  • PPAT-14047: Improvements were made to the memory footprint during high throughput scenarios.

  • PPAT-12265: Improvements were made to DNS parser logic to handle certain DoS attack scenarios.

Known Issues

  • We haven’t identified any notable known issues in this release. If you’re facing any problems, feel free to reach out to our support team.

Workspace ONE Tunnel 23.04

New Features

  • In this release, we have added support for IPv6 networks, this is in addition to existing IPv4 support.

Minimum Requirements

  • The following are the minimum requirements for this release.

    • Windows 10+

    • Workspace ONE UEM 2203+

Resolved Issues

  • PPAT-13967: Improvements were made to the Tunnel UI System Tray.

  • PPAT-13838: The UDP connection timeout value will not reset on registry update.

  • PPAT-13364: Tunnel log will now display the enrollment mode information.

  • PPAT-12928: The UDP connection timeout for RDP flow has been increased to 120 seconds.

Known Issues

  • We haven’t identified any notable known issues in this release. If you’re facing any problems, feel free to reach out to our support team.

Workspace ONE Tunnel 23.02

New Features

  • In this release, we’ve made the following performance improvements and new features:

    • We have consolidated the MDM and Standalone enrollment workflows in a unified client.

    • This release replaces the existing two clients:

      • Client version 2.2 for the Managed workflow

      • Client version 3.3 for the Standalone workflow

    • All existing workflows for both clients are supported in the new 23.02 client.

    • Introducing Session Authentication with SAML for Windows Tunnel client in Managed mode.

      • This client also supports the Session Authentication feature in Standalone mode.

      • Minimum requirements for this feature for Managed mode.

        • Windows 10+

        • Workspace ONE UEM 2302 or later

        • UAG 2303 or later

    • Introducing support for environment variables in application executable path for DTR.

      • This will enable application executables that are in variable folders to be used with Tunnel. Example: "%user%", "%ProgramData%", "%localappdata%\programs\[application name]" etc.

Minimum Requirements

  • The following are the minimum requirements for this release.

    • Windows 10 or later

    • Workspace ONE UEM 2109 or later

Resolved Issues

  • PPAT-13721: Fixed the issue with DNS short name resolution for Windows 10.

  • PPAT-13019: Optimized local port usage for improved DNS management.

  • PPAT-11472 and PPAT-12153: Fixed intermittent DNS resolution issues for internal domains when Enhanced Domain Resolution is enabled.

Known Issues

  • We haven’t identified any notable known issues in this release. If you’re facing any problems, feel free to reach out to our support team.

Workspace ONE Tunnel 2.2

New Features

  • In this release, we’ve made a few updates containing general quality and performance improvements with no new features. Please use this client for all MDM workflows.

Minimum Requirements

  • The following are the minimum requirements for this release.

    • Windows 10 or later

    • Workspace ONE UEM 2109 or later

Resolved Issues

  • PPAT-13019: Optimized local port usage for improved DNS management.

  • PPAT-11472 and PPAT-12153: Fixed intermittent DNS resolution issues for internal domains when Enhanced Domain Resolution is enabled.

Known Issues

  • We haven’t identified any notable known issues in this release. If you’re facing any problems, feel free to reach out to our support team.

Workspace ONE Tunnel 2.1.8

New Features

  • In this release, we’ve made a few updates containing general quality and performance improvements with no new features.

    Note:

    • This Windows 2.1.8 client supports all existing Tunnel features and installation on a Workspace ONE managed device. This client does not support Standalone enrollment.

    • For the Standalone enrollment feature, please use the Windows Tunnel client 3.2 application delivered through the Workspace ONE Resources Portal.

Minimum Requirements

  • The following are the minimum requirements for this release.

    • Workspace ONE UEM 2105 or later

Resolved Issues

  • PPAT-11472 and PPAT-12227 Fixed intermittent DNS resolution issues for internal domains when Enhanced Domain Resolution is enabled.

Known Issues

  • We haven’t identified any notable known issues in this release. If you’re facing any problems, feel free to reach out to our support team.

Workspace ONE Tunnel 2.1.7

New Features

  • In this release, we’ve made a few updates containing general quality and performance improvements with no new features.

    Note:

    • This Windows 2.1.7 client supports all existing Tunnel features and installation on a Workspace ONE managed device. This client does not support Standalone enrollment.

    • For the Standalone enrollment feature, please use the Windows Tunnel client 3.0 application delivered through the Workspace ONE Resources Portal.

Minimum Requirements

  • The following are the minimum requirements for this release.

    • Workspace ONE UEM 2005 or later

    • Workspace ONE UEM 2102 or later for Full Device VPN & Enhanced Domain resolution feature

Resolved Issues

  • PPAT-11689 Improved UDP port management to resolve niche server port exhaustion issue.

  • PPAT-10732 Fixed automatic Tunnel connection issue on device unlock from sleep mode.

Known Issues

  • We haven’t identified any notable known issues in this release. If you’re facing any problems, feel free to reach out to our support team.

Workspace ONE Tunnel 2.1.6

New Features

  • In this release, we’ve made a few updates containing general quality and performance improvements with no new features.

Minimum Requirements

  • The following are the minimum requirements for this release.

    • Workspace ONE UEM 2005 or later

    • Workspace ONE UEM 2102 or later for Full Device VPN & Enhanced Domain resolution feature

Resolved Issues

  • PPAT-10277 Improved user authentication workflow on 'Windows Hello for Business' enabled devices.

  • PPAT-10054 Introduced ability to effectively handle internal DNS failure.

  • PPAT-9950 Improved handling of DNS resolution delay when Tunnel client is in Full Device mode.

  • PPAT-9930 Fixed DTR Bypass action implementation when Tunnel client is configured with Enhanced Domain Resolution.

Known Issues

  • We haven’t identified any notable known issues in this release. If you’re facing any problems, feel free to reach out to our support team.

Workspace ONE Tunnel 2.1.5

New Features

  • In this release, we’ve made a few updates containing general quality and performance improvements with no new features.

Minimum Requirements

  • The following are the minimum requirements for this release.

    • Workspace ONE UEM 2005 or later

    • Workspace ONE UEM 2102 or later for Full Device VPN & Enhanced Domain resolution feature

Resolved Issues

  • PPAT-10047 Improved network polling framework to resolve niche CPU performance issue.

  • PPAT-10015 Fixed Windows registry key issue that caused some applications to not run on system boot.

Known Issues

  • We haven’t identified any notable known issues in this release. If you’re facing any problems, feel free to reach out to our support team.

Workspace ONE Tunnel 2.1.4

New Features

  • In this release, we’ve made a few updates containing general quality and performance improvements with no new features.

Minimum Requirements

  • The following are the minimum requirements for this release.

    • Workspace ONE UEM 2005 or later

    • Workspace ONE UEM 2102 or later for Full Device VPN & Enhanced Domain resolution feature

Resolved Issues

  • PPAT-9955 Added functionality to handle incomplete DNS responses when the response size exceeds the UDP payload limit.

  • PPAT-9871 Resolved niche performance issue with Tunnel consuming high CPU in idle state.

Known Issues

  • We haven’t identified any notable known issues in this release. If you’re facing any problems, feel free to reach out to our support team.

Support Contact Information

Submit a ticket via the My Workspace ONE portal for support.

Download Instructions

You can download the new client from My Workspace ONE.

check-circle-line exclamation-circle-line close-line
Scroll to top icon