Released September 15, 2026
Updates
Admin UI
AppGate ZTNA now generates an admin message when a DNS configuration conflict occurs. This conflict happens when two Sites share the same DNS Forwarder IPv4 address with client DNS auto-configuration enabled.
Fixed an issue where the Sites page was missing pagination controls, making Sites beyond the first page unreachable on large Collectives.
Scripts
Fixed an issue where hashed, verified DNS names prevented administrators from creating device claim scripts.
Fixed an issue in the user claim script editor that caused the interface to display errors when typing quickly or pasting content, forcing the user to enter fullscreen mode to successfully paste the content.
Security
Fixed an issue that let administrators with only view privileges delete unused tags. Deleting a tag now requires the appropriate tag privilege, whether or not the tag is in use.
Stability
Fixed an issue where the Connection Broker failed to detect a CRL refresh.
Trusted certificate changes now automatically restart the appliance services that cache the operating system trust store in memory. Previously, these services failed with "certificate signed by unknown authority" errors against third-party hosts, such as vSphere, Illumio, ColorTokens and proxied AWS resolvers, until manually restarted.
Addressed an issue in which Collectives under a heavy load struggled to scale beyond seven Controllers.
Fixed an issue in which links in the Collective Replication modal were invalid. Previously, links were generated for all items with warnings, including those that failed to create on the target system. Links are now active only when an item exists.
Updated the Service User Management admin role template to fix an issue where automated processes were unable to create client profiles.
Fixed an issue where appliance configurations were not updated when the SPA Token Expiration was updated in Global Settings.
Fixed an issue where the banner shown on pages accessed through the AppGate Portal could conflict with the destination site’s own scripts, causing some pages to render incorrectly. This issue was specific only to the Portal; the same pages rendered correctly when accessed through the ZTNA client.
Fixed an issue where Certificate Revocation List (CRL) parsing could take a long time when a CRL contained a large number of entries.