What’s new in Secure Web
Note:
Secure Hub, Secure Mail, Secure Web, and Citrix Workspace app don’t support Android 6.x and iOS 11.x as of June 2020.
What’s new in the current version
Secure Web 23.5.0
Secure Web for Android
This release addresses a few issues that help to improve overall performance and stability.
What’s new in earlier versions
Secure Web 23.3.5
Secure Web for Android
This release addresses a few issues that help to improve overall performance and stability.
Secure Web 23.2.0
Secure Web for Android and iOS
This release addresses a few issues that help to improve overall performance and stability.
Secure Web 22.9.0
Secure Web for Android
Secure Web now supports Android 13.
Secure Web 22.9.1
Secure Web for iOS
This release includes bug fixes.
Secure Web 22.9.0
Secure Web for iOS
Secure Web now supports iOS 16.
Secure Web 22.6.0
Secure Web for Android
This release includes bug fixes.
Secure Web 22.3.0
Secure Web for iOS
Google Analytics. Citrix Secure Mail uses Google Analytics for collecting app statistics and usage information analytics data to improve product quality. Citrix does not collect or store any other personal user information. For more information about disabling Google Analytics for Secure Mail, seeDisable Google Analytics
Secure Web for Android
Google Analytics. Citrix Secure Mail uses Google Analytics for collecting app statistics and usage information analytics data to improve product quality. Citrix does not collect or store any other personal user information. For more information about disabling Google Analytics for Secure Mail, seeDisable Google Analytics
Secure Web 22.2.0
Secure Web for iOS
This release includes bug fixes.
Secure Web for Android
This release includes bug fixes.
Secure Web 21.12.0
Secure Web for iOS
Support for FIDO2 based authentication.在这个版本中,Citrix安全Web支持身份验证entication on websites using FIDO2. You can authenticate to websites that support FIDO2 using biometric, touch, or a passcode. WKWebView engine supports FIDO2 based authentication in Secure Web.
Secure Web for Android
Support for FIDO2 based authentication.在这个版本中,Citrix安全Web支持身份验证entication on websites using FIDO2. You can authenticate to websites that support FIDO2 using biometric, touch, or a passcode.
Secure Web 21.11.0
Secure Web for Android
This release includes bug fixes.
Secure Web 21.10.5
Secure Web for iOS
This release includes bug fixes.
Secure Web for Android
This release includes bug fixes.
Note:
Support for Android 7 ends for Secure Web as of October 2021.
Secure Web 21.10.0
Secure Web for Android
Support for Android 12. From this release onward, Secure Web is supported on devices running Android 12.
安全Web符合谷歌播放当前的目标APIrequirements API level 30 (Android 11).
Secure Web 21.9.1
Secure Web for Android
This release includes bug fixes.
Secure Web 21.9.0
Secure Web for iOS
This release includes bug fixes.
Secure Web for Android
This release includes bug fixes.
Secure Web 21.8.5
Secure Web for Android
Support for Android 12 Beta 4 on already enrolled devices.Secure Web now supports Android 12 Beta 4. If you are considering upgrading to Android 12 Beta 4, ensure that you update Secure Hub to version 21.7.1 first. Secure Hub 21.7.1 is the minimum version required to upgrade to Android 12 Beta 4. This release ensures a seamless upgrade from Android 11 to Android 12 Beta 4 for already enrolled users.
Note:
Citrix is committed to providing Day 1 support for Android 12. Subsequent versions of Secure Mail receive further updates to fully support Android 12.
Secure Web 21.8.0
Note:
Secure Web 21.8.0 is supported only on iOS 12.1 and later. Updates are not available for Secure Web running on devices with iOS versions 12 or earlier.
Secure Web for iOS
Dual mode for Secure Web
The mobile application management (MAM) SDK is available to replace areas of MDX functionality that aren’t covered by the iOS platform. The MDX wrapping technology is scheduled to reach end of life (EOL) in March 2022.
Citrix Secure Web is released with both the MDX and MAM SDK frameworks to prepare for the MDX EOL, scheduled for March 2022. To continue managing your enterprise applications, you must incorporate the MAM SDK. Citrix recommends that you switch toMAM SDK. The dual mode functionality is intended to provide a way to transition the Secure Web app to the new MAM SDK model.
The dual mode functionality allows you to either continue managing apps using MDX (nowLegacy MDX) or switch to the newMAM SDK. You get the following options for policy settings in theMDX or MAM SDK policy container:
- MAM SDK
- Legacy MDX
In theMDX or MAM SDK policy containerpolicy, you can change your option fromLegacy MDXtoMAM SDK. It is recommended that you don’t switch fromMAM SDKtoLegacy MDXas the switch requires you to reinstall the app. The default value isLegacy MDX. Ensure that you set the same policy mode for both Secure Mail and Secure Web running on a device. You cannot have two different modes running on the same device.
When you selectMAM SDKmode, the apps automatically switch to the MAM SDK framework and the device policies are refreshed without any further action from the administrators.
Note:
When you switch from theLegacy MDXtoMAM SDKframework, theNetwork accesspolicy must be modified to eitherTunneled – Web SSOorUnrestricted
Prerequisites
For a successful deployment of the dual mode feature, ensure that the following requirements are met:
Update your Citrix Endpoint Management to versions 10.12 RP2 or later, or 10.11 RP5 or later.
Update your mobile apps to version 21.8.0 or later.
If your organization uses third-party apps, ensure that you incorporate the MAM SDK into your third-party apps before you switch to the MAM SDK framework. All of your managed apps must be moved to MAM SDK at one time.
Limitations
MAM SDK only supports platform-based encryption, and not MDX encryption.
Duplicate policy entries appear if you don’t update Citrix Endpoint Management to version 10.12 RP2 or later, or 10.11 RP5 or later. The duplicate entries are created if the policy files are running on version 21.8.0 or later.
When you switch to the MAM SDK mode of app management, some features are not supported or are unavailable. Also, interoperation between apps in different modes is not supported for actions such as Open-in and Copy/Paste. For example, you can’t copy content from an app that is managed in theLegacy MDXmode into an app that is managed in theMAM SDKmode or the other way around. See the following table for the features that are not available in the MAM SDK mode:
Feature Legacy MDX MAM SDK Shared devices Yes No Intune Yes No SMIME Shared Certificate vault Yes No Derived credentials Yes No UIWebView Tunneling Yes No Full VPN Yes No The following policies are deprecated and are not available in the MAM SDK mode:
- Allowed Secure Web domains
- Allowed Wi-Fi networks
- Alternate Citrix Gateway
- Certificate label
- Citrix reporting
- Explicit logoff notification
- micro VPN session required
- micro VPN session required grace period (minutes)
- Report file cache maximum
- Require Wi-Fi
- Send reports over Wi-Fi only
- Upload token
Note:
If you are using a client certificate for authenticating to internal servers, the client certification must be the same as the one used in the Access Gateway.
For more information about MAM SDK, see the following articles:
Citrix Developer documentation aboutMobile Application Integration
Download SDK when you sign on toCitrix downloads
Secure Web for Android
This release includes bug fixes.
Secure Web 21.7.0
Secure Web for iOS
This release includes bug fixes.
Secure Web for Android
This release includes bug fixes.
Secure Web 21.6.0
Secure Web for iOS
From this release onward, the followingNetwork accesspolicy options are no longer supported:
- Use Previous Settings
- Tunneled - Full VPN
- Tunneled - Full VPN and Web SSO
If you’re using theTunneled - Full VPNor theTunneled - Full VPN and Web SSOpolicies, then you must switch to theTunneled - Web SSOpolicy.
Note:
To use the Secure Ticket Authority (STA),Network Accesspolicy must be set toTunneled - Web SSO.
Secure Web for Android
This release includes bug fixes.
Secure Web for iOS 21.5.0
This release includes bug fixes.
Secure Web for Android 21.4.5
This release includes bug fixes.
Secure Web 21.3.5
Secure Web for Android
This release includes bug fixes.
Secure Web 21.3.0
Secure Web for Android
This release includes bug fixes.
Secure Web 21.2.0
Secure Web for iOS
Color revamp for Secure Web.Secure Web is compliant with Citrix brand color updates.
Secure Web for Android
- Color revamp for Secure Web.Secure Web is compliant with Citrix brand color updates.
- Steady functioning on foldable devices.Secure Web for Android includes fixes for steady functioning on foldable devices.
Secure Web 21.1.5
Secure Web for iOS
This release includes bug fixes.
Secure Web 21.1.0
This release includes bug fixes.
Secure Web 20.12.0
Secure Web for iOS
This release includes bug fixes.
Secure Web 20.11.0
This release includes bug fixes.
Secure Web 20.10.5
Secure Web for Android
Support for AndroidX libraries.As per Google’s recommendation, Secure Web supports theAndroidXlibraries, which are a replacement for theandroid.support-packaged libraries.
Secure Web 20.10.0
Secure Web for Android
Secure Web supports Google Play’s current target API requirements for Android 10.
Secure Web 20.9.5
Secure Web for iOS
This release includes bug fixes.
Secure Web 20.9.0
Secure Web for Android
Note:
Support for Android 6.x ended on September 15, 2020.
Secure Web 20.8.5
Secure Web for Android
Secure Web for Android supports Android 11.
Secure Web 20.8.0
Secure Web for Android
Dual mode for Android release of Secure Web.A mobile application management (MAM) SDK is available to replace areas of MDX functionality that aren’t covered by iOS and Android platforms. The MDX wrapping technology is scheduled to reach end of life (EOL) in September 2021. To continue managing your enterprise applications, you must incorporate the MAM SDK.
From version 20.8.0, Android apps are released with the MDX and MAM SDK to prepare for the MDX EOL strategy mentioned earlier. The MDX dual mode is intended to provide a way to transition to new MAM SDKs from the legacy MDX Toolkit. Using the dual mode feature allows you to either continue managing apps using the MDX Toolkit (nowLegacy MDX) or switch to the new MAM SDK for app management.
Once you switch to the MAM SDK for app management, Citrix implements further changes and it does not require any action from the administrators.
For more details about the MAM SDK, see the following articles:
- MAM SDK Overview
- Citrix Developer section onDevice Management
- Citrix blog post
- Download SDK when you sign on toCitrix downloads
Prerequisites
For a successful deployment of the dual mode feature, ensure the following:
- Update your Citrix Endpoint Management to versions 10.12 RP2 and later, or 10.11 RP5 and later.
- Update your mobile apps to version 20.8.0 or later.
- Update the policies file to version 20.8.0 or later.
- If your organization uses third-party apps, ensure that you incorporate the MAM SDK into your third-party apps before you switch to the MAM SDK framework. All of your managed apps must be moved to MAM SDK at one time.
Note:
MAM SDK is supported for all cloud-based customers.
Limitations
- MAM SDK is supported for apps published under the Android Enterprise platform on your Citrix Endpoint Management deployment. For the newly published apps, the default encryption is platform-based encryption.
- MAM SDK only supports platform-based encryption, and not MDX encryption.
- If you don’t update Citrix Endpoint Management, and the policy files are running on version 20.8.0 and later for the mobile apps, then duplicate Networking policy entries appear for Secure Mail.
When you configure Secure Web in Citrix Endpoint Management, the dual mode feature allows you to either continue managing apps using the MDX Toolkit (nowLegacy MDX) or switch to the newMAM SDKfor app management. Citrix recommends that you switch toMAM SDK, as MAM SDKs are more modular and are intended to allow you to use only a subset of the MDX functionality that your organization uses. It reduces the overall in-binary and runtime footprint of an app.
You get the following options for policy settings in theMDX or MAM SDK policy container:
- MAM SDK
- Legacy MDX
In theMDX or MAM SDK policy containerpolicy, you can only change your option fromLegacy MDXto MAM SDK. The option to switch from MAM SDK toLegacy MDXis not allowed, and you need to republish the app. The default value is MDX Legacy. Ensure that you set the same policy mode for both Secure Mail and Secure Web running on the same device. You cannot have two different modes running on the same device.
Secure Web 20.7.5
This release includes bug fixes.
Secure Web 20.7.0
Support for Multitasking.In Secure Web for iOS, use two apps simultaneously with Multitasking. To enable this feature, drag an app out of the Dock. Slide it to the right or left edge of the screen to split and enable the screen for two apps.
For latest information on mobile productivity apps, see the articleRecent announcements.
Secure Web 20.6.0
This release includes bug fixes.
Secure Web 20.5.0
This release includes bug fixes.
Secure Web 20.4.5
Navigate to bookmarks in new tabs.In Secure Web for iOS, you can view, edit, and navigate to bookmarks when you open a new tab.
Secure Web 19.10.5 to 20.4.0
These releases include bug fixes.
Secure Web 19.10.0
Secure Web iOS and Android support encryption management.Encryption management allows you to use modern device platform security while also ensuring the device remains in a sufficient state to use platform security effectively. By using encryption management, you eliminate local data encryption redundancy since file system encryption is provided by the respective iOS or Android platform. To enable this feature, an admin must configure theEncryption typeMDX policy toPlatform encryption with compliance enforcementin the Citrix Endpoint Management console.
Encryption management allows you to use modern device platform security while also ensuring the device remains in a sufficient state to use platform security effectively. By using encryption management, you eliminate local data encryption redundancy since file system encryption is provided by the iOS or Android platform. To enable this feature, an admin must configure theEncryption typeMDX policy toPlatform encryption with compliance enforcementin the Citrix Endpoint Management console.
Encryption type
To use the encryption management feature, in the Citrix Endpoint Management console, set theEncryption typepolicy toPlatform encryption with compliance enforcement. Encryption management is enabled. All the existing encrypted application data on users’ devices seamlessly transition to a state encrypted by the device and not by MDX. During this transition, the app is paused for a one-time data migration. Upon successful migration, responsibility for encryption of locally stored data is transferred from MDX to the device platform. MDX continues to check compliance of the device upon each app launch. This feature works in both MDM + MAM and MAM-only environments.
When you set theEncryption typepolicy toPlatform encryption with compliance enforcement, the new policy supersedes your existing MDX Encryption.
For details about the encryption management MDX policies for Secure Web, see theEncryptionsection in:
- MDX policies for mobile productivity apps for iOS
- MDX policies for mobile productivity apps for Android
Non-compliant device behavior
当设备低于最低合规requirements, theNon-compliant device behaviorpolicy allows you to select what action is taken:
- Allow app– Allow the app to run normally.
- Allow app after warning– Warn the user that an app does not meet the minimum compliance requirements and allows the app to run. This is the default value.
- Block app– Block the app from running.
The following criteria determine whether a device meets the minimum compliance requirements.
Devices running iOS:
- iOS 10: An app is running an operating system version that is greater than or equal to the specified version.
- Debugger access: An app does not have debugging enabled.
- Jailbroken device: An app is not running on a jailbroken device.
- Device passcode: Device passcode is ON.
- Data sharing: Data sharing is not enabled for the app.
Devices running Android:
- Android SDK 24 (Android 7 Nougat): An app is running an operation system version that is greater than or equal to the specified version.
- Debugger Access: An app does not have debugging enabled.
- Rooted devices: An app is not running on a rooted device.
- Device lock: Device passcode is ON.
- Device encrypted: An app is running on an encrypted device.
Secure Web 19.9.5
This release includes bug fixes.
Secure Web 19.9.0
Secure Web for iOS
Secure Web for iOS supports iOS 13.
Secure Web for Android
This release includes bug fixes.
Secure Web for Android 19.8.5
Secure Web for Android supports Android Q.
Secure Web 19.8.0
This release includes bug fixes.
Secure Web 19.7.5
Secure Web for iOS
This release includes performance enhancements and bug fixes.
Secure Web for Android
From this release, Secure Web for Android is only supported on devices running Android 6 or later.
Secure Web 19.3.0 to 19.6.5
These releases include performance enhancements and bug fixes.
Secure Web 19.2.0
Allow links to open in Secure Web keeping data secure. With Secure Web, a dedicated VPN tunnel allows users to access sites with sensitive information securely. This feature was already available for Secure Web for iOS. This release adds support for Android. For more details, seeSecure Web features.
Secure Web versions 18.11.5 to 19.1.5
These releases include performance enhancements and bug fixes.
Secure Web 18.11.0
In Secure Web for iOS, the cache size list for sites is no longer reported and does not appear in the app settings. The default caching functionality remains the same.
Secure Web 18.9.0 to 18.10.5
These releases include performance enhancements and bug fixes.
Secure Web 10.8.65
The following features are new in Secure Web 10.8.65:
Pull to refresh.In Secure Web for iOS, users can use the pull to refresh feature to update their data on the screen.
Search using Find in page option.You can search for strings instantly by using theFind in pageoption. This option highlights the keywords as you search and displays the total matches on the right side of the toolbar. On relaunching, this feature retains the last searched keywords.
Scroll up to hide header and footer bars.In Secure Web for iOS, the header and the footer bars are hidden as you scroll up, displaying more information on your mobile screen when viewing webpages.
Secure Web 10.8.60
- Support for Polish language
Secure Web 10.8.35
- Pull to refresh.在安全Web为Android,用户可以使用拉to refresh feature to update their data on the screen.
Secure Web 10.8.15
Secure Web supports Android Enterprise, formerly known as Android for Work. You can create a separate work profile by using Android Enterprise apps in Secure Mail. For details, seeAndroid Enterprise in Secure Mail.
Secure Web for Android can render web pages in desktop mode. From the overflow menu, selectRequest desktop site. Secure Web displays the desktop version of the website.
Secure Web 10.8.10
Secure Web for iOS can render web pages in desktop mode.From the hamburger menu, selectRequest Desktop Siteand Secure Web displays the desktop version of the website.
Secure Web 10.8.5
Secure Mail and Secure Web for iOS and Android have revamped fonts, colors, and other UI improvements. This facelift gives you an enriched user experience while closely aligning with Citrix brand aesthetics across our full suite of apps.