This release focuses on easy installation and automatic configuration of Desktop clients (for large environments/rollouts), including:
🛠️ Introducing service locations on Windows Desktop clients allowing users to connect to a location that, for example, provides access to a remote Active Directory before the computer’s login screen, enabling authentication against AD.
🚗 Introducing Desktop Client Auto Provisioning - on all platforms, additionally for Windows Client we introduced automated enrollment for Active Directory as well as EntraID enrollment.
🪟 Windows Desktop Client has finally an MSI package - with native Wireguard networking based on WireguardNT. Please read the migration docs.
MacOS Desktop Client introduces native Swift/macOS VPN implementation and is published in Apple macOS Store officially. ⚠️ Migration is required to connect to the currently configured VPN locations. Please read the migration blog post.
🖥️ All desktop Clients now have a new MTU setting available.
🚦 Introducing Client Traffic Policy Selection. This lets administrators define whether VPN clients can choose their routing mode or are forced to use a specific traffic policy, such as routing all traffic through the VPN or only predefined traffic.
⚠️ Make sure your environment is up to date to use all the features mentioned. Verify this in our feature compatibility matrix.
What's Changed
- Release 1.5 merger by @wojcik91 in #166
- Fixes pentest issue DG25-16 from 2025-09-02 by @j-chmielewski in #159
- Fixes pentest issue DG25-14 from 2025-09-02 by @moubctez in #167
- Fix enrollment phone number validation by @j-chmielewski in #168
- Web next wip by @filipslezaklab in #170
- Merge main into dev after 1.5.1 release by @j-chmielewski in #172
- Create SBOM files by @j-chmielewski in #173
- CI: scan code with trivy by @j-chmielewski in #174
- Handle not found error by @moubctez in #175
- Periodic sbom regeneration by @j-chmielewski in #176
- ui update by @filipslezaklab in #177
- Merge SBOM CI pipelines into main by @j-chmielewski in #178
- handle openid callback by @filipslezaklab in #179
- webnext update by @filipslezaklab in #181
- Health check rename by @jakub-tldr in #182
- add favicon by @filipslezaklab in #183
- use update service api for client links by @filipslezaklab in #184
- footer update by @filipslezaklab in #185
- Always add x-powered-by HTTP header by @moubctez in #186
- handle update service fallback by @filipslezaklab in #187
- e2e webnext update by @filipslezaklab in #188
- Reorder pages by @filipslezaklab in #189
- add icon warning by @filipslezaklab in #190
- fix info banner by @filipslezaklab in #192
- ui as module by @filipslezaklab in #193
- add debian security repo for main packages by @filipslezaklab in #194
- webnext to web by @filipslezaklab in #195
- Main to dev by @filipslezaklab in #196
- UI 2.0 by @filipslezaklab in #197
- add missing openid routes by @filipslezaklab in #201
- Release/1.6 alpha by @wojcik91 in #202
- APT uploading/signing workflow by @jakub-tldr in #200
- List apt directory by @jakub-tldr in #203
- List whole directory by @jakub-tldr in #206
- Service locations (Pre-logon, Always-on) by @t-aleksander in #207
- Merge main into dev before 1.6 release by @j-chmielewski in #208
- Basic client version reporting by @t-aleksander in #209
- Remove AMI building by @t-aleksander in #211
- Implement "force all traffic" enterprise setting by @j-chmielewski in #212
New Contributors
- @jakub-tldr made their first contribution in #182
Full Changelog: v1.5.1...v1.6.0