• Added tls-version-max parameter to cap the maximum TLS version negotiated with the gateway. The default is now 1.2, which avoids silent connect timeouts against gateways (notably Check Point SVN foundation) that fail to respond to TLS 1.3 ClientHello produced by recent OpenSSL releases. Set tls-version-max=default to keep the previous behavior.
• Added connection profiles reordering in the UI.
• Added connection profiles support to snxctl command line utility via the --profile option.
• Fixed a regression with the manually specified routes when no-routing option was enabled.