This topic describes the release notes for Secure Access Service Edge (SASE) and provides links to the relevant references.
2025
Feature | Type | Description | Release date |
Office Data Protection | Optimization | Adds AI agents, such as Alibaba Cloud Model Studio, to the outbound detection channel for the web. | 2025-05-09 |
Guest Access | New | Adds support for configuring a guest authentication portal page. | 2025-04-28 |
Office Data Protection | New | Adds custom transmission channels. | 2025-04-14 |
Settings | New | Adds traffic steering settings. | 2025-04-14 |
Dynamic Decision-making | New | Adds the ability to block apps from connecting to the internal network. | 2025-04-14 |
Settings | Optimization | Adds support for configuring custom storage. | 2025-02-19 |
Office Data Protection | New | Adds support for configuring channel whitelists. | 2025-02-19 |
Internal Network Access Security | Optimization | Adds support for browser access mode for office applications. | 2025-02-18 |
Settings | Optimization | Internet Behavior Management now supports domain name and user group whitelists. | 2025-02-17 |
Endpoint Protection | New | Adds support for viewing security alerts. | 2025-02-10 |
Dynamic Decision-making | New | Adds support for configuring dynamic policies, response flows, and trigger templates. | 2025-01-17 |
Zero Trust Policy | Optimization | Adds support for creating trigger templates based on zero trust settings. | 2025-01-17 |
2024
Feature | Type | Description | Release date |
Endpoint antivirus | Optimization | Adds configuration for real-time defense and response. | 2024-11-10 |
Endpoint protection | New | Adds a vulnerability remediation feature. | 2024-11-10 |
Internal network access security | New | Adds end-to-end and application diagnostics features. | 2024-08-12 |
Internal network access security | Optimization | Upgrades office area detection. | 2024-08-12 |
Internet access behavior management | Optimization | Adds management of blacklists and whitelists for Internet access behavior. | 2024-07-05 |
Office data protection | Optimization | Adds detection rules for file classification and categorization. | 2024-07-05 |
Office data protection | New | Adds an asset survey map. | 2024-07-05 |
Approval center | New | Lets you create SASE-based approval flows, and set approvers, permissions, and more. | 2024-06-20 |
Office data protection | New | Adds support for custom prompts and approval flow management to office data protection. | 2024-06-10 |
Internal network access security | New | Adds support for the IPv6 and SIP protocols. | 2024-06-05 |
Enterprise element customization | New | Lets you customize elements of the SASE App and its download page, such as logos and text. | 2024-06-04 |
Office data protection | Optimization | Adds support for screen and application watermarks. Lets you fetch hidden watermark content. | 2024-05-24 |
SASE connector | Optimization | Optimizes deployment commands. Adds support for installation on multiple operating systems. | 2024-05-20 |
Single sign-on | New | Adds support for OpenID Connect (OIDC)-based single sign-on (SSO). | 2024-05-10 |
Dedicated access point | New | Lets you connect dedicated access points with SASE connectors to prevent exposing your business servers to the Internet. | 2024-04-23 |
Office data protection | Optimization | Optimizes outbound channels and adds support for configuring custom secondary outbound channels. | 2024-03-07 |
Internal network access security | Optimization | The connector now supports statistics and display for key network metrics. | 2024-03-28 |
SASE App | New | Adds support for operating systems with ARM architecture. | 2024-02-22 |
2023
Feature | Type | Description | Release date | References |
Global office network | New | Network connections for global office can be enabled. | 2023-11-16 | |
Exclusive back-to-origin service | New | The exclusive back-to-origin service is supported. You can configure exclusive back-to-origin services for Internet applications. | 2023-10-25 | Configure exclusive back-to-origin services for Internet applications |
Network access control | New | The wildcard mode is supported when you configure the media access control (MAC) address for a dumb terminal. | 2023-04-21 | |
Identity management | Optimization | The WeCom identity provider (IdP) of the new version is supported. | 2023-03-12 | |
Software management | New | The software blacklist feature is supported. The feature allows IT administrators to specify and manage unauthorized software based on your business requirements. | 2023-03-02 | |
DLP | New | The feature is officially released. The feature is used to ensure the security of sensitive files transferred outbound in enterprise office scenarios. | 2023-01-20 |
2022
Feature | Type | Description | Release date | References |
Compatibility with the Ubuntu operating system | New | Ubuntu 18.04 or later is supported by the private access feature of SASE. | 2022-12-15 | |
Software management | New | The software asset management feature is supported. The feature allows you to collect statistics on software asset distribution by software and terminal. | 2022-10-19 | |
Network access control (public preview) | New | The 802.1X-based network access control feature is derived from the best office practices of Alibaba Group. The feature facilitates the management and control of quick access to office networks from enterprises. The network access control feature uses the EAP-TLS authentication technology to provide an access scheme that is easier to use and more secure than account-password authentication. | 2022-09-21 | |
Private access | New | Alibaba Cloud DNS PrivateZone is supported. | 2022-08-17 | |
Private access | New | DNS services can be switched. | 2022-07-13 | |
Private access | New | Cloud Enterprise Network (CEN) resources can be identified and back-to-origin settings can be complete with a few clicks. | 2022-06-15 | |
SASE client | Optimization | A new user interface (UI) of the SASE client V2.0 is released for macOS. | 2022-05-18 | |
SASE client | Optimization | A new UI of the SASE client V2.0 is released for Windows. | 2022-04-20 | |
Identity management | Optimization | A single IdP, such as Lark and WeCom, or an IdP combination can be configured. | 2022-03-16 | |
SASE client | Optimization | Custom UI settings of the SASE client logon page are supported. | 2022-02-17 | |
SASE client | Optimization | The application diagnostics feature is supported. The feature helps users diagnose the causes of abnormal access to a specific application. | 2022-01-13 |
2021
Feature | Type | Description | Release date | References |
Identity management | Optimization | The DingTalk IdP is supported. | 2021-12-13 | |
SASE client | Optimization | The network diagnostics feature is supported by the SASE client. The feature helps users diagnose the access network and system configurations to identify the causes of client errors. | 2021-11-18 | |
Private access | Optimization |
| 2021-10-14 | |
DLP (public preview) | New | A beta version of DLP is provided. The feature allows you to monitor sensitive data transferred outbound, retain sensitive data transferred outbound, and manage peripherals and watermarks. | 2021-09-09 | |
Private access | Optimization | Virtual Private Cloud (VPC), Virtual Border Router (VBR), and IPsec-VPN resources within Alibaba Cloud accounts can be automatically identified, and connections to the resources can be established with a few clicks. | 2021-08-19 | |
Terminal management | Optimization | Custom security baselines are supported. This allows you to develop tailored compliance standards for the terminals to access office applications. | 2021-07-15 | |
Setting | New |
| 2021-06-10 | |
Identity management | Optimization | Two-factor authentication is supported for Lightweight Directory Access Protocol (LDAP) and custom IdPs. You can use SMS verification codes and one-time password (OTP) authentication. | 2021-05-13 | |
SASE client | Optimization | The SASE client can be installed on devices that run Android and iOS. | 2021-04-22 | |
Log analysis | New | The log analysis feature is supported. The feature provides the log audit and log analysis capabilities.
| 2021-03-18 | |
Identity management | New | User groups are supported by SASE. A user group contains multiple users. You can add multiple users at a time by account name, email address, mobile phone number, and organizational structure. This allows you to apply policies to multiple users at a time. | 2021-02-11 | |
Terminal management | New | The terminal management feature is supported. The feature allows you to view the terminal list, create security baselines, and register terminals. | 2021-01-20 |
2020
Feature | Type | Description | Release date | References |
Private access | Optimization | The web intrusion prevention feature is supported. The feature ensures that access to the office applications is secure and trusted. The feature also detects and defends against intrusions from internal employees or external partners. The intrusions include SQL injections, cross-site scripting (XSS) attacks, webshell uploads, command injections, webshell quarantine, and common application vulnerability attacks. | 2020-12-17 | Web intrusion prevention (unpublished) |
SASE client | New | The SASE client can be installed on devices that run Windows and macOS. | 2020-10-22 | |
Identity management | New | Dynamic authentication is used by SASE to identify users. IdPs can be configured to connect the IdP servers of enterprises to SASE. A single IdP, such as LDAP or IDaaS, is supported by SASE. | 2020-09-24 | |
Private access | New | The private access feature is released. The feature supports SaaS-based zero trust access by adopting the software-defined perimeter (SDP) approach. SaaS is short for Software as a Service. The feature allows you to manage access permissions of employees without the need to expose public IP addresses or reconstruct your existing network architecture. | 2020-09-10 |