New In This Release

The following new features and enhancements are available in TMWS:


For more information about the on-premises gateway part, see TMWS On-Premises Gateway Release Notes.

Table 1. New Features / Enhancements in This Release (Available on March 31, 2021)

Feature / Enhancement


TMWS Agent app for protection of iOS/iPadOS devices

Rolls out the TMWS Agent app for the iOS/iPadOS mobile devices in your organization to forward web traffic to TMWS for scanning and policy enforcement.

TMWS allows you to deploy the app to the managed devices through Microsoft Intune, or instruct users to deploy the app to their individual devices.

Integration with Google as an IdP

Lets you use Google as the identity provider to configure SSO and access settings to authenticate and synchronize users of your organization using their managed Google account credentials.

On-premises gateway to support ICAP mode

Releases a new version of the on-premises gateway that can work in either the forward proxy mode (the existing mode) or ICAP mode. You can deploy your on-premises gateway in ICAP mode if you already have an ICAP client on your network and want it to pass web traffic to TMWS for scanning.

Cloud syslog forwarding tool enhancement

Updates the cloud syslog forwarding tool to support connection to the TMWS cloud using proxy.

Table 2. New Features / Enhancements Available on December 18, 2020

Feature / Enhancement


Official release of three pre-release features

Officially provides the following three features: Cloud Service Filters, Target Domain Groups, and Custom Defense.

One more feature provisioned for the Standard license

Makes the cloud service filter feature available for Standard license customers and allows them to configure up to six filters, including the default ones.

New syslog forwarding tool version to support audit logs

Releases a new version of the syslog forwarding tool to send not only access logs but also audit logs on the management console to your organization's syslog server, in both types of CEF syslog key-value mapping that are already supported.

New Enforcement Agent installer format for Windows

Changes the file format of the Enforcement Agent installer for Windows from .exe to .msi.

New version of the on-premises gateway (available on December 25, 2020)

Launches a new main version of the on-premises gateway with a redesigned web console and feature enhancements.

Improvement in on-premises gateway registration (available on December 25, 2020)

Provides a registration option on the web console to let the administrator decide whether to replace an existing on-premises gateway with the new one for authentication setting and security policy reuse when they have the same display name.

This is available for on-premises gateways installed with version 3.4.1.

Table 3. New Features / Enhancements in This Release (Available on September 15, 2020)

Feature / Enhancement


Bypass TMWS for Microsoft 365 traffic

Allows the administrator to choose under PAC Files to bypass TMWS for Microsoft 365 traffic for the Optimize and Allow category endpoints.

On-premises gateway log upload control

Adds an option under Log Analysis to control whether on-premises gateways send logs generated on them to the TMWS cloud.

Four features provisioned for the Standard license

Makes four Advanced license features available for Standard license customers: Predictive Machine Learning, Role-based access control Operator role, Custom Defense, syslog forwarding for both the cloud and on-premises.