Secure Edge: Release October 13, 2026

  • Secure Edge Appliance firmware release 7.0.21

  • Secure Edge Cloud Gateway 2.5

  • Secure Edge Windows Client 2.0.11

  • Secure Edge MacOS Client 2.0.2

  • Secure Edge IOS Client 1.1

  • Secure Edge Android Client 1.1.1

New feature

Bulk add Secure Edge subscribers from a CSV file. Administrators can now add many Secure Edge subscribers at once. In Network Manager, go to Secure Edge > Provisioning > Invite Subscribers and select + Bulk Add. Download the CSV template, fill in one row per subscriber, and upload the file. Network Manager checks the whole file before importing anything. It shows how many subscribers will be added, how many invitation emails will be sent, and how many unassigned subscriptions will remain. If the file has errors, or there are not enough unassigned subscriptions of a given type and term, the upload is rejected with a message that names the row to fix or the number of subscriptions to buy. For more information, see User subscriptions.

Improvements

  • The Secure Edge section of the Subscription / Lifecycle Status tab on the All Networks page now supports sorting by column header.

  • Fabric Tunnel pre-shared keys now have a maximum length of 159 characters. This is checked when you create or edit a tunnel, which prevents gateway check-in and encryption failures caused by keys that were too long.

Resolved issues

  • Fixed an issue where changing a GeoIP Filter exception from "allow" to "block" did not block traffic. This affected both the User Based and Address Based exception lists.

  • Fixed an issue where duplicating a security policy did not copy its GeoIP Filter settings.

  • Fixed an issue where the Create Fabric Tunnel form did not highlight invalid remote gateway subnets or duplicate remote gateway identifiers, or show an error message under the field.

  • Fixed an issue where clearing all filter options on Secure Edge log views, such as the DNS Filtering log on the Overview page, showed only blocked events instead of all events.

  • Fixed a timeout error when removing more than 125 subscribers at once from Provisioning > Soft Clients. You can now remove up to 200 subscribers (a full table page) in one action.

  • Fixed an issue where subscriber data usage history could fail to load or time out on networks with large numbers of subscribers.

  • Improved the reliability of Secure Edge software client check-ins. This fixes intermittent errors that occurred while clients checked in.

  • Security and stability improvements for Secure Edge gateway check-ins.

Known issues

  • When Full Tunnel is configured and a wildcard domain exception is added in Access Control, the subdomain is not blocked.

    EXAMPLE  Set exception type to Blocked for: `*.amazon.com`, and the following subdomains will still be accessible: music.amazon.com, aws.amazon.com, etc.