Mobile Console 5.38.x Release Notes

This release includes an enhancement of the IBM MaaS360 Enterprise Mobility Management (EMM) connector synchronization process. This change reduces the number of interactions, increases efficiency, and improves performance. The new processing model is event-driven rather than pull-based. This enhancement reduces the processing time for both the Console and the IBM MaaS360 EMM.

This release introduces a display of related MITRE ATT&CK tactics for each threat listed on the Threat page of the Console. In threat details, link to the MITRE website for more information. MITRE is an independent organization that provides a knowledge base of adversary tactics and techniques. The Console exports MITRE ATT&CK tactics with a threat to a Security Information and Event Management (SIEM) or XDR solution.

This release provides characteristic templates in App Policies. These templates reside in a central location and new templates are added dynamically. Templates give you a starting point for policy refinement instead of creating policies from scratch. When viewing the list of affected applications for a rule, Trellix Mobile Console displays whether the application targets iOS or Android. Open the Technical report directly from the affected applications window. Filter by characteristics on the App Inventory page to simplify application searches.

This release provides an enhancement of iOS certificate analysis to support faster threat assessments of certificates installed on iOS or iPadOS devices. Trellix Mobile Console displays detailed certificate attributes, including full certificate details, key identifiers, key usage, extended key usage, and certificate authority information. This feature requires synchronization with Microsoft Intune certificate inventory.

This release provides an enhancement to threat response actions for Microsoft Intune. You can optionally use a custom application ID in Microsoft Entra ID for Microsoft Intune threat response actions. This custom application enables group-based response actions in Microsoft Intune using minimum required permissions without full read and write access to devices and groups in Microsoft Entra ID.

When configured, Trellix Mobile Console uses this custom application to move devices into and out of Microsoft Intune response groups. Trellix Mobile Console accesses only the groups associated with that application, reducing the need for tenant-wide device and group write permissions.

This release introduces the Security Hub feature for IBM Verify integration to enhance authentication security. Security Hub continuously monitors device security status and evaluates if devices meet required standards. When a device enters a high-risk state, Trellix Mobile Security automatically blocks critical Secure Sign On (SSO) actions, including enrollment, login, and authentication approvals such as One-Time Password (OTP) and push notifications.

Configure Security Hub settings in Policies > App Settings after completing setup in Account Management on Trellix Mobile Console. Trellix Mobile Console pushes these configurations to Trellix Mobile Security for device-level enforcement to ensure compliant authentication factors. You can also configure threat access restrictions in Policies > Threat > Device Actions for all devices in a group to block push notifications, OTP enrollment, and authentication.

Enable the Security Sign-On Enrollment Request threat on the Policies > Threat tab to request on-device enrollment.

This release introduces two checkboxes on the Policies > App Settings page to enhance device analysis and troubleshooting:

To enable these features, select Enable Premium Device Log Collection in Account Settings. Additionally, to enable Android bug report log collection, select Enable Android Deep Scan Forensic Analysis Feature in App Settings. Contact your administrator to request access to these features in your account. Android bug report collection is unavailable in Device Owner (DO) mode and on devices with a policy that restricts enabling developer options.

Re-protect Protected App: Using the Re-protect feature on the Protected Apps page, you can reapply protection to an existing protected app without uploading it again.

Security Improvements: When you upload a binary directly—not through a URL link to a store—and the platform analyzes the application, the app analysis backend automatically removes data collected from the analysis, including metadata and the binary.

This process prevents the storage of binaries and their data in a centralized location. The Console stores the metadata and binary information only on the customer side.

This release introduces an AI-supported Incidents page. Administrators can view and resolve incidents in this dedicated space. An incident is a group of threats that require analysis based on criteria defined by Console AI analysis. An AI-powered incident report provides the following information:

To see the list of applicable threats, refer to the Incidents documentation topic.

The AI-Powered Chatbot is now fully released in the Console user interface. The chatbot helps users find product information from existing documentation and knowledge base articles. Users do not need to search through documentation manually or contact support. This feature improves self-service capabilities.

This release introduces the Email Template feature. Administrators can edit and manage automated email responses directly from Account Management in the Console. You can modify predefined email templates for automated communications, including:

The Trellix Mobile Console AI chatbot now supports direct creation of support tickets. If automated responses do not solve an issue, users can create a support ticket directly in the chat interface. The chatbot automatically populates key details, including account ID, product version, Console version, and Console module. The system prompts users to provide any remaining required information before submission. Upon confirmation, the platform creates the ticket, and the chatbot displays the ticket number.

This release updates the persistent user-level time range preference on the Devices page. The system saves the last time range that you select.

For example, if you select Last 30 days, the system automatically displays that selection the next time that you view the Devices page.

Trellix Mobile Security SDK version 5.9.51 and later supports Indonesian and Malay languages for threat alert text messages. Users receive localized threat notifications that improve message clarity.

This release introduces an Over-the-Air (OTA) detection configuration. Administrators can select a detection set for each policy group. You can select from the following options:

This release resolves the general stability issues.