Fixes an issue where Zscaler Client Connector was stuck in a Connecting state.
Fixes multiple Firebase-reported crashes.
Fixes an issue where the ZIA and ZPA services status icon remained stuck in a Disconnecting state
Fixes an issue where Android devices became unregistered after  keepalive
Fixes an issue where Zscaler Client Connector didn’t drop QUIC traffic in Tunnel 1.0
Fixes an issue that caused Zscaler Client Connector to crash when setting up authentication token update notifications.

* Supports ZIdentity integration for the following features: using one-time passwords (OTPs), using device group-based app profiles, the assignment of service entitlements based on device posture, quarantining devices, displaying the service disable reason, and force-removing devices.

* Supports end user migration to ZIdentity, including a new Migration Status filter on the Device Management page and the Platform Details page to help track the device migration progress. To learn more, see Migrating End Users to ZIdentity.

* Provides separate per-device OTPs for the logout function and Disable ZIA, Disable ZPA, and Disable ZDX services.

* Updates the External Device ID field, displayed in the Zscaler Client Connector Registered Devices page in Enrolled Devices, upon a change by the Mobile Device Management (MDM).

* Enables admins to configure an early reauthentication notification for end users before Zscaler Private Access (ZPA) applications expire and allows users to authenticate before ZPA applications expire. To learn more, see Configuring Zscaler Client Connector App Profiles.

* Adds the ability to display a custom notification to users who attempt to access the internet when in Strict Enforcement mode.

* Supports device group-based app profiles in the Zscaler Client Connector Portal.

* Disables captive portal notifications based on the disableCaptivePortalNotification parameter in the Mobile Device Management (MDM) VPN configuration.

* Fixes an issue where strict enforcement failed to apply PAC file bypasses after a device reboot, requiring users to update the policy as a workaround.

* Fixes an issue where internet connectivity was lost after a device reboot when ZPA was disabled in a per-app VPN configuration for ZPA and Zscaler Internet Access (ZIA).

* Fixes an issue for ZPA Private Service Edge deployments only where the Certificate Trust posture check appears to have failed because Zscaler Client Connector took too long to send the posture evaluation results to the ZPA Private Service Edge.