<html>

<head>
<meta http-equiv=Content-Type content="text/html; charset=unicode">
<meta name=Generator content="Microsoft Word 14 (filtered)">
<title>Sophos Mobile Control 6.1 release notes</title>
<style>
<!--
@media print {
    #main {
        padding-bottom: 1em !important; /* The default padding of 6em is too much for printouts */
    }

    body {
        font-family: Arial, Helvetica, FreeSans, sans-serif;
        font-size: 10pt;
        line-height: 1.2;
    }

    body, #full-height-container, #main, #page, #content, .has-personal-sidebar #content {
        background: #fff !important;
        color: #000 !important;
        border: 0 !important;
        width: 100% !important;
        height: auto !important;
        min-height: auto !important;
        margin: 0 !important;
        padding: 0 !important;
        display: block !important;
    }

    a, a:link, a:visited, a:focus, a:hover, a:active {
        color: #000;
    }

    #content h1,
    #content h2,
    #content h3,
    #content h4,
    #content h5,
    #content h6 {
        font-family: Arial, Helvetica, FreeSans, sans-serif;
        page-break-after: avoid;
    }

    pre {
        font-family: Monaco, "Courier New", monospace;
    }

    #header,
    .aui-header-inner,
    #navigation,
    #sidebar,
    .sidebar,
    #personal-info-sidebar,
    .ia-fixed-sidebar,
    .page-actions,
    .navmenu,
    .ajs-menu-bar,
    .noprint,
    .inline-control-link,
    .inline-control-link a,
    a.show-labels-editor,
    .global-comment-actions,
    .comment-actions,
    .quick-comment-container,
    #addcomment {
        display: none !important;
    }

    /* CONF-28544 cannot print multiple pages in IE */
    #splitter-content {
        position: relative !important;
    }

    .comment .date::before {
        content: none !important; /* remove middot for print view */
    }

    h1.pagetitle img {
        height: auto;
        width: auto;
    }

    .print-only {
        display: block;
    }

    #footer {
        position: relative !important; /* CONF-17506 Place the footer at end of the content */
        margin: 0;
        padding: 0;
        background: none;
        clear: both;
    }

    #poweredby {
        border-top: none;
        background: none;
    }

    #poweredby li.print-only {
        display: list-item;
        font-style: italic;
    }

    #poweredby li.noprint {
        display: none;
    }

    /* no width controls in print */
    .wiki-content .table-wrap,
    .wiki-content p,
    .panel .codeContent,
    .panel .codeContent pre,
    .image-wrap {
        overflow: visible !important;
    }

    /* TODO - should this work? */
    #children-section,
    #comments-section .comment,
    #comments-section .comment .comment-body,
    #comments-section .comment .comment-content,
    #comments-section .comment p {
        page-break-inside: avoid;
    }

    #page-children a {
        text-decoration: none;
    }

    /**
     hide twixies

     the specificity here is a hack because print styles
     are getting loaded before the base styles. */
    #comments-section.pageSection .section-header,
    #comments-section.pageSection .section-title,
    #children-section.pageSection .section-header,
    #children-section.pageSection .section-title,
    .children-show-hide {
        padding-left: 0;
        margin-left: 0;
    }

    .children-show-hide.icon {
        display: none;
    }

    /* personal sidebar */
    .has-personal-sidebar #content {
        margin-right: 0px;
    }

    .has-personal-sidebar #content .pageSection {
        margin-right: 0px;
    }
}

 /* Font Definitions */
 @font-face
	{font-family:Wingdings;
	panose-1:5 0 0 0 0 0 0 0 0 0;}
@font-face
	{font-family:Wingdings;
	panose-1:5 0 0 0 0 0 0 0 0 0;}
 /* Style Definitions */
 p.MsoNormal, li.MsoNormal, div.MsoNormal
	{margin:0cm;
	margin-bottom:.0001pt;
	font-size:10.0pt;
	font-family:"Arial","sans-serif";}
h1
	{mso-style-link:"Heading 1 Char";
	margin-right:0cm;
	margin-left:0cm;
	font-size:24pt;
	color: #003366;
	font-family:"Arial","sans-serif";
	font-weight:bold;}
h2
	{mso-style-link:"Heading 2 Char";
	margin-right:0cm;
	margin-left:0cm;
	font-size:18pt;
	color: #003366;
	font-family:"Arial","sans-serif";
	font-weight:bold;}
h3
	{mso-style-link:"Heading 3 Char";
	margin-right:0cm;
	margin-left:0cm;
	font-size:16pt;
	color: #003366;
	font-family:"Arial","sans-serif";
	font-weight:bold;}
h4
	{
	margin-right:0cm;
	margin-left:0cm;
	font-size:12pt;
	color: #003366;
	font-family:"Arial","sans-serif";
	font-weight:bold;}
h5
	{mso-style-link:"Heading 5 Char";
	margin-right:0cm;
	margin-left:0cm;
	font-size:10pt;
	color: #003366;
	font-family:"Arial","sans-serif";
	font-weight:bold;}
p
	{margin-right:0cm;
	margin-left:0cm;
	font-size:10.0pt;
	font-family:"Arial","sans-serif";}
span.Heading1Char
	{mso-style-name:"Heading 1 Char";
	mso-style-link:"Heading 1";
	font-family:"Cambria","serif";
	color:#365F91;
	font-weight:bold;}
span.Heading3Char
	{mso-style-name:"Heading 3 Char";
	mso-style-link:"Heading 3";
	font-family:"Cambria","serif";
	color:#4F81BD;
	font-weight:bold;}
span.Heading5Char
	{mso-style-name:"Heading 5 Char";
	mso-style-link:"Heading 5";
	font-family:"Cambria","serif";
	color:#243F60;}
p.p1, li.p1, div.p1
	{mso-style-name:p1;
	margin-right:0cm;
	margin-left:0cm;
	font-size:10.0pt;
	font-family:"Arial","sans-serif";}
.MsoChpDefault
	{font-size:10.0pt;}
@page WordSection1
	{size:612.0pt 792.0pt;
	margin:72.0pt 72.0pt 72.0pt 72.0pt;}
div.WordSection1
	{page:WordSection1;}
 /* List Definitions */
 ol
	{margin-bottom:0cm;}
ul
	{margin-bottom:0cm;}
table{
	border: 1px solid black;
	border-collapse: collapse;
	}
th, td{
	border: 1px solid black;
	padding: 5pt;
	}
-->
</style>

</head>

<body lang=EN-US link=blue vlink=purple>

<div class=WordSection1>

<h1>Sophos Mobile Control 6.1 release notes</h1>

<div>

<p class=MsoNormal>[ <a href="#SophosMobileControlplatforms">Sophos
Mobile Control platforms</a> ] [ <a
href="#Whatsnewinversion6.1">What’s new in version 6.1</a> ]
[ <a href="#Installation">Installation</a> ] [ <a
href="#Licensereporting">License reporting</a> ] [ <a
href="#Knownissues">Known issues</a> ] [ <a
href="#Technicalsupport">Technical support</a> ] [ <a
href="#Legalnotices">Legal notices</a> ] </p>

</div>

<h2 id=SophosMobileControlplatforms>Sophos
Mobile Control platforms</h2>

<div>

<table class=MsoNormalTable width=613>
 <tr style='page-break-inside:avoid'>
  <td data-highlight-colour=blue style='background-color:#e0f0ff'>
  <p><strong>Supported platforms</strong></p>
  </td>
  <td data-highlight-colour=blue style='background-color:#e0f0ff'>
  <p><strong>Detailed version</strong></p>
  </td>
 </tr>
 <tr style='page-break-inside:avoid'>
  <td data-highlight-colour=grey style='background-color:#f0f0f0'>
  <p><span>Operation system</span></p>
  </td>
  <td data-highlight-colour=grey style='background-color:#f0f0f0'>
  <p><span>Version</span></p>
  </td>
 </tr>
 <tr style='page-break-inside:avoid'>
  <td>
  <p>Windows Server 2008 64 bit</p>
  </td>
  <td>
  <p>SP 1</p>
  </td>
 </tr>
 <tr style='page-break-inside:avoid'>
  <td>
  <p>Windows Server 2008 R2 64 bit</p>
  </td>
  <td>
  <p>SP 1</p>
  </td>
 </tr>
 <tr style='page-break-inside:avoid'>
  <td>
  <p>Windows Server 2012 (64 bit)</p>
  </td>
  <td>
  <p>&nbsp;</p>
  </td>
 </tr>
 <tr style='page-break-inside:avoid'>
  <td>
  <p class=MsoNormal>Windows Server 2012 (64 bit) R2</p>
  </td>
  <td>
  <p class=MsoNormal>&nbsp;</p>
  </td>
 </tr>
 <tr style='page-break-inside:avoid'>
  <td data-highlight-colour=grey style='background-color:#f0f0f0'>
  <p><span>Java JDK version</span></p>
  </td>
  <td data-highlight-colour=grey style='background-color:#f0f0f0'>
  <p><span>Version</span></p>
  </td>
 </tr>
 <tr style='page-break-inside:avoid'>
  <td>
  <p class=MsoNormal>JDK 8 (delivered with the installer)</p>
  </td>
  <td>
  <p class=MsoNormal><span style='color:black'>8u92</span></p>
  </td>
 </tr>
 <tr style='page-break-inside:avoid'>
  <td data-highlight-colour=grey style='background-color:#f0f0f0'>
  <p><span>Database&nbsp;version</span></p>
  </td>
  <td data-highlight-colour=grey style='background-color:#f0f0f0'>
  <p><span>Version</span></p>
  </td>
 </tr>
 <tr style='page-break-inside:avoid'>
  <td>
  <p>Microsoft SQL Server 2008 (32/64 bit)</p>
  </td>
  <td>
  <p>SP 3</p>
  </td>
 </tr>
 <tr style='page-break-inside:avoid'>
  <td>
  <p>Microsoft SQL Server 2008 R2 (64 bit)</p>
  </td>
  <td>
  <p>SP 2</p>
  </td>
 </tr>
 <tr style='page-break-inside:avoid'>
  <td>
  <p>Microsoft SQL Server 2012 (64 bit)</p>
  </td>
  <td>
  <p>SP 1</p>
  </td>
 </tr>
 <tr style='page-break-inside:avoid'>
  <td>
  <p>Microsoft SQL Server 2014 Express</p>
  </td>
  <td>
  <p>SP 1</p>
  </td>
 </tr>
 <tr style='page-break-inside:avoid'>
  <td>
  <p>MySQL</p>
  </td>
  <td>
  <p>5.6</p>
  </td>
 </tr>
 <tr style='page-break-inside:avoid'>
  <td data-highlight-colour=grey style='background-color:#f0f0f0'>
  <p><span>Mobile operation system</span></p>
  </td>
  <td data-highlight-colour=grey style='background-color:#f0f0f0'>
  <p><span>Version</span></p>
  </td>
 </tr>
 <tr style='page-break-inside:avoid'>
  <td>
  <p>Apple iOS</p>
  </td>
  <td>
  <p>7.x</p>
  <p>8.x</p>
  <p>9.x</p>
  <p>10.x</p>
  </td>
 </tr>
 <tr style='page-break-inside:avoid'>
  <td>
  <p>Android</p>
  </td>
  <td>
  <p>4.0.3 or higher (tablets and smartphones)</p>
  <p>5.0 or higher</p>
  <p>6.0 or higher</p>
  </td>
 </tr>
 <tr style='page-break-inside:avoid'>
  <td>
  <p><span style='color:black'>Windows Phone 8</span></p>
  <p>&nbsp;</p>
  <p><span style='color:black'>Windows 10 Mobile</span></p>
  </td>
  <td>
  <p><span style='color:black'>8.0.x &nbsp;</span></p>
  <p><span style='color:black'>8.1.x</span></p>
  <p><span style='color:black'>10.x</span></p>
  </td>
 </tr>
 <tr style='page-break-inside:avoid'>
  <td>
  <p class=MsoNormal><span style='color:black'>Windows 10 Desktop</span></p>
  </td>
  <td>
  <p class=MsoNormal><span style='color:black'>Windows 10 Threshold 2 or higher</span></p>
  </td>
 </tr>
 <tr style='page-break-inside:avoid'>
  <td data-highlight-colour=grey style='background-color:#f0f0f0'>
  <p><span>Browser</span></p>
  </td>
  <td data-highlight-colour=grey style='background-color:#f0f0f0'>
  <p><span>Version</span></p>
  </td>
 </tr>
 <tr style='page-break-inside:avoid'>
  <td>
  <p><span style='color:black'>Internet Explorer</span></p>
  </td>
  <td>
  <p><span style='color:black'>11</span></p>
  </td>
 </tr>
 <tr style='page-break-inside:avoid'>
  <td>
  <p class=MsoNormal><span style='color:black'>Edge (Microsoft)<span
  class=apple-tab-span>&nbsp;</span></span></p>
  </td>
  <td>
  <p class=MsoNormal><span style='color:black'>10</span></p>
  </td>
 </tr>
 <tr style='page-break-inside:avoid'>
  <td>
  <p><span style='color:black'>Mozilla Firefox</span></p>
  </td>
  <td>
  <p><span style='color:black'>30 or higher</span></p>
  </td>
 </tr>
 <tr style='page-break-inside:avoid'>
  <td>
  <p><span style='color:black'>Google Chrome</span></p>
  </td>
  <td>
  <p><span style='color:black'>35 or higher</span></p>
  </td>
 </tr>
 <tr style='page-break-inside:avoid'>
  <td data-highlight-colour=grey style='background-color:#f0f0f0'>
  <p><span>Directory servers</span></p>
  </td>
  <td data-highlight-colour=grey style='background-color:#f0f0f0'>
  <p><span>Version</span></p>
  </td>
 </tr>
 <tr style='page-break-inside:avoid'>
  <td>
  <p>Microsoft ActiveDirectory</p>
  </td>
  <td>
  <p>A<span style='color:black'>s included in the Windows Server versions
  above.</span></p>
  <p><span style='color:black'>Only Active Directory Domain Services, no AD LDS
  support.</span></p>
  </td>
 </tr>
 <tr style='page-break-inside:avoid'>
  <td>
  <p>OpenLDAP</p>
  </td>
  <td>
  <p>As provided by the Zimbra server below</p>
  </td>
 </tr>
 <tr style='page-break-inside:avoid'>
  <td>
  <p>NetIQ eDirectory</p>
  </td>
  <td>
  <p>8.8 SP 6</p>
  </td>
 </tr>
 <tr style='page-break-inside:avoid'>
  <td>
  <p>IBM Domino</p>
  </td>
  <td>
  <p>8.5.3</p>
  </td>
 </tr>
 <tr style='page-break-inside:avoid'>
  <td>
  <p class=MsoNormal>389 Directory Server<br>
  (Open source version of the&nbsp;Red Hat Directory Server)</p>
  </td>
  <td>
  <p class=MsoNormal>1.3</p>
  </td>
 </tr>
 <tr style='page-break-inside:avoid'>
  <td data-highlight-colour=grey style='background-color:#f0f0f0'>
  <p><span>Email systems</span></p>
  </td>
  <td data-highlight-colour=grey style='background-color:#f0f0f0'>
  <p><span>Version</span></p>
  </td>
 </tr>
 <tr style='page-break-inside:avoid'>
  <td>
  <p>Microsoft Exchange</p>
  </td>
  <td>
  <p>2007 SP3</p>
  <p>2010 SP2</p>
  <p>2013</p>
  <p>2016</p>  
  </td>
 </tr>
 <tr style='page-break-inside:avoid'>
  <td>
  <p>Lotus Domino Traveler</p>
  </td>
  <td>
  <p>9.0</p>
  </td>
 </tr>
 <tr style='page-break-inside:avoid'>
  <td>
  <p>Zimbra</p>
  </td>
  <td>
  <p>8.0</p>
  </td>
 </tr>
 <tr style='page-break-inside:avoid'>
  <td data-highlight-colour=grey style='background-color:#f0f0f0'>
  <p><span>CA server</span></p>
  </td>
  <td data-highlight-colour=grey style='background-color:#f0f0f0'>
  <p><span>Version</span></p>
  </td>
 </tr>
 <tr style='page-break-inside:avoid'>
  <td>
  <p>Windows Server 2008 32/64 bit</p>
  </td>
  <td>
  <p>SP1</p>
  </td>
 </tr>
 <tr style='page-break-inside:avoid'>
  <td>
  <p>Windows Server 2008 R2 64 bit</p>
  </td>
  <td>
  <p>SP1</p>
  </td>
 </tr>
 <tr style='page-break-inside:avoid'>
  <td>
  <p>Windows Server 2012 64 bit</p>
  </td>
  <td>
  <p>Latest SP</p>
  </td>
 </tr>
 <tr style='page-break-inside:avoid'>
  <td>
  <p class=MsoNormal>Windows Server 2012 R2 64 bit</p>
  </td>
  <td>
  <p class=MsoNormal>Latest SP</p>
  </td>
 </tr>
</table>

</div>

<p><strong><span style='color:black'>Note:</span></strong><span
style='color:black'>&nbsp;</span>The multi user feature available on some
devices running&nbsp;Android 4.2 is not fully&nbsp;supported. If the 4.2 multi
user feature is used on a device, only the first user that is registered in
Sophos Mobile Control can be managed.</p>

<p><strong>Note:</strong> Sophos supports only official Android versions.
Sophos does not guarantee that the SMC Android client is working with all t<span
style='color:#003366'>he different custom ROMs available.</span></p>

<h2 id="Whatsnewinversion6.1">What’s new in
version 6.1</h2>

<p><span style='color:black'>For further information, see&nbsp;<a
href="https://community.sophos.com/kb/123975">https://community.sophos.com/kb/123975</a>.</span></p>

<h2 id=Installation>Installation</h2>

<p>For details on installing the Sophos Mobile Control server, refer to the <em>Sophos
Mobile Control installation guide</em>. For details on installing and setting
up Sophos Mobile Control on end user devices by using the Sophos Mobile Control
Self Service Portal, refer to the <em>Sophos Mobile Control user help</em>. You
can download the product documentation at <a
href="http://www.sophos.com/en-us/support/documentation/mobile-control.aspx">http://www.sophos.com/en-us/support/documentation/mobile-control.aspx</a>.</p>

<h2 id=Licensereporting>License reporting</h2>

<p>Sophos Mobile C<span style='color:black'>ontrol 6.1 come</span>s with
license reporting. For further information, see <a
href="http://www.sophos.com/en-us/support/knowledgebase/120127.aspx">http://www.sophos.com/en-us/support/knowledgebase/120127.aspx</a>.</p>

<h2 id=Knownissues>Known issues</h2>

<h3 id=SophosMobileControl6.1releasenotes-Setup>Setup</h3>

<h5 id=SophosMobileControl6.1releasenotes-Scheduledtasks>Scheduled tasks</h5>

<div>

<p>If you are planning to run the update to SMC 5 overnight please disable the
scheduled tasks to stop and restart the SMC server (default: 4:00 am and 4:05
am) if those times interfere with the update and migration procedure. You can
re-enable them after the update is finished.</p>

</div>

<h5
id="SophosMobileControl6.1releasenotes-SophosMobileControllicenseinafolderwithJapanesecharactersinthefoldername(DEF85338)">Sophos
Mobile Control license in a folder with Japanese characters in the folder name
(DEF85338)</h5>

<p>If the Sophos Mobile Control license file is placed in a folder with
Japanese characters in the name for installation, the installation process
fails.</p>

<h5
id=SophosMobileControl6.1releasenotes-ChangingtheserverURLpost-installation>Changing
the server URL post-installation</h5>

<p>After changing the URL of the server using the Configuration Wizard the SMC
standard license needs to be reactivated. To do so, go to Setup&gt;System
setup&gt;License, enter your standard license key in the input field and then
click “Activate”.</p>

<h3 id=SophosMobileControl6.1releasenotes-Enduserdevice>End user device</h3>

<h4 id=SophosMobileControl6.1releasenotes-Android>Android</h4>

<h5
id="SophosMobileControl6.1releasenotes-OnsomeSAMSUNGSAFEdevicesremovinganAndroidprofilewithacertificatedoesnotremovethecertificatefromthedevice">On
some SAMSUNG SAFE devices removing an Android profile with a certificate does
not remove the certificate from the device</h5>

<p><span style='color:black'>On some SAMSUNG SAFE devices (e.g. seen on
a&nbsp;Samsung S3 mini with Android 4.1.2), installing a root certificate via a
profile works fine without any issues. If the profile is removed again from the
device via the Sophos Mobile Control web console, the devices synchronizes with
the server but the certificate itself is not removed from the device.&nbsp;This
is an issue of the Samsung API. According to Samsung, the issue will be
fixed&nbsp;by the next Android (Kitkat) upgrade of affected devices,
e.g.&nbsp;Samsung S3 mini with Android 4.1.2.</span></p>

<h5
id="SophosMobileControl6.1releasenotes-OnsomeSAMSUNGSAFEdevicesitisnotpossibletoaddaprofilewitharootcertificate">On
some SAMSUNG SAFE devices it is not possible to add a profile with a root certificate</h5>

<p><span style='color:black'>On some SAMSUNG SAFE devices (e.g. seen on a
Samsung Galaxy S2 with Android 4.0.3), installing a root certificate via a
profile does not work. This is an issue of the Samsung API where a call to a
Samsung API returns success although the root certificate could not be
installed on the device.&nbsp;</span></p>

<h5
id="SophosMobileControl6.1releasenotes-OnsomeSAMSUNGSAFEdevicesitisnotpossibletoremovetheVPNprofilefromthedevice">On
some SAMSUNG SAFE devices it is not possible to remove the VPN profile from the
device</h5>

<p><span style='color:black'>On some SAMSUNG SAFE devices (e.g. seen on
a&nbsp;Samsung Galaxy S2 with Android 4.0.3), removing a VPN profile via the SMC
admin does not work.&nbsp;This is an issue on the Samsung API on the device
where removing the profile via a call to the Samsung API succeeds although the
VPN profile is actually not removed on the device.&nbsp;</span></p>

<h5
id="SophosMobileControl6.1releasenotes-OnsomeSAMSUNGSAFEdevicesaWi-FiconfigurationistransferredtothedevicebutwhenconnectingtotheWi-Fitheusergetsanerrormessage&quot;Failedtoconnecttonetwork">On
some SAMSUNG SAFE devices a Wi-Fi configuration is transferred to the device
but when connecting to the Wi-Fi the user gets an error message &quot;Failed to
connect to network&quot;&nbsp;</h5>

<p>On some SAMSUNG SAFE devices (e.g. seen on a&nbsp;Samsung S3 mini with
Android 4.1.2), Wi-Fi configuration are installed correctly but when the user
connecting to the Wi-Fi does not work giving the user an error message
&quot;Failed to connect to network&quot;.&nbsp;This is an issue of the Samsung
API. According to Samsung, the issue will be fixed&nbsp;by the next Android
(Kitkat) upgrade of affected devices, e.g.&nbsp;Samsung S3 mini with Android
4.1.2</p>

<h5
id=SophosMobileControl6.1releasenotes-BaidupushservicedoesnotworkondeviceswithAndroid6.0orhigher>Baidu
push service does not work on devices with Android 6.0 or higher</h5>

<p>The current Baidu library used by the Sophos Mobile Control client basically
does not offer support of Android 6 or higher. Furthermore, Android 6
introduces new features (App-doze and stand-by mode) that impact the receiving
of push notifications and that are not supported by the Baidu library.</p>

<h5
id="SophosMobileControl6.1releasenotes-OnSonydevicesitisnotpossibletouseVPNprofileswithL2TP/IPSecPSK">On
Sony devices it is not possible to use VPN profiles with L2TP/IPSec PSK &nbsp;</h5>

<p><span style='color:black'>On Sony devices it is not possible to configure
VPN profiles with L2TP/IPSec PSK with some VPN servers (for example Sophos
UTM).&nbsp;</span></p>

<h5
id="SophosMobileControl6.1releasenotes-AllowFingerprintsettingintheGeneralpayloadofaSophoscontainerpolicyhasnoeffect">Allow
Fingerprint setting in the General payload of a Sophos container policy has no
effect</h5>

<p><span style='color:black'>Currently due to technical limitations, the Sophos
container apps do not support fingerprint for logon. Therefore, the setting in
the General payload of a Sophos container policy currently has no effect. With
upcoming releases of the Sophos Secure Workspace and Sophos Secure Email,
fingerprint will be supported for logon and the SMC payload setting will be
applied.</span></p>

<h4 id=SophosMobileControl6.1releasenotes-iOS>iOS</h4>

<h5
id="SophosMobileControl6.1releasenotes-WhenuseofSafari(iOSBrowser)isrestrictedviaaprofile,recommendedandrequiredappscannotbeinstalledviaaniTuneslink">When
use of Safari (iOS Browser) is restricted via a profile, recommended and
required apps cannot be installed via an iTunes link</h5>

<p>Installing a recommended or required app via an iTunes link on an iOS device
requires the use of Safari. If the use of Safari is restricted, recommended and
required apps cannot be installed via an iTunes link.</p>

<h5
id="SophosMobileControl6.1releasenotes-AutomaticsynchronizationoftheSMCappagainsttheserverdoesnotworkreliably">Automatic
synchronization of the SMC app against the server does not work reliably</h5>

<p>In some cases the silent trigger sent by the SMC server does not result in
an automatic background synchronization. In those cases the user can still
synchronize the app manually.</p>

<h5
id="SophosMobileControl6.1releasenotes-ManagedSophosSecureWorkspaceloosesthemanagementstatusafterupgradeofapp">Managed
Sophos Secure Workspace looses the management status after upgrade of app</h5>

<p>When upgrading a Sophos Secure Workspace for iOS app that is already managed
by Sophos Mobile Control, it may happen in very rare cases that Sophos Secure
Workspace is no more managed on the device. This is caused by an undefined behavior
of the Apple iOS mechanism used for managing the app: the managed settings are
lost. Installing the profile again for the device through the Sophos Mobile
Control web console takes the app under management again.</p>

<h5
id=SophosMobileControl6.1releasenotes-SingleAppModeprofilechangesdonotaffectthedevice>Single
App Mode profile changes do not affect the device</h5>

<p>Updating an iOS Single App Mode profile does not update all contained
settings. The &quot;disable…&quot; options are updated correctly. All other
options only work on the first installation of the profile. For switching those
settings, the profile has to be removed and installed again. This is an issue
in Apple iOS.</p>

<h4 id=SophosMobileControl6.1releasenotes-WindowsPhone>Windows Phone</h4>

<h5
id="SophosMobileControl6.1releasenotes-WindowsPhone8.1devices&lt;GDR1donotsetExchangeaccountnamescorrectly">Windows
Phone 8.1 devices &lt; GDR1 do not set Exchange account names correctly</h5>

<p>Windows Phone devices running 8.1 &lt; GDR1 do not use the Exchange account
display name as configured. Instead, they just use a numbering scheme. This
display issue does not affect the actual synchronization. Newer Windows Phone
8.1 versions use the name as configured.</p>

<h5
id="SophosMobileControl6.1releasenotes-A&quot;nopasscode&quot;complianceviolationisreportedalthoughapasscodeissetonthedevice">A
&quot;no passcode&quot; compliance violation is reported although a passcode is
set on the device</h5>

<p><span style='color:black'>The “password required” compliance rule does not
work correctly for Windows Phone and Windows 10 Mobile devices if no passcode
policy is enforced by SMC. The devices do not report a passcode being set if
the user does this without being forced to by a policy. This is an issue in
Windows Phone and Windows 10 Mobile.</span></p>

<h5
id="SophosMobileControl6.1releasenotes-A&quot;noencryption&quot;complianceviolationisreportedalthoughthedeviceisencrypted">A
&quot;no encryption&quot; compliance violation is reported although the device
is encrypted</h5>

<p><span style='color:black'>The “encryption required” compliance rule does not
work correctly for Windows Phone&nbsp;and Windows 10 Mobile&nbsp;devices if
encryption is not enforced by an SMC &quot;Restrictions&quot; policy. The
devices do not report a device to be encrypted if the user does this without
being forced to by a policy. This is an issue in Windows Phone&nbsp;and Windows
10 Mobile.</span></p>

<h5 id=SophosMobileControl6.1releasenotes-SafeSearchrestriction>SafeSearch
restriction</h5>

<p>The Windows Phone 8.1 restriction “SafeSearch permission” is not working
correctly. Due to an issue in Windows Phone 8.1 the restriction is ignored on
the device and defaults to “moderate”.</p>

<h5
id="SophosMobileControl6.1releasenotes-Windows10Mobiledevicescannotbecheckedforcompliancerule&quot;Dataroamingallowed">Windows
10 Mobile devices cannot be checked for compliance rule &quot;Data roaming
allowed&quot;</h5>

<p>On devices that run Windows 10 Mobile, Sophos Mobile Control cannot check
for compliance with the &quot;Data roaming allowed&quot; rule because the
operating system does not provide the Sophos Mobile Control app with&nbsp;the
relevant information. When you forbid data roaming, a Windows 10 Mobile device
with data roaming enabled is still reported as compliant.</p>

<h3 id=SophosMobileControl6.1releasenotes-SophosMobileControlwebconsole>Sophos
Mobile Control web console</h3>

<h5
id=SophosMobileControl6.1releasenotes-SynchronizinganAndroiddevicewithanExchangeserver>Synchronizing
an Android device with an Exchange server</h5>

<p>Android devices are automatically enabled thr<span style='color:black'>ough
the EAS proxy, if the device was registered with the Self Service Portal. If an
administrator has added the device to Sophos Mobile Control, it is required to
enter the sAMAccountName in the respective property of the device details view
to make ActiveSync synchronization possible. If devices are registered with an
LDAP entry and SSP, this is not necessary (this only applies to Microsoft
ActiveDirectory). It also is not necessary if the device's ActiveSync Id is
already known. That is the case when using Sophos Secure Email or Samsung KNOX.</span></p>

<h5
id=SophosMobileControl6.1releasenotes-PasswordfieldsmaylookcorruptedinInternetExplorer10>Password
fields may look corrupted in Internet Explorer 10</h5>

<p>When entering a password, e.g. in an Exchange email configuration, it may
happen that the password is cut off and not all asterisks are shown. The user
can still enter any password, although the input field does not show the
correct amount of characters entered. This is caused by a defect in the web
control within the standard framework used by Sophos Mobile Control.&nbsp;</p>

<h5
id=SophosMobileControl6.1releasenotes-WebconsolemaylookcorruptedinInternetExplorer>Web
console may look corrupted in Internet Explorer</h5>

<p><span style='color:black'>Internet Explorer may classify the Sophos Mobile
Control web console as an intranet site. As a result, compatibility mode is
activated by default which results in a corrupted view and erroneous behavior.
This browser feature can be disabled in the Compatibility View settings of
Internet Explorer by unchecking “Display intranet sites in Compatibility View”.</span></p>

<h5
id="SophosMobileControl6.1releasenotes-PlainExchangeActiveSynctrafficisnolongersupportedusingtheinternalEASproxy">Plain
Exchange ActiveSync traffic is no longer supported using the internal EAS proxy</h5>

<p><span style='color:black'>Exchange ActiveSync traffic without encryption
(SSL/TLS) is no longer supported by the internal EAS proxy.</span></p>

<h5
id=SophosMobileControl6.1releasenotes-Cancellingdeletionofentriesinthedevicelistdisablesthelistactions>Cancelling
deletion of entries in the device list disables the list actions</h5>

<p><span style='color:black'>Using the context to delete single devices and
then cancelling the dialog leads to disabled actions and links in the device
list. Reloading the device list enables them again.</span></p>

<h5
id=SophosMobileControl6.1releasenotes-WronglabelforAndroidprofilerestriction>Wrong
label for Android profile restriction</h5>

<p><span style='color:black'>The Android restrictions &quot;Allow app
install&quot; and &quot;Allow app uninstall&quot; are labelled with
&quot;SAFEv2&quot; but should be labelled &quot;SAFEv3&quot;.</span></p>

<h5
id=SophosMobileControl6.1releasenotes-AndroidKioskmodeprofilepayloaddoesnotvalidateemptyfieldscorrectly>Android
Kiosk mode profile payload does not validate empty fields correctly</h5>

<p><span style='color:black'>When creating a Kiosk mode payload for Android
with a custom app the app identifier is a required field. However, this is not
correctly validated and saved without app identifier anyway.</span></p>

<h5
id=SophosMobileControl6.1releasenotes-CustomershavingAppleDeviceEnrollmentProgramcannotbedeleted>Customers
having Apple Device Enrollment Program cannot be deleted</h5>

<p><span style='color:black'>The deletion of customers having Apple DEP
profiles configured fails. To delete those customers, the Apple DEP profiles
need to be deleted manually before deleting the customer.</span></p>

<h5
id="SophosMobileControl6.1releasenotes-Taskbundletasksforprofileremovaldonotlistthecurrentprofilenamesinsomecases">Task
bundle tasks for profile removal do not list the current profile names in some
cases</h5>

<p><span style='color:black'>When profiles are installed on devices and then
later are renamed the list for profile, removal tasks in task bundles might be
confusing. It might list the profile with the old name. </span></p>

<h5
id=SophosMobileControl6.1releasenotes-ListofWindowsMobilerootcertificatesmaynotreflecttheactualstate>List
of Windows Mobile root certificates may not reflect the actual state</h5>

<p><span style='color:black'>Installing root certificates as part of policies
is always reported as successful. The actual list of installed certificates can
be checked in the device details.</span></p>

<h5
id="SophosMobileControl6.1releasenotes-EmptyWindowsMobilepoliciesarenotcorrectlylistedintheinstalledpolicydetails">Empty
Windows Mobile policies are not correctly listed in the installed policy
details</h5>

<p><span style='color:black'>Assigning empty policies without any settings to a
Windows Mobile device does not correctly update the installed policy details
displayed in the web console. Instead, settings of previously applied policies
might be shown.</span></p>

<h5
id=SophosMobileControl6.1releasenotes-RestrictingcopyandpasteonWindows10Mobiledoesnotworkwithallapps>Restricting
copy and paste on Windows 10 Mobile does not work with all apps</h5>

<p><span style='color:black'>The restriction for Copy &amp; Paste on Windows 10
Mobile does not work for some apps. Those apps still allow Copy &amp; Paste
actions.</span></p>

<h5
id=SophosMobileControl6.1releasenotes-LinktoEASproxysetupinwebconsoleisoutdated>Link
to EAS proxy setup in web console is outdated</h5>

<p><span style='color:black'>The link to the EAS proxy setup file in the web
console (Setup&gt;System setup&gt;EAS proxy) points to an outdated file of the
last SMC release. The new setup file can be downloaded from the MySophos
portal.</span></p>

<h5 id=SophosMobileControl6.1releasenotes-RESTwebserviceinterfacechanges>REST
web service interface changes</h5>

<p><span style='color:black'>The web service interface for apps has been
modified to allow configuring the app category and managed installation flags. </span></p>

<p><span style='color:black'>The generic NAC web service interface is
deprecated. Customers should switch to the REST web service which offers the
same functionality.</span></p>

<p><span style='color:black'>The web service resource &quot;appreputation&quot;
is deprecated. Customers should use the &quot;appgroups&quot; resource instead.</span></p>

<p><span style='color:black'>All web service resources now have additional
create and update methods which no longer rely on form data. Instead, they can
be used with JSON-formatted data which is easier to produce.</span></p>

<p><span style='color:black'>The deprecated interfaces will be removed in a
future version.</span></p>

<h2 id=Technicalsupport>Technical support</h2>

<p>You can find technical support for Sophos products in any of these ways:</p>

<ul type=disc>
 <li class=MsoNormal>Visit the Sophos community&nbsp;at <a
     href="http://community.sophos.com/">http://community.sophos.com/products/mobile-device-protection/</a>
     and search for other users who are experiencing the same problem.</li>
 <li class=MsoNormal>Visit the Sophos support knowledgebase at <a
     href="http://www.sophos.com/support.aspx">http://www.sophos.com/support.aspx</a>.</li>
 <li class=MsoNormal>Download the product documentation at <a
     href="http://www.sophos.com/en-us/support/documentation/mobile-control.aspx">http://www.sophos.com/en-us/support/documentation/mobile-control.aspx</a>.</li>
 <li class=MsoNormal>Send an email to <a href="mailto:support@sophos.com">support@sophos.com</a>,
     including your Sophos software version number(s), operating system(s) and
     patch level(s), and the text of any error messages.</li>
 <li class=MsoNormal>Follow the mobile team on
     twitter for all product updates at <a href="https://twitter.com/SMCSophos">https://twitter.com/SMCSophos</a></li>
</ul>

<h2 id=Legalnotices>Legal notices</h2>

<p><span style='color:black'>Copyright © 2016 Sophos Limited. All rights
reserved.</span></p>

<p>No part of this publication may be reproduced, stored in a retrieval system,
or transmitted, in any form or by any means, electronic, mechanical,
photocopying, recording or otherwise unless you are either a valid licensee
where the documentation can be reproduced in accordance with the license terms
or you otherwise have the prior permission in writing of the copyright owner.</p>

<p>Sophos is a registered trademark of Sophos Limited and Sophos Group. All
other product and company names mentioned are trademarks or registered
trademarks of their respective owners.</p>

</div>

</body>

</html>