Omnissa Unified Access Gateway Release Notes

Unified Access Gateway appliances provide users with secure remote access to virtual desktops, internal sites, applications, and file repositories. To learn more, see Unified Access Gateway Documentation.

Omnissa Unified Access Gateway Release Notes provide information about the new features and enhancements in each release. This page contains a summary of the new capabilities, issues resolved, and known issues that are reported in each version.

What's New

Unified Access Gateway 2609 provides the following new features and enhancements:

General

• Redesigned Admin UI
  Unified Access Gateway 26.09 introduces a redesigned Admin UI that makes appliance administration faster and more intuitive. See Using the UAG Admin UI Console.

  • Improved navigation and search: A new layout and cross-category search help administrators locate settings quickly.
  • Refreshed dashboard: The dashboard shows the health of edge services and appliance resource usage at a glance, with shortcuts to common administrative tasks.
  • Guided JSON configuration import with validation and preview, allowing administrators to review configurations before applying them and helping reduce configuration errors.

• Strict client certificate validation
  The new Enable Strict Client Certificate Validation flag for X.509 certificate authentication applies additional checks to client certificates, including Extended Key Usage, Critical extensions, and stricter validity check during CRL/OCSP validation. See Configure certificate authentication > Enable Strict Client Certificate Validation.

• Addressed the eMudhra key compromise issue and resolved the vulnerabilities tracked under CVE-2026-91403 and CVE-2026-114406 with the latest OS and Java security updates.

• Logging and troubleshooting improvements.

Horizon

• Limited Availability (LA): Support for deploying Unified Access Gateway with Horizon 8 on Red Hat OpenShift
  As part of Horizon 8 support for OpenShift Limited Availability, administrators can deploy Unified Access Gateway on Red Hat OpenShift. For more information, see Omnissa Horizon 8 Release Notes and PowerShell deployment to Openshift.

• Increased size limit for custom executables
  Unified Access Gateway increases the maximum supported size of custom executables from 200 MB to 500 MB. This helps administrators to install and upgrade packages that are bigger than the previous limit. See Client custom executables.

Behavior Changes

Before upgrading to 2609, ensure to review the following changes. Depending on your configuration, some changes might require updates to your environment. To prepare for the upgrade, use the pre-upgrade checklist in the Knowledge base article KB 6001863. Each item in the KB list states which configuration it affects.

• Extended Server Certificate Validation: Enhancements for better RFC conformance in certificate validation flow. Applies only if this setting is enabled (default: disabled). See System configuration > Extended Server Certificate Validation.

• SAML IdP metadata: IdP metadata must include the leaf certificate your IdP uses to sign SAML assertions. See Upload Identity Provider's SAML Metadata to Unified Access Gateway.

• CA thumbprint trust for outbound connections: Backend servers must present a complete certificate chain that ends at the configured CA.

• Host header allow list: The Host header of each request must match the configured allow list. Requests that do not match are rejected with HTTP 400. See Host Header Validation on Unified Access Gateway.

• SNMP: JSON import and PowerShell deployment prompt for the SNMP v1/v2c community name when SNMP v1/v2c is configured. This field is optional. If blank, the default (public) is used.

Before You Begin

• Install and Upgrade
  To download the Unified Access Gateway, see the Product Download page.

• Security Scan
  Because of the OS update, special instructions are required to get accurate scan results of the operating system used by the Unified Access Gateway appliance. For more information, see Security scanning of Linux on Unified Access Gateway (UAG) version 2412 and beyond (6000738).

Resolved Issues

• UAG-13728: rootSessionIdleTimeoutSeconds does not extend Idle Shell Timeout.
• PPAT-21429: Syslog over TCP fails when sent directly from Tunnel service.
• PPAT-22611: Access logs using Syslog reported corrupted remote_host_ip and remote_host_port values for TCP tunnel flows (for example, "443]:443" instead of "443"). This is limited to logging, and traffic routing is not affected.
• PPAT-22748: A deadlock condition on the Tunnel Server might cause a service disruption when a DTR policy refresh coincides with active session processing.

Known Issues

We haven’t identified any notable known issues in this release. If you’re facing any problems, feel free to reach out to our support team.

Documentation

Documentation for Unified Access Gateway is located at Omnissa Product Documentation.

Support Contact Information

To receive support, access Customer Connect.

For information about filing a Support Request in Customer Connect and using Cloud Services Portal, see the Knowledge Base (KB) article 6000005.

Localization

For details on Omnissa’s localization strategy, see Announcing Omnissa Localization Support.