This page documents production updates to Chrome Enterprise Premium. Check this page for announcements about new or updated features, bug fixes, known issues, and deprecated functionality. You can see the latest product updates for all of Google Cloud on the [Google Cloud](https://docs.cloud.google.com/release-notes) page, browse and filter all release notes in the [Google Cloud console](https://console.cloud.google.com/release-notes), or programmatically access release notes in [BigQuery](https://console.cloud.google.com/bigquery?p=bigquery-public-data&d=google_cloud_release_notes&t=release_notes&page=table). To get the latest product updates delivered to you, add the URL of this page to your [feed reader](https://wikipedia.org/wiki/Comparison_of_feed_aggregators), or add the [feed URL](https://docs.cloud.google.com/feeds/beyondcorp-enterprise-release-notes.xml) directly. ## August 01, 2024 Feature [Generally available](https://cloud.google.com/products#product-launch-stages): The Chrome Enterprise Premium file transfer connector. You can use this feature to scan files that are transferred between different file systems on ChromeOS. ## July 18, 2024 Feature [Generally Available](https://cloud.google.com%20/products#product-launch-stages): Chrome OCR for Chrome Enterprise Premium You can now scan text in image (BMP, GIF, JPEG, PNG, and TIFF) files and images in PDFs for sensitive content with optical character recognition (OCR). To learn more, see [Use Chrome Enterprise Premium to integrate DLP with Chrome](https://support.google.com/a/answer/10104358). Feature [Generally Available](https://cloud.google.com%20/products#product-launch-stages): Generative AI URL Category for Chrome Enterprise Premium You can now use the Generative AI URL category when creating Chrome DLP rules. This category is assigned to websites that use AI to create new content, like text, images, music, audio, and videos. Feature [Generally Available](https://cloud.google.com%20/products#product-launch-stages): Rule-based custom messages for Chrome Enterprise Premium You can now specify a custom warning message when creating Chrome DLP rules. These messages are shown to end users when their actions are blocked as a result of a rule triggering in Chrome. To learn more, see [Use Chrome Enterprise Premium to integrate DLP with Chrome](https://support.google.com/a/answer/10104358). ## July 11, 2024 Feature [Generally available](https://cloud.google.com/products/#product-launch-stages): Chrome Enterprise Premium watermarking You can now display a custom watermark on web pages that match the data protection rules that you set. For more information, see [Display watermark on certain webpages](https://support.google.com/chrome/a/answer/14792155). ## April 08, 2024 Feature You can now enable Chrome Security Insights to monitor insider risk and data loss with enhanced monitoring for Chrome activity if you have Chrome Enterprise Core and Workspace Enterprise Standard or Workspace Enterprise Plus with assigned licenses. For more information, see [Monitoring for insider risk and data loss](https://support.google.com/a/answer/13761175). ## January 03, 2024 Deprecated BeyondCorp Enterprise and Tanium integration was officially shut down because Tanium has deprecated the APIs on which this integration was built. ## December 14, 2023 Feature [General Availability](https://cloud.google.com/products/#product-launch-stages): You can now protect against insider risk and data loss with enhanced monitoring of Chrome activity across your organization. Navigate to the Workspace Admin console home page to get started with monitoring and visibility right away! For more information, see [Monitoring for insider risk and data loss](https://docs.cloud.google.com/chrome-enterprise-premium/docs/release-notes/General%20Availability:%20You%20can%20now%20protect%20against%20insider%20risk%20and%20data%20loss%20with%20enhanced%20monitoring%20of%20Chrome%20activity%20across%20your%20organization.%20Navigate%20to%20the%20Workspace%20Admin%20console%20home%20page%20to%20get%20started%20with%20monitoring%20and%20visibility%20right%20away!%20For%20more%20information,%20see%20Monitoring%20for%20insider%20risk%20and%20data%20loss). ## December 13, 2023 Feature [General Availability](https://cloud.google.com/products/#product-launch-stages): You can now use certificate-based access to secure access from trusted devices to enterprise web applications running on Google Cloud. For more information, see [Enable certificate-based access for web applications](https://docs.cloud.google.com/beyondcorp-enterprise/docs/enable-cba-web-apps). ## October 09, 2023 Feature The BeyondCorp Enterprise Policy Remediator is in [Preview](https://cloud.google.com/products/#product-launch-stages). You can use the Policy Remediator to provide users with actionable steps that they can take to remediate access denied issues. For more information, see [Remediate denied access with the Policy Remediator](https://docs.cloud.google.com/beyondcorp-enterprise/docs/policy-remediator). ## August 08, 2023 Announcement [Cross-org authorization](https://docs.cloud.google.com/beyondcorp-enterprise/docs/cross-org-authorization) for device attributes in access levels is generally available [(GA)](https://cloud.google.com/products/#product-launch-stages). You can now configure authorization across organizations by using Access Context Manager. ## April 10, 2023 Announcement [Dry run configuration of context-aware access policy](https://docs.cloud.google.com/beyondcorp-enterprise/docs/securing-console-and-apis#create_an_access_binding) for the Google Cloud console and Google Cloud APIs is generally available [(GA)](https://cloud.google.com/products#product-launch-stages). With this feature, users can understand the impact of a CAA policy change before applying them to end users and impacting the real traffic. ## March 31, 2023 Deprecated The BeyondCorp Enterprise Client Connector is deprecated as of March 15, 2023, and is planned for shut down on December 31, 2023. Contact your account team with any questions. ## January 31, 2023 Fixed The Cloud Run Hosted Login page for external Identities has been fixed to follow the [Best practices for using signInWithRedirect on browsers that block third-party storage access.](https://cloud.google.com/identity-platform/docs/web/redirect-best-practices) See [Hosting a sign-in page with Cloud Run](https://cloud.google.com/iap/docs/cloud-run-sign-in#setting_the_hosted_pages_redirect_url) to learn more. ## January 26, 2023 Feature The ability to [configure authorization across organizations](https://cloud.google.com/beyondcorp-enterprise/docs/cross-org-authorization) when using BeyondCorp Enterprise is in [Preview](https://cloud.google.com/products#product-launch-stages). Cross-org authorization lets you configure an access policy to trust and use data, such as device attributes, owned by other organizations. For example, you can configure the access policy of your organization to allow access to its resources from devices in other organizations. ## December 07, 2022 Feature [BeyondCorp Enterprise integration with Microsoft Intune](https://cloud.google.com/beyondcorp-enterprise/docs/intune-overview) is generally available ([GA](https://cloud.google.com/products#product-launch-stages)). With this integration, you can collect real-time information about the devices in your organization using Microsoft Intune, and use this information to manage your devices and control access to your organizational resources using BeyondCorp Enterprise. ## July 29, 2022 Feature The following Identity-Aware Proxy (IAP) enhancements are generally available ([GA](https://cloud.google.com/products#product-launch-stages)): - [IAP TCP forwarding for non-Google Cloud environments](https://docs.cloud.google.com/iap/docs/tcp-by-host) - [IAP reauthentication](https://docs.cloud.google.com/iap/docs/configuring-reauth) - [IAP allowed domains](https://docs.cloud.google.com/iap/docs/allowed-domains) Feature Identity-Aware Proxy (IAP) [SAML attribute propagation](https://docs.cloud.google.com/iap/docs/saml-attribute-propagation) is available in [Preview](https://cloud.google.com/products#product-launch-stages). ## July 20, 2022 Announcement The BeyondCorp Enterprise app connector is now generally available. The app connector provides low-touch, frictionless, secure connectivity between Google Cloud and customer workloads in other cloud environments. For more information, see [Securing non-Google Cloud applications using the BeyondCorp Enterprise app connector](https://docs.cloud.google.com/beyondcorp-enterprise/docs/enable-app-connector). ## June 30, 2022 Feature IAP TCP forwarding is now generally available. You can use IAP TCP forwarding to create tunnels to endpoints by using the endpoint private IP address or hostname. If you have external resources (on premises or in other clouds) connected to Google Cloud through Cloud Interconnect or a VPN, you can use IAP TCP forwarding with those resources. For more information, see [Using IAP TCP forwarding with an IP address or hostname](https://docs.cloud.google.com/iap/docs/tcp-by-host) ## June 29, 2022 Feature The BeyondCorp Enterprise client connector is now generally available. The client connector extends identity and context-aware access to non-web applications by creating a secure connection from endpoint devices to apps running in both Google Cloud and non-Google Cloud environments. For more information, see [Securing client-server applications](https://docs.cloud.google.com/beyondcorp-enterprise/docs/client-connector). ## October 01, 2021 Feature The BeyondCorp Enterprise and Tanium integration is now generally available. With this integration, you can collect the real-time information about the devices in your organization using Tanium, and use this information to manage your devices and control access to your organizational resources using BeyondCorp Enterprise. For more information, see [BeyondCorp Enterprise and Tanium integration overview](https://docs.cloud.google.com/beyondcorp-enterprise/docs/tanium-overview). Feature The BeyondCorp Enterprise and Crowdstrike Falcon Zero Trust Assessment (Falcon ZTA) integration is now generally available. With this integration, you can collect the real-time information about the devices in your organization using Falcon ZTA, and use this information to manage your devices and control access to your organizational resources using BeyondCorp Enterprise. For more information, see [BeyondCorp Enterprise and Falcon ZTA integration overview](https://docs.cloud.google.com/beyondcorp-enterprise/docs/cs-overview).