Generally available: The Chrome Enterprise Premium file transfer connector. You can use this feature to scan files that are transferred between different file systems on ChromeOS.

Generally Available: Chrome OCR for Chrome Enterprise Premium

You can now scan text in image (BMP, GIF, JPEG, PNG, and TIFF) files and images in PDFs for sensitive content with optical character recognition (OCR). To learn more, see Use Chrome Enterprise Premium to integrate DLP with Chrome.

Feature

Generally Available: Generative AI URL Category for Chrome Enterprise Premium

You can now use the Generative AI URL category when creating Chrome DLP rules. This category is assigned to websites that use AI to create new content, like text, images, music, audio, and videos.

Feature

Generally Available: Rule-based custom messages for Chrome Enterprise Premium

You can now specify a custom warning message when creating Chrome DLP rules. These messages are shown to end users when their actions are blocked as a result of a rule triggering in Chrome. To learn more, see Use Chrome Enterprise Premium to integrate DLP with Chrome.

Generally available: Chrome Enterprise Premium watermarking

You can now display a custom watermark on web pages that match the data protection rules that you set. For more information, see Display watermark on certain webpages.

You can now enable Chrome Security Insights to monitor insider risk and data loss with enhanced monitoring for Chrome activity if you have Chrome Enterprise Core and Workspace Enterprise Standard or Workspace Enterprise Plus with assigned licenses. For more information, see Monitoring for insider risk and data loss.

BeyondCorp Enterprise and Tanium integration was officially shut down because Tanium has deprecated the APIs on which this integration was built.

General Availability: You can now protect against insider risk and data loss with enhanced monitoring of Chrome activity across your organization. Navigate to the Workspace Admin console home page to get started with monitoring and visibility right away! For more information, see Monitoring for insider risk and data loss.

General Availability: You can now use certificate-based access to secure access from trusted devices to enterprise web applications running on Google Cloud. For more information, see Enable certificate-based access for web applications.

The BeyondCorp Enterprise Policy Remediator is in Preview. You can use the Policy Remediator to provide users with actionable steps that they can take to remediate access denied issues.

For more information, see Remediate denied access with the Policy Remediator.

Cross-org authorization for device attributes in access levels is generally available (GA). You can now configure authorization across organizations by using Access Context Manager.

Dry run configuration of context-aware access policy for the Google Cloud console and Google Cloud APIs is generally available (GA). With this feature, users can understand the impact of a CAA policy change before applying them to end users and impacting the real traffic.

The BeyondCorp Enterprise Client Connector is deprecated as of March 15, 2023, and is planned for shut down on December 31, 2023. Contact your account team with any questions.

The Cloud Run Hosted Login page for external Identities has been fixed to follow the Best practices for using signInWithRedirect on browsers that block third-party storage access. See Hosting a sign-in page with Cloud Run to learn more.

The ability to configure authorization across organizations when using BeyondCorp Enterprise is in Preview.

Cross-org authorization lets you configure an access policy to trust and use data, such as device attributes, owned by other organizations. For example, you can configure the access policy of your organization to allow access to its resources from devices in other organizations.

BeyondCorp Enterprise integration with Microsoft Intune is generally available (GA).

With this integration, you can collect real-time information about the devices in your organization using Microsoft Intune, and use this information to manage your devices and control access to your organizational resources using BeyondCorp Enterprise.

The following Identity-Aware Proxy (IAP) enhancements are generally available (GA):

• IAP TCP forwarding for non-Google Cloud environments
• IAP reauthentication
• IAP allowed domains

Feature

Identity-Aware Proxy (IAP) SAML attribute propagation is available in Preview.

The BeyondCorp Enterprise app connector is now generally available. The app connector provides low-touch, frictionless, secure connectivity between Google Cloud and customer workloads in other cloud environments.

For more information, see Securing non-Google Cloud applications using the BeyondCorp Enterprise app connector.

IAP TCP forwarding is now generally available. You can use IAP TCP forwarding to create tunnels to endpoints by using the endpoint private IP address or hostname. If you have external resources (on premises or in other clouds) connected to Google Cloud through Cloud Interconnect or a VPN, you can use IAP TCP forwarding with those resources.

For more information, see Using IAP TCP forwarding with an IP address or hostname

The BeyondCorp Enterprise client connector is now generally available. The client connector extends identity and context-aware access to non-web applications by creating a secure connection from endpoint devices to apps running in both Google Cloud and non-Google Cloud environments.

For more information, see Securing client-server applications.

The BeyondCorp Enterprise and Tanium integration is now generally available.

With this integration, you can collect the real-time information about the devices in your organization using Tanium, and use this information to manage your devices and control access to your organizational resources using BeyondCorp Enterprise.

For more information, see BeyondCorp Enterprise and Tanium integration overview.

Feature

The BeyondCorp Enterprise and Crowdstrike Falcon Zero Trust Assessment (Falcon ZTA) integration is now generally available.

With this integration, you can collect the real-time information about the devices in your organization using Falcon ZTA, and use this information to manage your devices and control access to your organizational resources using BeyondCorp Enterprise.

For more information, see BeyondCorp Enterprise and Falcon ZTA integration overview.