09/16 September 16 – macOS Roaming Client v2.4.6 Beta

Version 2.4.6 of the macOS Roaming Client is now available on the Beta channel
. To install, download the latest beta installer from the dashboard under Deployments → Roaming Clients → Beta Channel
.
✨ What's New
Filtering Stays On Through a VPN (Opt-In)
 – Devices using encrypted DNS now keep DNSFilter filtering enforced while a corporate VPN is connected, even when the tunnel blocks the DNS-over-TLS port. Filtering continues over DNS-over-HTTPS, so remote and hybrid users stay protected on VPN without giving up encrypted DNS. Turn it on per install with ENABLE_DOH_FALLBACK=true
; see the deployment guide for setup and network requirements.
🛠️ Improvements
Every Certificate Root in One Profile
 – The published macOS certificate profiles now install all DNSFilter roots in a single push, including the new DNSFilter Root CA G1. Re-download the profile you already deploy and push it, and it replaces the installed one in place.
Travel Wi-Fi Keys Match the Docs
 – Install-time configuration keys now use the same Travel Wi-Fi naming as the dashboard and documentation. Existing scripts keep working with the previous names.
🪲 Bug Fixes
Fixed an issue where deploying with a configuration override and no site key cleared the existing device configuration.
Fixed an issue where the Diagnostic Tool failed on the first run after a clean install.
Improved how diagnostics are collected and what the diagnostic bundle includes.