Knox Service Plugin 26.08 release notes

New

Configure Auto Blocker

You can now enable Auto Blocker on your company-owned devices with Knox Service Plugin. Auto Blocker protects your device from malicious files and unauthorized access. You can also prevent device users from modifying the Auto Blocker settings.

New policies:

• Turn on Auto Blocker — Set ON to enable Auto Blocker protection, or DEFAULT to use the device’s default setting.

• Allow user to change Auto Blocker — Set False to prevent device users from modifying Auto Blocker settings.

For company-owned devices, configure this policy at Device-wide policies > Advanced Restriction policies > Auto Blocker operation.

For details, see Advanced restriction policies.

Disable call recording

You can now disable call recording on all regional device models to prevent potential privacy risks. Previously, the Allow call recording policy was only available on device models released in the United States.

For company-owned devices, configure this policy at Device-wide policies > Device Restrictions > Allow call recording and set to False.

For details, see Device restrictions.

Restrict USB connections while device locked

With this release of Knox Service Plugin, you can now allow access to specific USB connection types while restricting others on locked devices. This feature provides granular protection against security threats while devices are unattended.

You can configure a USB exception list to allow specific USB device classes to connect while the device is locked.

For company-owned devices, configure this policy at Device-wide policies > Device Restrictions > Advanced settings for the USB exception list > Setup USB exception list while device locked.

You can select one or more of the following USB exception options:

• Allow all — Permit all USB device classes to connect
• Audio — USB audio devices such as headsets, external microphones, and speakers
• CDC Data — Communication Device Class data devices such as USB modems and network interfaces
• Communication — Communication devices such as modems and serial port adapters
• Human Interface Device — Input devices such as keyboards, mice, and game controllers
• Mass Storage — Storage devices such as USB flash drives and external hard drives
• Miscellaneous — Composite devices that combine multiple functionalities
• Still Image — Imaging devices such as digital cameras and scanners
• Vendor Specific — Custom or proprietary devices not covered by standard classes
• Wireless Controller — Wireless devices such as Bluetooth adapters and wireless game controllers

For details, see Device restrictions.

Configure automatic device restart

You can now configure automatic device restart settings with Device Care policies. This feature helps maintain device performance by periodically restarting the device. You can schedule restarts on specific days and times, enable restarts when needed, and control whether device users can modify these settings.

You can configure the following settings for Auto restart:

• Restart when needed — Set True to enable automatic restart when the device determines it is needed for optimal performance. Set to False to disable this feature.

• Restart on schedule — Select the days of the week for scheduled automatic restarts. Available options include:

  • All
  • Mon
  • Tue
  • Wed
  • Thu
  • Fri
  • Sat
  • Sun

• Restart time — Specify the time for the automatic restart to occur (in HH:MM format).

• Allow user to change the Auto restart — Set to True to permit device users to modify Auto restart settings. Set to False to prevent device users from changing these settings.

For company-owned devices, configure this policy at Device-wide policies > Device Controls > Device Care policy.

For details, see Device controls.

Configure battery charging threshold

You can now set minimum and maximum threshold values for battery charging start and stop points. This feature helps extend battery lifespan by preventing overcharging.

For company-owned devices, configure this policy at Device-wide policies > Device and Settings customization profile (Premium) > Set the battery charging configuration.

• Start battery charging level — Battery percentage at which charging starts (minimum value: 10).
• Stop battery charging level — Battery percentage at which charging stops (maximum value: 90).

For details, see Device and settings customization profile.

Configure scheduled power saving mode

You can now configure scheduled power saving mode with specific days of the week and time ranges. This feature is useful for Galaxy Tablets in Kiosk Mode that need to enter power saving mode during non-working hours.

You can select specific days of the week and set work start and stop times. The device will automatically enter power saving mode outside the configured work hours, helping extend battery lifespan by reducing unnecessary charging cycles.

For company-owned devices, configure these policies at Device-wide policies > Device Settings > Power Saving Mode.

New policies:

• Select days of the week — Set which days of the week when power saving mode activates based on the start and stop time below. Available options:
  • All
  • Monday
  • Tuesday
  • Wednesday
  • Thursday
  • Friday
  • Saturday
  • Sunday
• Work start time(Hourly) — 24 hour time value when working hours starts and power saving mode stops.
• Work stop time(Hourly) — 24 hour time value when working hours ends and power saving mode starts.

For details, see Device settings.

Control DeX taskbar size

You can now control the DeX taskbar size to optimize the user experience for specific use cases, such as dashboard touch displays where interaction requires larger UI elements.

For company-owned devices, configure this policy at Device-wide policies > DeX Policy > DeX Customization Profile > Taskbar Size.

For details, see DeX.

Configure NPA vendor configuration

You can now include vendor configuration data in the NPA profile. This feature allows you to provide configuration parameters for your NPA vendor’s client.

You can enter a JSON string with your vendor configuration.

Example NPA vendor configuration:

{
  "NETWORK_ANALYTICS_PARAMETERS": {
    "profile_attribute": {
      "profile_name": "<profile_name>",
      "package_name": "com.cisco.anyconnect.vpn.android.avf",
      "package_signature": "<app_signature>",
      "flags": 65535
    },
    "vendor": {
      "config": "<base64_encoded_nvm_profile>"
    }
  }
}

For company-owned devices, configure this policy at Device-wide policies > Network Platform Analytics > NPA Vendor Config. For personal devices with a work profile, go to Work profile policies > Network Platform Analytics > NPA Vendor Config.

For details, see Network Platform Analytics.

Block additional Galaxy AI features

The Block all galaxy AI policy on Knox Service Plugin now also blocks the following Galaxy AI features:

• Now Nudge — Contextual AI suggestions that appear based on user activity
• Notification Highlights — AI-powered notification summarization
• Video Reframe — AI video-editing feature that automatically reframes videos to track a specific person

To block these features, configure this policy at Device-wide policies > Advanced Restrictions > Block all galaxy AI.

For details, see Advanced restrictions.

Deprecated features

Peripheral configuration policies

Peripheral configuration policies are no longer available with this release of Knox Service Plugin.