Banyan Security2.3.9

The Banyan Security App enables you to securely access your corporate applications from any network, using any device, without a VPN.

Please note that the Banyan Security App is not a VPN Client that intercepts your network traffic nor an MDM Client that manages your device settings.

Instead, the Banyan Secure Remote Access App provides the following features:

- Device Registration - a lightweight yet secure way to register your device with your corporate IT team
- Device TrustScore - collect essential device information to ensure a healthy device posture
- Services List - list the corporate applications you can access

The Banyan Secure Remote Access App is built following these core product philosophy elements that emphasize data privacy and security:

- Read Only - only reports on device status and does not change any device settings
- User Visible - runs as a regular non-privileged application with a user interface
- Low Overhead - does not continuously monitor or silently analyze behavior on the device and so has essentially no impact on device performance.
- Report When Needed - only collects essential device information from the device and reports at relatively low frequency.

1. What is the main purpose of using VPN in the app?
The app provides secure access to enterprise resources using a Zero Trust Network Access (ZTNA) model.
It establishes a secure, encrypted tunnel (based on the WireGuard protocol) between the user’s device and the organization’s infrastructure. This tunnel is used to:
Enforce administrator-defined access policies
Protect network traffic when accessing internal services
Ensure only authenticated and authorized users can reach protected resources
The VPN functionality is not a general-purpose consumer VPN, but is limited to accessing specific enterprise services configured by the organization’s administrator.

2. What user information is the app collecting using VPN?
The VPN tunnel itself is not used to collect or sell user data. However, like any enterprise VPN or secure access solution, the system processes minimal operational metadata required to establish and maintain the connection, such as:
Device and session identifiers
Connection timestamps
Assigned IP address within the private network
Authentication status (e.g., token/session validation)
This information is not used for tracking, profiling, or advertising, and is limited strictly to enabling secure connectivity and enforcing access policies.

3. For what purposes is this information collected?
The limited connection-related information described above is used solely for:
Establishing and maintaining the secure tunnel
Authenticating the user and validating session state
Enforcing Zero Trust access policies configured by the organization
Troubleshooting connectivity issues and ensuring service reliability
No data is used for analytics unrelated to app functionality, marketing, or user tracking.

4. Will the data be shared with any third parties?
No user data is sold or shared with third parties for advertising or marketing purposes.
Connection-related metadata may be processed and stored by:
The organization’s configured backend infrastructure (e.g., Banyan/SonicWall services)
Secure cloud infrastructure providers used to operate the service
This data is used exclusively for:
Secure access control
Session management
Operational monitoring and troubleshooting
All data handling follows enterprise security and privacy standards, and access is restricted to authorized systems and administrators.

Version History * Address resource contention causing DNS resolution to become stuck, preventing the Service Tunnel from establishing a connection.
* Added Troubleshooting Option to connect tunnel without dns resolution.
* Added Reset Service Tunnel option to force reset when IOS VPN extension is in bad state. 2.3.9 Sep 11 * Introducing Service Tunnel Over Tcp 2.3.8 Aug 25 This update includes several improvements to enhance security, reliability, and the overall user experience:

* Improved session management with clearer re-authentication prompts when your session expires or due to expiry.
* Enhanced security with seamless background renewal of authentication tokens and certificates.
* Resolved a connectivity issue that could affect VPN routing when switching from IPv6-only networks to IPv4 networks.

We recommend updating to the latest version for the best experience. 2.3.7 Jun 29 * BugFixes When Full Tunnel is enabled on the App.
* More logging on Network Extension and App. 2.3.6 Jun 8 * Minor big fixes. 2.3.5 Apr 17 * Improved reliability of secure tunnel connections
* Added user notifications for Tunnel Session expiration and renewal
* Enhanced background processing for better session management
* Updated internal dependencies and backend libraries
* Minor bug fixes and performance improvements

Details:
* Addition of user notifications to inform users about Tunnel session status and expiration
* Improvements to background task handling for maintaining active sessions
* Dependency upgrades and internal performance optimizations

There are no changes to:
* VPN architecture or protocol (WireGuard-based tunnel remains unchanged)
* Data collection or privacy practices
* Access scope or permissions related to network traffic
Notifications are used solely to inform users about VPN session status (e.g., expiration alerts) and do not contain sensitive data. 2.3.4 Mar 31 - fix: Tunnel connect does not wait for tunnel refresh to finish
- fix: Tunnel disconnecting during app state change
- enhancement: Only refresh tunnel if public domain names are present 2.3.2 10/04/2024 - Mobile Service Tunnel was not respecting IP whitelisting. 2.3.1 08/29/2024 Bug fixes and performance improvements. 2.3.0 05/01/2024 Bug Fixes 2.2.3 09/23/2023 Bug fixes. 2.2.1 07/12/2023 Support for Service Tunnel
Updated UX throughout 2.2.0 05/11/2023 Added Health Check in Settings 2.1.4 02/02/2023 - Adds support for Trust Profiles
- Updated internal libraries 2.1.2 11/16/2022 Updated Trust Scoring
Added Help Section with admin-configurable content 2.1.0 10/12/2022 Improve support for Device Trust Verification 2.0.1 11/23/2021 Welcome to v2.0.0 of the Banyan Mobile app.

We've made some significant changes that we hope will speed up your workflows and make things easier to use.

- Improved and greatly simplified registration flow
- Now uses Banyan Device Trust Verification as the default workflow 2.0.0 08/25/2021 Support for OTP-skip
minor bug fixes 1.10.0 01/20/2021 Minor Bug Fixes 1.9.0 12/02/2020 iOS 14 support.
Support for new alternative authentication flow. 1.8.0 10/01/2020 1.6.0 08/12/2020