The Cloud Identity Engine now supports instances in the Spain (ES) and Italy (IT) regions for customers who must store the data synced from their directories in either of these regions to comply with data regulation requirements. For more information on how to configure these regions, refer to Regional Data Storage Requirements in the Cloud Identity Engine System Requirements. If you are using a Cloud Identity agent, refer to Configure the Cloud Identity Agent. If you use the Cloud Identity Engine for authentication, refer to Configure the Cloud Identity Engine in an Authentication Profile.

User Context for the Cloud Identity Engine provides unparalleled visibility into your user identification and device information (such as tags, quarantine lists, and mappings, which now includes IP-address-to-port number mappings from Terminal Server agents) and provides a simple yet precise way to redistribute that information to other firewalls and devices within your network through segmentation (for example, by region or use case). By enabling the service on your firewall and defining information distribution for your network segments in the Cloud Identity Engine, you can quickly locate critical information and ensure consistent user-based policy enforcement across your network. User Context represents the next expansion of User-ID in a unified interface on the Cloud Identity Engine and presents actionable user identity information at a glance.

You can now monitor the status of the Cloud Identity Engine on the firewall associated with the Cloud Identity Engine tenant. For example, if a required certificate for the Cloud Identity Engine expires or a profile is unavailable, the firewall displays a message in the system logs. For more information, refer to Monitor Cloud Identity Engine Status in the Cloud Identity Engine Getting Started guide.