An issue exists where the Prisma Access Agent on Android and iOS devices does not enforce the session timeout settings configured in the Agent configuration. When you configure specific session timeout values in your Agent settings, the Android and iOS agents fail to apply these predetermined timeout intervals and will use the default timeout value.

An issue exists where the embedded browser cookies are not cleared when users sign out of the Prisma Access Agent on Android devices that use the embedded browser for SAML authentication. When a user signs out of the agent, the system fails to properly clear the stored authentication cookies within the embedded browser, potentially leaving residual session data.

An issue exists where the Prisma Access Agent on iOS and Android allows users to sign out even when the Allow User to Sign Out Agent Setting is disabled. When you configure the agent to prevent users from signing out through the agent settings, the Prisma Access Agent app continues to display an active sign-out option that successfully logs the user out when selected.