March 17, 2019

What's new in Knox 3.3?

Karen Castro

Pushing boundaries to enhance security and usability is Samsung’s newest Knox platform release—Knox 3.3.

This release includes Knox Verified boot, which now monitors and protects the boot process, in addition to Knox security built at a hardware level.

Highlights in this release:

  • Knox Verified Boot: new enhancements to harden and secure your device boot process.
  • Dual Data-at-Rest (DAR): dual encryption adds a layer of security for the Knox Workspace.
  • Samsung DeX: added options to manage Samsung DeX.
  • Analytics: enhancements to Network Platform Analytics (NPA).
  • VPN: functionality improvements to VPN.


Knox Verified Boot

Providing a more reliable Verified Boot State is Knox Verified Boot, which monitors and protects during the booting process in addition to Knox security built at a hardware level. Note that this feature is enabled by default on new devices released with Knox 3.3, but is unavailable to older devices with firmware updates to Knox 3.3.


Dual DAR

With single layer encryption, potential flaws in the implementation may result in a single point of failure. With Knox 3.3 comes dual encryption:

  • Two layers of encryption—Secure enterprise data with two layers of encryption, which provides protection to devices even while powered off or in an unauthenticated state.


Contact Storage Restrictions

  • Enterprise contact security—Restrict local contacts stored on enterprise devices to reduce the risk of losing contacts or becoming out of sync with enterprise contacts with Knox 3.3.


Knox on DeX

Samsung DeX now has a new feature to allow or restrict access using the Knox platform for added control and security.


Firewall updates

Knox 3.3 enhances permission management by enabling IT admins to block all IPs in a specified device while allowing specific domains to be allowlisted, even if the IPs were blocked using firewall policies.


VPN updates

  • Multi-app tunneling support—Enhance user experience when using VPN tunnels with the ability to connect with and start using business apps immediately after establishing a VPN tunnel.
  • Knox event and Android networking event synchronization—The Knox container seamlessly synchronizes with VPN by recognizing VPN client connection with no delay.


NPA updates

  • Gather analytics for long lasting network sessions—IT admins can now configure EMM-based NPA tools to efficiently collect network statistics while the network connection is ongoing.



Container Only Mode (COM) deprecation

Container Only Mode will be deprecated with the release of Galaxy S10 running Knox 3.3 or any device launched after.

NOTE—If you’re using COM/CL containers on a previous device, such as in the Galaxy S9 or S8, they will be supported until the end of life of the devices. See the bulletin notice for more information.

Learn more about this release by visiting the Knox features on Android.

[Icon] close

Get the right solution for your business

Join 25,000+ organizations around the world.

[Icon] suitcase
Are you a reseller or solution partner?

Get access to the Knox Partner Program for helpful partner tools, such as the Knox Deployment Program portal, Knox MSP portal, partner SDKs, and more.

[Icon] info
Unified Endpoint Management
Knox Suite
Rebranding and customization
Knox Configure
Fraud and theft protection
Knox Guard
Device protection plan
Samsung Care + for Business
Other products & services

Get started with

[Image] Knox Suite

All-in-one solution bundle for enterprise mobility.

[Icon] Check mark

Join us and get a 90-day free trial for Knox Suite and other Knox products. *Approval required

[Icon] Check mark

A complete set of tools to secure, deploy, manage, and analyze your enterprise's corporate mobile devices.

[Icon] Check mark

Try powerful features bundled with Knox Suite, such as Knox Remote Support.

Knox Suite include:

[Icon] Knox Platform for Enterprise Knox Platform for Enterprise
[Icon] Knox E-FOTA Knox E-FOTA
[Icon] Knox Mobile Enrollment Knox Mobile Enrollment
[Icon] Knox Asset Intelligence Knox Asset Intelligence
[Icon] knox manage Knox Manage
[Icon] knox capture Knox Capture

Get started with

[Image] Knox Configure Logo

Remotely configure Samsung devices in bulk and tailor them to specific needs, right out of the box.

[Icon] Check mark

After approval, you can try both the:

  • Setup edition — designed for a one-time deployment
  • Dynamic edition — deploy and update policies as many times without a factory reset.
[Icon] Check mark

Try either the Setup edition or Dynamic edition of Knox Configure on up to 30 devices.

[Icon] Check mark

Get a free Knox Suite trial upon approval to try our UEM.

Get started with

[Icon] Knox Guard Logo

Remotely control Samsung devices to reduce financial risks and protect assets.

[Icon] Check mark

After you get approved, generate your free trial license for 90 days.


Try all the features of Knox Guard on up to 30 devices, including SIM control and device locking.

[Icon] Check mark

Get a free Knox Suite trial upon approval to try our UEM.

Get started with

[Image] Samsung Care Plus For Business Logo

Protect your business devices against accidental damage and mechanical breakdowns.

[Icon] Check mark

Are you already a Samsung Care+ for Business customer? Create an account and access the Samsung Care+ for Business console.

[Icon] Check mark

Contact the Samsung sales team and get peace of mind for your devices.

Other products & services

[Image] Others logo
[Icon] Check mark

Samsung offers additional solutions to serve the unique needs of your business. Talk to a Samsung expert today.

Back to top