diff --git a/NEWS b/NEWS
index 42af2d37f..a50a58042 100644
--- a/NEWS
+++ b/NEWS
@@ -1,3 +1,8 @@
+- The whitelist plugin for the IKEv2 daemon maintains an in-memory identity
+  whitelist. Any connection attempt of peers not whitelisted will get rejected.
+  The 'ipsec whitelist' utility provides a simple command line frontend for
+  whitelist administration.
+
 strongswan-4.5.1
 ----------------