Forums
New posts
Search forums
News
Security News
Technology News
Giveaways
Giveaways, Promotions and Contests
Discounts & Deals
Reviews
Users Reviews
Video Reviews
Support
Windows Malware Removal Help & Support
Inactive Support Threads
Mac Malware Removal Help & Support
Mobile Malware Removal Help & Support
Blog
Log in
Register
What's new
Search
Search titles only
By:
Search titles only
By:
Reply to thread
Menu
Install the app
Install
JavaScript is disabled. For a better experience, please enable JavaScript in your browser before proceeding.
You are using an out of date browser. It may not display this or other websites correctly.
You should upgrade or use an
alternative browser
.
Forums
Software
Security Apps
Other security for Windows, Mac, Linux
Harmony Endpoint Release Notes and Roadmaps
Message
<blockquote data-quote="Trident" data-source="post: 1072867" data-attributes="member: 99014"><p>Harmony Endpoint 88.00 released 22 Jan 2024</p><p></p><h2>List of New Features and Enhancements in E88.00 for Windows</h2> <table style='width: 100%'><tr><td>ID</td><td>Description</td></tr><tr><td>Installation</td><td></td></tr><tr><td>EPS-53476,<br /> EPS-52966,<br /> EPS-53474,<br /> EPS-53475</td><td>Enhancement: Endpoint Client now supports Windows 11 with Smart App Control on also when the machine is offline.</td></tr><tr><td>General</td><td></td></tr><tr><td>EPS-53326</td><td>Enhancement: Harmony Endpoint now sends hardware info to the Server.</td></tr><tr><td>EPS-52855</td><td>Enhancement: Harmony Endpoint now supports Azure Active Directory Domain Services.</td></tr><tr><td>EPS-53824</td><td>Enhancement: Harmony Endpoint now supports uninstalling Trellix (as part of McAfee product). It can be done using the "<em>REMOVEPRODUCTS</em>" parameter.</td></tr><tr><td>EPS-53568</td><td>Enhancement: Harmony Endpoint now supports Quarantine Management with the external Server API. </td></tr><tr><td>EPS-54298</td><td>Enhancement: Date format now consists of three letters of the month, followed by the day, year and time. For example, Oct 5, 2023 2:47 PM.</td></tr><tr><td>Anti-Malware E1</td><td></td></tr><tr><td>EPS-52360,<br /> EPS-52427</td><td>Enhancement: Anti-Malware E1 license is now updated automatically also on VDI and in Super Node environments.</td></tr><tr><td>Anti-Malware E2 (US-DHS and EU compliant)</td><td></td></tr><tr><td>AHTP-28464</td><td>Enhancement: The Anti-Malware E2 Blade now supports critical area scans.</td></tr><tr><td>Anti-Ransomware, Behavioral Guard and Forensics</td><td></td></tr><tr><td>AHTP-28985</td><td>Enhancement: Expanded Windows component monitoring, which translates to enhanced protection.</td></tr><tr><td>AHTP-28394</td><td>Enhancement: When detection occurs, the reports to Threat Hunting are now sent faster.</td></tr><tr><td>AHTP-29022,<br /> AHTP-29212</td><td>Enhancement: Performances improvements for advanced signatures.</td></tr><tr><td>AHTP-29511</td><td>Enhancement: Improved injections logic for better detections of malicious operations.</td></tr><tr><td>AHTP-28670</td><td>Enhancement: Improved the protections against advanced malware.</td></tr><tr><td>AHTP-29063</td><td>Enhancement: Silent signatures for leads are no longer forwarded to Threat Hunting to minimize the risk of the user confusing them with actual attacks.</td></tr><tr><td>EPS-51193</td><td>Enhancement: Improved the AMSI exclusion mechanism.</td></tr><tr><td>AHTP-29002</td><td>Enhancement: Improved the AMSI performance on Exchange Servers.</td></tr><tr><td>AHTP-29125</td><td>Enhancement: Behavioral Guard and Forensic Blade now better exclude specific processes and their associated subprocesses, improving analysis focus and streamlining the monitoring process.</td></tr><tr><td> EPS-53174,<br /> AHTP-29535</td><td>Enhancement: Improved Behavioral analysis by scanning of event related data blocks.</td></tr><tr><td>Compliance and Posture</td><td></td></tr><tr><td>EPS-54676</td><td>Enhancement: Improvement in the Posture Management Installation rate.</td></tr><tr><td>Firewall and Application Control</td><td></td></tr><tr><td>EPS-52605</td><td>Enhancement: Application Control Custom Rules evaluation is optimized for performance.</td></tr><tr><td>Full Disk Encryption</td><td></td></tr><tr><td>EPS-53212</td><td>Enhancement: Updated the Full Disk Encryption Smart Pre-boot Wi-Fi drivers.</td></tr><tr><td>EPS-53782</td><td>Enhancement: The Full Disk Encryption Blade now supports users from Microsoft Entra ID, previously known as Azure Active Directory. Some limitations regarding FDE Preboot password synchronization apply.</td></tr><tr><td>EPS-52436</td><td>Enhancement: Full Disk Encryption Preboot now supports longer user names (up to 64 symbols) and passwords (up to 256 symbols), removing the previous 31-symbol limit. This change applies to user credential fields in both FDE Preboot and the FDE Recovery Tool.</td></tr><tr><td>Browser Extension</td><td></td></tr><tr><td></td><td></td></tr><tr><td>AHTP-29380</td><td>Enhancement: Added browser-based Data Leak Prevention (DLP) capability for Early Availability (EA) customers. In the initial phase, when the browser extension is activated, security is enhanced through the scanning of both uploaded and downloaded files.</td></tr><tr><td>Remote Access VPN</td><td></td></tr><tr><td>ESVPN-3888</td><td>Enhancement: VPN blade of Endpoint Security now shows Office Mode IP as Client IP address in main client window for clients that support Office Mode.</td></tr></table><h2></h2> <h2>List of Resolved Issues in E88.00 for Windows </h2><p></p><table style='width: 100%'><tr><td>ID</td><td>Description</td></tr><tr><td>Installation</td><td></td></tr><tr><td>EPS-53622</td><td>When running Nano-agent installer with the "<em>/s</em>" flag, the initial client installer UI is shown during the installation.</td></tr><tr><td>EPS-54477</td><td>Full package MSI upgrade from versions below E83.00 is not supported.</td></tr><tr><td>General</td><td></td></tr><tr><td>EPS-54441</td><td>In some scenarios, AD Scanner cannot enumerate large groups.</td></tr><tr><td>EPS-32426</td><td>Special characters ('<>"&\/) are not supported in AD Scanner passwords.</td></tr><tr><td>AHTP-29120</td><td>The NGAV log may be empty.</td></tr><tr><td>EPS-52952</td><td>Copy button in the Threat Emulation/Anti-Malware incident details table does not respond.</td></tr><tr><td>Anti-Malware E1</td><td></td></tr><tr><td>EPS-54112</td><td>During uninstallation/upgrade the Anti-Malware Blade E1 may not be registered correctly with Windows Security Center (WSC), so WSC may have several registrations.</td></tr><tr><td>EPS-50241</td><td>The Anti-Malware E1 Blade may be stuck in "Initializing" state, when the Anti-Malware Blade is turned off in the policy.</td></tr><tr><td>EPS-52315</td><td>The Anti-Malware E1 Blade may get stuck on shutdown during an upgrade, which may result in Endpoint upgrade failure and machine freeze.</td></tr><tr><td>EPS-52339</td><td>When Anti-Malware E1 license is expired, the new license may not be updated until the next signatures update.</td></tr><tr><td>EPS-52525</td><td>Anti-Malware E1 may fail to update signatures when the blade is short of free memory.</td></tr><tr><td>EPS-53102</td><td>Anti-Malware E1: Potential denial of service vulnerability on Harmony Endpoint processes.</td></tr><tr><td>EPS-53441</td><td>Anti-Malware E1: "Contextual Scan" is paused, although the computer is not idle.</td></tr><tr><td>Anti-Malware E2 (US-DHS and EU compliant)</td><td></td></tr><tr><td>AHTP-28860</td><td>The Anti-Malware Blade E2 may appear as OFF in the UI while it is actually running.</td></tr><tr><td>Anti-Ransomware, Behavioral Guard and Forensics</td><td></td></tr><tr><td>AHTP-29115</td><td>Sending to Threat Hunting fails with the access error to dispose the object. </td></tr><tr><td>EPS-53515</td><td>QuestaSim compilation fails when the Forensics blade is enabled .</td></tr><tr><td>AHTP-28841</td><td>The EfrService process can frequently exit with dump files.</td></tr><tr><td>AHTP-29176</td><td>The EfrService process may exit with the "<em>CorruptedDB: SQL exception (code 19): SQLITE_CONSTRAINT[19]: FOREIGN KEY constraint failed</em>" error printed in the log.</td></tr><tr><td>EPS-53308</td><td>Corrupt databases may not be deleted which affects the internal storage space.</td></tr><tr><td>EPS-54422</td><td>In rare scenarios, the Forensics Blade may not update the exclusion lists of sensors when applying a new policy.</td></tr><tr><td>AHTP-29344</td><td>Purging Forensic database fails with the "<em>SQL exception (code 19)</em>" error.</td></tr><tr><td>AHTP-29219</td><td>The forensics process may crash cause system instability.</td></tr><tr><td>AHTP-29454</td><td>During the database operations, the EfrService process may frequently exit.</td></tr><tr><td>EPS-54741</td><td>After a OS upgrade from Win 11 22H2 to 23H2, CPU usage of the EfrService may be very high (30-50%) for a few hours.</td></tr><tr><td>AHTP-29136</td><td>The<em> WmiPrvSE.exe</em> process creates a dump during OS startup if Endpoint client is installed (with Harmony Browse and Anti-Malware DHS blades only).</td></tr><tr><td>EPS-53266</td><td>Changing the icon visibility may not be applied.</td></tr><tr><td>AHTP-29162</td><td>Even after reboot, the EfrService process continues to utilize approximately twenty percent of the CPU.</td></tr><tr><td>Compliance and Posture</td><td></td></tr><tr><td>EPS-53647</td><td>When running the <em>.exe</em> file of a patch in the command line, may not return any output, although a menu should appear.</td></tr><tr><td>Full Disk Encryption</td><td></td></tr><tr><td>EPS-53550</td><td>Uninstalling Full Disk Encryption fails with "<em>Error 27118. Full Disk Encryption cannot be uninstalled while encryption is active</em>".</td></tr><tr><td>Media Encryption and Port protection</td><td></td></tr><tr><td>EPS-42632</td><td>The MEPP service may crash after an upgrade.</td></tr><tr><td>EPS-53823</td><td>BSOD may occur when blocking Bluetooth devices with Dell Pair software installed.</td></tr><tr><td>Remote Access VPN</td><td></td></tr><tr><td>ESVPN-3989</td><td>Machine authentication may fail with the "<em>Internal Error</em>" message if the Data Integrity algorithm is set to SHA-256.</td></tr><tr><td>ESVPN-4058</td><td>During the Secure Domain login, VPN client may not display certificates from Yubikey device when it is installed together with UUIC Reader/eSIM.</td></tr><tr><td>ESVPN-4051</td><td>Potential memory leakage in VPN UI.</td></tr><tr><td>ESVPN-4130</td><td>While selecting the OTP delivery method, it is necessary to enter the digit “1” or “2” with the leading space. Without a leading space, the response is not sent to the RADIUS Server.</td></tr></table></blockquote><p></p>
[QUOTE="Trident, post: 1072867, member: 99014"] Harmony Endpoint 88.00 released 22 Jan 2024 [HEADING=1]List of New Features and Enhancements in E88.00 for Windows[/HEADING] [TABLE] [TR] [TD]ID[/TD] [TD]Description[/TD] [/TR] [TR] [TD]Installation[/TD] [TD][/TD] [/TR] [TR] [TD]EPS-53476, EPS-52966, EPS-53474, EPS-53475[/TD] [TD]Enhancement: Endpoint Client now supports Windows 11 with Smart App Control on also when the machine is offline.[/TD] [/TR] [TR] [TD]General[/TD] [TD][/TD] [/TR] [TR] [TD]EPS-53326[/TD] [TD]Enhancement: Harmony Endpoint now sends hardware info to the Server.[/TD] [/TR] [TR] [TD]EPS-52855[/TD] [TD]Enhancement: Harmony Endpoint now supports Azure Active Directory Domain Services.[/TD] [/TR] [TR] [TD]EPS-53824[/TD] [TD]Enhancement: Harmony Endpoint now supports uninstalling Trellix (as part of McAfee product). It can be done using the "[I]REMOVEPRODUCTS[/I]" parameter.[/TD] [/TR] [TR] [TD]EPS-53568[/TD] [TD]Enhancement: Harmony Endpoint now supports Quarantine Management with the external Server API. [/TD] [/TR] [TR] [TD]EPS-54298[/TD] [TD]Enhancement: Date format now consists of three letters of the month, followed by the day, year and time. For example, Oct 5, 2023 2:47 PM.[/TD] [/TR] [TR] [TD]Anti-Malware E1[/TD] [TD][/TD] [/TR] [TR] [TD]EPS-52360, EPS-52427[/TD] [TD]Enhancement: Anti-Malware E1 license is now updated automatically also on VDI and in Super Node environments.[/TD] [/TR] [TR] [TD]Anti-Malware E2 (US-DHS and EU compliant)[/TD] [TD][/TD] [/TR] [TR] [TD]AHTP-28464[/TD] [TD]Enhancement: The Anti-Malware E2 Blade now supports critical area scans.[/TD] [/TR] [TR] [TD]Anti-Ransomware, Behavioral Guard and Forensics[/TD] [TD][/TD] [/TR] [TR] [TD]AHTP-28985[/TD] [TD]Enhancement: Expanded Windows component monitoring, which translates to enhanced protection.[/TD] [/TR] [TR] [TD]AHTP-28394[/TD] [TD]Enhancement: When detection occurs, the reports to Threat Hunting are now sent faster.[/TD] [/TR] [TR] [TD]AHTP-29022, AHTP-29212[/TD] [TD]Enhancement: Performances improvements for advanced signatures.[/TD] [/TR] [TR] [TD]AHTP-29511[/TD] [TD]Enhancement: Improved injections logic for better detections of malicious operations.[/TD] [/TR] [TR] [TD]AHTP-28670[/TD] [TD]Enhancement: Improved the protections against advanced malware.[/TD] [/TR] [TR] [TD]AHTP-29063[/TD] [TD]Enhancement: Silent signatures for leads are no longer forwarded to Threat Hunting to minimize the risk of the user confusing them with actual attacks.[/TD] [/TR] [TR] [TD]EPS-51193[/TD] [TD]Enhancement: Improved the AMSI exclusion mechanism.[/TD] [/TR] [TR] [TD]AHTP-29002[/TD] [TD]Enhancement: Improved the AMSI performance on Exchange Servers.[/TD] [/TR] [TR] [TD]AHTP-29125[/TD] [TD]Enhancement: Behavioral Guard and Forensic Blade now better exclude specific processes and their associated subprocesses, improving analysis focus and streamlining the monitoring process.[/TD] [/TR] [TR] [TD] EPS-53174, AHTP-29535[/TD] [TD]Enhancement: Improved Behavioral analysis by scanning of event related data blocks.[/TD] [/TR] [TR] [TD]Compliance and Posture[/TD] [TD][/TD] [/TR] [TR] [TD]EPS-54676[/TD] [TD]Enhancement: Improvement in the Posture Management Installation rate.[/TD] [/TR] [TR] [TD]Firewall and Application Control[/TD] [TD][/TD] [/TR] [TR] [TD]EPS-52605[/TD] [TD]Enhancement: Application Control Custom Rules evaluation is optimized for performance.[/TD] [/TR] [TR] [TD]Full Disk Encryption[/TD] [TD][/TD] [/TR] [TR] [TD]EPS-53212[/TD] [TD]Enhancement: Updated the Full Disk Encryption Smart Pre-boot Wi-Fi drivers.[/TD] [/TR] [TR] [TD]EPS-53782[/TD] [TD]Enhancement: The Full Disk Encryption Blade now supports users from Microsoft Entra ID, previously known as Azure Active Directory. Some limitations regarding FDE Preboot password synchronization apply.[/TD] [/TR] [TR] [TD]EPS-52436[/TD] [TD]Enhancement: Full Disk Encryption Preboot now supports longer user names (up to 64 symbols) and passwords (up to 256 symbols), removing the previous 31-symbol limit. This change applies to user credential fields in both FDE Preboot and the FDE Recovery Tool.[/TD] [/TR] [TR] [TD]Browser Extension[/TD] [TD][/TD] [/TR] [TR] [TD][/TD] [TD][/TD] [/TR] [TR] [TD]AHTP-29380[/TD] [TD]Enhancement: Added browser-based Data Leak Prevention (DLP) capability for Early Availability (EA) customers. In the initial phase, when the browser extension is activated, security is enhanced through the scanning of both uploaded and downloaded files.[/TD] [/TR] [TR] [TD]Remote Access VPN[/TD] [TD][/TD] [/TR] [TR] [TD]ESVPN-3888[/TD] [TD]Enhancement: VPN blade of Endpoint Security now shows Office Mode IP as Client IP address in main client window for clients that support Office Mode.[/TD] [/TR] [/TABLE] [HEADING=1] List of Resolved Issues in E88.00 for Windows [/HEADING] [TABLE] [TR] [TD]ID[/TD] [TD]Description[/TD] [/TR] [TR] [TD]Installation[/TD] [TD][/TD] [/TR] [TR] [TD]EPS-53622[/TD] [TD]When running Nano-agent installer with the "[I]/s[/I]" flag, the initial client installer UI is shown during the installation.[/TD] [/TR] [TR] [TD]EPS-54477[/TD] [TD]Full package MSI upgrade from versions below E83.00 is not supported.[/TD] [/TR] [TR] [TD]General[/TD] [TD][/TD] [/TR] [TR] [TD]EPS-54441[/TD] [TD]In some scenarios, AD Scanner cannot enumerate large groups.[/TD] [/TR] [TR] [TD]EPS-32426[/TD] [TD]Special characters ('<>"&\/) are not supported in AD Scanner passwords.[/TD] [/TR] [TR] [TD]AHTP-29120[/TD] [TD]The NGAV log may be empty.[/TD] [/TR] [TR] [TD]EPS-52952[/TD] [TD]Copy button in the Threat Emulation/Anti-Malware incident details table does not respond.[/TD] [/TR] [TR] [TD]Anti-Malware E1[/TD] [TD][/TD] [/TR] [TR] [TD]EPS-54112[/TD] [TD]During uninstallation/upgrade the Anti-Malware Blade E1 may not be registered correctly with Windows Security Center (WSC), so WSC may have several registrations.[/TD] [/TR] [TR] [TD]EPS-50241[/TD] [TD]The Anti-Malware E1 Blade may be stuck in "Initializing" state, when the Anti-Malware Blade is turned off in the policy.[/TD] [/TR] [TR] [TD]EPS-52315[/TD] [TD]The Anti-Malware E1 Blade may get stuck on shutdown during an upgrade, which may result in Endpoint upgrade failure and machine freeze.[/TD] [/TR] [TR] [TD]EPS-52339[/TD] [TD]When Anti-Malware E1 license is expired, the new license may not be updated until the next signatures update.[/TD] [/TR] [TR] [TD]EPS-52525[/TD] [TD]Anti-Malware E1 may fail to update signatures when the blade is short of free memory.[/TD] [/TR] [TR] [TD]EPS-53102[/TD] [TD]Anti-Malware E1: Potential denial of service vulnerability on Harmony Endpoint processes.[/TD] [/TR] [TR] [TD]EPS-53441[/TD] [TD]Anti-Malware E1: "Contextual Scan" is paused, although the computer is not idle.[/TD] [/TR] [TR] [TD]Anti-Malware E2 (US-DHS and EU compliant)[/TD] [TD][/TD] [/TR] [TR] [TD]AHTP-28860[/TD] [TD]The Anti-Malware Blade E2 may appear as OFF in the UI while it is actually running.[/TD] [/TR] [TR] [TD]Anti-Ransomware, Behavioral Guard and Forensics[/TD] [TD][/TD] [/TR] [TR] [TD]AHTP-29115[/TD] [TD]Sending to Threat Hunting fails with the access error to dispose the object. [/TD] [/TR] [TR] [TD]EPS-53515[/TD] [TD]QuestaSim compilation fails when the Forensics blade is enabled .[/TD] [/TR] [TR] [TD]AHTP-28841[/TD] [TD]The EfrService process can frequently exit with dump files.[/TD] [/TR] [TR] [TD]AHTP-29176[/TD] [TD]The EfrService process may exit with the "[I]CorruptedDB: SQL exception (code 19): SQLITE_CONSTRAINT[19]: FOREIGN KEY constraint failed[/I]" error printed in the log.[/TD] [/TR] [TR] [TD]EPS-53308[/TD] [TD]Corrupt databases may not be deleted which affects the internal storage space.[/TD] [/TR] [TR] [TD]EPS-54422[/TD] [TD]In rare scenarios, the Forensics Blade may not update the exclusion lists of sensors when applying a new policy.[/TD] [/TR] [TR] [TD]AHTP-29344[/TD] [TD]Purging Forensic database fails with the "[I]SQL exception (code 19)[/I]" error.[/TD] [/TR] [TR] [TD]AHTP-29219[/TD] [TD]The forensics process may crash cause system instability.[/TD] [/TR] [TR] [TD]AHTP-29454[/TD] [TD]During the database operations, the EfrService process may frequently exit.[/TD] [/TR] [TR] [TD]EPS-54741[/TD] [TD]After a OS upgrade from Win 11 22H2 to 23H2, CPU usage of the EfrService may be very high (30-50%) for a few hours.[/TD] [/TR] [TR] [TD]AHTP-29136[/TD] [TD]The[I] WmiPrvSE.exe[/I] process creates a dump during OS startup if Endpoint client is installed (with Harmony Browse and Anti-Malware DHS blades only).[/TD] [/TR] [TR] [TD]EPS-53266[/TD] [TD]Changing the icon visibility may not be applied.[/TD] [/TR] [TR] [TD]AHTP-29162[/TD] [TD]Even after reboot, the EfrService process continues to utilize approximately twenty percent of the CPU.[/TD] [/TR] [TR] [TD]Compliance and Posture[/TD] [TD][/TD] [/TR] [TR] [TD]EPS-53647[/TD] [TD]When running the [I].exe[/I] file of a patch in the command line, may not return any output, although a menu should appear.[/TD] [/TR] [TR] [TD]Full Disk Encryption[/TD] [TD][/TD] [/TR] [TR] [TD]EPS-53550[/TD] [TD]Uninstalling Full Disk Encryption fails with "[I]Error 27118. Full Disk Encryption cannot be uninstalled while encryption is active[/I]".[/TD] [/TR] [TR] [TD]Media Encryption and Port protection[/TD] [TD][/TD] [/TR] [TR] [TD]EPS-42632[/TD] [TD]The MEPP service may crash after an upgrade.[/TD] [/TR] [TR] [TD]EPS-53823[/TD] [TD]BSOD may occur when blocking Bluetooth devices with Dell Pair software installed.[/TD] [/TR] [TR] [TD]Remote Access VPN[/TD] [TD][/TD] [/TR] [TR] [TD]ESVPN-3989[/TD] [TD]Machine authentication may fail with the "[I]Internal Error[/I]" message if the Data Integrity algorithm is set to SHA-256.[/TD] [/TR] [TR] [TD]ESVPN-4058[/TD] [TD]During the Secure Domain login, VPN client may not display certificates from Yubikey device when it is installed together with UUIC Reader/eSIM.[/TD] [/TR] [TR] [TD]ESVPN-4051[/TD] [TD]Potential memory leakage in VPN UI.[/TD] [/TR] [TR] [TD]ESVPN-4130[/TD] [TD]While selecting the OTP delivery method, it is necessary to enter the digit “1” or “2” with the leading space. Without a leading space, the response is not sent to the RADIUS Server.[/TD] [/TR] [/TABLE] [/QUOTE]
Insert quotes…
Verification
Post reply
Top
