Forums
New posts
Search forums
News
Security News
Technology News
Giveaways
Giveaways, Promotions and Contests
Discounts & Deals
Reviews
Users Reviews
Video Reviews
Support
Windows Malware Removal Help & Support
Inactive Support Threads
Mac Malware Removal Help & Support
Mobile Malware Removal Help & Support
Blog
Log in
Register
What's new
Search
Search titles only
By:
Search titles only
By:
Reply to thread
Menu
Install the app
Install
JavaScript is disabled. For a better experience, please enable JavaScript in your browser before proceeding.
You are using an out of date browser. It may not display this or other websites correctly.
You should upgrade or use an
alternative browser
.
Forums
Software
Security Apps
Other security for Windows, Mac, Linux
Harmony Endpoint Release Notes and Roadmaps
Message
<blockquote data-quote="Trident" data-source="post: 1078782" data-attributes="member: 99014"><p>Harmony Endpoint for Windows 88.10 released 03/03/24</p><table style='width: 100%'><tr><td>General</td><td></td></tr><tr><td>EPS-54795</td><td>Enhancement: The Client UI now sets the English language as the default if the provided LCID value corresponds to a language that is not officially supported.</td></tr><tr><td>EPS-55155</td><td>Enhancement: Performance improvements of the anti-tampering mechanism for network drives accessed by users.</td></tr><tr><td>Installation</td><td></td></tr><tr><td>EPS-54691</td><td>Enhancement: Endpoint Security Client installer now supports the Czech, Greek, Ukrainian, and Portuguese languages.</td></tr><tr><td>Anti-Ransomware, Behavioral Guard and Forensics</td><td></td></tr><tr><td>AHTP-29304,<br /> AHTP-29142</td><td>Enhancement: Improved remediation against persistent malware.</td></tr><tr><td>AHTP-29296,<br /> AHTP-29293</td><td>Enhancement: Improved the detection of malware masquerading.</td></tr><tr><td>AHTP-29486</td><td>Enhancement: Improved evasion techniques detections.</td></tr><tr><td>AHTP-29404</td><td>Enhancement: Improved the accuracy of wipers detection.</td></tr><tr><td>AHTP-29550</td><td>Enhancement: Improved the remediation process for detected DLLs.</td></tr><tr><td>AHTP-29268</td><td>Enhancement: Improved the detection of credentials theft.</td></tr><tr><td>AHTP-29726</td><td>Enhancement: Added support for advanced signatures.</td></tr><tr><td>AHTP-29117</td><td>Enhancement: Harmony Endpoint management now enforces a new Global policy if it is changed, and Endpoint Security Client applies URLS changes without a reboot.</td></tr><tr><td>AHTP-29251</td><td>Enhancement: Improved the detection of shadow copy creation.</td></tr><tr><td>Firewall and Application Control</td><td></td></tr><tr><td>EPS-54988</td><td>Enhancement: The VSMON process now speeds up the opening of listen sockets by 20% when dealing with high network loads, like those encountered by DNS servers.</td></tr><tr><td>Full Disk Encryption</td><td></td></tr><tr><td>EPS-54700</td><td>Enhancement: Wi-Fi card for the Lenovo L14 Generation 3 is now supported in FDE Smart Pre-boot (EA feature).</td></tr><tr><td>Threat Emulation and Anti-Exploit</td><td></td></tr><tr><td>AHTP-28892</td><td>Enhancement: The <em>TESvc</em> service is now renamed to <em>CPFileAnlyz</em> (Check Point Endpoint Security File Analyzer).</td></tr></table><h2></h2> <h2>List of Resolved Issues in E88.10 for Windows </h2><p></p><p></p><table style='width: 100%'><tr><td>ID</td><td>Description</td></tr><tr><td>General</td><td></td></tr><tr><td>EPS-54868</td><td>The "<em>Invalid file path</em>" error is displayed when entering non-ASCII characters in the path for the copying/moving file action in Push Operations.</td></tr><tr><td>EPS-54453</td><td>The remote push operation utilizes PowerShell x86 on 64-bit systems, causing some commands exclusive to the 64-bit version to malfunction.</td></tr><tr><td>AHTP-29676</td><td>Remediation Management cannot restore files when the restored file path is longer than 260 characters.</td></tr><tr><td>Installation</td><td></td></tr><tr><td>EPS-54879</td><td>The Client may request a reboot during active deployment.</td></tr><tr><td>Anti-Malware E1</td><td></td></tr><tr><td>EPS-53603</td><td>Anti-Malware E1 Behavioral Monitor does not start, and the blade status is "Error".</td></tr><tr><td>Anti-Malware E2 (US-DHS and EU compliant)</td><td></td></tr><tr><td>AHTP-29656</td><td>The "Reputation Service" feature of Anti-Malware E2 may not work, if there is more than one active network device and each device has a different DNS address. </td></tr><tr><td>Anti-Ransomware, Behavioral Guard and Forensics</td><td></td></tr><tr><td>AHTP-29507</td><td>In the <em>EFRService</em> log, there are multiple errors about R<em>emediationConfig.xml</em>, when Registry Remediation detections appear as working.</td></tr><tr><td>AHTP-29021</td><td>The EFRService process may consume 100% of CPU.</td></tr><tr><td>AHTP-29724</td><td>There may be wrong incident Status and Remediation in the Forensics report in Detect mode incidents.</td></tr><tr><td>AHTP-29456</td><td>In NGAV logs, there may be many detections of amsibypass and exceptions related to amsibypass indicator match.</td></tr><tr><td>AHTP-29457</td><td>The <em>LK_FileOp</em> table may not indicate the "mount" flag for some operations.</td></tr><tr><td>Firewall and Application Control</td><td></td></tr><tr><td>EPS-54964</td><td>Developer Protection fails to display alerts when committing sensitive information using x64 bit process.</td></tr><tr><td>Media Encryption and Port protection</td><td></td></tr><tr><td>EPS-54943</td><td>When running media encryption authorization scanning on a newly encrypted volume that is empty, the error "Not all files could be scanned" may be displayed. If this occurs, a possible workaround is to either reformat the encrypted volume or access it on another machine.</td></tr><tr><td>Threat Emulation and Anti-Exploit</td><td></td></tr><tr><td>AHTP-29492</td><td>When the Threat Emulation Blade is configured as "Off" in policy, the <em>CPFileAnalyze</em>service may report an error that the Threat Emulation blade is "<em>Not Available</em>". This is a cosmetic issue.</td></tr></table></blockquote><p></p>
[QUOTE="Trident, post: 1078782, member: 99014"] Harmony Endpoint for Windows 88.10 released 03/03/24 [TABLE] [TR] [TD]General[/TD] [TD][/TD] [/TR] [TR] [TD]EPS-54795[/TD] [TD]Enhancement: The Client UI now sets the English language as the default if the provided LCID value corresponds to a language that is not officially supported.[/TD] [/TR] [TR] [TD]EPS-55155[/TD] [TD]Enhancement: Performance improvements of the anti-tampering mechanism for network drives accessed by users.[/TD] [/TR] [TR] [TD]Installation[/TD] [TD][/TD] [/TR] [TR] [TD]EPS-54691[/TD] [TD]Enhancement: Endpoint Security Client installer now supports the Czech, Greek, Ukrainian, and Portuguese languages.[/TD] [/TR] [TR] [TD]Anti-Ransomware, Behavioral Guard and Forensics[/TD] [TD][/TD] [/TR] [TR] [TD]AHTP-29304, AHTP-29142[/TD] [TD]Enhancement: Improved remediation against persistent malware.[/TD] [/TR] [TR] [TD]AHTP-29296, AHTP-29293[/TD] [TD]Enhancement: Improved the detection of malware masquerading.[/TD] [/TR] [TR] [TD]AHTP-29486[/TD] [TD]Enhancement: Improved evasion techniques detections.[/TD] [/TR] [TR] [TD]AHTP-29404[/TD] [TD]Enhancement: Improved the accuracy of wipers detection.[/TD] [/TR] [TR] [TD]AHTP-29550[/TD] [TD]Enhancement: Improved the remediation process for detected DLLs.[/TD] [/TR] [TR] [TD]AHTP-29268[/TD] [TD]Enhancement: Improved the detection of credentials theft.[/TD] [/TR] [TR] [TD]AHTP-29726[/TD] [TD]Enhancement: Added support for advanced signatures.[/TD] [/TR] [TR] [TD]AHTP-29117[/TD] [TD]Enhancement: Harmony Endpoint management now enforces a new Global policy if it is changed, and Endpoint Security Client applies URLS changes without a reboot.[/TD] [/TR] [TR] [TD]AHTP-29251[/TD] [TD]Enhancement: Improved the detection of shadow copy creation.[/TD] [/TR] [TR] [TD]Firewall and Application Control[/TD] [TD][/TD] [/TR] [TR] [TD]EPS-54988[/TD] [TD]Enhancement: The VSMON process now speeds up the opening of listen sockets by 20% when dealing with high network loads, like those encountered by DNS servers.[/TD] [/TR] [TR] [TD]Full Disk Encryption[/TD] [TD][/TD] [/TR] [TR] [TD]EPS-54700[/TD] [TD]Enhancement: Wi-Fi card for the Lenovo L14 Generation 3 is now supported in FDE Smart Pre-boot (EA feature).[/TD] [/TR] [TR] [TD]Threat Emulation and Anti-Exploit[/TD] [TD][/TD] [/TR] [TR] [TD]AHTP-28892[/TD] [TD]Enhancement: The [I]TESvc[/I] service is now renamed to [I]CPFileAnlyz[/I] (Check Point Endpoint Security File Analyzer).[/TD] [/TR] [/TABLE] [HEADING=1] List of Resolved Issues in E88.10 for Windows [/HEADING] [TABLE] [TR] [TD]ID[/TD] [TD]Description[/TD] [/TR] [TR] [TD]General[/TD] [TD][/TD] [/TR] [TR] [TD]EPS-54868[/TD] [TD]The "[I]Invalid file path[/I]" error is displayed when entering non-ASCII characters in the path for the copying/moving file action in Push Operations.[/TD] [/TR] [TR] [TD]EPS-54453[/TD] [TD]The remote push operation utilizes PowerShell x86 on 64-bit systems, causing some commands exclusive to the 64-bit version to malfunction.[/TD] [/TR] [TR] [TD]AHTP-29676[/TD] [TD]Remediation Management cannot restore files when the restored file path is longer than 260 characters.[/TD] [/TR] [TR] [TD]Installation[/TD] [TD][/TD] [/TR] [TR] [TD]EPS-54879[/TD] [TD]The Client may request a reboot during active deployment.[/TD] [/TR] [TR] [TD]Anti-Malware E1[/TD] [TD][/TD] [/TR] [TR] [TD]EPS-53603[/TD] [TD]Anti-Malware E1 Behavioral Monitor does not start, and the blade status is "Error".[/TD] [/TR] [TR] [TD]Anti-Malware E2 (US-DHS and EU compliant)[/TD] [TD][/TD] [/TR] [TR] [TD]AHTP-29656[/TD] [TD]The "Reputation Service" feature of Anti-Malware E2 may not work, if there is more than one active network device and each device has a different DNS address. [/TD] [/TR] [TR] [TD]Anti-Ransomware, Behavioral Guard and Forensics[/TD] [TD][/TD] [/TR] [TR] [TD]AHTP-29507[/TD] [TD]In the [I]EFRService[/I] log, there are multiple errors about R[I]emediationConfig.xml[/I], when Registry Remediation detections appear as working.[/TD] [/TR] [TR] [TD]AHTP-29021[/TD] [TD]The EFRService process may consume 100% of CPU.[/TD] [/TR] [TR] [TD]AHTP-29724[/TD] [TD]There may be wrong incident Status and Remediation in the Forensics report in Detect mode incidents.[/TD] [/TR] [TR] [TD]AHTP-29456[/TD] [TD]In NGAV logs, there may be many detections of amsibypass and exceptions related to amsibypass indicator match.[/TD] [/TR] [TR] [TD]AHTP-29457[/TD] [TD]The [I]LK_FileOp[/I] table may not indicate the "mount" flag for some operations.[/TD] [/TR] [TR] [TD]Firewall and Application Control[/TD] [TD][/TD] [/TR] [TR] [TD]EPS-54964[/TD] [TD]Developer Protection fails to display alerts when committing sensitive information using x64 bit process.[/TD] [/TR] [TR] [TD]Media Encryption and Port protection[/TD] [TD][/TD] [/TR] [TR] [TD]EPS-54943[/TD] [TD]When running media encryption authorization scanning on a newly encrypted volume that is empty, the error "Not all files could be scanned" may be displayed. If this occurs, a possible workaround is to either reformat the encrypted volume or access it on another machine.[/TD] [/TR] [TR] [TD]Threat Emulation and Anti-Exploit[/TD] [TD][/TD] [/TR] [TR] [TD]AHTP-29492[/TD] [TD]When the Threat Emulation Blade is configured as "Off" in policy, the [I]CPFileAnalyze[/I]service may report an error that the Threat Emulation blade is "[I]Not Available[/I]". This is a cosmetic issue.[/TD] [/TR] [/TABLE] [/QUOTE]
Insert quotes…
Verification
Post reply
Top