Check Point Endpoint Security Client E88.70 for Windows is now available

[Danielle_Allon]

Hi,

We are thrilled to announce that Check Point Harmony Endpoint Security Client E88.70 for Windows is now available as GA (General Availability)

Check out our new Demo here!

Main Enhancements:

 Substantial performance improvements 

• A series of performance optimizations have been introduced to Behavioral Guard and Forensics blade to improve overall system performance and significantly reduce CPU consumption.
• Tuned the DNS inspection feature to reduce CPU consumption as well as improve network load.  
• Behavioral Guard signatures are now loaded faster.

• Super Node functionality in Semi-isolated environments is now GA
• Super node status is now available in the Asset Management view on the portal.

• DNS inspection can now be controlled through the policy – added the ability to enable/disable the DNS inspection feature directly through the policy.

• DLP Enforcement by application – added the granularity to enforce DLP policy for GenAI applications per specific application. Admins can choose the required application out of hundreds supported applications.

• Display DLP policy name and version in the Browser extension pop-up – it is now possible to view the enforced policy name and version for DLP within the browser extension pop-up.

• Infinity IOC – enforcement of IOCs is now performed faster. In addition, admins can now easily access Infinity IOC directly from the Endpoint portal [Threat Prevention policy > Manage > Manage Infinity IOCs].

• Network URL Filtering- added to ability for users to dismiss the URL filtering alert and access block sites. This option uses the same setting as the Browser extension. For more details on the implementation logic as well as the configuration, please refer to the release notes.

• Forensics report now provide better visibility into the exact Registry location that triggered the detection

Please see sk182578 for the complete list of enhancements and resolved issues in this release.

Please feel free to reach out with any questions!

@BarYassure @AdiGH @Danielle_Allon 

[Evert_Kooter]

Hi,
Thank you for sharing.
Can you explain what the Default DNS Inspection mode does?

Evert.

[BarYassure]

Until now, you had no option to disable DNS.
Now you have 3 options:

1. On

2. Off

3. Default (it means that it will keep working as it was before upgrading to 88.70)

[the_rock]

Hey @Danielle_Allon 

I have a question. Does this version fix all the issues that happen few months ago when windows update 24H2 came out or that will be fixed with E89?

Im specifically referring to below sk. I know it says issue was fixed in E88.62, but I had couple customers had this problem even with that version.

Best,

Andy

https://support.checkpoint.com/results/sk/sk182749

[BarYassure]

Hi

Yes, it fixes those problems.
Those problems are also fixed with 88.62 (our new recommended version)

[the_rock]

K, awesome! Maybe that was just a "fluke" with 2 customers, but otherwise, no issues.

Andy

[the_rock]

I will say since they installed E88.70, no issues!

Andy

[BarYassure]

Great! 🙂

[the_rock]

Seems very stable so far!

[BarYassure]

Happy to hear so 🙂

[Alex_Silveiro]

Hi,

We have problems with the new version 88.70, many PCs have the anti-malware blade and threat extraction & emulation disabled in red.

Some PC's that were working correctly, are now showing this error. At the moment, after rebooting the PC it is working normally again.

There is a patch available.

[BarYassure]

Can you please send me the details over email? bary@checkpoint.com
I will investigate it

[skandshus]

Yep. seeing the exact same thing. rebooting makes it enable once again..

[helderalmeida]

It's happening here too. How did you fix it? After rebooting, the blades come up, but after while they are down again.

[Alex_Silveiro]

No, I still have the case open. This morning I had 112 devices  blade issues. I tried to repair the client and it dropped to 63. It later went up to 80, so it's not stable. For now, the reboot works if you don't turn off the device, just a 15-day crash. When the blade crashes, it reboots and you turn it back on. The problem comes with the devices that are turned off every day.

[skandshus]

wauw. that seems like a lot.

do you have any specific setup? using all blades? or only a few?

i hope this case has some high priority

[Alex_Silveiro]

All blades  for devices users. Almost all  crashes Windows 11 22H2.

[BarYassure]

Hi all
Please, if you have specific problems with 88.70 - please open a ticket first and than send the details to me personally (bary@checkpoint.com).
So far, we see huge success with this version, but we are 100% dedicated to solving all issues if they occur 

[the_rock]

Thanks for that @BarYassure 

[skandshus]

Im seeing this happen randomly across all computers.
please tell me you are seeing this across multiple customers?

[PhoneBoy]

To understand why this is occurring, we would need to see logs from the endpoint.
Suggest also opening a TAC case if you haven't already.

[skandshus]

i have already 🙂

Though im surprised this version even made it through quality control, i suspect having a broken Malware feature is quite a substantial issue, which im unsure how to handle. we have had many vpn issues on earlier version and "felt" forced to upgrade to this version. all we got not was less ressource usage but a broken endpoint product now.

[Eve_Z]

I also have a case open for this issue. TAC told us to test copying C:\Windows\SysWOW64\msvcr100.dll to C:\Program Files (x86)\CheckPoint\Endpoint Security\TPCommon\SQLite but this didn't solve the issue.

What worked for me was to install Visual C++ 2012 x86, then manually start CPFileAnlyz service or reboot the machine.

[the_rock]

Im still patiently waiting for E89 🙂

Andy

[lluner]

@BarYassure @AdiGH @Danielle_Allon  

We are having a problem with this version regarding Posture Management, a TAC 6-0004256849 has already been opened and so far there has been no interaction. I would like to ask for your help.

[the_rock]

Hey bro,

I would reach out to your local SE if its really urgent, IM sure they can help you out.

Andy

[lluner]

@the_rock 

I contacted the local SE and they informed me that there is a process that I did not understand regarding the issue of priority, even though the TAC was considered urgent.

SE local  said: the call was opened yesterday via the web, then this has an SLA even though it is high severity

[the_rock]

Just contact @BarYassure , since he was kind enough to provide his details, Im positive he can help. Btw, I would say for TAC case, as Chris mentioned, you can always escalate it through the UC portal.

Andy

[lluner]

@the_rock 

Thanks rocks. We have a contract with a CKP partner company that opens our calls, then I spoke to the local SE. He informed me that there is a process regarding calls with high priority that I was unaware of.

[the_rock]

Ok, thats totally fine. In that case, since its urgent, just have them call TAC and stress the urgency and ask if call can be organized to troubleshoot this.

Hope it gets solved soon.

Andy