Harmony Endpoint Security Client E89.10 for Windows is now available as GA

[BarYassure]

Hi,

Check Point Harmony Endpoint Security Client E89.10 for Windows is now available as GA (General Availability). 

Main Enhancements:

• Performance & Stability:

  General performance and stability improvements across Anti-Bot, URL Filtering, Anti-Malware, and Threat Emulation Blades for a faster and more efficient user experience.

• Semi-Isolated Environments:
  Super Node Server now supports upstream proxy configuration.
  
  
• TE Appliance Load Balancing:
  When multiple Threat Emulation appliances are configured, the Endpoint client now intelligently distributes file emulation tasks across all available appliances. 
  This ensures optimal utilization and prevents load concentration on individual appliances.
  
  
• Threat Hunting:
  Threat Hunting data is now enriched with additional informationץ
  
  
• Troubleshooting Tool:
  “hepctrl.exe",  the debugging utility, now includes a new Interactive Mode that helps find the root cause faster and also includes automatic log collection.

End of Support:

• Capsule Docs:
  Capsule Docs reached its End of Support.
  To upgrade to E89.10 Windows with managed Capsule Docs, you must first uninstall Capsule Docs from the machine.
  
  
• Legacy Operating Systems:
  E89.10 is the last version to support the following Legacy Microsoft Operating Systems:
• Windows 7
• Windows 8
• Windows Server 2008  
• Windows Server 2012.

Please see sk183132 for the complete list of enhancements and resolved issues in this release.

Please feel free to reach out with any questions!

[the_rock]

Will install it tomorrow in the lab and update.

[the_rock]

Just installed it in the lab, so far, all good!

Hey @BarYassure Happy holidays to you and family, be well.

[Alex-]

One of our customers experienced complete disconnection of all clients to the Infinity EDR service, regardless of location, behind a firewall or not.

For those facing the issue, consider sk183612 - Hardening certificate validation in Harmony Endpoint for Windows E89.10, which immediately solved the issue.

[the_rock]

Goot to know Alex!

[lluner]

@BarYassure @the_rock @Alex- 

We have a problem here. Regarding the environment that uses WSUS, I don't know if Windows Update updates certificates. I believe we can use PowerShell to include this certificate chain in the clients. I'll test it and let you know here in the group.

[the_rock]

Might be worth TAC case to verify. I tested in the lab, connected to client's site, worked fine.

[joesternna]

All our pilot users upgraded to 89.10 have experienced the same issue: definition updates fail following the update until a manual "update now" from the HEP client followed by a reboot.

Until both those things (and not just a reboot) malware definition updates don't happen. The log doesn't show any failures, just an absence of Update events.

I'm stopping the rollout of 89.10 until we can figure out a way to correct this issue.

[lluner]

@joesternna 

I believe this problem is related to a version of Windows that lacks the certificate chain.

https://support.checkpoint.com/results/sk/sk183612

Which version of Windows are you using?