Important:

• Starting from E80.85, SandBlast Agent improves coverage of malicious threats by sending anonymized Incident related data to the Check Point Threat Cloud. This feature is turned on by default. For more information, including how to disable this feature, refer to sk129753.

• To support SmartLog or SmartView Tracker reporting with Endpoint Security Clients for all supported servers (except R80.20), you must update the log schema. Follow instructions in sk106662.

Endpoint Security E84.00 Clients

Platform	Package	Description	Link
Windows	E84.00 Endpoint Security Clients for Windows OS - Dynamic package	Complete Endpoint Security Client for any CPU (32bit or 64bit). This is a self-extracting executable EXE file with all components (Blades) to be used as Dynamic package with R80.40 and above.	(EXE)
	E84.00 Endpoint Security Clients for Windows OS (Recommended)	A zip file that contains all package permutations listed below.	(ZIP)
	E84.00 Complete Endpoint Security Client for 32 bit systems	A package for 32bit devices that includes Endpoint Complete package: Desktop FW and Application Control Anti-Malware Forensics and Anti-Ransomware URL Filtering Anti-Bot Threat Emulation Media Encryption and Port Protection Full Disk Encryption Compliance Remote Access VPN Capsule Docs	(ZIP)
	E84.00 Complete Endpoint Security Client for 64 bit systems	A package for 64bit devices that includes Endpoint Complete package: Desktop FW and Application Control Anti-Malware Forensics and Anti-Ransomware URL Filtering Anti-Bot Threat Emulation Media Encryption and Port Protection Full Disk Encryption Compliance Remote Access VPN Capsule Docs	(ZIP)
	E84.00 Complete Endpoint Security Client without Anti-Malware for 32 bit systems	A package for 32bit devices that includes Endpoint Complete package with the exception of Anti-Malware: Desktop FW and Application Control Forensics and Anti-Ransomware URL Filtering Anti-Bot Threat Emulation Media Encryption and Port Protection Full Disk Encryption Compliance Remote Access VPN Capsule Docs	(ZIP)
	E84.00 Complete Endpoint Security Client without Anti-Malware for 64 bit systems	A package for 64bit devices that includes Endpoint Complete package with the exception of Anti-Malware: Desktop FW and Application Control Forensics and Anti-Ransomware URL Filtering Anti-Bot Threat Emulation Media Encryption and Port Protection Full Disk Encryption Compliance Remote Access VPN Capsule Docs	(ZIP)
	E84.00 SandBlast Agent Client for 32 bit systems	SandBlast Agent package for 32bit devices: Forensics and Anti-Ransomware Anti-Bot Threat Emulation	(ZIP)
	E84.00 SandBlast Agent Client for 64 bit systems	SandBlast Agent package for 64bit devices: Forensics and Anti-Ransomware Anti-Bot Threat Emulation	(ZIP)
	E84.00 Full Disk Encryption and Media Encryption and Port Protection client for 32 bit systems	Full Disk Encryption and Media Encryption and Port Protection package for 32 bit systems	(ZIP)
	E84.00 Full Disk Encryption and Media Encryption and Port Protection client for 64 bit systems	Full Disk Encryption and Media Encryption and Port Protection package for 64 bit systems	(ZIP)
	E84.00 Initial client	Initial client is a very thin client without any blade used for software deployment purposes.	(ZIP)
	E84.00 Threat Prevention Client for 32 bit systems	Threat Prevention package for 32bit devices:  Desktop FW and Application Control Anti-Malware Forensics and Anti-Ransomware Anti-Bot Threat Emulation Compliance	(ZIP)
	E84.00 Threat Prevention Client for 64 bit systems	Threat Prevention package for 64bit devices: Desktop FW and Application Control Anti-Malware Forensics and Anti-Ransomware Anti-Bot Threat Emulation Compliance	(ZIP)

Note: These Standalone clients do not require Endpoint Security Server installation as part of their deployment.

E84.00 Standalone Clients

Platform	Package	Description	Link
Windows	E84.00 Remote Access Clients for Windows	Remote Access VPN Client for SmartConsole-managed clients	(MSI)
	E84.00 Remote Access VPN Clients - Automatic Upgrade file	Remote Access VPN Client for automatic upgrade through the gateway. For SmartConsole-managed clients only.	(CAB)
	E84.00 Remote Access VPN Clients for ATM	Unattended Remote Access VPN clients, managed with CLI and API and do not have a User interface.	(MSI)
	E84.00 Remote Access VPN Clients for ATM - Automatic Upgrade file	Unattended Remote Access VPN clients, managed with CLI and API and do not have a User interface for automatic upgrade through the gateway. For SmartConsole-managed clients only.	(CAB)
	E83.20 Capsule Docs Standalone Client	Capsule Docs package for environments that are managed by Capsule Docs Cloud Service.	(EXE)
	Capsule Docs PC Viewer	Check Point Capsule Docs Viewer is a stand-alone client that lets you view documents that were protected through Capsule Docs.	Get from: Capsule Docs Portal

Note: In order to download some of the packages you will need to have a Software Subscription or Active Support plan.

The packages provided below are Legacy CLI packages (not CPUSE packages). 

R77.30.03

Clean installation and In-Place Upgrade

• Before installing the hotfixes, you need R77.30 to be installed and to update CPUSE (sk92449) to the latest build.
• You must install the R77.30 Jumbo Hotfix for Endpoint Security Server before you install the Endpoint Security Server Package for Gaia OS.

Order of Installation	Package	Link
1	R77.30 Jumbo Hotfix for Endpoint Security Server	(TGZ)
2	R77.30.03 Endpoint Security Server Package for Gaia OS	(TGZ)

R80.30

Endpoint Security Server	Package	Link
R80.30	Endpoint Security Server R80.30	(ISO)

R80.40

Endpoint Security Server	Package	Link
R80.40	Endpoint Security Server R80.40	(ISO)

Management Console for Endpoint Security Server

The SmartConsole for Endpoint Security Server allows the Administrator to connect to the Endpoint Security Server and to manage the new Endpoint Security Software Blades.

Latest Versions

Endpoint Security Server	Package	Link
R80.40	SmartConsole for Endpoint Security Server R80.40 / E83.20 and higher	sk165473
R80.30	SmartConsole for Endpoint Security Server R80.30 / E83.20 and higher	sk153153
R80.30	SmartConsole for Endpoint Security Server R80.30 for BitLocker / E83.20 and higher	(EXE)

Previous Versions

Endpoint Security Server	Package	Link
R80.20	SmartConsole for Endpoint Security Server R80.20 / E83.20 and higher	sk137593
R77.30.03	SmartConsole for Endpoint Security Server R77.30.03 / E83.20 and higher	(EXE)
R77.30	SmartConsole for Endpoint Security Server R77.30 / E83.20 and higher	(EXE)
R80.10	SmartConsole for Endpoint Security Server R80.10 / E83.20 and higher	(EXE)
R77.30 EP6.5	SmartConsole for Endpoint Security Server R77.30 EP6.5 / E83.20 and higher	(EXE)
R77.20 EP6.2	SmartConsole for Endpoint Security Server R77.20 EP6.2 / E83.20 and higher	(EXE)

Internal note - Above packages includes Recovery Image of version - 86.3.20.12

Utilities

Platform	Package	Description	Link
Windows	SandBlast Agent Remediation Manager for Administrators	The administrator utility contains the capabilities of the end-user utility plus these additional features: Quarantine - Send files to quarantine.  Delete - Use the SandBlast Agent remediation service to delete a file.  Import - Import a quarantined file from a different computer or location. Get the administrator utility from the release homepage	(EXE)
	Capsule Docs Bulk Protection Services for Windows-based Servers and Workstations	Capsule Docs Bulk Protection lets you manage file protection settings based on file locations and properties.	(EXE)
	R77.30 DLP Gateway HF for Content-aware Capsule Docs protection (Mail attachments / Network locations)		(TGZ)

For more information about Capsule Docs Bulk Protection, refer to Capsule Docs Bulk Protection Services Reference Guide.

Full Disk Encryption Offline Management Tool

Platform	Package	Description	Link
Windows	Full Disk Encryption Offline Management Tool	The Endpoint Offline Management Tool lets administrators manage offline mode users and give them password recovery and disk recovery.	(TGZ)
Windows	Full Disk Encryption Offline Management Tool (Japanese)	The Endpoint Offline Management Tool lets administrators manage offline mode users and give them password recovery and disk recovery.	(TGZ)

Document

Endpoint Security Server

R80.40 Release Notes

Endpoint Security R80.40 Administration Guide

R80.30 Release Notes

Endpoint Security R80.30 Administration Guide

Endpoint Security Clients

E80.85 and higher Endpoint Security Client for Windows User Guide

E84.00 Endpoint Security Client for Windows Release Notes

sk164896 - Video: How to deploy and upgrade Endpoint Security Client?

Remote Access VPN Clients

E84.00 Remote Access Clients for Windows Release Notes

E80.72 and higher Remote Access Clients for Windows Administration Guide

Capsule Docs Client

E80.72 and higher Capsule Docs Plugin User Guide

Check Point Capsule Docs Viewer User Guide: Get from: Capsule Docs Portal

Capsule Docs Bulk Protection Services

Capsule Docs Bulk Protection Guide

For more information on Check Point releases see: Maintrain Release map, Maintrain Upgrade map, Maintrain Backward Compatibility map, Maintrain Releases plan.

For more information on the Enterprise Endpoint Security Windows Client, see:

• sk133174: Enterprise Endpoint Security Windows Client for ATM
• sk120667: How to upgrade to Windows 10 1607 and above with FDE in-place
• sk109196: Endpoint Security Server Supported Upgrade Paths
• sk107255: Endpoint Security Server versions and supported Endpoint Security Client versions
• sk110420: Endpoint Security Client Supported Upgrade Paths
• sk148453: Media Encryption Offline Access Tool
• For installation and upgrade instructions, use the procedures in: Installation and Upgrade Guide for Gaia Platforms R77 Versions

You can also visit our Endpoint forum, Remote Access forum, Capsule Docs forum, or any other CHECKMATES forum to ask questions and get answers from technical peers and Support experts.

For more information on Check Point releases see: Maintrain Release map, Maintrain Upgrade map, Maintrain Backward Compatibility map, Maintrain Releases plan.

For more information on the Enterprise Endpoint Security E80.86 Client, see:

• sk133174: Enterprise Endpoint Security E80.86 Windows Client for ATM
• sk120667: How to upgrade to Windows 10 1607 and above with FDE in-place
• sk109196: Endpoint Security Server Supported Upgrade Paths
• sk107255: Endpoint Security Server versions and supported Endpoint Security Client versions
• sk110420: Endpoint Security Client Supported Upgrade Paths
• For installation and upgrade instructions, use the procedures in: Installation and Upgrade Guide for Gaia Platforms R77 Versions

You can also visit our Endpoint forum, Remote Access forum, Capsule Docs forum, or any other CHECKMATES forum to ask questions and get answers from technical peers and Support experts.