Support Center > Search Results > SecureKnowledge Details
Enterprise Endpoint Security E84.70 Windows Clients Technical Level
Solution

Table of Contents:

  • In a Nutshell
  • What's New in E84.70
  • Endpoint Security Clients Downloads
  • Standalone Clients Downloads
  • Endpoint Security Server Downloads
  • Management Console Downloads
  • Utilities/Services Downloads
  • Known Limitations
  • Documentation and Related SecureKnowledge Articles
  • Revision History

 Endpoint Security Homepage is now available.

Important! As of May 2021, there is no immediate impact on the users who have already installed E84.70.
As a preemptive action, to avoid a possible future impact, it is recommended to use a newer version instead of E84.70. Older versions are not affected.
In E84.70 only, the PPL processes for Windows Security Center were signed with an outdated cross-signed certificate. A future KB of Microsoft Windows might block the Anti-malware, Firewall and Threat Emulation processes from running.
For users that have already installed E84.70, it is strongly recommended to upgrade to a newer version.

Notes:

Click Here to Show the Entire Article

In a Nutshell

Item Description Link
Managed Client E84.70 Endpoint Security Clients for Windows OS -
E84.70 Endpoint Security Clients for Windows OS - Dynamic package -
VPN Standalone Client E84.70 Remote Access Clients for Windows -
Capsule Docs E84.70 Capsule Docs Standalone Client (EXE)
Documentation E84.70 Endpoint Security Client for Windows Release Notes  
sk164896 - Video: How to deploy and upgrade Endpoint Security Client?

What's New in E84.70

Show / Hide this section

New Features

  • Customers can now connect to a VPN gateway via a hotspot, while restricting internet access from other applications. See sk172449.
  • Management Servers can now limit registration to clients which have unique time-limited tokens. See sk172643.
  • VPN support for the Security Assertion Markup Language (SAML) protocol in user authentications.  

Enhancements

  • Anti-Malware
    • Resolves an issue where the Anti-Malware blade applies its policy twice on startup.
  • Anti-Ransomware, Behavioral Guard and Forensics
    • Fixes an issue in the Forensics analysis where a file rename is not analyzed if the file is the trigger.
    • Fixes an issue where a file identified in the entry point of a Forensics Analysis is not sent for remediation.
    • Fixes a very rare issue in the analysis where a process is not included when it should be.
    • All processes attached to a Forensics Analysis are now scanned for Windows Antimalware Scan Interface (AMSI) content.
    • Adds Forensics Analysis support for a new type of stand-alone Kaspersky log.
    • Improves the performance of Forensics in the presence of a specific MS Office tool.
    • Fixes an issue where the remote execution sensor does not parse invalid Windows path characters correctly.
    • Fixes an issue where the automatic purge of the Ransomware backup folder on rare occasions results in persistent high CPU usage.
    • Enhances the kernel File sensor to provide loaded DLL information. This information is searchable in Threat Hunting.
    • Threat Hunting data now stores locally for up to 5 days if a machine is offline. On connection re-establishment, the stored data is sent.
    • All records sent to Threat Hunting now include the host IP.
    • Improves the performance for the transmission of data to Threat Hunting.
  • Firewall and Application Control
    • Resolves an issue where the Endpoint Firewall blocks IPV6 connections between the Endpoint Client and the Management Server.
    • Developer Protection allows exclusions based on the file name and detection string. You can now exclude any detection with a hash from an audit string sent to the server.
  • Full Disk Encryption
    • Fixes an issue in Full Disk Encryption offline mode where pre-boot can be enabled before the recovery file save occurs. 
    • Fixes an issue where the machine loads to a black screen when Full Disk Encryption is configured with pre-boot bypass.
  • Media Encryption and Port Protection
    • Fixes a cosmetic issue that can show a wrong file size for the Media Encryption file copy operation if the file size is larger than 2GB.
  • VPN
    • Fixes the issue where the VPN User Interface stalls if the user first maps a network driver which is not available at the VPN start.
    • Shows the VPN second authentication factor in the output of the "trac info" command.
  • Infrastructure
    • Improves client User Interface performance by caching the last Threat Emulation message.
    • Blade screens do not open now when the blade is off.
    • Adds a Secure Uninstall (Challenge-Response) mechanism for the Offline Policy Management Tool.
  • Installation
    • Adds the ability to remove McAfee endpoint protection products after a successful installation of Check Point Endpoint Security client. See sk167982.
    • The installer validates that a CA certificate is present on the machine during installation and prompts with an appropriate message when it is missing.

Endpoint Security Clients Downloads

Show / Hide this section
Important:
    • Starting from E80.85, SandBlast Agent improves coverage of malicious threats by sending anonymized Incident related data to the Check Point Threat Cloud. This feature is turned on by default. For more information, including how to disable this feature, refer to sk129753.

  • To support SmartLog or SmartView Tracker reporting with Endpoint Security Clients for all supported servers (except R80.20), you must update the log schema. Follow instructions in sk106662.

Endpoint Security E84.70 Clients

Platform Package Description Links
Windows
Endpoint Security Clients for Windows OS - Dynamic package (Recommended, with R80.40 and higher):
Complete Endpoint Security Client for any CPU (32bit or 64bit). This is a self-extracting executable EXE file with all components (Blades) to be used as Dynamic package with R80.40 and higher.
 -
Initial client:
Initial client is a very thin client without any blade used for software deployment purposes.
 -
Package Description 32bit 64bit
A package that includes Endpoint Complete package:
  • Desktop FW and Application Control
  • Anti-Malware
  • Forensics and Anti-Ransomware
  • URL Filtering
  • Anti-Bot
  • Threat Emulation
  • Media Encryption and Port Protection
  • Full Disk Encryption
  • Compliance
  • Remote Access VPN
  • Capsule Docs 
- -
A package that includes Endpoint Complete package with the exception of Anti-Malware:
  • Desktop FW and Application Control
  • Forensics and Anti-Ransomware
  • URL Filtering
  • Anti-Bot
  • Threat Emulation
  • Media Encryption and Port Protection
  • Full Disk Encryption
  • Compliance
  • Remote Access VPN
  • Capsule Docs 
- -
SandBlast Agent package:
  • Forensics and Anti-Ransomware
  • Anti-Bot
  • Threat Emulation
- -
Full Disk Encryption and Media Encryption and Port Protection package:
Full Disk Encryption and Media Encryption and Port Protection package.
- -
Threat Prevention package:
  • Desktop FW and Application Control
  • Anti-Malware
  • Forensics and Anti-Ransomware
  • Anti-Bot
  • Threat Emulation
  • Compliance
- -
Package Description Links
Endpoint Security Clients for Windows OS - Full:
A zip file that contains all package permutations listed above (excluding Dynamic package and Initial client)
-

Standalone Clients Downloads

Show / Hide this section
Note: These Standalone clients do not require Endpoint Security Server installation as part of their deployment.

E84.70 Standalone Clients

Platform Package Description Link
Windows E84.70 Remote Access Clients for Windows Remote Access VPN Client for SmartDashboard-managed clients -
E84.70 Remote Access VPN Clients - Automatic Upgrade file Remote Access VPN Client for automatic upgrade through the gateway. For SmartDashboard-managed clients only. -
E84.70 Remote Access VPN Clients for ATM Unattended Remote Access VPN clients, managed with CLI and API and do not have a User interface. -
E84.70 Remote Access VPN Clients for ATM - Automatic Upgrade file Unattended Remote Access VPN clients, managed with CLI and API and do not have a User interface for automatic upgrade through the gateway. For SmartDashboard-managed clients only. -
E84.70 Capsule Docs Standalone Client Capsule Docs package for environments that are managed by Capsule Docs Cloud Service. (EXE)
Capsule Docs PC Viewer Check Point Capsule Docs Viewer is a stand-alone client that lets you view documents that were protected through Capsule Docs. Get from: Capsule Docs Portal

Endpoint Security Server Downloads 

Show / Hide this section

R81

Endpoint Security Server Package Link
R81 Endpoint Security Server R81 sk166715

R80.40

Endpoint Security Server Package Link
R80.40 Endpoint Security Server R80.40 sk160736

R80.30

Endpoint Security Server Package Link
R80.30 Endpoint Security Server R80.30 sk144293

Management Console Downloads

Show / Hide this section

Management Console for Endpoint Security Server

The SmartConsole for Endpoint Security Server allows the Administrator to connect to the Endpoint Security Server and to manage the new Endpoint Security Software Blades.

Latest Versions

Endpoint Security Server Package Link
R81 SmartConsole for Endpoint Security Server R81  sk170116
R80.40 SmartConsole for Endpoint Security Server R80.40  sk165473

Previous Versions

Endpoint Security Server Package Link
R80.30 SmartConsole for Endpoint Security Server R80.30  sk153153
R80.20 SmartConsole for Endpoint Security Server R80.20  sk137593
R77.30.03 SmartConsole for Endpoint Security Server R77.30.03 / E84.20 and higher (EXE)
R77.30 SmartConsole for Endpoint Security Server R77.30 / E84.20 and higher (EXE)
R80.10 SmartConsole for Endpoint Security Server R80.10  sk119612
R77.30 EP6.5 SmartConsole for Endpoint Security Server R77.30 EP6.5 / E84.20 and higher  (EXE)
R77.20 EP6.2 SmartConsole for Endpoint Security Server R77.20 EP6.2 / E84.20 and higher (EXE)
Internal note - Above packages includes Recovery Image of version - 86.4.20.12

Utilities/Services Downloads

Show / Hide this section
Utilities

Platform Package Description Link
Windows SandBlast Agent Remediation Manager for Administrators

The administrator utility contains the capabilities of the end-user utility plus these additional features:

  • Quarantine - Send files to quarantine. 
  • Delete - Use the SandBlast Agent remediation service to delete a file. 
  • Import - Import a quarantined file from a different computer or location. Get the administrator utility from the release homepage
(EXE)
Capsule Docs Bulk Protection Services for Windows-based Servers and Workstations Capsule Docs Bulk Protection lets you manage file protection settings based on file locations and properties.  (EXE)
R77.30 DLP Gateway HF for Content-aware Capsule Docs protection (Mail attachments / Network locations)   (TGZ)

For more information about Capsule Docs Bulk Protection, refer to Capsule Docs Bulk Protection Services Reference Guide.

Full Disk Encryption Offline Management Tool

Platform Package Description Link
Windows Full Disk Encryption Offline Management Tool The Endpoint Offline Management Tool lets administrators manage offline mode users and give them password recovery and disk recovery. (TGZ)
Windows Full Disk Encryption Offline Management Tool (Japanese) The Endpoint Offline Management Tool lets administrators manage offline mode users and give them password recovery and disk recovery. (TGZ)

Known Limitations

Show / Hide this section
Issue ID Description
CDOC-1920 Adobe Acrobat Reader DC 64 bit version is not supported. You must use the 32 bit version.
Show / Hide this section      
Document
Endpoint Security Server
R81 Release Notes
Endpoint Security R81 Administration Guide
Endpoint Security Web Management R81 Administration Guide
R80.40 Release Notes
Endpoint Security R80.40 Administration Guide
R80.30 Release Notes 
Endpoint Security R80.30 Administration Guide
Endpoint Security Clients
E80.85 and higher Endpoint Security Client for Windows User Guide
E84.70 Endpoint Security Client for Windows Release Notes
sk164896 - Video: How to deploy and upgrade Endpoint Security Client?
Remote Access VPN Clients
E84.70 Remote Access Clients for Windows Release Notes
E80.72 and higher Remote Access Clients for Windows Administration Guide
Capsule Docs Client
E80.72 and higher Capsule Docs Plugin User Guide
Check Point Capsule Docs Viewer User Guide: Get from: Capsule Docs Portal
Capsule Docs Bulk Protection Services
Capsule Docs Bulk Protection Guide

Revision History

Show / Hide this section
Date Description
25 Apr 2021 First release of this document.

Give us Feedback
Please rate this document
[1=Worst,5=Best]
Comment