Media Encryption blade internally uses FUSE, which is a 3rd party kernel extension. Apple is gradually introducing new alternatives to kernel extensions but in macOS BigSur, Apple recognizes FUSE as a supported kernel extension type. On Apple M1, to allow FUSE (just like any other 3rd party kernel extensions), the Security Policy needs to be “Reduced Security”. A Managed Mac purchased via Apple business or school manager programs, does not require “Reduced Security”. See Change Startup Disk Security Settings and Deployment Reference in macOS.
Firefox and Safari on MAC extensions now support the URL-Filtering capabilities. The admin can define URL categories to block and the users are blocked when they try to access URLs that belong to these categories. The feature supports Safari browser 14 and above.
Anti-Malware now reduces the performance impact on the machine when the Mac is actively in use. As soon as the user touches the keyboard, mouse or trackpad, any scheduled scan runs at a reduced speed.
The Self-Protection feature prevents the deletion of Check Point files and the termination of Check Point processes by end-users. In this release, the self-protection feature is disabled by default and in EA quality. See sk171012 for more details.
Software Deployment capabilities: In order to ease future Endpoint Security version upgrades, reducing dependency on MDMs and dedicated scripts, Endpoint Management Software Deployment may be used instead.
Software Deployment using the Endpoint Management is possible, only if:
Current Endpoint Security versions, already deployed on Endpoint machines, are E84.70 or higher.
AND The desired Endpoint Security version, that you plan to deploy next, is higher than E84.70. Note: In addition, you can upgrade to a GA build from EA builds of any given version, as long as it is E84.70 or higher.
This feature is currently EA quality, and is supported starting from the R81.10 version of the Management Server. See the Known Limitations section for more details.
Enhancements
This release includes stability, quality and performance fixes.
The SmartConsole for Endpoint Security Server allows the Administrator to connect to the Endpoint Security Server and to manage the new Endpoint Security Software Blades.
Endpoint Security Server
Package
Link
R77.30.03
SmartConsole for Endpoint Security Server R77.30.03 / E80.89
(EXE)
R77.20 EP6.2
SmartConsole for Endpoint Security Server R77.20 EP6.2 / E80.89
Software Deployment: Once an EP machine starts a deployment process, it opens a dialog to allow the end user to choose if to upgrade now or postpone by 1 hour. In this release,1 hour is the only available option for postponing the upgrade.
When Endpoint Security Client is installed on a M1 Mac, an upgrade from macOS 11.2 (or earlier) to macOS 11.3 requires an additional reboot to start the Endpoint Security Client.
Documentation and Related SecureKnowledge Articles
The relevant links to downloads are located in the relevant section, i.e., Standalone Clients, Utilities/Services.
