Support Center > Search Results > SecureKnowledge Details
Enterprise Endpoint Security E85.40 Windows Clients Technical Level
Solution
  • New Features
  • In a Nutshell
  • Resolved Issues and Enhancements
  • Endpoint Security Clients Downloads
  • Standalone Clients Downloads
  • Endpoint Security Server Downloads
  • Management Console Downloads
  • Utilities/Services Downloads
  • Documentation and Related SecureKnowledge Articles
  • Revision History

  Endpoint Security Homepage is now available.

Notes:

Click Here to Show the Entire Article

List of New Features in E85.40

Show / Hide this section

ID Description
General
EPS-34806 Endpoint Client Super Node now supports software deployment. Refer to sk171703 and Harmony Endpoint Web Management Administration Guide.
EPS-35752 Endpoint Security client now supports Windows Server 2022 and Windows 11.
EPS-36171 Added ability to validate the updated certificate on cloud servers.
VPN
ESVPN-2885 Added ability to customize the certificate warning dialog. See sk175244.


In a Nutshell

Item Description Download Link
Managed Client E85.40 Endpoint Security Clients for Windows OS (ZIP)
E85.40 Endpoint Security Clients for Windows OS - Dynamic package (EXE)
VPN Standalone Client E85.40 Remote Access Clients for Windows (MSI)
Capsule Docs E85.40 Capsule Docs Standalone Client (EXE)
Documentation E85.40 Endpoint Security Client for Windows Release Notes
sk164896 - Video: How to deploy and upgrade Endpoint Security Client?

List of Resolved Issues and Enhancements in E85.40

Show / Hide this section

Enter the string to filter the below table:

ID Description
General
AHTP-22442 Enhancement: Accesses of Harmony Endpoint to the various reputation services are now cached. By that, the amount of access to the Check Point reputation services will be reduced, resulting in lower network bandwidth and a faster detection time.
Infrastructure
EPS-33382  Enhancement: Added the Repair option to the EPS.msi file created from the Exported Dynamic package.
EPS-34076  Super Node Server and Clients must use the same Anti-Malware version, in order to update signatures correctly. Currently, Super Node Server, may use same or newer Anti-Malware version.
EPS-34032 The schedule time of push operations is not converted to local time from UTC on the client. Instead, UTC time is set as local time without any necessary conversion.
EPS-29159 In rare scenarios, cpda.exe may unexpectedly exit. 
Full Disk Encryption
EPS-34042 When using FDE pre-boot with a policy that enables TPM in Firmware Update Friendly mode, TPM integrity failure was incorrectly displayed in the FDE pre-boot when forcing reboots during the Windows boot process.
EPS-34832 In a rare scenario, after Bitlocker is deployed, the login into Windows may take longer than usual.
This fix ensures the FDE credential provider is disabled before Bitlocker is turned on.
Anti-Bot and URL Filtering
AHTP-22808 Enhancement: Anti-Bot and URL Filtering logs now contain the exclusion instructions, which will assist the administrator in excluding the false-positive cases.
Anti-Malware
EPS-33443 In rare scenarios, Anti-Malware detection is handled correctly but not reported.
EPS-33920  The Anti-Malware Blade is not running after the clean install of Endpoint Security on Server 2008 R2.
Threat Prevention
AHTP-22872 Enhancement: Harmony Endpoint updater, which updates signatures and static analysis models, can now work with Super-nodes. If the user configures a Super-node, all downloads performed by the updater will be done through the Super-node.
AHTP-23262 Enhancement: Improved parsing of process signer information.
Network Protection
EPS-33679 In a rare scenario, a blue screen (BSOD) appears during the Endpoint Security Client upgrade process.
VPN
ESVPN-2885 Certificate check hardening: the Administrator can disable the "Trust and Continue" button in the certificate warning to prevent connection to non-manageable gateways. Refer to sk175243.
ESVPN-3031 After upgrade to E85.10 - E85.30, connect to the site fails with the "Failed to load virtual network adapter" error message. Refer to sk175605.

Endpoint Security Clients Downloads

Show / Hide this section
Important:
  • Starting from E80.85, Harmony Endpoint improves coverage of malicious threats by sending anonymized Incident related data to the Check Point Threat Cloud. This feature is turned on by default. For more information, including how to disable this feature, refer to sk129753.
  • To support SmartLog or SmartView Tracker reporting with Endpoint Security Clients for all supported servers (except R80.20), you must update the log schema. Follow instructions in sk106662.

Endpoint Security E85.40 Clients

Platform Package Description Links
Windows
Endpoint Security Clients for Windows OS - Dynamic package (Recommended, with R80.40 and higher):
Complete Endpoint Security Client for any CPU (32bit or 64bit). This is a self-extracting executable EXE file with all components (Blades) to be used as Dynamic package with R80.40 and higher.
(EXE)
Initial client:
Initial client is a very thin client without any blade used for software deployment purposes.
(ZIP)
Package Description 32bit 64bit
A package that includes Endpoint Complete package:
  • Desktop FW and Application Control
  • Anti-Malware
  • Forensics and Anti-Ransomware
  • URL Filtering
  • Anti-Bot
  • Threat Emulation
  • Media Encryption and Port Protection
  • Full Disk Encryption
  • Compliance
  • Remote Access VPN
  • Capsule Docs 
(ZIP)  (ZIP)
A package that includes Endpoint Complete package with the exception of Anti-Malware:
  • Desktop FW and Application Control
  • Forensics and Anti-Ransomware
  • URL Filtering
  • Anti-Bot
  • Threat Emulation
  • Media Encryption and Port Protection
  • Full Disk Encryption
  • Compliance
  • Remote Access VPN
  • Capsule Docs 
(ZIP)  (ZIP)
Harmony Endpoint package:
  • Forensics and Anti-Ransomware
  • Anti-Bot
  • Threat Emulation
(ZIP)  (ZIP)
Full Disk Encryption and Media Encryption and Port Protection package:
Full Disk Encryption and Media Encryption and Port Protection package.
 (ZIP)  (ZIP)
Threat Prevention package:
  • Desktop FW and Application Control
  • Anti-Malware
  • Forensics and Anti-Ransomware
  • Anti-Bot
  • Threat Emulation
  • Compliance
(ZIP) (ZIP)
Package Description Links
Endpoint Security Clients for Windows OS - Full:
A zip file that contains all package permutations listed above (excluding Dynamic package and Initial client)
(ZIP)

Standalone Clients Downloads

Show / Hide this section
Note: These Standalone clients do not require Endpoint Security Server installation as part of their deployment.

E85.40 Standalone Clients

Platform Package Description Link
Windows E85.40 Remote Access Clients for Windows Remote Access VPN Client for SmartDashboard-managed clients (MSI)
E85.40 Remote Access VPN Clients - Automatic Upgrade file Remote Access VPN Client for automatic upgrade through the gateway. For SmartDashboard-managed clients only. (CAB)
E85.40 Remote Access VPN Clients for ATM Unattended Remote Access VPN clients, managed with CLI and API and do not have a User interface. (MSI)
E85.40 Remote Access VPN Clients for ATM - Automatic Upgrade file Unattended Remote Access VPN clients, managed with CLI and API and do not have a User interface for automatic upgrade through the gateway. For SmartDashboard-managed clients only. (CAB)
E85.40 Capsule Docs Standalone Client Capsule Docs package for environments that are managed by Capsule Docs Cloud Service. (EXE)
Capsule Docs PC Viewer Check Point Capsule Docs Viewer is a stand-alone client that lets you view documents that were protected through Capsule Docs. Get from: Capsule Docs Portal

Endpoint Security Server Downloads 

Show / Hide this section
Endpoint Security Server Package Link
R81.10 Endpoint Security Server R81.10 sk170416
R81  Endpoint Security Server R81 sk166715
R80.40  Endpoint Security Server R80.40 sk160736
R80.30  Endpoint Security Server R80.30 sk144293

Management Console Downloads

Show / Hide this section

Management Console for Endpoint Security Server

The SmartConsole for Endpoint Security Server allows the Administrator to connect to the Endpoint Security Server and to manage the new Endpoint Security Software Blades.

Latest Versions

Endpoint Security Server Package Link
R81.10 SmartConsole for Endpoint Security Server R81.10  sk175188
R81  SmartConsole for Endpoint Security Server R81  sk170116
R80.40  SmartConsole for Endpoint Security Server R80.40  sk165473

Previous Versions

Endpoint Security Server Package Link
R80.30  SmartConsole for Endpoint Security Server R80.30 sk153153
R80.20  SmartConsole for Endpoint Security Server R80.20 sk137593
R77.30.03  SmartConsole for Endpoint Security Server R77.30.03 / E85.20 and higher (EXE)
R77.30  SmartConsole for Endpoint Security Server R77.30 / E85.20 and higher (EXE)
R80.10  SmartConsole for Endpoint Security Server R80.10 sk119612
R77.30 EP6.5  SmartConsole for Endpoint Security Server R77.30 EP6.5 / E85.20 and higher  (EXE)
R77.20 EP6.2 SmartConsole for Endpoint Security Server R77.20 EP6.2 / E85.20 and higher (EXE)
Note: The above packages include the Recovery Image of version 86.5.20.5

Utilities/Services Downloads

Show / Hide this section
Utilities

Platform Package Description Link
Windows Harmony Endpoint Remediation Manager for Administrators

The administrator utility contains the capabilities of the end-user utility plus these additional features:

  • Quarantine - Send files to quarantine. 
  • Delete - Use the Harmony Endpoint remediation service to delete a file. 
  • Import - Import a quarantined file from a different computer or location. Get the administrator utility from the release homepage
(EXE)
Capsule Docs Bulk Protection Services for Windows-based Servers and Workstations Capsule Docs Bulk Protection lets you manage file protection settings based on file locations and properties.  (EXE)
R77.30 DLP Gateway HF for Content-aware Capsule Docs protection (Mail attachments / Network locations)   (TGZ)

For more information about Capsule Docs Bulk Protection, refer to Capsule Docs Bulk Protection Services Reference Guide.

Full Disk Encryption Offline Management Tool

Platform Package Description Link
Windows Full Disk Encryption Offline Management Tool The Endpoint Offline Management Tool lets administrators manage offline mode users and give them password recovery and disk recovery. (TGZ)
Windows Full Disk Encryption Offline Management Tool (Japanese) The Endpoint Offline Management Tool lets administrators manage offline mode users and give them password recovery and disk recovery. (TGZ)

Show / Hide this section      
Document
Endpoint Security Server
R81.10 Release Notes
Endpoint Security R81.10 Administration Guide
Endpoint Security Web Management R81.10 Administration Guide
R81 Release Notes
Endpoint Security R81 Administration Guide
Endpoint Security Web Management R81 Administration Guide
R80.40 Release Notes
Endpoint Security R80.40 Administration Guide
R80.30 Release Notes 
Endpoint Security R80.30 Administration Guide
Endpoint Security Clients
E80.85 and higher Endpoint Security Client for Windows User Guide
E85.40 Endpoint Security Client for Windows Release Notes
sk164896 - Video: How to deploy and upgrade Endpoint Security Client?
Remote Access VPN Clients
E85.40 Remote Access Clients for Windows Release Notes
E80.72 and higher Remote Access Clients for Windows Administration Guide
Capsule Docs Client
E80.72 and higher Capsule Docs Plugin User Guide
Check Point Capsule Docs Viewer User Guide: Get from: Capsule Docs Portal
Capsule Docs Bulk Protection Services
Capsule Docs Bulk Protection Guide

Revision History

Show / Hide this section
Date Description
xx Oct 2021 First release of this document.

Give us Feedback
Please rate this document
[1=Worst,5=Best]
Comment