Support Center > Search Results > SecureKnowledge Details
Enterprise Endpoint Security E86.70 Windows Clients Technical Level
Solution
  • In a Nutshell
  • New Features
  • Enhancements and Resolved Issues
  • Endpoint Security Client Downloads
  • Standalone Client Downloads
  • Endpoint Security Server Downloads
  • Management Console Downloads
  • Utilities/Services Downloads
  • Known Limitations
  • Documentation & Related SK Articles

Notes:

  • See Endpoint Security Homepage.
  • If you use Endpoint Security Client for Threat Emulation on an appliance (not through ThreatCloud Emulation), refer to sk180179.
  • To support SmartLog or SmartView Tracker reporting with Endpoint Security Clients for all supported servers (except R80.20 and higher), you must update the log schema. Follow instructions in sk106662.
  • Starting from E80.85, anonymized incident related data is sent to Check Point ThreatCloud, by default. See sk129753.
  • This release includes all limitations of earlier releases unless explicitly shown as resolved.

Click Here to Show the Entire Article

In a Nutshell

Item Description Download Link
Managed Client E86.70 Endpoint Security Clients for Windows OS (ZIP)
E86.70 Endpoint Security Clients for Windows OS - Dynamic package (EXE)
VPN Standalone Client E86.71 Remote Access Clients for Windows (MSI)
Capsule Docs E86.70 Capsule Docs Standalone Client (EXE)
Documentation E86.70 Endpoint Security Client for Windows Release Notes
sk164896 - Video: How to deploy and upgrade Endpoint Security Client?

List of New Features in E86.70 for Windows

Show / Hide this section

ID Description
Browser Extension
AHTP-25488 Added the Endpoint Security browser extension to the Brave browser.
General
Added support for Endpoint Security on Windows 11 version 22H2.


List of Enhancements and Resolved Issues in E86.70 for Windows 

Show / Hide this section
Enter a keyword of phrase to filter the below table:

ID Description
User Interface
EPS-34799 Enhancement: Password synchronization notification message is now displayed in the new UI under Windows 11.
Installation
EPS-42224 Endpoint Security Client installation is now blocked on Windows 11 when "Smart App Control" is on.
Anti-Ransomware
CDOC-2181 The size of Anti-Ransomware backup directory may be larger than the maximum size assigned in the policy.
CDOC-2189 Enhancement: Improved the detection algorithm reducing the amount of false-positive ransomware detections.
Anti-Malware
EPS-44768 Resolved a rare issue when AM E1 is not able to update its signatures because of incompatible third-party software installed on the same machine, (e.g. Sangfor VPN).
EPS-44834 Enhancement: Anti-Malware can now update signatures from https://kav8.zonealarm.com/v6. However, these signatures cannot be applied when SSL inspection or another solution changing the connections certificate chain is enabled.
URL Filtering
AHTP-25558  In a rare scenario, changes in URL Filtering policy rules may not be enforced until the user clicks the "Update now" button in Endpoint GUI or a new policy is published.
Behavioral Guard
AHTP-25759 Data uploading to Threat Hunting may stop with the "Cannot access a disposed object" error.
EPS-44629 Enhanced the purge mechanism to reduce memory consumption during AMSI logs cleanup.
AHTP-25025 Enhancement: Added AR and BG support for asterisks and environment variables support on exclusions.
AHTP-25902 Enhancement: Improvements for faster response against malicious activities. 
EPS-43026 Added validation to verify usage of the latest Behavioral Guard signatures before a version upgrade.
AHTP-24609  In a rare scenario, a deadlock may occur.


Endpoint Security Client Downloads

Show / Hide this section
  • Starting from E80.85, Harmony Endpoint improves coverage of malicious threats by sending anonymized Incident related data to the Check Point Threat Cloud. This feature is turned on by default. For more information, including how to disable this feature, refer to sk129753.
  • To support SmartLog or SmartView Tracker reporting with Endpoint Security Clients for all supported servers (except R80.20), you must update the log schema. Follow instructions in sk106662.

Endpoint Security E86.71 Clients

Package Description Links
Endpoint Security Clients for Windows OS - Dynamic package (Recommended, with R80.40 and higher):
Complete Endpoint Security Client for any CPU (32bit or 64bit). This is a self-extracting executable EXE file with all components (Blades) to be used as Dynamic package with R80.50 and higher.
(EXE)
Initial client:
Initial client is a very thin client without any blade used for software deployment purposes.
(ZIP)
Package Description 32bit 64bit
A package that includes Endpoint Complete package:
  • Desktop FW and Application Control
  • Anti-Malware
  • Forensics and Anti-Ransomware
  • URL Filtering
  • Anti-Bot
  • Threat Emulation
  • Media Encryption and Port Protection
  • Full Disk Encryption
  • Compliance
  • Remote Access VPN
  • Capsule Docs 
(ZIP)  (ZIP)
A package that includes Endpoint Complete package with the exception of Anti-Malware:
  • Desktop FW and Application Control
  • Forensics and Anti-Ransomware
  • URL Filtering
  • Anti-Bot
  • Threat Emulation
  • Media Encryption and Port Protection
  • Full Disk Encryption
  • Compliance
  • Remote Access VPN
  • Capsule Docs 
(ZIP)  (ZIP)
Harmony Endpoint package:
  • Forensics and Anti-Ransomware
  • Anti-Bot
  • Threat Emulation
(ZIP)  (ZIP)
Full Disk Encryption and Media Encryption and Port Protection package:
Full Disk Encryption and Media Encryption and Port Protection package.
 (ZIP)  (ZIP)
Threat Prevention package:
  • Desktop FW and Application Control
  • Anti-Malware
  • Forensics and Anti-Ransomware
  • Anti-Bot
  • Threat Emulation
  • Compliance
(ZIP) (ZIP)
Package Description Links
Endpoint Security Clients for Windows OS - Full:
A zip file that contains all package permutations listed above (excluding Dynamic package and Initial client)
(ZIP)


Standalone Client Downloads

Show / Hide this section
Note: These Standalone clients do not require Endpoint Security Server installation as part of their deployment.

Standalone E86.70 Clients

Package Description Link
Capsule Docs Standalone Client Capsule Docs package for environments that are managed by Capsule Docs Cloud Service. (EXE)
Capsule Docs PC Viewer Check Point Capsule Docs Viewer is a stand-alone client that lets you view documents that were protected through Capsule Docs. Get from:
Capsule Docs Portal

Standalone E86.71 Clients
Note: E86.71 version resolves Known Limitation ESVPN-3621.

Package Description Link
Remote Access Clients for Windows Remote Access VPN Client for SmartDashboard-managed clients (MSI)
Remote Access VPN Clients
(Automatic Upgrade file)
Remote Access VPN Client for automatic upgrade through the gateway. For SmartDashboard-managed clients only. (CAB)
Remote Access VPN Clients for ATM Unattended Remote Access VPN clients, managed with CLI and API and do not have a User interface. (MSI)
Remote Access VPN Clients for ATM
(Automatic Upgrade file)
Unattended Remote Access VPN clients, managed with CLI and API and do not have a User interface for automatic upgrade through the gateway. For SmartDashboard-managed clients only. (CAB)


Endpoint Security Server Downloads 

Show / Hide this section
Endpoint Security Server Package Link
R81.10  Endpoint Security Server R81.10 sk170416
R81  Endpoint Security Server R81 sk166715
R80.40  Endpoint Security Server R80.40 sk160736
R80.30  Endpoint Security Server R80.30 sk144293


Management Console Downloads

Show / Hide this section

Management Console for Endpoint Security Server

The SmartConsole for Endpoint Security Server allows the Administrator to connect to the Endpoint Security Server and to manage the new Endpoint Security Software Blades.

Latest Versions

Endpoint Security Server Package Link
R81.10  SmartConsole for Endpoint Security Server R81.10 sk175188
R81  SmartConsole for Endpoint Security Server R81 sk170116
R80.40  SmartConsole for Endpoint Security Server R80.40  sk165473

EOL Versions

Endpoint Security Server Package Link
R80.30  SmartConsole for Endpoint Security Server R80.30 Latest Build
R80.20  SmartConsole for Endpoint Security Server R80.20 Latest Build
R77.30.03  SmartConsole for Endpoint Security Server R77.30.03 / E86.30 and higher (EXE)
R77.30  SmartConsole for Endpoint Security Server R77.30 / E86.30 and higher (EXE)
R80.10  SmartConsole for Endpoint Security Server R80.10 sk119612
R77.30 EP6.5  SmartConsole for Endpoint Security Server R77.30 EP6.5 / E86.30 and higher  (EXE)
R77.20 EP6.2  SmartConsole for Endpoint Security Server R77.20 EP6.2 / E86.30 and higher (EXE)
Note: The above packages include the Recovery Image of version 86.8.62.6


Utilities/Services Downloads

Show / Hide this section
Utilities

Package Description Link
Harmony Endpoint Remediation Manager for Administrators

The administrator utility contains the capabilities of the end-user utility plus these additional features:

  • Quarantine - Send files to quarantine.
  • Delete - Use the Harmony Endpoint remediation service to delete a file. 
  • Import - Import a quarantined file from a different computer or location. Get the administrator utility from the release homepage
(EXE)
Capsule Docs Bulk Protection Services for Windows-based
Servers and Workstations
Capsule Docs Bulk Protection lets you manage file protection settings based on file locations and properties.  (EXE)
R77.30 DLP Gateway HF for Content-aware Capsule Docs protection (Mail attachments / Network locations)   (TGZ)

For more information about Capsule Docs Bulk Protection, refer to Capsule Docs Bulk Protection Services Reference Guide.

Full Disk Encryption Offline Management Tool

Package Description Link
Full Disk Encryption Offline
Management Tool
The Endpoint Offline Management Tool lets administrators manage offline mode users and give them password recovery and disk recovery. (TGZ)


Known Limitations

Show / Hide this section
Issue ID Description
ESVPN-3621
 
E86.70 Standalone VPN Client starts but VPN connection cannot be established if there was no connection to the Internet during the VPN service start (system boot, restart).
The "Connectivity with the Check Point Endpoint Security service is lost. VPN Service is down" error will be displayed until the Internet connection is resumed. 

Users and devices that may be affected:

  1. Majority of ATMs because these machines do not have access to the Internet.
  2. Users at hotels, airports, etc., who connect through a hotspot portal but cannot use the system browser because the firewall policy blocks ports.
  3. Organizations with restricted access to the Internet (only through VPN), such as banks, the military, or governments.
The issue was fixed in E86.71. The download links can be found above, under the Standalone Client Downloads section in this SK.
If E86.71 Standalone VPN Client is installed, installation of E86.70 Endpoint Security Client (complete package) fails. To upgrade E86.71 Standalone VPN Client with a complete package, use newer version.
AHTP-26316 Endpoint client fails to send files to emulation on a Threat Emulation (TE) Appliance that runs engine 59.990001349 or earlier. The issue does not affect emulation performed through ThreatCloud Emulation. Refer to sk180179.


Documentation & Related SecureKnowledge Articles

Show / Hide this section
Endpoint Security Server
  R81.10 Release Notes
  Harmony Endpoint Server R81.10 Administration Guide
  Harmony Endpoint Web Management R81.10 Administration Guide
  R81 Release Notes
  Harmony Endpoint Server R81 Administration Guide
  Harmony Endpoint Web Management R81 Administration Guide
  R80.40 Release Notes
  Endpoint Security R80.40 Administration Guide
  sk109196 - Endpoint Security Server Supported Upgrade Paths
Endpoint Security Clients
  Endpoint Security Client for Windows User Guide
  Endpoint Security Client for Windows E86.70 Release Notes
  Harmony Endpoint Security for Windows MDM Deployment Guide
  sk164896 - Video: How to deploy and upgrade Endpoint Security Client?
  sk133174 - Enterprise Endpoint Security Windows Client for ATM
  sk120667 - How to upgrade to Windows 10 1607 and above with FDE in-place
  sk107255 - Endpoint Security Server versions and supported Endpoint Security Client versions
  sk110420 - Endpoint Security Client Supported Upgrade Paths
Remote Access VPN Clients
  Remote Access Clients for Windows E86.70 Release Notes
  Remote Access Clients for Windows Administration Guide
Capsule Docs Client
  Capsule Docs Plugin E80.72 and Higher
  Check Point Capsule Docs Viewer User Guide - get from: Capsule Docs Portal

For more information on Check Point releases, see: Release map, Upgrade and Backward Compatibility maps, Releases plan.

You can also visit our Endpoint forum, Remote Access forum, Capsule Docs forum, or any other CHECKMATES forum to ask questions and get answers from technical peers and Support experts.

Give us Feedback
Please rate this document
[1=Worst,5=Best]
Comment