Media Encryption now supports Time Machine on external media (macOS 11 and higher). Self-protection is now always enabled, and yet the administrator can turn self-protection on or off.

macOS no longer blocks the Endpoint Security Installation Application.

For Anti-Malware blade Detect mode, see sk169753Įndpoint Security is now notarized.

When in Detect mode, Endpoint Security no longer remediates or quarantines any suspicious application.

See sk176366 for more details.ĭetect mode for Anti-Malware and Anti-Ransomware blades: This feature is supported in macOS 10.15 and higher. Users that configured Port Protection for macOS feature in the Early Availability September 2021 release of E85.30 Endpoint clients for macOS are now required to modify their Port Protection policy in order to continue working with the feature. This is also true for E85.30 GA clients for macOS, which are managed by servers that do not support Port Protection for macOS. Additionally, E85.30 GA clients for macOS can enable Port Protection policies by making use of a local configuration file per each Endpoint Client. The feature will also be available for on-premise servers in the future. Starting December 2021, the feature will become available again for Cloud services running version R81 and above. Port Protection (Beta version): The Port Protection feature for blocking USB, Bluetooth, camera and printer devices, which was included in the Early Availability September 2021 release of E85.30 Endpoint clients for macOS, is now available on the client version only. Software Deployment using the Endpoint Management is possible only if the installed Endpoint Security version is E84.70 or higher and the Server version is R81.10 or higher. Software Deployment Early Availability: To ease future Endpoint Security version upgrades, reducing dependency on MDMs and dedicated scripts, Endpoint Management Software Deployment may be used instead. See Change Startup Disk Security Settings and Deployment Reference in macOS. Note that a Managed Mac purchased via Apple business or school manager programs does not require “Reduced Security”. On Apple M1, to allow third-party kernel extensions, the Security Policy needs to be changed to “Reduced Security”. Apple recognizes the kernel extensions as supported kernel extension types.

Apple is gradually introducing new alternatives to kernel extensions, but only in macOS Big Sur and higher.

Compliance, AntiMalware, FDE, MediaEncryption and Port Protection blades include universal binaries and can run as native processes on M1 Macs.

Rosetta 2 translator must be installed.

Early Availability support for the Endpoint Security Clients on macOS 12 (Monterey).

Checkpoint mac