> Source: [sk182578](https://support.checkpoint.com/results/sk/sk182578) # sk182578 - Enterprise Endpoint Security E88.70 Windows Clients | Property | Value | |----------|-------| | Solution ID | sk182578 | | Date Created | 2024-08-11 | | Last Modified | 2026-08-09 | | Technical Level | General | | Products | Endpoint Security | | Versions | E88.X | | OS | Windows | ## Solution |------------------------------------------------------------------------------------------------------------------------|---------------------------------------------------------------------------------------------------------------|-------------------------------------------------------------------------------------------------------| | * **In a Nutshell** * **New Features and Enhancements** * **Resolved Issues** * **Endpoint Security Client Downloads** | * **Standalone Client Downloads** * **Endpoint Security Server Downloads** * **Management Console Downloads** | * **Utilities/Services Downloads** * **Known Limitations** * **Documentation \& Related SK Articles** |
**Notes:** * See **[Endpoint Security Homepage.](https://support.checkpoint.com/results/sk/sk117536)** * This release includes all limitations of earlier releases unless explicitly shown as resolved.
Click Here to Show the Entire Article
In a Nutshell {#1} ------------------ |----------------------------------------------|-------------------------------------------------------------------|--------------------------------------------------------------------------------------------------------------------------| | Item | Description | Download Link | | **Managed Client - US-DHS and EU compliant** | E88.70 Endpoint Security Clients for Windows OS - Dynamic package | [![](https://sc1.checkpoint.com/sc/images/download-m.png)](https://support.checkpoint.com/results/download/132149) (EXE) | | **Managed Client - US-DHS and EU compliant** | E88.70 Endpoint Security Clients for Windows OS - Initial Client | [![](https://sc1.checkpoint.com/sc/images/download-m.png)](https://support.checkpoint.com/results/download/132151) (ZIP) | | For more info about replacing Anti-Malware Blade with US-DHS and EU compliant Blade, refer to [sk178307](https://support.checkpoint.com/results/sk/sk178307). ||| | **VPN Standalone Client** | E88.70 Remote Access VPN Clients for Windows | [![](https://sc1.checkpoint.com/sc/images/download-m.png)](https://support.checkpoint.com/results/download/132130) (MSI) | List of New Features and Enhancements in E88.70 for Windows {#2} ----------------------------------------------------------------
{#Infrastructure}{#Infrastructure}{#Infrastructure}{#Infrastructure}{#Infrastructure}{#Infrastructure}{#Infrastructure} |------------------------------------|-----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------| | ID | Description | | General || | EPS-55641 | Enhancement: The Super Node Server status is now displayed on the Management Server. | | EPS-58573 | Enhancement: Endpoint Security Clients now supports Super Node functionality in semi-isolated environments. | | EPS-57794 | Enhancement: Improved the flow and user experience for uploading files to FTP when running CPInfo. | | EPS-57551 | Enhancement: Language settings configured in Harmony Management UI now change the Endpoint Security Client language but do not override user-defined language settings. | | AHTP-31935 | Enhancement: Configuring Data Loss Prevention policy for GenAI applications now provides enforcement granularity per application. | | Anti-Bot and URL Filtering || | AHTP-31275 | Enhancement: * Performance improvements in the Anti-Bot DNS Inspection feature. * Admins can now enable/disable the DNS Inspection feature in the Anti-Bot policy (under Advanced settings). | | AHTP-31358 | Enhancement: * Significantly reduced the volume of Forensics reports generated by Anti-Bot DNS Inspection. * Updated DNS Inspection-related detections to use "*Domain* " as the indicator type, replacing the previous "*dns://*" URL schema prefix. | | AHTP-31357 | Enhancement: Added ability to allow users to dismiss the URL filtering alert and access blocked websites. This option uses the same settings as the Browser Extension in Advanced settings \> Web \& Files Protection, as follows: * Connection attempt from browser without Browser Extension or non-browser process: Allows next connection attempts. * Connection attempt from browser with Browser Extension: May require multiple approvals based on security settings before allowing next connection attempts. | | Anti-Ransomware, Behavioral Guard and Forensics || | AHTP-31612 | Enhancement: Improved the sensors for specific attacks. | | AHTP-31364 | Enhancement: Improved Anti-Ransomware remediation for directories. | | AHTP-31359, AHTP-31154 | Enhancement: Improved proxy and Super Node compatibility for the Anti-Ransomware, Behavioral Guard and Forensics Blade. | | AHTP-30400 | Enhancement: Behavioral Guard signatures are now loaded faster. | | AHTP-30192 | Enhancement: The Forensics report now provides better visibility into the exact Registry location that triggered the detection. | | AHTP-31515, AHTP-31294, AHTP-31783 | Enhancement: A series of performance optimizations are introduced to improve overall system performance and reduce CPU consumption. | | Compliance and Posture || | EPS-58832 | Enhancement: Updated the SDK used for scanning and patching vulnerabilities to version 2024-04 (9.7), enhancing compatibility and performance. | | EPS-57949 | Enhancement: Improved the installation rate in Posture management. | | Full Disk Encryption || | EPS-55649 | Enhancement: Installation now halts if multiple ESP (EFI System Partition) or old SA (FDE System Area) partitions are detected, displaying an error message that directs users to remove extra partitions before reinstalling. This ensures a clean installation environment. | | EPS-56932 | Enhancement: TPM (Trusted Platform Module) is now automatically disabled (for FDE use only) during OS upgrades to ensure smooth upgrades without compromising security. TPM is re-enabled upon completion. | | Threat Emulation || | AHTP-31173 | Enhancement: Enforcement of Infinity IoC by Endpoint Security Client is now performed faster. | | Browser Extension || | AHTP-31702 | Enhancement: The Browser extension icon now displays Data Loss Prevention policy name and number. | {#2} List of Resolved Issues in E88.70 for Windows {#3} --------------------------------------------------
{#Infrastructure}{#Infrastructure}{#Infrastructure}{#Infrastructure}{#Infrastructure}{#Infrastructure} |-----------------------|-----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------| | ID | Description | | General || | EPS-59250 | In some scenarios, memory usage of the CPDA and DAF services is excessively high. | | EPS-57684 | When using the "Kill Process" push operation to end a specific process, the operation seems successful but process is not killed. | | EPS-57577 | The Reconnect tool fails to remove redundant files after successful Server migration. | | AHTP-31537 | A kernel memory leak related to early boot processes. | | EPS-57714 | Revo Uninstaller attempts to remove the Endpoint Security Client may remove the Client registration with Windows Installer, which may interfere with later installations or affect how Windows recognizes or interacts with Endpoint Security software in the future. | | EPS-57465 | Some notifications fail to display due to missing localization support, with the notification text defaulting to English. | | AHTP-32364 | Environments with limited access to the internet (such as semi-isolated environments, or networks where most of the traffic is blocked by firewall) are unsupported and may lead to the malfunction of multiple capabilities. | | AHTP-31308 | The Management Server displays exclusion instructions in the Description field of incident logs sent by Threat Emulation, Anti-Bot and URL Filtering from endpoints. | | EPS-57808 | In the GUI \> Menu \> Advanced \> View Policies, File Protection (Threat Emulation) policy is missing, when Anti-Malware and File Protection are installed. | | AHTP-32010 | The Resource field for DLP events is not displayed. | | EPS-59331 | After Windows updates on HP devices with Full Disk Encryption, the EFI System Partition (ESP) becomes fully occupied with data from multiple sources (FDE, Microsoft, and firmware vendors), resulting in Windows OS failing to load during boot. | | EPS-58400 | Memory management issue during patch file validation causes insufficient memory errors. | | Anti-Malware E2 (US-DHS and EU compliant) || | EPS-57248 | Microsoft Defender removal causes incorrect Anti-Malware blade status, it is displayed as "not running". | | EPS-58161 | When the Anti-Malware Blade is disabled through the Edit Capabilities settings and configured time out interval passes, the blade remains inactive instead of restarting. | | EPS-58091 | In Anti-Malware, the "Rescan" option may not trigger the scanning as expected. | | AHTP-31282 | The scheduled scan with randomized scan time does not function on the configured hours. | | Anti-Ransomware, Behavioral Guard and Forensics || | AHTP-31842 | There may be multiple Windows Events enabled for logging by Endpoint Security Client. | | EPS-58173 | In rare scenarios, the *EFR.db* file size may be large. | | EPS-57535 | After an upgrade, the EFR service status is inconsistent. | | Compliance and Posture || | EPS-58046 | Automatic deployment of posture management patches fails because the download resources are unavailable. | | Firewall and Application Control || | AHTP-31007, EPS-58223 | In a rare scenario, BSOD is caused by the Firewall driver during an upgrade. | | EPS-57608 | The Firewall driver routes packets to an incorrect network adapter. | | EPS-57417 | In a rare scenario, during an upgrade, the Firewall driver configuration gets corrupted. | | EPS-51944 | After an upgrade, in a rare scenario, the Firewall Blade does not run. | | Threat Emulation || | AHTP-31984 | Endpoints continue transmitting "Valid/Invalid License" information logs regarding Threat Emulation license status to the Management Server, although the Threat Emulation Blade was explicitly turned off. | | AHTP-33210 | Threat Emulation status incorrectly displays "NO_CONNECTION", although normal connectivity is maintained. | {#3} Endpoint Security Client Downloads {#4} --------------------------------------- Show / Hide this section > * Starting from E80.85, Harmony Endpoint improves coverage of malicious threats by sending anonymized Incident related data to the Check Point Threat Cloud. This feature is turned on by default. For more information, including how to disable this feature, refer to [sk129753](https://support.checkpoint.com/results/sk/sk129753). > > ### *Endpoint Security E88.70 Clients - US-DHS and EU compliant* {#Endpoint_Security_E85.10_ClientsE2} > > |-----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|--------------------------------------------------------------------------------------------------------------------------|-------------------------------------------------------------------------------------------------------------------------| > | Package Description | Links || > | Endpoint Security Clients for Windows OS - Dynamic package: > Complete Endpoint Security Client for any CPU (32bit or 64bit). This is a self-extracting executable EXE file with all components (Blades). | [![](https://sc1.checkpoint.com/sc/images/download-m.png)](https://support.checkpoint.com/results/download/132149) (EXE) || > | Initial client: > Initial client is a very thin client without any blade used for software deployment purposes. | [![](https://sc1.checkpoint.com/sc/images/download-m.png)](https://support.checkpoint.com/results/download/132151) (ZIP) || > | Package Description | 32bit | 64bit | > | **Endpoint Complete package:** > * Anti-Bot and URL Filtering > * Anti-Malware > * Anti-Ransomware, Behavioral Guard and Forensics > * Compliance and Posture > * Firewall and Application Control > * Full Disk Encryption > * Media Encryption and Port Protection > * Threat Emulation > * Remote Access VPN | [![](https://sc1.checkpoint.com/sc/images/download-m.png)](https://support.checkpoint.com/results/download/132145) (ZIP) | [![](https://sc1.checkpoint.com/sc/images/download-m.png)](https://support.checkpoint.com/results/download/132147)(ZIP) | > > {#resolvedTable} For more info about replacing Anti-Malware Blade with US-DHS and EU compliant Blade, refer to [sk178307](https://support.checkpoint.com/results/sk/sk178307). {#Endpoint_Security_E85.10_Clients} Standalone Client Downloads {#5} -------------------------------- Show / Hide this section > **Note:** These Standalone clients do not require Endpoint Security Server installation as part of their deployment. > > ### *Standalone E88.70 Clients* > > |----------------------------------------------------------------|-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|--------------------------------------------------------------------------------------------------------------------------| > | Package | Description | Link | > | **Remote Access VPN Clients for Windows** | Remote Access VPN Client for SmartDashboard-managed clients | [![](https://sc1.checkpoint.com/sc/images/download-m.png)](https://support.checkpoint.com/results/download/132130) (MSI) | > | **Remote Access VPN Clients (Automatic Upgrade file)** | Remote Access VPN Client for automatic upgrade through the gateway. For SmartDashboard-managed clients only. | [![](https://sc1.checkpoint.com/sc/images/download-m.png)](https://support.checkpoint.com/results/download/132131) (CAB) | > | **Remote Access VPN Clients for ATM** | Unattended Remote Access VPN clients, managed with CLI and API and do not have a User interface. | [![](https://sc1.checkpoint.com/sc/images/download-m.png)](https://support.checkpoint.com/results/download/132132) (MSI) | > | **Remote Access VPN Clients for ATM (Automatic Upgrade file)** | Unattended Remote Access VPN clients, managed with CLI and API and do not have a User interface for automatic upgrade through the gateway. For SmartDashboard-managed clients only. | [![](https://sc1.checkpoint.com/sc/images/download-m.png)](https://support.checkpoint.com/results/download/132133) (CAB) | {#resolvedTable} Endpoint Security Server Downloads {#6} --------------------------------------- Show / Hide this section > > |--------------------------|---------------------------------|----------------------------------------------------------------| > | Endpoint Security Server | Package | Link | > | **R82** | Endpoint Security Server R82 | [sk181127](https://support.checkpoint.com/results/sk/sk181127) | > | **R81.20** | Endpoint Security Server R81.20 | [sk173903](https://support.checkpoint.com/results/sk/sk173903) | > | **R81.10** | Endpoint Security Server R81.10 | [sk170416](https://support.checkpoint.com/results/sk/sk170416) | > {#resolvedTable} Management Console Downloads {#7} --------------------------------- Show / Hide this section > > ### *Management Console for Endpoint Security Server* {#SmartConsole for Endpoint Security Server} > > The SmartConsole for Endpoint Security Server allows the Administrator to connect to the Endpoint Security Server and to manage the new Endpoint Security Software Blades. > > |--------------------------|--------------------------------------------------|----------------------------------------------------------------------------------------------------------------| > | Endpoint Security Server | Package | Link | > | **R82** | SmartConsole for Endpoint Security Server R82 | [link](https://support.checkpoint.com/results/download/125531) | > | **R81.20** | SmartConsole for Endpoint Security Server R81.20 | [link](https://sc1.checkpoint.com/documents/Jumbo_HFA/R81.20_SC/R81.20/R81.20-List-of-all-Resolved-Issues.htm) | > | **R81.10** | SmartConsole for Endpoint Security Server R81.10 | [link](https://sc1.checkpoint.com/documents/Jumbo_HFA/R81.10_SC/Default.htm) | {#resolvedTable} Utilities Downloads {#8} ------------------------ Show / Hide this section > > |-------------------------------------------------------------|--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|--------------------------------------------------------------------------------------------------------------------------| > | Package | Description | Link | > | **Harmony Endpoint Remediation Manager for Administrators** | The administrator utility contains the capabilities of the end-user utility plus these additional features: * Quarantine - Send files to quarantine. * Delete - Use the Harmony Endpoint remediation service to delete a file. * Import - Import a quarantined file from a different computer or location. Get the administrator utility from the release homepage | [![](https://sc1.checkpoint.com/sc/images/download-m.png)](https://support.checkpoint.com/results/download/132854) (EXE) | > | **Full Disk Encryption Offline Management Tool** | The Endpoint Offline Management Tool lets administrators manage offline mode users and give them password recovery and disk recovery. | [![](https://sc1.checkpoint.com/sc/images/download-m.png)](https://support.checkpoint.com/results/download/120236) (TGZ) | > | **Full Disk Encryption Offline Management Tool (Japanese)** | The Endpoint Offline Management Tool lets administrators manage offline mode users and give them password recovery and disk recovery. | [![](https://sc1.checkpoint.com/sc/images/download-m.png)](https://support.checkpoint.com/results/download/120237) (TGZ) | {#resolvedTable} {#Full Disk Encryption Offline Management Tool} Known Limitations {#9} ---------------------- Show / Hide this section > > |------------|----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------| > | Issue ID | Description | > | EPS-51129 | FDE Smart Pre-boot (EA feature) secondary external display connected via docking station may not work. Support for secondary display via docking stations is experimental and depends on hardware, firmware settings, and display connection type. | > | EPS-50963 | Endpoint Client Posture Management is not supported on Windows 7 OS. Automatic Download is not displayed, and the Patch status is shown as "*Update not available*". | > | EPS-51871 | When Windows Smart App Control is enabled, it blocks the execution of the Media Encryption offline utility (which is located on the removeable media). As a workaround, you can copy the utility *Access To Business Data.exe* to a local disk and execute it from there. | > | EPS-52957 | SmartCard authentication is only supported in Legacy Pre-boot but it is not supported in FDE Smart Pre-boot (EA feature). | > | ESVPN-3943 | The login prompt of Implicit Secure Domain Logon (SDL) appears before the Windows logon on the computer, which is not part of any domain. | > | ESVPN-4305 | * If the user changes the language of the Endpoint Security Client UI, the language of the VPN UI will not be changed until the next reboot. * If the user changes the language of Endpoint Security Client UI to a non-Latin language (Russian, Greek, Chinese, etc.), he might see question marks in VPN UI unless he sets the correct language for non-Unicode applications in Windows language settings. | > | AHTP-30337 | For Endpoint Security Clients with Anti-Malware E2 (US-DHS and EU compliant), after an upgrade from E88.31 or lower to E88.40 or higher version: * On Windows machines that support Azure Code Signing Signatures, Check Point Endpoint Security is registered twice in the Windows Security Center. Reboot resolves the issue. * On Windows machines that do not support Azure Code Signing Signatures, after updating Windows with configuration and dependencies to support Azure Code Signing signatures, Check Point Endpoint Security is registered twice in the Windows Security Center. Reboot resolves the issue. | > | EPS-58003 | In some scenarios, the transition from Classic Pre-boot to FDE Smart Pre-boot (EA feature) may require a restart. | Documentation \& Related SecureKnowledge Articles {#10} ------------------------------------------------------- Show / Hide this section > > |-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------| > | Endpoint Security Clients | > | [Endpoint Security Clients for Windows E88.x Release Notes (English)](https://sc1.checkpoint.com/documents/E88.x/EN/Endpoint_Security_Clients_for_Windows_RN/Default.htm) | > | [Endpoint Security Clients for Windows E88.x Release Notes (Japanese)](https://sc1.checkpoint.com/documents/E88.x/JP/Endpoint_Security_Clients_for_Windows_RN/Default.htm) | > | [Endpoint Security Clients for Windows User Guide](https://sc1.checkpoint.com/documents/HarmonyEndpoint/Endpoint_Security_Clients_for_Windows_UserGuide/Default.htm) | > | [Replacing Anti-Malware Blade with US-DHS and EU compliant Blade](https://support.checkpoint.com/results/sk/sk178307) | > | [Endpoint Security for Windows MDM Deployment Guide](https://sc1.checkpoint.com/documents/HarmonyEndpoint/Harmony_Endpoint_Security_for_Windows_MDM_Deployment_Guide/Default.htm) | > | [sk110420 - Endpoint Security Client Supported Upgrade Paths](https://support.checkpoint.com/results/sk/sk110420) | > | [sk120667 - How to upgrade to Windows 10 1607 and higher with FDE in-place](https://support.checkpoint.com/results/sk/sk120667) | > | [sk133174 - Enterprise Endpoint Security Windows Clients for ATM](https://support.checkpoint.com/results/sk/sk133174) | > | [sk182694 - Enterprise Endpoint Security Hotfixes for E88.x Windows Clients Releases](https://support.checkpoint.com/results/sk/sk182694) | > | [Endpoint Security Safe Deployment Procedure (SDP)](https://sc1.checkpoint.com/documents/HarmonyEndpoint/Harmony_Endpoint_Safe_Deployment/Harmony_Endpoint_Safe_Deployment_Procedure_(SDP).pdf) | > | Remote Access VPN Clients | > | [E88.x Remote Access VPN Clients for Windows Release Notes](https://sc1.checkpoint.com/documents/E88.x/EN/Remote_Access_VPN_Clients_for_Windows_RN/Default.htm) | > | [Remote Access VPN Clients for Windows Administration Guide](https://sc1.checkpoint.com/documents/RemoteAccessClients_forWindows_AdminGuide/Default.htm) | > | EPMaaS | > | [Endpoint Security Administration Guide](https://sc1.checkpoint.com/documents/Infinity_Portal/WebAdminGuides/EN/Harmony-Endpoint-Admin-Guide/Default.htm) | > | Endpoint Security Server | > | [Endpoint Security Server R82 Administration Guide](https://sc1.checkpoint.com/documents/R82/SmartEndpoint_OLH/EN/Content/Topics-EPSG-R82.00/Intro-to-Endpoint_Security.htm) | > | [Endpoint Security Web Management R82 Administration Guide](https://sc1.checkpoint.com/documents/R82/WebAdminGuides/EN/CP_R82_HarmonyEndpointWebManagement_AdminGuide/Default.htm) | > | [R82 Release Notes](https://sc1.checkpoint.com/documents/R82/WebAdminGuides/EN/CP_R82_RN/Default.htm) | > | [Endpoint Security Server R81.20 Administration Guide](https://sc1.checkpoint.com/documents/R81.20/SmartEndpoint_OLH/EN/Default.htm) | > | [Endpoint Security Web Management R81.20 Administration Guide](https://sc1.checkpoint.com/documents/R81.20/WebAdminGuides/EN/CP_R81.20_HarmonyEndpointWebManagement_AdminGuide/Default.htm) | > | [R81.20 Release Notes](https://sc1.checkpoint.com/documents/R81.20/WebAdminGuides/EN/CP_R81.20_RN/Default.htm) | > | [Endpoint Security Server R81.10 Administration Guide](https://sc1.checkpoint.com/documents/R81.10/SmartEndpoint_OLH/EN/Default.htm) | > | [Endpoint Security Web Management R81.10 Administration Guide](https://sc1.checkpoint.com/documents/R81.10/WebAdminGuides/EN/CP_R81.10_HarmonyEndpointWebManagement_AdminGuide/Default.htm) | > | [R81.10 Release Notes](https://sc1.checkpoint.com/documents/R81.10/WebAdminGuides/EN/CP_R81.10_RN/Topics-RN/Whats-New.htm) | > >
> > For more information on Check Point releases, see: [Release map](https://support.checkpoint.com/results/sk/sk152052), [Upgrade and Backward Compatibility maps](https://support.checkpoint.com/results/sk/sk113113), [Releases plan](https://support.checkpoint.com/results/sk/sk95746). > You can also visit our [Endpoint forum](https://community.checkpoint.com/community/infinity-general/endpoint), [Remote Access forum](https://community.checkpoint.com/community/infinity-general/remote-access), or any other [CHECKMATES forum](https://community.checkpoint.com/) to ask questions and get answers from technical peers and Support experts. --- # Agent Instructions This content is from the Check Point Support Center (https://support.checkpoint.com), the official knowledge base for Check Point cybersecurity products. ## Navigating This Knowledge Base - **Complete index**: [llms.txt](https://support.checkpoint.com/llms.txt) - **All SK articles**: [SecureKnowledge Sitemap](https://support.checkpoint.com/sitemaps/secureknowledge-sitemap-index.xml) - **SK article URL pattern**: `https://support.checkpoint.com/results/sk/{skId}` - **Markdown responses**: AI bot User-Agents automatically receive `text/markdown` content