> Source: [sk183132](https://support.checkpoint.com/results/sk/sk183132)
# sk183132 - Enterprise Endpoint Security E89.10 Windows Clients
| Property | Value |
|----------|-------|
| Solution ID | sk183132 |
| Date Created | 2025-02-11 |
| Last Modified | 2026-08-11 |
| Technical Level | General |
| Products | Endpoint Security |
| Versions | E89.X |
| OS | Windows |
## Solution
|------------------------------------------------------------------------------------------------------------------------|---------------------------------------------------------------------------------------------------------------|-------------------------------------------------------------------------------------------------------|
| * **In a Nutshell** * **New Features and Enhancements** * **Resolved Issues** * **Endpoint Security Client Downloads** | * **Standalone Client Downloads** * **Endpoint Security Server Downloads** * **Management Console Downloads** | * **Utilities/Services Downloads** * **Known Limitations** * **Documentation \& Related SK Articles** |
**Notes:**
* See **[Endpoint Security Homepage.](https://support.checkpoint.com/results/sk/sk117536)**
* Capsule Docs reached its End of Support.
To upgrade to E89.10 Windows with managed Capsule Docs, you must uninstall Capsule Docs from the machine first.
* E89.10 is the last version supported on these Legacy Microsoft Operating Systems: Windows 7, Windows 8, Windows Server 2008 and Windows Server 2012.
For additional information on Legacy Microsoft Operating Systems support, refer to [sk183765](https://support.checkpoint.com/results/sk/sk183765).
* This release includes all limitations of earlier releases unless explicitly shown as resolved.
Click Here to Show the Entire Article
In a Nutshell {#1}
------------------
|----------------------------------------------|-------------------------------------------------------------------|--------------------------------------------------------------------------------------------------------------------------|
| Item | Description | Download Link |
| **Managed Client - US-DHS and EU compliant** | E89.10 Endpoint Security Clients for Windows OS - Dynamic package | [](https://support.checkpoint.com/results/download/136498) (EXE) |
| **Managed Client - US-DHS and EU compliant** | E89.10 Endpoint Security Clients for Windows OS - Initial Client | [](https://support.checkpoint.com/results/download/136499) (ZIP) |
| For more info about replacing Anti-Malware Blade with US-DHS and EU compliant Blade, refer to [sk178307](https://support.checkpoint.com/results/sk/sk178307). |||
| **VPN Standalone Client** | E89.11 Remote Access VPN Clients for Windows | [](https://support.checkpoint.com/results/download/141640) (MSI) |
List of New Features and Enhancements in E89.10 for Windows {#2}
----------------------------------------------------------------
{#Infrastructure}{#Infrastructure}{#Infrastructure}{#Infrastructure}
|------------|----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|
| ID | Description |
| General ||
| EPS-59504 | Enhancement: Security improvements of the Server-Client communication. |
| EPS-59716 | Enhancement: Improved the performance in the inter-process communication. |
| EPS-59506 | Enhancement: Super Node Server now supports upstream proxy configuration through proxy parameters set in the Client settings policy for Super Node Computers. Note: When Super Node Proxy is configured with an upstream proxy, it does not perform URL whitelist validation. All URL filtering must be handled by the upstream proxy. |
| AHTP-33025 | Enhancement: Improvements to the Troubleshooting tool (*hepctrl.exe*). This debugging utility now includes a new Interactive Mode that helps find the root cause faster and also includes automatic log collection. |
| AHTP-33928 | Enhancement: General performance and stability improvements across Anti-Bot, URL Filtering, Anti-Malware, and Threat Emulation Blades for a faster and more efficient experience. |
| Anti-Malware E2 (US-DHS and EU compliant) ||
| AHTP-33267 | Enhancement: * Added support for updating BG (Behavioral Guard) with offline packages. * Added support for updating Vulnerable Driver Protection List with offline packages. Refer to [Offline updates for Harmony Endpoint Anti-Malware DHS](https://support.checkpoint.com/results/sk/sk180690). |
| Anti-Ransomware, Behavioral Guard and Forensics ||
| AHTP-33368 | Enhancement: Enriched the information the Endpoint Security Client shares with the Threat Hunting tool and XDR products. |
| AHTP-32444 | Enhancement: Improved Behavioral Guard protection with advanced signatures. |
| Threat Emulation ||
| AHTP-33072 | Enhancement: Performance improvement in handling of the newly created files. |
{#resolvedTable}
List of Resolved Issues in E89.10 for Windows {#3}
--------------------------------------------------
{#Infrastructure}{#Infrastructure}{#Infrastructure}{#Infrastructure}{#Infrastructure}{#Infrastructure}
|------------|----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|
| ID | Description |
| General ||
| EPS-60273 | Resolved issues with downloading large patches for posture management. |
| EPS-60049 | When a blade is disabled, it is not removed from the Endpoint Security Client GUI tray menu. |
| EPS-59771 | Upon logging in, the Endpoint Security Client GUI fails to display User Check calls that occurred while the user was logged off. |
| AHTP-33189 | The Forensics, Anti-Bot, or URLF Filtering Blades may crash when processing specific files or URLs with invalid responses from reputation services. |
| AHTP-33630 | When downloading ZIP files from S3/FTP servers, the downloaded ZIP files become corrupted and cannot be opened or extracted using Windows File Explorer, requiring external tools like 7-Zip to access the contents. |
| AHTP-32957 | Behavioral Guard, Offline Reputation, Static Analysis signatures are not getting updated. |
| Anti-Bot and URL Filtering ||
| AHTP-33013 | High memory and CPU usage by the Anti-Bot Blade may occur when DNS Inspection is enabled on the DNS Servers. |
| Anti-Malware E2 (US-DHS and EU compliant) ||
| AHTP-32998 | When using SuperNode or a shared signature folder for Anti-Malware signatures update, signature updates fail to propagate from the Server to the Client, requiring manual retries. |
| Anti-Ransomware, Behavioral Guard and Forensics ||
| AHTP-33467 | A rare BSOD may occur when Group Policy is updated and the Behavioral Guard Blade is turned on. |
| AHTP-31934 | The Behavioral Guard Blade may block malicious behavior without a pop-up notification to the user. |
| AHTP-33315 | There may be redundant log errors including "*add failed during enqueue of record* ", "*FileNotFoundException* ", and "*IsFileEncrypted failed*" in local log files. |
| AHTP-33293 | The EFR process may exit. |
| Threat Emulation ||
| AHTP-33152 | When the environment exceeds the Emulation server quota, the Endpoint Management Server displays "*No Connection* " instead of "*No Quota*". |
| AHTP-33084 | Path exclusions with user profile environment variables (such as %APPDATA%) are not applied on Windows 11. |
| EPS-60188 | File emulation requests are not distributed evenly across Threat Emulation appliance machines, resulting in performance bottlenecks and slower processing times. |
| AHTP-33042 | In rare scenarios, insufficient system resources can lead to the unexpected exit of Threat Prevention processes. |
| Remote Access VPN ||
| ESVPN-4682 | A pop-up message about the blocked epcgina.dll file may be displayed on some Windows versions. |
{#resolvedTable}
Endpoint Security Client Downloads {#4}
---------------------------------------
Show / Hide this section
> * Starting from E80.85, Harmony Endpoint improves coverage of malicious threats by sending anonymized Incident related data to the Check Point Threat Cloud. This feature is turned on by default. For more information, including how to disable this feature, refer to [sk129753](https://support.checkpoint.com/results/sk/sk129753).
>
> ### *Endpoint Security E89.10 Clients - US-DHS and EU compliant* {#Endpoint_Security_E85.10_ClientsE2}
>
> |----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|--------------------------------------------------------------------------------------------------------------------------|-------------------------------------------------------------------------------------------------------------------------|
> | Package Description | Links ||
> | Endpoint Security Clients for Windows OS - Dynamic package: > Complete Endpoint Security Client for any CPU (32bit or 64bit). This is a self-extracting executable EXE file with all components (Blades). | [](https://support.checkpoint.com/results/download/136498) (EXE) ||
> | Initial client: > Initial client is a very thin client without any blade used for software deployment purposes. | [](https://support.checkpoint.com/results/download/136499) (ZIP) ||
> | Package Description | 32bit | 64bit |
> | **Endpoint Complete package:** > * Anti-Bot and URL Filtering > * Anti-Malware E2 (US-DHS and EU compliant) > * Anti-Ransomware, Behavioral Guard and Forensics > * Compliance and Posture > * Firewall and Application Control > * Full Disk Encryption > * Media Encryption and Port Protection > * Threat Emulation > * Remote Access VPN | [](https://support.checkpoint.com/results/download/136500) (ZIP) | [](https://support.checkpoint.com/results/download/136501)(ZIP) |
>
> {#resolvedTable}
For more info about replacing Anti-Malware Blade with US-DHS and EU compliant Blade, refer to [sk178307](https://support.checkpoint.com/results/sk/sk178307). {#Endpoint_Security_E85.10_Clients}
Standalone Client Downloads {#5}
--------------------------------
Show / Hide this section
> **Note:** These Standalone clients do not require Endpoint Security Server installation as part of their deployment.
>
> ### *Standalone E89.11 Clients*
>
> **Note** : Remote Access VPN Standalone Client E89.10 is replaced with E89.11, which includes a stability improvement. Customers running Remote Access VPN Standalone Client E89.10 are advised to upgrade to E89.11. See the ESVPN-4784 issue in Known Limitations below.
>
> |----------------------------------------------------------------|-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|--------------------------------------------------------------------------------------------------------------------------|
> | Package | Description | Link |
> | **Remote Access VPN Clients for Windows** | Remote Access VPN Client for SmartDashboard-managed clients | [](https://support.checkpoint.com/results/download/141640) (MSI) |
> | **Remote Access VPN Clients (Automatic Upgrade file)** | Remote Access VPN Client for automatic upgrade through the gateway. For SmartDashboard-managed clients only. | [](https://support.checkpoint.com/results/download/141641) (CAB) |
> | **Remote Access VPN Clients for ATM** | Unattended Remote Access VPN clients, managed with CLI and API and do not have a User interface. | [](https://support.checkpoint.com/results/download/141642) (MSI) |
> | **Remote Access VPN Clients for ATM (Automatic Upgrade file)** | Unattended Remote Access VPN clients, managed with CLI and API and do not have a User interface for automatic upgrade through the gateway. For SmartDashboard-managed clients only. | [](https://support.checkpoint.com/results/download/141643) (CAB) |
{#resolvedTable}
Endpoint Security Server Downloads {#6}
---------------------------------------
Show / Hide this section
>
> |--------------------------|---------------------------------|----------------------------------------------------------------|
> | Endpoint Security Server | Package | Link |
> | **R82.10** | Endpoint Security Server R82.10 | [sk183506](https://support.checkpoint.com/results/sk/sk183506) |
> | **R82** | Endpoint Security Server R82 | [sk181127](https://support.checkpoint.com/results/sk/sk181127) |
> | **R81.20** | Endpoint Security Server R81.20 | [sk173903](https://support.checkpoint.com/results/sk/sk173903) |
> | **R81.10** | Endpoint Security Server R81.10 | [sk170416](https://support.checkpoint.com/results/sk/sk170416) |
> {#resolvedTable}
Management Console Downloads {#7}
---------------------------------
Show / Hide this section
>
> ### *Management Console for Endpoint Security Server* {#SmartConsole for Endpoint Security Server}
>
> The SmartConsole for Endpoint Security Server allows the Administrator to connect to the Endpoint Security Server and to manage the new Endpoint Security Software Blades.
>
> |--------------------------|--------------------------------------------------|----------------------------------------------------------------------------------------------------------------|
> | Endpoint Security Server | Package | Link |
> | **R82.10** | SmartConsole for Endpoint Security Server R82.10 | [link](https://support.checkpoint.com/results/download/135254) |
> | **R82** | SmartConsole for Endpoint Security Server R82 | [link](https://support.checkpoint.com/results/download/125531) |
> | **R81.20** | SmartConsole for Endpoint Security Server R81.20 | [link](https://sc1.checkpoint.com/documents/Jumbo_HFA/R81.20_SC/R81.20/R81.20-List-of-all-Resolved-Issues.htm) |
> | **R81.10** | SmartConsole for Endpoint Security Server R81.10 | [link](https://sc1.checkpoint.com/documents/Jumbo_HFA/R81.10_SC/Default.htm) |
{#resolvedTable}
Utilities Downloads {#8}
------------------------
Show / Hide this section
>
> |---------------------------------------------------------------------------------------------|--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|--------------------------------------------------------------------------------------------------------------------------|
> | Package | Description | Link |
> | **Harmony Endpoint Remediation Manager for Administrators (AdminRemediationManagerUI.exe)** | The administrator utility contains the capabilities of the end-user utility plus these additional features: * Quarantine - Send files to quarantine. * Delete - Use the Harmony Endpoint remediation service to delete a file. * Import - Import a quarantined file from a different computer or location. Get the administrator utility from the release homepage | [](https://support.checkpoint.com/results/download/140496) (EXE) |
> | **Full Disk Encryption Offline Management Tool (OfflineMgmtTool.msi)** | The Endpoint Offline Management Tool lets administrators manage offline mode users and give them password recovery and disk recovery. | [](https://support.checkpoint.com/results/download/120236) (TGZ) |
> | **Full Disk Encryption Offline Management Tool - Japanese (OfflineMgmtToolJapanese.msi)** | The Endpoint Offline Management Tool lets administrators manage offline mode users and give them password recovery and disk recovery. | [](https://support.checkpoint.com/results/download/120237) (TGZ) |
{#resolvedTable} {#Full Disk Encryption Offline Management Tool}
Known Limitations {#9}
----------------------
Show / Hide this section
>
> |------------|----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|
> | Issue ID | Description |
> | ESVPN-4784 | Remote Access VPN Standalone Client E89.10 is replaced with E89.11, which includes a stability improvement. Customers running Remote Access VPN Standalone Client E89.10 are advised to upgrade to E89.11. To upgrade from the Remote Access VPN Standalone Client to Endpoint Security Client, use one of these two options: * Uninstall the E89.11 Remote Access VPN Standalone Client first, then install Endpoint Security Client * Use Endpoint Security Client E89.20 or higher |
> | EPS-51129 | FDE Smart Pre-boot (EA feature) secondary external display connected via docking station may not work. Support for secondary display via docking stations is experimental and depends on hardware, firmware settings, and display connection type. |
> | EPS-50963 | Endpoint Client Posture Management is not supported on Windows 7 OS. Automatic Download is not displayed, and the Patch status is shown as "*Update not available*". |
> | EPS-51871 | When Windows Smart App Control is enabled, it blocks the execution of the Media Encryption offline utility (which is located on the removeable media). As a workaround, you can copy the utility *Access To Business Data.exe* to a local disk and execute it from there. |
> | EPS-52957 | SmartCard authentication is not supported in FDE Smart Pre-boot (EA feature). |
> | ESVPN-3943 | The login prompt of Implicit Secure Domain Logon (SDL) appears before the Windows logon on the computer, which is not part of any domain. |
> | ESVPN-4305 | * If the user changes the language of the Endpoint Security Client UI, the language of the VPN UI will not be changed until the next reboot. * If the user changes the language of Endpoint Security Client UI to a non-Latin language (Russian, Greek, Chinese, etc.), he might see question marks in VPN UI unless he sets the correct language for non-Unicode applications in Windows language settings. |
> | AHTP-30337 | For Endpoint Security Clients with Anti-Malware E2 (US-DHS and EU compliant), after an upgrade from E88.31 or lower to E88.40 or higher version: * On Windows machines that support Azure Code Signing Signatures, Check Point Endpoint Security is registered twice in the Windows Security Center. Reboot resolves the issue. * On Windows machines that do not support Azure Code Signing Signatures, after updating Windows with configuration and dependencies to support Azure Code Signing signatures, Check Point Endpoint Security is registered twice in the Windows Security Center. Reboot resolves the issue. |
> | EPS-58003 | In some scenarios, the transition from Classic Pre-boot to Smart Pre-boot may require a restart. |
> | EPS-59275 | After uninstalling the Endpoint Security Client, the computer may remain listed as registered in the Management pane. This occurs only in networks where the Client communicates with the Server through an authenticated proxy. Such proxies are not supported for sending unregistered messages. This limitation does not apply if the Client communicates directly with the Server or through an unauthenticated proxy. In those cases, the computer is removed from asset management as expected. |
> | - | The "Export Forensics data to External DB" feature is not supported in this version. Refer to [sk179659](https://support.checkpoint.com/results/sk/sk183132). |
Documentation \& Related SecureKnowledge Articles {#10}
-------------------------------------------------------
Show / Hide this section
>
> |------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|
> | Endpoint Security Clients |
> | [Endpoint Security Clients for Windows E89.x Release Notes](https://sc1.checkpoint.com/documents/E89.x/EN/Endpoint_Security_Clients_for_Windows_RN/Default.htm) |
> | [Endpoint Security Clients for Windows User Guide](https://sc1.checkpoint.com/documents/HarmonyEndpoint/Endpoint_Security_Clients_for_Windows_UserGuide/Default.htm) |
> | [Replacing Anti-Malware Blade with US-DHS and EU compliant Blade](https://support.checkpoint.com/results/sk/sk178307) |
> | [Harmony Endpoint Security for Windows MDM Deployment Guide](https://sc1.checkpoint.com/documents/HarmonyEndpoint/Harmony_Endpoint_Security_for_Windows_MDM_Deployment_Guide/Default.htm) |
> | [sk120667 - How to upgrade to Windows 10 1607 and higher with FDE in-place](https://support.checkpoint.com/results/sk/sk120667) |
> | [sk133174 - Enterprise Endpoint Security Windows Clients for ATM](https://support.checkpoint.com/results/sk/sk133174) |
> | [sk183716 - Enterprise Endpoint Security Hotfixes for E89.x Windows Clients Releases](https://support.checkpoint.com/results/sk/sk183716) |
> | [Harmony Endpoint Safe Deployment Procedure (SDP)](https://sc1.checkpoint.com/documents/HarmonyEndpoint/Harmony_Endpoint_Safe_Deployment/Harmony_Endpoint_Safe_Deployment_Procedure_(SDP).pdf) |
> | Remote Access VPN Clients |
> | [E89.x Remote Access VPN Clients for Windows Release Notes](https://sc1.checkpoint.com/documents/E89.x/EN/Remote_Access_VPN_Clients_for_Windows_RN/Default.htm) |
> | [Remote Access VPN Clients for Windows Administration Guide](https://sc1.checkpoint.com/documents/RemoteAccessClients_forWindows_AdminGuide/Default.htm) |
> | EPMaaS |
> | [Harmony Endpoint EPMaaS Administration Guide](https://sc1.checkpoint.com/documents/Infinity_Portal/WebAdminGuides/EN/Harmony-Endpoint-Admin-Guide/Default.htm) |
> | Endpoint Security Server |
> | [Harmony Endpoint Server R82.10 Administration Guide](https://sc1.checkpoint.com/documents/R82.10/SmartEndpoint_OLH/EN/Default.htm) |
> | [Harmony Endpoint Web Management R82.10 Administration Guide](https://sc1.checkpoint.com/documents/R82.10/WebAdminGuides/EN/CP_R82.10_HarmonyEndpointWebManagement_AdminGuide/Default.htm) |
> | [R82.10 Release Notes](https://sc1.checkpoint.com/documents/R82.10/WebAdminGuides/EN/CP_R82.10_RN/Default.htm) |
> | [Harmony Endpoint Server R82 Administration Guide](https://sc1.checkpoint.com/documents/R82/SmartEndpoint_OLH/EN/Content/Topics-EPSG-R82.00/Intro-to-Endpoint_Security.htm) |
> | [Harmony Endpoint Web Management R82 Administration Guide](https://sc1.checkpoint.com/documents/R82/WebAdminGuides/EN/CP_R82_HarmonyEndpointWebManagement_AdminGuide/Default.htm) |
> | [R82 Release Notes](https://sc1.checkpoint.com/documents/R82/WebAdminGuides/EN/CP_R82_RN/Default.htm) |
> | [Harmony Endpoint Server R81.20 Administration Guide](https://sc1.checkpoint.com/documents/R81.20/SmartEndpoint_OLH/EN/Default.htm) |
> | [Harmony Endpoint Web Management R81.20 Administration Guide](https://sc1.checkpoint.com/documents/R81.20/WebAdminGuides/EN/CP_R81.20_HarmonyEndpointWebManagement_AdminGuide/Default.htm) |
> | [R81.20 Release Notes](https://sc1.checkpoint.com/documents/R81.20/WebAdminGuides/EN/CP_R81.20_RN/Content/Topics-RN/Whats-New.htm) |
> | [Harmony Endpoint Server R81.10 Administration Guide](https://sc1.checkpoint.com/documents/R81.10/SmartEndpoint_OLH/EN/Default.htm) |
> | [Harmony Endpoint Web Management R81.10 Administration Guide](https://sc1.checkpoint.com/documents/R81.10/WebAdminGuides/EN/CP_R81.10_HarmonyEndpointWebManagement_AdminGuide/Default.htm) |
> | [R81.10 Release Notes](https://sc1.checkpoint.com/documents/R81.10/WebAdminGuides/EN/CP_R81.10_RN/Topics-RN/Whats-New.htm) |
>
>
>
> For more information on Check Point releases, see: [Release map](https://support.checkpoint.com/results/sk/sk152052), [Upgrade and Backward Compatibility maps](https://support.checkpoint.com/results/sk/sk113113), [Releases plan](https://support.checkpoint.com/results/sk/sk95746).
> You can also visit our [Endpoint forum](https://community.checkpoint.com/community/infinity-general/endpoint), [Remote Access forum](https://community.checkpoint.com/community/infinity-general/remote-access), or any other [CHECKMATES forum](https://community.checkpoint.com/) to ask questions and get answers from technical peers and Support experts.
---
# Agent Instructions
This content is from the Check Point Support Center (https://support.checkpoint.com), the official knowledge base for Check Point cybersecurity products.
## Navigating This Knowledge Base
- **Complete index**: [llms.txt](https://support.checkpoint.com/llms.txt)
- **All SK articles**: [SecureKnowledge Sitemap](https://support.checkpoint.com/sitemaps/secureknowledge-sitemap-index.xml)
- **SK article URL pattern**: `https://support.checkpoint.com/results/sk/{skId}`
- **Markdown responses**: AI bot User-Agents automatically receive `text/markdown` content