Installation and upgrade
Installer Integration - All the files needed to install or upgrade the Endpoint Security product module are contained in a single package file called Endpoint Security. McAfee Endpoint Security Adaptive Threat Protection (ATP) is included in the package file.
All product modules are installed by default. If you do not want to install all product modules, you can use command line options to specify which modules to install.
During a product upgrade, the installation wizard detects which product modules are installed and upgrades to the same version. You can delete modules that you do not want to upgrade, or you can specify other modules to install.
Support for case sensitivity - On systems running Microsoft Windows 10 October 2018 Update (1810), verify that the case sensitivity attribute is disabled for the folder where you want to install the product software. You can check and change this property setting in Windows. After installation, Endpoint Security protects the product folder from case sensitivity to ensure that this property setting does not prevent product updates and upgrades.
McAfee Endpoint Security Common
Client Interface Lockout Behavior - Adds a feature that enforces Endpoint Security client lockout if the number of failed password attempts exceeds the configured limit. Use the Enable Client Interface Locking setting in the Common Options policy in McAfee ePolicy Orchestrator (McAfee ePO) to configure locking behavior.
McAfee Endpoint Security Threat Protection
On-Demand Scan Command Line Interface - Adds the ability to start, stop, pause, resume and get fast, full and custom on-demand scan status from the command line or as part of a batch file.
Custom On-Demand Scan Command Line Interface - Added the ability to run previously defined custom on-demand scans with new settings without changing the settings of the original custom scan.
Update Command Line Interface - Adds the ability to update the scan engine, AMCore content and exploit protection from the command line or as part of a batch file.
Expert rule enhancements.
Add REGVAL_DATA, a new MATCH_type value that matches the registry value data in the context of the registry value collection operation, whether it is creating a registry variable or changing its value.
Add a behavior protection rule.
Scan CPU Limits on Demand - Adds the maximum percentage of CPU consumed by a full scan (between 25% and 100%, the default is 80%) when configuring a scan file. This feature is disabled by default and is only available when you select Scan Anytime. It is an alternative to using system utilization settings.
McAfee Endpoint Security Web Control
Microsoft Edge Support - Add Microsoft Edge as a supported browser.
McAfee Endpoint Security Adaptive Threat Protection (ATP)
Enhanced script scanning - Supports integration with AMSI (Anti-Malware Scan Interface) and PowerShell event logging to enhance threat scanning in non-browser-based scripts such as PowerShell, JavaScript and VBScript. This feature is enabled by default.
Enhanced Fix - Monitors the behavior of processes named Unknown and below and their child processes, tracking all changes made to the system by the process. If the monitored process exhibits malicious behavior, the enhanced remediation stops the process and restores its changes, restoring the system to its original state as much as possible before the process runs. This feature is enabled by default and is only available when "Clear when reputation threshold is reached" is enabled.
Enhanced file-free threat protection - Allows McAfee to detect and protect against fileless, dual-purpose and real-time off-site attacks.
Storyboard of Adaptive Threat Protection Detection - Provides a visual representation of the events that caused the detected threat. It allows you to check for malicious activity and determine the appropriate action. Scroll down in the McAfee ePO threat event log to view a story map of a specific event.
Updated platform, environment or operating system support
This release extends support for other platforms, environments, or operating systems:
Microsoft Windows 10 - Added Microsoft Windows 10 October 2018 update (1810) as a supported operating system.
McAfee ePO 5.10 - Add McAfee ePO 5.10 as a supported management platform.
|
