Bitdefender Endpoint Security Tools

RELEASE NOTES Endpoint Security Tools Release Notes

Copyright© 2021 Bitdefender

50340A34392034390AFE02048790BF8082B92FA06FA080BA74BC7CC1AE80BA996CE11D2E80BA74C7E78C2E80 82FFB239EA2080FEAAAAAAAABF800006AA3FB00000FBD5EFE73AD5009CF2544B4C3D00A6B67D616B878031FB 500EA66D0063567F854DF700E84116D29479001E1671326B0580C5FB204BC43D8067FDFBC34DB780D0D21797 1C6C00C7917C347B4580254D7859B54800EE712FF15D9700606495D7DC7D00AFBD83E36BFD8058E6B23EC589 003A89EEB31DAF00C8C91627818C001FB72BF86BFB803D6ABDBFC000809E5E6C015DFE80A54917860DD200B3 0202C06377805DE366E8361180DF05ED2359FA00AD5455C690B200A3E97B50FB728034D4AF78869180FFA96A 063B6F80D53484FF0C718046A5B3D16B298071D6D5BE608100E375ABE609FE8000DA16331D8A00FEF606A13E AF80825B662EA68800BADF6BE52EFE80BA891646848B00BA9C21A5EE700082CC28DA84E080FEA1EC237E1780 Legal Notice All rights reserved. No part of this book may be reproduced or transmitted in any form or by any means, electronic or mechanical, including photocopying, recording, or by any information storage and retrieval system, without written permission from an authorized representative of Bitdefender. The inclusion of brief quotations in reviews may be possible only with the mention of the quoted source. The content can not be modified in any way. Warning and Disclaimer. This product and its documentation are protected by copyright. The information in this document is provided on an “as is” basis, without warranty. Although every precaution has been taken in the preparation of this document, the authors will not have any liability to any person or entity with respect to any loss or damage caused or alleged to be caused directly or indirectly by the information contained in this work. This book contains links to third-party Websites that are not under the control of Bitdefender, therefore Bitdefender is not responsible for the content of any linked site. If you access a third-party website listed in this document, you will do so at your own risk. Bitdefender provides these links only as a convenience, and the inclusion of the link does not imply that Bitdefender endorses or accepts any responsibility for the content of the third-party site. Trademarks. Trademark names may appear in this book. All registered and unregistered trademarks in this document are the sole property of their respective owners, and are respectfully acknowledged. Table of Contents 1. Introduction ...... 1 2. Bitdefender Endpoint Security Tools for Windows version 7 ...... 2 2.1. Version History ...... 2 2.1.1. Version 7.2.2.85 ...... 2 2.1.2. Version 7.2.2.84 ...... 2 2.1.3. Version 7.2.1.73 ...... 3 2.1.4. Version 7.2.1.72 ...... 3 2.1.5. Version 7.2.1.70 ...... 4 2.1.6. Version 7.2.1.69 ...... 4 2.1.7. Version 7.2.1.65 ...... 4 2.1.8. Version 7.2.1.62 ...... 5 2.1.9. Version 7.2.1.60 ...... 6 2.1.10. Version 7.1.2.33 ...... 7 2.1.11. Version 7.1.1.28 ...... 8 2.1.12. Version 7.1.1.20 ...... 9 3. Bitdefender Endpoint Security Tools for Windows version 6 ...... 10 3.1. Version History ...... 10 3.1.1. Version 6.6.100.397 ...... 10 3.1.2. Version 6.6.27.390 ...... 10 3.1.3. Version 6.6.26.382 ...... 11 3.1.4. Version 6.6.26.376 ...... 11 3.1.5. Version 6.6.26.373 ...... 12 3.1.6. Version 6.6.25.362 ...... 13 3.1.7. Version 6.6.25.359 ...... 13 3.1.8. Version 6.6.25.353 ...... 14 3.1.9. Version 6.6.24.337 ...... 15 3.1.10. Version 6.6.23.329 ...... 16 3.1.11. Version 6.6.23.325 ...... 16 3.1.12. Version 6.6.23.323 ...... 17 3.1.13. Version 6.6.22.315 ...... 18 3.1.14. Version 6.6.22.311 ...... 18 3.1.15. Version 6.6.21.304 ...... 20 3.1.16. Version 6.6.21.302 ...... 20 3.1.17. Version 6.6.21.301 ...... 21 3.1.18. Version 6.6.20.294 ...... 22 3.1.19. Version 6.6.20.293 ...... 22 3.1.20. Version 6.6.20.289 ...... 23 3.1.21. Version 6.6.20.287 ...... 23 3.1.22. Version 6.6.20.284 ...... 24 3.1.23. Version 6.6.20.282 ...... 24 3.1.24. Version 6.6.19.274 ...... 25 3.1.25. Version 6.6.19.273 ...... 26 3.1.26. Version 6.6.18.265 ...... 27 3.1.27. Version 6.6.18.261 ...... 27

iii 3.1.28. Version 6.6.17.249 ...... 28 3.1.29. Version 6.6.17.247 ...... 29 3.1.30. Version 6.6.17.243 ...... 29 3.1.31. Version 6.6.17.242 ...... 30 3.1.32. Version 6.6.17.241 ...... 30 3.1.33. Version 6.6.16.226 ...... 31 3.1.34. Version 6.6.16.222 ...... 31 3.1.35. Version 6.6.16.218 ...... 32 3.1.36. Version 6.6.16.216 ...... 32 3.1.37. Version 6.6.16.209 ...... 33 3.1.38. Version 6.6.15.207 ...... 34 3.1.39. Version 6.6.14.204 ...... 34 3.1.40. Version 6.6.14.199 ...... 35 3.1.41. Version 6.6.14.198 ...... 35 3.1.42. Version 6.6.14.194 ...... 36 3.1.43. Version 6.6.13.183 ...... 37 3.1.44. Version 6.6.13.180 ...... 37 3.1.45. Version 6.6.13.175 ...... 38 3.1.46. Version 6.6.12.170 ...... 38 3.1.47. Version 6.6.11.162 ...... 40 3.1.48. Version 6.6.11.161 ...... 40 3.1.49. Version 6.6.11.159 ...... 41 3.1.50. Version 6.6.10.148 ...... 42 3.1.51. Version 6.6.10.146 ...... 43 3.1.52. Version 6.6.10.142 ...... 43 3.1.53. Version 6.6.10.141 ...... 44 3.1.54. Version 6.6.9.134 ...... 45 3.1.55. Version 6.6.9.131 ...... 46 3.1.56. Version 6.6.9.129 ...... 46 3.1.57. Version 6.6.9.127 ...... 47 3.1.58. Version 6.6.8.119 ...... 47 3.1.59. Version 6.6.8.117 ...... 48 3.1.60. Version 6.6.8.115 ...... 48 3.1.61. Version 6.6.8.112 ...... 49 3.1.62. Version 6.6.7.106 ...... 51 3.1.63. Version 6.6.7.103 ...... 52 3.1.64. Version 6.6.7.99 ...... 52 3.1.65. Version 6.6.7.97 ...... 53 3.1.66. Version 6.6.7.96 ...... 53 3.1.67. Version 6.6.6.84 ...... 54 3.1.68. Version 6.6.5.82 ...... 55 3.1.69. Version 6.6.5.81 ...... 57 3.1.70. Version 6.6.5.78 ...... 58 3.1.71. Version 6.6.4.71 ...... 59 3.1.72. Version 6.6.4.68 ...... 59 3.1.73. Version 6.6.4.67 ...... 60 3.1.74. Version 6.6.3.61 ...... 60 3.1.75. Version 6.6.3.60 ...... 61

iv 3.1.76. Version 6.6.3.59 ...... 61 3.1.77. Version 6.6.2.49 ...... 62 3.1.78. Version 6.6.1.37 ...... 64 3.1.79. Version 6.6.1.36 ...... 65 3.1.80. Version 6.2.36.1014 ...... 66 3.1.81. Version 6.2.35.1008 ...... 68 3.1.82. Version 6.2.35.1004 ...... 68 3.1.83. Version 6.2.35.1003 ...... 69 3.1.84. Version 6.2.34.1000 ...... 70 3.1.85. Version 6.2.34.998 ...... 70 3.1.86. Version 6.2.34.994 ...... 71 3.1.87. Version 6.2.31.985 ...... 72 3.1.88. Version 6.2.31.984 ...... 73 3.1.89. Version 6.2.31.983 ...... 73 3.1.90. Version 6.2.30.982 ...... 73 3.1.91. Version 6.2.26.960 ...... 74 3.1.92. Version 6.2.26.959 ...... 75 3.1.93. Version 6.2.25.953 ...... 76 3.1.94. Version 6.2.25.950 ...... 77 3.1.95. Version 6.2.25.944 ...... 157 3.1.96. Version 6.2.24.938 ...... 78 3.1.97. Version 6.2.24.937 ...... 78 3.1.98. Version 6.2.23.932 ...... 79 3.1.99. Version 6.2.22.923 ...... 80 3.1.100. Version 6.2.22.918 ...... 80 3.1.101. Version 6.2.22.916 ...... 81 3.1.102. Version 6.2.21.908 ...... 83 3.1.103. Version 6.2.19.899 ...... 83 3.1.104. Version 6.2.19.894 ...... 84 3.1.105. Version 6.2.18.884 ...... 85 3.1.106. Version 6.2.18.882 ...... 85 3.1.107. Version 6.2.17.876 ...... 86 3.1.108. Version 6.2.15.869 ...... 88 3.1.109. Version 6.2.15.860 ...... 88 3.1.110. Version 6.2.14.851 ...... 89 3.1.111. Version 6.2.10.832 ...... 90 3.1.112. Version 6.2.10.829 ...... 158 3.1.113. Version 6.2.9.808 ...... 92 3.1.114. Version 6.2.9.799 ...... 92 3.1.115. Version 6.2.9.775 ...... 160 3.1.116. Version 6.2.9.751 ...... 95 3.1.117. Version 6.2.9.742 ...... 95 3.1.118. Version 6.2.7.721 ...... 97 3.1.119. Version 6.2.7.719 ...... 162 3.1.120. Version 6.2.7.710 ...... 163 3.1.121. Version 6.2.7.696 ...... 164 3.1.122. Version 6.2.6.670 ...... 166 3.1.123. Version 6.2.6.669 ...... 166

v 3.1.124. Version 6.2.5.661 ...... 168 3.1.125. Version 6.2.5.659 ...... 168 3.1.126. Version 6.2.4.649 ...... 171 3.1.127. Version 6.2.4.646 ...... 171 3.1.128. Version 6.2.4.612 ...... 107 3.1.129. Version 6.2.4.610 ...... 173 3.1.130. Version 6.2.4.587 ...... 109 3.1.131. Version 6.2.4.582 ...... 174 3.1.132. Version 6.2.3.569 ...... 177 3.1.133. Version 6.2.2.563 ...... 113 3.1.134. Version 6.2.2.547 ...... 178 3.1.135. Version 6.2.2.546 ...... 178 3.1.136. Version 6.2.1.541 ...... 178 3.2. Known Issues ...... 118 3.3. Limitations ...... 119 4. Bitdefender Endpoint Security Tools for Windows Legacy ...... 120 4.1. Version History ...... 120 4.1.1. Version 6.4.3.84 ...... 120 4.1.2. Version 6.4.3.81 ...... 120 4.1.3. Version 6.4.2.79 ...... 121 4.1.4. Version 6.4.1.72 ...... 121 4.2. Known Issues ...... 123 4.3. Limitations ...... 124 5. Bitdefender Endpoint Security Tools for ...... 126 5.1. Version History ...... 126 5.1.1. Version 6.2.21.165 ...... 126 5.1.2. Version 6.2.21.160 ...... 126 5.1.3. Version 6.2.21.155 ...... 127 5.1.4. Version 6.2.21.141 ...... 127 5.1.5. Version 6.2.21.137 ...... 127 5.1.6. Version 6.2.21.136 ...... 128 5.1.7. Version 6.2.21.135 ...... 128 5.1.8. Version 6.2.21.133 ...... 128 5.1.9. Version 6.2.21.125 ...... 129 5.1.10. Version 6.2.21.108 ...... 130 5.1.11. Version 6.2.21.106 ...... 130 5.1.12. Version 6.2.21.103 ...... 131 5.1.13. Version 6.2.21.97 ...... 132 5.1.14. Version 6.2.21.94 ...... 132 5.1.15. Version 6.2.21.92 ...... 133 5.1.16. Version 6.2.21.88 ...... 134 5.1.17. Version 6.2.21.88 ...... 134 5.1.18. Version 6.2.21.87 ...... 134 5.1.19. Version 6.2.21.84 ...... 135 5.1.20. Version 6.2.21.79 ...... 135 5.1.21. Version 6.2.21.76 ...... 135 5.1.22. Version 6.2.21.67 ...... 136

vi 5.1.23. Version 6.2.21.66 ...... 136 5.1.24. Version 6.2.21.64 ...... 136 5.1.25. Version 6.2.21.63 ...... 137 5.1.26. Version 6.2.21.53 ...... 138 5.1.27. Version 6.2.21.49 ...... 139 5.1.28. Version 6.2.21.46 ...... 139 5.1.29. Version 6.2.21.42 ...... 139 5.1.30. Version 6.2.21.32 ...... 140 5.1.31. Version 6.2.21.31 ...... 141 5.1.32. Version 6.2.21.29 ...... 141 5.1.33. Version 6.2.21.28 ...... 141 5.1.34. Version 6.2.21.27 ...... 142 5.1.35. Version 6.2.21.23 ...... 142 5.1.36. Version 6.2.21.21 ...... 143 5.1.37. Version 6.2.21.18 ...... 143 5.1.38. Version 6.2.21.12 ...... 144 5.1.39. Version 6.2.21.11 ...... 145 5.1.40. Version 6.2.21.7 ...... 145 5.1.41. Version 6.2.20.87 ...... 146 5.1.42. Version 6.2.20.80 ...... 147 5.1.43. Version 6.2.20.79 ...... 148 5.1.44. Version 6.2.20.74 ...... 148 5.1.45. Version 6.2.20.67 ...... 148 5.1.46. Version 6.2.20.63 ...... 149 5.1.47. Version 6.2.20.60 ...... 150 5.1.48. Version 6.2.20.48 ...... 151 5.1.49. Version 6.2.20.47 ...... 151 5.1.50. Version 6.2.20.45 ...... 151 5.1.51. Version 6.2.20.36 ...... 152 5.1.52. Version 6.2.19.32 ...... 153 5.1.53. Version 6.2.19.30 ...... 153 5.1.54. Version 6.2.18.28 ...... 154 5.1.55. Version 6.2.18.25 ...... 154 5.1.56. Version 6.2.17.18 ...... 155 5.1.57. Version 6.2.17.17 ...... 155 5.1.58. Version 6.2.16.10 ...... 156 5.1.59. Version 6.2.15.868 ...... 157 5.1.60. Version 6.2.15.864 ...... 157 5.1.61. Version 6.2.10.835 ...... 157 5.1.62. Version 6.2.10.829 ...... 158 5.1.63. Version 6.2.9.775 ...... 160 5.1.64. Version 6.2.9.747 ...... 162 5.1.65. Version 6.2.9.743 ...... 162 5.1.66. Version 6.2.7.719 ...... 162 5.1.67. Version 6.2.7.710 ...... 163 5.1.68. Version 6.2.7.696 ...... 164 5.1.69. Version 6.2.7.688 ...... 166 5.1.70. Version 6.2.6.670 ...... 166

vii 5.1.71. Version 6.2.6.669 ...... 166 5.1.72. Version 6.2.5.661 ...... 168 5.1.73. Version 6.2.5.659 ...... 168 5.1.74. Version 6.2.4.649 ...... 171 5.1.75. Version 6.2.4.646 ...... 171 5.1.76. Version 6.2.4.610 ...... 173 5.1.77. Version 6.2.4.582 ...... 174 5.1.78. Version 6.2.3.572 ...... 176 5.1.79. Version 6.2.3.569 ...... 177 5.1.80. Version 6.2.2.547 ...... 178 5.1.81. Version 6.2.2.546 ...... 178 5.1.82. Version 6.2.1.541 ...... 178 5.2. Known Issues ...... 182

viii 1. INTRODUCTION The GravityZone business solution introduces Bitdefender Endpoint Security Tools, an intelligent environment-aware security agent for physical and virtual endpoints. Compared to the previous Bitdefender security agents, this agent brings a series of improvements and new features that takes endpoint security to a new level. This document covers what is new, resolved issues for each Bitdefender Endpoint Security Tools release. The document also includes the known issues and limitations of the product. Under the Known Issues section you can inspect the list of reported yet unresolved issues. This list is updated periodically and we kindly recommend you consult it before submitting any issues to our Support Team.

Note Bitdefender Endpoint Security Tools release notes include also the changes related to Exchange Servers protection, a feature that may not be available for your Bitdefender GravityZone security pack.

Introduction 1 2. BITDEFENDER ENDPOINT SECURITY TOOLS FOR WINDOWS VERSION 7 2.1. Version History 2.1.1. Version 7.2.2.85 Release date: Fast ring: 2021.08.23 Slow ring: -

Important ● During this update, the Microsoft Exchange Transport service will be stopped.

Resolved Issues Product

● The Endpoint Security Console service crashed after installing the security agent on a different partition on Windows Server 2012. 2.1.2. Version 7.2.2.84 Release date: Fast ring: 2021.08.17 Slow ring: -

Important ● During this update, the Microsoft Exchange Transport service will be stopped.

Resolved Issues Content Control

● The Content Control module led to a slowdown when downloading files from the network share. Product

Bitdefender Endpoint Security Tools for Windows version 7 2 ● Addressed a specific scenario where the product caused critical errors (BSOD). The issue is now fixed.

● The Endpoint Security Console service randomly created a certain file on endpoints.

● Fixed an incorrect Korean translation displayed in the local interface. 2.1.3. Version 7.2.1.73 Release date: Fast ring: 2021.07.27 Slow ring: 2021.07.28

Important ● During this update, the Microsoft Exchange Transport service will be stopped.

Resolved Issues Product

● The Endpoint Security Service generated high RAM usage when the endpoint received new policy settings. 2.1.4. Version 7.2.1.72 Release date: Fast ring: 2021.07.19 Slow ring: 2021.07.19

Important ● During this update, the Microsoft Exchange Transport service will be stopped.

● This version also includes on slow ring the improvements and fixes delivered with the Bitdefender Endpoint Security Tools version 7.2.1.70, released on fast ring.

New Features and Improvements

● New features and improvements from version 7.2.1.70 on fast ring.

Bitdefender Endpoint Security Tools for Windows version 7 3 Resolved Issues Endpoint Detection and Response(EDR)

● The EDR module generated invalid incidents for quarantined items. 2.1.5. Version 7.2.1.70 Release date: Fast ring: 2021.07.15 Slow ring: -

Important ● During this update, the Microsoft Exchange Transport service will be stopped.

New Features and Improvements Advanced Threat Control

● Advanced Threat Control has now multiple detection heuristics for the recently disclosed “Print Nightmare” vulnerability. 2.1.6. Version 7.2.1.69 Release date: Fast ring: 2021.07.02 Slow ring: 2021.07.02

Important ● During this update, the Microsoft Exchange Transport service will be stopped.

Resolved Issues Product

● Addressed a specific scenario where the product caused critical errors (BSOD) after updating to version 7.2.1.65 released on slow ring. 2.1.7. Version 7.2.1.65 Release date:

Bitdefender Endpoint Security Tools for Windows version 7 4 Fast ring: 2021.06.30 Slow ring: 2021.07.01

Important ● During this update, the Microsoft Exchange Transport service will be stopped.

● This version also includes on slow ring the improvements and fixes delivered with the Bitdefender Endpoint Security Tools versions 7.2.1.62 and 7.2.1.60 released on fast ring.

New Features and Improvements

● New features and improvements from version 7.2.1.60 on fast ring.

Resolved Issues Advanced Threat Control

● In some cases, the Advanced Threat Control module caused critical errors (BSOD). Product

● Security fixes.

● Resolved issues from versions 7.2.1.62 and 7.2.1.60 on fast ring. 2.1.8. Version 7.2.1.62 Release date: Fast ring: 2021.06.28 Slow ring: -

Important ● During this update, the Microsoft Exchange Transport service will be stopped.

Resolved Issues Advanced Threat Control

● Fixed SCOM issues caused by an interaction between the Advanced Threat Control module and WMI.

Bitdefender Endpoint Security Tools for Windows version 7 5 2.1.9. Version 7.2.1.60 Release date: Fast ring: 2021.06.23 Slow ring: -

Important ● During this update, the Microsoft Exchange Transport service will be stopped.

New Features and Improvements Control Center

● Added support for the new features.

● We have revamped our built-in exclusions feature by offering GravityZone Administrators the possibility of choosing from several exclusions categories pertaining to different product vendors. The following categories will be supported by the endpoint: – Citrix – Microsoft Exchange Server (including all Exchange versions) – Microsoft Sharepoint – Microsoft SQL Server (including all SQL Server versions + SQL Server Common) – (all versions) – Microsoft Operations Manager (including all versions of Operations Manager) – Microsoft Data Protection Manager – Microsoft Team Foundation Server – Microsoft Hyper-V – Microsoft System Center Configuration Manager – Microsoft System Center Operations Manager – VMware

Bitdefender Endpoint Security Tools for Windows version 7 6 Resolved Issues General

● In certain scenarios, after logging in to a machine, a BEST pop-up window appeared displaying a series of uncanny words. Patch Management

● Scanning for missing patches could have led in the past to inaccurate results when updates required system reboot. Graphic User Interface

● Fixed an issue where the Custom Scan Options could not be reconfigured. Content Control

● The Content Control module caused a slowdown in the file download speed for a copy/paste action in network shares.

● Content Control incorrectly blocked an application with a process name similar to another blacklisted application.

● The Content Control module allowed access to an online radio stream on a Windows 10 virtual machine, even if the page appeared to be blocked from the User Control rules. 2.1.10. Version 7.1.2.33 Release date: Fast ring: 2021.05.25 Slow ring: 2021.06.02

Important ● During this update, the Microsoft Exchange Transport service will be stopped.

New Features and Improvements Product

● Bitdefender Endpoint Security Tools is now available in Turkish language.

Resolved Issues Product

Bitdefender Endpoint Security Tools for Windows version 7 7 ● The Content Control module did not display a proper Back action button in the Power User graphic user interface. Application Control

● Some applications could be opened at login time even if Application Control was configured to block them. Advanced Threat Control

● Enabling the Ransomware Mitigation feature determined a system slowdown when trying to save Excel files on a file server. Exchange Protection

● When only having the TLS 1.2 protocol activated, restoring quarantined emails generated error code 1001. Volume encryption

● In certain scenarios, the Volume Encryption module maintained the Bitlocker feature suspended. Firewall

● A memory leak from the Firewall module generated a RAM usage increase. General

● In a corner case, changing the scanning engines from Central Scan to Local Scan through the Reconfigure Client task was successful but in GravityZone the value remains the same. 2.1.11. Version 7.1.1.28 Release date: Fast ring: 2021.05.18 Slow ring: 2021.05.19

Important ● During this update, the Microsoft Exchange Transport service will be stopped.

Resolved Issues EDR

Bitdefender Endpoint Security Tools for Windows version 7 8 ● An Endpoint Detection and Response (EDR) event caused product crashes on version 7.1.1.20. 2.1.12. Version 7.1.1.20 Release date: Fast ring: 2021.04.20 Slow ring: 2021.05.11

Important ● During this update, the Microsoft Exchange Transport service will be stopped.

New Features and Improvements Product

Note Granted the considerable dimension of this upgrade, in anticipation of any questions that you may have, we've developed an extensive Q&A section.

● Starting from April, all endpoint protection agents deployed worldwide will receive a new Event Correlation engine. This change will act as a new foundation for enhancing Endpoint Risk Analytics (included in all Bitdefender cloud managed products) and for Endpoint Detection and Response solutions (EDR/XDR). This update will be silent, with no action required from your side (no agent reconfiguration required). The global rollout will take place in phases over up to 8 weeks.

● Security agent installation after successfully removing other Bitdefender products no longer requires a Windows reboot.

Resolved Issues Content Control

● The product blocked a website with an untrusted certificate, while not providing the Accept Risks and proceed option.

● The Content Control module failed to block some apps that didn't match the allowed rules.

Bitdefender Endpoint Security Tools for Windows version 7 9 3. BITDEFENDER ENDPOINT SECURITY TOOLS FOR WINDOWS VERSION 6 3.1. Version History 3.1.1. Version 6.6.100.397 Release date: Fast ring: 2021.06.03 Slow ring: 2021.06.03

Important ● During this update, the Microsoft Exchange Transport service will be stopped.

New features and Improvements

● This version makes the transition towards Bitdefender Endpoint Security Tools version 7 for existing installations. This update will be silent, with no disruptions and no actions required on your side. 3.1.2. Version 6.6.27.390 Release date: Fast ring: 2021.05.27 Slow ring: 2021.06.02

Important ● During this update, the Microsoft Exchange Transport service will be stopped.

Resolved Issues Volume encryption

● In certain scenarios, the Volume Encryption module maintained the Bitlocker feature suspended.

Bitdefender Endpoint Security Tools for Windows version 6 10 3.1.3. Version 6.6.26.382 Release date: Fast ring: 2021.04.28 Slow ring: 2021.05.06

Important ● During this update, the Microsoft Exchange Transport service will be stopped.

New Features and Improvements Advanced Anti-Exploit

● Improved the Advanced Anti-Exploit module to detect a new type of exploit. 3.1.4. Version 6.6.26.376 3.1.4. Version 6.6.26.376 Release date: Fast ring: 2021.04.19 Slow ring: 2021.04.21

Important ● During this update, the Microsoft Exchange Transport service will be stopped.

● This version also includes on slow ring the improvements and fixes delivered with the Bitdefender Endpoint Security Tools version 6.6.26.363, released on fast ring.

Relay

● BEST Windows Relay now supports updating the Security Server based on Ubuntu 20.04.

● New features and improvements from version 6.6.26.373 on fast ring.

Resolved Issues

● Resolved issues from version 6.6.26.373 on fast ring.

Bitdefender Endpoint Security Tools for Windows version 6 11 3.1.5. Version 6.6.26.373 Release date: Fast ring: 2021.04.14 Slow ring: -

Important ● During this update, the Microsoft Exchange Transport service will be stopped.

New Features and Improvements Network Protection

● Added support for the Network Attack Defense module on Windows Server. This functionality is designed to detect and prevent RDP protocol authentication brute force attacks. This new feature works by scanning incoming connections only on the RDP ports to identify authentication anomalies.

Resolved Issues Product

● Fixed an issue where Product update and Security Content update remained in a continuous "Updating" state.

● In a certain instance, the product blocked a website with an untrusted certificate, while not providing the "Accept Risks and proceed" option.

● In a certain scenario, due to a missing cleanup mechanism, continuous crash dumps of the Product piled up and used almost all available disk space on endpoints, eventually leading the system to crash as well. Content Control

● In a certain scenario, a previously whitelisted website through Security Content whitelist could not be blocked via Web Traffic Scan rules. Firewall

● Fixed an issue where after connecting to a wireless network, the user received the "connection to a wireless network has been established" notification even when the Firewall module was turned off.

Bitdefender Endpoint Security Tools for Windows version 6 12 3.1.6. Version 6.6.25.362 Release date: Fast ring: 2021.03.24 Slow ring: 2021.03.29

Important ● During this update, the Microsoft Exchange Transport service will be stopped.

● This version also includes on slow ring the improvements and fixes delivered with the Bitdefender Endpoint Security Tools versions 6.6.25.353 and 6.6.25.359, released on fast ring.

New Features and Improvements

● New features and improvements from version 6.6.25.353 on fast ring.

Resolved Issues Product

● Fixed an incompatibility with Cisco Advanced Protection (AMP) for Endpoints that caused crashes of File Explorer processes and overall performance issues on Windows 7 machines. Antimalware

● Fixed an issue with the On-Access Scanning feature, where users without administrative rights could restore a quarantined file. These users are now prompted to enter their username and password when using the Restore button.

● Resolved issues from versions 6.6.25.353 and 6.6.25.359 on fast ring. 3.1.7. Version 6.6.25.359 Release date: Fast ring: 2021.03.18 Slow ring: -

Important ● During this update, the Microsoft Exchange Transport service will be stopped.

Bitdefender Endpoint Security Tools for Windows version 6 13 Resolved Issues Firewall

● The Firewall driver generated a memory leak in EPSecurityService on Windows machines. User Interface

● The graphical user interface displayed that three features part of the Content Control module (Application Blacklisting, Web Access Control and Data Protection) were turned off after logging off or rebooting. 3.1.8. Version 6.6.25.353 Release date: Fast ring: 2021.03.15 Slow ring: -

Important ● During this update, the Microsoft Exchange Transport service will be stopped.

New Features and Improvements Product

● Specific error messages will be displayed when Product fails to update due to missing critical Windows patches. Advanced Anti-Exploit

● The Advanced Anti-Exploit (AAE) technology is now available for Windows Servers. The module will be installed on and removed from servers via the new Install and Reconfigure task. The Advanced Anti-Exploit module is deployed, configured and managed via GravityZone using the same management workflows on servers as available for workstations. Incompatible Software Removal

● Added support for removing the following security products: – TrustPort Total Protection 17.x – Driver Support One 2.x

Bitdefender Endpoint Security Tools for Windows version 6 14 – Business Security 20.x – VIPRE Antivirus 11.x – Endpoint Agent 2.x (Tamper Protection must be turned off) – Endpoint Protector Client 5.x

● Enhanced Support For removing the following security products: – McAfee Total Protection 16.x

Resolved Issues Product

● In some instances, the product blocked websites with untrusted certificates, while not providing the "Accept risks and continue" option. Content Control

● The Content Control module failed to report the web category of a blocked website, in the Blocked Websites report. Firewall

● The Events timeline from the local interface displayed wrong messages for incoming and outgoing connections.

● Fixed an issue where blockPortScans remained active even when the Firewall module was enabled.

● Fixed an issue where traffic was received from an unknown profile. 3.1.9. Version 6.6.24.337 Release date: Fast ring: 2021.02.10 Slow ring: 2021.02.17

Important ● During this update, the Microsoft Exchange Transport service will be stopped.

New Features and Improvements Firewall

Bitdefender Endpoint Security Tools for Windows version 6 15 ● Added improvements to the Firewall feature on Windows 10 OS. Upon installation, BEST no longer deactivates Windows Firewall, leaving control to Windows Security Center.. 3.1.10. Version 6.6.23.329 Release date: Fast ring: 2021.01.12 Slow ring: 2021.01.18

Important ● During this update, the Microsoft Exchange Transport service will be stopped.

New Features and Improvements EDR

● Added improvements to EDR exclusions performance in accordance with specific use-cases. 3.1.11. Version 6.6.23.325 Release date: Fast ring: 2020.12.15 Slow ring: 2020.12.16

Important ● During this update, the Microsoft Exchange Transport service will be stopped.

● This version also includes on slow ring the improvements and fixes delivered with the Bitdefender Endpoint Security Tools version 6.6.23.323, released on fast ring.

New Features and Improvements Antimalware

● Improved the exclusions mechanism to match a corner-case scenario.

● New features and improvements from version 6.6.23.323 on fast ring.

Bitdefender Endpoint Security Tools for Windows version 6 16 Resolved Issues

● Resolved issues from version 6.6.23.323 on fast ring. 3.1.12. Version 6.6.23.323 Release date: Fast ring: 2020.12.09 Slow ring: -

Important ● During this update, the Microsoft Exchange Transport service will be stopped.

New Features and Improvements General

● Product Console update flow improvements.

Resolved Issues General

● The security agent installation caused a slowdown when using a specific network application.

● In a particular scenario, the product caused crashes on Windows Server 2019. Content Control

● In some cases, a product component (HttpProxy.dat-wal) consumed a large amount of disk space. Antimalware

● Fixed an issue that allowed underprivileged users to view exclusions lists after an On-demand scan. HyperDetect

● The HyperDetect module received an EDR incident, although a threat name exception rule had been set up. Device Control

Bitdefender Endpoint Security Tools for Windows version 6 17 ● Fixed an issue where Device Control prevented the connection of a USB drive to a Veeam backup server. 3.1.13. Version 6.6.22.315 Release date: Fast ring: 2020.11.26 Slow ring: 2020.11.26

Important ● During this update, the Microsoft Exchange Transport service will be stopped.

Resolved issues General

● In a corner case scenario, an issue prevented the product to be installed and displayed the protection modules as expired on Windows Server 2016.

● Addressed a scenario where several endpoints failed to report to the GravityZone Control Center after a Repair task was initiated. EDR

● Fixed an issue that prevented Bitdefender EDR from generating raw events and incidents in the Incidents page unless a prior restart was performed. 3.1.14. Version 6.6.22.311 Release date: Fast ring: 2020.11.11 Slow ring: 2020.11.17

Important ● During this update, the Microsoft Exchange Transport service will be stopped.

New Features and Improvements General

● Added support for upcoming features available with the next GravityZone release.

Bitdefender Endpoint Security Tools for Windows version 6 18 Antimalware

● Users can now be notified of blocked ransomware attacks discovered by the Ransomware Mitigation technology. The notification is available in the Event Log of the local interface and includes details like the action taken and the origin of the attack. Sandbox Analyzer

● Traffic is now encrypted only by using the secure protocols TLS 1.2. For more information on the implementation of TLS 1.2, please refer to this KB.

Resolved Issues General

● Fixed an issue that caused several modules to be disabled or removed, even after reinstalling the product or reapplying the policy.

● In a certain scenario, the Sandbox Analyzer policy settings were ignored after service startup.

● The product failed to apply the policy settings in order to disable all the modules from the Network Protection section. Antimalware

● In certain conditions, using process exclusions with wildcards resulted in performance issues.

● The endpoint improperly reported data to the GravityZone console leading to inaccurate information in the On-Demand Scanning report. Firewall

● The Firewall module prevented several endpoints from gaining internet access after connecting to a hotspot generated by a Windows 10.

● The Firewall module reverted the settings for a mobile adapter from Public to Trusted. Network Protection

● In certain situations, enabling SSL Scan stopped loading several secure websites.

● In a corner case, the product failed to scan traffic when the machine had an active L2TP VPN connection.

Bitdefender Endpoint Security Tools for Windows version 6 19 ● The SSL Scan option prevented access to a certain website when enabled. 3.1.15. Version 6.6.21.304 Release date: Fast ring: 2020.10.14 Slow ring: 2020.10.14

Important ● During this update, the Microsoft Exchange Transport service will be stopped.

Resolved Issues Generic

● The security agent did not install on Windows systems, after the latest Windows update containing KB4580347 or KB4579311. The signature verification process caused compatibility issues between the product and the . 3.1.16. Version 6.6.21.302 Release date: Fast ring: 2020.09.24 Slow ring: 2020.09.24

Important ● During this update, the Microsoft Exchange Transport service will be stopped. This version also includes on slow ring the improvements and fixes delivered with the Bitdefender Endpoint Security Tools version 6.6.21.301, released on fast ring.

New Features and Improvements Incompatible software removal

● Added support for removing the following security products: – AVG Business 20.x – Chili Security for PC 24.x – Cortex XDR 7.x (the Anti-Tampering option must be disabled)

Bitdefender Endpoint Security Tools for Windows version 6 20 – Advanced Threat Prevention 2.x

● Enhanced support for removing the following security products: – Sophos Endpoint Security and Control 10.x

● New features and improvements from version 6.6.21.301 on fast ring

Resolved Issues Patch Management

● In certain conditions, the Patch Management module failed to download patches properly. Full Disk Encryption

● In certain conditions, the Full Disk Encryption module prevented the upgrade to Windows 10, version 2004.

● Resolved issues from version 6.6.21.301 on fast ring. 3.1.17. Version 6.6.21.301 Release date: Fast ring: 2020.09.21 Slow ring: -

Important ● During this update, the Microsoft Exchange Transport service will be stopped.

New Features and Improvements General

● Added support for upcoming features available with the next GravityZone release. Advanced Threat Control

● Enhanced visibility for Advanced Threat Control events by providing the threat name locally in the Event log.

Resolved Issues Endpoint Detection and Response (EDR)

Bitdefender Endpoint Security Tools for Windows version 6 21 ● Fixed an issue that caused the GravityZone console to display status Unknown for Security Analytics in the computer details. Antimalware

● The security agent caused a server to become unresponsive when VMware Serial Port Redirection was enabled along with the On-Access Boot Sectors scan option. Exchange Protection

● The security agent improperly restored emails with identical subjects from quarantine. General

● In some situations, opening the Full scan log resulted in a display error for Firefox users and a blank page for Chrome users.

● In a certain scenario, a physical machine was detected as a virtual machine and could not be licensed. 3.1.18. Version 6.6.20.294 Release date: Fast ring: 2020.09.10 Slow ring: 2020.09.11

Important ● During this update, the Microsoft Exchange Transport service will be stopped.

Resolved Issues Relay

● Addressed a vulnerability discovered recently. 3.1.19. Version 6.6.20.293 Release date: Fast ring: 2020.08.25 Slow ring: 2020.08.25

Bitdefender Endpoint Security Tools for Windows version 6 22 Important ● During this update, the Microsoft Exchange Transport service will be stopped.

Resolved Issues Endpoint Risk Analytics (ERA)

● Fixed an issue that was affecting the risk scan tasks. 3.1.20. Version 6.6.20.289 Release date: Fast ring: 2020.08.19 Slow ring: 2020.08.19

Important ● During this update, the Microsoft Exchange Transport service will be stopped.

Resolved Issues Endpoint Detection and Response (EDR)

● In a certain scenario, the security agent generated a large volume of occurrences for the same event, after updating to version 6.6.20.287. The behavior was linked to a previous fix related to Unknown status. Therefore, we rolled back the fix in order to prevent this situation.

Known Issues Endpoint Detection and Response (EDR)

● Following the rollback, users may receive the Unknown status for Security Analytics in the computer details section of the GravityZone console. 3.1.21. Version 6.6.20.287 Release date: Fast ring: 2020.08.12 Slow ring: 2020.08.12

Bitdefender Endpoint Security Tools for Windows version 6 23 Important ● During this update, the Microsoft Exchange Transport service will be stopped.

Resolved Issues Endpoint Detection and Response (EDR)

● Fixed an issue that caused the GravityZone console to display status Unknown for Security Analytics in the computer details. Relay

● The product failed to report the correct version available on the Relay after updating to version 6.6.19.273 or later. Device Control

● Fixed an incompatibility between Device Control and Citrix PVS 6.1 causing BSOD. 3.1.22. Version 6.6.20.284 Release date: Fast ring: 2020.07.17 Slow ring: 2020.07.21

Important ● During this update, the Microsoft Exchange Transport service will be stopped.

● This version also includes on slow ring the improvements and fixes delivered with the Bitdefender Endpoint Security Tools version 6.6.20.282, released on fast ring.

Resolved Issues Ransomware Mitigation

● In a particular scenario, the Ransomware Mitigation module caused backup issues on a shared partition.

● Resolved issues from version 6.6.20.282 on fast ring. 3.1.23. Version 6.6.20.282 Release date:

Bitdefender Endpoint Security Tools for Windows version 6 24 Fast ring: 2020.07.14 Slow ring: -

Important ● During this update, the Microsoft Exchange Transport service will be stopped.

Resolved Issues Generic

● The product caused critical errors (BSOD) on Windows Server 2008 R2 after updating to version 6.6.19.274.

● The Patch Management module name was incorrectly displayed in the user interface. Advanced Threat Control

● In some situations, the Advanced Threat Control module caused critical errors (BSOD) when the security level was set to Aggressive. Antimalware

● The Antimalware custom exclusions failed to work properly when using an extended-length path prefix. 3.1.24. Version 6.6.19.274 Release date: Fast ring: 2020.06.29 Slow ring: 2020.06.30

Important ● During this update, the Microsoft Exchange Transport service will be stopped.

● This version also includes on slow ring the improvements and fixes delivered with the Bitdefender Endpoint Security Tools version 6.6.19.273 released on fast ring.

New Features and Improvements

● New features and improvements from version 6.6.19.273 on fast ring.

Bitdefender Endpoint Security Tools for Windows version 6 25 Resolved Issues Relay

● The Relay failed to report the product update versions available for endpoints, after updating to version 6.6.19.273.

● Resolved issues from version 6.6.19.273 on fast ring. 3.1.25. Version 6.6.19.273 Release date: Fast ring: 2020.06.23 Slow ring: -

Important ● During this update, the Microsoft Exchange Transport service will be stopped.

New Features and Improvements

● Added support for upcoming features available with the next GravityZone release.

● Bitdefender Endpoint Security Tools is now available in Korean language.

Resolved Issues Remote deployment

● The security agent failed to remove Symantec Endpoint Protection Cloud solution on remote deployment. To be successful, the deployment requires an active session for a user with administrative privileges. Advanced Anti-Exploit

● In some cases, the Advanced Anti-Exploit module caused Microsoft Office applications to crash due to products incompatibility. Antimalware

● A deadlock in the product caused the Antimalware module to appear as disabled on Windows 10 systems, even though it was running. Firewall

Bitdefender Endpoint Security Tools for Windows version 6 26 ● In a certain situation, the Firewall Rules failed to apply on the endpoints. The issue was caused by extra spaces added when defining the rule, behavior that is now automatically corrected. Generic

● The endpoint submitted multiple events to GravityZone console, which led to high memory consumption.

● In some cases, the endpoint failed to communicate with GravityZone console if the communication via Relay had issues. 3.1.26. Version 6.6.18.265 Release date: Fast ring: 2020.06.03 Slow ring: 2020.06.03

Important ● During this update, the Microsoft Exchange Transport service will be stopped.

New Features and Improvements

● New features and improvements from version 6.6.18.261 on fast ring.

Resolved Issues

● The security agent failed to detect certain machines joined to Amazon Web Services (AWS) which prevented GravityZone from licensing them.

● Resolved issues from version 6.6.18.261 on fast ring. 3.1.27. Version 6.6.18.261 Release date: Fast ring: 2020.05.25 Slow ring: -

Important ● During this update, the Microsoft Exchange Transport service will be stopped.

Bitdefender Endpoint Security Tools for Windows version 6 27 New Features and Improvements

● Enhanced visibility when collecting logs using GravityZone remote troubleshooting. The new monitoring mechanism displays on the endpoints the troubleshooting sessions in progress along with their statuses.

● Added support for Windows 10 May 2020 Update (20H1).

Resolved Issues

● The Advanced Anti-Exploit module prevented Adobe Acrobat Reader to function in protected mode.

● In some situations, the Device Control module generated multiple notifications related to Volume Shadow Copy.

● The security agent installation failed when the endpoint was scanned before deployment on a few Windows systems.

● The Endpoint Security Service caused high CPU usage on Windows 10 and Windows Server 2012 systems.

● Certain websites failed to load when the Scan SSL option was enabled on endpoints.

● In some cases, the assignment rules failed to apply. 3.1.28. Version 6.6.17.249 Release date: Fast ring: 2020.04.13 Slow ring: 2020.04.14

Important ● During this update, the Microsoft Exchange Transport service will be stopped.

● This version also includes on slow ring the improvements and fixes delivered with the Bitdefender Endpoint Security Tools version 6.6.17.247 released on fast ring.

Resolved Issues

● Certain websites failed to load when the Scan SSL option was enabled on endpoints with product version 6.6.17.243.

Bitdefender Endpoint Security Tools for Windows version 6 28 ● The Antimalware module detected the file shortcut even if the file or folder was excluded.

● Resolved issues from version 6.6.17.247 on fast ring. 3.1.29. Version 6.6.17.247 Release date: Fast ring: 2020.04.08 Slow ring: -

Important ● During this update, the Microsoft Exchange Transport service will be stopped.

Resolved Issues

● The Network Protection module prevented a certain website from loading when Scan SSL option was enabled.

● In a certain corner case, endpoints submitted files to Bitdefender even if the option was disabled in the GravityZone console.

● The Relay communication with endpoints failed with error 1004.

● Local filters did not function properly after updating to version 6.6.17.243. 3.1.30. Version 6.6.17.243 Release date: Fast ring: 2020.03.31 Slow ring: 2020.03.31

Important ● During this update, the Microsoft Exchange Transport service will be stopped.

● This version also includes on slow ring the improvements and fixes delivered with the Bitdefender Endpoint Security Tools versions 6.6.17.241 and 6.6.17.242 released on fast ring.

New Features and Improvements

● New features and improvements from version 6.6.17.241 on fast ring.

Bitdefender Endpoint Security Tools for Windows version 6 29 Resolved Issues

● Fixed an issue that affected the product versions 6.6.17.241 and 6.6.17.242.

● Resolved issues from versions 6.6.17.241 and 6.6.17.242 on fast ring.

Removed Features

● Removed features from version 6.6.17.241 on fast ring. 3.1.31. Version 6.6.17.242 Release date: Fast ring: 2020.03.30 Slow ring: -

Important ● During this update, the Microsoft Exchange Transport service will be stopped.

Resolved Issues

● Addressed a scenario that was causing product crashes on version 6.6.17.241. 3.1.32. Version 6.6.17.241 Release date: Fast ring: 2020.03.24 Slow ring: -

Important ● During this update, the Microsoft Exchange Transport service will be stopped.

New Features and Improvements

● Added support for upcoming features available with the next GravityZone release.

● Added remaining time until automatic reboot occurs in the Patch Management notification.

● The Power User interface is now available in Czech language.

Bitdefender Endpoint Security Tools for Windows version 6 30 ● Improved the encryption mechanism to avoid specific interferences with Windows Update system.

Resolved Issues

● Device Control failed to block USB memory stick on Windows Server 2019 Standard VDI.

● Microsoft Exchange On-Demand scans failed with error code 1001.

● Addressed a product vulnerability related to legacy Bitdefender tools.

● The Power User module failed to save the local policy when adding exclusions for multiple extension files.

Removed Features

● Removed support for scanning Mapped Network drives when On-Demand Device Scanning is used. 3.1.33. Version 6.6.16.226 Release date: Fast ring: 2020.02.25 Slow ring: 2020.03.02

Important ● During this update, the Microsoft Exchange Transport service will be stopped.

Resolved Issues

● The product shortcuts previously removed were recreated in the Start menu after endpoint restart. 3.1.34. Version 6.6.16.222 Release date: Fast ring: 2020.02.11 Slow ring: 2020.02.19

Bitdefender Endpoint Security Tools for Windows version 6 31 Important ● During this update, the Microsoft Exchange Transport service will be stopped.

New Features and Improvements

● Implemented a mechanism that facilitates the migration process to new Bitdefender technologies, without requiring a product update. 3.1.35. Version 6.6.16.218 Release date: Fast ring: 2020.02.06 Slow ring: 2020.02.06

Important ● During this update, the Microsoft Exchange Transport service will be stopped.

Resolved Issues

● In some cases, the security agent failed to remove other security solutions already installed. 3.1.36. Version 6.6.16.216 Release date: Fast ring: 2020.01.20 Slow ring: 2020.01.28

Important ● During this update, the Microsoft Exchange Transport service will be stopped.

● This version also includes on slow ring the improvements and fixes delivered with the Bitdefender Endpoint Security Tools version 6.6.16.209, released on fast ring.

New Features and Improvements

● Added support for removing the following security products: – AVG Business 19.x

Bitdefender Endpoint Security Tools for Windows version 6 32 – AVG 19.x – Fujitsu Internet Security 16.x – Kaspersky Internet Security 20.x

● Enhanced support for removing the following security products: – Kaspersky Security for Windows Servers 10.x – Kaspersky Internet Security 19.x – Panda Endpoint Protection 8.x – Office Scan Client 10.x

Resolved Issues

● The Advanced Threat Control module caused application crashes in certain conditions.

● Resolved issues from version 6.6.16.209 on fast ring. 3.1.37. Version 6.6.16.209 Release date: Fast ring: 2020.01.16 Slow ring: -

Important ● During this update, the Microsoft Exchange Transport service will be stopped.

Resolved Issues

● The product reported logs for Endpoint Risk Analytics (ERA) in GravityZone On-Premises, although this module is available only with GravityZone Cloud.

● The product could not take actions on infected .pst archives during the scan.

● Recovery keys unmanaged by GravityZone are now removed at installation time.

● In some cases, installation failed at 25% due to an issue with device drivers.

● The Reconfigure Client task failed when performing it with the same modules selected as the existing ones on the endpoint.

Bitdefender Endpoint Security Tools for Windows version 6 33 3.1.38. Version 6.6.15.207 Release date: Fast ring: 2019.12.02 Slow ring: 2019.12.09

Important ● During this update, the Microsoft Exchange Transport service will be stopped.

New Features and Improvements

● Added support for the newest Indicators of Risk.

● Added support for the Antimalware notification triggered during the scan, each time a malware event is detected.

Resolved Issues

● The Web Rules applied for the Banks category did not function properly.

● The product caused critical errors (BSOD) on Windows 10 endpoints having Credential Guard installed, when updating from version 6.6.10.148 to 6.6.13.183.

● The Endpoint Correlation service remained installed on endpoint after updating from an older version to the latest one. 3.1.39. Version 6.6.14.204 Release date: Fast ring: 2019.11.06 Slow ring: 2019.11.14

Important ● During this update, the Microsoft Exchange Transport service will be stopped.

● This version also includes on slow ring the improvements and fixes delivered with the Bitdefender Endpoint Security Tools version 6.6.14.199, released on fast ring.

New Features and Improvements

● New features and improvements from version 6.6.14.199 on fast ring.

Bitdefender Endpoint Security Tools for Windows version 6 34 Resolved Issues

● The EDR module caused Windows Server 2016 to become unresponsive.

● The Content Control module led to improper functioning of Safe Exam Browser.

● Resolved issues from version 6.6.14.199 on fast ring. 3.1.40. Version 6.6.14.199 Release date: Fast ring: 2019.11.01 Slow ring: -

Important ● This version of Bitdefender Endpoint Security Tools applies to Windows 7 and Windows 10.

● During this update, the Microsoft Exchange Transport service will be stopped.

New Features and Improvements

● Enhanced detection mechanism on Windows 10 systems.

Resolved Issues

● Crash when starting Internet Explorer on Windows 7 systems without the Microsoft stack update KB4516655 installed. 3.1.41. Version 6.6.14.198 Release date: Fast ring: 2019.10.28 Slow ring: 2019.10.29

Important ● During this update, the Microsoft Exchange Transport service will be stopped.

● This version also includes on slow ring the improvements and fixes delivered with the Bitdefender Endpoint Security Tools version 6.6.14.194, released on fast ring.

Bitdefender Endpoint Security Tools for Windows version 6 35 New Features and Improvements

● New features and improvements from version 6.6.14.194 on fast ring.

Resolved Issues

● In certain conditions, the Bitdefender Endpoint Security Service crashed on endpoints with 6.6.14.194 product version.

● Resolved issues from version 6.6.14.194 on fast ring. 3.1.42. Version 6.6.14.194 Release date: Fast ring: 2019.10.23 Slow ring: -

Important ● During this update, the Microsoft Exchange Transport service will be stopped.

New Features and Improvements

● Added support for Windows Server 2019 Core.

● Added support for upcoming features available with the next GravityZone release.

Resolved Issues

● Bitdefender Endpoint Security Service led to high CPU usage on Windows 10 Home edition.

● The Content Control module interfered with Oracle internal application due to product incompatibility.

● The Content Control module blocked the Alterdata application.

● In some cases, the Content Control caused critical errors (BSOD) when Masterinstaller application by Crestron was used.

● The product caused critical errors (BSOD) on Windows 10 endpoints having Credential Guard installed, when updating from 6.6.10.148 to 6.6.13.183 version.

Bitdefender Endpoint Security Tools for Windows version 6 36 ● The EDR Sensor prevented saving documents on redirected desktops, located on a file server. The issue affected Windows 7 and Windows 10 systems.

● Other minor changes and bug fixes. 3.1.43. Version 6.6.13.183 Release date: Fast ring: 2019.09.26 Slow ring: 2019.10.03

Important ● During this update, the Microsoft Exchange Transport service will be stopped.

● This version also includes on slow ring the improvements and fixes delivered with the Bitdefender Endpoint Security Tools versions 6.6.13.175 and 6.6.13.180 released on fast ring.

New Features and Improvements

● Added support for uninstalling the following incompatible software: – Panda Endpoint Protection 8.x – Kaspersky Suite de Sécurité Orange 19.x

● Enhanced support for uninstalling the following incompatible software: – Nifty Jouji Anshin Security24 19.x – Trend Micro Worry-Free Business Security Agent 6.x – SecureAnywhere 9.x

Resolved Issues

● After software update the Device Control module was removed on endpoints with product versions lower than 6.6.9.134.

● Resolved issues from versions 6.6.13.175 and 6.6.13.180 on fast ring. 3.1.44. Version 6.6.13.180 Release date: Fast ring: 2019.09.23

Bitdefender Endpoint Security Tools for Windows version 6 37 Slow ring: -

Important ● During this update, the Microsoft Exchange Transport service will be stopped.

Resolved Issues

● In some cases, the Advanced Anti-Exploit module caused Microsoft Outlook to crash due to products incompatibility. 3.1.45. Version 6.6.13.175 Release date: Fast ring: 2019.08.28 Slow ring: -

Important ● During this update, the Microsoft Exchange Transport service will be stopped.

Resolved Issues

● In some cases, Bitdefender Endpoint Security Service crashed on Windows 10.

● Bitdefender Endpoint Security Service led to high memory consumption on endpoints using the Blocklist feature of the EDR module.

● Antimalware On-access scanning caused a slowdown on Citrix login.

● Antimalware On-access scanning caused a slowdown on Remote Desktop 2016 login.

● In some situations, the Relay role could not finish the update process due to incomplete download of files.

● The Relay role caused up to 50% CPU usage on some endpoints.

● During installation, the agent removed certain files created by Deep Freeze. 3.1.46. Version 6.6.12.170 Release date: Fast ring: 2019.07.30

Bitdefender Endpoint Security Tools for Windows version 6 38 Slow ring: 2019.07.31

Important ● During this update, the Microsoft Exchange Transport service will be stopped.

New Features and Improvements

● The Encryption module now supports BitLocker Group Policy settings, such as password complexity and user’s privileges to change their PINs, for endpoints integrated with Active Directory.

● The Support Tool is now able to granularly collect different types of logs. Depending on the issue and the corresponding module, you can activate multiple advanced logging scenarios.

● The number of concurrent on-demand scans on the endpoint is now limited for enhanced responsiveness.

● The endpoint users are no longer distracted by status alerts when the Advanced Anti-Exploit module is disabled.

● Improved the event transmission between the endpoint and GravityZone Control Center.

● Added support for uninstalling the following incompatible software: – Avast Business Cloud Care 4.x (detected as Avast Business Security 19.x) – Crowdstrike Falcon 5.x – Nifty Jouji Anshin Security24 19.x – Unlocker 1.x

● Enhanced support for uninstalling the following incompatible software: – F-Secure Client Security 12.x – Trend Micro Titanium Internet Security 15.x

Resolved Issues

● The Device Control module did not allow StorLib Virtual Storage devices to be excluded in the policy.

● Sometimes, the product installation succeeded even though incompatible software was detected on the endpoint.

Bitdefender Endpoint Security Tools for Windows version 6 39 ● The Content Control module caused Arabi2 Accounting application running from network share to crash on Windows 10 Pro.

● The Reconfigure Client task failed for Windows 10 endpoints if the Content Control module was added.

● In some cases, the Relay caused constant higher CPU usage on multiple endpoints.

● The Antiphishing exclusions were not applied correctly on endpoints.

● Fixed a memory leak issue affecting endpoints with no Internet connection.

● The product failed to apply the firewall rule when using %LOCALAPPDATA% path for exclusions.

● The Firewall module prevented from update JOB and Drake Accounting applications. 3.1.47. Version 6.6.11.162 Release date: Fast ring: 2019.06.26 Slow ring: 2019.06.26

Important ● During this update, the Microsoft Exchange Transport service will be stopped.

New Features and Improvements

● Improved SSL scanning in Mozilla Firefox as the product automatically configures the browser to use Windows Certificate Store by enabling the security.enterprise_roots.enabled option.

Resolved Issues

● Bitdefender Endpoint Security Tools Relay was crashing when trying to update after the latest GravityZone Cloud release. 3.1.48. Version 6.6.11.161 Release date:

Bitdefender Endpoint Security Tools for Windows version 6 40 Fast ring: 2019.06.25 Slow ring: 2019.06.25

Important ● This version also includes on slow ring the improvements and fixes delivered with the Bitdefender Endpoint Security Tools version 6.6.11.159, released on fast ring.

● During this update, the Microsoft Exchange Transport service will be stopped.

New Features and Improvements

● Added support for uninstalling the following incompatible software: – CylancePROTECT 2.x – F-Secure Client Security 10.x – F-Secure Client Security 11.x – F-Secure Client Security 12.x – F-Secure Client Security 13.x – F-Secure Client Security 14.x – Hotspot Shield 7.x

● Enhanced support for uninstalling the following incompatible software: – avast! Free Antivirus 18.x – avast! Internet Security 18.x – avast! Premier 18.x – avast! Pro Antivirus 18.x

● Added support for upcoming features available with the next GravityZone release.

Resolved Issues

● Resolved issues from version 6.6.11.159 on fast ring. 3.1.49. Version 6.6.11.159 Release date:

Bitdefender Endpoint Security Tools for Windows version 6 41 Fast ring: 2019.06.18 Slow ring: -

Important ● During this update, the Microsoft Exchange Transport service will be stopped.

New Features and Improvements

● Added support for upcoming features available with the next GravityZone release.

Resolved Issues

● The Advanced Threat Control module caused Dlublal applications to crash at startup, after updating the agent to version 6.6.10.142.

● In some situations, the Bitdefender Endpoint Agent service caused high CPU usage on Windows 10.

● The endpoints were incorrectly reported as outdated in the GravityZone Control Center due to old signatures.

● An issue with the updating mechanism caused some endpoints on slow ring to receive updates from fast ring.

● The endpoints had no access to Bitdefender Cloud Services due to an incompatibility with Cisco Umbrella Roaming Client.

● The Content Control module generated multiple connection timeout errors when using Webp@ss Client 5.6.3 by TrustyCom.

● An issue at On-Demand scanning was freezing the task progress at 3% on Windows Server 2016.

● Other minor improvements and bug fixes. 3.1.50. Version 6.6.10.148 Release date: Fast ring: 2019.05.28 Slow ring: 2019.05.29

Bitdefender Endpoint Security Tools for Windows version 6 42 Important ● During this update, the Microsoft Exchange Transport service will be stopped.

New Features and Improvements

● Added support for Windows 10 19H1 (May 2019 Update).

Resolved Issues

● The licensing status of the endpoint was lost when upgrading to Windows 10 19H1.

● In some cases, the Reconfigure Client task failed if the agent did not recognize one of the selected modules.

● The On-demand scanning report displayed incorrect information about the last scheduled scan.

● The Advanced Threat Control module was prone to a higher number of false positive detections, after upgrading to Windows 10 19H1. 3.1.51. Version 6.6.10.146 Release date: Fast ring: 2019.04.25 Slow ring: 2019.04.25

Important ● This version is for Windows 7 / Windows Server 2008 R2 and later.

● During this update, the Microsoft Exchange Transport service will be stopped.

Resolved Issues

● The Endpoint Protected Service failed to start when a system reboot is required after updating to version 6.6.10.142. 3.1.52. Version 6.6.10.142 Release date: Fast ring: 2019.04.22

Bitdefender Endpoint Security Tools for Windows version 6 43 Slow ring: 2019.04.23

Important ● This version is for Windows 7 / Windows Server 2008 R2 and later.

● During this update, the Microsoft Exchange Transport service will be stopped.

● This version includes on slow ring all the improvements and fixes delivered with Bitdefender Endpoint Security Tools version 6.6.10.141, released on fast ring.

New Features and Improvements

● Added support for uninstalling the following incompatible software: – Symantec Cloud Endpoint 22.x – avast! Free Antivirus 19.x – FortiClient 6.x – AVG Antivirus Free 19.x

● New features and improvements from version 6.6.10.141 on fast ring.

Resolved Issues

● After updating to version 6.6.10.141, the product required system restart due to a driver incompatibility.

● The product did not successfully remove the Spanish version of Kaspersky Endpoint Security.

● Resolved issues from version 6.6.10.141 on fast ring. 3.1.53. Version 6.6.10.141 Release date: Fast ring: 2019.04.18 Slow ring: -

Important ● This version is for Windows 7 / Windows Server 2008 R2 and later.

● During this update, the Microsoft Exchange Transport service will be stopped.

Bitdefender Endpoint Security Tools for Windows version 6 44 New Features and Improvements

● Improved installation process through third party tools, by providing intermediary error codes in order to facilitate remediation or next steps action.

Resolved Issues

● In certain conditions, Endpoint Protected Service failed to start on endpoints after upgrading from Windows 7 to Windows 10.

● In some cases, the connection to the Exchange server failed on Windows 10 endpoints with Microsoft Outlook 2016 configured.

● Sometimes, when Scan SSL option from Content Control was enabled, Internet Explorer displayed a security alert, blocking access to the webpages running on https.

● Fixed several issues related to the Advanced Threat Control module: – High memory usage on Windows 10 Enterprise. – High CPU usage when using TS Controller application. – Slowdown when using Glovia 5.4 application.

● The Content Control with Traffic Scan enabled blocked the MxControlCenter application from connecting to IP cameras.

● The Content Control module prevented the access to GravityZone Control Center in Google Chrome and Internet Explorer browsers, when Scan SSL option was enabled. 3.1.54. Version 6.6.9.134 Release date: Fast ring: 2019.03.28 Slow ring: 2019.03.28

Important ● This version is for Windows 7 / Windows Server 2008 R2 and later.

● During this update, the Microsoft Exchange Transport service will be stopped.

Bitdefender Endpoint Security Tools for Windows version 6 45 Resolved Issues

● In certain conditions, endpoints with the Content Control module enabled could not communicate with the GravityZone console, being reported offline.

● In some situations, the EDR Live Response feature did not function if the endpoints had no internet access when starting up. 3.1.55. Version 6.6.9.131 Release date: Fast ring: 2019.03.25 Slow ring: 2019.03.26

Important ● This version is for Windows 7 / Windows Server 2008 R2 and later.

● During this update, the Microsoft Exchange Transport service will be stopped.

● This version includes on slow ring all the improvements and fixes delivered with Bitdefender Endpoint Security Tools versions 6.6.9.127 and 6.6.9.129, released on fast ring.

New Features and Improvements

● New features and improvements from version 6.6.9.127 on fast ring.

Resolved Issues

● In certain conditions, the Endpoint Communication Service crashed on Windows 10 with April 2018 Update (Redstone 4).

● Resolved issues from versions and 6.6.9.127 and 6.6.9.129 on fast ring. 3.1.56. Version 6.6.9.129 Release date: Fast ring: 2019.03.18 Slow ring: -

Important ● This version is for Windows 7 / Windows Server 2008 R2 and later.

Bitdefender Endpoint Security Tools for Windows version 6 46 ● During this update, the Microsoft Exchange Transport service will be stopped.

Resolved Issues

● After updating to version 6.6.9.127, the product encountered a compatibility issue with certain Windows systems missing the updated version of the Universal C Runtime (CRT) component. The update was only available on the Fast ring. 3.1.57. Version 6.6.9.127 Release date: Fast ring: 2019.03.13 Slow ring: -

Important ● This version is for Windows 7 / Windows Server 2008 R2 and later.

● During this update, the Microsoft Exchange Transport service will be stopped.

New Features and Improvements

● Added support for Windows 10 IoT Enterprise.

● Reduced the amount of data that the Support Tool log collects.

Resolved Issues

● In some cases, Bitdefender Endpoint Security Service crashed due to a misconfiguration of the product.

● In a few situations, the policy settings failed to apply on Relay.

● In certain conditions, the Firewall module blocked ICMP v6 traffic on port 143, on Windows 10 Pro. 3.1.58. Version 6.6.8.119 Release date: Fast ring: 2019.03.04 Slow ring: 2019.03.04

Bitdefender Endpoint Security Tools for Windows version 6 47 Important ● This version is for Windows 7 / Windows Server 2008 R2 and later.

● During this update, the Microsoft Exchange Transport service will be stopped.

● This version includes on slow ring all the improvements and fixes delivered with Bitdefender Endpoint Security Tools version 6.6.8.117, released on fast ring.

New Features and Improvements

● New features and improvements from version 6.6.8.117 on fast ring.

Resolved Issues

● After updating to version 6.6.8.117, the product crashed on Windows Server 2012 R2 due to an incompatibility with the EDR module. The update was only available on the Fast ring. 3.1.59. Version 6.6.8.117 Release date: Fast ring: 2019.02.28 Slow ring: -

Important ● This version is for Windows 7 / Windows Server 2008 R2 and later.

● During this update, the Microsoft Exchange Transport service will be stopped.

New Features and Improvements

● Improved the performance of the On-access scanning module. 3.1.60. Version 6.6.8.115 Release date: Fast ring: 2019.02.14 Slow ring: 2019.02.18

Important ● This version is for Windows 7 / Windows Server 2008 R2 and later.

Bitdefender Endpoint Security Tools for Windows version 6 48 ● During this update, the Microsoft Exchange Transport service will be stopped.

● This version includes on slow ring all the improvements and fixes delivered with Bitdefender Endpoint Security Tools version 6.6.8.112, released on fast ring.

New Features and Improvements

● New features and improvements from version 6.6.8.112 on fast ring.

Resolved Issues

● Fixed a crash in the Web Services Library when verifying certificates in certain conditions.

● Resolved issues from version 6.6.8.112 on fast ring. 3.1.61. Version 6.6.8.112 Release date: Fast ring: 2019.02.11 Slow ring:

Important ● This version is for Windows 7 / Windows Server 2008 R2 and later.

● During this update, the Microsoft Exchange Transport service will be stopped.

New Features and Improvements

● Improved the mechanism of sending encryption recovery keys to ensure their availability in the GravityZone console.

● When removing BEST using the Uninstall Tool, encrypted non-boot partitions managed by the Encryption module are now automatically unlocked.

● The Hyper Detect feature status is now visible in the Modules section of the user interface.

● GravityZone administrators can now block Windows Internet Connection Sharing (ICS) on endpoints running Windows 8 or later.

● Following this update, existing installations on slow ring will be progressively migrated to the new Content Control technology (initially introduced with version 6.6.5.82).

Bitdefender Endpoint Security Tools for Windows version 6 49 Resolved Issues

● In some cases, Bitdefender Endpoint Security Tools deployment via relay failed with error code 15.

● When the Advanced Threat Control module was enabled Acronis Back-up could not create snapshots.

● The Advanced Threat Control module interfered with Arcserve Back-up solution causing BSOD on Windows 10.

● In a particular scenario, the Advanced Threat Control module caused the Endpoint Security Service to stop working.

● The Firewall module blocked DrayTek application when the Active profile was set to “Let Windows decide”.

● Sometimes, after migrating to the new Content Control technology, the EDR sensor was active only when re-applying the policy manually.

● GravityZone search results of the events reported by the EDR sensor were displaying the domain instead of the endpoints names.

● Sometimes, when no connection was configured directly or through a proxy from the policy, BEST could not connect to Cloud Services.

● The Patch Management module was not updating some applications, if the download link was moved or redirected.

● Using multiple exclusions in the Power User module was not functioning properly.

● On Windows 2008 R2 Standard, BEST generated large amounts of log files.

● In some situations, BEST prevented creating snapshots with the Quiesce VMware filesystem option.

● When a browser page was blocked, the message displayed in French was translated incompletely.

● Changed description of some product files.

● A file removal vulnerability on Windows Server 2016 was fixed.

● Other minor improvements and bug fixes.

Bitdefender Endpoint Security Tools for Windows version 6 50 3.1.62. Version 6.6.7.106 Release date: Fast ring: 2018.12.20 Slow ring: 2019.01.03

Important ● This version is for Windows 7 / Windows Server 2008 R2 and later.

● During this update, the Microsoft Exchange Transport service will be stopped.

New Features and Improvements

● Performance improvements for the new Content Control technology.

● Added support for uninstalling the following incompatible security products: – ESET NOD32 Antivirus 12.x – ESET Endpoint Security 7.x – ESET Endpoint Antivirus 7.x – ESET Internet Security 12.x – ESET Smart Security 12.x

● Enhanced support for uninstalling the following incompatible security products: – avast! Free Antivirus 18.x – avast! Internet Security 18.x – avast! Premier 18.x – avast! Pro Antivirus 18.x – AVG AntiVirus Free 18.x – AVG Business 18.x – AVG AntiVirus Business Edition 16.x – AVG Internet Security 18.x – Sophos Endpoint Security and Control 10.x – Sophos Endpoint Security and Control 11.x – SecureAnywhere Complete 9.x

Bitdefender Endpoint Security Tools for Windows version 6 51 Resolved Issues

● Compatibility issues between the new Content Control technology and specific websites or applications. 3.1.63. Version 6.6.7.103 Release date: Fast ring: 2018.12.19 Slow ring: -

Important ● This version is for Windows 7 / Windows Server 2008 R2 and later.

● During this update, the Microsoft Exchange Transport service will be stopped.

New Features and Improvements

● Performance improvements for the new Content Control technology.

Resolved Issues

● Compatibility issues between the new Content Control technology and specific websites or applications. 3.1.64. Version 6.6.7.99 Release date: Fast ring: 2018.11.29 Slow ring: 2018.11.29

Important ● This version is for Windows 7 / Windows Server 2008 R2 and later.

● During this update, the Microsoft Exchange Transport service will be stopped.

Resolved Issues

● In some cases, when deploying over an incompatible security product via GravityZone task, the installation failed to continue after reboot.

Bitdefender Endpoint Security Tools for Windows version 6 52 3.1.65. Version 6.6.7.97 Release date: Fast ring: 2018.11.26 Slow ring: 2018.11.26

Important ● This version is for Windows 7 / Windows Server 2008 R2 and later.

● During this update, the Microsoft Exchange Transport service will be stopped.

● This version includes on slow ring all the improvements and fixes delivered with Bitdefender Endpoint Security Tools version 6.6.7.96, released on fast ring.

New Features and Improvements

● Enhanced support for removing the incompatible security product McAfee Endpoint Security 10.

● New features and improvements from version 6.6.7.96 on fast ring.

Resolved Issues

● EDR Sensor interfered with applying Internet Explorer Zones list via Windows Group Policy.

● Microsoft Azure virtual machines detection was not configured correctly in package properties.

● Resolved issues from version 6.6.7.96 on fast ring. 3.1.66. Version 6.6.7.96 Release date: Fast ring: 2018.11.19 Slow ring: -

Important ● This version is for Windows 7 / Windows Server 2008 R2 and later.

● During this update, the Microsoft Exchange Transport service will be stopped.

Bitdefender Endpoint Security Tools for Windows version 6 53 New Features and Improvements

● Scanning of packed files is now always enabled for all types of scanning.

● Optimized memory consumption for older installations using Central Scan with no fallback.

● Quarantined files are no longer submitted to Bitdefender Labs periodically. Corresponding GravityZone policy setting will be removed in a future update.

● Improved messages for Advanced Threat Control detection events.

Resolved Issues

● Multiple mails sent through the same SMTP connection were considered authenticated if the first one was authenticated.

● When adding a process exclusion for All modules in Power User, the exclusion would not apply to Advanced Threat Control.

● In rare cases, the new Content Control driver caused critical errors (BSOD) on endpoints.

● The user interface did not specify the threat name in case of infected files downloaded from the Internet.

● Central Quaratine did not work properly with Distributed File System (DFS) network shares.

● Sometimes, the Device Control module detected CD-ROM drives as external storage.

● Local whitelist updates for Web Access Control categories were not applied on-the-fly, but after restart. 3.1.67. Version 6.6.6.84 Release date: Fast ring: 2018.10.22 Slow ring: 2018.10.29

Important ● This version is for Windows 7 / Windows Server 2008 R2 and later.

● During this update, the Microsoft Exchange Transport service will be stopped.

Bitdefender Endpoint Security Tools for Windows version 6 54 New Features and Improvements

● Added exclusions for System Center Configuration Manager 2012 (SCCM 2012) following Microsoft recommendations.

● This release automatically migrates all existing installations set to update from the fast ring to the latest version of Content Control technology introduced by Bitdefender Endpoint Security Tools 6.6.5.82.

● Added support for uninstalling the following incompatible security products: – Symantec Hosted Endpoint Protection 3.x – Premium 11.x

Resolved Issues

● Patch Management could not install certain Microsoft SQL Server patches.

● Patch Management could not install KeePass application patches on Windows 7 and 8.

● Upon initial login, the Power User interface did not correctly reflect the current Advanced Threat Control settings from the policy.

● Exchange items were not deleted from quarantine even though the GravityZone task finished successfully.

● Endpoints were not reporting to GravityZone Control Center when connection to Bitdefender Cloud Services failed.

● Installation using Downloader was unsuccessful in some cases because setup failed to download files (error code 15).

● The endpoint users were prompted to take action during silent uninstall of Symantec Endpoint Protection Small Business Edition. 3.1.68. Version 6.6.5.82 Release date: Fast ring: 2018.09.25 Slow ring: 2018.09.25

Important ● This version is for Windows 7 / Windows Server 2008 R2 and later.

Bitdefender Endpoint Security Tools for Windows version 6 55 ● This version includes on slow ring all the improvements and fixes delivered with Bitdefender Endpoint Security Tools version 6.6.5.78 and 6.6.5.81.

New Features and Improvements

● Bitdefender continuously develops innovative technologies to address the latest security threats. This product version introduces a new version of the underlying Bitdefender Content Control technology, which is designed to ensure support for future features and operating system updates, while retiring redundant features such as Search Adviser and Browser toolbar. The new Content Control technology is installed automatically as follows: – With any new 6.6.5.82 installation. – Upon updating any existing installation including the EDR Sensor module. – Upon repairing or reconfiguring an existing installation. Existing installations will be migrated automatically to the new technology later on.

● Added support for Windows 10 October 2018 Update (Redstone 5 / version 1809) and Windows Server 2019.

● Added support for uninstalling the following incompatible security products: – AVG Business Security – AVG Business 18.x – Bitdefender 2018 Device Management and Agent – Bitdefender Total Security 23.x – Bitdefender Internet Security 23.x – Bitdefender Antivirus Plus 23.x – Comodo Client - Security 8.x – Comodo Internet Security Premium 11.x – Kaspersky Total Security 19.x – Kaspersky Anti-Virus 19.x – Kaspersky Internet Security 19.x – Kaspersky Security 10 for Windows Server – Kaspersky Endpoint Security 11.x – McAfee Total Protection 21.x (16.0 R12) – McAfee Internet Security 21.x (16.0 R14) – McAfee AntiVirus Plus 20.x (16.0 R7) – McAfee AntiVirus Plus 21.x (16.0 R12)

Bitdefender Endpoint Security Tools for Windows version 6 56 – McAfee Security Scan – Nifty Jouji Anshin Security24 7.x – Panda Dome 18.x

● Enhanced support for uninstalling the following incompatible security products: – avast! Internet Security 18.x – avast! Free Antivirus 18.x – AVG Internet Security 18.x – Kaspersky Endpoint Security 10.x – McAfee Internet Security 20.x (16.0 R7) – System Center Endpoint Protection 4.x

● New features and improvements from versions 6.6.5.78 and 6.6.5.81 on fast ring.

Resolved Issues

● Fixed an issue where deployment failed with error code 1627 instead of error code 31 when third-party security software could not be removed.

● Resolved issues from versions 6.6.5.78 and 6.6.5.81 on fast ring.

Note During this update, the Microsoft Exchange Transport service will be stopped. 3.1.69. Version 6.6.5.81 Release date: Fast ring: 2018.09.24 Slow ring: -

Important This version is for Windows 7 / Windows Server 2008 R2 and later.

New Features and Improvements

● Bitdefender Endpoint Security Tools is now able to generate and send to the GravityZone console recovery keys for volumes encrypted separately with BitLocker, not only through GravityZone Full Disk Encryption policy.

Bitdefender Endpoint Security Tools for Windows version 6 57 Resolved Issues

● Fixed an issue with Advanced Threat Control slowing down the upload of Microsoft Office documents to a remote shared location.

Note During this update, the Microsoft Exchange Transport service will be stopped. 3.1.70. Version 6.6.5.78 Release date: Fast ring: 2018.09.20 Slow ring: -

Important This version is for Windows 7 / Windows Server 2008 R2 and later.

New Features and Improvements

● Improved EDR Sensor incident detection and reporting capabilities.

Resolved Issues

● Fixed a Patch Management issue that prevented KeePass application to update from version 2.38 to 2.39.1.

● Fixed an issue with Advanced Threat Control blocking Exchequer and MYOB applications.

● Fixed an issue with unquoted uninstall path.

● Fixed an issue where the product was not de-registered from Windows 10 Action Center upon Bitdefender Firewall removal.

● Fixed an issue where Support Tool recursively collected unnecessary files from the temp folder, causing low disk space.

● Fixed an issue that prevented Bitdefender Endpoint Security Tools installation on machines with Sophos Endpoint.

● When installing using the Downloader, the user interface did not show file download progress. The issue is now fixed.

Bitdefender Endpoint Security Tools for Windows version 6 58 ● Fixed a particular issue causing critical error (BSOD) when accessing items on an external shared drive.

● Fixed a particular issue causing critical error (BSOD) on Windows Server 2012.

● Fixed some minor issues in the Power User interface.

Note During this update, the Microsoft Exchange Transport service will be stopped. 3.1.71. Version 6.6.4.71 Release date: Fast ring: 2018.09.12 Slow ring: 2018.09.12

Important This version is for Windows 7 / Windows Server 2008 R2 and later.

Resolved Issues

● Fixed an issue with version 6.6.4.68 that allowed the product to install on legacy Windows operating systems.

Note During this update, the Microsoft Exchange Transport service will be stopped. 3.1.72. Version 6.6.4.68 Release date: Fast ring: 2018.08.30 Slow ring: 2018.08.30

Important ● This version is for Windows 7 / Windows Server 2008 R2 and later.

● This version includes on the slow ring all the improvements and fixes delivered with Bitdefender Endpoint Security Tools version 6.6.4.67.

Bitdefender Endpoint Security Tools for Windows version 6 59 Resolved Issues

● Fixed an issue affecting version 6.6.3.61, where the product required system restart when installing over an incompatible security product, even if the option Automatically reboot (if needed) was disabled.

Note During this update, the Microsoft Exchange Transport service will be stopped. 3.1.73. Version 6.6.4.67 Release date: Fast ring: 2018.08.28 Slow ring: -

Important This version is for Windows 7 / Windows Server 2008 R2 and later.

Resolved Issues

● Fixed an issue causing product crashes.

● Fixed an incompatibility issue with MsSenseS.exe that was causing the product folder bdcore_tmp to grow in size during on-demand scanning, until the disk space was consumed.

● Fixed an issue that caused Bitdefender Endpoint Protected Service to stop in particular conditions.

Note During this update, the Microsoft Exchange Transport service will be stopped. 3.1.74. Version 6.6.3.61 Release date: Fast ring: 2018.08.01 Slow ring: 2018.08.02

Important ● This version is for Windows 7 / Windows Server 2008 R2 and later.

Bitdefender Endpoint Security Tools for Windows version 6 60 ● This version includes on the slow ring all the improvements and fixes delivered with Bitdefender Endpoint Security Tools versions 6.6.3.59 and 6.6.3.60.

New Features and Improvements

● Added support for uninstalling the following incompatible security product: – Microsoft Security Essentials 2.x

Resolved Issues

● Fixed a Relay issue in version 6.6.3.59 that prevented deployment of newer product kits.

Note During this update, the Microsoft Exchange Transport service will be stopped. 3.1.75. Version 6.6.3.60 Release date: Fast ring: 2018.07.26 Slow ring: -

Important ● This version is for Windows 7 / Windows Server 2008 R2 and later.

Resolved Issues

● Fixed an issue occurred at the update system in version 6.6.3.59.

Note During this update, the Microsoft Exchange Transport service will be stopped. 3.1.76. Version 6.6.3.59 Release date: Fast ring: 2018.07.25 Slow ring: -

Bitdefender Endpoint Security Tools for Windows version 6 61 Important ● This version is for Windows 7 / Windows Server 2008 R2 and later.

New Features and Improvements

● Added support for wildcards when configuring manual exclusions for Device Control based on Device ID. You can use ? (question mark) for one character and * (asterisk) for any number of characters. In the GravityZone console, you must add wildcard exclusions by using the syntax wildcard:deviceID.

Resolved Issues

● Fixed an issue with EPSecurityService causing up to 30% CPU usage on some endpoints running Windows 10 Enterprise.

● Fixed an issue that caused high RAM usage on Relay and many queued endpoint connections.

● Fixed the Amazon EC2 instance detection (used for scan mode configuration in installation packages).

● Fixed an issue with the epredline service path.

● Fixed an issue where the product installation reverted after going up to 100% in a particular situation.

● Fixed an issue that caused explorer.exe system errors with the message "txmlutil.dll is missing" on some servers.

● Fixed the Web Access Control setting Show detailed alerts on client in the Power User interface.

Note During this update, the Microsoft Exchange Transport service will be stopped. 3.1.77. Version 6.6.2.49 Release date: Fast ring: 2018.06.21 Slow ring: 2018.06.28

Bitdefender Endpoint Security Tools for Windows version 6 62 Important ● This version is for Windows 7 / Windows Server 2008 R2 and later.

New Features and Improvements

● Added support for remotely terminating processes detected in EDR incidents from the GravityZone console.

● Added support for patch rollback with the Patch Management module from GravityZone.

● The endpoint users can now postpone a system restart required to complete one or more security tasks (configurable via GravityZone security policy).

● Improved mechanism for detecting potential Process Doppelgänging attacks.

● Added support on pre-Windows 8.1 operating systems for TLS 1.2+ secure communications with GravityZone communication servers and Relays.

● Added support for the system variable %AllUsersProfile% to specify paths for product modules.

● Added support for uninstalling the following incompatible security products: – ByteFence Anti-Malware 5.x – Comodo Client Security – Faronics Anti-Virus 4.x – Kaspersky Security Center 10.x – Kaspersky Security Center Network Agent 10.x – Nifty Jouji Anshin Security24 7.x – PC TuneUp 16.x – Sophos Cloud Endpoint 2.x – Trend Micro Worry-Free Business Security Agent 20.x – VIPRE Advanced Security 10.x

● Enhanced support for uninstalling the following incompatible security products: – avast! Free Antivirus 18.x – avast! Internet Security 18.x

Bitdefender Endpoint Security Tools for Windows version 6 63 – avast! Premier 18.x – avast! Pro Antivirus 18.x – AVG AntiVirus Free 18.x – AVG Internet Security 18.x – Panda Endpoint Protection Plus 7.x – Sophos Home 1.x – Kaspersky Free 18.x – McAfee Total Protection 16.x

Resolved Issues

● Fixed an issue that prevented quarantined files from being restored on network paths when using the local user interface.

● Fixed an issue that caused high RAM usage on Relay and many queued endpoints connections in specific situations.

● Fixed a Relay issue causing the error code 87 when deploying the product through Relay.

● Fixed an issue with Advanced Threat Control causing a critical error (BSOD) when using CodeSoft.

● Fixed an issue with Advanced Threat Control that prevented CCH Prosystems Tax from being installed on endpoints.

● Fixed a Device Control issue occurring on version 6.6.1.36 that caused critical error (BSOD) on Windows Server 2012.

● Fixed an erroneous translation in Romanian of the Save button.

● Fixed an issue causing error when applying a policy with already existing settings.

Note During this update, the Microsoft Exchange Transport service will be stopped. 3.1.78. Version 6.6.1.37 Release date:

Bitdefender Endpoint Security Tools for Windows version 6 64 Fast ring: 2018.06.07 Slow ring: 2018.06.07

Important ● This version is for Windows 7 / Windows Server 2008 R2 and later.

Resolved Issues

● In some cases, when detecting and uninstalling an incompatible security product, BEST 6.6.1.36 also uninstalled specific non-security applications. The issue is now fixed.

Note During this update, the Microsoft Exchange Transport service will be stopped. 3.1.79. Version 6.6.1.36 Release date: Fast ring: 2018.05.21 Slow ring: 2018.05.21

Important ● This version is for Windows 7 / Windows Server 2008 R2 and later.

New Features and Improvements

● Starting with this release, Bitdefender Endpoint Security Tools is available in two flavors based on the operating system: – BEST 6.6.x, starting with Windows 7 / Windows Server 2008 R2, supporting all the existing GravityZone features and technologies. This version no longer installs on legacy operating systems. – BEST 6.4.x for Windows Legacy, designed for Windows XP and Windows Vista families including corresponding embedded and server versions, with limited features and support. This version does not install on Windows 7 / Windows Server 2008 R2 and later. After update, existing BEST installations will get the version corresponding to their operating system.

Bitdefender Endpoint Security Tools for Windows version 6 65 For details about BEST for Windows Legacy, refer to the specific release notes.

● BEST 6.2.34.994 introduced a new version of Advanced Threat Control for Windows 7 and later, initially available with new installations and existing installations on Fast Ring. With this release, all remaining desktop installations are automatically migrated to the latest version of Advanced Threat Control.

● Updated the built-in exclusions for Exchange Server 2016.

● The About window of the product now includes a link to Bitdefender privacy policy.

● Command line detection events captured in GravityZone Ultra incidents now include process ID and parent process ID information.

Resolved Issues

● Fixed an issue with the firewall module that caused critical errors (BSOD) when using the Linux Subsystem on endpoints running Windows 10 "Redstone 1" or "Redstone 4".

● Fixed a compatibility issue with Application Control that caused critical errors (BSOD) when using the Linux Subsystem on endpoints with Windows 10 "Redstone 4".

● In some cases, EPUpdateServer.exe stopped functioning. The issue is now fixed.

● Fixed a communication issue between endpoints and Relay that caused error message 1008.

Note During this update, the Microsoft Exchange Transport service will be stopped. 3.1.80. Version 6.2.36.1014 Release date: Fast ring: 2018.04.19 Slow ring: 2018.04.26

New Features and Improvements

● To configure an email address in the About window so that it opens the default email application on the endpoint, it must be added with the "mailto:" prefix in

Bitdefender Endpoint Security Tools for Windows version 6 66 the GravityZone policy. The "mailto:" prefix is no longer displayed in the About window.

● Added support for Windows 10 Version 1803 (April 2018 Update) "Redstone 4".

● Added support for uninstalling the following incompatible security products: – 2345 Safeguard 3.x – avast! Free Antivirus 18.x – avast! Internet Security 18.x – avast! Internet Security 17.x – avast! Premier 18.x – avast! Pro Antivirus 18.x – Internet Security Suite 15.x – AVG AntiVirus Free 18.x – AVG Internet Security 18.x – Kaspersky Total Security 18.x – 360 Safeguard 11.x – AntiVirus 5.x – Qihoo 360 Safeguard 11.x – McAfee LiveSafe 16.x – Norton 360 22.12.x – Norton Antivirus 22.12.x – 22.12.x – Norton Security 22.12.x – Norton Security with Backup 22.12.x – QQ Computer Housekeeper 12.x

Resolved Issues

● EDR Sensor has been found to interfere with VMware Workstation software running on the endpoint. The issue is now fixed.

● In certain conditions, Bitdefender Endpoint Security Tools was not receiving policies and tasks from GravityZone Control Center. The issue is now fixed.

● In some cases, the Deny rule for Network Printing was being applied to the Home/Office profile. The issue is now fixed.

● Some Microsoft Lync Server 2013 recommended locations were missing from the GravityZone built-in exclusions. The issue is now fixed.

● In certain situations, EPSecurityService was consuming 100% CPU because of Volume Encryption. The issue is now fixed.

Bitdefender Endpoint Security Tools for Windows version 6 67 ● Fixed a compatibility issue with Symantec DLP solution causing problems with file downloads and video streaming in some cases.

● Fixed an issue that caused Content Control to block an internal application.

● Fixed an issue that caused Content Control to block SSL websites in Google Chrome.

● In some cases, Content Control was slowing down the Oracle application. The issue is now fixed.

● Fixed an issue that caused Application Control to group applications incorrectly when the InstallLocation registry of an application was invalid.

● Fixed an issue with the endpoints being reported offline if they are connected through Relay.

Note During this update, the Microsoft Exchange Transport service will be stopped. 3.1.81. Version 6.2.35.1008 Release date: Fast ring: 2018.03.27 Slow ring: 2018.03.27

Important ● This version includes on the slow ring all the improvements and fixes delivered with Bitdefender Endpoint Security Tools 6.2.35.1003 and 6.2.35.1004, which were released only on the fast ring.

New Features and Improvements

● Improved support for removing incompatible security software when installing the product.

Note During this update, the Microsoft Exchange Transport service will be stopped. 3.1.82. Version 6.2.35.1004 Release date:

Bitdefender Endpoint Security Tools for Windows version 6 68 Fast ring: 2018.03.22 Slow ring:

Resolved Issues

● Fixed an issue that caused epsecurityservice.exe to crash after updating to version 6.2.35.1003, if Firewall was configured to use aggressive rules and the command line for processes included in those rules was longer than 500 characters.

Note During this update, the Microsoft Exchange Transport service will be stopped. 3.1.83. Version 6.2.35.1003 Release date: Fast ring: 2018.03.22 Slow ring:

New Features and Improvements

● New blocklist capability allows administrators to automatically prevent suspicious files/processes detected by EDR from running.

● New endpoint isolation feature allows admins to automatically isolate endpoints from the network while investigating potential security incidents.

● Added support for EDR Sensor to submit events via proxy or Relay.

● New and enhanced command line support tool, collecting additional information required for troubleshooting.

● The product now reports on its uptime, to support Central Scan usage reporting for Managed Service Providers (MSPs) in GravityZone Cloud.

● Introduced a Signature Update fallback mechanism that loads the last working antimalware signatures in case of faulty updates.

● Added support for the installation of the March 13th Microsoft security patches (KB4088877, KB4088880, ADV180002) for Windows Server 2012, Windows Server 2008 and Windows 8 Embedded.

Bitdefender Endpoint Security Tools for Windows version 6 69 Resolved Issues

● Fixed an issue where some patches failed to install if the patch name included certain special characters.

● Fixed an issue with firewall blocking RDP connections in the local network when the Network Discovery option was set to Remote.

● Fixed an issue where saving Excel files accessed from the network resulted in temporary files not being deleted.

● Fixed an issue where the Relay was not removing older versions of malware signatures.

Note During this update, the Microsoft Exchange Transport service will be stopped. 3.1.84. Version 6.2.34.1000 Release date: Fast ring: 2018.03.15 Slow ring: 2018.03.15

New Features and Improvements

● Added support for uninstalling the following incompatible security products: – McAfee Endpoint Security Adaptive Threat Protection – McAfee Product Improvement Program – McAfee Client Proxy

Resolved Issues

● Fixed an issue that caused the installation of the March Windows Monthly Rollup update to fail on Windows 7 machines with Bitdefender Endpoint Security Tools version 6.2.34.998.

Note During this update, the Microsoft Exchange Transport service will be stopped. 3.1.85. Version 6.2.34.998 Release date:

Bitdefender Endpoint Security Tools for Windows version 6 70 Fast ring: 2018.03.05 Slow ring: 2018.03.07

Important ● This update includes all the improvements and fixes delivered with Bitdefender Endpoint Security Tools version 6.2.34.994.

New Features and Improvements

● The suspicious files selected for Sandbox Analyzer submission are no longer blocked if the submission fails because no network connection is available.

Note During this update, the Microsoft Exchange Transport service will be stopped. 3.1.86. Version 6.2.34.994 Release date: Fast ring: 2018.02.27 Slow ring: -

New Features and Improvements

● Bitdefender continuously develops innovative technologies to address the latest security threats. This product version introduces a new version of Advanced Threat Control for Windows 7 and above, which features improved detection, performance and cleanup capabilities. New installations will automatically include the new Advanced Threat Control version. The Fast Ring endpoints will also be migrated automatically to the new version. The Slow Ring endpoints will be migrated later on.

● Users can now unlock encrypted volumes without using a password when a Trusted Platform Module (TPM) is available, if allowed via policy.

● Added support for Czech in the product graphical interface (Power User interface is not yet localized).

● When uninstalling Bitdefender Endpoint Security Tools, non-boot encrypted drives managed by the Encryption module are now unlocked without requiring a recovery key.

Bitdefender Endpoint Security Tools for Windows version 6 71 Resolved Issues

● Repairing the installation while the Endpoint Security Service was not running resulted in Bitdefender Endpoint Security Tools being uninstalled. The issue is now fixed.

● Fixed an issue with encryption not starting on Windows 7 endpoints using TPM.

● Fixed an issue where Content Control was blocking an application from connecting to the console port of an equipment.

● Fixed an issue where Content Control was blocking access to the home.nest.com webpage.

● Fixed a high memory consumption issue when using multiple assignment rules.

● Old policies were not properly deleted when applying a new policy. The issue is now fixed.

● Fixed an issue causing error message -2009 when trying to update the product via Relay.

● In some cases, files from Quarantine were not properly deleted. The issue is now fixed.

● Fixed a corner case issue, occurring sometimes after Windows startup, where Bitdefender Endpoint Security Tools was unable to connect to any of the configured Security Servers.

Note During this update, the Microsoft Exchange Transport service will be stopped. 3.1.87. Version 6.2.31.985 Release date: Fast ring: 2018.01.30 Slow ring: 2018.01.30

Resolved Issues

● Fixed an issue with endpoints not being updated to product version 6.2.31.984 (error 2009) when configured to update exclusively from Bitdefender Endpoint Security Tools Relay Server, without fallback on Bitdefender Servers on the internet or GravityZone update server.

Bitdefender Endpoint Security Tools for Windows version 6 72 Note During this update, the Microsoft Exchange Transport service will be stopped. 3.1.88. Version 6.2.31.984 Release date: Fast ring: 2018.01.25 Slow ring: 2018.01.29

Important ● This version includes on the slow ring all the improvements and fixes delivered with Bitdefender Endpoint Security Tools 6.2.30.982 and 6.2.31.983, which were released only on the fast ring.

New Features and Improvements

● Added compatibility with Mozilla Firefox 58.0 for SSL traffic scanning.

Note During this update, the Microsoft Exchange Transport service will be stopped. 3.1.89. Version 6.2.31.983 Release date: Fast ring: 2018.01.23 Slow ring: -

Important

Resolved Issues

● Fixed an issue with Microsoft Exchange Server 2016 where the product failed to scan emails after Cumulative Update 8.

Note During this update, the Microsoft Exchange Transport service will be stopped. 3.1.90. Version 6.2.30.982 Release date:

Bitdefender Endpoint Security Tools for Windows version 6 73 Fast ring: 2018.01.15 Slow ring: -

New Features and Improvements

● Made various improvements across the product for better detection and faster access of network shares.

● Local users can no longer restore files to paths protected by Windows User Account Control.

Resolved Issues

● In some situations, the users could experience slowdowns for applications running from Samba network shares. The issue is now fixed.

● Fixed an issue where the Firewall module did not start after upgrading from very old versions.

● Fixed a communication issue that occurred on Windows Server 2003 after upgrading to the new version of Update Server.

● Fixed an issue where Windows XP endpoints from Active Directory were showing up under Custom Groups in the GravityZone Control Center.

● Fixed an issue with on-access scanning blocking the execution of Potentially Unwanted Applications (PUA) even though the option to scan for PUA was disabled.

● Fixed an issue with encryption module not installing on particular Windows 8.1 Pro flavors, including Workstation and Media Center.

Note During this update, the Microsoft Exchange Transport service will be stopped. 3.1.91. Version 6.2.26.960 Release date: Fast ring: 2017.11.23 Slow ring: 2017.11.27

Bitdefender Endpoint Security Tools for Windows version 6 74 Important ● This version includes, on slow ring, improvements and fixes delivered with Bitdefender Endpoint Security Tools 6.2.26.959, released on fast ring.

Resolved Issues

● Fixed the incomplete migration of the signatures while upgrading from the old version of Update Server to the new one.

Note During this update, the Microsoft Exchange Transport service will be stopped. 3.1.92. Version 6.2.26.959 Release date: Fast ring: 2017.11.21 Slow ring: -

New Features and Improvements

● Added support for Patch Management.

● Added a new version of Update Server that supports the Patch Management Server functionality.

● Added support for uninstalling the following incompatible security products: – Avast Business Security 2017 (uninstall with user interaction). – Avast 2017 Free (uninstall with user interaction). – F-Secure Server Security 10.50 build 119 (silent uninstall and with user interaction). – McAfee Endpoint Security Firewall from McAfee Endpoint 10.5 (silent uninstall and with user interaction). – Panda Adaptive Defense 360 (silent uninstall and with user interaction). – Lumension Endpoint Security Client (silent uninstall and with user interaction). – Antimalware 3.x (silent uninstall and with user interaction).

Bitdefender Endpoint Security Tools for Windows version 6 75 ● The Event Correlator module has been renamed to EDR Sensor in the product user interface.

Resolved Issues

● Fixed an issue where the product did not support MAC addresses with lowercase letters for networks defined in the security policies.

● Fixed an issue where, in some cases, the Bitdefender security services blocked the terminal server after a certain number of sessions.

● Fixed the Firewall malfunction caused by a driver stoppage.

● Fixed the product user interface crash occurred when using Date Range from the Filters area.

● The users could not stop or pause an automatic device scanning task. The issue is now fixed.

● The users were prompted every 15 minutes to enter a PIN or password when a security policy for Full Disk Encryption was applied on devices with no physical keyboard. The issue is now fixed.

● The Ransomware Vaccine section has been removed from the Power User interface.

● Fixed the Uninstall Tool error displayed on an endpoint without Firewall and EDR Sensor installed.

Note During this update, the Microsoft Exchange Transport service will be stopped. 3.1.93. Version 6.2.25.953 Release date: Fast ring: 2017.10.30 Slow ring: 2017.11.01

New Features and Improvements

● Added support for EDR (Endpoint Detection and Response) sensor.

Note During this update, the Microsoft Exchange Transport service will be stopped.

Bitdefender Endpoint Security Tools for Windows version 6 76 3.1.94. Version 6.2.25.950 Release date: Fast ring: 2017.10.26 Slow ring: -

New Features and Improvements

● After installing BEST, the product Firewall now becomes active only with a GravityZone policy. This way, the administrator can customize system rules before the Firewall default settings being applied on the endpoint, thus avoiding losing connection to key systems and applications in the network.

Resolved Issues

● Fixed an issue occurred on some Citrix PVS systems, where the product installation failed at 82%, with BSOD after restart, when Firewall was also installed.

Note During this update, the Microsoft Exchange Transport service will be stopped. 3.1.95. Version 6.2.25.944 Release date: Fast ring: 2017.09.26 Slow ring: 2017.09.28

New Features and Improvements

● Added support for Centralized Quarantine, a new GravityZone feature that allows you to send quarantined files to a network shared location, for further analysis.

Fixed Issues

● Addressed a proxy server issue that prevented the endpoints to connect to Bitdefender cloud services.

● Fixed an incompatibility with Windows Firewall that caused network issues on Windows 7 endpoints after updating the product to version 6.2.24.937.

Bitdefender Endpoint Security Tools for Windows version 6 77 ● Fixed the incomplete removal of the incompatible product Sophos Anti-Virus 10.7.2.3 during the BEST installation.

● Fixed an issue where the Antimalware module was not starting in Windows Embedded POSReady 2009.

Known Issues

● SHA-256 is reported only for the first infected file from an archive, when the Scan Action is set to Take no action.

● Only one Antimalware event is generated for an archive with multiple infected files, when the Scan Action is set to Take no action.

Note During this update, the Microsoft Exchange Transport service will be stopped. 3.1.96. Version 6.2.24.938 Release date for both rings: 2017.08.31

Resolved Issues

● A conflict between Bitdefender and Windows Firewall caused connectivity issues. 3.1.97. Version 6.2.24.937 Release date: Fast ring: 2017.08.28 Slow ring: 2017.08.29

New Features and Improvements

● Bitdefender Endpoint Security Tools is now compatible with Windows 10 Redstone 3.

● Added support for running local custom on-demand scan tasks using the Command Line Interface.

● Improved the scanning for fileless attacks with new capabilities, including command line scanning and memory buffer scanning.

Bitdefender Endpoint Security Tools for Windows version 6 78 ● Added SQL Server 2016 to the Bitdefender Endpoint Security Tools default exclusions.

● Bitdefender Endpoint Security Tools is now available in Russian and Italian languages.

Resolved Issues

● A Volume Shadow Copy (VSS) Service error occurred on Windows servers having the "Quiesce guest filesystem" option enabled in VMWare, once Bitdefender Endpoint Security Tools was installed on them. This issue is now fixed.

● Fixed a XenApp login slowdown occurred on Bitdefender Endpoint Security Tools endpoints while the Advanced Threat Control module was enabled.

● In certain situations, Bitdefender Endpoint Security Tools endpoints could not play DRM protected Flash media content in Internet Explorer 11. This issue is now fixed.

● In certain situations, Bitdefender Endpoint Security Tools was incorrectly displayed as outdated in the GravityZone Control Center. This issue is now fixed.

● After upgrading to Windows 10 Redstone2, some previously discovered devices could not be detected anymore with the Device Control module. This issue is now fixed.

● When adding HyperDetect, detections on files that were prior cached as clean, were not triggered. This issue is now fixed.

● The Volume Encryption PIN minimum length did not work on all Windows versions. This issue is now fixed. 3.1.98. Version 6.2.23.932 Release date: Fast ring: 2017.08.03 Slow ring: 2017.08.08

New Features and Improvements

● Introduced a new stateful Firewall, based on Windows Filtering Platform, which will be fully compliant with Windows 10 Fall Creators Update ("Redstone 3"). The upgrade to the new Firewall will be seamless and will be delivered during

Bitdefender Endpoint Security Tools for Windows version 6 79 the product update. The rules and the settings will be preserved as configured and no user interaction will be required.

Resolved Issues

● Fixed the error code 3 occurred during the signature update, which caused the endpoints to appear as outdated.

● Fixed an issue where HTTPS webpages were blocked on some machines because the security certificate validation was taking too long.

● Fixed an issue where the product was downgrading to a previous version when using silent installation.

● The CD-ROM drive was not blocked when changing its settings from Allowed to Blocked in the security policy. The issue is now fixed.

● Some machines were not able to communicate with Control Center after a Reconfigure Client task. The issue is now fixed.

Note During this update, the Microsoft Exchange Transport service will be stopped. 3.1.99. Version 6.2.22.923 Release date: Fast ring: 2017-07-19 Slow ring: 2017-07-19

Resolved Issues

● Fixed an issue where devices already detected were sent to Control Center when starting a Network Discovery task. Now, only new devices are reported.

● In some situations, the security policy was reapplied at every system startup. The issue is now fixed.

Note During this update, the Microsoft Exchange Transport service will be stopped. 3.1.100. Version 6.2.22.918 Release date:

Bitdefender Endpoint Security Tools for Windows version 6 80 All rings: 2017-07-10

Resolved Issues

● Active Directory integration is now working for organization units with special characters.

● Assignment Rules are now being applied in the correct order when more than ten rules are being used.

Note During this update, the Microsoft Exchange Transport service will be stopped. 3.1.101. Version 6.2.22.916 Release date: Fast Ring: 2017-07-03 Slow Ring: 2017-07-04

New Features and Improvements

● Added support for HyperDetect and Sandbox Analyzer, two main protection modules of GravityZone Elite, the Bitdefender’s next-generation endpoint protection platform.

● Introduced Full Disk Encryption, an essential GravityZone feature that leverages the native BitLocker mechanism on Windows endpoints to provide disk encryption fast and without headache.

● Added support for SHA-256 reporting for suspicious and infected files.

● Added support for Brazilian Portuguese in the product graphical user interface (GUI).

Resolved Issues

● Fixed the vulnerability FG-VD-17-019 reported by ’s FortiGuard Labs through responsible disclosure.

● Addressed a vulnerability discovered by Hossein Lotfi, Secunia Research at Flexera Software, and reported through responsible disclosure.

● Fixed the error code 3, received during signature update.

Bitdefender Endpoint Security Tools for Windows version 6 81 ● Fixed the delayed connection to an RDS Server that occurred when on-access scanning was enabled in the policy.

● Fixed the issue that prevented Power User to disable the on-access option Take no action.

Known Issues Antimalware

● Traffic Scan, On-access Scanning and On-Demand Scanning do not report SHA-256 for an infected file detected on Security Server.

● On-access scanning reports only the name of an infected file, but not also the complete name of the archive that contains it, when action taken is Deny or Take no action.

● SHA-256 is reported only for the first infected file from an archive. Content Control

● Traffic Scan does not report SHA-256 for a page detected as infected by Bitdefender Cloud Servers. Full Disk Encryption

● BitLocker becomes suspended after turning it Off in Control Panel.

● A new external key for non-boot volumes is generated every time when a paused encryption process resumes.

● The Change Password option is enabled even if a password was not set yet. HyperDetect

● After assigning a policy with a higher protection level, HyperDetect does not report the files that trigger the new threshold.

● HyperDetect denies access to infected files on network shares regardless of the action set in policy. Sandbox Analyzer

● No action is taken on infected files located on network shares.

● Files analyzed and found infected are not cached.

● Event submission stops if the target endpoint reboots during analysis.

Bitdefender Endpoint Security Tools for Windows version 6 82 ● Processes reported as clean are still cached when the on-access scanning option Only new and changed files is disabled.

Note ● HyperDetect and Sandbox Analyzer modules do not cover yet some of the GravityZone features, such as Central Scanning (scanning with Security Servers). They will be released in near future.

● During this update, the Microsoft Exchange Transport service will be stopped.

3.1.102. Version 6.2.21.908 Release date: Fast Ring: 2017-05-18 Slow Ring: 2017-05-23

Resolved Issues

● On certain Windows Server machines, the product signatures were being reported as out of date in Control Center. The issue is now fixed.

● Fixed an issue where Windows Firewall Configuration Provider was detected as an incompatible security product.

● Addressed a critical error (BSOD) that occurred on Windows Server 2003 R2 machines at certain intervals.

● Fixed an incompatibility issue of the Content Control module with Avaya application.

● Fixed the missing Take no action option for Advanced Threat Control (ATC) in the Power User mode.

Note During this update, the Microsoft Exchange Transport service will be stopped. 3.1.103. Version 6.2.19.899 Release date: Fast Ring: 2017-04-08 Slow Ring: 2017-04-08

Bitdefender Endpoint Security Tools for Windows version 6 83 Resolved Issues

● Resolved a compatibility issue with the latest update from Microsoft on Windows 8.1 and Windows Server 2012 R2 systems.

Note During this update, the Microsoft Exchange Transport service will be stopped. 3.1.104. Version 6.2.19.894 Release date: Fast Ring: 2017-03-29 Slow Ring: 2017-03-30

New Features and Improvements

● Made several improvements to the installation process to address the removing of incompatible security products, the replacement of Endpoint Security versions and the cleaning procedure.

● Bitdefender Endpoint Security Tools is now compatible with Windows Server Core 2016.

Resolved Issues

● The Firewall module was disabled after upgrading the operating system from Windows 7 to Windows 10 Creators Update "Redstone 2". The issue is now fixed.

● Fixed an issue where endpoints were automatically restarting during the product update, although the Postpone reboot option was selected and If needed, reboot after installing updates was disabled in the security policy settings.

● Fixed an issue where the option Take no action, configured in Control Center for infected and suspicious files detected at on-access scanning, was automatically changed to Deny access when opening the Power User mode.

● Fixed an issue that caused 100% CPU usage when using a proxy with Kerberos/NTLM authentication.

● When changing the download folder, the Relay required a newer update from upgrade.bitdefender.com or from GravityZone Update Server in order to provide further updates. The issue is now fixed.

Bitdefender Endpoint Security Tools for Windows version 6 84 ● Fixed the critical error (BSOD) caused by the rootkit driver at on-demand scanning.

● Fixed the Microsoft Application Verifier vulnerability CVE-2017-6186.

● On some Windows Server 2003 and Windows XP operating systems, the endpoint failed to communicate with Control Center when connected to non-U.S. cloud services. The issue is now fixed.

Note During this update, the Microsoft Exchange Transport service will be stopped. 3.1.105. Version 6.2.18.884 Release date: Fast Ring: 2017-02-10 Slow Ring: 2017-02-20

Important ● This version, on slow ring, also includes improvements and fixes delivered with Bitdefender Endpoint Security Tools 6.2.18.882, released on fast ring.

Resolved Issues

● Fixed an issue where the handshake.html or refresh.html files were being downloaded in the browser when accessing some secured websites, such as LinkedIn or banking websites, while the ScanSSL was enabled via new Content Control components.

● In some cases, after updating to version 6.2.18.882, the following message was displayed: "There is no connection with the host security service. Please restart your system", but the problem still persisted after reboot. The issue is now fixed.

Note During this update, the Microsoft Exchange Transport service will be stopped. 3.1.106. Version 6.2.18.882 Release date: Fast Ring: 2017-02-09 Slow Ring: -

Bitdefender Endpoint Security Tools for Windows version 6 85 Resolved Issues

● Fixed the critical error (BSOD) that appeared on Windows 8 systems with Device Control enabled, when Application Jukebox Player was installed.

● Addressed an issue where starting a Reconfigure Client task during the malware signature update affected the Bitdefender update service.

● Fixed an Internet Explorer plugin issue that caused browser to stop working when accessing https://ipps.music-ins.com, while the Antiphishing module was active.

● In some cases, when using Contextual Scan for network locations, the product returned a result with task completed, but zero items scanned. This feature now behaves as expected.

● Fixed an issue occurred in some VMWare environments with XenDesktop endpoints using Citrix PVS, which caused machines to run out of space during the scanning and updating processes.

● Addressed an issue where the applied Firewall rules did not preserve Power User settings.

Known Issues

● The product installation may not work on Windows Vista, Windows 7, Windows Server 2008 and Windows Server R2 operating systems due to a known Microsoft issue. This is not related to Bitdefender and can be fixed on Windows 7 and Windows Server 2008 R2 with this KB article (English only).

Note During this update, the Microsoft Exchange Transport service will be stopped. 3.1.107. Version 6.2.17.876 Release date: Fast Ring: 2017-01-26 Slow Ring: 2017-01-30

Important ● This version, on slow ring, also includes improvements and fixes delivered with Bitdefender Endpoint Security Tools 6.2.15.869, released on fast ring.

Bitdefender Endpoint Security Tools for Windows version 6 86 New Features and Improvements

● Improved submission options for third-party integrations with the product.

Resolved Issues

● Assignment rules were in some cases incorrectly applied on SSID (Service Set Identifier) for wireless connection. The issue is now fixed.

● Resolved the increased Internet traffic generated on endpoints that occurred when various proxy servers were configured in Internet Explorer.

● Windows Defender was still enabled on Windows Server 2016 Final after installing Bitdefender Endpoint Security Tools. The issue is now fixed.

● Fixed the missing information for Blocked by and Web Category fields in the Blocked Websites notification, when using only the Ads filter to block webpages.

● Fixed a particular issue occurred on Exchange Servers where Bitdefender services crashed with In progress status at 83% during On-Demand scan process.

● Fixed a critical error (BSOD) that occurred when starting certain Windows 8.1 programs via Application Jukebox Player.

● Fixed a critical error (BSOD) generated by the Firewall module during the booting process after upgrading to Windows 10, 64-bit version.

● Fixed an issue that was interrupting network connection on Cisco 4510R Switch ports, after updating the product to version 6.2.10.832 on Windows 10 64-bit workstations.

● In some situations, endpoints in large networks and with Bitdefender Endpoint Security Tools installed were sending ICMP (Internet Control Message Protocol) broadcasts that generated high volumes of network traffic. The issue is now fixed.

● Occasionally, Internet browsers were experiencing temporary connectivity losses when Content Control was installed on endpoint. The issue is now fixed.

● Fixed a particular issue that caused the Device Control module to identify the wireless network adapter Intel Centrino Advanced-N 6205 as wired.

● In some situations, scheduled on-demand scan tasks started immediately after the endpoints resumed from sleep or hibernation. The issue is now fixed.

Bitdefender Endpoint Security Tools for Windows version 6 87 ● Fixed an issue where scheduled scan tasks from the past started when the user applied the policy on a new endpoint.

Note During this update, the Microsoft Exchange Transport service will be stopped. 3.1.108. Version 6.2.15.869 Release date: Fast Ring: 2016-12-22 Slow Ring: -

New Features and Improvements

● Improved submission options for third-party integrations with the product.

Resolved Issues

● Fixed a particular issue that caused the Device Control module to identify the wireless network adapter Intel Centrino Advanced-N 6205 as wired.

● In some situations, scheduled on-demand scan tasks started immediately after the endpoints resumed from sleep or hibernation. The issue is now fixed.

● Fixed a rare issue where scheduled scan tasks from the past started when the user applied the policy on a new endpoint.

Note During this update, the Microsoft Exchange Transport service will be stopped. 3.1.109. Version 6.2.15.860 Release date: Fast Ring: 2016-11-14 Slow Ring: 2016-11-14

New Features and Improvements

● The notification pop-ups can now be enabled/disabled based on the module and the severity of the events: informative, low, critical. For more details, refer to GravityZone Administrator’s Guide.

Bitdefender Endpoint Security Tools for Windows version 6 88 ● Added support for the Application Control module, which adds another layer of protection against all kinds of malware threats by blocking unauthorized applications and processes from running.

Note During this update, the Microsoft Exchange Transport service will be stopped. 3.1.110. Version 6.2.14.851 Release date: Fast Ring: 2016-11-01 Slow Ring: 2016-11-01

New Features and Improvements

● Added support for uninstalling the following incompatible security products: – Avira Antivirus Pro 2015. – Avira Agent.

Resolved Issues

● In rare situations, Bitdefender Endpoint Security Tools and Cloud Services were communicating directly instead of using the configured proxy servers. The issue is now fixed.

● In some cases, filters were not properly applied for certain web categories in Content Control, such as „web mail”. The issue is now fixed.

● Fixed the BSOD that occured on some Windows Server 2012 R2 machines with the Advanced Threat Control module enabled.

● Fixed the Content Control compatibility issue with NC Talk application.

● Fixed error 160 that occurred at scheduled reboot after update when the set hour had only one digit.

Note ● During this update, the Microsoft Exchange Transport service will be stopped.

● This update does not require reboot unless the operating system has Device Guard enabled.

Bitdefender Endpoint Security Tools for Windows version 6 89 3.1.111. Version 6.2.10.832 Release date: 2016-09-28

New Features and Improvements

● Added support for Windows Server 2016.

Resolved Issues

● Fixed an issue that caused high CPU usage in virtual environments with NTLM Proxy.

Note During this product update, the Microsoft Exchange Transport service will be stopped. 3.1.112. Version 6.2.10.829 Release date: 2016-09-27

New Features and Improvements File System Protection Windows

● Added the option for On-Access Scanning and Advanced Threat Control to take no action.

● Introduced support for Anti-Ransomware vaccine, a new technology that immunizes endpoints against known ransomware.

● Added support for a set of powerful Anti-Exploit technics that further augments existing technologies to fight off targeted attacks.

● Introduced detection support for Bitdefender 2016 consumer products.

● Added support for uninstalling the following incompatible F-Secure products: – Anti-Virus for Workstations 11.61 – Server Security 11.01

● Added support for uninstalling the incompatible Spanish version of Kaspersky Endpoint Security 10 for Windows.

Bitdefender Endpoint Security Tools for Windows version 6 90 ● Integrated new rendering technology to support Windows 7 systems with Aero theme activated.

● Improved notification mechanism for new Bitdefender Endpoint Security Tools deployments.

● Added full support for the following Microsoft Word 2007 document type extensions: .docx, .docm, .dotx, .dotm. Linux

● Added the option for On-Access Scanning to take no action.

● Users can now interact with Bitdefender Endpoint Security Tools. The bduitool command allows you to run scan tasks, display quarantined files, scan logs and events, launch updates and display product settings. For more information, please check the Bitdefender Endpoint Security Tools for Linux User’s Guide or run the bduitool command with one of these options: -h, --help.

● Improved product update mechanism to facilitate adding new features. Exchange Protection

● Optimized scanning mechanism for Exchange servers. With this release, the On-Demand scanning task continues even if an exception is removed while scanning a mailbox.

Resolved Issues File System Protection Windows

● On certain VMWare workstations, the Antimalware module caused Compass software slowdown. The issue is now fixed.

● Fixed the locked hard-drive issue that occurred on endpoints running Windows Server 2012 and Windows Server 2012 R2 at server reboot, after Device Control has been activated.

● In some situations, when activated, the Device Control module prevented webcam connection. The issue is now resolved.

● When printing pages from Google Chrome, the Bitdefender browser toolbar was printed as well. The issue is now fixed.

Bitdefender Endpoint Security Tools for Windows version 6 91 ● Fixed the slightly delayed boot on Windows 7 32-bit systems.

● Resolved the On-Demand scan logs containing incomplete location of emails with infected PST attachments.

● Fixed some minor translation issues in scanning results window. Linux

● Fixed the configuration issue that caused product update to fail.

● Fixed a communication issue that occurred when checking for updates.

● Fixed an issue that prevented scheduled full scan tasks to run properly at specified times.

● On certain endpoints, On-Demand scanning report was not well-formed due to corrupted log file. The issue is now fixed. Exchange Protection

● Quarantined emails with "Content-Class: sharing" header did not restore properly. The issue is now resolved.

● Fixed the error message received when an Exchange scan task encountered password protected files.

Note During this product update, the Microsoft Exchange Transport service will be stopped. 3.1.113. Version 6.2.9.808 Release date: 2016-08-31

New Features and Improvements

● Improved the protection mechanism to enhance the malware detection rate. 3.1.114. Version 6.2.9.799 Release date: 2016-08-02

New Features and Improvements

● Added support for Windows 10 Redstone.

● Added support for Scan SSL in the Firefox 64-bit browser.

Bitdefender Endpoint Security Tools for Windows version 6 92 Resolved Issues

● In some situations, Windows 10 systems displayed BSOD when scanning EFS encrypted files through File System Redirector. The issue is now fixed.

● Fixed the ZDI-CAN-3749 and ZDI-CAN-3829 vulnerabilities reported by Zero Day Initiative through responsible disclosure.

● Fixed several minor issues.

Known Issues

● Machines with Lumension Endpoint Security may encounter Windows 7 login screen freeze due to incompatibility with the Advanced Threat Control module. The issue is fixed after Lumension Endpoint Security is manually removed.

● After a system upgrade to Windows 10 Redstone, the Firewall and Content Control modules require a product update to work properly. In such cases it is recommended to first upgrade the OS and after that the security agent.

Note During this product update, the Microsoft Exchange Transport service will be stopped. 3.1.115. Version 6.2.9.775 Release date: 2016-06-09

New Features and Improvements Windows & Linux

● Integrated OpenSSL versions 1.0.1t and 1.0.2h in the security components of the product. For more information, refer to OpenSSL Security Advisory (English only). Windows

● Added support for uninstalling the incompatible security product Vipre Business Agent 7.0.5711.

Resolved issues Windows & Linux

● Fixed OpenSSL vulnerability CVE-2016-2017.

Bitdefender Endpoint Security Tools for Windows version 6 93 Windows

● Fixed an issue where Data Protection module incorrectly blocked web pages based on partial word match.

● Fixed the installation error code 234 which occurred in some situations when installing the Firewall module.

● Fixed an issue where XenDesktop agent did not run correctly after Content Control module was installed.

● Fixed update server error code 1460.

● Fixed some graphical user interface issues after updating Bitdefender Endpoint Security Tools to version 6.2.9.751.

● Fixed an issue where some machines with Device Control enabled got BSOD when trying to connect an encrypted virtual hard-disk drive using VeraCrypt utility.

● In some situations, websites with self-signed certificates did not load using Advanced option in Google Chrome when Scan SSL was enabled. The issue is now fixed.

● Fixed an issue where some machines with Content Control module installed failed to connect using Telenium Network Management Software.

● Fixed an issue where COALA finance software crashed on machines with Content Control module installed.

● In some situations, the Power User module and language options were not displayed correctly in the contextual menu after updating Bitdefender Endpoint Security Tools to version 6.2.9.742. The issue is now fixed.

● Fixed an issue where Device Control reports contained false blocked events on devices that were not used at the time.

● Fixed an issue where the browser toolbar was still displayed on client machines despite being deactivated in policy or in the Power User settings. Linux

● On rare occasions, Linux machines were freezing when using an updated version of Bitdefender Endpoint Security Tools with an older version of Control Center.

Bitdefender Endpoint Security Tools for Windows version 6 94 ● Fixed an issue where on-demand scan tasks using Central Scan started without the endpoint being connected to Security Server.

Note During this product update, the Microsoft Exchange Transport service will be stopped. 3.1.116. Version 6.2.9.751 Release date: 2016-04-21

Resolved issues

● Fixed an issue that caused on-access scanning to turn off and return the error message “Could not connect to Security Server”.

● Fixed an issue at Content Control that prevented emails from being downloaded to Thunderbird and Outlook.

Note During this product update, the Microsoft Exchange Transport service will be stopped. 3.1.117. Version 6.2.9.742 Release date: 2016-04-14

New Features and Improvements File System Protection

● You can now sort the events in scan logs.

● Optimized the Bitdefender services stopping time.

● Repairing a product installation now preserves the quarantined items.

● On-access scanning now reports the path to files on which it cannot take any action.

● Improved the built-in antimalware exclusions mechanism.

● Improved the Browser Search Advisor.

● Integrated OpenSSL version 1.0.1s.

Bitdefender Endpoint Security Tools for Windows version 6 95 Resolved issues File System Protection

● Addressed several scenarios that were causing product crashes.

● Fixed an issue that was causing Windows 10 systems to enter in recovery mode after installing the product and rebooting the machine.

● Fixed a BSOD with a REFERENCE_BY_POINTER error, occurred on Windows 10 Professional x64 systems during scanning the encrypted folder C:\Windows\CSC.

● Fixed an issue at on-access scanning where infected files were skipped from backing up before disinfection.

● Resolved error code 1460, received when running on-demand scan tasks.

● Fixed an issue at Firewall profiles which were improperly set when using unusual network masks.

● Fixed the %username% system variable improper translation to antimalware exclusions settings in Power User.

● Fixed a compatibility issue with Wyse TCX Server running on Windows 2008 R2 systems.

● Fixed an issue that was causing BSOD when trying to connect to a specific network.

● Fixed an issue where Content Control was cropping incoming emails.

● Resolved a BSOD that occurred in rare situations when installing the product with Content Control module.

● Fixed Samsung S4 Mini drivers installation issue when using Device Control on Windows XP.

● Fixed the notification color when Web Access Control is disabled.

● Addressed a failed installation scenario in which the notification message improperly displayed the installation was successful.

● Fixed the last update time displayed in the About window.

● Fixed an issue with ATC that was causing backups to fail when using VSS and Veeam 8.

Bitdefender Endpoint Security Tools for Windows version 6 96 ● Fixed webpage load failure in Google Chrome version 38.0.2125.101 when ATC was enabled.

● Several minor bug fixes. Exchange Protection

● Fixed the case sensitive issue when using Domain IP Check. 3.1.118. Version 6.2.7.721 Release date: 2016-03-08

Resolved issues File System Protection Windows

● Fixed a corner case issue that prevented full scans from completing successfully.

● Fixed an issue that prevented device control exclusions from working correctly for external storage devices. 3.1.119. Version 6.2.7.719 Release date: 2016-03-01

New Features and Improvements File System Protection Windows & Linux

● Added exclusions for System Center Configuration Manager 2012 (SCCM 2012) following Microsoft recommendations.

● All packages are now archived using WinRAR version 5.31.

Resolved Issues File System Protection Windows

● In certain situations, devices were displayed as corrupt when Device Control was activated on endpoints. The issue is now fixed.

Bitdefender Endpoint Security Tools for Windows version 6 97 ● Fixed an issue that caused delays in recognizing USB storage devices connected to endpoints. The issue occurred when Device Control was activated. 3.1.120. Version 6.2.7.710 Release date: 2016-02-01

New Features and Improvements

● Bitdefender Endpoint Security Tools can now submit suspicious executable files to Bitdefender Labs if configured accordingly when creating packages in Control Center.

Resolved Issues File System Protection Windows & Linux

● Addressed a vulnerability that implied the possibility of remote code execution.

● In some situations, Bitdefender Endpoint Security Tools was not updating according to the update locations priority defined in the policy. The issue is now fixed. Exchange Protection

● Exchange scan tasks automatically stopped after 23 hours although the Stop scan if it takes longer than option was not set in Control Center. This issue is now fixed.

● All emails were considered authenticated on Exchange Server 2013/2016 installed on non-English operating systems, which resulted in emails not being filtered for spam with default settings. The issue is now fixed.

● In large environments with thousands of Active Directory groups, some users might have experienced increased Bitdefender Endpoint Security Tools memory usage, system slowdown and email traffic delay. This issue is now fixed. 3.1.121. Version 6.2.7.696 Release date: 2015-12-22

Bitdefender Endpoint Security Tools for Windows version 6 98 New Features and Improvements File System Protection Windows & Linux

● Improved product and signatures update verification mechanisms. Windows

● Added support for uninstalling the following incompatible security products: – F-Secure Client Security 11.51 – F-Secure Client Security Premium 12.00 – F-Secure Client Security Premium 11.60 – McAfee 5.0.2.132 – McAfee 4.8.0.1500 – McAfee 4.5.0.1852 – ESET 5.2.15.0 – Avira 14 – Comodo Endpoint Security 8.1.0.x These security products can be uninstalled both from the user interface and silently.

● Integrated the OpenSSL version 1.0.1q in the product’s security components. For more information, refer to OpenSSL Security Advisory (English only).

● Some of the critical and non-critical issues displayed in the Events timeline are now associated with the recommended actions in order to fix them.

● Made several improvements to the installation process that address the replacement of previous Bitdefender Endpoint Security Tools versions.

● Events generated in the timeline are now displayed only in the context of the logged user.

● Texts from the Events timeline can now be copied. Exchange Protection

● Added progress details for Exchange on-demand scans in the Bitdefender Endpoint Security Tools main window.

Bitdefender Endpoint Security Tools for Windows version 6 99 ● Added several improvements to the Exchange on-demand scan process and error messages.

● Attachment filtering by filename is now case insensitive.

Note During this product update, the Microsoft Exchange Transport service will be stopped.

Resolved Issues File System Protection Windows

● In some situations, HP machines with specific hardware configuration were starting Windows OS in recovery mode. The issue is now fixed.

● In some situations, Bitdefender Endpoint Security Tools Relay was unable to update the endpoints connected to it. The issue is now fixed.

● The Firewall module was malfunctioning on certain Windows 10 machines, when it was added to Bitdefender Endpoint Security Tools instances with Content Control enabled.

● Data Protection policy rules were not applying on HTTPS pages when the browser toolbar was disabled. The issue is now fixed.

● Excluding encrypted USB sticks from Device Control was malfunctioning. The issue is now fixed.

● Firewall rules were incorrectly displayed in the Bitdefender Endpoint Security Tools Power User interface. The issue is now fixed.

● In some situations, scans that finished immediately were displayed with 0% scan progress. The issue is now fixed. 3.1.122. Version 6.2.6.670 Release date: 2015-11-17

Resolved Issues

● Addressed a vulnerability discovered by Andre Derek Protas of CyberPoint SRT through responsible disclosure. The vulnerability was present on Bitdefender Endpoint Security Tools only if the relay module was installed.

Bitdefender Endpoint Security Tools for Windows version 6 100 3.1.123. Version 6.2.6.669 Release date: 2015-11-12

New Features and Improvements File System Protection Windows

● Improved the product stability in endurance tests.

● Improved the performance of the filters from local console.

● Reorganized the scan log summary for a better user experience.

● The endpoint notifications pop-ups contain also the name of the product.

Resolved Issues File System Protection Windows

● The security agent reconfiguration failed when an uninstall password was set. The issue is now fixed.

● On some Windows XP and Windows 2003 operating systems, the endpoint failed to communicate with Control Center. The issue is now fixed.

● The update failed when a proxy was configured both in Control Center and in the browser on the endpoint. The issue is now fixed.

● Traffic scan exclusions for websites with self-signed certificates were not applying and the websites were displayed as unsafe. The issue is now fixed.

● In some situations, the security agent deployment status in Control Center remained stuck to In Progress. The issue is now fixed.

● In some situations, the full system scan log contained some fictive disk drives. The issue is now fixed.

● The missed scheduled scans were running as soon as possible only when the day was selected in the scheduler. The issue is now fixed.

● In some situations, the firewall rules descriptions were missing from the Power User menu. The issue is now fixed.

Bitdefender Endpoint Security Tools for Windows version 6 101 ● In some situations, the update events were incorrectly added to other types of events in the main window. The issue is now fixed.

● Fixed several untranslated texts.

● Fixed an issue where the favorite scan text was overlapping in some localizations. Linux

● Linux physical machines from Active Directory appeared in Custom Groups. The issue is now fixed.

● The missed scheduled scans were running as soon as possible only when the day was selected in the scheduler. The issue is now fixed. Exchange Protection

● Fixed an issue where the security agent was ignoring email addresses written with wildcards, on these filters: connection blacklist, antispam whitelist, and content and attachment filtering exclusions. The issue occurred only when the lists contained both plain email addresses and email addresses patterns. 3.1.124. Version 6.2.5.661 Release date: 2015-10-30

Resolved Issues In some specific situations, the product downloaded a higher amount of signatures than necessary during update. The issue is now fixed. 3.1.125. Version 6.2.5.659 Release date: 2015-10-29

Important During this product update, the Microsoft Exchange Transport service will be stopped.

New Features and Improvements File System Protection

Bitdefender Endpoint Security Tools for Windows version 6 102 Windows

● Added support for Windows Multipoint Server 2011 and 2012.

● Bitdefender Endpoint Security Tools is now compatible with Deep Freeze. For more information refer to this KB article.

● Added support for uninstalling the following incompatible security products: – Kaspersky Antivirus 2015 – Kaspersky Internet Security 2015

Note The products can be uninstalled only using the user interface.

● Improved the signature updating mechanism.

● Improved endpoint resource consumption during update operations.

● Optimized the disk space usage on relays by downloading installation kits only for the operating systems discovered in the network.

● Added support to automatically move endpoints to a specified folder under Custom Groups in the Network page of Control Center, when Bitdefender Endpoint Security Tools installation finishes.

● Integrated the Firewall module with Photon Technology, which temporarily allows trusted-installer applications to run when they are detected.

● Running scheduled scans now stop if the corresponding task was deleted from the management console.

● Added information about the logged in user to event logs related to malware detection, antiphishing, behavioral scan, blocked applications, blocked websites, data protection and firewall. This information will be visible in several reports from Control Center.

● Bitdefender Endpoint Security Tools now sends the status information to Control Center for each operation performed in the background during deployment.

● The endpoint is now able to send information about missed scheduled on-demand scan tasks to Control Center.

● The on-demand scan summary log now contains information about items with no action applied.

Bitdefender Endpoint Security Tools for Windows version 6 103 Linux

● Added support to automatically move endpoints to a specified folder under Custom Groups in the Network page of Control Center, when Bitdefender Endpoint Security Tools installation finishes.

● Bitdefender Endpoint Security Tools now sends the status information to Control Center for each operation performed in the background during deployment.

● The on-demand scan summary log now contains information about items with no action applied.

● Improved the detection mechanism of physical and virtual machines.

● Added information about the logged in user to event logs related to malware detection. This information will be visible in several reports from Control Center.

● The endpoint is now able to send information about missed scheduled on-demand scan tasks to Control Center.

● The update process has been optimized. Exchange Protection

● Included Domain IP Check filter to help administrators protect their email domains from spoofing.

● Improved the Attachment Filtering module by adding file detection inside archives.

● Connection blacklist, antispam whitelist, and content and attachment filtering exclusions now support email addresses containing wildcards. This will allow, for example, an administrator to exclude an entire email domain from filtering.

● Added support for actions and reports on unscannable files. The files can now be deleted files, replaced with a notice, or sent to quarantine.

● Added support for displaying the status progress of running on-demand Exchange scan tasks in Control Center.

● Improved the on-demand scan errors messages.

Resolved Issues File System Protection

Bitdefender Endpoint Security Tools for Windows version 6 104 Windows

● In some situations, when using centralized scanning, the antimalware modules crashed after a signature update. The issue is now fixed.

● In some situations, the uninstall task issued from Control Center failed. The issue is now fixed.

● The message related to Cloud Services unavailability was not refreshed after the connectivity has been reestablished. The issue is now fixed.

● Statistical update information was not sent anymore from Bitdefender Endpoint Security Tools to buddy.bitdefender.com. The issue is now fixed.

● Fixed some translated texts. Linux

● Product installation was unsuccessful if the setup folder name contained special characters. The issue is now fixed.

● BitDefender Logger Daemon was restarting after every signature update. The issue is now fixed. Exchange Protection

● In a particular situation, after installing Bitdefender Endpoint Security Tools with Exchange Protection role in a custom folder, Microsoft Exchange Transport service remained stopped if Bitdefender Transport Agent could not start due to insufficient permissions. The issue is now fixed. 3.1.126. Version 6.2.4.649 Release date: 2015-10-20

Resolved Issues

● On some specific hardware, the rootkit driver was conflicting with a third party iSCSI driver, leading to system crashes. In the situation that the system is unable to boot, thus to update Bitdefender Endpoint Security Tools, you need to run this patch.

● If the update required a reboot and the reboot scheduler was set to a specific day and hour of the week, only the hour was taken into account. The issue is now fixed.

Bitdefender Endpoint Security Tools for Windows version 6 105 3.1.127. Version 6.2.4.646 Release date: 2015-10-15

Note This release includes improvements and fixes related only to the file system protection.

New Features and Improvements

● Added support for uninstalling the following incompatible security products with user interface and also silent: – Bitdefender Box – ESET NOD32 Antivirus 4.2.76.0 – McAfee Endpoint Security Platform – McAfee Endpoint Security Threat Prevention – McAfee Endpoint Security Web Control – McAfee SaaS – Security Center Communication version 6.0.3 Patch 3 – McAfee TPSConnector

● Improved the cleaning process during Bitdefender Endpoint Security Tools installation.

● Added support for Windows 10 TH2.

Resolved Issues

● Endpoints were rebooting after each Sophos protection module removal. The issue is now fixed.

● In some situations, McAffee Agent and Panda Free Antivirus could not be uninstalled. The issue is now fixed.

Note These products can be uninstalled only from the user interface.

● Fixed an installation issue on ATM machines running Windows 7 Professional 32-bit.

Bitdefender Endpoint Security Tools for Windows version 6 106 ● Fixed an issue at remote deployment through relay, which was returning error code "1385".

● When upgrading from Endpoint Security to Bitdefender Endpoint Security Tools, the user interface did not preserve language settings. The issue is now fixed.

● In some situations, the machines from Active Directory were listed multiple times in Control Center. The issue is now fixed.

● In some situations, when the user logged in Windows, the Bitdefender icon did not show in Windows Notifications Area and all protection modules were disabled. The issue is now fixed.

● In some situations, Bitdefender Endpoint Security Tools deployment was unsuccessful when installing the Firewall module. The issue is now fixed.

● Firewall rules using the environment variable %localappdata% were not applying on endpoints. The issue is now fixed.

● Fixed an issue that was preventing users from creating or updating certain security certificates.

● Bitdefender Endpoint Security Tools was blocking an ActiveX control that connects to CCTV cameras, thus preventing video streaming. The issue is now fixed.

● Content Control was preventing VMEET application from streaming video content. The issue is now fixed.

● Webex was unavailable when Scan SSL option was enabled in Content Control. The issue is now fixed.

● Device Control settings were not persistent after a computer reboot. The issue is now fixed.

● Device Control was unable to block HTC devices running Android 4.2.2. The issue is now fixed. 3.1.128. Version 6.2.4.612 Release date: 2015-09-01

Resolved Issues File System Protection

Bitdefender Endpoint Security Tools for Windows version 6 107 Windows

● In some corner cases, a communication error occurred with the following message: The Antimalware on-access scanning is unavailable. Connection to scan server could not be established. The issue is now fixed. 3.1.129. Version 6.2.4.610 Release date: 2015-08-26

New Features and Improvements File System Protection Windows & Linux

● Improved the product stability and performance.

● The communication between Bitdefender Endpoint Security Tools and Cloud Services is now secured by SSL. Port 7076 will be opened on the relay endpoint.

● Improved the endpoint type detection mechanism.

Resolved Issues File System Protection Windows

● In some situations, the following message was displayed: “There is no connection with the security host service. Please restart your system.” and all modules of the security agent were turned off, while in Control Center, only the antimalware module was reported as disabled. The issue is now fixed.

● In some corner cases, a BSOD occurred after installing Bitdefender Endpoint Security Tools version 6.2.2.563. The issue is now fixed.

● In some situations, the security agent used an abnormal large amount of RAM memory. The issue is now fixed.

Bitdefender Endpoint Security Tools for Windows version 6 108 ● In some situations, Bitdefender Endpoint Security Tools version 6.2.3.569 appeared outdated even though it was the latest version available. The issue is now fixed.

● The Firewall module could not install on endpoint after system upgrade to Windows 10. The issue is now fixed.

● Microsoft Surface Pro tablets were improperly detected as virtual machines. The issue is now fixed.

● After upgrade to Windows 10, the Firewall module was reported as disabled in Windows Action Center. The issue is now fixed.

● Fixed some graphical user interface issues related to missing buttons and to the console display on screen. Linux

● During antimalware scanning, the endpoint became unresponsive if encrypted folders were detected. The issue is now fixed. Exchange Protection

● The EWS URL configured by the administrator was not taken into account if Exchange Protection managed to obtain an EWS URL via autodiscovery. This fact prevented the Exchange on-demand scan from running in particular EWS URL configurations. The issue is now fixed.

● In some cases, spam messages detected by the RBL filter were given a SCL score of -1. The issue is now fixed.

● Exchange scan tasks run by the administrator would either not show in the local Bitdefender Endpoint Security Tools interface, or would disappear once the interface was closed. The issue is now fixed. 3.1.130. Version 6.2.4.587

New Features and Improvements

● Reduced the amount of cloud services outgoing traffic.

Bitdefender Endpoint Security Tools for Windows version 6 109 Resolved Issues

● A BSOD occurred on Windows XP and Windows 2003 machines from Active Directory domains that were running some scripts at startup from Distributed File System locations. This issue is now fixed. 3.1.131. Version 6.2.4.582

New Features and Improvements File System Protection Windows

● Added support for Windows 10.

● Improved the product stability regarding the graphical user interface.

● Integrated the OpenSSL version 1.0.1p in the product’s security components. For more information, refer to OpenSSL Security Advisory [9 Jul 2015] (English only).

● Bitdefender Endpoint Security Tools Relay now automatically adds the necessary rules to Windows Firewall during installation on server operating systems.

● Added support for removing the following incompatible security products: – Trusteer Rapport – System Center Endpoint Protection * – Symantec.Cloud - Endpoint Protection NIS-21.5.0.19 * – Sophos 10.0.12.510 * – Vipre Business Agent 7.0.5725 * – Eset File Server 4.5.12005 *Support provided also for silent uninstall.

● Minor improvements to the graphical user interface.

Resolved Issues File System Protection

Bitdefender Endpoint Security Tools for Windows version 6 110 Windows

● Microsoft Excel 2007 was crashing during file save when Bitdefender Endpoint Security Tools was used. This issue is now fixed.

● Sysprep is not working when BEST is installed. To troubleshoot this issue, refer to this KB article.

● For some DNS servers, the queries from Bitdefender Endpoint Security Tools to Cloud Services were unsuccessful. This issue is now fixed.

● In some situations, endpoints protected by Bitdefender Endpoint Security Tools could not join an Active Directory domain. This issue is now fixed.

● Bitdefender Endpoint Security Tools installation was crashing on endpoints with high CPU usage. This issue is now fixed.

● Fixed an issue occurred when a scan task was postponed from the user interface.

● Support Tool was not collecting all necessary files. This issue is now fixed.

● Technical Support information was not updating correctly when it was changed in the policy. This issue is now fixed.

● Air Control 2 was blocked by the Content Control module. This issue is now fixed.

● The last scan log of successive scans from the contextual menu could not be viewed from the user interface. This issue is now fixed.

● Fixed some misspelled texts. Linux

● On-demand scan tasks could not scan paths containing non Latin characters. This issue is now fixed.

● For some DNS servers, the queries from Bitdefender Endpoint Security Tools to Cloud Services were unsuccessful. This issue is now fixed. Exchange Protection

● In some situations, an XML error occurred when opening an Exchange scan report from the Information window. This issue is now fixed.

● On-demand scan log showed ignored infections at Resolved Items. This Issue is now fixed.

Bitdefender Endpoint Security Tools for Windows version 6 111 ● When trying to restore emails from quarantine and Microsoft Exchange Autodiscovery was using a redirected EWS URL, the task was failing with the status message Generic error. This issues is now fixed. 3.1.132. Version 6.2.3.569

New Features and Improvements File System Protection Windows

● Increased the waiting time for pending reboot during the security agent installation at ten minutes.

● Improved memory usage.

Resolved Issues File System Protection Windows

● When repairing the Bitdefender Endpoint Security Tools files, the Logs folder for scan tasks was not created in the product folder, blocking the on-demand scan tasks to run. This issue is now fixed.

● In some situations, after upgrading from Endpoint Security to Bitdefender Endpoint Security Tools, Control Center still displayed the old product in the computer details. This issue is now fixed.

● In some situations, the security agent deployment on Windows 8.1 systems has failed. This issue is now fixed.

● In some situations, Bitdefender Endpoint Security Tools files could not be repaired if the Content Control module was installed.

● Fixed some issues at the built-in firewall rules, which occurred when accessing an Active Directory domain or when connecting through Remote Desktop Connection.

● In some situations, when repairing the product files and a system reboot was required, the system entered in a reboot loop. This issue is now fixed.

● NTLM and Kerberos based proxies were not supported. This issue is now fixed.

Bitdefender Endpoint Security Tools for Windows version 6 112 ● Fixed several minor issues. Linux

● NTLM and Kerberos based proxies were not supported. This issue is now fixed.

● In some situations, the Update Client task did not work. This issue is now fixed. 3.1.133. Version 6.2.2.563

Resolved Issues File System Protection

● When upgrading the endpoint clients to Bitdefender Endpoint Security Tools, the agent did not start after the system reboot. This issue is now fixed.

● In some situations, after upgrading from Endpoint Security to Bitdefender Endpoint Security Tools, some protected endpoints were not displayed in Control Center anymore. This issue is now fixed. Exchange Protection

● Unauthenticated emails were considered authenticated if they were routed through multiple transport servers. This issue is now fixed.

● Emails with password-protected archives that were not scanned, were reported as infected but with no action taken on them. This issue is now fixed. 3.1.134. Version 6.2.2.547

Resolved Issues

● Fixed some issues at the component that ensures the communication with Control Center. 3.1.135. Version 6.2.2.546

Resolved Issues

● Bitdefender Endpoint Security Tools was not reporting correctly its update status to Control Center when an update was available. This issue is now fixed.

Bitdefender Endpoint Security Tools for Windows version 6 113 ● A blocked process occurred in certain situations was causing the endpoint to run slow. This issue is now fixed.

● On Windows endpoints, the upgrade from Endpoint Security did not resume after reboot if the check box Automatically reboot (if needed) was not previously selected in the Upgrade Client(s) window. This issue is now fixed.

● In some situations, the security agent reconfiguration failed on Windows endpoints. This issue is now fixed.

● The graphical user interface of the Windows version contained some truncated labels and some missing translations. These issues are now fixed. 3.1.136. Version 6.2.1.541

New Features and Improvements Deployment

● Extended protection for physical endpoints to cover also desktop and server Linux distributions.

● One installation package, which can be deployed in any environment: physical, virtual or in-the-cloud.

● Ability to uninstall other antimalware products regardless of the endpoint’s environment (physical or virtual). Scanning Technologies

● New and flexible scanning technologies for Windows and Linux endpoints with various hardware configurations: – Local Scan, where the antimalware scanning is performed locally on the endpoint. This option is suitable for powerful endpoints that are also able to store the scanning engines and the malware signatures. – Central Scan, where the antimalware scanning is performed by one or multiple Security Servers, using load balancing. This option is suitable for virtualized environments and for physical desktop endpoints with low hardware performance.

Bitdefender Endpoint Security Tools for Windows version 6 114 Note Security Server is a dedicated virtual machine that acts as a scan server. The Security Server installs on a host in a virtualized environment. For more information, refer to GravityZone Installation Guide.

– Hybrid Scan, where the antimalware scanning is performed mainly in-the-cloud and it is enhanced by local scanning. This option is suitable for physical endpoints with low to medium performance and resources. Bitdefender Endpoint Security Tools ensures the same level of protection regardless of the selected scanning mode.

● Higher availability of the remote scanning engines by introducing the dual engines scanning. Thus, if the first engine is unavailable, the fallback engine will be used. Two options are available: – Central Scan with fallback on Hybrid Scan. – Central Scan with fallback on Local Scan.

Note Resource consumption and network utilization will be based on used engines.

● With the ability to detect the endpoint’s configuration and environment, Bitdefender Endpoint Security Tools automatically self-configures and adapts the scanning technology accordingly.

Note This action is performed during product installation and can be overridden by the administrator.

New Modules and Roles

● Device Control protection module, providing the ability to control and monitor the access to various devices that may connect to the endpoints. The module recognizes a vast series of devices: Bluetooth devices, CDROM drives, floppy disk drives, IEEE 1284.4 devices, IEEE 1394 devices, imaging devices, internal and external storage, LPT/COM ports, modems, network adapters, printers, SCSI RAID, tape drives and Windows portable devices.

Bitdefender Endpoint Security Tools for Windows version 6 115 ● Power User module, enabling administration rights at endpoint level, allowing the endpoint user to access and modify policy settings via a local console, through the BEST interface.

● New features for protecting VDIs: – Behavioral scan: keeps applications temporarily in a sandbox to identify malicious actions. – Photon (Application Reputation): monitors all running software and decides if applications and their components are safe or not. – Firewall: Fully featured two-way firewall with Intrusion Detection System. – Content Control: Multiple thread filtering of web content to identify potential online threats.

● Extended Relay role for virtual machines as well. The Relay role converts the agent to an update, deployment and communication server for all machines in a remote location.

Note – Bitdefender Endpoint Security Tools with Relay role installs only on Windows machines. – You can use Bitdefender Endpoint Security Tools with Relay role to deploy the security agents on any supported operating system.

● Exchange Protection role, providing antimalware, antispam, antiphishing, attachment and content filtering seamlessly integrated with the Microsoft Exchange Server, to ensure a secure messaging and collaboration environment and increase productivity. Exchange Protection uses the same antimalware scanning technologies as the file system Antimalware module. Exchange Protection supports and installs on the following Microsoft Exchange Server versions and roles: – Exchange Server 2013 with Edge Transport or Mailbox role – Exchange Server 2010 with Edge Transport, Hub Transport or Mailbox role – Exchange Server 2007 with Edge Transport, Hub Transport or Mailbox role

Bitdefender Endpoint Security Tools for Windows version 6 116 Note The solution is compatible with Microsoft Exchange Database Availability Groups (DAGs).

User Interface Bitdefender Endpoint Security Tools comes with a series of user interface improvements, such as:

● A lighter and more comfortable color scheme for day to day use, which gives emphasis to content.

● Loose design for a friendly touch screen experience.

● A structure focused on readability, maximizing the available space for displaying the information.

● An enhanced user interaction, offering the following options: 1. Notifications area, informing the user about unresolved issues and linking to the details screen. 2. Events timeline, displaying the events related to endpoint’s protection. 3. Expand and Collapse arrows, displaying or hiding the events belonging to the same category. 4. Modules button, linking to a new screen where the user can view the status of installed modules and manage the file system Quarantine. 5. Filters menu, allowing the user to refine the list of events displayed in the timeline. 6. Actions menu, allowing the user to define, run and save scanning tasks and to check for updates.

Bitdefender Endpoint Security Tools for Windows version 6 117 Bitdefender Endpoint Security Tools main window

3.2. Known Issues File System Protection

● Using endpoint isolation for virtual machines running on Citrix Provisioning Services (PVS) infrastructure will permanently block access to those machines. Do not use endpoint isolation on such machines.

● The upgrade from Endpoint Security requires system reboot on Windows endpoints if Advanced Threat Control and the rootkit driver fail to unload.

● The Advanced Threat Control module is incompatible with Citrix EdgeSight. Exchange Protection

● When two Exchange scan tasks are scanning simultaneously the same mailbox, some emails are not scanned. It is recommended to avoid running more than one Exchange scan at a time.

Bitdefender Endpoint Security Tools for Windows version 6 118 ● Product updates might stop running Exchange scan tasks, without sending the status change to Control Center.

● The antimalware footer is not visible in digitally signed emails sent over Microsoft Exchange (MAPI) protocol.

● When adding UTF-8 footer to an HTML or plain text MIME email with ISO-2022-JP encoding, the converted email may include slightly changed characters. However, this should not affect the overall readability and understanding of the text. 3.3. Limitations Exchange Protection

● Exchange on-demand scanning does not work when Powershell v1.0 is installed. In such cases, you must update Powershell to v2.0.

● Meeting or task request emails cannot be modified.

Bitdefender Endpoint Security Tools for Windows version 6 119 4. BITDEFENDER ENDPOINT SECURITY TOOLS FOR WINDOWS LEGACY 4.1. Version History 4.1.1. Version 6.4.3.84 Release date: Fast ring: 2019.11.28 Slow ring: 2019.11.28

Important ● This version is for Windows XP, Windows Vista, Windows Server 2003, Windows Server 2003 R2, Windows Small Business Server 2003, Windows Server 2008, Windows Small Business Server 2008, Windows XP Embedded, Windows XP Tablet, Windows POSReady / Standard 2009, Windows Home Server

● During this update, the Microsoft Exchange Transport service will be stopped.

Resolved Issues

● Fixed an issue that caused the Advanced Threat Control module to appear as disabled. 4.1.2. Version 6.4.3.81 Release date: Fast ring: 2019.02.19 Slow ring: 2019.02.21

Important ● This version is for Windows XP, Windows Vista, Windows Server 2003, Windows Server 2003 R2, Windows Small Business Server 2003, Windows Server 2008, Windows Small Business Server 2008, Windows XP Embedded, Windows XP Tablet, Windows POSReady / Standard 2009, Windows Home Server

● During this update, the Microsoft Exchange Transport service will be stopped.

Bitdefender Endpoint Security Tools for Windows Legacy 120 Resolved Issues

● Fixed a crash in the Web Services Library when verifying certificates in certain conditions. 4.1.3. Version 6.4.2.79 Release date: Fast ring: 2018.06.25 Slow ring: 2018.06.25

Important ● This version is for Windows XP, Windows Vista, Windows Server 2003, Windows Server 2003 R2, Windows Small Business Server 2003, Windows Server 2008, Windows Small Business Server 2008, Windows XP Embedded, Windows XP Tablet, Windows POSReady / Standard 2009, Windows Home Server.

New Features and Improvements

● Added support for TLS 1.2+ secure communications with GravityZone communication servers and Relays.

● Improved mechanism for detecting potential Process Doppelgänging attacks.

● Added support for the system variable %AllUsersProfile% to specify paths for product modules.

Resolved Issues

● Fixed an issue that prevented quarantined files from being restored on network paths when using the local user interface.

Note During this update, the Microsoft Exchange Transport service will be stopped. 4.1.4. Version 6.4.1.72 Release date: Fast ring: 2018.05.24 Slow ring: 2018.05.24

Bitdefender Endpoint Security Tools for Windows Legacy 121 Important ● This version is for Windows XP, Windows Vista, Windows Server 2003, Windows Server 2003 R2, Windows Small Business Server 2003, Windows Server 2008, Windows Small Business Server 2008, Windows XP Embedded, Windows XP Tablet, Windows POSReady / Standard 2009, Windows Home Server.

New Features and Improvements

● Starting with this release, Bitdefender Endpoint Security Tools is available in two flavors based on the operating system: – BEST 6.6.x, starting with Windows 7 / Windows Server 2008 R2, supporting all the existing GravityZone features and technologies. This version no longer installs on legacy operating systems. – BEST 6.4.x for Windows Legacy, designed for Windows XP and Windows Vista families including corresponding embedded and server versions, with limited features and support. This version does not install on Windows 7 / Windows Server 2008 R2 and later. After update, existing BEST installations will get the version corresponding to their operating system. For details about BEST for current Windows operating systems, refer to the specific release notes.

● BEST for Windows Legacy supports: – Antimalware – Advanced Threat Control – Exchange Protection (only on Windows Server 2008). Power User and Relay roles are not available with BEST for Windows Legacy.

● Installation and maintenance of BEST for Windows Legacy: – The installation kits are available for download from the GravityZone console. – Remote deployment from the GravityZone console is not available. – The installation downloader cannot use a Relay as deployer. – When performing a reconfigure task in the GravityZone console, all the unsupported modules will be removed.

Bitdefender Endpoint Security Tools for Windows Legacy 122 – The local Repair option is no longer available for Windows legacy operating systems. – Staging is no longer available for BEST for Windows Legacy. The legacy endpoints currently on staging location must be moved to the production location.

● The About window of the product now includes a link to Bitdefender privacy policy.

Note During this update, the Microsoft Exchange Transport service will be stopped. 4.2. Known Issues File System Protection

● Using endpoint isolation for virtual machines running on Citrix Provisioning Services (PVS) infrastructure will permanently block access to those machines. Do not use endpoint isolation on such machines.

● The upgrade from Endpoint Security requires system reboot on Windows endpoints if Advanced Threat Control and the rootkit driver fail to unload.

● The upgrade from Endpoint Security requires system reboot on Windows XP endpoints if the Firewall module was installed.

● Removing the Firewall module on Windows XP endpoints requests a system reboot.

● The Advanced Threat Control module is incompatible with Citrix EdgeSight. Exchange Protection

● When two Exchange scan tasks are scanning simultaneously the same mailbox, some emails are not scanned. It is recommended to avoid running more than one Exchange scan at a time.

● Product updates might stop running Exchange scan tasks, without sending the status change to Control Center.

● The antimalware footer is not visible in digitally signed emails sent over Microsoft Exchange (MAPI) protocol.

Bitdefender Endpoint Security Tools for Windows Legacy 123 ● When adding UTF-8 footer to an HTML or plain text MIME email with ISO-2022-JP encoding, the converted email may include slightly changed characters. However, this should not affect the overall readability and understanding of the text. 4.3. Limitations Support

● Following our Windows Vista & Server 2008 support announcement, starting with version 6.2.34.994 (February 2018), new installations on these operating systems only include Antimalware, Advanced Threat Control and Exchange Protection modules: – Windows Vista (Service Pack 1 and Service Pack 2) – Windows Server 2008 – Windows Small Business Server 2008. A repair or reconfigure operation also installs only these modules.

● Facing a world with an increasing number of more complex threats, Bitdefender continuously develops advanced and innovative technologies to fight them. Some of these technologies are no longer supported by legacy operating systems. That’s why, starting with the security agent update on the 30th of January 2017, Bitdefender is limiting protection to Antimalware and Advanced Threat Control for several legacy Windows operating systems: – Windows XP (Service Pack 3) – Windows Embedded POSReady 2009 – Windows Embedded Standard 2009 – Windows XP Embedded with Service Pack 2 – Windows XP Tablet PC Edition – Windows Small Business Server 2003 – Windows Server 2003 R2 – Windows Server 2003 with Service Pack 1 – Windows Home Server Exchange Protection

Bitdefender Endpoint Security Tools for Windows Legacy 124 ● Exchange on-demand scanning does not work when Powershell v1.0 is installed. In such cases, you must update Powershell to v2.0.

● Meeting or task request emails cannot be modified.

Bitdefender Endpoint Security Tools for Windows Legacy 125 5. BITDEFENDER ENDPOINT SECURITY TOOLS FOR LINUX 5.1. Version History 5.1.1. Version 6.2.21.165 Release date: Fast ring: 2021.07.01 Slow ring: 2021.07.05

New Features and Improvements Endpoint Detection and Response (EDR)

● Extended the supported kernels list for the EDR module. The new kernel versions are available here. 5.1.2. Version 6.2.21.160 Release date: Fast ring: 2021.06.03 Slow ring: 2021.06.07

New Features and Improvements Endpoint Detection and Response (EDR)

● Extended the supported kernels list for the EDR module. The new kernel versions are available here.

Resolved Issues Endpoint Detection and Response (EDR)

● The EDR module caused intermittent reboots and crashes on endpoints that use the DazukoFS module. Product

● Security fixes.

Bitdefender Endpoint Security Tools for Linux 126 5.1.3. Version 6.2.21.155 Release date: Fast ring: 2021.05.17 Slow ring: 2021.05.19

Resolved Issues Product

● The security agent led to system crashes on Red Hat Enterprise Linux after the update to version 8.3.

● Security fixes. 5.1.4. Version 6.2.21.141 Release date: Fast ring: 2021.04.15 Slow ring: 2021.04.19

New Features and Improvements Relay

● Added support for the newest update locations necessary for the Security Server update process. 5.1.5. Version 6.2.21.137 Release date: Fast ring: 2021.03.04 Slow ring: 2021.03.08

New Features and Improvements Endpoint Detection and Response (EDR)

● Extended the supported kernels list for the EDR module. The new kernel versions are available here.

Bitdefender Endpoint Security Tools for Linux 127 Resolved Issues

● Resolved issues from versions 6.2.21.135 and 6.2.21.136 on fast ring. 5.1.6. Version 6.2.21.136 Release date: Fast ring: 2021.02.26 Slow ring: -

Resolved Issues Product

● Fixed multiple crashes that affected systems with product version 6.2.21.135, released on fast ring. 5.1.7. Version 6.2.21.135 Release date: Fast ring: 2021.02.25 Slow ring: -

Resolved Issues Product

● The remote deployment of the security agent failed due to permission issues when non-root credentials were used. Endpoint Detection and Response (EDR)

● The EDR module caused system crashes when the kubectl command was used. 5.1.8. Version 6.2.21.133 Release date: Fast ring: 2021.02.03 Slow ring: 2021.02.08

Bitdefender Endpoint Security Tools for Linux 128 New Features and Improvements Bduitool

● Improved the bduitool scan options as follows: – The command bduitool get scantask now returns a task identifier for each task in the list. The tasks in progress are listed first. – Every listed timestamp is now followed by the time zone. These improvements do not impact the current system requirements. For more information, refer to Bitdefender Endpoint Security Tools for Linux User's Guide.

Resolved Issues Product

● The product led to system crashes after updating to Red Hat Enterprise Linux 8.3.

● A corrupted system configuration file (/etc/fstab) prevented successful reboots on Red Hat Enterprise Linux 5 and 6.

● The Bitdefender Crash Handler mechanism caused multiple applications to hang leading the system into an unresponsive state.

● Oracle Linux Server systems with the security agent installed reported errors when elevated commands were run. 5.1.9. Version 6.2.21.125 Release date: Fast ring: 2020.12.15 Slow ring: 2020.12.17

New Features and Improvements General

● Added improvements for product crash scenarios.

● Added improvements for better resource consumption.

Bitdefender Endpoint Security Tools for Linux 129 Resolved Issues Installation

● The security agent failed to install on a Red Hat Enterprise 6.5 Korean system. Antimalware

● The Antimalware module appeared as disabled in the local interface when the mount point used NFSv4.

● The product caused system crashes on Red Hat Enterprise 8.3. Endpoint Detection and Response (EDR)

● The security agent consumed a large amount of memory triggering Linux Out of Memory Killer on some Ubuntu systems. 5.1.10. Version 6.2.21.108 Release date: Fast ring: 2020.11.17 Slow ring: 2020.11.17

New Features and Improvements General

● Added support for the latest Red Hat Compatible Kernels (RHCK) versions of Oracle Linux 7. 5.1.11. Version 6.2.21.106 Release date: Fast ring: 2020.11.09 Slow ring: 2020.11.11

New Features and Improvements General

● Added support for upcoming features available with the next GravityZone release. Antimalware

Bitdefender Endpoint Security Tools for Linux 130 Improved the Bitdefender User Interface Tool (bduitool) as follows:

● A task ID is provided when an on-demand scan task is initiated. Using this unique identifier you can easily manage tasks and find the necessary information.

● The users can now query the status of previous and current on-demand scan tasks using a task ID. The result consists of an individual summary for each scan task. The summary includes details like scan type, scanned items, a path to the full report, and others.

● On-demand scan tasks initiated via bduitool now support wildcards that expand the full directory path. 5.1.12. Version 6.2.21.103 Release date: Fast ring: 2020.09.30 Slow ring: 2020.10.05

New Features and Improvements Relay

● Added support to display the latest security content in the Repository details tab, in GravityZone console. Endpoint Detection and Response (EDR)

● Extended the EDR supported kernels list with version 2.6.32. Quarantine

● Minor improvements related to backing up quarantined files.

Resolved Issues Antimalware

● In some cases, start time for On-Demand scheduled scan tasks was set to UTC regardless of the local time zone.

● The product failed to apply the option Copy files to quarantine before applying the disinfect action enabled in the GravityZone console. Endpoint Detection and Response (EDR)

Bitdefender Endpoint Security Tools for Linux 131 ● The product returned operating system and EDR commands without logging feature enabled.

● The EDR module caused high latencies on Linux systems such as CentOS 7.6. Patch Management

● In certain conditions, the Patch Management module failed to download patches properly. General

● Changing standard umask settings to comply with custom security guidelines caused incorrect product installation. 5.1.13. Version 6.2.21.97 Release date: Fast ring: 2020.09.10 Slow ring: 2020.09.10

Resolved Issues Relay

● Addressed a vulnerability discovered recently. 5.1.14. Version 6.2.21.94 Release date: Fast ring: 2020.08.24 Slow ring: 2020.08.24

Important ● This version also includes on slow ring the improvements and fixes delivered with the Bitdefender Endpoint Security Tools version 6.2.21.92, released on fast ring.

Resolved Issues General

● The security agent caused disk space usage on Linux systems. Antimalware

Bitdefender Endpoint Security Tools for Linux 132 ● The endpoint reported infected files as blocked when the scan action was set to Take no action.

● In some cases, suspicious or infected files were reported as deleted instead of unresolved in the Malware Status report. 5.1.15. Version 6.2.21.92 Release date: Fast ring: 2020.08.20 Slow ring: -

Resolved Issues General

● The security agent caused disk space usage on Linux systems. Antimalware

● The endpoint reported infected files as blocked when the scan action was set to Take no action.

● In some cases, suspicious or infected files were reported as deleted instead of unresolved in the Malware Status report. 5.1.16. Version 6.2.21.88 Release date: Fast ring: 2020.08.12 Slow ring: 2020.08.12

Resolved Issues Antimalware

● The product monitoring mechanism failed to use the Full Scan settings to determine the infection status of the endpoint.

● Stopping the Bitdefender services while the product was checking the status of an existing infection caused the loss of some files from the monitoring mechanism.

Bitdefender Endpoint Security Tools for Linux 133 Known Issues Antimalware

● The On-Access and On-Demand features may report the same files with different names when HyperDetect is set to Aggressive or when the option Extend reporting on higher levels is selected. This issue causes the Malware Status report to display the files as deleted instead of unresolved. 5.1.17. Version 6.2.21.88 Release date: Fast ring: 2020.08.12 Slow ring: 2020.08.12

Resolved Issues Antimalware

● The product monitoring mechanism failed to use the Full Scan settings to determine the infection status of the endpoint.

● Stopping the Bitdefender services while the product was checking the status of an existing infection caused the loss of some files from the monitoring mechanism.

Known Issues Antimalware

● The On-Access and On-Demand features may report the same files with different names when HyperDetect is set to Aggressive or when the option Extend reporting on higher levels is selected. This issue causes the Malware Status report to display the files as deleted instead of unresolved. 5.1.18. Version 6.2.21.87 Release date: Fast ring: 2020.07.28 Slow ring: 2020.07.29

Bitdefender Endpoint Security Tools for Linux 134 Resolved Issues Generic

● The product caused critical errors (Kernel Panic) on CentOS 7 systems. 5.1.19. Version 6.2.21.84 Release date: Fast ring: 2020.07.08 Slow ring: 2020.07.09

New Features and Improvements Generic

● Incidents based on the Antimalware On-demand scans are now generated and displayed in the GravityZone console. 5.1.20. Version 6.2.21.79 Release date: Fast ring: 2020.07.01 Slow ring: 2020.07.01

Resolved Issues Generic

● The security agent caused crashes on CentOS 6.10 systems, after updating to version 6.2.21.76. 5.1.21. Version 6.2.21.76 Release date: Fast ring: 2020.06.29 Slow ring: 2020.06.30

New Features and Improvements Generic

Bitdefender Endpoint Security Tools for Linux 135 ● Added support for upcoming features available with the next GravityZone release. Endpoint Detection and Response (EDR)

● Improved the EDR incidents detections.

● Extended the supported kernels list for the EDR module. The new kernel versions are available here.

Resolved Issues Generic

● The endpoint submitted multiple events to GravityZone console, which led to high memory consumption.

● Bitdefender Redline service caused high memory usage on CentOS systems. 5.1.22. Version 6.2.21.67 Release date: Fast ring: 2020.06.08 Slow ring: 2020.06.08

Resolved Issues

● The security agent failed to detect certain machines joined to Amazon Web Services (AWS) which prevented GravityZone from licensing them. 5.1.23. Version 6.2.21.66 Release date: Fast ring: 2020.04.23 Slow ring: 2020.04.23

Resolved Issues

● The product caused deadlocks on CentOS 7 servers in enviroment with high volume ICMP events. 5.1.24. Version 6.2.21.64 Release date:

Bitdefender Endpoint Security Tools for Linux 136 Fast ring: 2020.04.16 Slow ring: 2020.04.16

Resolved Issues

● The signature updates did not start automatically on endpoints with 6.2.21.63 product version. 5.1.25. Version 6.2.21.63 Release date: Fast ring: 2020.04.06 Slow ring: 2020.04.08

New Features and Improvements

● Added support for generating incidents on Elite licensed endpoints.

● Introduced Bitdefender Update Daemon (bdupdated) as a new update service. The previous service (bdlived) has been removed.

● Added support for process kill action on incidents generated by Incidents Sensor.

● Improved the scanning mechanism with new built-in Antimalware On-Access and On-Demand exclusions.

● Added support for moving endpoints between companies in GravityZone Control Center

● Improved the On-Demand scheduler.

● Added support for EDR with a new range of Linux kernel versions, available with the following operating systems: – CentOS 6 – CentOS 7 – CentOS 8 – Oracle Linux 6 – Oracle Linux 7 – Ubuntu 14.04 – Ubuntu 16.04

Bitdefender Endpoint Security Tools for Linux 137 – Ubuntu 18.04 For the list of supported kernel versions, refer to the Requirements > Endpoint Protection section in the GravityZone Installation Guide.

● New installations and product updates now require minimum free disk space as follows:

Scanning Type AV Only Full Options Local Scanning 1600 MB 1600 MB Hybrid Scanning 1100 MB 1100 MB Centralized Scanning 600 MB 600 MB Local Scanning + Centralized Scanning 1600 MB 1600 MB Hybrid Scanning + Centralized Scanning 1100 MB 1100 MB

Resolved Issues

● The bduitool crashed when used for custom scan on Red Hat Enterprise Linux Server.

● The On-Access module could not detect EICAR files located in an overlay partition, on Ubuntu 18.04.1 LTS.

● Bitdefender Redline service triggered multiple cron failure notifications.

● The Relay communication with endpoints failed with error 1004.

● The endpoint updated through proxy even if it was not configured in the policy. 5.1.26. Version 6.2.21.53 Release date: Fast ring: 2020.02.10 Slow ring: 2020.02.10

Important This version includes on slow ring all the improvements and fixes delivered with Bitdefender Endpoint Security Tools version 6.2.21.49, released on fast ring.

Bitdefender Endpoint Security Tools for Linux 138 New Features and Improvements

● Enhanced the scanning engines loading mechanism.

Resolved Issues

● Resolved issues from version 6.2.21.49 on fast ring. 5.1.27. Version 6.2.21.49 Release date: Fast ring: 2020.01.20 Slow ring: -

Resolved Issues

● The On-Access Scanning module interfered with the software compilation process on Ubuntu 18.04, even when disabled. 5.1.28. Version 6.2.21.46 Release date: Fast ring: 2019.12.09 Slow ring: 2019.12.11

Resolved Issues

● The security agent interfered with the authselect application on certain Linux systems.

● Fixed a product incompatibility that required SELinux to be disabled on Linux systems using Fanotify. 5.1.29. Version 6.2.21.42 Release date: Fast ring: 2019.10.30 Slow ring: 2019.11.04

Bitdefender Endpoint Security Tools for Linux 139 New Features and Improvements

● Added support for configuring Antimalware exclusions in the GravityZone console by file hash or threat name.

● Added support for configuring Antimalware Process exclusions in GravityZone console for the On-Access module.

● Added support for wildcards when customizing Antimalware On-Access / On-Demand exclusions. Question mark (?) substitutes for one character, whereas asterisk (*) substitutes for any number of characters until the special character (/) is reached.

● The product can now be installed at a configured custom path with the following restrictions: – All paths have to start with slash (/) – except %PROGRAMFILES% – Paths starting with /tmp or /proc are not accepted – Paths that contain a special character ($, !, *, ?, “, ‘, `, ‘\’, %) , including any type of parentheses are not accepted

● The EDR sensor is now improved to reflect the current status more accurately.

Resolved Issues

● Simultaneous contextual scans with bduitool resulted in only one local scan log.

● Bitdefender Redline service triggered multiple cron failure notifications.

● In certain situations, the On-Access module could not detect specific files on XFS partition.

● The Contextual Scan archive limit size configured in the policy did not reflect on the endpoint. 5.1.30. Version 6.2.21.32 Release date: Fast ring: 2019.07.25 Slow ring: 2019.07.25

Bitdefender Endpoint Security Tools for Linux 140 Resolved Issues

● In a particular case, the on-demand scan tasks did not run when using bduitool. 5.1.31. Version 6.2.21.31 Release date: Fast ring: 2019.07.03 Slow ring: 2019.07.03

Resolved Issues

● Addressed a particular scenario causing scanning service crashes. 5.1.32. Version 6.2.21.29 Release date: Fast ring: 2019.06.26 Slow ring: 2019.06.27

Important This version includes on slow ring all the improvements and fixes delivered with Bitdefender Endpoint Security Tools versions 6.2.21.27 and 6.2.21.28 released on fast ring.

New Features and Improvements

● New features and improvements from version 6.2.21.27 on fast ring.

Resolved Issues

● The EDR module was not licensed when installed via a Reconfigure task.

● Resolved issues from versions 6.2.21.27 and 6.2.21.28 on fast ring. 5.1.33. Version 6.2.21.28 Release date: Fast ring: 2019.06.25 Slow ring: -

Bitdefender Endpoint Security Tools for Linux 141 Resolved Issues

● In certain conditions, the product crashed on Debian 9 after updating the agent to version 6.2.21.27. 5.1.34. Version 6.2.21.27 Release date: Fast ring: 2019.06.24 Slow ring: -

New Features and Improvements

● Improved EDR Sensor now reports incidents and suspicious activity to GravityZone.

Resolved Issues

● The bduitool command returned the exit code 0 for both successful and failed statuses. Now for failed operations the command returns error codes different than 0.

● In a particular case, Ubuntu 18.04 physical machine with the EDR module installed stopped.

● High CPU usage occurred on Debian 9 Relay servers.

Known Issues

● When running bduitool get ps command on endpoints with EDR Sensor installed, the feature status is always "Installed", even if the module is disabled or the kernel version is unsupported. 5.1.35. Version 6.2.21.23 Release date: Fast ring: 2019.05.02 Slow ring: 2019.05.02

Bitdefender Endpoint Security Tools for Linux 142 Resolved Issues

● In a particular scenario, the Relay failed to download product kits, causing deployment issues. 5.1.36. Version 6.2.21.21 Release date: Fast ring: 2019.04.22 Slow ring: 2019.04.22

Important This version includes on slow ring all the improvements and fixes delivered with Bitdefender Endpoint Security Tools version 6.2.21.18, released on fast ring.

New Features and Improvements

● New features and improvements from version 6.2.21.18 on fast ring.

Resolved Issues

● In some situations, the product failed to report FQDN for EDR events.

● Resolved issues from version 6.2.21.18 on fast ring. 5.1.37. Version 6.2.21.18 Release date: Fast ring: 2019.04.09 Slow ring: -

New Features and Improvements

● New EDR blocklist capability allows administrators to automatically prevent suspicious files from running based on hash.

● Remote deployment now also works using sudo user with full permissions.

Resolved Issues

● In some situations, the endpoint crashed at boot time after installing the agent through DazukoFS.

Bitdefender Endpoint Security Tools for Linux 143 ● Reconfigure Client task status did not update in GravityZone console once completed on the endpoint (remained In Progress).

● High memory usage occurred during on-demand scanning on some Ubuntu 18.04 systems.

● Bitdefender Redline connectivity errors are no longer logged to syslog. 5.1.38. Version 6.2.21.12 Release date: Fast ring: 2019.02.14 Slow ring: 2019.02.18

New Features and Improvements

● Streamlined EDR module installation and update process reducing network traffic.

● New installations and product updates now require kernel version 2.6.32 or higher. Installing on older kernels will fail with error 12.

● New installations and product updates now check for and require minimum free disk space (in addition to existing checks for Relay and Patch Caching Server roles). Installing on systems with insufficient disk space will fail with error 74. The minimum requirements are as follows:

Scanning Type AV Only AV + EDR Local Scanning 1300 MB 1450 MB Hybrid Scanning 800 MB 950 MB Centralized Scanning 300 MB 450 MB Local Scanning + Centralized Scanning 1300 MB 1450 MB Hybrid Scanning + Centralized Scanning 800 MB 950 MB

Resolved Issues

● In some cases, the product blocked logical volumes (LV) mounts when using DazukoFS.

Bitdefender Endpoint Security Tools for Linux 144 ● The product now detects AutoFS mount points to avoid mounting NFS filesystems using DazukoFS.

● In certain situations when using Remote Scan, On-demand scanning caused high memory consumption.

● Other minor improvements and bug fixes. 5.1.39. Version 6.2.21.11 Release date: Fast ring: 2018.11.28 Slow ring: 2018.12.04

Important This version includes on slow ring all the improvements and fixes delivered with Bitdefender Endpoint Security Tools version 6.2.21.7, released on fast ring.

New Features and Improvements

● New features and improvements from version 6.2.21.7 on fast ring.

Resolved Issues

● An incompatibility issue between EDR module and DazukoFS prevented On-access scanning from functioning properly.

● Resolved issues from version 6.2.21.7 on fast ring. 5.1.40. Version 6.2.21.7 Release date: Fast ring: 2018.11.19 Slow ring: -

New Features and Improvements

● Added support for EDR Module to quarantine files.

● Improved crash handler, featuring better cleanup of crash reports and free space check to avoid consumption of disk space.

Bitdefender Endpoint Security Tools for Linux 145 Resolved Issues

● The product now uses static mounts in /etc/fstab for on-access scanning instead of dynamic mounts to prevent file corruption on CentOS 6 and RHEL 6 in some particular circumstances. New directories added to on-access scanning are still mounted immediately. Directories removed from on-access scanning are temporarily excluded from scanning and unmounted gracefully at the first restart.

● Fixed several issues related to EDR module: – The product created large log files. – EDR Sensor failed to start after installation on CentOS 6 systems. – The bdnc log files were not enabled when running the command bdconfigure enablelogs. – Sometimes, the EDR module crashed on CentOS 6.

● Log files containing lines longer than 2048 characters caused product to crash.

● Endpoints were not reporting to GravityZone Control Center when connection to Bitdefender Cloud Services failed.

● The product did not start properly on Linux systems with glibc version earlier than 2.17.

Known Issues

● Several unmount errors are generated at reboot/shutdown for folders /bin and /etc. Machine does not freeze and reboots normally. Older RPM systems might hang on reboot/shutdown.

● Portable storage devices mounted inside a protected directory are not scanned on-access. 5.1.41. Version 6.2.20.87 Release date: Fast ring: 2018.09.24 Slow ring: 2018.09.25

Bitdefender Endpoint Security Tools for Linux 146 New Features and Improvements

● Optimized memory consumption on endpoints when using Central Scan with no fallback.

● Added support for detecting virtual machines installed in Microsoft Azure (used for scan mode configuration in installation packages).

● Starting with this release, scanning of packed files is always enabled.

● Added support for the Endpoint Detection and Response (EDR) option of isolating the endpoint from network.

● Added support for automatically reconfiguring an existing installation to add the EDR Sensor module when upgrading the license in the GravityZone Control Center.

Resolved Issues

● Fixed an issue where a product installed without Relay role reported Patch Management Server status in Control Center even when this module was unavailable.

● Fixed an issue causing disk space consumption even when dump file submission was disabled.

● Fixed an issue that caused high CPU and memory usage on Amazon EC2 instances running RHEL 7.4 AWS AMI.

● Fixed an issue that caused product installation to fail on slow connections.

● Fixed an issue that prevented the product installation with downloader when wget was disabled.

● Fixed the product description found in the installed packages.

● Fixed an issue with the scanning service causing product crashes. 5.1.42. Version 6.2.20.80 Release date: Fast ring: 2018.07.31 Slow ring: 2018.08.02

Bitdefender Endpoint Security Tools for Linux 147 Important This version includes on the slow ring all the improvements and fixes delivered with Bitdefender Endpoint Security Tools version 6.2.20.79.

Resolved Issues

● Fixed a Relay issue in version 6.2.20.79 that prevented deployment of newer product kits. 5.1.43. Version 6.2.20.79 Release date: Fast ring: 2018.07.26 Slow ring: -

New Features and Improvements

● Improved the communication system between agents and GravityZone Communication Server.

Resolved Issues

● Fixed the Amazon EC2 instance detection (used for scan mode configuration in installation packages).

● Several minor fixes. 5.1.44. Version 6.2.20.74 Release date: Fast ring: 2018.06.25 Slow ring: 2018.06.27

New Features and Improvements

● Added support for EDR (Endpoint Detection and Response) Sensor for specific Linux distributions and kernel versions. For the detailed list, refer to GravityZone Installation Guide > Security Agent Requirements > Linux Operating Systems. 5.1.45. Version 6.2.20.67 Release date:

Bitdefender Endpoint Security Tools for Linux 148 Fast ring: 2018.05.21 Slow ring: 2018.05.24

New Features and Improvements

● Added a product information section that includes a link to Bitdefender privacy policy. To access this section, run the command: bduitool about.

Resolved Issues

● Fixed an issue with On-Access Scanning being disabled on certain Ubuntu 16.04 endpoints with high number of cores per CPU.

● Fixed an issue that caused some script errors when bdupdate.sh was running at the Bitdefender services restart.

● Fixed an issue where Linux endpoints joined to Active Directory domains were displayed in Custom Groups.

● Fixed an issue with a Relay not being able to download product kits after a proxy was configured in Control Center. 5.1.46. Version 6.2.20.63 Release date: Fast ring: 2018.04.24 Slow ring: 2018.04.26

New Features and Improvements

● Improved the security mechanism that enforces HTTPS connections to cloud servers.

Resolved Issues

● Fixed an issue that caused, in some cases, the product to stop functioning after a signature update.

● Fixed several issues causing product crashes.

● Fixed an issue with On-Access Scanning blocking the mounting of Docker when using AUFS storage driver.

Bitdefender Endpoint Security Tools for Linux 149 ● Fixed an issue with the endpoints being reported offline if they are connected through Relay. 5.1.47. Version 6.2.20.60 Release date: Fast ring: 2018.03.26 Slow ring: 2018.03.26

New Features and Improvements

● Made several improvements to Support Tool. These include collecting additional information required for troubleshooting and the ability to collect system and installation logs without having the product installed (in case installation fails). The installation logs can now be found in /var/log/BitDefender.

● Introduced a Signature Update fallback mechanism that loads the last working antimalware signatures in case of faulty updates.

● Introduced a recovery mechanism for faulty signatures and product updates.

● Better support for product crash reporting.

● Added support for uninstalling the incompatible security product Sophos Antivirus.

Resolved Issues

● Fixed an issue with the product crashing periodically on some machines using glibc versions older than 2.21.

● Fixed an issue that caused, in some situations, the security policy to remain in pending state instead of applying on the endpoint.

● Fixed an issue where On-Access Scanning was reported running on systems with fanotify disabled.

● Fixed an issue that caused the product manual installation to fail when the installation path contained a space character.

● Fixed an issue where the product was not removed properly after the installation failed.

Bitdefender Endpoint Security Tools for Linux 150 5.1.48. Version 6.2.20.48 Release date: Fast ring: 2018.01.16 Slow ring: 2018.01.18

Resolved Issues

● In some situations, the response time when running the bduitool command with the option get ps was 5-10 seconds or more. The issue is now fixed.

● In some cases with multiple malware files, On-demand scanning tasks reported only one detection. The issue is now fixed.

● Fixed an issue with Hyper Detect settings not being applied on some endpoints. 5.1.49. Version 6.2.20.47 Release date: Fast ring: 2017.12.05 Slow ring: 2017.12.05

Resolved Issues

● Fixed an issue where the endpoints were reported as offline if connected through a Relay with the latest version of Update Server. 5.1.50. Version 6.2.20.45 Release date: Fast ring: 2017.11.23 Slow ring: 2017.11.27

Important ● This version includes, on slow ring, improvements and fixes delivered with Bitdefender Endpoint Security Tools 6.2.20.36, released on fast ring.

Resolved Issues

● Fixed a reporting issue that caused Active Directory machines to appear in Custom Groups.

Bitdefender Endpoint Security Tools for Linux 151 ● In some cases, the security agent could not be uninstalled from Control Center via Uninstall task after setting up a password in the policy settings. The issue is now fixed. 5.1.51. Version 6.2.20.36 Release date: Fast ring: 2017.11.20 Slow ring: -

New Features and Improvements

● Added a new version of Update Server that supports the Patch Management Server functionality.

● Added support for HyperDetect.

● Added support for On-access scanning of mounted network shares for systems with fanotify (available with kernel version 2.6.38 or higher). On-access scanning monitors mounted network shares only under these conditions: – Fanotify is enabled on both remote and local systems. – The share is based on the CIFS and NFS file systems.

Note ● On-access scanning does not scan network shares mounted using SSH or FTP.

● On-access scanning of mounted network shares is not currently supported on systems with DazukoFS.

● The product now reports in GravityZone Control Center more OS details: kernel version, architecture (32-bit or 64-bit), the name of Linux distribution and OS version.

Resolved Issues

● Fixed the failed update of antimalware signatures in certain situations.

● Fixed the option If scheduled run time is missed, run task as soon as possible that was not working when On-demand scanning tasks were rescheduled.

Bitdefender Endpoint Security Tools for Linux 152 5.1.52. Version 6.2.19.32 Release date: Fast ring: 2017.09.25 Slow ring: 2017.09.27

New Features and Improvements

● Added support to configure the folder where the updates will be downloaded on the endpoints with Relay role.

Resolved Issues

● Fixed an issue where the dump files creation was causing high CPU usage.

● Fixed a memory allocation issue which caused Bitdefender services to crash when a new Active Directory user was logged on.

● Fixed an issue where the custom download folder was not deleted after uninstalling BEST with Relay role.

● Fixed an issue where the product did not start an update when changing the scan type from Remote to Full.

● Fixed an issue which prevented the setting If scheduled run time is missed, run the task as soon as possible from running as expected.

● Fixed an issue where the Stop Tasks functionality could not stop a Custom Scan.

● Fixed several bduitool issues, such as: – The users could not start two or more contextual scanning tasks at once. – Some commands did not return results as expected in certain situations. – In some cases, unresolved items were miscalculated. 5.1.53. Version 6.2.19.30 Release date: Fast ring: 2017-07-31 Slow ring: 2017-08-02

Bitdefender Endpoint Security Tools for Linux 153 Resolved Issues

● Fixed an issue where On-Access scanning did not report SHA-256 for some archived files.

● Fixed an issue where On-Access Scanning and On-Demand Scanning did not report SHA-256 for infected files detected on Security Server.

● On certain DazukoFS systems (such as RHEL 5 and 6, CentOS 6.2), the On-Access monitored locations /bin and /etc appeared as busy after reboot. The issue is now fixed.

● Addressed an issue that prevented dump files submission on RHEL 6 systems after reboot.

● Fixed an issue with Update Server where an old product kit was not deleted upon the publication of a new one.

● Fixed the failed installation or update when the download URL was invalid and the product was unable to use the next configured location. 5.1.54. Version 6.2.18.28 Release date: Fast ring: 2017-07-18 Slow ring: 2017-07-19

Resolved Issues

● Fixed an issue where the /home directory was mounted multiple times.

● On some systems with kernel versions up to 2.6.18, the product generated a large amount of dump files that caused low disk space. The issue is now fixed. 5.1.55. Version 6.2.18.25 Release date: Fast Ring: 2017.07.03 Slow Ring: 2017.07.04

New Features and Improvements

● Added support for SHA-256 reporting for suspicious and infected files.

Bitdefender Endpoint Security Tools for Linux 154 Known Issues

● On-access Scanning and On-Demand Scanning do not report SHA-256 for an infected file detected on Security Server. 5.1.56. Version 6.2.17.18 Release date: Fast Ring: 2017-06-06 Slow Ring: 2017-06-09

New Features and Improvements

● The product now reports the full qualified domain name (FQDN) for Active Directory users when malware is detected on the endpoints.

Resolved Issues

● Fixed an issue where crash dump files were not submitted to Bitdefender on RPM systems.

● The old signature folders were not deleted when updating them while Bitdefender services were running (such as a scanning task in progress), leading the product to use more disk space over time. The issue is now fixed. 5.1.57. Version 6.2.17.17 Release date: Fast Ring: 2017-04-26 Slow Ring: 2017-05-02

New Features and Improvements

● Added Relay role for Linux machines, with the same benefits and functionalities as on Windows: network discovery, deployment, update server and communication proxy.

Resolved Issues

● In some situations, product versions were not correctly identified during update, leading to unexpected behavior. This issue is now fixed.

Bitdefender Endpoint Security Tools for Linux 155 ● Fixed an issue with the remote scanning mechanism where the cleaning procedure failed for certain elements extracted from archives or other file formats such as .iso and .pdf.

Known Issues

● Linux Relay does not allow you to configure download locations for product updates.

● Control Center may receive more than one notification for each infected file detected on Linux machines with fanotify. 5.1.58. Version 6.2.16.10 Release date: Fast Ring: 2017-03-28 Slow Ring: 2017-04-03

New Features and Improvements

● Improved the antimalware mechanism related to user and location-based policies in order to increase performance and prevent machines from freezing in certain situations.

Resolved Issues

● Fixed an issue on CentOS 6.7 where the on-demand scan tasks could not run.

● Fixed an issue that caused some machines to become unresponsive while using compilers due to the large amount of generated files to be scanned.

● On some CentOS 7 machines, the update process caused the /opt/BitDefender/var/lib/scan folder to grow in size until the disk space was consumed. The issue is now fixed.

● Fixed an issue where certain Amazon Web Services (AWS) instances with Bitdefender protection running became unresponsive after reboot.

● Fixed an issue that caused product update to fail when using a proxy with authentication.

Bitdefender Endpoint Security Tools for Linux 156 5.1.59. Version 6.2.15.868 Release date: Fast Ring: 2016-12-19 Slow Ring: 2017-01-10

New Features and Improvements

● Introduced a new service for On-Access scanning, separate from the main product services, in order to enhance performance and prevent machines to become unresponsive during the scanning processes.

Resolved Issues

● Fixed an issue where Bitdefender services stopped causing Ubuntu and Debian machines to freeze after the booting process.

● When a specific product file needed for On-Demand scanning was corrupt or missing, the system became unresponsive. The issue is now fixed. 5.1.60. Version 6.2.15.864 Release date: Fast Ring: 2016-11-22 Slow Ring: -

Resolved Issues

● Fixed an issue that caused, in some situations, Linux machines to freeze at on-access scanning. 5.1.61. Version 6.2.10.835 Release date: Fast Ring: 2016-10-12 Slow Ring: 2016-10-18

Bitdefender Endpoint Security Tools for Linux 157 New Features and Improvements

● Addressed the OpenSSL vulnerability CVE-2016-6304 by integrating versions 1.0.1u, 1.0.2i and 1.1.0a in the security components of the product. For more information, refer to OpenSSL Security Advisory (English only).

● Added support for both systemd and Upstart, according to the new init process implementation brought by Ubuntu 16.xx. 5.1.62. Version 6.2.10.829 Release date: 2016-09-27

New Features and Improvements File System Protection Windows

● Added the option for On-Access Scanning and Advanced Threat Control to take no action.

● Introduced support for Anti-Ransomware vaccine, a new technology that immunizes endpoints against known ransomware.

● Added support for a set of powerful Anti-Exploit technics that further augments existing technologies to fight off targeted attacks.

● Introduced detection support for Bitdefender 2016 consumer products.

● Added support for uninstalling the following incompatible F-Secure products: – Anti-Virus for Workstations 11.61 – Server Security 11.01

● Added support for uninstalling the incompatible Spanish version of Kaspersky Endpoint Security 10 for Windows.

● Integrated new rendering technology to support Windows 7 systems with Aero theme activated.

● Improved notification mechanism for new Bitdefender Endpoint Security Tools deployments.

● Added full support for the following Microsoft Word 2007 document type extensions: .docx, .docm, .dotx, .dotm.

Bitdefender Endpoint Security Tools for Linux 158 Linux

● Added the option for On-Access Scanning to take no action.

● Users can now interact with Bitdefender Endpoint Security Tools. The bduitool command allows you to run scan tasks, display quarantined files, scan logs and events, launch updates and display product settings. For more information, please check the Bitdefender Endpoint Security Tools for Linux User’s Guide or run the bduitool command with one of these options: -h, --help.

● Improved product update mechanism to facilitate adding new features. Exchange Protection

● Optimized scanning mechanism for Exchange servers. With this release, the On-Demand scanning task continues even if an exception is removed while scanning a mailbox.

Resolved Issues File System Protection Windows

● On certain VMWare workstations, the Antimalware module caused Compass software slowdown. The issue is now fixed.

● Fixed the locked hard-drive issue that occurred on endpoints running Windows Server 2012 and Windows Server 2012 R2 at server reboot, after Device Control has been activated.

● In some situations, when activated, the Device Control module prevented webcam connection. The issue is now resolved.

● When printing pages from Google Chrome, the Bitdefender browser toolbar was printed as well. The issue is now fixed.

● Fixed the slightly delayed boot on Windows 7 32-bit systems.

● Resolved the On-Demand scan logs containing incomplete location of emails with infected PST attachments.

● Fixed some minor translation issues in scanning results window.

Bitdefender Endpoint Security Tools for Linux 159 Linux

● Fixed the configuration issue that caused product update to fail.

● Fixed a communication issue that occurred when checking for updates.

● Fixed an issue that prevented scheduled full scan tasks to run properly at specified times.

● On certain endpoints, On-Demand scanning report was not well-formed due to corrupted log file. The issue is now fixed. Exchange Protection

● Quarantined emails with "Content-Class: sharing" header did not restore properly. The issue is now resolved.

● Fixed the error message received when an Exchange scan task encountered password protected files.

Note During this product update, the Microsoft Exchange Transport service will be stopped. 5.1.63. Version 6.2.9.775 Release date: 2016-06-09

New Features and Improvements Windows & Linux

● Integrated OpenSSL versions 1.0.1t and 1.0.2h in the security components of the product. For more information, refer to OpenSSL Security Advisory (English only). Windows

● Added support for uninstalling the incompatible security product Vipre Business Agent 7.0.5711.

Resolved issues Windows & Linux

● Fixed OpenSSL vulnerability CVE-2016-2017.

Bitdefender Endpoint Security Tools for Linux 160 Windows

● Fixed an issue where Data Protection module incorrectly blocked web pages based on partial word match.

● Fixed the installation error code 234 which occurred in some situations when installing the Firewall module.

● Fixed an issue where XenDesktop agent did not run correctly after Content Control module was installed.

● Fixed update server error code 1460.

● Fixed some graphical user interface issues after updating Bitdefender Endpoint Security Tools to version 6.2.9.751.

● Fixed an issue where some machines with Device Control enabled got BSOD when trying to connect an encrypted virtual hard-disk drive using VeraCrypt utility.

● In some situations, websites with self-signed certificates did not load using Advanced option in Google Chrome when Scan SSL was enabled. The issue is now fixed.

● Fixed an issue where some machines with Content Control module installed failed to connect using Telenium Network Management Software.

● Fixed an issue where COALA finance software crashed on machines with Content Control module installed.

● In some situations, the Power User module and language options were not displayed correctly in the contextual menu after updating Bitdefender Endpoint Security Tools to version 6.2.9.742. The issue is now fixed.

● Fixed an issue where Device Control reports contained false blocked events on devices that were not used at the time.

● Fixed an issue where the browser toolbar was still displayed on client machines despite being deactivated in policy or in the Power User settings. Linux

● On rare occasions, Linux machines were freezing when using an updated version of Bitdefender Endpoint Security Tools with an older version of Control Center.

Bitdefender Endpoint Security Tools for Linux 161 ● Fixed an issue where on-demand scan tasks using Central Scan started without the endpoint being connected to Security Server.

Note During this product update, the Microsoft Exchange Transport service will be stopped. 5.1.64. Version 6.2.9.747 Release date: 2016-04-15

Resolved issues

● Fixed an issue that caused high CPU usage, after updating to version 6.2.9.743. 5.1.65. Version 6.2.9.743 Release date: 2016-04-14

New Features and Improvements

● Improved the validation methods for product installation.

Resolved issues

● Fixed on-demand scan tasks, which could not run on Debian 7.8 machines.

● Fixed an issue at scheduled scan tasks, which was causing the timestamp to be incorrectly translated to On-demand Scanning report. 5.1.66. Version 6.2.7.719 Release date: 2016-03-01

New Features and Improvements File System Protection Windows & Linux

● Added exclusions for System Center Configuration Manager 2012 (SCCM 2012) following Microsoft recommendations.

● All packages are now archived using WinRAR version 5.31.

Bitdefender Endpoint Security Tools for Linux 162 Resolved Issues File System Protection Windows

● In certain situations, devices were displayed as corrupt when Device Control was activated on endpoints. The issue is now fixed.

● Fixed an issue that caused delays in recognizing USB storage devices connected to endpoints. The issue occurred when Device Control was activated. 5.1.67. Version 6.2.7.710 Release date: 2016-02-01

New Features and Improvements

● Bitdefender Endpoint Security Tools can now submit suspicious executable files to Bitdefender Labs if configured accordingly when creating packages in Control Center.

Resolved Issues File System Protection Windows & Linux

● Addressed a vulnerability that implied the possibility of remote code execution.

● In some situations, Bitdefender Endpoint Security Tools was not updating according to the update locations priority defined in the policy. The issue is now fixed. Exchange Protection

● Exchange scan tasks automatically stopped after 23 hours although the Stop scan if it takes longer than option was not set in Control Center. This issue is now fixed.

● All emails were considered authenticated on Exchange Server 2013/2016 installed on non-English operating systems, which resulted in emails not being filtered for spam with default settings. The issue is now fixed.

Bitdefender Endpoint Security Tools for Linux 163 ● In large environments with thousands of Active Directory groups, some users might have experienced increased Bitdefender Endpoint Security Tools memory usage, system slowdown and email traffic delay. This issue is now fixed. 5.1.68. Version 6.2.7.696 Release date: 2015-12-22

New Features and Improvements File System Protection Windows & Linux

● Improved product and signatures update verification mechanisms. Windows

● Added support for uninstalling the following incompatible security products: – F-Secure Client Security 11.51 – F-Secure Client Security Premium 12.00 – F-Secure Client Security Premium 11.60 – McAfee 5.0.2.132 – McAfee 4.8.0.1500 – McAfee 4.5.0.1852 – ESET 5.2.15.0 – Avira 14 – Comodo Endpoint Security 8.1.0.x These security products can be uninstalled both from the user interface and silently.

● Integrated the OpenSSL version 1.0.1q in the product’s security components. For more information, refer to OpenSSL Security Advisory (English only).

● Some of the critical and non-critical issues displayed in the Events timeline are now associated with the recommended actions in order to fix them.

● Made several improvements to the installation process that address the replacement of previous Bitdefender Endpoint Security Tools versions.

Bitdefender Endpoint Security Tools for Linux 164 ● Events generated in the timeline are now displayed only in the context of the logged user.

● Texts from the Events timeline can now be copied. Exchange Protection

● Added progress details for Exchange on-demand scans in the Bitdefender Endpoint Security Tools main window.

● Added several improvements to the Exchange on-demand scan process and error messages.

● Attachment filtering by filename is now case insensitive.

Note During this product update, the Microsoft Exchange Transport service will be stopped.

Resolved Issues File System Protection Windows

● In some situations, HP machines with specific hardware configuration were starting Windows OS in recovery mode. The issue is now fixed.

● In some situations, Bitdefender Endpoint Security Tools Relay was unable to update the endpoints connected to it. The issue is now fixed.

● The Firewall module was malfunctioning on certain Windows 10 machines, when it was added to Bitdefender Endpoint Security Tools instances with Content Control enabled.

● Data Protection policy rules were not applying on HTTPS pages when the browser toolbar was disabled. The issue is now fixed.

● Excluding encrypted USB sticks from Device Control was malfunctioning. The issue is now fixed.

● Firewall rules were incorrectly displayed in the Bitdefender Endpoint Security Tools Power User interface. The issue is now fixed.

● In some situations, scans that finished immediately were displayed with 0% scan progress. The issue is now fixed.

Bitdefender Endpoint Security Tools for Linux 165 5.1.69. Version 6.2.7.688 Release date: 2015-12-17

Resolved Issues File System Protection Linux

● In some situations, endpoints were not complying with settings received from Control Center. The issue is now fixed.

● File exclusions for on-demand scanning were not working correctly. The issue is now fixed. 5.1.70. Version 6.2.6.670 Release date: 2015-11-17

Resolved Issues

● Addressed a vulnerability discovered by Andre Derek Protas of CyberPoint SRT through responsible disclosure. The vulnerability was present on Bitdefender Endpoint Security Tools only if the relay module was installed. 5.1.71. Version 6.2.6.669 Release date: 2015-11-12

New Features and Improvements File System Protection Windows

● Improved the product stability in endurance tests.

● Improved the performance of the filters from local console.

● Reorganized the scan log summary for a better user experience.

● The endpoint notifications pop-ups contain also the name of the product.

Resolved Issues File System Protection

Bitdefender Endpoint Security Tools for Linux 166 Windows

● The security agent reconfiguration failed when an uninstall password was set. The issue is now fixed.

● On some Windows XP and Windows 2003 operating systems, the endpoint failed to communicate with Control Center. The issue is now fixed.

● The update failed when a proxy was configured both in Control Center and in the browser on the endpoint. The issue is now fixed.

● Traffic scan exclusions for websites with self-signed certificates were not applying and the websites were displayed as unsafe. The issue is now fixed.

● In some situations, the security agent deployment status in Control Center remained stuck to In Progress. The issue is now fixed.

● In some situations, the full system scan log contained some fictive disk drives. The issue is now fixed.

● The missed scheduled scans were running as soon as possible only when the day was selected in the scheduler. The issue is now fixed.

● In some situations, the firewall rules descriptions were missing from the Power User menu. The issue is now fixed.

● In some situations, the update events were incorrectly added to other types of events in the main window. The issue is now fixed.

● Fixed several untranslated texts.

● Fixed an issue where the favorite scan text was overlapping in some localizations. Linux

● Linux physical machines from Active Directory appeared in Custom Groups. The issue is now fixed.

● The missed scheduled scans were running as soon as possible only when the day was selected in the scheduler. The issue is now fixed. Exchange Protection

● Fixed an issue where the security agent was ignoring email addresses written with wildcards, on these filters: connection blacklist, antispam whitelist, and content and attachment filtering exclusions.

Bitdefender Endpoint Security Tools for Linux 167 The issue occurred only when the lists contained both plain email addresses and email addresses patterns. 5.1.72. Version 6.2.5.661 Release date: 2015-10-30

Resolved Issues In some specific situations, the product downloaded a higher amount of signatures than necessary during update. The issue is now fixed. 5.1.73. Version 6.2.5.659 Release date: 2015-10-29

Important During this product update, the Microsoft Exchange Transport service will be stopped.

New Features and Improvements File System Protection Windows

● Added support for Windows Multipoint Server 2011 and 2012.

● Bitdefender Endpoint Security Tools is now compatible with Deep Freeze. For more information refer to this KB article.

● Added support for uninstalling the following incompatible security products: – Kaspersky Antivirus 2015 – Kaspersky Internet Security 2015

Note The products can be uninstalled only using the user interface.

● Improved the signature updating mechanism.

● Improved endpoint resource consumption during update operations.

● Optimized the disk space usage on relays by downloading installation kits only for the operating systems discovered in the network.

Bitdefender Endpoint Security Tools for Linux 168 ● Added support to automatically move endpoints to a specified folder under Custom Groups in the Network page of Control Center, when Bitdefender Endpoint Security Tools installation finishes.

● Integrated the Firewall module with Photon Technology, which temporarily allows trusted-installer applications to run when they are detected.

● Running scheduled scans now stop if the corresponding task was deleted from the management console.

● Added information about the logged in user to event logs related to malware detection, antiphishing, behavioral scan, blocked applications, blocked websites, data protection and firewall. This information will be visible in several reports from Control Center.

● Bitdefender Endpoint Security Tools now sends the status information to Control Center for each operation performed in the background during deployment.

● The endpoint is now able to send information about missed scheduled on-demand scan tasks to Control Center.

● The on-demand scan summary log now contains information about items with no action applied. Linux

● Added support to automatically move endpoints to a specified folder under Custom Groups in the Network page of Control Center, when Bitdefender Endpoint Security Tools installation finishes.

● Bitdefender Endpoint Security Tools now sends the status information to Control Center for each operation performed in the background during deployment.

● The on-demand scan summary log now contains information about items with no action applied.

● Improved the detection mechanism of physical and virtual machines.

● Added information about the logged in user to event logs related to malware detection. This information will be visible in several reports from Control Center.

● The endpoint is now able to send information about missed scheduled on-demand scan tasks to Control Center.

Bitdefender Endpoint Security Tools for Linux 169 ● The update process has been optimized. Exchange Protection

● Included Domain IP Check filter to help administrators protect their email domains from spoofing.

● Improved the Attachment Filtering module by adding file detection inside archives.

● Connection blacklist, antispam whitelist, and content and attachment filtering exclusions now support email addresses containing wildcards. This will allow, for example, an administrator to exclude an entire email domain from filtering.

● Added support for actions and reports on unscannable files. The files can now be deleted files, replaced with a notice, or sent to quarantine.

● Added support for displaying the status progress of running on-demand Exchange scan tasks in Control Center.

● Improved the on-demand scan errors messages.

Resolved Issues File System Protection Windows

● In some situations, when using centralized scanning, the antimalware modules crashed after a signature update. The issue is now fixed.

● In some situations, the uninstall task issued from Control Center failed. The issue is now fixed.

● The message related to Cloud Services unavailability was not refreshed after the connectivity has been reestablished. The issue is now fixed.

● Statistical update information was not sent anymore from Bitdefender Endpoint Security Tools to buddy.bitdefender.com. The issue is now fixed.

● Fixed some translated texts. Linux

● Product installation was unsuccessful if the setup folder name contained special characters. The issue is now fixed.

Bitdefender Endpoint Security Tools for Linux 170 ● BitDefender Logger Daemon was restarting after every signature update. The issue is now fixed. Exchange Protection

● In a particular situation, after installing Bitdefender Endpoint Security Tools with Exchange Protection role in a custom folder, Microsoft Exchange Transport service remained stopped if Bitdefender Transport Agent could not start due to insufficient permissions. The issue is now fixed. 5.1.74. Version 6.2.4.649 Release date: 2015-10-20

Resolved Issues

● On some specific hardware, the rootkit driver was conflicting with a third party iSCSI driver, leading to system crashes. In the situation that the system is unable to boot, thus to update Bitdefender Endpoint Security Tools, you need to run this patch.

● If the update required a reboot and the reboot scheduler was set to a specific day and hour of the week, only the hour was taken into account. The issue is now fixed. 5.1.75. Version 6.2.4.646 Release date: 2015-10-15

Note This release includes improvements and fixes related only to the file system protection.

New Features and Improvements

● Added support for uninstalling the following incompatible security products with user interface and also silent: – Bitdefender Box – ESET NOD32 Antivirus 4.2.76.0 – McAfee Endpoint Security Platform – McAfee Endpoint Security Threat Prevention

Bitdefender Endpoint Security Tools for Linux 171 – McAfee Endpoint Security Web Control – McAfee SaaS – Security Center Communication version 6.0.3 Patch 3 – McAfee TPSConnector

● Improved the cleaning process during Bitdefender Endpoint Security Tools installation.

● Added support for Windows 10 TH2.

Resolved Issues

● Endpoints were rebooting after each Sophos protection module removal. The issue is now fixed.

● In some situations, McAffee Agent and Panda Free Antivirus could not be uninstalled. The issue is now fixed.

Note These products can be uninstalled only from the user interface.

● Fixed an installation issue on ATM machines running Windows 7 Professional 32-bit.

● Fixed an issue at remote deployment through relay, which was returning error code "1385".

● When upgrading from Endpoint Security to Bitdefender Endpoint Security Tools, the user interface did not preserve language settings. The issue is now fixed.

● In some situations, the machines from Active Directory were listed multiple times in Control Center. The issue is now fixed.

● In some situations, when the user logged in Windows, the Bitdefender icon did not show in Windows Notifications Area and all protection modules were disabled. The issue is now fixed.

● In some situations, Bitdefender Endpoint Security Tools deployment was unsuccessful when installing the Firewall module. The issue is now fixed.

● Firewall rules using the environment variable %localappdata% were not applying on endpoints. The issue is now fixed.

● Fixed an issue that was preventing users from creating or updating certain security certificates.

Bitdefender Endpoint Security Tools for Linux 172 ● Bitdefender Endpoint Security Tools was blocking an ActiveX control that connects to CCTV cameras, thus preventing video streaming. The issue is now fixed.

● Content Control was preventing VMEET application from streaming video content. The issue is now fixed.

● Webex was unavailable when Scan SSL option was enabled in Content Control. The issue is now fixed.

● Device Control settings were not persistent after a computer reboot. The issue is now fixed.

● Device Control was unable to block HTC devices running Android 4.2.2. The issue is now fixed. 5.1.76. Version 6.2.4.610 Release date: 2015-08-26

New Features and Improvements File System Protection Windows & Linux

● Improved the product stability and performance.

● The communication between Bitdefender Endpoint Security Tools and Cloud Services is now secured by SSL. Port 7076 will be opened on the relay endpoint.

● Improved the endpoint type detection mechanism.

Resolved Issues File System Protection Windows

● In some situations, the following message was displayed: “There is no connection with the security host service. Please restart your system.” and all modules of the security agent were turned off, while in Control Center, only the antimalware module was reported as disabled. The issue is now fixed.

Bitdefender Endpoint Security Tools for Linux 173 ● In some corner cases, a BSOD occurred after installing Bitdefender Endpoint Security Tools version 6.2.2.563. The issue is now fixed.

● In some situations, the security agent used an abnormal large amount of RAM memory. The issue is now fixed.

● In some situations, Bitdefender Endpoint Security Tools version 6.2.3.569 appeared outdated even though it was the latest version available. The issue is now fixed.

● The Firewall module could not install on endpoint after system upgrade to Windows 10. The issue is now fixed.

● Microsoft Surface Pro tablets were improperly detected as virtual machines. The issue is now fixed.

● After upgrade to Windows 10, the Firewall module was reported as disabled in Windows Action Center. The issue is now fixed.

● Fixed some graphical user interface issues related to missing buttons and to the console display on screen. Linux

● During antimalware scanning, the endpoint became unresponsive if encrypted folders were detected. The issue is now fixed. Exchange Protection

● The EWS URL configured by the administrator was not taken into account if Exchange Protection managed to obtain an EWS URL via autodiscovery. This fact prevented the Exchange on-demand scan from running in particular EWS URL configurations. The issue is now fixed.

● In some cases, spam messages detected by the RBL filter were given a SCL score of -1. The issue is now fixed.

● Exchange scan tasks run by the administrator would either not show in the local Bitdefender Endpoint Security Tools interface, or would disappear once the interface was closed. The issue is now fixed. 5.1.77. Version 6.2.4.582

New Features and Improvements File System Protection

Bitdefender Endpoint Security Tools for Linux 174 Windows

● Added support for Windows 10.

● Improved the product stability regarding the graphical user interface.

● Integrated the OpenSSL version 1.0.1p in the product’s security components. For more information, refer to OpenSSL Security Advisory [9 Jul 2015] (English only).

● Bitdefender Endpoint Security Tools Relay now automatically adds the necessary rules to Windows Firewall during installation on server operating systems.

● Added support for removing the following incompatible security products: – Trusteer Rapport – System Center Endpoint Protection * – Symantec.Cloud - Endpoint Protection NIS-21.5.0.19 * – Sophos 10.0.12.510 * – Vipre Business Agent 7.0.5725 * – Eset File Server 4.5.12005 *Support provided also for silent uninstall.

● Minor improvements to the graphical user interface.

Resolved Issues File System Protection Windows

● Microsoft Excel 2007 was crashing during file save when Bitdefender Endpoint Security Tools was used. This issue is now fixed.

● Sysprep is not working when BEST is installed. To troubleshoot this issue, refer to this KB article.

● For some DNS servers, the queries from Bitdefender Endpoint Security Tools to Cloud Services were unsuccessful. This issue is now fixed.

● In some situations, endpoints protected by Bitdefender Endpoint Security Tools could not join an Active Directory domain. This issue is now fixed.

Bitdefender Endpoint Security Tools for Linux 175 ● Bitdefender Endpoint Security Tools installation was crashing on endpoints with high CPU usage. This issue is now fixed.

● Fixed an issue occurred when a scan task was postponed from the user interface.

● Support Tool was not collecting all necessary files. This issue is now fixed.

● Technical Support information was not updating correctly when it was changed in the policy. This issue is now fixed.

● Air Control 2 was blocked by the Content Control module. This issue is now fixed.

● The last scan log of successive scans from the contextual menu could not be viewed from the user interface. This issue is now fixed.

● Fixed some misspelled texts. Linux

● On-demand scan tasks could not scan paths containing non Latin characters. This issue is now fixed.

● For some DNS servers, the queries from Bitdefender Endpoint Security Tools to Cloud Services were unsuccessful. This issue is now fixed. Exchange Protection

● In some situations, an XML error occurred when opening an Exchange scan report from the Information window. This issue is now fixed.

● On-demand scan log showed ignored infections at Resolved Items. This Issue is now fixed.

● When trying to restore emails from quarantine and Microsoft Exchange Autodiscovery was using a redirected EWS URL, the task was failing with the status message Generic error. This issues is now fixed. 5.1.78. Version 6.2.3.572

Resolved Issues

● The deployment on SUSE 11 SP3 distribution was failing due to one installation file download error. This issue is now fixed.

Bitdefender Endpoint Security Tools for Linux 176 5.1.79. Version 6.2.3.569

New Features and Improvements File System Protection Windows

● Increased the waiting time for pending reboot during the security agent installation at ten minutes.

● Improved memory usage.

Resolved Issues File System Protection Windows

● When repairing the Bitdefender Endpoint Security Tools files, the Logs folder for scan tasks was not created in the product folder, blocking the on-demand scan tasks to run. This issue is now fixed.

● In some situations, after upgrading from Endpoint Security to Bitdefender Endpoint Security Tools, Control Center still displayed the old product in the computer details. This issue is now fixed.

● In some situations, the security agent deployment on Windows 8.1 systems has failed. This issue is now fixed.

● In some situations, Bitdefender Endpoint Security Tools files could not be repaired if the Content Control module was installed.

● Fixed some issues at the built-in firewall rules, which occurred when accessing an Active Directory domain or when connecting through Remote Desktop Connection.

● In some situations, when repairing the product files and a system reboot was required, the system entered in a reboot loop. This issue is now fixed.

● NTLM and Kerberos based proxies were not supported. This issue is now fixed.

● Fixed several minor issues.

Bitdefender Endpoint Security Tools for Linux 177 Linux

● NTLM and Kerberos based proxies were not supported. This issue is now fixed.

● In some situations, the Update Client task did not work. This issue is now fixed. 5.1.80. Version 6.2.2.547

Resolved Issues

● Fixed some issues at the component that ensures the communication with Control Center. 5.1.81. Version 6.2.2.546

Resolved Issues

● Bitdefender Endpoint Security Tools was not reporting correctly its update status to Control Center when an update was available. This issue is now fixed.

● A blocked process occurred in certain situations was causing the endpoint to run slow. This issue is now fixed.

● On Windows endpoints, the upgrade from Endpoint Security did not resume after reboot if the check box Automatically reboot (if needed) was not previously selected in the Upgrade Client(s) window. This issue is now fixed.

● In some situations, the security agent reconfiguration failed on Windows endpoints. This issue is now fixed.

● The graphical user interface of the Windows version contained some truncated labels and some missing translations. These issues are now fixed. 5.1.82. Version 6.2.1.541

New Features and Improvements Deployment

● Extended protection for physical endpoints to cover also desktop and server Linux distributions.

Bitdefender Endpoint Security Tools for Linux 178 ● One installation package, which can be deployed in any environment: physical, virtual or in-the-cloud.

● Ability to uninstall other antimalware products regardless of the endpoint’s environment (physical or virtual). Scanning Technologies

● New and flexible scanning technologies for Windows and Linux endpoints with various hardware configurations: – Local Scan, where the antimalware scanning is performed locally on the endpoint. This option is suitable for powerful endpoints that are also able to store the scanning engines and the malware signatures. – Central Scan, where the antimalware scanning is performed by one or multiple Security Servers, using load balancing. This option is suitable for virtualized environments and for physical desktop endpoints with low hardware performance.

Note Security Server is a dedicated virtual machine that acts as a scan server. The Security Server installs on a host in a virtualized environment. For more information, refer to GravityZone Installation Guide.

– Hybrid Scan, where the antimalware scanning is performed mainly in-the-cloud and it is enhanced by local scanning. This option is suitable for physical endpoints with low to medium performance and resources. Bitdefender Endpoint Security Tools ensures the same level of protection regardless of the selected scanning mode.

● Higher availability of the remote scanning engines by introducing the dual engines scanning. Thus, if the first engine is unavailable, the fallback engine will be used. Two options are available: – Central Scan with fallback on Hybrid Scan. – Central Scan with fallback on Local Scan.

Bitdefender Endpoint Security Tools for Linux 179 Note Resource consumption and network utilization will be based on used engines.

● With the ability to detect the endpoint’s configuration and environment, Bitdefender Endpoint Security Tools automatically self-configures and adapts the scanning technology accordingly.

Note This action is performed during product installation and can be overridden by the administrator.

New Modules and Roles

● Device Control protection module, providing the ability to control and monitor the access to various devices that may connect to the endpoints. The module recognizes a vast series of devices: Bluetooth devices, CDROM drives, floppy disk drives, IEEE 1284.4 devices, IEEE 1394 devices, imaging devices, internal and external storage, LPT/COM ports, modems, network adapters, printers, SCSI RAID, tape drives and Windows portable devices.

● Power User module, enabling administration rights at endpoint level, allowing the endpoint user to access and modify policy settings via a local console, through the BEST interface.

● New features for protecting VDIs: – Behavioral scan: keeps applications temporarily in a sandbox to identify malicious actions. – Photon (Application Reputation): monitors all running software and decides if applications and their components are safe or not. – Firewall: Fully featured two-way firewall with Intrusion Detection System. – Content Control: Multiple thread filtering of web content to identify potential online threats.

● Extended Relay role for virtual machines as well. The Relay role converts the agent to an update, deployment and communication server for all machines in a remote location.

Bitdefender Endpoint Security Tools for Linux 180 Note – Bitdefender Endpoint Security Tools with Relay role installs only on Windows machines. – You can use Bitdefender Endpoint Security Tools with Relay role to deploy the security agents on any supported operating system.

● Exchange Protection role, providing antimalware, antispam, antiphishing, attachment and content filtering seamlessly integrated with the Microsoft Exchange Server, to ensure a secure messaging and collaboration environment and increase productivity. Exchange Protection uses the same antimalware scanning technologies as the file system Antimalware module. Exchange Protection supports and installs on the following Microsoft Exchange Server versions and roles: – Exchange Server 2013 with Edge Transport or Mailbox role – Exchange Server 2010 with Edge Transport, Hub Transport or Mailbox role – Exchange Server 2007 with Edge Transport, Hub Transport or Mailbox role

Note The solution is compatible with Microsoft Exchange Database Availability Groups (DAGs).

User Interface Bitdefender Endpoint Security Tools comes with a series of user interface improvements, such as:

● A lighter and more comfortable color scheme for day to day use, which gives emphasis to content.

● Loose design for a friendly touch screen experience.

● A structure focused on readability, maximizing the available space for displaying the information.

● An enhanced user interaction, offering the following options: 1. Notifications area, informing the user about unresolved issues and linking to the details screen. 2. Events timeline, displaying the events related to endpoint’s protection.

Bitdefender Endpoint Security Tools for Linux 181 3. Expand and Collapse arrows, displaying or hiding the events belonging to the same category. 4. Modules button, linking to a new screen where the user can view the status of installed modules and manage the file system Quarantine. 5. Filters menu, allowing the user to refine the list of events displayed in the timeline. 6. Actions menu, allowing the user to define, run and save scanning tasks and to check for updates.

Bitdefender Endpoint Security Tools main window

5.2. Known Issues File System Protection

● Using endpoint isolation for virtual machines running on Citrix Provisioning Services (PVS) infrastructure will permanently block access to those machines. Do not use endpoint isolation on such machines.

Bitdefender Endpoint Security Tools for Linux 182 ● On Ubuntu 14.04 systems with fanotify and a kernel version older than 4.0.0, on-access scanning does not delete infected files from network shares with NFS 4.1. Also, on network shares with NFS 3.x, the infected files are corrupted and inaccessible.

● On Linux systems with fanotify, creating files on network shares with CIFS 1.0 and 2.0 takes 15-30 seconds more than usual.

Bitdefender Endpoint Security Tools for Linux 183