Hi,
We have a new EAP build 22.19.8.41 available through LiveUpdate.
To access the new build, simply run LiveUpdate from your 22.17.3.50, 22.18.0.213 and 22.18.0.219 builds [EAP Channel]. You will see a few updates download and apply. Keep running LiveUpdate until it asks you to apply the patch to the updated build. Once you apply the patch, you will be running the new build.
What are the changes in this build?
- Attack Chain Mitigation is a set of categorized policies that's added to Script Control, can block "unusual" behaviors on an endpoint. When you download a document with embedded script, Script Control uses Auto-Protect to detect suspicious scripts. When you open a document with embedded script, Script Control uses SONAR Protection to detect any potentially dangerous activity.
- Performance Improvement made to reduce Full System Scan Time
- Few other minor fixes & performance enhancements
Known Issues:
-
Online Banking IPS signature is enabled in log mode with this build, so any time a user navigates to a banking URL, we will display an IPS blocking alert (comes by default), as the severity of the alert is set to High. The details of the alert will also be updated to Security History too. This will be addressed with the GA as changes have been already made to the vNxt stream to suppress this default alert and prevent logging to Security history.
Note: You may need to run LiveUpdate and reboot a few times before your product is completely updated to the latest version.