Bitdefender Endpoint Security Tools for Windows
This section contains the release notes for Bitdefender Endpoint Security Tools (BEST) for Windows. For the BEST for Windows user's guide, go to this section.
For BEST for Windows release notes from 2019-2020, refer to this document.
Version 7.9.8.350
Release date:
Fast ring: 2023.12.04
Slow ring: 2023.12.06
Important
Security agents with product versions between 7.8.4.269 and 7.9.5.318 may require an endpoint reboot to complete the update process. For more information, refer to this article.
During this update, the Microsoft Exchange Transport service will be stopped.
Resolved issues
Product
Internal fixes.
Known issues
Product
The update process may fail with error -2011. You must run the update again to complete the process.
Reconfigure agent tasks used to add new modules on previous security agent versions require endpoints reboot. After rebooting and updating the endpoints to version 7.9.8.350, you must run a new Reconfigure agent task.
Version 7.9.8.346
Release date:
Fast ring: 2023.11.13
Slow ring: 2023.11.20
Important
Security agents with product versions between 7.8.4.269 and 7.9.5.318 may require an endpoint reboot to complete the update process. For more information, refer to this article.
During this update, the Microsoft Exchange Transport service will be stopped.
This version also includes on slow ring the improvements and fixes delivered with the Bitdefender Endpoint Security Tools version 7.9.8.343 released on fast ring.
New features and improvements
Live Search
The Live Search feature is now compatible with ARM64 architecture CPUs.
Product
Added support for upcoming features available with the next major GravityZone release.
Resolved issues
Antimalware
Exclusions were not being taken into account when scanning registries. This issue has been fixed.
In specific cases, the security agent crashed when a new product version was available.
Product
Addressed an internal issue that caused the product update process to fail with error -1007.
Known issues
Product
The update process may fail with error -2011. You must run the update again to complete the process.
Reconfigure agent tasks used to add new modules on previous security agent versions require endpoints reboot. After rebooting and updating the endpoints to version 7.9.8.346, you must run a new Reconfigure agent task.
Version 7.9.8.343
Release date:
Fast ring: 2023.11.09
Slow ring: -
Important
Security agents with product versions between 7.8.4.269 and 7.9.5.318 may require an endpoint reboot to complete the update process. For more information, refer to this article.
During this update, the Microsoft Exchange Transport service will be stopped.
New features and improvements
Live Search
The Live Search feature is now compatible with ARM64 architecture CPUs.
Product
Added support for upcoming features available with the next major GravityZone release.
Resolved issues
Antimalware
Exclusions were not being taken into account when scanning registries. This issue has been fixed.
In specific cases, the security agent crashed when a new product version was available.
Known issues
Product
The update process may fail with error -2011. You must run the update again to complete the process.
Reconfigure agent tasks used to add new modules on previous security agent versions require endpoints reboot. After rebooting and updating the endpoints to version 7.9.8.343, you must run a new Reconfigure agent task.
Version 7.9.7.336
Release date:
Fast ring: 2023.10.30
Slow ring: 2023.10.31
Important
Security agents with product versions between 7.8.4.269 and 7.9.5.318 may require an endpoint reboot to complete the update process. For more information, refer to this article.
During this update, the Microsoft Exchange Transport service will be stopped.
This version also includes on slow ring the improvements and fixes delivered with the Bitdefender Endpoint Security Tools version 7.9.7.334 released on fast ring.
New features and improvements
Content Control
The Content Control module now blocks SSL connections, from non-browser processes to malicious domains. This improvement is going to be gradually enabled on all endpoints.
Product
Added support for removing the following incompatible security products:
Trellix Agent
Trellix Endpoint Security Platform
Trellix Endpoint Security Adaptive Threat Protection
Trellix Endpoint Security Threat Prevention
Trellix Endpoint Security Web Control
Enhanced support for removing the following incompatible security product:
Trend Micro Apex One Security Agent 14.x
Callback evasion notifications are now displayed for users when:
The product’s integrity is compromised and the system administrator needs to be contacted.
A system restart is required to restore the product's integrity.
The product is no longer compromised.
Resolved issues
Network Protection
When enabled in Google Chrome and Mozilla Firefox, the Encrypted ClientHello (ECH) protocol prevented content filtering and traffic scanning.
Security for Exchange
Discovery Search Mailboxes no longer take license slots for the Security for Exchange module.
Product
Fixed incompatibility with Ninja Agent that prevented the product from updating.
Known issues
Product
The update process may fail with error -2011. You must run the update again to complete the process.
Reconfigure agent tasks used to add new modules on previous security agent versions require endpoints reboot. After rebooting and updating the endpoints to version 7.9.7.336, you must run a new Reconfigure agent task.
Version 7.9.7.334
Release date:
Fast ring: 2023.10.23
Slow ring: -
Important
Security agents with product versions between 7.8.4.269 and 7.9.5.318 may require an endpoint reboot to complete the update process. For more information, refer to this article.
During this update, the Microsoft Exchange Transport service will be stopped.
New features and improvements
Content Control
The Content Control module now blocks SSL connections, from non-browser processes to malicious domains. This improvement is going to be gradually enabled on all endpoints.
Product
Enhanced support for removing the following incompatible security product:
Trend Micro Apex One Security Agent 14.x
Callback evasion notifications are now displayed for users when:
The product’s integrity is compromised and the system administrator needs to be contacted.
A system restart is required to restore the product's integrity.
The product is no longer compromised.
Resolved issues
Network Protection
When enabled in Google Chrome and Mozilla Firefox, the Encrypted ClientHello (ECH) protocol prevented content filtering and traffic scanning.
Security for Exchange
Discovery Search Mailboxes no longer take license slots for the Security for Exchange module.
Known issues
Product
The update process may fail with error -2011. You must run the update again to complete the process.
Reconfigure agent tasks used to add new modules on previous security agent versions require endpoints reboot. After rebooting and updating the endpoints to version 7.9.7.334, you must run a new Reconfigure agent task.
Version 7.9.6.331
Release date:
Fast ring: 2023.10.05
Slow ring: 2023.10.11
Important
Security agents with product versions between 7.8.4.269 and 7.9.5.318 may require an endpoint reboot to complete the update process. For more information, refer to this article.
During this update, the Microsoft Exchange Transport service will be stopped.
This version also includes on slow ring the improvements and fixes delivered with the Bitdefender Endpoint Security Tools versions 7.9.6.329 and 7.9.6.330 released on fast ring.
Resolved issues
Firewall
In some cases, rules configured in the policy were no longer applied after a period of time, resulting in blocked applications.
In some cases, the Firewall module crashed after changing the Network Adapter settings.
Product
In some cases, the Support Tool generated empty or corrupted reports. This issue has been fixed.
Internal fixes.
Known issues
Product
The update process may fail with error -2011. You must run the update again to complete the process.
Reconfigure agent tasks used to add new modules on previous security agent versions require endpoints reboot. After rebooting and updating the endpoints to version 7.9.6.331, you must run a new Reconfigure agent task.
Version 7.9.6.330
Release date:
Fast ring: 2023.09.27
Slow ring: -
Important
Security agents with product versions between 7.8.4.269 and 7.9.5.318 may require an endpoint reboot to complete the update process.
During this update, the Microsoft Exchange Transport service will be stopped.
Resolved issues
Product
In some cases, the Support Tool generated empty or corrupted reports. This issue has been fixed.
Known issues
Product
The update process may fail with error -2011. You must run the update again to complete the process.
Reconfigure agent tasks used to add new modules on previous security agent versions require endpoints reboot. After rebooting and updating the endpoints to version 7.9.6.330, you must run a new Reconfigure agent task.
Updating your endpoints to BEST version 7.9.5.318, released on fast ring, can fail due to an issue with one of the filter drivers. Endpoints affected by the issue will be displayed as offline in Control Center since August 17, or the latest date a product update has been attempted. To fix this issue, refer to this article.
Note
These issues occur with security agents, which are updated from versions ranging between 7.8.4.269 and 7.9.4.313 to version 7.9.5.318.
Version 7.9.6.329
Release date:
Fast ring: 2023.09.25
Slow ring: -
Important
Security agents with product versions between 7.8.4.269 and 7.9.5.318 may require an endpoint reboot to complete the update process.
During this update, the Microsoft Exchange Transport service will be stopped.
Resolved issues
Firewall
In some cases, the Firewall module crashed after changing the Network Adapter settings.
Product
Internal fixes.
Known issues
Product
The update process may fail with error -2011. You must run the update again to complete the process.
Reconfigure agent tasks used to add new modules on previous security agent versions require endpoints reboot. After rebooting and updating the endpoints to version 7.9.6.329, you must run a new Reconfigure agent task.
Updating your endpoints to BEST version 7.9.5.318, released on fast ring, can fail due to an issue with one of the filter drivers. Endpoints affected by the issue will be displayed as offline in Control Center since August 17, or the latest date a product update has been attempted. To fix this issue, refer to this article.
Note
These issues occur with security agents, which are updated from versions ranging between 7.8.4.269 and 7.9.4.313 to version 7.9.5.318.
Version 7.9.5.324
Release date:
Fast ring: 2023.09.11
Slow ring: 2023.09.12
Important
Security agents with product versions between 7.8.4.269 and 7.9.5.318 may require an endpoint reboot to complete the update process.
During this update, the Microsoft Exchange Transport service will be stopped.
This version also includes on slow ring the improvements and fixes delivered with the Bitdefender Endpoint Security Tools versions 7.9.5.318 and 7.9.5.322 released on fast ring.
New features and improvements
Product
Added support for upcoming features available with the next major GravityZone release.
Users are now notified whenever the communication between endpoints and the GravityZone console cannot be established.
Users are now notified whenever communication with the Incidents Server cannot be established.
Implemented internal optimizations for enhanced stability of the security agent.
Live search
Osquery has been upgraded to version 5.9.1
Resolved issues
Integrity Monitoring
The Integrity Monitoring module did not generate Change events for files that have been accessed and modified from another endpoint, through Server Message Block (SMB) protocol.
Endpoint Detection and Response
In some cases, the EDR module caused performance issues on Remote Desktop Servers (RDS), when users connected via Remote Desktop Protocol (RDP).
Product
Security fixes.
Known issues
Product
The update process to version 7.9.5.322 fails with error -2011. You must run the update again to complete the process.
Reconfigure agent tasks used to add new modules on previous security agent versions require endpoints reboot. After rebooting and updating the endpoints to version 7.9.5.324, you must run a new Reconfigure agent task.
Updating your endpoints to BEST version 7.9.5.318, released on fast ring, can fail due to an issue with one of the filter drivers. Endpoints affected by the issue will be displayed as offline in Control Center since August 17, or the latest date a product update has been attempted. To fix this issue, refer to this article.
Note
These issues occur with security agents, which are updated from versions ranging between 7.8.4.269 and 7.9.4.313 to version 7.9.5.318.
Version 7.9.5.322
Release date:
Fast ring: 2023.09.04
Slow ring: -
Important
Security agents with product versions between 7.8.4.269 and 7.9.5.318 will require an endpoint reboot to complete the update process.
During this update, the Microsoft Exchange Transport service will be stopped.
New features and improvements
Live search
Osquery has been upgraded to version 5.9.1
Product
Users are now notified whenever communication with the Incidents Server cannot be established.
Resolved issues
Endpoint Detection and Response
In some cases, the EDR module caused performance issues on Remote Desktop Servers (RDS), when users connected via Remote Desktop Protocol (RDP).
Product
Security fixes.
Known issues
Product
The update process to version 7.9.5.322 fails with error -2011. You must run the update again to complete the process.
Reconfigure agent tasks that are used to add new modules require endpoints reboot. After rebooting the endpoint, you must run the Reconfigure agent task again to complete the process.
Updating your endpoints to BEST version 7.9.5.318, released on fast ring, can fail due to an issue with one of the filter drivers. Endpoints affected by the issue will be displayed as offline in Control Center since August 17, or the latest date a product update has been attempted. To fix this issue, refer to this article.
Note
These issues occur with security agents, which are updated from versions ranging between 7.8.4.269 and 7.9.4.313 to version 7.9.5.318.
Version 7.9.5.318
Release date:
Fast ring: 2023.08.17
Slow ring: -
Important
During this update, the Microsoft Exchange Transport service will be stopped.
New features and improvements
Product
Added support for upcoming features available with the next major GravityZone release.
Users are now notified whenever the communication between endpoints and the GravityZone console cannot be established.
Resolved issues
Integrity Monitoring
The Integrity Monitoring module did not generate Change events for files that have been accessed and modified from another endpoint, through Server Message Block (SMB) protocol.
Version 7.9.4.313
Release date: 2023.08.10
Important
During this update, the Microsoft Exchange Transport service will be stopped.
Resolved issues
Network Protection
In a particular situation, the exclusions defined in Web Access Control for websites did not function as intended. This issue affected endpoints with product version 7.9.4.306.
Version 7.9.4.306
Release date:
Fast ring: 2023.07.31
Slow ring: 2023.08.02
Important
This version also includes on slow ring the improvements and fixes delivered with the Bitdefender Endpoint Security Tools version 7.9.4.303 released on fast ring.
During this update, the Microsoft Exchange Transport service will be stopped.
New features and improvements
Antimalware
The Antimalware module can now monitor files that use the
.log
and.gif
extensions.
Product
Added support for upcoming features available with the next major GravityZone release.
Added support for removing the following incompatible security products:
Coro Cybersecurity
Cylance PROTECT, version 3.x
Resolved issues
Integrity Monitoring
The Integrity Monitoring module generated Renamed events instead of Deleted events when a monitored file was deleted.
Antimalware
The module did not detect files transferred at the same time on a network share via Remote Desktop Protocol (RDP).
The security agent did not allow the safe removal of external storage devices when the Antimalware module was installed.
Content Control
The module blocked a particular web address, which had been excluded in the policy, while the Web Proxy category was configured for blocking.
Network Protection
The Network Protection module blocked certain websites. The issue affected endpoints with product version 7.9.4.303, released on fast ring.
Product
Security fixes.
Version 7.9.4.303
Release date:
Fast ring: 2023.07.26
Slow ring: -
Important
During this update, the Microsoft Exchange Transport service will be stopped.
New features and improvements
Antimalware
The Antimalware module can now monitor files that use the
.log
and.gif
extensions.
Product
Added support for upcoming features available with the next major GravityZone release.
Added support for removing the following incompatible security products:
Coro Cybersecurity
Cylance PROTECT, version 3.x
Resolved issues
Integrity Monitoring
The Integrity Monitoring module generated Renamed events instead of Deleted events when a monitored file was deleted.
Antimalware
The module did not detect files transferred at the same time on a network share via Remote Desktop Protocol (RDP).
The security agent did not allow the safe removal of external storage devices when the Antimalware module was installed.
Content Control
The module blocked a particular web address, which had been excluded in the policy, while the Web Proxy category was configured for blocking.
Product
Security fixes.
Version 7.9.3.298
Release date:
Fast ring: 2023.07.03
Slow ring: 2023.07.04
Important
This version also includes on slow ring the improvements and fixes delivered with the Bitdefender Endpoint Security Tools versions 7.9.3.297 and 7.9.3.297 released on fast ring.
During this update, the Microsoft Exchange Transport service will be stopped.
New features and improvements
Product
The Support Tool and Uninstall Tool are now console applications.
The
bruteForce
parameter that can be used when uninstalling the security agent is now available only for product versions starting with 7.x.Added support for removing the following incompatible security product:
Webroot SecureAnywhere 9.x
Resolved issues
Content Control
The Content Control module did not block web pages when a proxy was used. The issue affected endpoints with product version 7.9.2.290
Network Protection
The update process failed with error –1018 on endpoints with the Network Attack Defense module installed.
Exchange Protection
The Exchange scan was not working correctly. This issue has been fixed.
Firewall
The Firewall module caused endpoints to temporarily lose network connectivity when starting services or when changing policies. This issue occurred on Windows 10 and 11 systems.
Product
The Relay agent failed to properly remove old installation kits, leading to high disk usage.
The Sysprep tool did not work properly on endpoints with product version 7.8.3.x and higher.
Internal fixes.
Version 7.9.3.297
Release date:
Fast ring: 2023.06.29
Slow ring: -
Important
During this update, the Microsoft Exchange Transport service will be stopped.
Resolved issues
Firewall
The Firewall module caused endpoints to temporarily lose network connectivity when starting services or when changing policies. This issue occurred on Windows 10 and 11 systems.
Version 7.9.3.296
Release date:
Fast ring: 2023.06.27
Slow ring: -
Important
During this update, the Microsoft Exchange Transport service will be stopped.
New features and improvements
Product
The Support Tool and Uninstall Tool are now console applications.
The
bruteForce
parameter that can be used when uninstalling the security agent is now available only for product versions starting with 7.x.Added support for removing the following incompatible security product:
Webroot SecureAnywhere 9.x
Resolved issues
Content Control
The Content Control module did not block web pages when a proxy was used. The issue affected endpoints with product version 7.9.2.290
Network Protection
The update process failed with error –1018 on endpoints with the Network Attack Defense module installed.
Exchange Protection
The Exchange scan was not working correctly. This issue has been fixed.
Product
The Relay agent failed to properly remove old installation kits, leading to high disk usage.
The Sysprep tool did not work properly on endpoints with product version 7.8.3.x and higher.
Version 7.9.2.290
Release date:
Fast ring: 2023.06.08
Slow ring: 2023.06.13
Important
This version also includes on slow ring the improvements and fixes delivered with the Bitdefender Endpoint Security Tools version 7.9.2.289 released on fast ring.
During this update, the Microsoft Exchange Transport service will be stopped.
New features and improvements
Antimalware
You can now create certificate hash exclusions for PowerShell scripts.
Live search
Osquery has been upgraded to version 5.8.1.
Product
Added support for upcoming features available with the next major GravityZone release.
Added support for removing the following incompatible security products:
CrystalIDEA Uninstall Tool 3.x
Sophos Endpoint Agent, version 2022.4.x
Resolved issues
Firewall
In some cases, the Firewall module blocked applications already excluded in the policy.
Patch Management
The module postponed the application of patches if the Relay server was not reachable.
Antimalware
The module could not quarantine Java Archive files, even though the archives could be deleted.
Network Protection
The Network Protection module prevented browsers from accessing web pages when Web Access Control was enabled. The issue occurred after updating the security agent to version 7.9.2.289, released on fast ring.
Product
The local console failed to open when accessed from Start Menu. The issue occurred after updating the security agent to version 7.9.1.285.
The local console displayed the default contact information for technical support when the language was changed, instead of the details defined in the policy.
Version 7.9.2.289
Release date:
Fast ring: 2023.06.06
Slow ring: -
Important
During this update, the Microsoft Exchange Transport service will be stopped.
New features and improvements
Antimalware
You can now create certificate hash exclusions for PowerShell scripts.
Live search
Osquery has been upgraded to version 5.8.1.
Product
Added support for upcoming features available with the next major GravityZone release.
Added support for removing the following security products:
CrystalIDEA Uninstall Tool 3.x
Sophos Endpoint Agent, version 2022.4.x
Resolved issues
Firewall
In some cases, the Firewall module blocked applications already excluded in the policy.
Patch Management
The module postponed the application of patches if the Relay server was not reachable.
Antimalware
The module could not quarantine Java Archive files, even though the archives could be deleted.
Product
The local console failed to open when accessed from Start Menu. The issue occurred after updating the security agent to version 7.9.1.285.
The local console displayed the default contact information for technical support when the language was changed, instead of the details defined in the policy.
Version 7.9.1.285
Release date:
Fast ring: 2023.05.16
Slow ring: 2023.05.17
Important
This version also includes on slow ring the improvements and fixes delivered with the Bitdefender Endpoint Security Tools versions 7.9.1.280, 7.9.1.281 and 7.9.1.283 released on fast ring.
During this update, the Microsoft Exchange Transport service will be stopped.
New features and improvements
Advanced Anti-Exploit
Bitdefender has optimized LSASS detection reporting for less traffic and less disk space required to store events on endpoints.
Integrity Monitoring
The endpoint users are no longer distracted by Integrity Monitoring status alerts whenever a Suspend or Resume task runs.
Product
Added support for upcoming features available with the next major GravityZone release.
Resolved issues
Antimalware
The Antimalware module caused a system slowdown when copying files from network shares.
Custom scan displayed incorrect paths in the local scan log when multiple scan tasks occurred at the same time.
Advanced Threat Control
Addressed an issue where Advanced Threat Control caused critical errors (BSOD) after updating to version 7.9.1.280 released on fast ring.
Live search
The Live Search feature was unavailable on endpoints although it was enabled in the policy.
Network Protection
The security agent blocked Remote Desktop connections when the Network Attack Defense module was enabled in the policy along with the Scan RDP option.
Content Control
In a particular case, the Content Control module prevented PDF files from being downloaded from a website. The website remained in a loading state and eventually displayed the page as inaccessible.
Events generated by the Data Protection rules displayed IPs instead of web addresses when keyword filters were added for web traffic.
Policies
The default policy was assigned on endpoints instead of the correct policy when assignment rules applied. The default policy did not contain the previous assignment rules.
Product
Multiple managed endpoints could not communicate with the GravityZone console and were listed as unmanaged.
The logging session started when gathering support tool logs using command line or from the GravityZone console remained active for long periods of time.
Addressed a specific scenario where the product caused critical errors (BSOD). The issue is now fixed.
Version 7.9.1.283
Release date:
Fast ring: 2023.05.10
Slow ring: -
Important
During this update, the Microsoft Exchange Transport service will be stopped.
Resolved issues
Advanced Threat Control
Addressed an issue where Advanced Threat Control caused critical errors (BSOD) after updating to version 7.9.1.280 released on fast ring.
Version 7.9.1.281
Release date:
Fast ring: 2023.05.08
Slow ring: -
Important
During this update, the Microsoft Exchange Transport service will be stopped.
Resolved issues
Content Control
Events generated by the Data Protection rules displayed IPs instead of web addresses when keyword filters were added for web traffic.
Version 7.9.1.280
Release date:
Fast ring: 2023.04.26
Slow ring: -
Important
During this update, the Microsoft Exchange Transport service will be stopped.
New features and improvements
Integrity Monitoring
The endpoint users are no longer distracted by Integrity Monitoring status alerts whenever a Suspend or Resume task runs.
Product
Added support for upcoming features available with the next major GravityZone release.
Resolved issues
Live search
The Live Search feature was unavailable on endpoints although it was enabled in the policy.
Network Protection
The security agent blocked Remote Desktop connections when the Network Attack Defense module was enabled in the policy along with the Scan RDP option.
Content Control
In a particular case, the Content Control module prevented PDF files from being downloaded from a website. The website remained in a loading state and eventually displayed the page as inaccessible.
Antimalware
Custom scan displayed incorrect paths in the local scan log when multiple scan tasks occurred at the same time.
Policies
The default policy was assigned on endpoints instead of the correct policy when assignment rules applied. The default policy did not contain the previous assignment rules.
Product
Multiple managed endpoints could not communicate with the GravityZone console and were listed as unmanaged.
The logging session started when gathering support tool logs using command line or from the GravityZone console remained active for long periods of time.
Addressed a specific scenario where the product caused critical errors (BSOD). The issue is now fixed.
Version 7.8.4.270
Release date:
Fast ring: 2023.03.29
Slow ring: 2023.04.04
Important
This version also includes on slow ring the improvements and fixes delivered with the Bitdefender Endpoint Security Tools version 7.8.4.269 released on fast ring.
During this update, the Microsoft Exchange Transport service will be stopped.
Resolved issues
Patch Management
The Bitdefender Endpoint Security Service crashed during Patch Management assessment when unavailable patches were returned. The issue occurred on endpoints with version 7.8.4.269, released on fast ring.
Microsoft Office 365 was not included in the Patch Management scan. This issue is now fixed.
Policies
Policies were not being assigned on endpoints when using a location assignment rule with hostname.
Product
An incorrect path was created when installing security agents with Relay role. This behavior led to inaccurate rules in Windows Firewall and affected versions starting with 7.7.2.x.
The security agent installation crashed on Windows Server 2016 endpoints with a very large number of certificates.
Removed features
Product
Live Search is no longer supported for x86 architecture endpoints.
Version 7.8.4.269
Release date:
Fast ring: 2023.03.28
Slow ring: -
Important
During this update, the Microsoft Exchange Transport service will be stopped.
Resolved issues
Policies
Policies were not being assigned on endpoints when using a location assignment rule with hostname.
Patch Management
Microsoft Office 365 was not included in the Patch Management scan. This issue is now fixed.
Product
An incorrect path was created when installing security agents with Relay role. This behavior led to inaccurate rules in Windows Firewall and affected versions starting with 7.7.2.x.
The security agent installation crashed on Windows Server 2016 endpoints with a very large number of certificates.
Removed features
Product
Live Search is no longer supported for x86 architecture endpoints.
Version 7.8.3.265
Release date:
Fast ring: 2023.03.09
Slow ring: 2023.03.13
Important
During this update, the Microsoft Exchange Transport service will be stopped.
Resolved issues
Content Control
The Content Control exclusions did not work properly when using a blocking action in Web Access Control Scheduler on endpoints with product version 7.8.3.263.
Version 7.8.3.263
Release date:
Fast ring: 2023.03.01
Slow ring: 2023.03.08
Important
This version also includes on slow ring the improvements and fixes delivered with the Bitdefender Endpoint Security Tools version 7.8.3.259 released on fast ring.
During this update, the Microsoft Exchange Transport service will be stopped.
New features and improvements
Live Search
You can now execute Live Search queries using the command line interface. The Live Search feature is part of the Early Access programs.
Product
Security content updates are now automatically performed with each product update to ensure optimal performance.
Added support for upcoming features available with the next major GravityZone release.
Bitdefender Endpoint Security Tools has removed some processes and folders from the exclusions lists on Exchange servers to improve performance and stability. For more information, refer to the official Microsoft documentation.
Resolved issues
Advanced Threat Control
In certain scenarios, endpoints encountered critical errors (BSOD) when the Advanced Threat Control module was active.
Content Control
Fixed an issue that caused Content Control to create a temporary Windows profile for automatic logins.
The Content Control module prevented the GravityZone console from properly reporting blocked web addresses and the applied web rules in the Blocked Websites report.
Antimalware
Removed the unused caching database files on partitions smaller than 1GB.
Fixed an issue where the Antimalware module failed to report detections of infected browser plugins in certain scenarios.
Endpoint Detection and Response
Fixed an issue that caused cached DNS servers to be used for EDR submission.
Integrity Monitoring
Fixed an issue that caused Integrity Monitoring to generate empty reports.
Product
The security agent caused high CPU usage on Microsoft Windows Server 2019.
Version 7.8.3.259
Release date:
Fast ring: 2023.02.23
Slow ring: -
Important
During this update, the Microsoft Exchange Transport service will be stopped.
New features and improvements
Live Search
You can now execute Live Search queries using the command line interface. The Live Search feature is part of the Early Access programs.
Product
Security content updates are now automatically performed with each product update to ensure optimal performance.
Added support for upcoming features available with the next major GravityZone release.
Resolved issues
Advanced Threat Control
In certain scenarios, endpoints encountered critical errors (BSOD) when the Advanced Threat Control module was active.
Content Control
Fixed an issue that caused Content Control to create a temporary Windows profile for automatic logins.
The Content Control module prevented the GravityZone console from properly reporting blocked web addresses and the applied web rules in the Blocked Websites report.
Antimalware
Removed the unused caching database files on partitions smaller than 1GB.
Fixed an issue where the Antimalware module failed to report detections of infected browser plugins in certain scenarios.
Endpoint Detection and Response
Fixed an issue that caused cached DNS servers to be used for EDR submission.
Integrity Monitoring
Fixed an issue that caused Integrity Monitoring to generate empty reports.
Product
The security agent caused high CPU usage on Microsoft Windows Server 2019.
Version 7.8.2.254
Release date:
Fast ring: 2023.02.06
Slow ring: 2023.02.06
Important
During this update, the Microsoft Exchange Transport service will be stopped.
Resolved issues
Network Attack Defense
Fixed an issue that prevented the Network Attack Defense module from updating security content.
Version 7.8.2.248
Release date:
Fast ring: 2023.01.26
Slow ring: 2023.02.02
Important
During this update, the Microsoft Exchange Transport service will be stopped.
Resolved issues
Policies
GravityZone assigned the default policy instead of the new policy when applying new assignment rules.
Security for Exchange
Fixed an issue that prevented policies from being applied to endpoints.
Antimalware
Fixed an issue that caused the security agent to create database registry files on partitions smaller than 1 GB.
In certain scenarios, endpoints encountered critical errors (BSOD) when the Antimalware module was active.
Fixed an issue that caused the Antimalware module to prompt users to take actions on clean files.
Relay
Fixed an issue that prevented the Reconfigure Client task from being applied to BEST Linux endpoints when using Windows Relay as an update server.
Content Control
Fixed an issue that prevented Content Control from blocking websites on newer editions Windows Server 2019 and Windows Server 2022.
Product
The security agent caused high CPU usage on Microsoft Windows Server 2019.
Version 7.8.1.244
Release date:
Fast ring: 2023.01.03
Slow ring: 2023.01.10
Important
This version also includes on slow ring the improvements and fixes delivered with the Bitdefender Endpoint Security Tools versions 7.7.2.230 and 7.8.1.241 released on fast ring.
During this update, the Microsoft Exchange Transport service will be stopped.
New features and improvements
Product
The security agent now automatically scans USB devices before users log into the Windows system.
Added support for Windows 11 Enterprise Multi-Session (22H2).
Added support for Windows ARM64 CPUs. The following features are supported:
Antimalware
HyperDetect
Firewall
Content Control
Network Attack Defense
Integrity Monitoring
Device Control
Full Disk Encryption
Sandbox Analyzer
Endpoint Risk Analytics
Endpoint Detection and Response
eXtended Detection and Response (available only for GravityZone Cloud)
The following features are not yet supported:
Advanced Anti-Exploit
Patch Management
Application Control (available only for GravityZone On-Premise)
Power User
Security for Exchange
Security Server - the Relay role
Support for these features on Windows ARM64 will be added in time.
Note
On endpoints with ARM64 CPUs, Bitdefender Endpoint Security Tools supports only Windows 10 and Windows 11.
Bitdefender Endpoint Security Tools is available for ARM64 CPUs only through the Windows downloader.
Resolved issues
Product
In some cases, the Bitdefender Endpoint Protected Service generated high RAM usage after updating endpoints to version 7.8.1.241.
Bitdefender EDR
Fixed an issue that caused multiple website false positives when using Bitdefender EDR.
Version 7.8.1.241
Release date:
Fast ring: 2022.12.13
Slow ring: -
Important
During this update, the Microsoft Exchange Transport service will be stopped.
New features and improvements
Product
The security agent now automatically scans USB devices before users log into the Windows system.
Added support for Windows 11 Enterprise Multi-Session (22H2).
Version 7.7.2.230
Release date:
Fast ring: 2022.11.24
Slow ring: -
Important
During this update, the Microsoft Exchange Transport service will be stopped.
Resolved issues
Bitdefender EDR
Fixed an issue that caused multiple website false positives when using Bitdefender EDR.
Version 7.7.2.228
Release date:
Fast ring: 2022.11.15
Slow ring: 2022.11.17
Important
This version also includes on slow ring the improvements and fixes delivered with the Bitdefender Endpoint Security Tools version 7.7.2.227 released on fast ring.
During this update, the Microsoft Exchange Transport service will be stopped.
New features and improvements
Firewall
The default Firewall driver has changed.
Product
Added support for upcoming features available with the next major GravityZone release.
The information window title now reflects the product name.
The Crypto Miner threat detection has been added.
The Power User module is now available in Vietnamese.
Resolved issues
Network Protection
Fixed an issue that prevented users from accessing specific websites while the SSL Scan option was enabled.
Advanced Threat Control
In some situations, the Advanced Threat Control module caused high memory usage and performance issues.
Fixed an issue that caused the Bitdefender Endpoint Security Service to crash when Advanced Threat Control was installed.
Exchange Protection
Fixed an issue that caused Exchange Protection to mark multiple valid emails as spam.
Product
Fixed an issue that prevented the security agent from detecting samples during unpacking archived files.
Version 7.7.2.227
Release date:
Fast ring: 2022.11.10
Slow ring: -
Important
During this update, the Microsoft Exchange Transport service will be stopped.
New features and improvements
Firewall
The default Firewall driver has changed.
Product
Added support for upcoming features available with the next major GravityZone release.
The information window title now reflects the product name.
The Crypto Miner threat detection has been added.
The Power User module is now available in Vietnamese.
Resolved issues
Network Protection
Fixed an issue that prevented users from accessing specific websites while the SSL Scan option was enabled.
Advanced Threat Control
In some situations, the Advanced Threat Control module caused high memory usage and performance issues.
Exchange Protection
Fixed an issue that caused Exchange Protection to mark multiple valid emails as spam.
Product
Fixed an issue that prevented the security agent from detecting samples during unpacking archived files.
Version 7.7.1.216
Release date:
Fast ring: 2022.09.21
Slow ring: 2022.09.28
Important
During this update, the Microsoft Exchange Transport service will be stopped.
New features and improvements
Content Control
Content Control detection events now contain details about the web categories of blocked websites. You can view these categories in the Event log section.
Product
Added support for upcoming features available with the next major GravityZone release.
Resolved issues
Antimalware
The product was causing high disk usage when scanning certain SSD drives.
Firewall
Fixed an issue that was causing network disconnects for Intel-based NICs.
EDR Sensor
Fixed an issue that caused the IP addresses of the source of remote Windows logins (RDP) to not be recorded.
Version 7.6.3.212
Release date:
Fast ring: 2022.09.06
Slow ring: 2022.09.19
Important
During this update, the Microsoft Exchange Transport service will be stopped.
Resolved issues
Product
Fixed an issue that prevented endpoints from being displayed in the Amazon EC2 Integration.
Security fixes.
Version 7.6.3.211
Release date:
Fast ring: 2022.08.30
Slow ring: 2022.08.30
Important
This version also includes on slow ring the improvements and fixes delivered with the Bitdefender Endpoint Security Tools version 7.6.3.210 released on fast ring.
During this update, the Microsoft Exchange Transport service will be stopped.
New features and improvements
Product
Added support for upcoming features available with the next major GravityZone release.
Resolved issues
Product
In some situations, endpoints failed to reflect the scan mode set through a Reconfigure Client task. The issue occurred on version 7.6.3.210, released on fast ring.
Security fixes.
Advanced Threat Control
Addressed an issue where the Advanced Threat Control feature caused critical errors (BSOD).
Endpoint Detection and Response
Fixed an issue that prevented the Endpoint Detection and Response module from displaying the correct hostname of remote attackers.
Version 7.6.3.210
Release date:
Fast ring: 2022.08.24
Slow ring: -
Important
During this update, the Microsoft Exchange Transport service will be stopped.
New features and improvements
Product
Added support for upcoming features available with the next major GravityZone release.
Resolved issues
Advanced Threat Control
Addressed an issue where the Advanced Threat Control feature caused critical errors (BSOD).
Endpoint Detection and Response
Fixed an issue that prevented the Endpoint Detection and Response module from displaying the correct hostname of remote attackers.
Product
Security fixes.
Version 7.6.2.207
Release date:
Fast ring: 2022.07.27
Slow ring: 2022.08.03
Important
During this update, the Microsoft Exchange Transport service will be stopped.
New features and improvements
Product
Added support for upcoming features available with the next major GravityZone release.
Patch Management
You can now see when a patch installation is in progress. The event is available in the Event log whenever a new installation begins.
Resolved issues
Firewall
Fixed an issue that caused network disconnects for Intel-based network interface cards.
Exchange Protection
Fixed an issue that prevented Exchange Malware Detected notifications from being received in the console or by email.
Network Attack Defense
The Network Attack Defense module prevented domain joined endpoints from receiving group policies.
Content Control
Fixed an issue that caused filtering inconsistencies for web categories across multiple Windows 10 endpoints.
Patch Management
In some situations, the patch installation was performed outside the scheduled interval set in the maintenance window.
Version 7.6.1.203
Release date:
Fast ring: 2022.07.12
Slow ring: 2022.07.13
Important
During this update, the Microsoft Exchange Transport service will be stopped.
Resolved issues
Product
Endpoints that have used installation kits with versions up to 6.6.16.222 failed to complete maintenance operations such as uninstall, or reconfigure, after updating to version 7.6.1.202. This is now fixed.
Version 7.6.1.202
Release date:
Fast ring: 2022.06.28
Slow ring: 2022.07.05
Important
During this update, the Microsoft Exchange Transport service will be stopped.
New features and improvements
Product
Bitdefender Endpoint Security Tools is now available in Japanese language.
Added support for removing the following incompatible security products:
Trend Micro Apex One Security Agent 14.x
Qi An Xin Enterprise Security Assistant
Resolved issues
Product
Fixed an issue that affected a few product files after an unexpected shut down.
Network Protection
Exclusions created using wildcards failed to work properly for websites with invalid certificates.
Antimalware
The Antimalware module displayed On-Access as disabled in the local interface even though it was enabled in the policy.
Power User
The Remarks column was displayed when accessing a policy with Power User however, it contained no information. The column is now available only in the GravityZone console.
Policies
Fixed an issue that caused rule-based policies to change constantly.
Version 7.5.3.195
Release date:
Fast ring: 2022.06.09
Slow ring: 2022.06.15
Important
During this update, the Microsoft Exchange Transport service will be stopped.
Resolved issues
Product
In some cases, the security content update process resulted in error code
-1016
. The issue is now fixed.
EDR
Fixed an issue that prevented the EDR module from generating incidents for remote Latent Semantic Analysis (LSA) dumps.
Version 7.5.3.192
Release date:
Fast ring: 2022.05.27
Slow ring: 2022.05.30
Important
This version also includes on slow ring the improvements and fixes delivered with the Bitdefender Endpoint Security Tools version 7.5.3.190 released on fast ring.
During this update, the Microsoft Exchange Transport service will be stopped.
New features and improvements
Product
Bitdefender Endpoint Security Tools is now available in Vietnamese language.
Resolved issues
Product
The security agent was not displayed as running in Windows Security Center after updating to version 7.5.3.190 released on fast ring.
In some situations, the security agent failed to display the Exchange Protection module in the local interface even if the module was installed and running.
Policies
Fixed an issue that caused assignment rules to apply incorrectly.
Network Protection
The module scanned multiple secure connections resulting in error
400 Bad Request
. The issue is now fixed.
Patch Management
Fixed an issue that prevented scheduled patch scans and deployments to run properly.
Version 7.5.3.190
Release date:
Fast ring: 2022.05.24
Slow ring: -
Important
During this update, the Microsoft Exchange Transport service will be stopped.
New features and improvements
Product
Bitdefender Endpoint Security Tools is now available in Vietnamese language.
Resolved issues
Policies
Fixed an issue that caused assignment rules to apply incorrectly.
Network Protection
The module scanned multiple secure connections resulting in error
400 Bad Request
. The issue is now fixed.
Patch Management
Fixed an issue that prevented scheduled patch scans and deployments to run properly.
Product
In some situations, the security agent failed to display the Exchange Protection module in the local interface even if the module was installed and running.
Version 7.5.2.186
Release date:
Fast ring: 2022.05.02
Slow ring: 2022.05.09
Important
During this update, the Microsoft Exchange Transport service will be stopped.
New features and improvements
Patch Management
Software applications are now visible in the Event log section. Under Patch Management events you can see successfully installed patches, patches that require a reboot, or failed installations.
Now users can choose between multiple time intervals to postpone a system restart. They can postpone a reboot until a more convenient time up to one day.
Product
Added support for upcoming features available with the next major GravityZone release.
Resolved issues
Patch Management
The Patch Caching Server failed to download patches and caused high CPU usage.
Antimalware
On-demand scans affected the indexing service of Windows 11 systems resulting in a reset of indexed items. After this, the Windows indexing process started automatically from the beginning.
Product
When installed the security agent removed the Xpient update service due to incompatibility with the application. The issue is now fixed.
Version 7.5.1.177
Release date:
Fast ring: 2022.04.05
Slow ring: 2022.04.11
Important
This version also includes on slow ring the improvements and fixes delivered with the Bitdefender Endpoint Security Tools version 7.5.1.172 released on fast ring.
During this update, the Microsoft Exchange Transport service will be stopped.
New features and improvements
Content Control
The Content Control module is now available for Windows servers including Citrix virtual apps and desktops and is designed to monitor user session traffic. For existing installations, the module is available through a Reconfigure Client task, while new installations require packages configured accordingly. For more information refer to Content Control on Windows servers.
Resolved issues
All fixes previously delivered for workstations with version 7.5.1.172 are now also available for servers.
Security fixes.
Version 7.5.1.172
Release date:
Fast ring: 2022.03.29
Slow ring: -
Important
During this update, the Microsoft Exchange Transport service will be stopped.
This update applies only to Windows workstations on fast ring.
Resolved issues
Advanced Anti-Exploit
Advanced Anti-Exploit was blocking the installation of CAB files.
Patch Management
Patch Management was skipping patch downloading when additional actions were required, such as accepting EULA terms.
The module was causing high CPU usage on the Relay machine when the Patch Caching Server could not download patches requested by a large number of endpoints.
Policies
Fixed an issue that was causing the assignment rules to be applied incorrectly.
Certain hosts would have the default policy as active, instead of the custom one which had been assigned to them.
Product
Update Server was failing to tunnel HTTPS connections when another proxy was set up in the user's OS.
Epprotectedservice.exe
would not run after upgrading from Windows 7 to Windows 10.In some circumstances, the endpoints could not communicate with the Control Center.
Minor translation change related to German GUI label.
Fixed an issue that was causing
analysecrash.exe
to crash.In some cases, GravityZone did not display the correct MAC address.
Vlflt.sys
was causing the exchange server to crash.Too many DNS requests were being generated when verifying IP addresses.
Version 7.4.4.159
Release date:
Fast ring: 2022.02.16
Slow ring: 2022.03.07
Important
During this update, the Microsoft Exchange Transport service will be stopped.
New features and improvements
eXtended Detection and Response (XDR)
Added support for the new Active Directory sensor that can be configured to collect and process user login information.
Version 7.4.3.146
Release date:
Fast ring: 2022.01.27
Slow ring: 2022.02.02
Important
During this update, the Microsoft Exchange Transport service will be stopped.
New features and improvements
Full Disk Encryption
The Full Disk Encryption configuration window now uses an enhanced font color providing more visibility and easier focus to users.
Resolved issues
Endpoint Detection and Response (EDR)
The Bitdefender Endpoint Protected Service caused high CPU usage on a few Windows Server 2012 systems with the Endpoint Detection and Response module enabled.
Fixed an issue that prevented endpoints communicating through Relay from sending EDR incidents to Control Center.
The EDR incidents submission was failing when endpoints lacked DNS server configuration.
Ransomware Mitigation
In a corner case scenario, the Ransomware Mitigation module caused false positive detections.
Endpoint Risk Analytics (ERA)
Vulnerable applications could not be patched using the Patch App button from the App Vulnerabilities section, even though the Patch Management module was licensed and properly configured.
Product
In some cases, endpoints failed to communicate with the GravityZone console when using an IPv6 to IPv4 VPN tunneling.
In a particular situation, Microsoft Hyper-V Server 2016 machines were incorrectly displayed in the GravityZone console as Linux systems.
Security fixes.
Version 7.4.2.142
Release date:
Fast ring: 2022.01.04
Slow ring: 2022.01.05
Important
During this update, the Microsoft Exchange Transport service will be stopped.
Resolved issues
Product
In some situations, the Support Tool feature used for troubleshooting collected and removed directories located at the same destination path as the saved logs. The issue was encountered only when running the tool locally using command line or the executable file.
Product installation remained in pending in a ConnectWise Automate environment integrated with GravityZone.
Version 7.4.2.130
Release date:
Fast ring: 2021.12.15
Slow ring: 2021.12.16
Important
During this update, the Microsoft Exchange Transport service will be stopped.
Resolved issues
Product
Endpoints communication with GravityZone console via proxy failed after updating to product version 7.4.1.111.
Version 7.4.1.111 (EFX)
Release date:
Fast ring: 2021.12.09
Slow ring: 2021.12.09
Important
During this update, the Microsoft Exchange Transport service will be stopped.
Resolved issues
Product
In some cases, the Bitdefender services failed to work properly after updating to the latest product version.
Version 7.4.1.111
Release date:
Fast ring: 2021.12.02
Slow ring: 2021.12.08
Important
This version replaces 7.2.x and 7.3.x versions in the market.
During this update, the Microsoft Exchange Transport service will be stopped.
New features and improvements
Antimalware
Added support for Windows Antimalware Scan Interface (AMSI) scanning.
Note
AMSI scanning is available with the Fileless Attack Protection feature for GravityZone Elite and Ultra products.
The Ransomware Mitigation remote detection messages now include threat name.
eXtended Detection and Response (XDR)
Added support for the Investigation Package functionality.
Patch Management
Added support for new features:
Extended scheduling capabilities
Exclusions from the vendors and products list
User interface
The product has now a modern look that matches the GravityZone console interface.
Resolved issues
Advanced Threat Control
The Advanced Threat Control module caused Microsoft Outlook to stop functioning when opening the application or answering an email.
Installation
Microsoft Monitoring Agent is no longer included in the competitor removal list, thus preventing possible errors during installation.
Version 7.3.100.48
Release date:
Fast ring: 2021.12.02
Slow ring: 2021.12.08
Important
During this update, the Microsoft Exchange Transport service will be stopped.
New features and improvements
Product
This version enables migration of current 7.3.x installations to Bitdefender Endpoint Security Tools version 7.4.1.111.
Version 7.2.2.101
Release date:
Fast ring: 2021.11.15
Slow ring: 2021.11.16
Important
During this update, the Microsoft Exchange Transport service will be stopped.
Resolved issues
Product
Security fixes.
Version 7.3.2.45
Release date:
Fast ring: 2021.12.16
Slow ring: 2021.12.20
Important
During this update, the Microsoft Exchange Transport service will be stopped.
Resolved issues
Product
Security fixes.
Version 7.3.2.44
Release date:
Fast ring: 2021.10.21
Slow ring: 2021.10.25
Important
During this update, the Microsoft Exchange Transport service will be stopped.
This version also includes on slow ring the improvements and fixes delivered with the Bitdefender Endpoint Security Tools version 7.3.1.42 released on fast ring.
New features and improvements
Product
Bitdefender Endpoint Security Tools is now available in a new interface. The new design focuses on improved readability and includes a modern color scheme to emphasize events and overall information. The security agent functionality remains unchanged.
Added support for the new features delivered with the upcoming release of GravityZone.
Antimalware
Added support for the new Resume scan after product update option available in GravityZone Control Center. With this feature enabled, the endpoint automatically resumes On-Demand scan tasks if interrupted by product updates.
Network Protection
The security agent now supports SSL scanning for RDP protocol.
Resolved issues
Product
In some cases, the security agent caused high RAM memory usage on Windows 10 systems with version 7.2.2.92. The issue is now fixed.
Version 7.3.1.42
Release date:
Fast ring: 2021.10.18
Slow ring: -
Important
During this update, the Microsoft Exchange Transport service will be stopped.
New features and improvements
Antimalware
Added support for the new Resume scan after product update option available in GravityZone Control Center. With this feature enabled, the endpoint automatically resumes On-Demand scan tasks if interrupted by product updates.
Network Protection
The security agent now supports SSL scanning for RDP protocol.
Version 7.3.0.24
Release date:
Fast ring: 2021.09.24
Slow ring: 2021.10.04
Important
During this update, the Microsoft Exchange Transport service will be stopped.
This version also includes on slow ring the improvements and fixes delivered with the Bitdefender Endpoint Security Tools version 7.3.0.22 released on fast ring.
Resolved issues
Product
Starting with 7.3.0.22, existing installations are migrated to the latest product version 7.3.x that includes technology replacements. The rollout will be performed progressively on fast ring and then slow ring.
Security fixes.
Version 7.2.2.92
Release date:
Fast ring: 2021.09.22
Slow ring: 2021.09.27
Important
During this update, the Microsoft Exchange Transport service will be stopped.
Resolved issues
Product
Security fixes.
Version 7.3.0.22
Release date:
Fast ring: 2021.09.15
Slow ring: -
Important
During this update, the Microsoft Exchange Transport service will be stopped.
New features and improvements
Product
Starting with this update, existing installations are migrated to the latest product version 7.3.x that includes technology replacements. The rollout will be performed progressively on fast ring and then slow ring.
Version 7.2.2.90
Release date:
Fast ring: 2021.09.07
Slow ring: 2021.09.08
Important
During this update, the Microsoft Exchange Transport service will be stopped.
This version also includes on slow ring the improvements and fixes delivered with the Bitdefender Endpoint Security Tools version 7.2.2.87 released on fast ring.
Resolved issues
Product
In some cases, the agent installation failed on endpoints with Windows Defender enabled. The issue is now fixed.
In a particular scenario, the communication with the GravityZone Control Center failed after performing a Reconfigure Client task on endpoints with version 7.2.2.84 or 7.2.2.86 released on fast ring.
Version 7.2.2.87
Release date:
Fast ring: 2021.08.31
Slow ring: -
Important
During this update, the Microsoft Exchange Transport service will be stopped.
Resolved issues
Product
In a particular scenario, the communication with the GravityZone Control Center failed after performing a Reconfigure Client task on endpoints with version 7.2.2.84 or 7.2.2.86 released on fast ring.
Version 7.2.2.86
Release date:
Fast ring: 2021.08.25
Slow ring: 2021.08.25
Important
New features and improvements
Advanced Threat Control
Improved the security content mechanism for Advanced Threat Control.
Resolved issues
Product
Endpoint Security Console Service crashed after installing the security agent on a different partition on Windows Server 2012.
Addressed a specific scenario where the product caused critical errors (BSOD). The issue is now fixed.
Endpoint Security Console Service randomly created a certain file on endpoints.
Fixed an incorrect Korean translation displayed in the local interface.
Content Control
The Content Control module led to a slowdown when downloading files from the network share.
Version 7.2.2.85
Release date:
Fast ring: 2021.08.23
Slow ring: -
Important
During this update, the Microsoft Exchange Transport service will be stopped.
Resolved issues
Product
Endpoint Security Console Service crashed after installing the security agent on a different partition on Windows Server 2012.
Version 7.2.2.84
Release date:
Fast ring: 2021.08.17
Slow ring: -
Important
During this update, the Microsoft Exchange Transport service will be stopped.
Resolved issues
Content Control
The Content Control module led to a slowdown when downloading files from the network share.
Product
Addressed a specific scenario where the product caused critical errors (BSOD). The issue is now fixed.
Endpoint Security Console Service randomly created a certain file on endpoints.
Fixed an incorrect Korean translation displayed in the local interface.
Version 7.2.1.73
Release date:
Fast ring: 2021.07.27
Slow ring: 2021.07.28
Important
During this update, the Microsoft Exchange Transport service will be stopped.
Resolved issues
Product
The Bitdefender Endpoint Security Service generated high RAM usage when the endpoint received new policy settings.
Version 7.2.1.72
Release date:
Fast ring: 2021.07.19
Slow ring: 2021.07.19
Important
This version also includes on slow ring the improvements and fixes delivered with the Bitdefender Endpoint Security Tools version 7.2.1.70, released on fast ring.
During this update, the Microsoft Exchange Transport service will be stopped.
New features and improvements
Advanced Threat Control
Advanced Threat Control has now multiple detection heuristics for the recently disclosed Print Nightmare vulnerability.
Resolved issues
Endpoint Detection and Response (EDR)
The EDR module generated invalid incidents for quarantined items.
Version 7.2.1.70
Release date:
Fast ring: 2021.07.15
Slow ring: -
Important
During this update, the Microsoft Exchange Transport service will be stopped.
New Features and Improvements
Advanced Threat Control
Advanced Threat Controlhas now multiple detection heuristics for the recently disclosed Print Nightmare vulnerability.
Version 7.2.1.69
Release date:
Fast ring: 2021.07.02
Slow ring: 2021.07.02
Important
During this update, the Microsoft Exchange Transport service will be stopped.
New Features and Improvements
Product
Addressed a specific scenario where the product caused critical errors (BSOD) after updating to version 7.2.1.65 released on slow ring.
Version 7.2.1.65
Release date:
Fast ring: 2021.06.30
Slow ring: 2021.07.01
Important
New features and improvements
Control Center
Added support for the new features.
We have revamped our built-in exclusions feature by offering GravityZone Administrators the possibility of choosing from several exclusions categories pertaining to different product vendors.
The following categories will be supported by the endpoint:
Citrix
Microsoft Exchange Server (including all Exchange versions)
Microsoft Sharepoint
Microsoft SQL Server (including all SQL Server versions + SQL Server Common)
Microsoft Windows (all versions)
Microsoft Operations Manager (including all versions of Operations Manager)
Microsoft Data Protection Manager
Microsoft Team Foundation Server
Microsoft Hyper-V
Microsoft System Center Configuration Manager
Microsoft System Center Operations Manager
VMware
Resolved issues
Advanced Threat Control
In some cases, the Advanced Threat Control module caused critical errors (BSOD).
Fixed SCOM issues caused by an interaction between the Advanced Threat Control module and WMI.
Product
Security fixes.
In certain scenarios, after logging in to a machine, a BEST pop-up window appeared displaying a series of uncanny words.
Patch Management
Scanning for missing patches could have led in the past to inaccurate results when updates required system reboot.
Graphic user interface
Fixed an issue where the Custom Scan options could not be reconfigured.
Content Control
The Content Control module caused a slowdown in the file download speed for a copy and paste action in network shares.
Content Control incorrectly blocked an application with a process name similar to another blacklisted application.
The Content Control module allowed access to an online radio stream on a Windows 10 virtual machine, even if the page appeared to be blocked from the User Control rules.
Version 7.2.1.62
Release date:
Fast ring: 2021.06.28
Slow ring: -
Important
During this update, the Microsoft Exchange Transport service will be stopped.
Resolved issues
Advanced Threat Control
Fixed SCOM issues caused by an interaction between the Advanced Threat Control module and WMI.
Version 7.2.1.60
Release date:
Fast ring: 2021.06.23
Slow ring: -
Important
During this update, the Microsoft Exchange Transport service will be stopped.
New features and improvements
Control Center
Added support for the new features.
We have revamped our built-in exclusions feature by offering GravityZone Administrators the possibility of choosing from several exclusions categories pertaining to different product vendors.
The following categories will be supported by the endpoint:
Citrix
Microsoft Exchange Server (including all Exchange versions)
Microsoft Sharepoint
Microsoft SQL Server (including all SQL Server versions + SQL Server Common)
Microsoft Windows (all versions)
Microsoft Operations Manager (including all versions of Operations Manager)
Microsoft Data Protection Manager
Microsoft Team Foundation Server
Microsoft Hyper-V
Microsoft System Center Configuration Manager
Microsoft System Center Operations Manager
VMware
Resolved issues
General
In certain scenarios, after logging in to a machine, a BEST pop-up window appeared displaying a series of uncanny words.
Patch Management
Scanning for missing patches could have led in the past to inaccurate results when updates required system reboot.
Graphic user interface
Fixed an issue where the Custom Scan options could not be reconfigured.
Content Control
The Content Control module caused a slowdown in the file download speed for a copy and paste action in network shares.
Content Control incorrectly blocked an application with a process name similar to another blacklisted application.
The Content Control module allowed access to an online radio stream on a Windows 10 virtual machine, even if the page appeared to be blocked from the User Control rules.
Version 7.1.2.33
Release date:
Fast ring: 2021.05.25
Slow ring: 2021.06.02
New features and improvements
Product
Bitdefender Endpoint Security Tools is now available in Turkish language.
Resolved issues
Product
The Content Control module did not display a proper Back action button in the Power User graphic user interface.
Application Control
Some applications could be opened at login time even if Application Control was configured to block them.
Advanced Threat Control
Enabling the Ransomware Mitigation feature determined a system slowdown when trying to save Excel files on a file server.
Security for Exchange
When only having only the TLS 1.2 protocol activated, restoring quarantined emails generated error code 1001.
Firewall
A memory leak from the Firewall module generated a RAM usage increase.
Full Disk Encryption
In certain scenarios, the Full Disk Encryption module maintained the BitLocker feature suspended.
General
In a corner case, changing the scanning engines from Central Scan to Local Scan through the Reconfigure Client task was successful but in GravityZone the value remains the same.
Version 7.1.1.28
Release date:
Fast ring: 2021.05.18
Slow ring: 2021.05.19
Resolved issues
EDR
An Endpoint Detection and Response event caused product crashes on version 7.1.1.20.
Version 7.1.1.20
Release date:
Fast ring: 2021.04.20
Slow ring: -
New features and improvements
Product
Starting from April, all endpoint protection agents deployed worldwide will receive a new Event Correlation engine. This change will act as a new foundation for enhancing Endpoint Risk Analytics (included in all Bitdefender cloud managed products) and for Endpoint Detection and Response solutions (EDR/XDR). This update will be silent, with no action required from your side (no agent reconfiguration required). The global roll out will take place in phases over up to 8 weeks.
Note
Granted the considerable dimension of this upgrade, in anticipation of any questions that you may have, we have developed an extensive Q&A section.
Security agent installation after successfully removing other Bitdefender products no longer requires a Windows reboot.
Resolved issues
Content Control
The product blocked a website with an untrusted certificate, while not providing the Accept Risks and Proceed option.
The Content Control module failed to block some apps that didn't match the Allowed rules.
Version 6.6.100.397
Release date:
Fast ring: 2021.06.03
Slow ring: 2021.06.03
New features and improvements
This version makes the transition towards Bitdefender Endpoint Security Tools version 7 for existing installations. This update will be silent, with no disruptions and no actions required on your side.
Version 6.6.27.390
Release date:
Fast ring: 2021.05.27
Slow ring: 2021.06.02
New features and improvements
Product
Added support for Windows 10 May 2021 Update (21H1).
Resolved Issue
Full Disk Encryption
In certain scenarios, the Full Disk Encryption module maintained the BitLocker feature suspended.
Version 6.6.26.382
Release date:
Fast ring: 2021.04.28
Slow ring: -
Important
During this update, the Microsoft Exchange Transport service will be stopped.
New features and improvements
Advanced Anti-Exploit
Improved the Advanced Anti-Exploit module to detect a new type of exploit.
Version 6.6.26.376
Release date:
Fast ring: 2021.04.19
Slow ring: 2021.04.21
Important
During this update, the Microsoft Exchange Transport service will be stopped.
This version also includes on slow ring the improvements and fixes delivered with the Bitdefender Endpoint Security Tools version 6.6.26.373, released on fast ring.
New features and improvements
Relay
BEST Relay for Windows now supports updating the Security Server based on Ubuntu 20.04.
New features and improvements from version 6.6.26.373 on fast ring.
Resolved issues
Resolved issues from version 6.6.26.373 on fast ring.
Version 6.6.26.373
Release date:
Fast ring: 2021.04.14
Slow ring: -
Important
During this update, the Microsoft Exchange Transport service will be stopped.
New features and improvements
Network Protection
Network Protection > Network Attack Defense is now available for Windows Servers. This functionality is designed to detect and prevent RDP protocol authentication brute force attacks. This new feature works by scanning incoming connections only on the RDP ports to identify authentication anomalies.
Resolved issues
Product
Fixed an issue where product and security content updates remained in a continuous Updating state.
In a certain instance, the product blocked a website with an untrusted certificate, while not providing the Accept Risks and Proceed option.
In a certain scenario, due to a missing cleanup mechanism, continuous crash dumps of the Product piled up and used almost all available disk space on endpoints, eventually leading the system to crash as well.
Content Control
In a certain scenario, a previously whitelisted website through security content whitelist could not be blocked via Web Traffic Scan rules.
Firewall
Fixed an issue where after connecting to a wireless network, the user received the Connection to a wireless network has been established notification even when the Firewall module was turned off.
Version 6.6.25.362
Release date:
Fast ring: 2021.03.24
Slow ring: 2021.03.29
Important
During this update, the Microsoft Exchange Transport service will be stopped.
This version also includes on slow ring the improvements and fixes delivered with the Bitdefender Endpoint Security Tools version 6.6.26.373, released on fast ring.
New features and improvements
New features and improvements from version 6.6.25.353 on fast ring.
Resolved issues
General
Fixed an incompatibility with Cisco Advanced Malware Protection (AMP) for Endpoints that caused crashes of File Explorer processes and overall performance issues on Windows 7 machines.
Antimalware
Fixed an issue with the On-Access Scanning feature, where users without administrative rights could restore a quarantined file. These users are now prompted to enter their username and password when using the Restore button.
Resolved issues from versions 6.6.25.353 and 6.6.25.359 on fast ring.
Version 6.6.25.359
Release date:
Fast ring: 2021.03.18
Slow ring: -
Note
During this update, the Microsoft Exchange Transport service will be stopped.
Resolved issues
Firewall
The Firewall driver generated a memory leak in
EPSecurityService
on Windows machines.
User interface
The graphical user interface showed that three features part of the Content Control module (Application Blacklisting, Web Access Control and Data Protection) were turned off after logging off or rebooting.
Version 6.6.25.353
Release date:
Fast ring: 2021.03.15
Slow ring: -
Note
During this update, the Microsoft Exchange Transport service will be stopped.
New features and improvements
Product
Specific error messages will be displayed when Product fails to update due to missing critical Windows patches.
Added support for removing the following incompatible security products:
TrustPort Total Protection 17.x
Driver Support One 2.x
Avast Business Security 20.x
VIPRE Antivirus 11.x
Sophos Endpoint Agent 2.x (Tamper Protection must be turned off)
Endpoint Protector Client 5.x
Enhanced support for removing the following incompatible security products:
McAfee Total Protection 16.x
Advanced Anti-Exploit
The Advanced Anti-Exploit technology is now available for Windows Servers. The module will be installed on and removed from servers via the new Install and Reconfigure Client tasks.
The Advanced Anti-Exploit module is deployed, configured and managed via GravityZone using the same management workflows on servers as available for workstations.
Resolved issues
Product
In some instances, the product blocked websites with untrusted certificates, while not providing the Accept risks and continue option.
Content Control
The Content Control module failed to report the web category of a blocked website, in the Blocked Websites report.
Firewall
The Events timeline from the local interface displayed wrong messages for incoming and outgoing connections.
Fixed an issue where blockPortScans remained active even when the Firewall module was enabled.
Fixed an issue where traffic was received from an unknown profile.
Version 6.6.24.337
Release date:
Fast ring: 2021.02.10
Slow ring: 2021.02.17
Note
During this update, the Microsoft Exchange Transport service will be stopped.
New features and improvements
Firewall
Added improvements to the Firewall feature on Windows 10 OS. Upon installation, BEST no longer deactivates Windows Firewall, leaving control to Windows Security Center.
Version 6.6.23.329
Release date:
Fast Ring: 2021.01.12
Slow Ring: 2021.01.18
Note
During this update, the Microsoft Exchange Transport service will be stopped.
This version also includes on slow ring the improvements and fixes delivered with the Bitdefender Endpoint Security Tools version 6.6.23.323 released on fast ring.
New features and improvements
EDR
Added improvements to EDR exclusions performance in accordance with specific use cases.