• Integrated Endpoint Sensor component of Kaspersky Endpoint Detection and Response 1.0
  • IoC scanner (Indicators of Compromise)
  • Incident response tools
  • Incident investigation capabilities
• System Watcher for servers (components Behavior Detection, Remediation Engine and Exploit Prevention)
  • OS support for System Watcher
  • Shared folders protection (from remote encryption)
• User interface improvements
  • Protection components grouped by categories: Advanced Threat Protection and Essential Threat Protection
  • Technologies (machine learning, cloud analysis, etc) and protection components (Exploit Prevention, Behavior Detection, etc) are shown in statistics and reports.
• New names for components.
  • Antivirus renamed to Threat Protection (for example, File Anti-Virus renamed to File Threat Protection).
  • System Watcher split to 3 components: Behavior Detection, Remediation Engine, Exploit Prevention.
  • Application Privilege Control renamed to Host Intrusion Prevention.
  • Application Startup Control renamed to Application Control.
• Lightweight mode for Threat Protection (“Cloud mode”). Light antivirus databases with enabled KSN (require less RAM and drive space).
• Device Control
  • Anti-Bridging feature added (blocks unauthorized commuting between networks).
  • Importing/Exporting the list of trusted devices (in xml format which is convenient for reading/editing manually).
• Application Control
  • Mixed mode (simultaneous use of test and blocking rules).
  • New KL category – Trusted certificates.
• Simplified interface of Kaspersky Endpoint Security. Application tray icon in Microsoft Windows task bar and context menu without displaying full application window.
• Hash sum is specified in detection events and reports and can be used for exclusions. Can be used for configuring exclusions for Trusted Zone.
• Masks *,?, ** are supported in Trusted zone settings.
• Protection level indicator for policy.  Notifies in case critical protection components are disabled.
• Various usability improvements.
  • Simplified deployment wizard.
  • Optimized license management.

Kaspersky Endpoint Security 11 for Windows is compatible with Kaspersky Security Center 10 Service Pack 3.

To manage the application remotely via Kaspersky Security Center 10:

1. Install Network Agent on the computer. For detailed information, refer to the Kaspersky Security Center 10 Administrator's Guide.
2. Install the Administration Plug-in for Kaspersky Endpoint Security 11 for Windows in the Kaspersky Security Center console.

The installation file of the Administration Plug-in is included in the application distribution package.

Kaspersky Endpoint Security 11 for Windows is incompatible with AES encryption modules released for previous versions of Kaspersky Endpoint Security. 

When the application is installed for the first time, all libraries required for encryption are installed automatically when the full disk encryption (FDE) or file level encryption (FLE) component is selected.

Before removing or upgrading the encryption module, you must decrypt all hard drives that have been encrypted using full disk encryption (FDE). No access to folder level encryption (FLE) files will be provided after you remove Encryption Module.

When installing an upgrade on a computer that has the AES Encryption Module installed, the Kaspersky Endpoint Security 11 for Windows installer will automatically upgrade the Encryption Module and will install all libraries necessary for encryption if you are using a distribution package with the appropriate key length and are upgrading a supported configuration.

For automatic upgrade of an installed encryption module, use the appropriate distribution package for Kaspersky Endpoint Security 11:

• kes_win_11.0.0.6499_<localization>_aes256 – to upgrade an AES encryption module with a 256-bit effective key length.
• kes_win_11.0.0.6499_<localization>_aes56 – to upgrade an AES encryption module with a 56-bit effective key length

If you want to switch from the utilized encryption to encryption with a different key length, prior to upgrading the application to version 11 you must decrypt all encrypted objects and remove the utilized AES Encryption Module. After switching to encryption with a different key length, you will no longer be able to access objects that were encrypted prior to switching.

When upgrading from the following configurations, the application installer automatically removes the installed encryption module and installs all libraries necessary for encryption:

• Kaspersky Endpoint Security 10 Service Pack 1 Maintenance Release 3 (build 10.2.5.3201) and encryption module version 1.1.0.73.
• Kaspersky Endpoint Security 10 Service Pack 1 Maintenance Release 4 (build 10.2.6.3733) and encryption module version 1.1.0.73.
• Kaspersky Endpoint Security 10 Service Pack 2 (build 10.3.0.6294).

All other configurations are not supported. You must either delete the Encryption Module or upgrade it to version 1.1.0.73 prior to starting an upgrade of Kaspersky Endpoint Security.

To install the application locally, run the setup_kes.exe file from the full distribution package and follow the Setup Wizard instructions. See the Administrator's Guide for more details on how to install the application.

For silent installation, add the PRIVACYPOLICY=1 parameter to the command line or to the setup.ini file. By doing this, you will accept the Privacy Policy. The Privacy Policy file is included into the distribution package of Kaspersky Endpoint Security 11 for Windows. You must accept the terms of the Privacy Policy to install or upgrade the application. If you do not specify this parameter for silent installation, the application will not be installed.

During installation, Kaspersky Endpoint Security 11 for Windows detects and allows you to uninstall applications that may affect the performance of the user's computer or cause other problems (even to the point of complete inoperability) when running at the same time as the product. The full list of incompatible software is available in this article.

You can upgrade the following applications to Kaspersky Endpoint Security 11 for Windows during installation from the full distribution package:

• Kaspersky Endpoint Security 10 Service Pack 1 for Windows (build 10.2.2.10535)  
• Kaspersky Endpoint Security 10 Service Pack 1 Maintenance Release 1 for Windows (build 10.2.2.10535(MR1)) 
• Kaspersky Endpoint Security 10 Service Pack 1 Maintenance Release 2 for Windows (build 10.2.4.674) 
• Kaspersky Endpoint Security 10 Service Pack 1 Maintenance Release 3 for Windows (build 10.2.5.3201)  
• Kaspersky Endpoint Security 10 Service Pack 1 Maintenance Release 4 for Windows (build 10.2.6.3733)
• Kaspersky Endpoint Security 10 Service Pack 2 for Windows (build 10.3.0.6294)

Upgrading from beta versions to Kaspersky Endpoint Security 11 for Windows is not supported.  

In Kaspersky Endpoint Security 11, the Encryption Module is included in the application distribution package and will be automatically installed to your computer in the following cases:

• During installation of the full disk encryption (FDE) component.
• During installation of the file level encryption (FLE) component.
• During installation of an upgrade on a computer that has an installed Encryption Module of the appropriate effective key length and a supported configuration. For more detailed information about the conditions and methods for automatic upgrade, see above.

For automatic upgrade of an installed encryption module, use the appropriate distribution package for Kaspersky Endpoint Security 11:

• kes_win_11.0.0.6499_<localization>_aes256 – to upgrade an AES encryption module with a 256-bit effective key length.
• kes_win_11.0.0.6499_<localization>_aes56 – to upgrade an AES encryption module with a 56-bit effective key length

To view the list of fixed issues and private patches included in the release, please refer to this article.

For the full list of known issues and limitations, follow this link.