Kaspersky Endpoint Security for Windows

Kaspersky Endpoint Security for Windows (hereinafter also referred to as “the application” or as “Kaspersky Endpoint Security”) gives corporate users all-in-one protection against known digital threats.

WHAT'S NEW IN KASPERSKY ENDPOINT SECURITY

Kaspersky Endpoint Security 11.8.0 for Windows offers the following features and improvements:

  1. An option has been added to update from Kaspersky Security for Windows Server to Kaspersky Endpoint Security for Windows. Now you can use Kaspersky Endpoint Security for Windows instead of Kaspersky Security for Windows Server on servers and clusters of your organization. For this purpose new functions have been added to Kaspersky Endpoint Security:
    • Added support for Web Threat Protection, Mail Threat Protection, Web Control and Device Control components for computers running Windows Server operating systems.
    • Added support for migration of Kaspersky Security for Windows Server components to Kaspersky Endpoint Security for Windows when updating the application. Prior to the installation, Kaspersky Endpoint Security (KES) checks the computer for the presence of Kaspersky applications. If Kaspersky Security for Windows Server is installed on the computer, KES detect the set of KSWS components that are installed and selects the same components for installation.

  2. Network Monitor interface was improved. The Network Monitor now shows the UDP protocol in addition to TCP.
  3. The Virus Scan task was improved: If you have rebooted the computer during the scan, Kaspersky Endpoint Security automatically runs the task, continuing from the point where the scan was interrupted.
  4. Now you can set a limit for task execution time. You can limit the execution time for Virus Scan and IOC Scan tasks. After the specified amount of time, Kaspersky Endpoint Security stops the task. To reduce the task execution time, you can, for example, configure the scan scope or optimize the scan.
  5. Some server platform limitations have been removed for the application installed on Windows 10 Enterprise multi-session. Kaspersky Endpoint Security now considers Windows 10 Enterprise multi-session a workstation operating system, not a server operating system. Correspondingly, some server platform limitations no longer apply to the application on Windows 10 Enterprise multi-session. The application also uses a workstation license key for activation instead of a server license key.

MINIMUM HARDWARE AND SOFTWARE REQUIREMENTS

To ensure proper operation of Kaspersky Endpoint Security, your computer must meet the following requirements:

Minimum general requirements:

Supported operating systems for workstations:

The SHA-1 module signature algorithm is deprecated by Microsoft. Update KB4474419 is required for successful installation of Kaspersky Endpoint Security on a computer running the Microsoft Windows 7 operating system. For more details about this update, visit the Microsoft technical support website.

For details about support for the Microsoft Windows 10 operating system, please refer to the Technical Support Knowledge Base.

For details about support for the Microsoft Windows 11 operating system, please refer to the Technical Support Knowledge Base.

Supported operating systems for servers:

The SHA-1 module signature algorithm is deprecated by Microsoft. Update KB4474419 is required for successful installation of Kaspersky Endpoint Security on a computer running the Microsoft Windows Server 2008 R2 operating system. For more details about this update, visit the Microsoft technical support website.

For details about support for the Microsoft Windows Server 2016 and Microsoft Windows Server 2019 operating systems, please refer to the Technical Support Knowledge Base.

For details about support for the Microsoft Windows Server 2022 operating system, please refer to the Technical Support Knowledge Base.

Supported terminal server types:

Supported virtual platforms:

The limitations on support for server and virtual platforms are presented in the user documentation.

APPLICATION COMPATIBILITY WITH THE KASPERSKY SECURITY CENTER REMOTE ADMINISTRATION SYSTEM

Kaspersky Endpoint Security supports operation with the following versions of Kaspersky Security Center:

The administration web plug-in for Kaspersky Endpoint Security for Windows version 11.8.0 is compatible with Kaspersky Security Center Web Console version 13.

To manage the application remotely via Kaspersky Security Center:

  1. Install Network Agent on the computer.

    For more details about installing the Network Agent, please refer to the Kaspersky Security Center Help.

  2. Install the Management Plug-in for Kaspersky Endpoint Security for Windows in the Kaspersky Security Center Administration Console.

    The installation package for the Kaspersky Endpoint Security Management Plug-in is included in the distribution package.

    The web plug-in installation package is available for download on the website and in the plug-in management window of Kaspersky Security Center Web Console. To install the web plug-in version 11.8.0, you should first remove the previous version of the web plug-in.

The Kaspersky Endpoint Security for Windows Management Plug-in for version 11.8.0 is installed over the Kaspersky Endpoint Security for Windows Management Plug-in for versions 11.X.X. To continue using the previous version of Management Plug-in, you should first remove the Management Plug-in version 11.8.0.

Limitations on compatibility with Kaspersky Security Center:

INSTALLATION

To install the application locally, run the setup_kes.exe file from the full distribution package and follow the Setup Wizard instructions. You can read more about how to install the application in the user documentation.

During installation, Kaspersky Endpoint Security for Windows detects applications on the computer that, when used together, could potentially reduce computer performance or lead to other compatibility problems (even resulting in complete inoperability). The full list of incompatible software is available in the user documentation.

You can upgrade the following applications to Kaspersky Endpoint Security for Windows version 11.8.0 when installing from the full distribution package:

The following considerations should be taken into account when upgrading Kaspersky Endpoint Security for Windows version 10 Service Pack 2 or later:

UPDATING VIA THE KASPERSKY UPDATE SERVICE

Kaspersky Endpoint Security 11.8.0 for Windows can be installed via the Kaspersky update service.

Through the Kaspersky update service, you can update the following applications:

If Kaspersky Endpoint Security version 11.3.0 or later is deployed in the infrastructure along with older versions of the application, Kaspersky Security Center will be able to install two updates of Kaspersky Endpoint Security to version 11.8.0: one for updating Kaspersky Endpoint Security versions 11.0.1–11.2.0 CF1, and the second for updating version 11.3.0 or later.

Upgrading Kaspersky Endpoint Security for Windows from beta versions to version 11.8.0 is not supported.

The following special considerations should be taken into account when updating through the Kaspersky update service:

APPLICATION COMPATIBILITY WITH AES ENCRYPTION MODULES AND DETAILS ON UPDATING DATA ENCRYPTION COMPONENTS

Starting with Kaspersky Endpoint Security 10 Service Pack 2, the AES Encryption Module is included in the application distribution package. Therefore, installation of a separate encryption module is not required.

All libraries required for data encryption will be automatically installed in the following cases:

  1. During installation of the application, provided that the Full Disk Encryption (FDE) or File Level Encryption (FLE) components are selected.
  2. When upgrading Kaspersky Endpoint Security for Windows version 10 Service Pack 2 or later, provided that the upgrade is performed using an application distribution package with the appropriate key length and that the Full Disk Encryption (FDE) or File Level Encryption (FLE) components are selected.
  3. When upgrading Kaspersky Endpoint Security for Windows version 10 Service Pack 1 Maintenance Release 3 with AES Encryption Module version 1.1.0.73 installed, provided that the upgrade is performed using the application distribution package with the appropriate key length.
  4. When upgrading Kaspersky Endpoint Security for Windows version 10 Service Pack 1 Maintenance Release 4 with AES Encryption Module version 1.1.0.73 installed, provided that the upgrade is performed using the application distribution package with the appropriate key length.

Other configurations of Kaspersky Endpoint Security and AES encryption modules are not supported.

Before updating Kaspersky Endpoint Security, you must remove the AES Encryption Module or update the module to version 1.1.0.73. Before removing or updating the AES Encryption Module, you must decrypt all hard drives that have been encrypted using Kaspersky Disk Encryption technology. After removing the AES Encryption Module, access to encrypted files will be blocked.

If you want to switch from your encryption method to encryption with a different key length, prior to updating the application to version 11.8.0 you must decrypt all encrypted objects and remove the AES Encryption Module that was used. After switching to encryption with a different key length, access to encrypted files will be blocked.

COMPATIBILITY WITH KASPERSKY ENDPOINT AGENT

Kaspersky Endpoint Security is compatible with Kaspersky Endpoint Agent 3.7 or higher.

The Kaspersky Endpoint Agent 3.11 distribution package is included in the Kaspersky Endpoint Security for Windows version 11.8.0 distribution kit. Kaspersky Endpoint Agent will be automatically installed if the Endpoint Agent component is selected during Kaspersky Endpoint Security installation.

Kaspersky Endpoint Agent enables interoperability with other Kaspersky solutions. Kaspersky Endpoint Security now has a built-in agent for the Kaspersky Sandbox, Kaspersky Managed Detection and Response (MDR), and Kaspersky Endpoint Detection and Response Optimum (EDR Optimum). If you have Kaspersky Endpoint Security installed, you do not need Kaspersky Endpoint Agent for these solutions to work. If you selected the Endpoint Agent component when installing Kaspersky Endpoint Security, and Kaspersky Endpoint Agent 3.7–3.10 is already installed on the computer, the application will prompt you to uninstall Kaspersky Endpoint Agent.

Kaspersky Endpoint Security for Windows 11.8.0 now has a built-in agent for Kaspersky Endpoint Detection and Response Expert (EDR Expert) solution. This component is not yet available. The component will become available after the Kaspersky Endpoint Detection and Response Expert solution release.

LIST OF BUGS FIXED AND PRIVATE PATCHES INCLUDED IN THE RELEASE

The list of fixed issues and private patches included in the release is available on the Technical Support website.

MAIN KNOWN ISSUES

The list of limitations and known issues is available in the user documentation.

© 2022 AO Kaspersky Lab

Page top