Computer Protection for Mac change log

NikolayT
NikolayT Posts: 5 F-Secure Employee

Following best practices of PSB Portal and other Clients development teams, Corporate Mac team is going to work in continuous releases mode.

 

This topic is going to be used for publishing new releases' change logs when they are going to production. You are suppposed to get updates automatically, not right away, but gradually in several days following release date.

 

Please, note, that Computer Protection for Mac also includes RDR client, and the change logs will contain RDR changes also, but if you do not have RDR license, the corresponding functionality is disabled.

 

Corporate Mac Team

Ukko

Comments

  • kukushechkin
    kukushechkin Posts: 28 F-Secure Employee

     

    New features

    • New activation welcome screen
    • Remote actions support for (will be available on the portal side next week):
      • Network isolation
      • Scan for malware
      • Full status report

    Fixed issues

    • Fixed an issue when product in rare cases produced excessive network activity

    • Fixed an issue with high CPU usage on certain websites

    UkkoSergeH
  • SergeH
    SergeH Posts: 33 F-Secure Product Manager

    UPDATE: We have just activated in portal the Remote actions support for:

    • Network isolation
    • Scan for malware
    • Full status report
    etomcatUkko
  • kukushechkin
    kukushechkin Posts: 28 F-Secure Employee

    This release contains scanning engine improvements that significantly boosts our windows malware detection capabilities. Available for downloading on all environments starting 28.03.2019, automatic upgrade will follow.

  • kukushechkin
    kukushechkin Posts: 28 F-Secure Employee

    This release contains fix for the issue with non-infected files being reported during Scan for Malware and Scheduled Scanning. Available for downloading on all environments since last week, automatic upgrade started today.

  • kukushechkin
    kukushechkin Posts: 28 F-Secure Employee
    • Client is now reporting status of Guest Account, System Integrity Protection and File Vault to the portal
    • Real time protection performance improvements
    • Main Window statuses reporting improvements
     
    Available for downloading on all environments and as automatic upgrade since last week.
  • kukushechkin
    kukushechkin Posts: 28 F-Secure Employee

    New features:

    • Client is now reporting status of Screensaver Password protection status to the portal.
    • Installer is now checking for incompatible software before installation.
    • Reboot is no longer required after installation, except XFENCE is enabled.

     

    Bugfix and improvements:

    • Multiple XFENCE rules improvements and fixes, including incorrectly reported invalid signature.
    • Fixed issue with Browsing Protection package version, it is now the same as release version, 20581 for this release.
    • macOS 10.15 Catalina Beta support, Full Disk Access Privacy settings now properly display F-Secure app bundle to allow real-time scanning to access protected filesystem locations.
    • Product no longer disables macOS Block All firewall settings after firewall enabling from the product.

     

    Available for downloading on all environments, automatic upgrade will be available next week.

     

     

    Known issues:

    • Installer may report McAfee product to be installed even after designated uninstaller run. Workaround: manually remove /Library/LaunchAgents/com.mcafee.McAfeeSafariHost.plist file.
    Ukko
  • kukushechkin
    kukushechkin Posts: 28 F-Secure Employee

    New features:

    • macOS 10.15 Catalina Full Disk Support is now guided in the GUI
    • Product package is now notarized
    • Scan exclusions are now supported, will be available in PSB profiles shortly
    • User now has an option to persist XFENCE rule, as well as edit it using XFENCE Configuration Utility
    • Redesigned Support Tool


    Bugfix and improvements:

    • Detected threats are no longer reported multiple times to the portal for the same detection


    Available for downloading on all environments, automatic upgrade will be available later this week.

    Known issues:

    • Installer may report McAfee product to be installed even after designated uninstaller run. Workaround: manually remove /Library/LaunchAgents/com.mcafee.McAfeeSafariHost.plist file.
    • XFENCE may prevent macOS from upgrading. Workaround — disable XFENCE before upgrading macOS.
    UkkoSergeH
  • kukushechkin
    kukushechkin Posts: 28 F-Secure Employee

    New features:

    • Request diagnostic file remote action is now supported

    Bugfix and improvements:

    • Installer is no longer reporting McAfee product as installed even after designated uninstaller run
    • XFENCE is no longer blocking macOS updates
    • XFENCE performance improvements and extended third-party software whitelisting

     

    Available for downloading on all environments, automatic upgrade started today.

  • kukushechkin
    kukushechkin Posts: 28 F-Secure Employee

    New features:

    • Application-level Firewall (will be available in PSB profiles on the portal later this month)
    • Active Directory is now reported to PSB portal
    • New brand colors and application icons
    • Silent Upgrade — next release will be installed silently

     

    Bugfix and improvements:

    • XFENCE default ruleset improvements, will be less unexpected alerts
    • RDR standalone main window crashes fixed
    • Real-time Scanning performance during software installation improved
    • Fixed an issue when in rare cases status and infection alerts upstream stopped working after reboot

     

    Available for downloading on all environments, automatic upgrade will start today.

  • kukushechkin
    kukushechkin Posts: 28 F-Secure Employee

    F-Secure Application Level Firewall settings are now available in PSB profiles on all environments. Feature is disabled by default. For details on how to use and configure F-Secure Firewall check help topic.

    Known issues, will be fixed in the next release:

    • Fortinet FortiClient VPN is not able to establish connection with F-Secure Firewall enabled
    • CheckPoint Endpoint Security is not able to communicate with VPN service with F-Secure Firewall enabled
    • Signal messenger is not able to connect to server with F-Secure Firewall enabled
  • kukushechkin
    kukushechkin Posts: 28 F-Secure Employee

    Computer Protection and RDR for Mac build 203555 is available for downloading on all environments, automatic upgrade will start today.

     

    New features:

    • From now on product upgrades will happen automatically and will not require user action for starting the upgrade process.
    • Active Directory based default profile assignment
    • Black/white lists in Browsing Protection. Profiles in PSB portal will be available later.
    • Added feature to specify default PSB profile and set installation tags upon installation (activator tool).

     

    Fixed issues:

    • Fixed an issue when in rare cases F-Secure Firewall was preventing some 3rd party software from establishing network connection.
    • Fixed an issue when Automatic update status for device was displayed as Not Installed on the PSB portal, when in reality Automatic updates were working as expected.
    • Fixed an issue when in rare cases product wasn't sending status update information to the portal for a long time.
    • General bugfix and performance improvements.
  • kukushechkin
    kukushechkin Posts: 28 F-Secure Employee

    Computer Protection and RDR for Mac build 33609 is available for downloading on all environments, automatic upgrade will start today and continue on Monday.

    New features:

    • Added support for user-configurable proxies and fallback for updates in PSB profiles. Settings alreaddy available on the portal.
    • New RDR sensor.
    • F-Secure Firewall settings in PSB profiles now have option to specify development/production certificate type in firewall rule.
    • F-Secure Firewall settings now by default allows networks access for binaries form developers trusted by F-Secure. Settings will be available on the portal later.
    • Minimum supported version is now macOS 10.13.

    Resolved:

    • Fixed "Waiting for connection” RDR status on the portal, when in some cases RDR sensor activation was failing.
    • General bugfix and performance improvements.

    Known issues:

    • Previous version (32555) will download update, but apply it only after reboot.


  • kukushechkin
    kukushechkin Posts: 28 F-Secure Employee

    macOS Big Sur beta support

    We are now happy to provide Computer Protection and RDR for Mac preview with macOS Big Sur beta support. Please, contact customer care for details.

  • kukushechkin
    kukushechkin Posts: 28 F-Secure Employee

    Computer Protection and RDR for Mac build 35217 is available for downloading on all environments, automatic upgrade will start today.


    macOS Big Sur support

    Computer Protection and RDR build 35217 brings support for macOS Big Sur. Real-time protection and XFENCE no longer use kernel extension to operate on macOS Catalina 10.15.5 and newer. Instead, they use EndpointSecurity API provided by Apple that replaces the kernel extensions. F-Secure Application-layer Firewall is no longer uses network kernel extension on macOS Catalina 10.15.5 and newer, but instead uses Network System Extension and ContentFilter APIs. Computer Protection and RDR is still relying on kernel extensions for real-time protection when running on previous versions of macOS.

    Introducing a native uninstaller

    With this release, we have introduced a native uninstaller. The uninstaller has been reworked to ensure macOS Big Sur support and to give a better user experience with uninstalling System Extension.

    macOS 10.13 is no longer supported

    Computer Protection and RDR is compatible with the following versions:

    macOS Mojave (10.14)

    macOS Catalina (10.15)

    macOS Big Sur (11.0)

  • kukushechkin
    kukushechkin Posts: 28 F-Secure Employee
    edited November 2020

    In order to allow Computer Protection & RDR 35217 to load all the necessary permissions from macOS, it needs either manual approvals or an MDM profile.

  • kukushechkin
    kukushechkin Posts: 28 F-Secure Employee
    edited December 2020

    Computer Protection and RDR for Mac build 36289 is available for downloading on all environments, automatic upgrade will start today.

    New features and fixed issues:

    • Fixed an issue when in some cases Internet stops working with F-Secure Firewall active on macOS 10.15.5+
    •  Downgrade is no longer allowed
  • kukushechkin
    kukushechkin Posts: 28 F-Secure Employee

    Computer Protection and RDR for Mac build 36471 is available for downloading on all environments, automatic upgrade started yesterday.

    Fixed the issue when smb was not working with F-Secure Firewall unabled.

  • wm_mattias
    wm_mattias Posts: 11 New Member

    @kukushechkin

    Fixed the issue when smb was not working with F-Secure Firewall unabled.

    I guess this should be enabled?

  • kukushechkin
    kukushechkin Posts: 28 F-Secure Employee

    Computer Protection and RDR for Mac build 38681 is available for downloading on all environments.

    New features:

    • F-Secure Application Layer Firewall events are now visible in the Elements Security Center
    • Device status in the Elements Security Center now displays status of both Apple Firewall and F-Secure Application Layer Firewall
    • Active F-Secure Application Layer Firewall settings are now visible in client
    • An option allowing 3rd party tools to manage Apple Firewall added to the profiles, portal UI updated will be available later

    Fixed issues:

    • Tags provided during activate are now correctly displayed in the Elements Security Center
    • Fixed an issue displaying a misleading warning on macOS 11.4 about Full Disk Access not available, when in fact it was granted and working as expected
    • Improved real-time protection performance

    Known issues:

    • Incompatibility with PaloAlto Global Protect (PaloAlto are working on fix, should be available in August)

    Notes:

    • Product files have been relocated from /usr/local/f-secure to /Library/F-Secure

    New build is available for download in the Elements Security Center. Channel upgrades will be started in August gradually in different environments.

  • kukushechkin
    kukushechkin Posts: 28 F-Secure Employee

    Computer Protection and RDR for Mac build 38925 is available for downloading on all environments.

    Fixed issues:

    • fixed an issue with databases updates on macOS 11.5+ running on M1
  • kukushechkin
    kukushechkin Posts: 28 F-Secure Employee

    Computer Protection and RDR for Mac build 39911 is available for download on all environments.

    Release notes:

    • Security Cloud malfunction warning is now fixed.
    • RDR sensor is now running natively on Apple Silicon Macs.
    • There is now a warning status in the GUI if System Extension is not allowed to load.
    • Scan Security Events on the Elements portal now correctly handle adding exclusions to the active settings profile.
    • The issue when Battery Preference Pane is sometimes inaccessible on macOS 11 is now fixed.

    Known issues:

    • Application-layer Firewall Security Events are not reported on macOS 10.14 (with kernel extension).
    • Incorrect RDR sensor status in the main window of the RDR standalone license — the sensor is not operational while it is operational.
    • On macOS 10.14 if kernel extensions are allowed after product activation this may result in the system being unresponsive.

    First-time installers are available for download in the Elements Security Center. Silent upgrade in APAC region started today. Silent upgrades in other regions will start next week.

  • kukushechkin
    kukushechkin Posts: 28 F-Secure Employee

    Computer Protection and RDR for Mac build 40115 is available for download on all environments

    This is a maintenance release. First-time installers are available for download in the Elements Security Center. Silent upgrade in APAC region started on 06.10 and will continue with other regions later this week and next week.

    Jaims
  • kukushechkin
    kukushechkin Posts: 28 F-Secure Employee

    Computer Protection and RDR for Mac build 40363 is available for download on all environments

    This release brings official support for the macOS Monterey.

    laxtlokeDharmikMJaims
  • aleksey
    aleksey Posts: 1 F-Secure Employee

    Computer Protection and RDR for Mac build 41171 is available for downloading on all environments

    New features:

    • XFENCE security events for blocked access

    Bugfix and improvements:

    • fixed network extension blocking Internet access when activated via MDM
    • fixed F-Secure sensor being enabled by default for non-RDR subscriptions
    • XFENCE performance improvements
    • default XFENCE rules to whitelist iOS simulators
    Jaims
  • kukushechkin
    kukushechkin Posts: 28 F-Secure Employee

    Computer Protection and RDR for Mac build 41898 is available for downloading on all environments

    This is a maintenance release. Automatic upgrade will start today.

    Jaims
  • kukushechkin
    kukushechkin Posts: 28 F-Secure Employee

    Early Access for pre-release builds is now available for Mac

    Early Access is available in the general settings section of the Mac profiles. After a device is assigned a profile with this setting enabled, it will receive the latest product version before it is released to channels for the silent upgrade. Upgrade will still happen silently and identical to the regular update. We reserve up to 2 weeks for the build to be available in Early Access before it is pushed to all the clients. We also may reduce the early access stage to the minimum in case a release contains some urgent vulnerability fixes. We strongly encourage using the Early Access feature to verify upcoming changes in the real production fleet environment.

    Jaims
  • kukushechkin
    kukushechkin Posts: 28 F-Secure Employee

    Computer Protection and RDR for Mac build 42929 is available for downloading on all environments

    New features:

    • device serial number is now reported to the portal and is visible in the device details
    • macOS 10.14 Mojave is no longer supported

    Fixed issues:

    • fixed an issue when after upgrading the license from EPP to EPP+EDR sensor was not starting
    • fixed an issue when identical infection reports happening in a quick succession were displayed in Security Events section
    • improved Xfence performance

    New build is available for download in the Elements Security Center and as the pilot release through Early Access. See the previous announcement for details on Early Access and pre-release builds.

    Jaims
  • Jaims
    Jaims Posts: 795 Community Manager

    We have moved all new communication to the new WithSecure Community site. All new Changelogs are posted on the thread in the below link. See you there!

    https://community.withsecure.com/discussion/114459/computer-protection-for-mac-change-log#latest

This discussion has been closed.