Update to URLs Required by WatchGuard Endpoint Security Products

To make sure that communications established by our solutions align with security standards, we will no longer support TLS 1.0 and TLS 1.1 protocols after 26 November 2024. After that date, our security solutions will use TLS 1.2 or higher for communications with our servers.

In the next few days, we will update our security software on computers with operating systems that do not support TLS 1.2 or higher. This update will make sure that our security solutions can communicate with the servers securely, even when the operating system does not support TLS 1.2 or higher.

Affected Systems: Computers that run a Windows operating system earlier than Windows 8 (included) and all macOS and Linux computers.

Update Plan:

• Communications agent update: Will take place between 22 and 31 October 2024. You do not need to make any configuration changes.
• Protection software update: During the week of 4 November 2024 we will make the protection update available for affected computers. In the endpoint security management UI, review the Per-computer settings > Updates settings and make sure the affected computers update before 26 November 2024.

We keep working on adding new features to provide a more comprehensive approach to our customers. Please reach out to the WatchGuard team if you have any questions or want to get started on delivering simplified security solutions.

- The WatchGuard Team -

This new endpoint security version brings in new features to help our clients strengthen the security of their systems where our endpoint protection solutions are used. For our partners and MSPs, this release allows them to enhance the protection provided to their clients. Let's take a closer look at all the new capabilities included:

• Endpoint Access Enforcement to reduce infections through lateral movements by monitoring and blocking connections from computers with high risk. 
• Block the load of vulnerable drivers to prevent hackers from accessing trusted drivers to disable the agent and the protection.
• Isolation for Linux endpoints denies all communications to and from isolated computers except those required to perform any action from the Endpoint Security product web console, such as containment, remediation, or remote forensic analysis.
• Network Access Enforcement for Android allows network administrators to enable Android devices to check for appropriate endpoint security services before allowing a connection to a corporate network.
• Management of programs that use AMSI technology provides the ability to disable and exclude processes for programs that might cause performance issues.
• Risk exclusion management to manage which file, folder, or extension exclusions do not impact computer risk calculation. 

We keep working on adding new features to provide a more comprehensive approach to our customers. Please reach out to the WatchGuard team if you have any questions or want to get started on delivering simplified security solutions.

- The WatchGuard Team -

This new endpoint security version includes a series of capabilities to better protect customer systems and streamline partners' management processes and operations. It's tailored to meet the evolving needs of all clients, ensuring WatchGuard users stay ahead in the dynamic world of cybersecurity. Let's take a closer look at all the new functionalities included in this version:

• Selective Patch Installation: Choose which devices receive patches, customizing security per user needs.
• Patch Testing Groups: Test patches on selected groups before broader deployment, ensuring system compatibility.
• Enhanced Patch Installation Insights: Deeper visibility into the patch installation status and history.
• Web Access Control Against Generative AI: Block URLs related to generative AI. New filter categories: Generative AI – Text & Code, Generative AI – Multimedia, Generative AI – Conversation and Other AI ML Applications.
• Endpoint Security Agent Installation: FireCloud and NDR deployments now include our endpoint security agent installation.
• Improved Visibility and Control: Easily distinguish users with the Patch Management module and quickly identify patch installation errors.

We keep working on adding new features to provide a more comprehensive approach to our customers. Please reach out to the WatchGuard team if you have any questions or want to get started on delivering simplified security solutions.

- The WatchGuard Team -