Endpoint Security: Extended End of Life for Windows and macOS Protection

The latest version of WatchGuard SIEMFeeder for Windows and Linux is now available. This is a maintenance release, part of our regular update cycle focused on improving product stability, usability, and compatibility in modern enterprise environments.

These enhancements reflect our continued commitment to keeping the solution up to date, secure, and closely aligned with customer needs, particularly those integrating WatchGuard Endpoint Security with their existing SIEM platforms.

Key Highlights:

For Windows

• Improved interface clarity: Enhanced wording and layout for better user understanding
• Minor issue fixes

For Linux

• Platform upgrade: Migration from Microsoft .NET Core 3.1 to .NET 8.0, expanding compatibility
• Certified support for:
  • Ubuntu 24.04 LTS
  • Red Hat Enterprise Linux 9.5
• Refined interface texts
• Minor issue fixes

This release introduces key improvements that make the solution more reliable, easier to manage, and better aligned with enterprise IT environments ‒ especially where seamless integration is essential. Please reach out to the WatchGuard team if you have any questions or want to get started on delivering simplified security solutions.

- The WatchGuard Team -

We’re excited to announce the release of Custom Operator Roles (COR), a new feature that introduces granular role-based access control (RBAC) for Endpoint Security in WatchGuard Cloud. It is now available at both the Subscriber and Service Provider levels.

This version allows partners and MSPs to precisely define which operators can access, view, or manage specific areas of the endpoint security environment. Operators can now create custom roles from built-in operator roles that include granular access control over Endpoint Security products.

In other words, with COR, partners can now control who can access what and what actions they can take within the Endpoint Security with precision.

Key Highlights:

• Granular Endpoint permissions are now part of WatchGuard Cloud’s role model.
• Available at both Subscriber and Service Provider levels.
• Endpoint permissions added to prebuilt roles for immediate usability.
• Enhances Security Posture: apply the principle of least privilege by limiting access to only what each operator needs.
• Simplifies Management: manage multiple products and services from one console with consistent permission models.

We keep working on adding new features to provide a more comprehensive approach to our customers. Please reach out to the WatchGuard team if you have any questions or want to get started on delivering simplified security solutions.

- The WatchGuard Team -

This new version of our endpoint security brings features that help clients improve their system security where our protection solutions are used. With powerful updates, this release strengthens security, makes management easier, and increases control. Let’s look at all the new capabilities included.:

• Zero-Trust Application Service Improvements:
  • Instant notification on devices when a blocked application has been classified as goodware and can be executed.
  • Shows history of classified programs, reclassification status, technique, and date.
  • New AI-driven goodware detection to minimize blocking of unknowns.
  • Programs that were blocked due to lack of connectivity are now listed in the history of blocked programs.
• Extended Inheritance for Authorized Software:
  • Broader library authorization
  • Child process authorization
  • Installer-based process authorization
• Advanced Security Policies - Grouping: Reduces noise notification by optimizing policy management and improving efficiency within Advanced EPDR environments.
• Disable autoplay and autorun for external devices: Protection against malware threats from USB drives and removable devices.
• Anti-tampering for Linux: Prevents unauthorized modifications to the endpoint agent.
• Communication status with knowledge servers on Linux/macOS: Improved visibility into endpoint connectivity with threat intelligence databases.

We keep working on adding new features to provide a more comprehensive approach to our customers. Please reach out to the WatchGuard team if you have any questions or want to get started on delivering simplified security solutions.

- The WatchGuard Team -