Secure Endpoint Agent release notes - Version 9 hotfixes

If agent version control is enabled, you can assign an agent version to your account's Windows and Mac devices to prevent agent upgrades. To determine if you want to assign a particular agent version, review this topic to learn about the enhancements and fixes supported in each hotfix version of the Secure Endpoint Agent.

To learn about all features, enhancements, and fixes introduced in the Secure Endpoint 9 hotfixes, see the Secure Endpoint 9.0 hotfix release notes.

About the Secure Endpoint Agent

The Secure Endpoint Agent is a small software client that resides on devices managed in the Secure Endpoint Console. After the agent is initially installed on a new device, the agent is activated with its first connection to the Absolute Monitoring Center.

Each agent package includes software specific to its supported operating system, including the agent and its associated components, an installer, and a readme file.

The 9.0.0.x package bundles contain Secure Endpoint Agent software that support devices running the following operating systems:

Operating system Supported versions
Windows

  • Windows 11 Home, Pro, Enterprise, SE, and IoT Enterprise editions (64-bit)

    Note that due to restrictions imposed by Microsoft, the following features are not supported on Windows 11 SE:

    • Applications Resilience: applications that require PowerShell for health checks
    • Custom Data: data points that use PowerShell scripts
    • Reach Scripts: all PowerShell scripts
  • Windows 10 Home, Pro, Enterprise, and IoT Enterprise editions (32- and 64-bit)
Mac
  • macOS 11 to 14

The following agent components are associated with Secure Endpoint Agent 9.0.0.3

Agent or component Windows version Mac version
Core agent The core agent (also known as rpcnet) is a small software client that resides in devices that are managed in the Secure Endpoint Console. After the core agent is initially installed on a new device, it is activated with its first connection to the Absolute Monitoring Center and the device is enrolled in Absolute. The core agent then makes scheduled connections every 24.5 hours. (rpcnet) 994 976

Component manager The component manager (also known as CTES) is installed on top of the core agent and manages the agent components responsible for initiating device actions and collecting device data. Most agent components are controlled by policies, such as the Hardware and Installed Applications policies. The component manager typically connects to the Absolute Monitoring Center every 15 minutes, at a minumum, to send device data and receive instructions.

(CTES)

 1.0.0.3423 1.0.0.3423

Core Service

(CTESPersistence)

 2.0.0.273 1.0.2.20

Anti-Malware

(AVP)

 1.0.12.3 1.0.10.20

Application Health

(OPS)

 1.1.2.17 1.0.12.15

Application Resilience

(RAR)

 7.14.1.15 N/A

Custom Data

(CDC)

(On Mac, this component is used for Application Health checks only)

 1.0.12.25 1.0.12.15

Data Discovery

(DARAgent)

 9.0.2.2 9.0.2.4

Device Usage

(DUR)

 1.0.8.15 1.0.7.27

End User Messaging

(EUM)

 1.0.3.32 1.0.2.33

File Delete

(SDD)

 1.0.7.68 1.0.7.66
Freeze
(DFZ)		 1.0.7.131 1.0.3.97

Full-Disk Encryption
(ESP)

 1.0.10.2 1.0.9.46

Geolocation

(GEO)

 1.0.12.11 1.0.10.14

Hardware

(HDP)

 2.0.15.19 1.0.12.43

Installed Applications

(SNG)

 1.0.15.48 1.0.10.7
Manage Supervisor Password
(PER)
 1.0.4.12 N/A

Reach Script

(ANS)

 1.0.3.2 1.0.5.23

Web Usage

(WMA)

 9.0.3.1 N/A

Wipe

(SDW)

 1.0.6.1 1.0.2.35

You can view the version number of a device's core agent and component manager on its Details > Summary page.

Absolute for Chromebooks Extension: 2649

You can view the version number of a device's Chromebook extension by adding the Agent column to a device report.

Agent improvements and fixes

The following fixes and improvements are available in agent version 9.0.0.3:

Component Component version Fixes and improvements
Windows
Installed Applications
(SNG)		 1.0.15.48
  • The SNG component now uploads information about the anti-malware (for example, Windows Defender) and full disk encryption (for example, BitLocker Drive Encryption) products detected on Windows devices.
Web Usage
(WMA)		 9.0.3.1
  • Security improvement.

The following fixes and improvements are available in agent version 9.0.0.2:

Component Component version Fixes and improvements
Windows
Anti-Malware
(AVP)		 1.0.12.3
  • Previously, if Cisco Secure Endpoint had been upgraded on a device, the AVP component may have failed to report the correct status of the application. This issue is now fixed.
  • A Windows device's detected version number for Windows Defender is now consistent across all pages and reports in the console.

Data Discovery

(DARAgent)

 9.0.2.2
  • Security improvements.
Mac

Data Discovery

(DARAgent)

 9.0.2.4
  • Security improvements.

The following fixes and improvements are available in agent version 9.0.0.1:

Component Component version Fixes and improvements
Windows
Full-Disk Encryption
(ESP)		 1.0.10.2
  • Following the release of Secure Endpoint 9.0, the ESP component failed to detect McAfee Drive Encryption, in some cases. This issue is now fixed.