Secure Endpoint release notes - Version 9.2 hotfixes

This topic describes the software changes included in all hotfixes since the release of Secure Endpoint 9.2. Note that in addition to these changes, these hotfixes also include general system enhancements that improve the security, performance, and stability of the product.

To view the software changes that apply to the Secure Endpoint Agent, see the Secure Endpoint Agent release notes - Version 9.2 hotfixes.

Depending on the Absolute product licenses associated with your account, some of the following features, enhancements, and fixes may not be available to you.

Feature/Area Details
Anti-malware

  • Previously, Microsoft Defender failed to be detected on some Mac devices. This issue is now fixed.
API management

  • An API token’s Last modified date is no longer updated when the system updates a token (for example, when the token expires).
Chromebook support

  • Information about a Chromebook's My files volume is now always synced from your Google account and shown in Volume report columns. All other volumes are ignored.
Console navigation

  • After using the Search Devices field to search for and select a device, clicking the Absolute logo no longer causes a 404 Resource not found error.
Device groups
  • To improve the performance of smart device groups, data fields that are not in use by any Absolute account are no longer available for selection in smart group filters. For example, we’ve reduced the number of fields available in the following categories:
    • CPU
    • Display
    • Keyboard
    • Memory
    • Volume

    To view the complete list of filter fields that are currently available:

    1. Go to the Devices page and open an existing smart device group.
    2. Click the icon.
    3. Click the first field and scroll through the list of available fields.
  • Previously, after filters were added to a new smart device group, group membership may have failed to be re-evaluated correctly as device data changed. This issue is now fixed.

  • When opening or sorting a smart group that contains a very large number of devices, the page now loads more quickly.
Extended Resilience/Playbooks
  • The permissions associated with the Extended Resilience feature have been updated as follows:
    • To activate or deactivate the Extended Resilience policy, the Manage permission for Policies is the only permission required. As a result, the Extended Resilience permission has been removed from the Roles page in User Management.
    • To view the Extended Resilience field in Device Details, the View permission for Policies is required.
    • To run playbooks, the Perform permission for Run playbooks is now required. As a result, the Manage permission for Run Playbooks has been removed from the Roles page in User Management.

    All default Administrator roles are granted these new permissions.
Freeze

  • If the Freeze (DFZ) component was upgraded on a frozen Windows device, the Freeze was removed from the device and the request’s action status in the console was updated to Freeze failed. This issue is now fixed.
History > Events

  • Scrolling the Events page may have caused the Summary area to show incorrect event details for some events. This issue is now fixed.
Feature/Area Details

Absolute APIs
  • The following endpoints are now available in the Messaging resource:
  • The Getting Started: Create your request section of the documentation now includes a script sample for the Bash coding language. Learn more
Application Health

  • When an application's status is reported as Unhealthy on a device, additional details to help you troubleshoot the status are now available for a greater number of health check failures. On the Applications page, you can view this information by clicking a device's row from device list view.
Application Resilience
Chromebook support
  • A new version of the Chromebook extension has been released. Version 2661 of the extension includes an improvement to unfreezing a device using its unfreeze code. See Freeze.
Device Usage
  • Previously, if your user profile language was set to Spanish, and you were creating a Device Analytics report with a custom date range, you could select an end date that preceded the start date. This issue is now fixed.
Extended Resilience/Playbooks
  • Extended Resilience is now supported on Windows devices running Absolute Firmware Persistence version 2.x.x.x or higher.
  • When the Extended Resilience policy is in the process of provisioning a device, two reboots are now required. Previously, three or four reboots were required.

  • For Windows devices, the Firmware Persistence version field now shows the full 4-digit version number (2.x.x.x) instead of “2.0”. Note the following:

    • For each device, this field is not updated to the new value until the Core agent (rpcnet) performs its next scheduled connection to the Absolute Monitoring Center.

    • If any smart device groups are based on this field, group membership may be re-evaluated as a result of this change.

    This enhancement does not apply to devices running Persistence 1.0.

  • The following fields now support URLs that include characters after the file path, such as a query string:
    • Host Image URL field in the Restore golden image playbook
    • Host file URL field in the File operations (add or delete) playbook
Freeze
  • When unfreezing a Windows or Mac device using its unfreeze code, an input field is now shown below the Freeze message on the device. Type the unfreeze code in the field, and then press Enter or Return to unfreeze the device. Learn more
  • When unfreezing a Chromebook device using its unfreeze code, you now press Enter after entering the unfreeze code in the input field. The Unlock button has been removed.
  • If your user role is not granted the Manage permission for Remove Freeze, you can no longer view a device’s unfreeze code in Device Details.
Reports
  • Device reports that contain a very large number of devices now show improved responsiveness and performance.
  • Previously, when you filtered a device report or page using the Base license > Name is empty filter, incorrect results may have been returned. This issue is now fixed.
ServiceNow integration

  • The Absolute Connector now syncs a device’s short serial number to ServiceNow instead of its long serial number, in all cases.
Web Usage
  • Previously, when you attempted to compare two websites on the Web Usage (Last 7 Days) report, any website that had not already been added to the chart was not available for comparison. This issue is now fixed.
Wipe
  • The Certificate of Sanitization now includes the date and time when the Wipe action started on the device, presented in the user profile time zone of the user that downloads the certificate. Also, the label has been updated from Date Conducted to Date and Time Started.
Feature/Area Details
Agent management

  • The download package for the following installers now includes a readme file containing installation steps:

    • Core agent for Windows
    • Core agent for Mac
Application Resilience

  • You can now persist version 10.8.x or higher of Tenable Nessus Agent.

  • You can now persist version 8.x or higher of Cisco Secure Endpoint. In addition, uninstallation parameters can now be included in the policy configuration for later versions of this application.

  • In some cases, the Netskope application failed to reinstall on non-compliant devices. This issue is now fixed.
Authentication

  • All default user roles can now view the status of the following configurations in Authentication settings:

    • Single Sign-on and SCIM integration
    • Two-Factor Authentication

    The View permission for Authentication is not required.
Dashboard

  • Previously, the wrong year may have been shown on the timeline in the Dark Devices widget. This issue is now fixed.
Extended Resilience
  • If a Manage Supervisor Password request is in progress when a device receives instructions to deactivate its Extended Resilience policy, the Manage Supervisor Password request is now processed successfully.
Freeze

  • When a device is unfrozen using its passcode, the system no longer sends two identical Freeze removed email notifications.
Geolocation
  • When you export a device’s Location History page, and the location’s Technology Type is ipResolution, the following columns in the exported report are now empty:
    • Latitude
    • Longitude
    • Street Address
  • On a device’s Location History page, an IP location’s icon may have been missing from the timeline, in some cases. This issue is now fixed.
  • Previously, the list of nearby Wi-Fi access points detected on a Mac device failed to be reported on the device’s History page. This issue is now fixed.
  • In some cases, Mac device users were unable to allow Absolute to detect the device's location because “Absolute Secure Endpoint” was not included in the list of available applications in System Settings > Privacy & Security > Location Services. This issue is now fixed.
History > Events
  • For Public IP location updated events, Longitude and Latitude properties are no longer shown when you click a location. These properties are not relevant because the accuracy of IP locations is low.
  • The name of the Playbook succeeded event has been changed to Playbook completed.
License management

  • When submitting a Change license request, the maximum number of devices you can update at one time has increased from 10,000 to 50,000. If you select more than 50,000 devices, a confirmation dialog now informs you that only the first 50,000 devices in the report will be processed.

  • In some rare cases, a race condition may have led to the following issues:

    • A negative number of licenses was shown in the Available column on the Report on Products page

    • Some Inactive devices consumed a license

    • Duplicate licenses were assigned to a single device

    These issues are now fixed.
Reach scripts

  • The following Windows PowerShell script is now available in Script library in the Settings area:

    • Enable Location Services
Reports

  • In some rare cases, you were unable to schedule a report because the Recurrences field reverted to No recurrences after you selected Daily, Weekly, or Monthly. This issue is now fixed.
Rules
  • When a rule is triggered by a Public IP location updated event, the email notification now contains a note stating that the accuracy of the device’s new location may be low.
Upload bulk device file
  • When using a bulk request to submit a device action for more than 500 devices, the Action Requests page for the request may have shown the following information for each device, in some cases:
    • Device name is "No data"
    • Action status is "Pending", and it never updated

    This issue is now fixed.
Feature/Area Details
Core agent update

  • The core agent (rpcnet) has been updated to include performance, stability, and security improvements.

    Absolute will continue to roll out this update in phases over the coming months. The new core agent versions are:

    • Windows: 6004
    • Mac: 7000

    If automatic agent updates are enabled, your devices will automatically begin to upgrade when the new agents are made available for your account. Note that due to the phased approach, it may take several months for all devices to be updated.

    You can verify that a device's core agent has upgraded by reviewing the Agent field on the device's Device Details page.

    The new core agents will be added to the agent installers in the Spring 2025 release. Until that time, you can continue to use the existing installers to deploy the agent to new devices. The devices' core agent will automatically upgrade to the new version when it becomes available.
EDD scan exclusions (New!)
  • You can now exclude files and folders from EDD scans.

    After reviewing the results of an EDD scan, you may find that there are files and folders that you want to exclude. On the new Scan exclusions page in the Policies > EDD Rules area, you can now create a scan exclusion to exclude a specified folder or file extension from all future EDD scans.

    Learn more
Geolocation Tracking

  • You can now configure an account level settings that controls whether IP locations are used to determine a device's primary location when other geolocation technologies (Wi-Fi and OS Location) are unavailable or invalid.

    When this setting is enabled, and an IP location is reported:

    • The location is resolved to the city-level only.

    • A warning icon is displayed next to the location to indicate that it’s based on the device’s public IP address and location accuracy may be low.

    • A location marker is not shown on the map in the console or in email notifications.

    • A Public IP location updated event is logged.

    For existing accounts, the Geolocation setting is enabled by default. For new accounts created after January 2025, the setting is disabled by default. Regardless of the default setting, you can update it, if desired.

    Learn more about the Geolocation setting

  • Previously, when you selected the Show geofences option in map view, geofences associated with an Action rule were not displayed. This issue is now fixed.
History > Events
  • The following events are now logged to Event History:
    • Geolocation setting updated

    • Public IP location updated

      This event is logged only when the Geolocation setting is enabled, and Wi-Fi and OS locations are unavailable or invalid.
Mobile version of the console (New!)

  • A mobile version of the Secure Endpoint Console is now available. The mobile console provides an optimal user experience on both smartphones and tablets.

    In the current release, you can perform the following actions from the mobile console:

    • Search for and view a device
    • Freeze and unfreeze a device
    • Report a device missing or found

    Learn more

    The Absolute Control mobile app is no longer supported. If you downloaded the app from the Apple App Store or the Google Play Store, remove it from your device's Home screen.
Reports

  • When you save a device's EDD Summary page as a user-defined report, the report's Device filter is no longer editable.
User Management

  • The following permissions are now available in the User roles area:

    • Patch vulnerabilities

    • Security vulnerabilities

    • Workflows

    These permissions grant access to the new Vulnerabilities and Workflows features. Learn more
Vulnerabilities and Workflows (New!)

  • This release introduces two new features that you can access from the Secure Endpoint Console.

    Vulnerabilities allows you to deploy operating system and application patches to your devices, while Workflows allows you to create and manage custom task sequences. Collectively, these features offer the following benefits:

    • Faster patch deployment to respond to known OS and software issues.

    • Improved reporting to prioritize devices based on their risk exposure.

    • Continuous visibility and compliance for distributed devices against OS and software issues.

    Learn more