Version 1.0

August 2026

About SonicWall Endpoint Security

SonicWall Endpoint Security (SES) product delivers comprehensive protection against known and unknown threats through a unified, single-agent architecture. It combines next-generation antivirus, endpoint detection and response, and multi-engine threat analysis with streamlined management capabilities. The solution enables organizations to prevent, detect, and respond to advanced threats while simplifying operations across multiple tenants and locations.

Review system requirements

SES is a comprehensive endpoint security solution that protects Windows devices. It is administered from the SES Management Console, a cloud service that requires a web browser and an internet connection. To get maximum performance and protection, evaluate the detailed system requirements outlined below.

1. Minimum System Requirements

   Windows Supported Agent Hardware requirement

   Specification	Minimum requirement	Recommended
   CPU Requirements	1 GHz or better with Dual Core	Dual Core
   Memory Requirements	4 GB RAM or more	8 GB RAM or more (Windows)
   Storage Requirements	2 GB free disk space	3 GB recommended
   OS Requirements	64 bit Windows 10 (OS build 17134)	64 bit Windows 10 (OS build 17134) and above or Windows 11

2. Supported Operating Systems
   • Windows 10 version 1809 (OS build 17134) and above, including Windows 10 Enterprise LTSC 2021 and Windows 10 Enterprise LTSC 2024.
   • Windows 11 all versions.

   • Windows Server 2019 LTSC and above.

     If SES agent is being installed on the Windows Server, we recommend to manually disable the Microsoft Defender. This recommendation is only applicable for Window Server deployments.

3. Minimum Network Requirements

   Network requirement would have minimum 3 Mbps of uplink/download network access with port 443 external ip addresses accessible.

4. Deployment Type

   Cloud Managed.

5. Support and Documentation Links: Refer to the SonicWall Endpoint Security Administration Guide and SonicWall Endpoint Security Cheat Sheet.

What's New

Threat Prevention

• NGAV + EDR (One Agent, Rebootless): A single agent stops known and unknown threats, collects forensic data, and enables investigation and response without requiring a reboot.
• Multi-Engine Detection: Identifies threats through signatures, heuristics, and suspicious activity patterns, including pre-execution detection.
• Cloud Sandbox: Isolates and detonates suspicious files in a secure cloud environment to safely analyze potential threats.

Threat Detection and Response

• Ransomware Restore: Quickly recovers wrongfully encrypted files using VSS shadow copies, minimizing downtime after an attack.
• Device Isolation: Limits lateral movement across the network while allowing investigation and remediation to continue uninterrupted.
• Live and Historical Threat Hunting: Uncovers hidden attacks and suspicious patterns by analyzing endpoint data across time.

Management

• Unified Management: Streamlines operations with a single view for policy control, alerts, and reporting.
• Multi-Tenant Hierarchy: Manages multiple customers or locations from a single platform.
• Integration: Connects seamlessly with PSA, RMM, SIEM, and other security tools.

Security Enhancements

• Achieved 100% Threat efficacy in the latest VB100 test results.

This release also resolves reported issues.

Resolved Issues

Issue ID	Description
TRN-1273	Resolved an issue where scheduled reports were not automatically sent to configured receivers after the specified 24-hour interval.
TRN-1416	Added a copy icon next to the Process Hash field on the Threats page to improve usability.
TRN-1434	Fixed a redirection issue where navigating to the SES console with a specific tenant selected in the scope selector incorrectly redirected users to the organization level instead of the tenant level.
TRN-1392	Resolved an intermittent Blue Screen of Death (BSOD) issue on Windows 10 and Windows 11 machines caused by kernel mode heap corruption.
TRN-1442	Fixed a service crash in SonicWall Endpoint Security SVC that occurred during IofficeScan request handling when scanning Microsoft Office applications such as Access and Outlook.
TRN-1443	Resolved an issue where the driver verifier generated a kernel dump (BSOD) for SES Filter when using Network Attached Storage (NAS) or mapped drives.