SonicWall Endpoint Security Release Notes

Console 1.0.25

What's New

Threat Prevention

  • NGAV + EDR (One Agent, Rebootless): A single agent stops known and unknown threats, collects forensic data, and enables investigation and response without requiring a reboot.
  • Multi-Engine Detection: Identifies threats through signatures, heuristics, and suspicious activity patterns, including pre-execution detection.
  • Cloud Sandbox: Isolates and detonates suspicious files in a secure cloud environment to safely analyze potential threats.

Threat Detection and Response

  • Ransomware Restore: Quickly recovers wrongfully encrypted files using VSS shadow copies, minimizing downtime after an attack.
  • Device Isolation: Limits lateral movement across the network while allowing investigation and remediation to continue uninterrupted.
  • Live and Historical Threat Hunting: Uncovers hidden attacks and suspicious patterns by analyzing endpoint data across time.

Management

  • Unified Management: Streamlines operations with a single view for policy control, alerts, and reporting.
  • Multi-Tenant Hierarchy: Manages multiple customers or locations from a single platform.
  • Integration: Connects seamlessly with PSA, RMM, SIEM, and other security tools.

Security Enhancements

This release also resolves reported issues.

Resolved Issues

Issue ID

Description

TRN-1273 Resolved an issue where scheduled reports were not automatically sent to configured receivers after the specified 24-hour interval.
TRN-1416 Added a copy icon next to the Process Hash field on the Threats page to improve usability.
TRN-1434 Fixed a redirection issue where navigating to the SES console with a specific tenant selected in the scope selector incorrectly redirected users to the organization level instead of the tenant level.
TRN-1392 Resolved an intermittent Blue Screen of Death (BSOD) issue on Windows 10 and Windows 11 machines caused by kernel mode heap corruption.
TRN-1442 Fixed a service crash in SonicWall Endpoint Security SVC that occurred during IofficeScan request handling when scanning Microsoft Office applications such as Access and Outlook.
TRN-1443 Resolved an issue where the driver verifier generated a kernel dump (BSOD) for SES Filter when using Network Attached Storage (NAS) or mapped drives.