Dashboard

New KES Dashboard function added. Provides quick views of the following:

• Endpoint Security Statistics
• License Status
• Top Machines with Threats
• Top Threats Discovered

Security Status

• Reboot now action button added. Some security updates require a reboot to install the update.
• Version number of latest antivirus definition installed displays in red text if older than five versions from the latest version available.
• New columns showing whether Link Scanner and Web Shield are enabled or disabled
• If Resident Shield protection is enabled but less than the default settings, the icon and tooltip shows Resident Shield as "partially enabled".
• Tooltips now reports the status of a particular icon.

Reboot Icon, Tool Tip and Version Number

Security protection updates sometimes require a reboot of the managed machine to complete the update. A new reboot icon has been added to the anti-virus definition version column and displays alongside the existing, pre-update version number. The corresponding tooltip says, "Reboot to complete update." Prior to the reboot, the protected machine continues to use the existing version of anti-virus definitions. After the reboot, the new version of anti-virus definitions are used and the new version number displays. This change downplays the "requirement"  for rebooting.  When a reboot is needed, it is needed only to complete the previous update.  The machine is still protected while a reboot is pending and the admin can reboot at their leisure.

Manual Update

Added Update from Internet (Override file source) option. If checked, updates are downloaded from the internet directly. If blank, updates are downloaded using the method specified in Patch Mgmt > File Source.

Change to LAN Based Update Logic

If a LAN-based File Location is specified for a managed machine, KES uses this file location to download installation files and security definitions.   The LAN-based file location is updated only when AVG labs releases a new version.  The endpoints update from this location staggered based upon the existing logic. This solves the problem of AVGINETL scripts backing up on the LAN-based server.

Enabling/Disabling Kaseya Managed Automatic Updates

You can now disable/enable Kaseya managed automatic updates to the endpoints.  In the event of needing a specific schedule (a feature planned for future versions), you can disable the Kaseya based automatic update and use the schedule on each endpoint.

Disable/Enable Resident Shield Using Scripts

You can now disable/enable Resident Shield using the following Execute Shell Commands in an script:

In the agent temp directory, run:

C:\Temp\kes>KasAVCmd -setFileMonitorEnable 0   ;disables Resident Shield

C:\Temp\kes>KasAVCmd -setFileMonitorEnable 1   ;enables Resident Shield

Script Name: KES_Enable Resident Shield

Script Description: Enables Resident Shield temporarily
until next scan or reboot...unless it is enabled by default
and is being re-enabled after being temporarily disabled)

IF True

THEN

   Get Variable

     Parameter 1 : 10

     Parameter 2 :

     Parameter 3 : agenttemp

         OS Type : 0

   Execute File

     Parameter 1 : #agenttemp#\kes\KasAVCmd.exe

     Parameter 2 : -setFileMonitorEnable 1

     Parameter 3 : 3

         OS Type : 0

ELSE

Script Name: KES_Disable Resident Shield

Script Description: Disables Resident Shield temporarily 
until next scan or reboot)

IF True

THEN

   Get Variable

     Parameter 1 : 10

     Parameter 2 :

     Parameter 3 : agenttemp

         OS Type : 0

   Execute File

     Parameter 1 : #agenttemp#\kes\KasAVCmd.exe

     Parameter 2 : -setFileMonitorEnable 0

     Parameter 3 : 3

         OS Type : 0

ELSE

Clearing Current Threats on Each Scan

On each scan, any current threats are now cleared out and marked as being resolved.  If the threat still exists, it will be rediscovered and listed in current threats.

Virus Vault Changes

To improve Kaseya Server performance, virus vault changes are only reported to the Kaseya Server when the KES protected machine boots up or when threats are added or deleted from the virus vault. This changes the logic of syncing up the entire contents of the virus vault each update.

All Log Entries

All log entries are now displayed on the View Log page.

Uninstall Log

When KES is uninstalled, an uninstall log is written to the managed machines temporary \kes folder found in the agent temp directory, typically c:\temp\kes.

Auto Extend Licenses

Two new action buttons have been added to the Extend/Return function. Auto Extend enables automatic allocation of a new license the day the old license expires for selected machine IDs. Partial licenses are allocated first, then full licenses. If no additional licenses exist, allocation fails and security protection expires for the endpoint. Remove Auto Extend disables auto extend for selected machine IDs. These two options only display for master administrators.

Licenses Expiring within 30 days

Licenses can now be filtered to show only licenses expiring within 30 days.

Default for Auto-Extend

By user request, Kaseya Support can now enable auto-extend by default. Auto-extend is normally disabled by default.

Install Remove – Update from KServer

Added Update from KServer (override file source) option. If checked, installs are downloaded from the Kaseya Server. If blank, installs are downloaded using the method specified in Patch Mgmt > File Source.

Conflicting Application Update

Updated the list of conflicting applications recognized by KES when installing the KES client.

Install / Remove - User Defined Application Conflicts

Kaseya maintains a list of standard applications that conflict with the KES client. You can ensure you are warned about additional applications that conflict with the KES client by listing them in a file on the Kaseya Server. The typical Kaseya Server install location is:

C:\Kaseya\WebPage\AntivirusTab\SeedData\UserConflictExes.txt

UserConflictExes.txt is a comma separated list of user specified KES conflicting programs, one entry per line.  Line entries should be formatted as follows:

example.exe, description of example.exe, reason for exclusion, excluded by which tech

example2.exe, another description, reason, who excluded example2.exe

Use // at the beginning of any line to add comments.

The warning is displayed in the Install Status column of the Install/Remove page. The warning also displays if the conflicting application is installed after the KES client is installed and a latest audit is performed. A KES application conflict log entry is generated if the KES client is installed despite the existence of a conflicting application.

Install Remove - Installation Options

The Installation Options dialog has been changed into a standard action button on the Install/Remove page. After the KES client is installed on a machine ID, the installation options applied to that machine ID can be viewed by clicking the green check mark in the Install Status column.

Identity Protection

The Identity Protection component is now an installation option. See http://www.avg.com/product-avg-identity-protection for more information.

Firewall  and Protection ID

The following new options can only be set by KES during installation.

• Firewall
• Protection ID

After installation, KES cannot be used to change these settings.

Disable Windows Defender Option

A new "Disable Windows Defender" has been added to the Installation Options dialog box. Running Windows Defender significantly degrades the performance of KES and should be disabled by default using this option.

Define Profiles

The following System Tray Notification settings have been added to the General tab of Define Profiles:

• Display system tray notifications - If checked, the following system tray notifications can be optionally enabled. All notification messages display on the managed machine next to the system tray.
• Display tray notifications about update - If checked, displays a notification message that the KES software is being updated.
• Display tray notifications about scanning - If checked, displays a notification message that the machine is being scanned.
• Display Resident Shield related tray notifications (automatic action) - If checked, displays a notification message that Resident Shield has taken action against a threat.
• Display components state change notification - If checked, displays a notification message that the state of one of the KES components has changed.
• Display E-mail Scanner related notifications - If checked, displays a notification message that email scanning has taken action against an email threat.

The Run System Scan upon KES Start Up settings have been removed.

Automatic Installation of Exchange Server Email Protection

During the install of KES on a machine, if MS Exchange is detected, the plugin for MS Exchange email protection is automatically installed. The install page for MS Exchange email protection has been changed to Exchange Status. It displays the install status of all MS Exchange servers that have KES installed.

AVG Installer and AVG Installer for Exchange

When the KES 2.1 module is first installed on the VSA:

• The 406 version of the AVG 8.5 workstation installer is used initially, prior to uploading the latest version of the installer during its first "once per day" check. KES 2.1 may be out of date until this process runs.
• No version of the AVG installer for Exchange is available until it is downloaded during the second "once per day" check. This is to prevent overwhelming the system with lots of downloads.  Do not install KES 2.1 on any MS Exchange server until after the second day.

AVG Removed by User Alert

A new "AVG Removed by User" alert has been added to Define Alarm Sets. The alert is triggered if the user uninstalls AVG from the managed machine.

Alert Issues Fixed

The following KES alert issues have been fixed:

• duplicate alerts
• missing subject
• reboot alarms were not created
• missing submitter information
• alert wording on tickets & email changes
• added missing info on tickets