Endpoint Agent Release Notes - April 2026

Features or Fixes

• Feature: Supports dynamic Smart Scan feature

• Feature: Supports MSP contact information in the Agent's "About" dialogue.

• Feature: Support for ignoring OS patch update rules defined in OneView.

• Feature: Support for ignoring 3rd party application update rules defined in OneView.

• Improvement: Properly detect AzureAD endpoints as workstations.

• Improvement: The agent now ensures all required components are downloaded together before applying an update, reducing the chance of a partial or failed upgrade.

• Improvement: Endpoints are now automatically directed to the appropriate upgrade path based on their current state, helping ensure a smoother and safer transition to the latest agent version.

• Improvement: The agent's command-line management tool has been modernized under the hood, improving reliability and performance for IT administrators who use it to manage endpoints.

• Improvement: The agent removes duplicate scan tasks so only one scan runs per inserted USB device.

• Improvement: The agent skips Active Directory lookups for local accounts to avoid unnecessary queries and potential throttling.

• Improvement: Improved 3rd-party software upgrades on Windows 11 with Smart App Control enabled, preventing installation from being blocked.

• Improvement: Improved customer-facing messaging when a 3rd-party app update fails.

• Fix: Fixed an issue where the Endpoint Agent would get stuck in a restart loop.

• Fix: Fixed an issue where Windows 11 Home devices were not being recognized as workstations, which could prevent protection features from being applied correctly on those machines.

• Fix: Resolved an issue where deploying browser extensions on devices managed via Chrome MDM would fail; the agent now correctly continues deployment when the "Continue on MDM conflict" policy setting is enabled.

• Fix: Fixed a network connectivity issue that could occur on devices using Cisco AnyConnect VPN alongside ThreatDown DNS Filtering.

• Fix: Fixed an issue where entering the correct tamper protection password via the command-line tool would still result in an "Unable to validate password" error.

• Fix: Fixed a timing issue during Browser Phishing Protection startup that could occasionally cause the plugin to fail to initialize properly.

• Fix: Fixed an issue where the agent would repeatedly log redundant warnings in the Windows Event Viewer when browser extensions were detected on an endpoint.

• Fix: Fixed an issue that caused certain language files to break during 3rd-party software updates, ensuring they now load correctly for customers using regional settings.

• Fix: Fixed an issue that caused authentication to fall back to a slower method more often than necessary, improving reliability and performance when connecting to domain resources.

• Fix: Fixed an issue where the agent could freeze during startup if it couldn't reach the cloud service, ensuring it now continues running smoothly even when the network is unavailable.

Refer to the table below for the changes to the Endpoint Agent on Windows and Windows ARM included in this release.