Management and Security
What's new in Ivanti® Endpoint Manager and Endpoint Security for Endpoint Manager
Ivanti® Endpoint Manager and Endpoint Security for Endpoint Manager has switched to an annual release schedule. This new schedule consists of a major yearly release, and then ongoing cumulative service updates for that release that may contain new features.
Not all updates in a release require documentation changes. For a complete list of updates, refer to the release's Ivanti Community readme.
Version 2019.1
- Initial release readme (Ivanti Community).
- Agentless remote control. Self-contained remote control agent application for Windows and macOS devices.
- Standalone remote control viewer. Self-contained remote control viewer application for administrators and helpdesk personnel.
- Patch impact analysis. Analyze the impact of patches on your environment before you deploy them.
- Patch definition filtering. Helps you easily define what you want to patch in your environment.
- CVE to patch. Import a .csv formatted list of CVEs and automatically map them to patch data.
- Endpoint Security agent settings interface simplification. It's now easier to configure Endpoint Security agent settings.
- Software distribution Windows action improvements. More supported Windows actions with enhanced reboot and logging support.
- Core sync security improvements. Core sync now uses certificates and trust relationships between core servers. When upgrading to 2019.1, you must configure these items for core sync to work.
- Client cache retention customization. You can now customize distribution and patch cache retention for packages and patches. This customization overrides the default global cache retention settings.
- Privilege management. Integration with the Ivanti Application Control product so you can deploy Application Control configurations using Enpoint Manager.
- New MDM payloads. New settings payloads have been added to the configuration profile editor for macOS configurations, macOS device configurations, mobile compliance, iOS configurations, tvOS configurations, and Windows configurations.
- New Apple mobile device commands. Send commands to Apple mobile devices to restart, shutdown, or enable lost mode on a device. These commands can be sent by right-clicking on a device in the inventory or through the diagnostics tool.
Version 2019.1 service updates
Service update documentation changes:
Service update 1
- Android Enterprise work profile management. Use Android Enterprise work profiles to manage settings and apps on devices, perform device actions from the console, and secure and separate corporate data from personal data.
Service update 2
- Reported patches security activiy view. This new feature analyzes and summarizes how successful your Windows patch deployments have been.
- Ivanti Antivirus 2017 Real-time protection tab. Use this new tab to configure real-time protection options.
- New remote control authentication option. There's a new Windows NT security server authenticated remote control option. This is similar to the existing Windows NT security/local template option but is more secure.
- Windows action continue on failure option. When configuring software distribution Windows actions, you can now select a Continue on failure option for each step. This allows an action package to complete successfully even if an action in it can't complete.
- Privilege management agent deployment options. You can now maintain and deploy multiple privilege management agent versions.
Service update 3
- Android Enterprise fully managed device mode. Android Enterprise fully managed device mode offers extensive control over device policies, settings, and applications for your company owned devices.
- Android Enterprise kiosk device mode. Kiosk mode is for devices intended for a single use or an extremely limited scope of use. Kiosk mode (also known as dedicated device mode) locks fully managed devices to a single app or set of apps.
- Wi-Fi settings for mobile Android configurations. When configuring agent settings for Android devices, you can create a Wi-Fi payload to define how devices connect to your network.
- CrowdStrike security activity view. This new feature helps you identify devices that don't have a CrowdStrike agent installed. In a single place view CrowdStrike agent status and agent details from both CrowdStrike and the Ivanti inventory scanner.
- Software distribution cloud storage. Store your software distribution packages on Amazon S3 or Azure blob storage for deployment anywhere in the world. Use this alongside or in place of your existing preferred servers.
Readmes from the Ivanti Community:
- Service update 1 readme (Ivanti Community).
- Service update 2 readme (Ivanti Community).
- Service update 3 readme (Ivanti Community).
Version 2018.3
- Initial release readme (Ivanti Community).
- Remote Control WS enhancements. You can now use role-based administration, file transfer, and remote file execution with the new remote control engine.
- Custom variable support for Windows actions. You can now add custom variables that can be used in Windows PowerShell package actions.
- Improved Endpoint Security agent setting. Simplifies endpoint security configuration. Many of the options in this agent setting can be configured in other agent settings, but this agent setting gathers important options in one place and helps you configure Endpoint Security by following Ivanti's recommended best practices.
- Patch user feedback. When enabled, this feature installs a special driver on Windows endpoints that monitors file changes and deletions made by patches. Users on endpoints will also have a new "Report broken application" tool that they can use to report problems, helping administrators identify the associated patches and files.
- Windows Autopilot support. You can now automatically enroll Windows 10 devices in MDM by integrating Azure Active Directory and your MDM server.
- MSI software distribution for Windows MDM devices. You can now create MSI software distribution packages for MDM managed Windows devices.
- New packages for distributing the agent to MDM devices. You can now create packages to automatically install the Agent on Windows 10 and macOS devices during MDM enrollment. The same packages can also be used to install the Agent on devices that are already enrolled in MDM.
Version 2018.1
- Initial release readme (Ivanti Community).
- Software distribution enhancements. Added maintenance window and do not disturb support. Added email address targeting (based on Computer.LDAP User.Primary Owner.Email) in tasks.
- Portal Manager enhancements. Now supports full rebranding, including custom fonts, taskbar icon, corporate logo, header background, and application background.
- Diagnostics tool enhancements. Granular RBA rights support. New reboot, shutdown tools. Can now rename Windows computer names.
- New HTML5 Web Sockets remote control. Redesigned higher-performing and more secure remote control.
- Windows CSP support. You can now configure Windows CSPs (Configuration Service Profiles) and deploy them through MDM (Mobile Device Management).
Was this article useful?