Release Notes Symantec Support (Version 2.11)
Thank you for choosing Tanium. This article is intended to document changes between releases of Symantec Support.
Symantec Support 2.11.2.0034
Release Date: August 21, 2018
Important Note
All updates going forward, to include this release, no longer support SEP 11.0. Focus will be on SEP 12.1 and 14.0.
Fixes
The sensors updated for Linux support in the previous release were triggering a TaniumClient process core dump in client version 6.0.314.1321. Linux clients older than 6.0.314.1554 do not support internal execution of Python. The sensors have been updated to use external execution to account for customers with the older client deployed.
Enhancements
Content Set
New with this release is a Symantec Content Set. Previously, all content was part of the Default Content Set. As the solution continues to expand, there's a large number of items that some customers now want to have separated from Default. For new imports of the solution, all content will reside in the Symantec Content Set by default. For upgrade imports of the solution, tick the box to overwrite the content set during import, if you want to move the content in to Symantec Content Set.
Please request assistance from your Technical Account Manager, if desired.
Sensors
The following sensor has been added:
- SEP Client Installed - This sensor returns a simple True or False based on if the SEP Client is installed or not on the endpoint, to make it easier/more intuitive to find your Tanium-managed endpoints that are missing the SEP Client and you want to target an action to them.
Known Issues and Workarounds
None
Symantec Support 2.11.1.0005
Release Date: July 31, 2018
Important Note
All updates going forward, to include this release, no longer support SEP 11.0. Focus will be on SEP 12.1 and 14.0.
Enhancements
With this release the solution now supports the new Python interpreter, which means there is a dependency on IC-Python being imported with packages deployed to Mac and Linux systems where the SEP client is installed. IC-Python is currently available on the Labs manifest.
When IC-Python is imported it automatically sets the enable_python_jscript_type_flag global setting and removes the legacy Python for Endpoints solution. Bear this in mind if you have other Python content deployed that was developed on the legacy solution as it will stop working, until your content is updated, when IC-Python tools are deployed.
Sensors
The following Mac sensors have been updated to support IC-Python:
- SEP Client AV Running State
- SEP Client Group
- SEP Client Hardware ID
- SEP Client IPS Revision
- SEP Client Last SEPM Used
- SEP Client Location
- SEP Client Policy Serial Number
- SEP Client Reboot State
- SEP Client Version
- SEP Client Virus Definitions Age
- SEP Client Virus Definition Revision
The following sensors now support Linux:
- SEP Client AV Running State
- SEP Client Group
- SEP Client Last SEPM Used
- SEP Client Location
- SEP Client Policy Serial Number
- SEP Client Version
- SEP Client Virus Definitions Age
- SEP Client Virus Definition Revision
Known Issues and Workarounds
Linux clients older than 6.0.314.1554 may perform core dumps of the TaniumClient process when the Linux supported sensors are used. This is due to the older client versions not supporting internal execution of Python. Upgrade the solution to 2.11.20034, or newer, for resolution.