Or better yet it just builds a custom MSI as you see in ITSM.
One click installation is on the way for the upcoming release.
Hello,
It’s been a little while since we announced the previous release so I think it’s about time to bring a new one to the stage.
This release mostly comprises DB infrastructure improvements which yields in significantly faster queries against anything. Also we introduced “query save” concept to our web portal to enhance user experience.
Before we jump into details let’s start with versioning.
- Comodo EDR Server 0.10.0
- Comodo Endpoint Agent 1.1.252.2
Table structure in the DB have been partitioned in a way to serve with an improved performance. Please keep in mind that no data loss has been occurred during the migration process to the newly structured tables.
New Features In-session Search History
The queries that users run are now auto saved within a session. In other words, the recent queries that a user has run since the last login are now automatically saved and can be retrieved anytime within the same session. The use case is akin to the auto-history save function of web browsers. For ease of use and intuitiveness the interface is also inspired from web browsers people are quite familiar with.
On-demand Query Save
Users are now able to save their queries and recall them anytime they wish. This allows a certain level of customization on queries and improves user experience. When a user writes a query he can press the “save query” button to save his query under a name that he gives.
He then can recall a query that he previously saved by clicking on “my queries”.
Resolved Issues
This release of the software includes the following resolved issues and improvements:
Issue: Agent service does not restart when a newer version is automatically updated. This causes endpoint agent version not to be updated.
Resolution: Agent code has been changed so that the existing service is forced to kill followed by a restart to run the binary files and hence update the agent version.
Issue: More than one agent run simultaneously on the same device after update.New agent version installed in a device does not replace the old one so that you could see both programs running simultaneously.
Resolution: Agent code has been changed to solve the issue.
Issue: Poor performance of queries under some circumstances.
Resolution: Tables in the DB have been partitioned for improved performance. The old data migrated into partitioned DB structure so there has been no data loss.
I hope we could take your EDR experience one step further. Please stay tuned for the next release.
Alphan Erten
I see the new agent is now and EXE, no more bat files, cert errors and REG files to install. Just installed on my WIN10 laptop ok.
How can we push this out via GP?
James.
I have a lot of client’s that is outside our domain network and GPO is no good solution, can I push this with ITSM? Or could this function be built in to the ITSM agent? Or I will have a lot of agents on every device.
As its an exe install you could email this link What is EDR (Endpoint Detection and Response)? | Free EDR then the end user just clicks next, next etc?
That is an option, you can’t install exe files through ITSM, only MSI?
I think there is a couple of exe to msi converters out there but I don’t know if they work.
Other option is Comodo write a lovely script
This is the ideal option, however if you have access to a server in those internal networks you could deploy using something like PDQ Deploy free.
yes we should write a script asap…
Hi @dittoit
I am observing issues with token ID of EDR agent to provide auto installation script. Let me discuss with core developers team and update you the process .
Thanks
Kannan
Hi @dittoit
Please refer the following link to Enroll COMODO EDR agent (.exe) file automatically:
https://scripts.comodo.com/frontend/web/topic/enroll-comodo-edr-agent
Hi,
Can anyone of you answer my question here about cWatch or cWatch EDR?
https://c1forum.comodo.com/forum/products/other-comodo-products/cwatch/17465-cwatch-or-cwatch-edr
Hi @Noiden
Your question is replied here, please follow the link:
https://c1forum.comodo.com/forum/products/other-comodo-products/cwatch/17465-cwatch-or-cwatch-edr
Thanks,
Servet.