Update restrictions for Aurora Protect Desktop

Administrators must follow the supported upgrade path to upgrade the Aurora Protect Agent to version 3.4 when using the updater in the console. Aurora Protect Agent 3.4 cannot be downgraded to an earlier version. After each installation or upgrade, reboot the device.

For more information, see Management console and platform services.

Windows Security Center integration

In the device policy, administrators can now control whether to allow Windows Defender to run as the primary antivirus while the Aurora Protect Desktop Agent is secondary. This setting requires Aurora Protect Desktop Agent version 3.4 or later.

To allow Windows Defender to run as the primary antivirus, in the agent settings menu of a device policy, select the "Disable integration with Windows Security Center" option.

Family name displayed for threat alerts

Script control for Windows devices

In the script control device policy settings, administrators can now separately control how the larger scripts (for example, PowerShell scripts larger than 5 MB) are reported to the Endpoint Defense console when a threat is detected. The separate setting allows administrators to focus on tuning the detection of smaller scripts, which are more likely to be malicious than IT scripts (which are typically larger in size), and enables the agent to achieve optimal blocking posture faster. You can apply the policy settings for each type of script (which includes blocking the script from running) so that these threats are managed together regardless of the size of the script. You can also manage them separately by only sending alerts to the console, or ignoring alerts for large scripts. The default setting is "Ignore large scripts".

Devices must be running Aurora Protect Desktop agent version 3.3 or later.

For more information, see Script control in the Setup content.

USB device control for macOS devices

The Aurora Protect Desktop agent for macOS 3.3 now supports the USB device control feature, which allows administrators to control whether to allow or block access to USB mass storage devices. Administrators can turn on device control for macOS devices from the device policy for storage devices classified as USB optical drives or USB storage drives (such as hard drives or flash drives).

• Administrators can enable this feature for devices through the device policy in the Device Control tab.
• Devices must be running Aurora Protect Desktop agent version 3.3 or later.

For more information, see Device control in the Setup content.