OPSWAT Client

The latest versions of OPSWAT Client currently supported in OPSWAT Central Management are listed below with their corresponding release notes.

Release Date: June 8, 2021

Windows Persistent Client (7.6.459.0)

  1. Support uninstalling the OPSWAT Client with a password via the command-line.

  2. Added additional anti-tampering features:

    • Disable option stop/restart service on Service Manager.

    • Require a password (via CLI command) to stop OPSWAT Client's services.

  3. Provide a Client tray-icon menu to export log files to the desktop.

  4. Updated Client tray-icon to reflect device status.

  5. Removed unneeded Mozilla Firefox components.

  6. Bugs fixed:

    • The client reported patch management and other applications even when the application privacy setting is turned on and those are not enabled on a policy.

    • Properly apply branding package for tray-icon when App UI is disabled and re-enabled again.

    • USB is not accessible after disabling Removable Media Protection feature.

    • Copy from network share to USB was not working.

    • Tray icon on the client was missing.

  7. Built-in SDK signature version: 4.3.2212 .0

Windows On-demand Client (7.3.615.0)

  1. Provide a Client tray-icon menu to export log files to the desktop, thereby, making it easier for users to send logs.

  2. Updated Client tray-icon to reflect device status.

  3. Removed Mozilla Firefox components.

  4. Bugs fixed:

    • The client reported patch management and other applications even when application privacy setting is turned on and those are not enabled on a policy.

  5. Built-in SDK signature version: 4.3.2212 .0

macOS Persistent Client (10.4.325.0)

  1. Provide a Client tray-icon menu to export log files to the desktop, thereby, making it easier for users to send logs.

  2. Updated Client tray-icon to reflect device status.

  3. Bugs fixed:

    • The client always reported patch management and other applications even when the application privacy setting is turned on and those are not enabled on a policy.

    • The client set its keychain as a default keychain sometimes.

    • SDP is not removed when the Client is uninstalled.

  4. Built-in SDK signature version: 4.3.1734.0

macOS On-demand Client (10.5.254.0)

  1. Provide a Client tray-icon menu to export log files to the desktop, thereby, making it easier for users to send logs.

  2. Updated Client tray-icon to reflect device status.

  3. Bugs fixed:

    • The client always reported patch management and other applications even when the application privacy setting is turned on and those are not enabled on a policy.

    • The client set its keychain as a default keychain sometimes.

    • SDP is not removed when the Client is uninstalled.

  4. Built-in SDK signature version: 4.3.1734.0

Release Date: April 21, 2021

Windows Persistent Client (7.6.453.0)

  1. Only reports applications in categories enabled in a policy if an account turns on privacy setting for applications

  2. Support rebranding OPSWAT Client UI

  3. Support s can file when copying from PC to USB

  4. Bugs fixed:

    • The client did not update a device's active MAC address in registry

  5. Built-in SDP version: 1.1.7.3867

  6. Built-in SDK signature version: 4.3.2140.0

Windows On-demand Client (7.3.608.0)

  1. OPSWAT Client only reports applications in categories enabled in a policy if an account turns on privacy setting for applications

  2. Built-in SDK signature version: 4.3.2140.0

macOS Persistent Client (10.4.319.0)

  1. OPSWAT Client only reports applications in categories enabled in a policy if an account turns on privacy setting for applications

  2. Bugs fixed:

    • The client could not run a custom check sometimes

  3. Built-in SDP version: 1.1.39

  4. Built-in SDK signature version: 4.3.1734.0

macOS On-demand Client (10.5.252.0)

  1. OPSWAT Client only reports applications in categories enabled in a policy if an account turns on privacy setting for applications

  2. Bugs fixed:

    • The client could not run a custom check sometimes

  3. Built-in SDK signature version: 4.3.1734.0

Release: March 16, 2021

Windows Persistent Client (7.6.441.0)

  1. The agent auto-upgrades SDK based on the SDK auto-upgrade setting on an account.

  2. Support users to scan files/folders with MetaDefender from the command line.

  3. Support malware scan with MetaDefender on boot sectors.

  4. Bugs fixed:

    • The client could not upgrade itself sometimes.

    • The Cross-domain API didn't work well when a user have not rebooted a device for a long time.

    • SDP service was auto-restarted once a day.

  5. Built-in SDP version: 1.1.7.3867

  6. Built-in SDK signature version: 4.3.1748.0

  7. Known issues:

    • Windows 7 and Windows Server 2008 devices must install KB2533623 and KB3033929 in order to upgrade to the latest version.

    • If a user exits the agent tray icon, the agent can’t popup approved actions when a user inserts a portable media.

    • A user needs to enable Show Notifications on the agent tray icon to see notifications about portable media.

    • The agent has not supported the portable media feature if user 2 logs into a device while user 1 is still logged in.

    • OPSWAT Client does not support iTunes drive. If a user inserts an iOS device on an endpoint that has iTunes installed, the user will still have access to the phone via iTunes.

    • OPSWAT Client can't detect mobile devices, the user needs to unplug and plug in the mobile device again.

Windows On-demand Client (7.3.598.0)

  1. Add new CLI arguments

    • /compliance_check <value>: specifies which compliance check (health check, scan malware with MetaDefender, patch management) the client should do when a user runs the client with the runonce option.

    • /notrayicon: tells the client to hide the OPSWAT Client tray icon

  2. Support on-demand compliance check triggered from MetaAccess/OPSWAT Central Management console.

  3. Support malware scan with MetaDefender on boot sectors

  4. Bugs fixed:

    • The client failed to start if a product name in the runwhile option has spaces

    • The Cross-domain API didn't work well when a user have not rebooted a device for a long time.

  5. Built-in SDK signature version: 4.3.1748.0

macOS Persistent Client (10.4.317.0)

  1. The agent auto-upgrades SDK based on the SDK auto-upgrade setting on an account

  2. Built-in SDP version: 1.1.1.29

  3. Built-in SDK signature version: 4.3.1532.0

macOS On-demand Client (10.5.250.0)

  1. Add new CLI arguments

    • /compliance_check <value>: specifies which compliance check (health check, scan malware with MetaDefender, patch management) the client should do when a user runs the client with the runonce option.

    • /notrayicon: tells the client to hide the OPSWAT Client tray icon

    • /skip_request_files_permission <0|1>: tells the client to skip requesting permission from users

  2. Support on-demand compliance check triggered from MetaAccess/OPSWAT Central Management console.

  3. Built-in SDK signature version: 4.3.1532.0

Release: February 02, 2021

Windows Persistent Client (7.6.429.0)

  1. Custom script

    • Secure a custom script when the OPSWAT Client executes the script. Note that this is only applied for a single script.

    • Check integrity of a custom script when the OPSWAT Client executes the script.

  2. Removable media protection

    • Ignore removable media that is not formatted based on a policy settings.

    • Add support Kanguru Defender Manager Elite USB+.

  3. Client User Interface:

    • Enhanced a rebranding package settings to allow admins to hide/show app management screen on the Client UI. This feature is only available to customers who licensed either MetaAccess/OCM.

    • Enhanced user experience.

  4. Minor enhancements:

    • Support Chinese in the Advanced Malware Scan report.

    • Report a log to MetaAccess/OCM servers when the client blocks a removable media device.

  5. Bugs fixed:

    • The client did not terminate powershell process if a user uninstalls the client while the client is executing the custom script

  6. Built-in SDP version: 1.1.6.3662

  7. Built-in SDK signature version: 4.3.1714.0

  8. Known issues:

    • Windows 7 and Windows Server 2008 devices must install KB2533623 and KB3033929 in order to upgrade to the latest version.

    • If a user exits the agent tray icon, the agent can’t popup approved actions when a user inserts a portable media.

    • A user needs to enable Show Notifications on the agent tray icon to see notifications about portable media.

    • The agent has not supported portable media feature if user 2 logs into a device while user 1 is still logged in.

    • OPSWAT Client does not support iTunes drive. If a user inserts an iOS device on an endpoint which has iTunes installed, the user will still have access to the phone via iTunes.

    • OPSWAT Client can't detect mobile devices, the user needs to unplug and plug in the mobile device again.

Windows On-demand Client (7.3.588.0)

  1. Custom script

    • Secure a custom script when the OPSWAT Client executes the script. Note that this is only applied for a single script.

    • Check integrity of a custom script when the OPSWAT Client executes the script.

  2. Minor enhancement:

    • Support both runwhile and runone options in the command line. The client will exit if either the client has done the first device compliance check or conditions in the runwhile option are met.

  3. Bugs fixed:

    • The client did not terminate powershell process if a user uninstalls the client while the client is executing the custom script.

    • The client did not popup the remediation page with runonce 3 option even malware is detected.

  4. Built-in SDK signature version: 4.3.1714.0

macOS Persistent Client (10.4.313.0)

  1. Custom script

    • Secure a custom script when the OPSWAT Client executes the script. Note that this is only applied for a single script.

    • Check integrity of a custom script when the OPSWAT Client executes the script.

  2. Built-in SDP version: 1.1.1.29

  3. Built-in SDK signature version: 4.3.1532.0

macOS On-demand Client (10.5.246.0)

  1. Custom script

    • Secure a custom script when the OPSWAT Client executes the script. Note that this is only applied for a single script.

    • Check integrity of a custom script when the OPSWAT Client executes the script.

  2. Minor enhancement:

    • Now support both runwhile and runone options in the command line. The client will exit if either the client has done the first device compliance check or conditions in runwhile option meet.

  3. Built-in SDK signature version: 4.3.1532.0

Release: December 28, 2020

Windows On-demand Client (7.3.558.0)

  1. Fixed an issue that OPSWAT Client cannot run cross domain API on non-admin on-demand agent

  2. Built-in SDK signature version: 4.3.1646.0

Release: December 23, 2020

Windows Persistent Client (7.6.391.0)

  1. Support anti-keylogger and screen capture protection on a device based on a policy. When a user takes a screenshot, the user will see a message that (s)he is not allowed to take a screen shot.

  2. Introduce OPSWAT Client User Interface to allow users interact with

    1. Malware Detection:
      Users can on-demand scan a device based on the policy settings or other options, such as Full scan, Memory scan, custom scan
      User can view history scan

    2. Removable Media:
      Users can view what media OPSWAT Client is blocking and perform allowed actions on a media
      Users can view action history

    3. App management:
      Users can view all applications installed on a device. The OPSWAT Client lets users know status of each app (out of date, vulnerable status)
      Users can upgrade or uninstall an application in one single pane of glass. 3.

  3. Support retain the last group the device was assigned to for next time it enrolls to an account.

  4. Security enhancement: change the algorithm used to store/exchange sensitive data that secures your account.

  5. Minor enhancements:
    support ignore_raw_media to allow users burn CD/DVD

  6. Bugs fixed:

    1. The client reported wrong version.

    2. The client was not signed properly. This caused a user gets a popup when the client runs sometime.

    3. The client didn't send report if it's failed to get configuration from MetaAccess/OCM.

    4. The client couldn't deploy or upgrade SDP component if the logged in user is a standard user.

  7. 7. Built-in SDK signature version: 4.3.1646.0

Release: December 15, 2020

Windows Persistent ( 7.6.374.0)

  1. Fixed an issue that the client failed to upgrade to a newer version and couldn't start again.

  2. Enhanced the OPSWAT Client to support run multiple scripts for custom check. The admin needs to upload a zip package that includes multiple scripts.

  3. Support setting for open report file after scanning

  4. Fix CD/DVD burning issue

  5. Built-in SDK signature version: 4.3.1614.0

Windows Ondemand (7.3.541.0)

  1. Enhanced the OPSWAT Client to support run multiple scripts for custom check. The admin needs to upload a zip package that includes multiple scripts.

  2. Built-in SDK signature version: 4.3.1614.0

Release: October 28, 2020

Windows Persistent Client (7.6.350.0)

  1. Enhanced communication to MetaAccess/OPSWAT Central Management servers.

  2. Skip scanning a file based on file exception setting configured on a policy. This setting is only available on OPSWAT Central Management 7.10+.

  3. Security enhancement.

  4. Built-in SDK signature version: 4.3.1513.0

  5. Known issues:

    • Windows 7 and Windows Server 2008 devices must install KB2533623 and KB3033929 in order to upgrade to the latest version

    • If a user exits the agent tray icon, the agent can’t popup approved actions when a user inserts a portable media

    • A user needs to enable Show Notifications on the agent tray icon to see notifications about portable media

    • The agent has not supported portable media feature if user 2 logs into a device while user 1 is still logged in

    • OPSWAT Client does not support iTunes drive. If a user inserts an iOS device on an endpoint which has iTunes installed, the user will still have access to the phone via iTunes

    • OPSWAT Client can't detect mobile devices, the user needs to unplug and plug in the mobile device again

Windows On-demand Agent (7.3.525.0)

  1. Enhanced communication to MetaAccess/OPSWAT Central Management servers.

  2. Skip scanning a file based on file exception setting configured on a policy. This setting is only available on OPSWAT Central Management 7.10+.

  3. Security enhancement.

  4. Built-in SDK signature version: 4.3.1513.0

macOS Persistent Agent (10.4.294.0)

  1. Skip scanning a file based on file exception setting configured on a policy. This setting is only available on OPSWAT Central Management 7.10+.

  2. Built-in SDK signature version: 4.3.1415.0

macOS on-demand Agent (10.5.222.0)

  1. Skip scanning a file based on file exception setting configured on a policy. This setting is only available on OPSWAT Central Management 7.10+.

  2. Built-in SDK signature version: 4.3.1415.0

Release Date: August 18, 2020

Windows Persistent Client (7.6.330.0)

  1. Custom script can be run as a defined privilege in a policy which the device is assigned to.

  2. Custom script is now stored in a secure form instead of plain text.

  3. Add a signature to a cross-domain API's response to allow 3rd party to validate whether the API response comes from OPSWAT Client.

  4. Report what OPSWAT Client copied from local drives to a removable media if the devices are assigned to a policy that enables this feature.

  5. Bug Fixed:

    • OPSWAT Client couldn't connect to the server if the device was removed because it had stayed unseen for a long time on the server.

    • Users couldn't open sanitized files OPSWAT Client copied due to the client having created the new files with system privilege.

    • The client sometimes didn't show the Action Required message even if the device has issues and is non-compliant.

    • Memory leak in OPSWAT Client.

    • File path was shown incorrectly if it includes Hebrew characters.

  6. Updated built-in SDK signature: 4.3.1416.0

  7. Known issues:

    • Windows 7 and Windows Server 2008 devices must install KB2533623 and KB3033929 in order to upgrade to the latest version.

    • If a user exits the agent tray icon, the agent can’t popup approved actions when a user inserts a portable media.

    • A user needs to enable the Show Notifications option on the agent tray icon to see notifications about portable media.

    • The agent does not support portable media feature if a second user logs into a device while a first user is still logged in.

    • OPSWAT Client does not support iTunes drive. If a user inserts an iOS device on an endpoint which has iTunes installed, the user will still have access to the phone via iTunes.

    • If OPSWAT Client can't detect the plugged-in mobile device, the user needs to unplug and plug in the mobile device again.

Windows On-demand Agent (7.3.507.0)

  1. Custom script can be run as a defined privilege in a policy which the device is assigned to. If the specified privilege in the policy is higher than the privilege the client runs as, it will try to run as the higher privilege if allowed.

  2. Custom script is now stored in a secure form instead of plain text.

  3. Add a signature to a cross-domain API's response to allow 3rd party to validate whether the API response comes from OPSWAT Client.

  4. Bugs fixed

    • OPSWAT Client couldn't connect to the server if the device was removed due to unseen for a long time on the server.

    • The client sometimes didn't show the Action Required message even if the device has issues and is non-compliant.

  5. Updated built-in SDK signature: 4.3.1416.0

macOS Persistent Agent (10.4.289.0)

  1. Custom script can be run as a defined privilege in a policy which the device is assigned to. If the specified privilege in the policy is higher than the privilege the client runs as, it will try to run as the higher privilege if allowed.

  2. Custom script is now stored in a secure form instead of plain text.

  3. Add a signature to a cross-domain API's response to allow 3rd party to validate whether the API response comes from OPSWAT Client.

  4. Bugs fixed

    • The client couldn't upgrade sometimes.

    • The client didn't popup the remediation page when the device is non-compliant after the fresh installation.

  5. Updated built-in SDK signature: 4.3.1301.0

macOS on-demand Agent (10.5.217.0)

  1. Custom script can be run as a defined privilege in a policy which the device is assigned to. If the specified privilege in the policy is higher than the privilege the client runs as, it will try to run as the higher privilege if allowed.

  2. Custom script is now stored in a secure form instead of plain text.

  3. Add a signature to a cross-domain API's response to allow 3rd party to validate whether the API response comes from OPSWAT Client.

  4. Bugs fixed

    • The client didn't popup the remediation page when the device is non-compliant after a fresh installation.

  5. Updated built-in SDK signature: 4.3.1301.0

Frequently asked questions: