SUPPORTED FEATURES BY OPERATING SYSTEM

SUPPORTED FEATURES BY OPERATING SYSTEM

The following tables indicate feature support per operating system, in areas where there are differences in operating system support.

NOTE

This list includes main product features and is not a comprehensive list of all product features. This list includes only features that behave differently on different operating systems. If a feature does not appear in this list, the feature is supported for all supported operating systems.

In this topic:

  • Sensor platform features
  • Collection features
  • Response features
  • Prevention features
  • Mobile features

SENSOR PLATFORM FEATURES

Feature Windows 7SP1, 8, 8.1, 10, Windows Server 2008 R2 SP1, 2012, 2012 R2, 2016, 2019 Mac (all versions) Linux: CentOS, RHEL, Oracle Linux, Amazon Linux Linux Ubuntu, Debian
Data persists when disconnected
Digital signing ✓1
Proxy - auto-detect
Proxy - manual
Proxy - PAC Server
Quarantine file cleanup
Registration service
Restart
Safe mode
Start/stop
Uninstall password ✓2
Upgrade
1Digital signing may not be supported on some operating systems.2Uninstall password is not supported on Windows 8. All other operating systems in this column support this feature.

COLLECTION FEATURES

Click on a feature name to see a description and specifics about what is collected.

Feature Windows 7SP1, 8, 8.1, 10, Windows Server 2008 R2 SP1, 2012 R2, 2016, 2019 Mac (all versions) Linux: CentOS, RHEL, Oracle Linux, Amazon Linux Linux: Ubuntu, Debian
Active Directory data
Connection: DPI collection
Connection: Long-lived ✓1 ✓1
Connection: Short-lived ✓2 ✓2
Connection: TCP
Connection: UDP
Domain request and response ✓9 ✓3 ✓3
Drivers installed on machine ✓2 ✓2
File: Download source info
File: Hashes
File: Icon collection
File: Metadata for non-exe files
File: Properties
File: Signatures
File events ✓4
Hosts file
Logon session
Machine info ✓9
Modules: Floating
Modules: Long-lived ✓5
Modules: Short-lived ✓5
Mount Point ✓6,9
Network interface ✓9
Process Aggregation
Process: Code Injection
Process: Long-lived
Process: Short-lived
Proxies configured on machine
Registry
Registry Events
Remote Logon Sessions
Scheduled Task ✓7
Services ✓ 8 ✓ 8
Users
WMI activity and WMI persistent objects
1On Linux sensors, Connection: Long lived is without rx/tx bytes.2CentOS 7/RHEL 7/Oracle 7/Ubuntu 14/Ubuntu 16 only.

3Domain request and response requires libpcap version 1.0 or higher, and Linux kernel version 2.6.32-358 or higher.

4File events are not supported on servers.

5Collection of short lived modules is not supported on Windows 7 64-bit.

6DMG files are also represented as mount points.

7Scheduled tasks are displayed as part of services.

8Services are not collected on CentOS 6 and Ubuntu 14.

9Some data elements and properties are not collected or are collected incorrectly by the sensor on machines running macOS Big Sur.  

RESPONSE FEATURES

Feature Windows 7SP1, 8, 8.1, 10, Windows Server 2008 R2 SP1, 2012, 2012 R2, 2016, 2019 Mac (all versions) Linux (all versions)
Download file
File search
Isolate machine
Kill process
Prevent execution
Quarantine file ✓ 1
Remote Shell
Remove registry
Suspend/unsuspend ransomware
1On Sensors for Mac, quarantining is not supported for DMG files and files downloaded from the Internet on OSX operating systems.

PREVENTION FEATURES

Feature Windows 7SP1, 8, 8.1, 10, Windows Server 2008 R2 SP1, 2012, 2012 R2, 2016, 2019 Mac (all versions) Linux (all versions)
App control1
Anti-Ransomware
Artificial Intelligence-based prevention1
Malicious PowerShell and .NET prevention
Signature-based prevention ✓2

1Artificial intelligence analysis and Application Control features are not supported on endpoints with CSV (Cluster Shared Volume) file systems.

2Sensors on machines running macOS Big Sur do not support the use of Signatures mode as part of the sensor’s Anti-Malware protection.

MOBILE FEATURES

Supported operating systems:

  • IOS 11.4.1 or later. Safari is also required on the device for profile installation.
  • Android 7 or later, with Google Play Services 11.0.4 or later.

Supported MDM platforms:

For full MDM integration (including policy management):

  • Workspace ONE (Airwatch) 8.4.3 or later (with an Orange license or higher)
  • MobileIron Core 9.2 or later (with a silver license) for full MDM functionality including Over-The-Air updates
  • MobileIron Core 9.2 or later for iOS connect only
  • MaaS360
  • Citrix Endpoint Management
  • Microsoft Intune

For application management only (distrubtion and installation):

  • Workspace ONE (Airwatch) 8.4.3 or later, with an Orange license or higher)
  • Workspace ONE (Airwatch) 7.0 or later (with an Orange license or higher)
  • MobileIron Core 9.2 or later, for iOS connect only
  • MobileIron Core 9.2 or later with a silver license
  • MobileIron 8.0 or later
  • MobileIron Cloud
  • Maas360
  • Citrix Endpoint Management
  • Microsoft Intune
  • Blackberry UEM BES 12.6 or later
  • Cisco Meraki
  • Citrix Endpoint Management 8.7.0 or later
  • Jamf Core Casper Suite 9.0 or later
  • SAP Afaria 7.00.6642.0 SP5 or later
  • SimpleMDM
  • ManageEngine
Did this answer your question? Thanks for the feedback There was a problem submitting your feedback. Please try again later.

Still need help? Contact Us Contact Us