Agent for Mac Changelog

Migrating from Client Security to Elements Agent for Computers (Mac)

WithSecure has added new features to better support customers migrating from Client Security to Elements Agent (macOS).

Customers planning migration should read more here.

WithSecure Elements Agent macOS 25.1.54172 has been released to general availability (GA) on 3rd of February 2025.

This release brings

Improved migration support from Client Security to Elements
- Automatic un-installation of Client Security and activating newly installed Elements with key and profile id from installer package
Improved migration support from Countercept to Elements
Improved shutdown process for swupd
Delayed wssensord start-up until sensor db has been downloaded
- Sensor db is preserved during upgrade (for immediate sensor restart after upgrade)
Hide Elements Agent user interface completely when subscription is for EDR only

Fixes

Incorrect swupd process start-up (swupd process was launched incorrectly in some cases)
Remote scan of software updates failed sometimes
Software updater process sometimes failed to communicate with admind

Installer can be downloaded from here.

Elements Agent macOS 25.1.54172 supports following macOS versions:

macOS 15 Sequoia
macOS 14 Sonoma
macOS 13 Ventura

WithSecure Elements Agent macOS 25.1.54172 has been released to our early access customers on 28th of January 2025. As usual, full availability will start 1-2 weeks later.

This release brings

Improved migration support from Client Security to Elements
- Automatic un-installation of Client Security and activating newly installed Elements with key and profile id from installer package
Improved migration support from Countercept to Elements
Improved shutdown process for swupd
Delayed wssensord start-up until sensor db has been downloaded
- Sensor db is preserved during upgrade (for immediate sensor restart after upgrade)
Hide Elements Agent user interface completely when subscription is for EDR only

Fixes

Incorrect swupd process start-up (swupd process was launched incorrectly in some cases)
Remote scan of software updates failed sometimes
Software updater process sometimes failed to communicate with admind

Installer can be downloaded from here.

Elements Agent macOS 25.1.54172 supports following macOS versions:

macOS 15 Sequoia
macOS 14 Sonoma
macOS 13 Ventura

Please note that OPSWAT certification of the new Elements Agent will take place later in February.

WithSecure Elements Agent macOS 24.6.53972 has been released to general availability (GA) on 19th of December 2024.

This release

Fixes an issue which caused product initialization to sometimes fail

Installer can be downloaded from here.

Elements Agent macOS 24.6 supports following macOS versions:

macOS 15 Sequoia
macOS 14 Sonoma
macOS 13 Ventura

Elements Agent / Client Security & network isolation

Important information for customers planning on upgrading to macOS Sequoia 15.1.1 or higher.

Network isolation on macOS 15.1.1 and higher doesn't work in conjunction with built-in firewall.

WithSecure has been in contact with Apple and they have confirmed the issue. WithSecure continues to seek for a resolution together with Apple.

WithSecure Elements Agent macOS 24.5.53798 has been released to general availability (GA) on 4th of December 2024.

This release brings

EDR-only product variant
fixes: Product incorrectly reminds user about missing browser extension even when it is properly installed

Installer can be downloaded from here.

Elements Agent macOS 24.5.53798 supports following macOS versions:

macOS 15 Sequoia
macOS 14 Sonoma
macOS 13 Ventura

WithSecure Elements Agent macOS 24.5.53798 has been released to our early access customers on 27th of November 2024. As usual, full availability will start 1-2 weeks later.

This release brings

EDR-only product variant
fixes: Product incorrectly reminds user about missing browser extension even when it is properly installed

Installer can be downloaded from here.

Elements Agent macOS 24.5.53798 supports following macOS versions:

macOS 15 Sequoia
macOS 14 Sonoma
macOS 13 Ventura

WithSecure Elements Agent macOS 24.4.53610 has been released to general availability (GA) on 18th of November 2024

This release brings

macOS 15 (Sequoia) support
fixes one wsxfenced related memory leak
fixes wssettingsd related bug causing wssettingsd to crash
fixes handful of smaller cosmetic bugs

Elements Agent macOS 24.4.53610 supports following macOS versions:

macOS 15 Sequoia
macOS 14 Sonoma
macOS 13 Ventura

Known issues

Product incorrectly reminds user about missing browser extension even when it is properly installed

Installer can be downloaded from here.

WithSecure Elements Agent macOS 24.4.53610 has been released to our early access customers on 11th of November 2024. As usual, full availability will start 1-2 weeks later.

This release brings

macOS 15 (Sequoia) support
fixes one wsxfenced related memory leak
fixes wssettingsd related bug causing wssettingsd to crash
fixes handful of smaller cosmetic bugs

Installer can be downloaded from here.

Elements Agent macOS 24.4.53610 supports following macOS versions:

macOS 15 Sequoia
macOS 14 Sonoma
macOS 13 Ventura

Known issues

Product incorrectly reminds user about missing browser extension even when it is properly installed

WithSecure™ Elements Agent macOS 24.3.53367 has now rolled out to Production and is available for all customers.

Added features:

Advanced response actions are now available for macOS
Software updater user interface component enabling better visibility and control of application updates

Fixed issues:

Denial-of-service type of vulnerability where non-privileged user was able to prevent installation of Elements Agent on the host

Other:

This release is not compliant with macOS Sequoia
Official macOS 15 Sequoia support is scheduled for mid November 2024 with version number 24.4.
Before upgrading, please read article about the network addresses.

WithSecure Elements Agent macOS 24.3.53367 has been released to our early access customers on 9th of September 2024. This early access release addresses the sensor related issue found in 24.3.53323.

Installer can be downloaded from here.

As usual, full availability will start 1-2 weeks from this release.

WithSecure Elements Agent macOS 24.3.53323 has been released to our early access customers on 26th of August 2024. As usual, full availability will start 1-2 weeks later.

This release includes improvements to software updater and fixes to bugs which were causing agent to crash occasionally + other minor bug fixes.

Installer can be downloaded from here.

Fallen

WithSecure™ Elements Agent macOS 24.2.52332 has now rolled out to Production and is available for all customers.

WithSecure Elements Agent macOS 24.2.52332 has been released to our early access customers on 2nd of July 2024. As usual, full availability will start week later.

This release addresses the performance issues some customers have encountered with earlier 24.x releases.

Installer can be downloaded from here.

A new version of the Ultralight Core update, part of the Windows endpoint client, is available and our Early access program participants will start seeing it starting on 26.06.2024. Full availability starts one week later, 03.07.2024.

With this release, we are removing the ORSP service (fsulorsp) and corresponding executables (fsorsp.exe / fsorsp64.exe). This should have no affect for customers, but any custom agent monitoring in place might be affected, as this change might break healthchecks.

WithSecure™ Elements Agent macOS 24.1.52031 has now rolled out to Production and is available for all customers.

WithSecure™ Element Agent 24.1.52031 started for clients participating in Early Access

This release introduces new features and fixes, if interested enable Early access to client software in General Settings of your profile for selected endpoints. This release replaces the previous update issued to Early access on the 22nd April 2024. Full availability starts one week later and takes some days to reach all customers.

Actions required:

MDM profiles must be updated as instructed on page Pre-Announcement: New WithSecure client for macOS.

You can update products deployed by MDM using the first time installer.

Added features:

Fix for upgrade and activation issues identified with 24.1.51865 Early access release.
This release introduces new WithSecure Elements agent update mechanisms. We are taking into use backend services that are completely distinct from the services used by F-Secure products. Therefore this release also introduces new server addresses where the endpoints connect to. Switch to the new backend services happens like the usual automatic endpoint upgrade and will require full definitions download.
The product is now signed with WithSecure signature and installed to the new location:
- /Library/WithSecure (instead of /Library/F-Secure used for earlier versions)
- /Applications/WithSecure (instead of /Applications/F-Secure used for earlier versions)
- activator tool is now moved to /Library/WithSecure/bin/activator
Background connectivity checker tool is now added to the product. Client now detects and reports connectivity issues to the Element Security Center to highlight Firewall misconfiguration to the administrator.
Elements Agent is now using the new Browsing Protection extensions. If you use MDM or group policies to manage browser extensions it is recommended to allow or preinstall these extensions as instructed on page Pre-Announcement: New WithSecure client for macOS.
Auditd is not required for the sensor to function on Sonoma and we will gradually reduce dependency on auditd on older OS versions.

Fixed issues:

Performance degradation on macOS Sonoma is now fixed.
Slack performance is now improved.

WithSecure™ Element Agent is compatible with the following versions:

macOS 12 Monterey
macOS 13 Ventura
macOS 14 Sonoma

Dropped functionality:

macOS 11 Big Sur support is discontinued. Elements Agent won't be upgraded on Big Sur and older OS versions and will remain running the previous product version until its end of life. WithSecure recommends upgrading these endpoints to macOS 12 or above to ensure uninterrupted service. Please upgrade Elements Agent manually if the version running is 22.4 and older. Versions 23.1 and newer will be upgraded automatically.

WithSecure™ Element Agent 24.1.51865 started for clients participating in Early Access

This release introduces new features and fixes, if interested enable Early access to client software in General Settings of your profile for selected endpoints. This release replaces the previous update issued to Early access on the 15th April 2024. Based on feedback we have received, full availability starts in two weeks so that customers have more time to adjust MDM rules in relation to this release.

Actions required:

MDM profiles must be updated as instructed on page Pre-Announcement: New WithSecure client for macOS.

Added features:

Fix for upgrade issues identified with 24.1.51782 Early access release.
This release introduces new WithSecure Elements agent update mechanisms. We are taking into use backend services that are completely distinct from the services used by F-Secure products. Therefore this release also introduces new server addresses where the endpoints connect to. Switch to the new backend services happens like the usual automatic endpoint upgrade and will require full definitions download.
The product is now signed with WithSecure signature and installed to the new location:
- /Library/WithSecure (instead of /Library/F-Secure used for earlier versions)
- /Applications/WithSecure (instead of /Applications/F-Secure used for earlier versions)
- activator tool is now moved to /Library/WithSecure/bin/activator
Background connectivity checker tool is now added to the product. Client now detects and reports connectivity issues to the Element Security Center to highlight Firewall misconfiguration to the administrator.
Elements Agent is now using the new Browsing Protection extensions. If you use MDM or group policies to manage browser extensions it is recommended to allow or preinstall these extensions as instructed on page Pre-Announcement: New WithSecure client for macOS.
Auditd is not required for the sensor to function on Sonoma and we will gradually reduce dependency on auditd on older OS versions.

Fixed issues:

Performance degradation on macOS Sonoma is now fixed.

WithSecure™ Element Agent is compatible with the following versions:

macOS 12 Monterey
macOS 13 Ventura
macOS 14 Sonoma

Dropped functionality:

macOS 11 Big Sur support is discontinued. Elements Agent won't be upgraded on Big Sur and older OS versions and will remain running the previous product version until its end of life. WithSecure recommends upgrading these endpoints to macOS 12 or above to ensure uninterrupted service. Please upgrade Elements Agent manually if the version running is 22.4 and older. Versions 23.1 and newer will be upgraded automatically.

WithSecure™ Element Agent 24.1.51782 started for clients participating in Early Access

This release introduces new features and fixes, if interested enable Early access to client software in General Settings of your profile for selected endpoints. Full availability starts one week later and takes some days to reach all customers.

Actions required:

MDM profiles must be updated as instructed on page Pre-Announcement: New WithSecure client for macOS.

Added features:

This release introduces new WithSecure Elements agent update mechanisms. We are taking into use backend services that are completely distinct from the services used by F-Secure products. Therefore this release also introduces new server addresses where the endpoints connect to. Switch to the new backend services happens like the usual automatic endpoint upgrade and will require full definitions download.
The product is now signed with WithSecure signature and installed to the new location:
- /Library/WithSecure (instead of /Library/F-Secure used for earlier versions)
- /Applications/WithSecure (instead of /Applications/F-Secure used for earlier versions)
- activator tool is now moved to /Library/WithSecure/bin/activator
Background connectivity checker tool is now added to the product. Client now detects and reports connectivity issues to the Element Security Center to highlight Firewall misconfiguration to the administrator.
Elements Agent is now using the new Browsing Protection extensions. If you use MDM or group policies to manage browser extensions it is recommended to allow or preinstall these extensions as instructed on page Pre-Announcement: New WithSecure client for macOS.
Auditd is not required for the sensor to function on Sonoma and we will gradually reduce dependency on auditd on older OS versions.

Fixed issues:

Performance degradation on macOS Sonoma is now fixed.

WithSecure™ Element Agent is compatible with the following versions:

macOS 12 Monterey
macOS 13 Ventura
macOS 14 Sonoma

Dropped functionality:

macOS 11 Big Sur support is discontinued. Elements Agent won't be upgraded on Big Sur and older OS versions and will remain running the previous product version until its end of life. WithSecure recommends upgrading these endpoints to macOS 12 or above to ensure uninterrupted service. Please upgrade Elements Agent manually if the version running is 22.4 and older. Versions 23.1 and newer will be upgraded automatically.

In the middle of April, we will start to roll out WithSecure™ Elements Agent 24.1 for the clients who participate in our Early Access program. To prepare for this change, follow the instructions published in the previous pre-announcement: https://community.withsecure.com/en/kb/articles/31284-pre-announcement-new-withsecure-client-for-macos

Please note that MDM profiles for the WithSecure System Extension has been updated with the RemovableSystemExtensions section to allow seamless uninstallation of F-Secure System Extension during the migration. Please adjust the profile accordingly.

WithSecure™ Element Agent 23.2.51507 has now rolled out to Production and is available for all customers.

Added features:

macOS 14 Sonoma support was added
Auditd is now enabled automatically if it is required for the sensor (reboot is required)

Fixed issues:

Definitions updates on Sonoma are now properly downloaded and installed
Support tool no longer requests for the FDA
Firefox browser extension installation button now leads to the correct version
Eicar is now detected even before initial definitions update

WithSecure™ Element Agent is compatible with the following versions:

macOS 11 Big Sur
macOS 12 Monterey
macOS 13 Ventura
macOS 14 Sonoma

LiselotteP

Apple will released macOS 14 “Sonoma” on September 26th 2023, and currently this version is not yet supported by WithSecure products.

Read all the updates here: https://community.withsecure.com/en/kb/articles/31210-withsecure-products-and-macos-14-sonoma

WithSecure™ Element Agent 23.1.50165 has now rolled out to Production and is available for all customers.

WithSecure™ Element Agent 23.1.50165 started for clients participating in Early Access

Features:

Software Updater

Software Updater can be enabled in the profile editor.

You can specify which software you would like to include/exclude from scan results or automatic installations

Running applications can be force-closed or update installation can be cancelled.

Software updates can be downloaded via HTTP proxy or from Elements Connector

Software updater can scan for missing software or install updates automatically, these operations can be scheduled in the Automated tasks section of the profile.

Automatic InTune deployment support
Adds an option to download definition updates from via HTTP
macOS 10.15 Catalina is no longer supported

WithSecure™ Element Agent is compatible with the following versions:

macOS 11 Big Sur
macOS 12 Monterey
macOS 13 Ventura

WithSecure™ Element Agent 22.4.47309 has rolled out to Production

WithSecure™ Element Agent 22.4.47309 started for clients participating in Early Access

Added features:

New security postures

Fixed issues:

Fix for our login items displayed as from "unidentified developer" in Ventura
Various fixes for endpoint security
Various stability fixes

WithSecure™ Element Agent 22.3.46135 has now rolled to all release channels and is available for all customers.