What’s New in My OPSWAT™ Central Management

Get a complete, connected view of each file’s journey across your OPSWAT deployment. File Audit Trail helps administrators trace a file from its entry point through every product that processes it, showing scan results, file change indicators, and the full processing timeline in one place.

For a full walkthrough on this feature, refer to our dedicated File Audit Trail article.

Stay ahead of every patch event and extend coverage beyond the operating system. These releases expand Patch Management with real-time patch notifications, driver and firmware updates, and automation scripts for pre- and post-deployment tasks, so administrators can manage each stage of the patching lifecycle.

The new Driver & Firmware category detects outdated drivers, firmware, and BIOS versions on Dell and Lenovo Windows devices. Administrators can monitor missing updates, review affected devices, and deploy OEM vendor updates through on-demand, policy-based, and ring deployments.

New Patch notifications alert administrators in real time to key patch events across multiple channels, from in-app notifications and email to external integrations like webhooks and SIEM tools.

New Peripheral Media Protection dashboards and reports give administrators centralized visibility into every USB threat detection event from MetaDefender™ Kiosk, MetaDefender Endpoint, and MetaDefender™ Media Firewall. Teams can track removable media entering the environment in near real time, see what was blocked and why, and confirm that the protection layer is running as expected.

When an incident needs a closer look, the Report detail page takes you from high-level totals down to the exact attack on a specific device. Status, blocked content, device threats, peripheral name, user, and timestamp all appear in one place, so your team can investigate and respond faster.

To learn more, see the Peripheral Media Protection documentation.

Monitor critical endpoint metrics such as CPU, memory, disk, and network usage from a single view. Administrators can configure usage thresholds and automated alerts when performance metrics exceed defined limits, helping teams surface utilization issues before they affect operations.

Streamline MetaDefender Core management with a set of new capabilities, enabling organizations to remotely retrieve quarantined files, synchronize password storage, and manage skip-by-hash rules from one place.

Administrators can now remotely view and retrieve quarantined files from MetaDefender Core. Files can also be marked as protected to prevent automatic cleanup, supporting incident investigation and evidence retention workflows.

For additional details on retrieving, managing, and protecting quarantined files, see the Quarantined Files documentation.

You can now define and manage hash-based scan-skip rules across all your managed MetaDefender Core instances from one console. Create hash lists, assign them to groups, and every Core instance in those groups automatically receives the latest rules. For more detailed instructions, see Skip by Hash documentation.

Password Storage provides one place to manage and synchronize credentials across enrolled MetaDefender Core instances. This eliminates policy deployment errors and ensures consistent, secure workflow configurations across your entire Core fleet.

New automated deployment capabilities allow MetaDefender Kiosk devices to automatically discover local My OPSWAT Central Management On-Premises servers and request enrollment. Administrators can remotely review and approve each request from a centralized interface, simplifying large-scale deployments.

For even faster rollouts, administrators can pre-authorize devices by hardware BIOS serial number and pre-assign them to target groups. When a pre-authorized Kiosk connects to the network, it is automatically approved and enrolled into the correct group, enabling zero-touch deployments with minimal administrative effort. For step-by-step instructions, see the MetaDefender Kiosk enrollment guide.

Administrators can now remotely reboot or shut down MetaDefender Industrial Firewall devices running version 3.5.1 or later. This reduces the need for on-site intervention and improves operational responsiveness when teams need to manage devices across distributed environments.