This document provides information on supported versions and specifications for the FireEye Endpoint Security Agent software. It lists the supported operating system versions for Windows, macOS, and Linux, as well as the minimum required Endpoint Security server and agent versions. Tables are included that specify supported features by agent version and operating system. System requirements are also outlined for each operating system.

1. FireEye Endpoint Security Agent Software
The latest version of the Endpoint Security Agent software is 33 for use with Server version 5.1 or greater. Tables 1,2,3 list supported
agents for Windows, macOS, and Linux operating systems. Unless otherwise shown, all editions of these operating systems are
supported. See page 5 for support exceptions. Tables 4 and 5 list no longer supported for Windows, macOS and Linux operating
systems. Tables 6,7, and 8 provide specifications for each operating system using the Endpoint Security Agent.
Table 1. Endpoint Agent supported features.
AGENT: V33
Windows Audit Real Time IOC ExploitGuard Malware Protection MalwareGuard IA Modules
Windows 7 ✓ ✓ ✓ ✓ ✓ ✓
Windows 8 ✓ ✓ ✓ ✓ ✓ ✓
Windows 10 ✓ ✓ ✓ ✓ ✓ ✓
Server 2008R2 ✓ ✓ ✓ ✓ ✓ ✓
Server 2012 & 2012R2 ✓ ✓ ✓ ✓ ✓ ✓
Server 2016 ✓ ✓ ✓ ✓ ✓ ✓
Server 2019 ✓ ✓ ✓ ✓ ✓ ✓
macOS Audit Real Time IOC ExploitGuard Malware Protection MalwareGuard IA Modules
macOS 10.9 – 10.11 ✓ ✓ X X X ✓
macOS 10.12 – 10.15 ✓ ✓ X ✓ X ✓
macOS 11.0 – 11.4 ✓ ✓ X ✓ X ✓
Linux Audit Real Time IOC ExploitGuard Malware Protection MalwareGuard IA Modules
RHEL 6.8-6.10, 7.2-7.9, 8-8.3 ✓ ✓ X X X ✓
CentOS 6.8-6.10, 7.2-7.7, 8 ✓ ✓ X X X ✓
Ubuntu 14.04, 16.04, 18.0.4,
19.04, 20.04 LTS
✓ ✓ X X X ✓
SUSE 11.3, 11.4 ✓ X X X X ✓
SUSE 12.2, 12.3, 12.4, 12.5, 15 ✓ ✓ X X X ✓
Open SUSE 15.1, 15.2 ✓ ✓ X X X ✓
Amazon AMI 2018.3, AMI2,
Amazon Linux 2
✓ ✓ X X X ✓
Oracle Linux 6.10, 7.6, 8 ✓ ✓ X X X ✓
✓ Available in current version
X Not Available
DATA SHEET

2. Table 2. Endpoint Agent Supported Versions on Microsoft Windows
AGENT VERSION 33.46 32.30 31.28 30.19
MINIMUM ENDPOINT SECURITY
VERSION
5.1 5.0 4.9 4.8
XP SP2 (32-bit) X X X X
XP SP31 (32-bit) X X X ✓E*
Vista SP1, SP2
(32-bit and 64-bit)
X X X ✓E*
Win 7, SP1
(32-bit and 64-bit)
✓ ✓ ✓ ✓
Win 8
(32 -bit and 64-bit)
✓ ✓ ✓ ✓
Win 8.1, Update 1
(32 -bit and 64-bit)
✓ ✓ ✓ ✓
Win 10 1511,
(32 -bit and 64-bit)
X ✓ ✓ ✓
Win 10, 1607, 1703, 1709, LTSB
(32 -bit and 64-bit)
✓ ✓ ✓ ✓
Win 10 1803
(32-bit and 64-bit)
✓ ✓ ✓ ✓
Win 10 1903
(32-bit and 64-bit)
✓ ✓ ✓ ✓
Win 10 1909
(32-bit and 64-bit)
✓ ✓ ✓ ✓
Win 10 20H1
(32-bit and 64-bit)
✓ ✓ ✓ ✓
Win 10 20H2
(32-bit and 64-bit)
✓ P1 P1 P1
Win 10 21H1
(32-bit and 64-bit)
P1 X X X
Server 2003 SP2, R2 SP2
(32-bit and 64-bit)
X X X ✓E*
Server 2008 Standard,
(32 bit and 64-bit)
X X X ✓
Server 2008 R2,
(32 bit and 64-bit)
✓ ✓ ✓ ✓
Server 2012 (32-bit and 64-bit)
Server 2012 R2 (64-bit) ✓ ✓ ✓ ✓
Server 2016 (64-bit)
✓ ✓ ✓ ✓
Server 2019 (64-bit)
✓ ✓ ✓ ✓
1 Windows Embedded POSReady 2009 is based on Windows XP SP3
P1: Memory-related audits are not supported.
E*. Once standard support expires, extended support can be purchased for this agent version and OS version.
Windows Core is supported at the same level as the equivalent Windows 10 version

3. Table 3. Endpoint Agent Supported Versions on Apple macOS and Linux.
AGENT VERSION 33.51 33.46 32.30 31.28 30.19
MINIMUM ENDPOINT SECURITY VERSION 5.1 5.1 5.0 4.9 4.8
10.9 Mavericks (64-bit) X X ✓ ✓ ✓
10.10 Yosemite (64-bit) X X ✓ ✓ ✓
10.11 El Capitan (64-bit) X X ✓ ✓ ✓
10.12 Sierra (64-bit) X X ✓ ✓ ✓
10.13 High Sierra (64-bit) X X ✓ ✓ ✓
10.14 Mojave (64-bit) X X ✓ ✓ ✓
10.15 Catalina (64-bit) X X ✓ ✓ ✓
11 Big Sur:11.0, 11.1, 11.2, 11.3, 11.4 (64-bit) ✓ ✓ X X X
RHEL 6.8, 6.9, 6.10 (64-bit) X ✓ ✓ ✓ ✓
RHEL 7.2, 7.3, 7.4, 7.5, 7.6, 7.7 (64-bit) X ✓ ✓ ✓ ✓
RHEL 7.8, 7.9 (64-bit) X ✓ X X X
RHEL 8 (64-bit) X ✓ ✓ ✓ ✓
RHEL 8.1, 8.2, 8.3 (64-bit) X ✓ ✓ X X
CENTOS 6.8, 6.9, 6.10 (64-bit) X ✓ ✓ ✓ ✓
CENTOS 7.2, 7.3, 7.4, 7.5, 7.6, 7.7 (64-bit) X ✓ ✓ ✓ ✓
CENTO 8 (64-bit) X ✓ ✓ ✓ X
SUSE Enterprise Linux 11.3, 11.4, 12.2, 12.3 X ✓ ✓ ✓ ✓
SUSE Enterprise Linux 12.4, 12.5 X ✓ X X X
SUSE Enterprise Linux 15 X ✓ ✓ ✓ ✓
Open SUSE 15.1 X ✓ ✓ ✓ X
Open SUSE 15.2 X ✓ X X X
Ubuntu 12.04, 14.04, 16.04, 18.04, 18.04.3 X ✓ ✓ ✓ ✓
Ubuntu 19.04 X ✓ ✓ ✓ X
Ubuntu 20.04 LTS X ✓ X X X
Amazon Linux AMI 2018.3 X ✓ ✓ ✓ ✓
Amazon Linux AMI2 X ✓ ✓ ✓ ✓
Amazon Linux 2 X ✓ X X X
Oracle 6.10 (UEK & RHCK) X ✓ ✓ ✓ ✓
Oracle 7.6 (UEK & RHCK) X ✓ ✓ ✓ ✓
Oracle 7.9 (UEK) X ✓ X X X
Oracle 8.1 (RHCK) X ✓ X X X
Oracle 8.2 (UEK & RHCK) X ✓ X X X
✓: Provides full support for the FireEye Endpoint Security Agent software features available in a target release,
except for features listed in “FireEye Endpoint Security Agent Feature Support Exceptions” on page 6.
X: The Endpoint Security Agent software version is not available (not supported) for the Windows, macOS, or Linux operating system version listed.

4. The Endpoint Security Agent versions below are no longer supported are listed for reference only.
Table 4. No Longer Supported Version of Endpoint Security Agent Software on Microsoft Windows.
AGENT VERSION 29.7 28.8 27.3 26.21 25.12.x*1 25.12.0 24.9.x*2 23.10.1* 23.10.0 22.41
MINIMUM ENDPOINT SECURITY VERSION
4.7 4.6 4.5 4.0.2 3.6 3.6 3.5 3.3 3.3 3.2**
Last Supported Date 24 Jul
2020
8 May
2020
27 Jan
2020
28 Mar
2019
XP SP2 (32-bit) X X X X X X X X X X
XP SP33 (32-bit) ✓ ✓ ✓ ✓ P2 P2 P2 P2 P2 P2
Vista SP1, SP2
(32-bit and 64-bit) ✓ ✓ ✓ ✓ ✓ ✓ ✓ ✓ ✓ ✓
Win 7, SP1
(32-bit and 64-bit) ✓ ✓ ✓ ✓ ✓ ✓ ✓ ✓ ✓ ✓
Win 8
(32 -bit and 64-bit) ✓ ✓ ✓ ✓ ✓ ✓ ✓ ✓ ✓ ✓
Win 8.1, Update 1
(32 -bit and 64-bit) ✓ ✓ ✓ ✓ ✓ ✓ ✓ ✓ ✓ ✓
Win 10 1703, 1609, LTSB (32 -bit and
64-bit) ✓ ✓ ✓ ✓ ✓ ✓ ✓ ✓ ✓ ✓
Win 10 1803
(32-bit AND 64-bit) ✓ ✓ ✓ X X X X X X X
Win 10 1903
(32-bit AND 64-bit) ✓ ✓ X X X X X X X X
Win 10 1909
(32-bit AND 64-bit) ✓ X X X X X X X X X
Server 2003 SP2, R2 SP2
(32-bit and 64-bit) ✓ ✓ ✓ ✓ ✓ ✓ ✓ ✓ ✓ ✓
Server 2008 R1, (64-bit) ✓ ✓ ✓ ✓ ✓ ✓ ✓ ✓ ✓ ✓
Server 2008, R2, R2 SP1 (64-bit) ✓ ✓ ✓ ✓ ✓ ✓ ✓ ✓ ✓ ✓
Server 2012 (32-bit and 64-bit)
Server 2012 R2 (64-bit)
✓ ✓ ✓ ✓ ✓ ✓ ✓ ✓ ✓ ✓
Server 2016 (64-bit) ✓ ✓ ✓ ✓ ✓ ✓ P3 X X X
Server 2019 (64-bit) ✓ ✓ X X X X X X X X
✓: Provides full support for the FireEye Endpoint Security Agent software features available in a target release, except for features listed in “FireEye Endpoint Security Agent Feature Support Exceptions” on page 4.
X: The Endpoint Security Agent software version is not available (not supported) for the Windows, MacOS X, or Linux operating system version listed.
P1: Does not record registry events in lookback cache.
P2: URL monitoring events are not supported.
P3: Memory-related audits are not supported.
1 Endpoint Security Agent software versions 25.12.1 and 25.12.2
2 Endpoint Security Agent software versions 24.9.0, 24.9.3, and 24.9.4
3 Windows Embedded POSReady 2009 is based on Windows XP SP3
*Endpoint Security Agent software versions 25.12.2, 25.12.1, 24.9.x, and 23.10.1 support Windows endpoints only.
**Endpoint Security 3.2 and later do not provide FireEye Intel to FireEye Endpoint Security Agents earlier than version 11.

5. Table 5. No Longer Supported Version of Endpoint Security Agent Software on Apple macOS and Linux.
AGENT VERSION 29.7 28.8 27.30 26.21
MINIMUM ENDPOINT SECURITY VERSION 4.7 4.6 4.5 4.0.2
Last Supported Date 24 Jul 2020 8 May 2020 27 Jan 2020 28 Mar 2019
10.9 Mavericks (64-bit) ✓ ✓ ✓ ✓
10.10 Yosemite (64-bit) ✓ ✓ ✓ ✓
10.11 El Capitan (64-bit) ✓ ✓ ✓ ✓
10.12 Sierra (64-bit) ✓ ✓ ✓ ✓
10.13 High Sierra (64-bit) ✓ ✓ ✓ ✓
10.14 Mojave (64-bit) ✓ ✓ ✓ X
10.15 Catalina (64-bit) X X X X
11 Big Sur (64-bit)1 X X X X
RHEL 6.8 (64-bit) ✓ X ✓ ✓
RHEL 6.9, 6.10 (64-bit) ✓ X ✓ X
RHEL 7.2, 7.3 (64-bit) ✓ X ✓ ✓
RHEL 7.4, 7.5, 7.6 (64-bit) ✓ X ✓ X
RHEL 7.7 (64-bit) X X X X
RHEL 8 (64-bit) ✓ X X X
CENTOS 6.8, 6.9, 6.10 (64-bit) ✓ X ✓ X
CENTOS 7.2, 7.3, 7.4, 7.5, 7.6 (64-bit) ✓ X ✓ X
CENTOS 7.7 (64-bit) X X X X
CENTO 8 (64-bit) X X X X
SUSE Enterprise Linux 11.3 X X X X
SUSE Enterprise Linux 11.4, 12.2, 12.3 ✓ X X X
SUSE Enterprise Linux 15 ✓ X X X
Open SUSE 15.1 X X X X
Ubuntu 12.04, 14.04, 16.04, 18.04,
180.04.3
✓ X X X
Ubuntu 19.04, 20.04 X X X X
Amazon Linux AMI 2018.3 ✓ X X X
Amazon Linux AMI2 ✓ X X X
Oracle Linux 6.10 ✓ X X X
Oracle Linux 7.6 ✓ X X X
✓: Provides full support for the FireEye Endpoint Security Agent software features available in a target release, except for features listed in “FireEye Endpoint Security Agent Feature Support Exceptions” on page 4.
X: The Endpoint Security Agent software version is not available (not supported) for the Windows, MacOS X, or Linux operating system version listed.

6. FireEye Endpoint Security Agent Feature Support Notes
• Some Endpoint Security features require specific versions of FireEye Endpoint Security Agent software. See the FireEye Endpoint Security Server User
Guide and the FireEye Endpoint Security Agent Administration Guide for more details.
• Windows Embedded Enterprise and IoT Enterprise versions are supported with the equivalent version of Windows desktop version
• Memory-related audits are not supported for host endpoints running 32-bit Win10 hosts.
• Memory-related audits are supported on 64-bit hosts Win7 to Win10 21H1.
• Agent 33.22 and 33.46 do not support network containment, Real-Time detection engine, and Imageload events for the Real-Time detection engine
on macOS 11.
• Agent 33.51 is only supported on macOS 11.
Endpoint Security System Requirements
FireEye Endpoint Security Agent recommended usage is on a 4th generation (Haswell) Intel or comparable processor. The agent can be installed on
any built-in hard drive with minimum available storage of 1 GB. For best performance a solid-state storage system is preferred for disk I/O intensive
operations such as exhaustive enterprise searches. The agent will run on the following operating systems:
Table 6. Requirements for Windows operating systems.
WINDOWS OPERATING SYSTEM
VERSIONS
MINIMUM SYSTEM MEMORY (RAM)
XP SP3 (32-bit)
Server 2003 R2 SP2 (32-bit, 64-bit)
1 GB (Agent version 30 is final
supported)
Vista SP1 and higher (32-bit, 64-bit)
Windows 7and Win 7 SP1 (32-bit, 64-bit)
Win 8 (32-bit, 64-bit)
Win 8.1 (32-bit, 64-bit)
Win 10 (32-bit, 64-bit)
2 GB
Server 2008 (32-bit, 64-bit)
Server 2008 R1, R2, R2 SP1, R2 SP2 (32-bit, 64-bit)
Server 2012 (32-bit, 64-bit)
Server 2012 R2 (64-bit)
Server 2016 (64-bit)
Server 2019 (64-bit)
2 GB
Table 8. Requirements for Linux operating systems.
LINUX OPERATING SYSTEM VERSIONS MINIMUM SYSTEM MEMORY (RAM)
RHEL 6.8 – 6.10 (64-bit)
RHEL 7.1 – 7.9 (64-bit)
RHEL 8.0-8.3 (64-bit)
CentOS 6.9 – 6.10 (64-bit)
CentOS 7.1 – 7.7 (64-bit)
CentOS 8 (64-bit)
SUSE 11.3, 11.4,12.2-12.5,15
Open SUSE 15.1, 15.2
Ubuntu 12.04, 14.04, 16.04, 18.04, 19.04, 20.04
Amazon Linux AMI 2018.3, AM2
Oracle Linux 6.10, 7.6, 8 (1&2)
2 GB
Table 7. Requirements for macOS.
MAC OS VERSIONS MINIMUM SYSTEM MEMORY (RAM)
Mavericks 10.9 (64-bit)
Yosemite 10.10 (64-bit)
El Capitan 10.11 (64-bit)
Sierra 10.12 (64-bit)
High Sierra 10.13 (64-bit)
Mojave 10.14 (64-bit)
Catalina 10.15 (64-bit)
2 GB
Big Sur 11.0 – 11.4 (64-bit) 2 GB

7. To learn more about FireEye, visit: www.FireEye.com
FireEye, Inc.
601 McCarthy Blvd. Milpitas, CA 95035
408.321.6300/877.FIREEYE (347.3393)
info@FireEye.com
© 2021 FireEye, Inc. All rights reserved. FireEye is a registered trademark
of FireEye, Inc. All other brands, products, or service names are or may be
trademarks or service marks of their respective owners.
About FireEye, Inc.
FireEye is the intelligence-led security company. Working as a
seamless, scalable extension of customer security operations, FireEye
offers a single platform that blends innovative security technologies,
nation-state grade threat intelligence and world renowned
Mandiant® consulting. With this approach, FireEye eliminates the
complexity and burden of cyber security for organizations struggling
to prepare for, prevent and respond to cyber-attacks.