Xeno1234
Level 14
- Jun 12, 2023
- 699
Harmony Endpoint by Check Point
- Thread starter Trident
- Start date
- Feb 7, 2023
- 1,737
Xeno1234
Level 14
- Jun 12, 2023
- 699
I have fixed the issue, but whenever it occurs again I will, its a repetitive thing.
- Jan 6, 2022
- 435
Sometimes I also will see the BG and TE blades on Gui update. It is separated from the AV sig update. I've had this happen before although very rare. Mostly upon deployment
- Feb 7, 2023
- 1,737
The static analysis models (NGAV) for executables and office files are part of threat emulation. The threat emulation process performs local emulation and malware scanning to complement the cloud emulation. Static Analysis is performed in sandbox to eliminate some of the issues static analysis normally has. It supports executable and office files (others support only executables). Anti-malware engine is also linked to the emulation, to scan any secondary payloads that may be dropped/downloaded.
- Apr 16, 2017
- 2,094
they say open XDR platform works with CP Harmony and others... (I have not used it) 
stellarcyber.ai
Open XDR, Next Gen SIEM Security, SIEM & NDR platform application
Next Gen SIEM Security - Stellar Cyber delivers NG-SecOps, Next Gen SIEM, Network Detection and Response, EDR platform along with SIEM security tools.
stellarcyber.ai
- Feb 7, 2023
- 1,737
It is a common thing EDRs to work with other EDRs/anti-malware solutions. On many, you can subscribe to third-party intelligence from Kaspersky, Trend Micro, etc. or you can use the other EDR APIs to inspect files/communications. Many EDRs can also feed data what’s going on to other EDRs or classification services such as Intezer.they say open XDR platform works with CP Harmony and others... (I have not used it)
Open XDR, Next Gen SIEM Security, SIEM & NDR platform application
Next Gen SIEM Security - Stellar Cyber delivers NG-SecOps, Next Gen SIEM, Network Detection and Response, EDR platform along with SIEM security tools.
But Check Point already offers EDR and XDR. This will be for people who are not happy with the visibility.
they say open XDR platform works with CP Harmony and others... (I have not used it)
Open XDR, Next Gen SIEM Security, SIEM & NDR platform application
Next Gen SIEM Security - Stellar Cyber delivers NG-SecOps, Next Gen SIEM, Network Detection and Response, EDR platform along with SIEM security tools.
I noted they also integrate with Deep Instinct that you're using. If your endpoint is already running XDR, it may be redundant.
- Feb 7, 2023
- 1,737
The business security market consists of way over 100 players, many of which provide little to no value to the security posture. They just increase the annual security cost, create false sense of security and massively add to the admins/ SOCs overhead/overwhelming with even more confusing portals/solutions.
If you have an enterprise-grade security product you're happy with, its sufficient. More layers are overkill besides adding to the cost and the security infrastructure that needs to be maintained.
- Jan 6, 2022
- 435
Also on the other hand... installing a lot of security solutions creates more vectors of attack and vulnerability.
Take a look at whats happening with Fortinet, Microsoft, Barracuda, Cisco and today Citrix.
New critical Citrix ADC and Gateway flaw exploited as zero-days
Citrix today is alerting customers of a critical-severity vulnerability (CVE-2023-3519) in NetScaler ADC and NetScaler Gateway that already has exploits in the wild, and "strongly urges" to install updated versions without delay.
- Jan 6, 2022
- 435
Rest assured that CheckPoint hardens their appliances and GAIA. They have had very few issues compared to other Vendors. It really shows in the quality of CheckPoint Products!.
Some endpoint solutions require SAC be disabled to avoid conflict. I haven't been asked to turn it off by BD GravityZone yet.
Xeno1234
Level 14
- Jun 12, 2023
- 699
What does SAC even do - is it just basically a Default Deny type thing?
Its an application control service from Microsoft. It basically runs in audit mode and at some point in the future, will turn itself on or off according to user interaction with Windows.
Harmony is going to perform an upgrade and you can do it immediately or schedule it for a later time.
- Feb 7, 2023
- 1,737
Check your Policy -> Software Deployment rules
You’ve deployed it through “export package” but you haven’t configured your rules the same way.
Xeno1234
Level 14
- Jun 12, 2023
- 699
Yeah but it just removes a bunch of modules and I cant get them back. If I download a package with the firewall/application control stuff the upgrade popup occurs and it goes back to the default modules.
Similar threads
