App Review CheckPoint Harmony Endpoint Security 2024

[Shadowra]

Content source

https://odysee.com/@Shadowra:f/CheckPoint-Harmony-Endpoint-Security-2024:1

CheckPoint is an Israeli company offering ZoneAlarm for home users and Harmony for professionals.
Today, we're going to take a look at Harmony.
A test of ZoneAlarm is planned at a later date.

/!\ I wasn't able to show the whole console because this account doesn't belong to me!
Thank you to @Trident for lending me the account to do this test!



User interface :
The agent interface is fairly basic. You can view the rules (policy), update them and run analyses.
On agents, Harmony also offers reports (such as URLs blocked by Anti-Bot, highly detailed reports with Forensics and other reports).
On the other hand, Harmony is RAM-hungry, requiring between 600Mb and 1Gb!

Web protection: 11/11
Harmony has blocked all malicious URLs.

Fake crack : 1/1
The fake crack can't run because Harmony blocks a .bat file during execution, but for some strange reason doesn't display an alert...

Malware Pack : Remaining 7 files out of 152.
During the test, I decided to extract the pack directly to see all the Harmony motors activate.
I wasn't disappointed, as it used its anti-malware engine (Sophos) and its Cloud engine. Harmony makes a killing on it!
VBS/JS at runtime are directly blocked and a FUD malware (NovaStealer) is blocked at launch by Harmony's Behavior.
On the Forensics report, Harmony clearly lists the malware family, that it's a Trojan and that it has Infostealer functions.
Congratulations, you've surprised me!

Final scan :
Harmony : 0
Malwarebytes : 0
NPE : 0
KVRT : 0

Final opinion:

Harmony offers a high-performance solution.
With its NGAV engine, Cloud engine and various shields, Harmony has made a totally healthy machine!
Its portal is highly customizable, so you can easily fine-tune the settings to suit your needs.
It's just a pity that it's relatively heavy on RAM consumption.
Recommended!

@Trident request

 

[Bot]

Thanks for the comprehensive review of CheckPoint Harmony Endpoint Security 2024. It's great to hear that it performed well in your tests, especially in blocking malicious URLs and malware. The high RAM consumption is indeed a concern, but it seems the performance and customization options make up for it. Looking forward to your review of ZoneAlarm.

 

[Trident]

Fake crack : 1/1
The fake crack can't run because Harmony blocks a .bat file during execution, but for some strange reason doesn't display an alert...

It is my policy

 

[Shadowra]

Thanks for the comprehensive review of CheckPoint Harmony Endpoint Security 2024. It's great to hear that it performed well in your tests, especially in blocking malicious URLs and malware. The high RAM consumption is indeed a concern, but it seems the performance and customization options make up for it. Looking forward to your review of ZoneAlarm.

At the end of August, my little Bot, I'll finish the videos I have planned and then I'll rest a bit on vacation

 

[Bot]

At the end of August, my little Bot, I'll finish the videos I have planned and then I'll rest a bit on vacation

That sounds like a well-deserved break! Enjoy your vacation and we look forward to your upcoming videos before you go. Safe travels!

 

[lyldz]

İ love this bot

 

[cartaphilus]

CheckPoint is an Israeli company offering ZoneAlarm for home users and Harmony for professionals.
Today, we're going to take a look at Harmony.
A test of ZoneAlarm is planned at a later date.

/!\ I wasn't able to show the whole console because this account doesn't belong to me!
Thank you to @Trident for lending me the account to do this test!



User interface :
The agent interface is fairly basic. You can view the rules (policy), update them and run analyses.
On agents, Harmony also offers reports (such as URLs blocked by Anti-Bot, highly detailed reports with Forensics and other reports).
On the other hand, Harmony is RAM-hungry, requiring between 600Mb and 1Gb!

Web protection: 11/11
Harmony has blocked all malicious URLs.

Fake crack : 1/1
The fake crack can't run because Harmony blocks a .bat file during execution, but for some strange reason doesn't display an alert...

Malware Pack : Remaining 7 files out of 152.
During the test, I decided to extract the pack directly to see all the Harmony motors activate.
I wasn't disappointed, as it used its anti-malware engine (Sophos) and its Cloud engine. Harmony makes a killing on it!
VBS/JS at runtime are directly blocked and a FUD malware (NovaStealer) is blocked at launch by Harmony's Behavior.
On the Forensics report, Harmony clearly lists the malware family, that it's a Trojan and that it has Infostealer functions.
Congratulations, you've surprised me!

Final scan :
Harmony : 0
Malwarebytes : 0
NPE : 0
KVRT : 0

Final opinion:

Harmony offers a high-performance solution.
With its NGAV engine, Cloud engine and various shields, Harmony has made a totally healthy machine!
Its portal is highly customizable, so you can easily fine-tune the settings to suit your needs.
It's just a pity that it's relatively heavy on RAM consumption.
Recommended!

@Trident request

Awesome!! Thank you. And yes that's been my experience so far. Although it missed a trojan downloader that ESET caught which was kind of strange. The newest update in the pattern module made it more sensitive towards game based anti-hacking (war thunder anti cheating module) and anti-copyright (Elite Sniper 5 Denuvo encryption/decryptor module).

Impact on gaming machine only during execution but once the game is running it's smooth sailing.


I accidentally named a folder Palestine and the AC started occupying all the file space. I do t know why /sarcasm.

 

[simmerskool]

It is my policy

@Trident, don't take this the wrong way, but I know you have tweaked your Harmony settings to nth degree, just wondering if @Shadowra would have the same excellent result with my perhaps more standard settings (set by techies at Lithify ) -- & yes IIRC my Harmony was using 750-800 mb RAM the other day (I'm not running the Harmony VM tonight), but does not seem slow on VM here, other than downloads that Harmony is analyzing in its cloud.

 

[simmerskool]

booted the Harmony VM and the 10 processes with the name Check Point are using total 794 mb RAM. I rebooted all the hardware tonight and Harmony is nicely fast too!

 

[Khushal]

CheckPoint is an Israeli company offering ZoneAlarm for home users and Harmony for professionals.
Today, we're going to take a look at Harmony.
A test of ZoneAlarm is planned at a later date.

/!\ I wasn't able to show the whole console because this account doesn't belong to me!
Thank you to @Trident for lending me the account to do this test!



User interface :
The agent interface is fairly basic. You can view the rules (policy), update them and run analyses.
On agents, Harmony also offers reports (such as URLs blocked by Anti-Bot, highly detailed reports with Forensics and other reports).
On the other hand, Harmony is RAM-hungry, requiring between 600Mb and 1Gb!

Web protection: 11/11
Harmony has blocked all malicious URLs.

Fake crack : 1/1
The fake crack can't run because Harmony blocks a .bat file during execution, but for some strange reason doesn't display an alert...

Malware Pack : Remaining 7 files out of 152.
During the test, I decided to extract the pack directly to see all the Harmony motors activate.
I wasn't disappointed, as it used its anti-malware engine (Sophos) and its Cloud engine. Harmony makes a killing on it!
VBS/JS at runtime are directly blocked and a FUD malware (NovaStealer) is blocked at launch by Harmony's Behavior.
On the Forensics report, Harmony clearly lists the malware family, that it's a Trojan and that it has Infostealer functions.
Congratulations, you've surprised me!

Final scan :
Harmony : 0
Malwarebytes : 0
NPE : 0
KVRT : 0

Final opinion:

Harmony offers a high-performance solution.
With its NGAV engine, Cloud engine and various shields, Harmony has made a totally healthy machine!
Its portal is highly customizable, so you can easily fine-tune the settings to suit your needs.
It's just a pity that it's relatively heavy on RAM consumption.
Recommended!

@Trident request

Their forensics are even better in their blog posts when they uncover the latest threats in the wild.

 

[Trident]

@Trident, don't take this the wrong way, but I know you have tweaked your Harmony settings to nth degree, just wondering if @Shadowra would have the same excellent result with my perhaps more standard settings (set by techies at Lithify ) -- &

@simmerskool I am glad that you asked. The fantastic phishing and URL filtering should be the same level.

My policy called EDR Experts xxx is a result of over a year heavy testing and understanding of both malware/threats and every technical corner of the product. On top of all engines and everything, there is a proprietary EDR Experts System Hardening policy as well.

The policies are highly tweaked for boost in performance (I can even reduce the memory usage if I want) with slight increase in security.
You will not get the same-same results under these extreme conditions of testing, but it is important to remember that in a real world, nobody will drop a malware pack on your system. Everything will have to be downloaded/saved through email and will undergo emulation.

 

[rashmi]

This is a test of @Trident's custom configuration. Does Harmony have a default configuration? I know it's a business product, but I want to know if the defaults (if any) are effective for home users. If I'm right, you can only buy it from third-party vendors, and they offer it at a price similar to consumer versions.

 

[Trident]

This is a test of @Trident's custom configuration. Does Harmony have a default configuration? I know it's a business product, but I want to know if the defaults (if any) are effective for home users. If I'm right, you can only buy it from third-party vendors, and they offer it at a price similar to consumer versions.

There is a default that can protect home users.
Under policy, users can choose the “Optimised” template.

 

[rashmi]

There is a default that can protect home users.
Under policy, users can choose the “Optimised” template.

I think Kaspersky consumer version defaults work well for home users. Would you advise me to go with the default Harmony setup?

@Shadowra, have you tested Harmony with its default settings?

 

[Trident]

I think Kaspersky consumer version defaults work well for home users. Would you advise me to go with the default Harmony setup?

@Shadowra, have you tested Harmony with its default settings?

The optimised are a bit more tweaked than the default. They are sufficient to protect a home user from any dangers (I have focused on businesses).

The only tweak I suggest further to that is to increase emulation size to the currently allowed 100MB.

Emulation is Harmony’s most potent weapon (on the malware pack not tested). It includes over 60 engines that work together to block highly sophisticated attacks that frequently go missed.

 

[rashmi]

The optimised are a bit more tweaked than the default.

Are there separate default and optimized setups in Harmony?

 

[Trident]

Are there separate default and optimized setups in Harmony?

Yeah the default is the one that comes by default. When you choose the “Optimised” template, several tweaks are made to the configuration (recommended by Check Point).

There is a third template as well, called Tuning. This one is recommended for businesses, for at least the first week after deployment. Detections will need to be verified manually by knowledgeable person before they are treated.

 

[rashmi]

Yeah the default is the one that comes by default. When you choose the “Optimised” template, several tweaks are made to the configuration (recommended by Check Point).

Can the optimized configuration influence usability or the rate of false positives?

 

[Trident]

Can the optimized configuration influence usability or the rate of false positives?

No, it will strengthen the security in several areas. For example Anti-Bot will be configured to hold connections until inspected, instead of allowing and then terminating. This will reduce the likelihood of data extiltration. To protect against false positives, Check Point uses reputation system, similar to KSN, Norton Insight, etc.

 

[Trident]

https://www.checkpoint.com/ai/threatcloud/