Serious Discussion Harmony Endpoint by Check Point

[Xeno1234]

Again, I can’t tell you which one is better as I am not a Kaspersky active user, even less an Opentip user. CheckPoint is jam packed with engines, definitions and rules, and as confirmed by me and @Shadowra on more than one occasion, evasive threats with low detection (<5 on VT) have 2-3, even 4 detections by TE. I saw one where 5 detections were produced in total, 2 were Yara signatures. I can not tell you anything about Kaspersky’s sandbox.

What engines does it use?

 

[Trident]

What engines does it use?

It uses over 40 proprietary engines in Threat Cloud and Threat Emulation. Some deal with documents, some deal with fileless attacks, others deal with executables, network traffic, web content, emails, dns queries. It also uses the Bitdefender engine.

 

[NormanF]

Everyone was convincing me how good it is at one point and then they all started moaning. I am not a fan of Defender myself. The only selling point is that it’s cheap.

The built in AV and firewall are adequate but could be strengthened with an endpoint solution to configure optimal protection and to get the benefit of EDR. Microsoft is working on updates all the time and they're capable of delivering an enterprise-grade product to their business customers.

 

[Trident]

The built in AV and firewall are adequate but could be strengthened with an endpoint solution to configure optimal protection and to get the benefit of EDR. Microsoft is working on updates all the time and they're capable of delivering an enterprise-grade product to their business customers.

Tbh from my mates that were admiring Defender, most of them now don’t even wanna hear about it. I haven’t asked any details why but the customer retention doesn’t seem to be very high. The low price attracts businesses but at one point even that can’t make them use Defender.

 

[simmerskool]

is anyone running mullvad 2023.3 vpn with Harmony. After I installed Harmony, mullvad app would not open properly, so I uninstalled it. I've been running another vpn ok. Later I downloaded again from mullvad, installed it, but it continues to open with same error, something about javascript. Am I the only one seeing this?

 

[NormanF]

is anyone running mullvad 2023.3 vpn with Harmony. After I installed Harmony, mullvad app would not open properly, so I uninstalled it. I've been running another vpn ok. Later I downloaded again from mullvad, installed it, but it continues to open with same error, something about javascript. Am I the only one seeing this?

Can you add mullvad to your exclusions list?

 

[simmerskool]

Can you add mullvad to your exclusions list?

well I haven't, but I have no clear evidence that the block is Harmony, but you're right, good idea, I'll try that later tonight. thanks

 

[Xeno1234]

is it possible I could ever get it for home use if I ever decide to use it or a free trial? How much does it cost, and are they gonna bombard me with like "how is it going" "can we setup a call" like Kaspersky did when I setup a trial for their EDR

 

[likeastar20]

@Trident

 

[Trident]

@Trident

Yeah Check Point did better than Kaspersky, which is to be expected.

 

[Xeno1234]

Yeah Check Point did better than Kaspersky, which is to be expected

Yeah I saw that, Kaspersky didnt do that great sadly. I kinda find their tests weird because other in home products things like ESET have done better than Kaspersky in like all of them, where as Kaspersky is the best home AV with its good detections.

 

[Kongo]

Yeah Check Point did better than Kaspersky, which is to be expected.

I actually didn't expect such a clear win for Harmony.

 

[Trident]

I actually didn't expect such a clear win for Harmony.

I did, because it layers the Kaspersky engine with proprietary technologies (loads of them) and feeds from other parties. When you deploy Harmony with Sophos, an attacker will have to be not discovered by Kaspersky, Cisco and few others that feed, not discovered by threat emulation (if file is coming through the web or email), not detected by Sophos (which has a malspam detection as well) and not detected by anti-bot (which also looks at the C&C, behavioural guard and anti-ransomware). It is a bit tough there.

 

[Xeno1234]

Did they have threat emulation on for both Kaspersky and Harmony, because Kaspersky Sandbox requires some weird setup and cant be obtained by home users at all, you have to be a business.

 

[Shadowra]

@Trident

With CheckPoint's File Reputation system, I'm not surprised
But I still don't like this YouTuber...

 

[Xeno1234]

Is it possible to even get a free trial of their EDR for home users let alone a actual like subscription or no cause whenever my kaspersky subscription ends I might look into this idk

 

[Trident]

With CheckPoint's File Reputation system, I'm not surprised
But I still don't like this YouTuber...

Neither do I, he is also very boring. But because he tested Harmony (even though he has no clue about the product), this time I will not discard his work completely

 

[Kongo]

With CheckPoint's File Reputation system, I'm not surprised
But I still don't like this YouTuber...

Don't be too harsh on him. At least he tries to bring some innovation in the AV youtube tests by testing Endpoint products just like you.

 

[Xeno1234]

With CheckPoint's File Reputation system, I'm not surprised
But I still don't like this YouTuber...

Their tests are weird, I find things that are worse than other tools to win the test by a landslide

 

[Shadowra]

Is it possible to even get a free trial of their EDR for home users let alone a actual like subscription or no cause whenever my kaspersky subscription ends I might look into this idk

Yep
Just create an account on the Portal here Check Point Infinity Portal
(you'll need a pro mail, my Fibre subscription is)