Serious Discussion Harmony Endpoint by Check Point

[Xeno1234]

on my system, very little cpu used.

For me its spiked up to 50% while doing scans, but my PC is outdated as heck.

 

[Xeno1234]

How do I change the administrator password or the uninstall password, its telling me I need to do that but I cant find it.

 

[Ink]

For me its spiked up to 50% while doing scans, but my PC is outdated as heck.

It is recommended to meet the minimum or recommended hardware requirements.

 

[NormanF]

It is recommended to meet the minimum or recommended hardware requirements.

That brings up a good question: is there any good equivalent for endpoint security for home users? That's targeted to business.

 

[Xeno1234]

It is recommended to meet the minimum or recommended hardware requirements.

What are the recommened Hardware Requirements, I have like a 5 year old gaming pc

 

[Trident]

It is recommended to meet the minimum or recommended hardware requirements.

That and also, there is detailed CPU and RAM monitor in the portal. By going Assets -> right click on the respective computer -> Diagnostics -> Last Diagnostic Report.

The solution will review what causes the CPU activity and will suggest exclusions from monitoring. For example, wuaclt.exe (windows updates installer) might be safe to be excluded. For maximum security, it may be left under monitoring.

@Xeno1234 go Policy -> Client Settings to change the uninstall password. Also, some questions may get lost. I suggest you put them in one post or send me a PM.

 

[NormanF]

How do I change the administrator password or the uninstall password, its telling me I need to do that but I cant find it.

You set up the uninstall password in the client settings of Infinity Portal. The default is admin and its recommended to change it.

 

[Xeno1234]

That and also, there is detailed CPU and RAM monitor in the portal. By going Assets -> right click on the respective computer -> Diagnostics -> Last Diagnostic Report.

The solution will review what causes the CPU activity and will suggest exclusions from monitoring. For example, wuaclt.exe (windows updates installer) might be safe to be excluded. For maximum security, it may be left under monitoring.

@Xeno1234 go Policy -> Client Settings.

Where is assets? I dont see it

 

[Xeno1234]

You set up the uninstall password in the Overview of Infinity Portal. The default is admin and its recommended to change it.

Where specifically in overview, I've looked and cant find a place to do it
Edit: I saw Tridents message, got it.

 

[Ink]

@Xeno1234

I found this from the links shared by @Trident in the initial post.

• 8 GB RAM

From 2021 - recommended system requirements for harmony endpoint

 

[Xeno1234]

@Xeno1234

I found this from the links shared by @Trident in the initial post.

• 8 GB RAM

From 2021 - recommended system requirements for harmony endpoint

I have double that

 

[Trident]

System requirements are available on every release notes announcement. For example, 87.30

Client Requirements

sc1.checkpoint.com

Client Hardware Requirements​

The minimum hardware requirements for client computers to run the Total Endpoint Security Package are:

• 2 GB RAM
• 2 GB free disk space

The recommended hardware requirements for client computers to run the Total Endpoint Security Package are:

• 8 GB RAM
• 6 GB free disk space

 

[Xeno1234]

@Trident How does Threat Emulation work? When does it decide to emulate something?

 

[Xeno1234]

And also, can I disable the extension its taking 5 minutes to download a 10mb file

 

[NormanF]

And also, can I disable the extension its taking 5 minutes to download a 10mb file

Yes! In the settings it allows you to untick browser protection.

 

[Trident]

@Trident How does Threat Emulation work? When does it decide to emulate something?

Emulation takes all new files created by browser processes (chrome.exe, msedge.exe and others), email clients (outlook, thunderbird), archivers (explorer.exe, 7zfm.exe and others) and emulates them if they are supported formats. If they are documents, it checks for executable content. If there is such, it will be cleaned. Files dropped by installers (executables, modules and others) will be emulated if they are not proven to be safe.

Under Policy -> Threat Prevention -> Web Files and Downloads -> Advanced, there is the option to deliver the file first and then emulate it which will solve the waiting problem. If it’s malicious, it will be deleted. However, this opens you to risks and I don’t recommend that you use it, it is much better to wait and make sure you are opening trusted content.

 

[Xeno1234]

Emulation takes all new files created by browser processes (chrome.exe, msedge.exe and others), email clients (outlook, thunderbird), archivers (explorer.exe, 7zfm.exe and others) and emulates them if they are supported formats. If they are documents, it checks for executable content. If there is such, it will be cleaned. Files dropped by installers (executables, modules and others) will be emulated if they are not proven to be safe.

Under Policy -> Threat Prevention -> Web Files and Downloads -> Advanced, there is the option to deliver the file first and then emulate it which will solve the waiting problem. If it’s malicious, it will be deleted. However, this opens you to risks and I don’t recommend that you use it, it is much better to wait and make sure you are opening trusted content.

But then again, I dont wanna wait 10 minutes to download a 10mb file thats safe

 

[NormanF]

But then again, I dont wanna wait 10 minutes to download a 10mb file thats safe

Any file over the browser protection module's limit gets downloaded by your browser download tab.

 

[Xeno1234]

Whats the difference between Files Threat Emulation Mode and Download Emulation and Extraction

 

[Xeno1234]

Any file over the browser protection module's limit gets downloaded by your browser download tab.

can I lower the limit so it just downloads normally