Serious Discussion Harmony Endpoint by Check Point

[simmerskool]

There is nothing complicated really, it’s all about having a love for books, or in this case, the Admin guide. I just LOVE reading guides not only for that but also for appliances and everything. Before I buy something, I’ve already read the guide. I’ve even read the Apple OS guides, which are about 2K pages average. If you read, you will understand everything.
I read the Harmony admin guide 5-6 times before I start the trial and now I can use it with my eyes closed.

I tended to get bogged down with the reading if I'm also not using the software at the same time to better understand what I'm reading, and then if the software is running ok and I have basic understanding of app, I stop reading... (but promise will follow thru with both Harmony and Di)

 

[Trident]

I tended to get bogged down with the reading if I'm also not using the software at the same time to better understand what I'm reading, and then if the software is running ok and I have basic understanding of app, I stop reading...

You watched the pre-deployment video.

 

[Andrew3000]

Bro, it was widely discussed on this thread. Trial is available by having a look at the first post.

Also here: Harmony Endpoint (SandBlast Agent) Free Trial | Endpoint Security | Check Point Software

Use an iCloud address to start trial and you can choose whether you wanna be contacted or not.

If you decide you wanna purchase at one point, have a look at checkpoint.direct. The annual price of a client managed by you is 39+VAT (about £47).

It asks for a business email

 

[Trident]

It asks for a business email

View attachment 276753

Try here

Check Point Infinity Portal

The Infinity Portal represents a new paradigm in security management by delivering all the security capabilities of the Check Point Infinity architecture from a single pane of glass. With an Infinity Portal account, organizations secure and manage their entire IT infrastructure – networks...

portal.checkpoint.com

 

[Andrew3000]

Try here

Check Point Infinity Portal

The Infinity Portal represents a new paradigm in security management by delivering all the security capabilities of the Check Point Infinity architecture from a single pane of glass. With an Infinity Portal account, organizations secure and manage their entire IT infrastructure – networks...

portal.checkpoint.com

Nope

 

[Trident]

Nope
View attachment 276754

I registered with iCloud not too long ago…
They must’ve changed.

 

[simmerskool]

You watched the pre-deployment video.

YES I did!! actually 2x!!!

 

[likeastar20]

Nope
View attachment 276754

Create a new email here and see if it works Secure email: Tutanota free encrypted email.

 

[Kongo]

And Avast CyberCapture

Also Microsoft Defender:

Enable block at first sight to detect malware in seconds - Microsoft Defender for Endpoint

Turn on the block at first sight feature to detect and block malware within seconds.

learn.microsoft.com

 

[Xeno1234]

Also Microsoft Defender:

Enable block at first sight to detect malware in seconds - Microsoft Defender for Endpoint

Turn on the block at first sight feature to detect and block malware within seconds.

learn.microsoft.com

How good are CyberCapture and MS defenders emulation

 

[NormanF]

Also Microsoft Defender:

Enable block at first sight to detect malware in seconds - Microsoft Defender for Endpoint

Turn on the block at first sight feature to detect and block malware within seconds.

learn.microsoft.com

In Microsoft Defender For Business, the recommended security policies are pre-configured out of the box. All the end user has to do is onboard their device.

 

[Trident]

In Microsoft Defender For Business, the recommended security policies are pre-configured out of the box. All the end user has to do is onboard their device.

There are policies pre-defined in Harmony as well. You can choose “strict”. But on business environment it is always recommended to review and plan a policy. The policy should provide maximum security whilst allowing users to work freely and without distractions.

 

[Xeno1234]

How do you disable browser protection

 

[Trident]

ThreatCloud AI. The brain behind Check Point products.

 

[Xeno1234]

Wait I have a question - how are some things detected by behavioral detection but not by the emulatior?

 

[Trident]

Wait I have a question - how are some things detected by behavioral detection but not by the emulatior?

Emulation involves running on a VM. Virtual machines have various artefacts. Although Check Point has taken every care to hide the artefacts using both hardware and software features, fraction of malware may not perform actions when emulated. When you execute them on a real system, the classification engines will observe the malicious behaviour. Bypassing emulation like the Check Point (and also CrowdStrike and Palo Alto one) is not an easy task and doesn’t happen frequently. When it happens, other layers still provide protection.

 

[Xeno1234]

Emulation involves running on a VM. Virtual machines have various artefacts. Although Check Point has taken every care to hide the artefacts using both hardware and software features, fraction of malware may not perform actions when emulated. When you execute them on a real system, the classification engines will observe the malicious behaviour. Bypassing emulation like the Check Point (and also CrowdStrike and Palo Alto one) is not an easy task and doesn’t happen frequently. When it happens, other layers still provide protection.

Ahh. But I've seen things that arent anti-sandbox get past it, but are detected by Behavioral Detection. How does that work?

 

[Trident]

Ahh. But I've seen things that arent anti-sandbox get past it, but are detected by Behavioral Detection. How does that work?

How do you know these things are not anti-sandbox?

 

[Xeno1234]

How do you know these things are not anti-sandbox?

Detected by other sandboxes

 

[Xeno1234]

How do you disable the browser extension - for me it slows down donwloads, alot. Emulation should take 2-3 minutes but instead downloads take around 10.