Serious Discussion Harmony Endpoint by Check Point

[NormanF]

@Trident is it smart to turn off bitlocker and similar things encryption in Anti-Ransomware policy?
View attachment 277001

Unless you're in a corporate environment or you're constantly on the road, you can turn encryption off. When you really do need it, you can turn it back on.

 

[Shadowra]

Another big problem:

I tried to install the firewall... everything went fine, until the Internet slowed down violently. I'm trying to do a speedtest, I've got 1900 down but ..... 0.40 up! (and a ping of 2030 even though I've got fiber...)

I remove the firewall, the speed goes up a little but still big lags in up, ping ultra high and an impossibility to stream, upload in FTP etc. ...

I tried to uninstall Harmony, and everything went back to normal....

 

[Trident]

Another big problem:

I tried to install the firewall... everything went fine, until the Internet slowed down violently. I'm trying to do a speedtest, I've got 1900 down but ..... 0.40 up! (and a ping of 2030 even though I've got fiber...)

I remove the firewall, the speed goes up a little but still big lags in up, ping ultra high and an impossibility to stream, upload in FTP etc. ...

I tried to uninstall Harmony, and everything went back to normal....

By default it allows all traffic and doesn't block anything.

With my policy that's quite restrictive and with my slow internet connection, I am getting this:

It's the same like without firewall.

I will attach from the iPhone shortly.

Not sure what went wrong there.

 

[simmerskool]

Another big problem:

I tried to install the firewall... everything went fine, until the Internet slowed down violently. I'm trying to do a speedtest, I've got 1900 down but ..... 0.40 up! (and a ping of 2030 even though I've got fiber...)

I remove the firewall, the speed goes up a little but still big lags in up, ping ultra high and an impossibility to stream, upload in FTP etc. ...

I tried to uninstall Harmony, and everything went back to normal....

I just did a quick test on VM running Harmony and also download was off the charts slow, but need to re-test after closing somethings on VM...

 

[likeastar20]

Another big problem:

I tried to install the firewall... everything went fine, until the Internet slowed down violently. I'm trying to do a speedtest, I've got 1900 down but ..... 0.40 up! (and a ping of 2030 even though I've got fiber...)

I remove the firewall, the speed goes up a little but still big lags in up, ping ultra high and an impossibility to stream, upload in FTP etc. ...

I tried to uninstall Harmony, and everything went back to normal....

Are you sure it's not because of this setting?

Advanced Anti-Bot Settings:​

• Background Protection Mode:
  • Background - This is the default mode. Connections are allowed while the bots are checked in the background.
  • Hold - Connections are blocked until the bot check is complete.

 

[Trident]

Are you sure it's not because of this setting?

Advanced Anti-Bot Settings:​

• Background Protection Mode:
  • Background - This is the default mode. Connections are allowed while the bots are checked in the background.
  • Hold - Connections are blocked until the bot check is complete.

I am using it in Hold mode as well

 

[NormanF]

Another big problem:

I tried to install the firewall... everything went fine, until the Internet slowed down violently. I'm trying to do a speedtest, I've got 1900 down but ..... 0.40 up! (and a ping of 2030 even though I've got fiber...)

I remove the firewall, the speed goes up a little but still big lags in up, ping ultra high and an impossibility to stream, upload in FTP etc. ...

I tried to uninstall Harmony, and everything went back to normal....

My BD GravityZone firewall allows all trusted connections and everything is smooth and fast. I could never get the Harmony firewall to replace the default Microsoft Defender firewall when I trialed Harmony.

 

[Trident]

My BD GravityZone firewall allows all trusted connections and everything is smooth and fast. I could never get the Harmony firewall to replace the default Microsoft Defender firewall when I trialed Harmony.

By default the Harmony one allows everything as well. With my policy a lot of traffic is blocked.

 

[NormanF]

By default the Harmony one allows everything as well. With my policy a lot of traffic is blocked.

I don't have to approve each and every trusted app. Ideally, a firewall should block an unknown connection.

 

[Trident]

I don't have to approve each and every trusted app. Ideally, a firewall should block an unknown connection.

Yeah, with my policy it does. Maybe @Shadowra can try importing my firewall policy? I will export it later.

Guys, under policy did you untick the one that says “block IPV6 traffick”. This is one reason I can think of…. @Shadowra and @simmerskool
And there is another one that says “allow Hotspot Registration”

 

[Shadowra]

Guys, under policy did you untick the one that says “block IPV6 traffick”. This is one reason I can think of…. @Shadowra and @simmerskool
And there is another one that says “allow Hotspot Registration”

Yup

 

[simmerskool]

I did some more testing, my hardware win10 host which is not running Harmony, tested normal, then tested win10_running harmony, this time not running vpn and download was better but still well below normal using Chrome & speedtest. Then used Edge for same speedtest and download tested even slower. Harmony client on VM does show its firewall & app control are on running "default" polices (I've been busy doing something else and have not imported @Trident's policies yet). But if I have not read @Shadowra's post I would not have tested, as from keyboard internet seems ok fast as usual. So I dunno...

Guys, under policy did you untick the one that says “block IPV6 traffick”. This is one reason I can think of…. @Shadowra and @simmerskool
And there is another one that says “allow Hotspot Registration”

I'll go to console and see what I can find (but hectic here today, I have to step away for several hours)

 

[Xeno1234]

Unless you're in a corporate environment or you're constantly on the road, you can turn encryption off. When you really do need it, you can turn it back on.

I dont need encryption at all, I dont have a need for it.

Another big problem:

I tried to install the firewall... everything went fine, until the Internet slowed down violently. I'm trying to do a speedtest, I've got 1900 down but ..... 0.40 up! (and a ping of 2030 even though I've got fiber...)

I remove the firewall, the speed goes up a little but still big lags in up, ping ultra high and an impossibility to stream, upload in FTP etc. ...

I tried to uninstall Harmony, and everything went back to normal....

For me with the firewall I got 600 down, 20 up.

 

[NormanF]

Yeah, with my policy it does. Maybe @Shadowra can try importing my firewall policy? I will export it later.

Guys, under policy did you untick the one that says “block IPV6 traffick”. This is one reason I can think of…. @Shadowra and @simmerskool
And there is another one that says “allow Hotspot Registration”

My ISP doesn't support IPV6 so I have it turned off.

 

[lyldz]

@Trident
how can we manage monthly sub?
Purchase monthly sub this link

 

[Xeno1234]

@Trident is it possible to make Checkpoint scan only new or changed files, or does it do that by default?

 

[NormanF]

@Trident
how can we manage monthly sub?
Purchase monthly sub this link

Your Checkpoint Partner will provide the cloud console and desktop console upon payment and they manage it and also provide any add on modules you want to subscribe to.

@Trident is it possible to make Checkpoint scan only new or changed files, or does it do that by default?

Check your cloud console about what you want your Checkpoint antimalware to scan.

 

[Trident]

@Trident
how can we manage monthly sub?
Purchase monthly sub this link

For any subscription questions, contact Lithify directly using the contact options on their website. On the portal the license appears under Global Settings as CPAYG with User Centre ID 9999999 and nothing more than that.

@Trident is it possible to make Checkpoint scan only new or changed files, or does it do that by default?

Harmony uses automatic caching algorithms for files, connections and everything. You don’t need to do anything.

 

[Xeno1234]

For any subscription questions, contact Lithify directly using the contact options on their website. On the portal the license appears under Global Settings as CPAYG with User Centre ID 9999999 and nothing more than that.

Harmony uses automatic caching algorithms for files, connections and everything. You don’t need to do anything.

Wdym automatic caching algorithms for files?

Does Checkpoint Harmony scan all files on execution aswell as whenever you obtain them?

 

[Trident]

Does Checkpoint Harmony scan all files on execution aswell as whenever you obtain them?

Yes.

Another evasive script taken down by Behavioural Guard.
I am turning Application Control off to test these, as under my policy it will not execute at all.