Serious Discussion Harmony Endpoint by Check Point

[Xeno1234]

Check your Policy -> Software Deployment rules

Got it, thank you.

 

[NormanF]

Yeah but it just removes a bunch of modules and I cant get them back. If I download a package with the firewall/application control stuff the upgrade popup occurs and it goes back to the default modules.

Shouldn't happen if you've ticked them on in your policy. Is there another policy listed in the Harmony console? Be sure to set yours as the default and remove the other one from your policy module.

 

[Xeno1234]

Shouldn't happen if you've ticked them on in your policy. Is there another policy listed in the Harmony console? Be sure to set yours as the default and remove the other one from your policy module.

I didnt have them ticked on my policy. That was the problem.

 

[NormanF]

I didnt have them ticked on my policy. That was the problem.

You need to save all policy configurations after you've turned them on. Next month, I will probably have to tick on the Patch Management module in my BD GravityZone Control Center after its been activated and save it.

 

[NormanF]

You need to save all policy configurations after you've turned them on. Next month, I will probably have to tick on the Patch Management module in my BD GravityZone Control Center after its been activated and save it.

I now have the Patch Management module listed in my BD GravityZone Control Center but its not active til next month. I have enabled the local Sandbox Analyzer module and applied the new policy to turn it on.

 

[Xeno1234]

This keeps happening, I dont know why. Anyone able to help me?

 

[Xeno1234]

It only affects outside of browser threat emulation. So anything downloaded is emulated via the extension, but anything else isnt.

 

[simmerskool]

View attachment 277349
This keeps happening, I dont know why. Anyone able to help me?

I logged into my console today and saw something similar? I assume my user error...

 

[Xeno1234]

I logged into my console today and saw something similar? I assume my user error...

It keeps happening to me, I dont know why.

 

[Xeno1234]

Is there any documentation for what engines Checkpoint Harmony uses?

 

[cartaphilus]

Anyone knows of a monthly lic checkpoint reseller that accepts Gmail? Lithify does not

 

[simmerskool]

Anyone knows of a monthly lic checkpoint reseller that accepts Gmail? Lithify does not

I did not use gmail so unsure, but wonder if you were also running a vpn connection? They seem pretty flexible to me.

 

[likeastar20]

Anyone knows of a monthly lic checkpoint reseller that accepts Gmail? Lithify does not

I don't think there is, just make an email only for harmony here(this is what I used):Secure email: Tutanota free encrypted email.

 

[Xciting]

IM BACK!!!!!!!!!!! oh and i found a checkpoint key on some like reseller for like 20 bucks it was on sale ig i forgot website btw ;-;

 

[cartaphilus]

I don't think there is, just make an email only for harmony here(this is what I used):Secure email: Tutanota free encrypted email.

Ok created account and paid. Awaiting confirmation. Also got the mobile version.

 

[cartaphilus]

Damn their mobile scan is taking forever. I just deployed the android AV portion on my Android and on pixel 6 it's been running for the past 55 min scanning my apps and it's the first scan. I have 120gb of files (mostly videos of my toddler). For comparison ESET mobile took 3 min to perform a deep scan and Kaspersky took 4.

Now deployed on an windows 11 endpoint. It installed fine it pulled everything until it got to malware definition update there it was stuck and then disconnected from the server. So I rebooted the PC. Now the status is protected BUT the bottom right Conner states "disconnected, invalid date". Which is weird since my date is synched with NIST clock.

 

[Trident]

Disconnected, invalid date is licensing issue. I’ve not deployed mobile versions but I had a look at the settings. You can configure media files to be skipped but due to the possibility of exploit, it is not recommended.

 

[cartaphilus]

Disconnected, invalid date is licensing issue. I’ve not deployed mobile versions but I had a look at the settings. You can configure media files to be skipped but due to the possibility of exploit, it is not recommended.

Found the issue it was my NextDns blocking checkpoint from communicating with Quad DNS IP because I had "block bypass methods" in NextDns turned on.

 

[kamiloxf]

Is it possible to send a sample for threat emulation from the web panel or is it required to implement an endpoint?

 

[Xeno1234]

So my trial ended yet everything is still working. The anti-malware is still doing its thing, I can configure policies, etc. This normal?