Serious Discussion Harmony Endpoint by Check Point

Another big problem:

I tried to install the firewall... everything went fine, until the Internet slowed down violently. I'm trying to do a speedtest, I've got 1900 down but ..... 0.40 up! (and a ping of 2030 even though I've got fiber...)

I remove the firewall, the speed goes up a little but still big lags in up, ping ultra high and an impossibility to stream, upload in FTP etc. ...

I tried to uninstall Harmony, and everything went back to normal....
 
  • Wow
  • Like
Reactions: piquiteco, Nevi, Zero Knowledge and 2 others
Shadowra said:
Another big problem:

I tried to install the firewall... everything went fine, until the Internet slowed down violently. I'm trying to do a speedtest, I've got 1900 down but ..... 0.40 up! (and a ping of 2030 even though I've got fiber...)

I remove the firewall, the speed goes up a little but still big lags in up, ping ultra high and an impossibility to stream, upload in FTP etc. ...

I tried to uninstall Harmony, and everything went back to normal....
Click to expand...
By default it allows all traffic and doesn't block anything.

With my policy that's quite restrictive and with my slow internet connection, I am getting this:
1689009872011.png

It's the same like without firewall.

I will attach from the iPhone shortly.
IMG_1745.jpeg


Not sure what went wrong there.
 
  • Wow
  • Like
Reactions: [correlate], piquiteco, Nevi and 3 others
Shadowra said:
Another big problem:

I tried to install the firewall... everything went fine, until the Internet slowed down violently. I'm trying to do a speedtest, I've got 1900 down but ..... 0.40 up! (and a ping of 2030 even though I've got fiber...)

I remove the firewall, the speed goes up a little but still big lags in up, ping ultra high and an impossibility to stream, upload in FTP etc. ...

I tried to uninstall Harmony, and everything went back to normal....
Click to expand...
I just did a quick test on VM running Harmony and also download was off the charts slow, but need to re-test after closing somethings on VM... :unsure: o_O
 
  • Like
  • Wow
Reactions: [correlate] and Shadowra
Shadowra said:
Another big problem:

I tried to install the firewall... everything went fine, until the Internet slowed down violently. I'm trying to do a speedtest, I've got 1900 down but ..... 0.40 up! (and a ping of 2030 even though I've got fiber...)

I remove the firewall, the speed goes up a little but still big lags in up, ping ultra high and an impossibility to stream, upload in FTP etc. ...

I tried to uninstall Harmony, and everything went back to normal....
Click to expand...
Are you sure it's not because of this setting?

Advanced Anti-Bot Settings:​

  • Background Protection Mode:
    • Background - This is the default mode. Connections are allowed while the bots are checked in the background.
    • Hold - Connections are blocked until the bot check is complete.
 
  • Like
Reactions: [correlate], piquiteco, simmerskool and 1 other person
likeastar20 said:
Are you sure it's not because of this setting?

Advanced Anti-Bot Settings:​

  • Background Protection Mode:
    • Background - This is the default mode. Connections are allowed while the bots are checked in the background.
    • Hold - Connections are blocked until the bot check is complete.
Click to expand...
I am using it in Hold mode as well 😀
 
  • Like
Reactions: [correlate], piquiteco, simmerskool and 1 other person
Shadowra said:
Another big problem:

I tried to install the firewall... everything went fine, until the Internet slowed down violently. I'm trying to do a speedtest, I've got 1900 down but ..... 0.40 up! (and a ping of 2030 even though I've got fiber...)

I remove the firewall, the speed goes up a little but still big lags in up, ping ultra high and an impossibility to stream, upload in FTP etc. ...

I tried to uninstall Harmony, and everything went back to normal....
Click to expand...

My BD GravityZone firewall allows all trusted connections and everything is smooth and fast. I could never get the Harmony firewall to replace the default Microsoft Defender firewall when I trialed Harmony.
 
  • Like
Reactions: [correlate], piquiteco and Trident
NormanF said:
My BD GravityZone firewall allows all trusted connections and everything is smooth and fast. I could never get the Harmony firewall to replace the default Microsoft Defender firewall when I trialed Harmony.
Click to expand...
By default the Harmony one allows everything as well. With my policy a lot of traffic is blocked.
 
  • Like
Reactions: [correlate] and simmerskool
NormanF said:
I don't have to approve each and every trusted app. Ideally, a firewall should block an unknown connection.
Click to expand...
Yeah, with my policy it does. Maybe @Shadowra can try importing my firewall policy? I will export it later.

Guys, under policy did you untick the one that says “block IPV6 traffick”. This is one reason I can think of…. @Shadowra and @simmerskool
And there is another one that says “allow Hotspot Registration”
 
  • Like
Reactions: [correlate], likeastar20 and simmerskool
I did some more testing, my hardware win10 host which is not running Harmony, tested normal, then tested win10_running harmony, this time not running vpn and download was better but still well below normal using Chrome & speedtest. Then used Edge for same speedtest and download tested even slower. Harmony client on VM does show its firewall & app control are on running "default" polices (I've been busy doing something else and have not imported @Trident's policies yet). But if I have not read @Shadowra's post I would not have tested, as from keyboard internet seems ok fast as usual. So I dunno...:unsure:

Trident said:
Guys, under policy did you untick the one that says “block IPV6 traffick”. This is one reason I can think of…. @Shadowra and @simmerskool
And there is another one that says “allow Hotspot Registration”
Click to expand...
I'll go to console and see what I can find :whistle: (but hectic here today, I have to step away for several hours)
 
  • Like
Reactions: [correlate], Nevi, Zero Knowledge and 2 others
NormanF said:
Unless you're in a corporate environment or you're constantly on the road, you can turn encryption off. When you really do need it, you can turn it back on.
Click to expand...
I dont need encryption at all, I dont have a need for it.

Shadowra said:
Another big problem:

I tried to install the firewall... everything went fine, until the Internet slowed down violently. I'm trying to do a speedtest, I've got 1900 down but ..... 0.40 up! (and a ping of 2030 even though I've got fiber...)

I remove the firewall, the speed goes up a little but still big lags in up, ping ultra high and an impossibility to stream, upload in FTP etc. ...

I tried to uninstall Harmony, and everything went back to normal....
Click to expand...
For me with the firewall I got 600 down, 20 up.
 
  • Like
Reactions: [correlate], Dave Russo and Shadowra
Trident said:
Yeah, with my policy it does. Maybe @Shadowra can try importing my firewall policy? I will export it later.

Guys, under policy did you untick the one that says “block IPV6 traffick”. This is one reason I can think of…. @Shadowra and @simmerskool
And there is another one that says “allow Hotspot Registration”
Click to expand...
My ISP doesn't support IPV6 so I have it turned off.
 
  • Like
Reactions: [correlate]
lyldz said:
@Trident
how can we manage monthly sub?
Purchase monthly sub this link
Click to expand...

Your Checkpoint Partner will provide the cloud console and desktop console upon payment and they manage it and also provide any add on modules you want to subscribe to.

Xeno1234 said:
@Trident is it possible to make Checkpoint scan only new or changed files, or does it do that by default?
Click to expand...

Check your cloud console about what you want your Checkpoint antimalware to scan.
 
  • Like
Reactions: [correlate]
lyldz said:
@Trident
how can we manage monthly sub?
Purchase monthly sub this link
Click to expand...
For any subscription questions, contact Lithify directly using the contact options on their website. On the portal the license appears under Global Settings as CPAYG with User Centre ID 9999999 and nothing more than that.
Xeno1234 said:
@Trident is it possible to make Checkpoint scan only new or changed files, or does it do that by default?
Click to expand...
Harmony uses automatic caching algorithms for files, connections and everything. You don’t need to do anything.
 
  • Like
  • Applause
  • +Reputation
Reactions: [correlate], piquiteco, Ink and 2 others
Trident said:
For any subscription questions, contact Lithify directly using the contact options on their website. On the portal the license appears under Global Settings as CPAYG with User Centre ID 9999999 and nothing more than that.

Harmony uses automatic caching algorithms for files, connections and everything. You don’t need to do anything.
Click to expand...
Wdym automatic caching algorithms for files?

Does Checkpoint Harmony scan all files on execution aswell as whenever you obtain them?
 
  • Like
Reactions: [correlate]

You may also like...