Serious Discussion Harmony Endpoint by Check Point

[Victor M]

Does Harmony detect and stop Metasploit's Meterpreter ? My attackers seem to be using Metasploit.

 

[Xeno1234]

I was testing checkpoint yesterday and I am wondering, why were some files not sent for threat emulation (the emulation outside of the extension) These files were under 50mb and were types that were supported by the engine.

 

[Xeno1234]

According to AV Comparatives, Harmony lacks a hook for the Kernal Space, and cannot monitor API calls within the Kernel. Is this true, and if so, what impact does this have on its detection capabilities?

 

[carl fish]

How does Harmony handle ransomware?

 

[Xeno1234]

How does Harmony handle ransomware?

Harmony utilizes many methods. You have threat emulation, threat reputation, Kaspersky /Sophos and CheckPoint Harmony local anti malware engines, and a anti-ransomware component which places honeypot files on the PC, and if they are modified, it remediates the infection.
The Honey Pot Component is the last line of defense, and is bypassed by anti-honeypot ransomware.

 

[carl fish]

Does anyone have any policies I can apply for maximum security?

 

[Xeno1234]

Does anyone have any policies I can apply for maximum security?

Start of the thread there are policies.

 

[Trident]

I am delighted to introduce my website (still in development but will be complete soon), where users can find great deal of Check Point information, and guess what... you will be able to purchase Check Point products as well. I need to complete some legal procedures to protect myself before though.

Please find the website below.

Value Added Reseller, Check Point Reseller

Home Page - EDR Experts - Value Added Reseller - Check Point Reseller - Managed Security Service Provider

www.edr-experts.co.uk

Feedback is welcome.

 

[Freki123]

Feedback is welcome.

I like the idea.
For me I find lettering like "Why your Home AV Will Most Likely Fail" or "Attackers Have Upped their Game. Your Security Hasn't." strange.
"STATIC ANALYSIS (NGAV) BASED ON DEEP LEARNING, ABLE TO CATCH THREATS BEFORE ATTACKERS HAVE STARTED THINKING ABOUT CREATING THEM"
Nearly all text is in caps which always reminds me of screaming. I'd rather have it written a normal way and used some bold here and there.
Since I'm not native in English I can always be way off with any suggestions but I wanted to provide my view for it. I wish you good luck with your business

 

[Xeno1234]

I am delighted to introduce my website (still in development but will be complete soon), where users can find great deal of Check Point information, and guess what... you will be able to purchase Check Point products as well. I need to complete some legal procedures to protect myself before though.

Please find the website below.

Value Added Reseller, Check Point Reseller

Home Page - EDR Experts - Value Added Reseller - Check Point Reseller - Managed Security Service Provider

www.edr-experts.co.uk

Feedback is welcome.

Try expanding to not just Checkpoint. I think having different EDRs for different needs on your site would be a good way to make it appeal to more people.

 

[Trident]

Try expanding to not just Checkpoint. I think having different EDRs for different needs on your site would be a good way to make it appeal to more people.

Definitely, once you partner with one, partnering with others is way easier. But at the same time, I don’t want to offer products just for the sake of offering them and making a buck, I wanna offer products in whose quality I am confident.

 

[Xeno1234]

Definitely, once you partner with one, partnering with others is way easier. But at the same time, I don’t want to offer products just for the sake of offering them and making a buck, I wanna offer products in whose quality I am confident.

Yeah. Do a mix of both - try to get a buck by endorcing products you like, but only you ones you like.

I also think you might want to rework the color scheme eventually. I don’t think it’s bad but at some parts the text is a bit hard to read as it blends in.

 

[simmerskool]

I am delighted to introduce my website (still in development but will be complete soon), where users can find great deal of Check Point information, and guess what... you will be able to purchase Check Point products as well. I need to complete some legal procedures to protect myself before though.

Please find the website below.

Value Added Reseller, Check Point Reseller

Home Page - EDR Experts - Value Added Reseller - Check Point Reseller - Managed Security Service Provider

www.edr-experts.co.uk

Feedback is welcome.

your name is Boris? In my mind's eye, I never pictured Trident = Boris (fwiw). Going back to Rocky & Bulwinkle... (this is perhaps before you were born?)

 

[Xeno1234]

I am delighted to introduce my website (still in development but will be complete soon), where users can find great deal of Check Point information, and guess what... you will be able to purchase Check Point products as well. I need to complete some legal procedures to protect myself before though.

Please find the website below.

Value Added Reseller, Check Point Reseller

Home Page - EDR Experts - Value Added Reseller - Check Point Reseller - Managed Security Service Provider

www.edr-experts.co.uk

Feedback is welcome.

The site says Checkpoint has Default Deny? Since when?

 

[coolcfan]

I am delighted to introduce my website (still in development but will be complete soon), where users can find great deal of Check Point information, and guess what... you will be able to purchase Check Point products as well. I need to complete some legal procedures to protect myself before though.

Please find the website below.

Value Added Reseller, Check Point Reseller

Home Page - EDR Experts - Value Added Reseller - Check Point Reseller - Managed Security Service Provider

www.edr-experts.co.uk

Feedback is welcome.

The website design, or click path, is a bit complicated. If currently the main goal is to sell Checkpoint Harmony, why not make it straight forward like checkpoint.direct?

By the way with a short trial of Harmony, the most strange part to me is the client UI --- when you resize the window, it just zooms in/out the content...

 

[Trident]

The website design, or click path, is a bit complicated. If currently the main goal is to sell Checkpoint Harmony, why not make it straight forward like checkpoint.direct?

I can not guarantee that the main point will remain selling Check Point Harmony to be honest. It will definitely be on the portfolio but not only.

By the way with a short trial of Harmony, the most strange part to me is the client UI --- when you resize the window, it just zooms in/out the content...

Didn’t even notice the main UI could be resized
I am dealing with other things I want fixed.

 

[coolcfan]

I can not guarantee that the main point will remain selling Check Point Harmony to be honest. It will definitely be on the portfolio but not only.

Just for user friendliness, it will be great to have direct access/view to the things on the portfolio from the homepage, like

- Product 1: Get Started (or Buy) | Learn More
- Product 2: Get Started | Learn More
- ...

And hopefully there's unmanaged DI which private users in any area can buy in the future.

 

[Sandbox Breaker - DFIR]

Just for user friendliness, it will be great to have direct access/view to the things on the portfolio from the homepage, like

- Product 1: Get Started (or Buy) | Learn More
- Product 2: Get Started | Learn More
- ...

And hopefully there's unmanaged DI which private users in any area can buy in the future.

Product page

 

[Vitali Ortzi]

DuckDuckGo Browser which is somehow utilizing Edge (my understanding).

It uses edge WebView

 

[Vitali Ortzi]

Just did a test with harmony extension with 250 open pish links and only 2 crypto wallet pishing links and one fake Microsoft fake call center weren't blocked