topic Harmony Endpoint Super node proxy limitations question in Browse

Harmony Endpoint Super node proxy limitations question

dt7 — Wed, 09 Jul 2025 03:42:35 GMT

Hello,

I have a question related to the use of Super Nodes with Harmony Endpoint. When reading the admin guide on the subject using EPMaaS (Cloud management), there is a limitations section that indicate that "Harmony Browse Extension" is not supported when using Super node proxy (cf. screenshot attached and link to admin guide).

https://sc1.checkpoint.com/documents/Infinity_Portal/WebAdminGuides/EN/Harmony-Endpoint-Admin-Guide/Topics-HEP/General.htm#super-node

Does it mean that the browser extension agent deployed with Harmony Endpoint will not work for semi-isolated devices that are using super nodes (devices without internet access but that will use the super node as relay for Harmony updates, policies, etc.)? I.e. It means no web protection, URL filtering, etc. available??

It's not very clear to me what this restriction means, if somebody has the info and can help me clarify that would be much appreciated.

Thank you!

Re: Harmony Endpoint Super node proxy limitations question

PhoneBoy — Thu, 10 Jul 2025 14:57:41 GMT

Harmony Browse's primary use case is allowing safe access to the Internet through a web browser.
That likely explains why direct access to ThreatCloud is needed by Harmony Browse (though I'm sure @AdiGH can confirm).

In any case, not sure how relevant Harmony Browse is on machines that either don't access or have extremely limited access to the Internet.

Re: Harmony Endpoint Super node proxy limitations question

dt7 — Tue, 15 Jul 2025 03:56:32 GMT

Hi @PhoneBoy,

I managed to get a confirmation on this from Checkpoint support. So indeed, the whole web protection part of Harmony Endpoint (basically Harmony Browse - the extension in browser) is not supported when using Super Nodes.
Anyway, you are right as well, for semi-isolated clients in that case it does not really matter since they have limited access to the internet.

Thanks for your inputs.