topic Re: Is Behavioral Guard supported in all Linux Distributions? in Endpoint

Is Behavioral Guard supported in all Linux Distributions?

Eve_Z — Wed, 29 Jan 2025 20:15:28 GMT

I have installed Harmony Endpoint on various Linux Distributions, but some of these machines do not have Behavioral Guard enabled, for example, Debian 9 and Ubuntu 16.04, while others do have it, like Debian 10 and CentOS 7.9.

How can I enable Behavioral Guard on these distributions? or verify, first, if it is supported?

I kindly appreciate your help.

Re: Is Behavioral Guard supported in all Linux Distributions?

PhoneBoy — Thu, 30 Jan 2025 03:32:42 GMT

The only thing that appears to be relevant is that Behavioral Guard and Threat Hunting engines are not supported when Linux Secure Boot is enabled.
https://support.checkpoint.com/results/sk/sk170198

Re: Is Behavioral Guard supported in all Linux Distributions?

Eve_Z — Fri, 31 Jan 2025 13:20:52 GMT

Thanks for making me realize.

I tested it in a lab with virtual machines and BG and Threat Hunting get installed but do not run when Secure Boot is enabled. Once disabled, blades can run again. Tested with Debian 9 and Ubuntu 16.04.

However, in the real machines I verified that Secure Boot is disabled, but BG and Threat Hunting seem to be partially installed or not installed. It seems to be an issue with the exported package that I'm currently reviewing.

At least, I know that Behavioral Guard and Threat Hunting can run on these Linux distributions.

Re: Is Behavioral Guard supported in all Linux Distributions?

tomgo — Sun, 02 Feb 2025 08:39:00 GMT

Hi! as mentioned by @PhoneBoy, Behavioral Guard is supported on all the distributions that we support. however, There no official support for Secure Boot. Some things might work, but we don’t support it officially (next planned version should get us closer to this stage)